@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/container/local.js

@@ -0,0 +1,197 @@
+"use strict";
+/**
+ * Local 模式服务注册
+ *
+ * Local 模式有两种配置：
+ * - 托管式 (managed): 配置 XPOD_NODE_TOKEN，自动连接 Cloud 获取身份服务和 DDNS
+ * - 独立式 (standalone): 不配置 XPOD_NODE_TOKEN，用户自己配置 CSS_BASE_URL 和 IdP
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerLocalServices = registerLocalServices;
+const awilix_1 = require("awilix");
+const SubdomainClient_1 = require("../../subdomain/SubdomainClient");
+const LocalTunnelProvider_1 = require("../../tunnel/LocalTunnelProvider");
+const SakuraFrpTunnelProvider_1 = require("../../tunnel/SakuraFrpTunnelProvider");
+const CloudflareDnsProvider_1 = require("../../dns/cloudflare/CloudflareDnsProvider");
+const SubdomainService_1 = require("../../subdomain/SubdomainService");
+const EdgeNodeDnsCoordinator_1 = require("../../edge/EdgeNodeDnsCoordinator");
+const EdgeNodeCapabilityDetector_1 = require("../../edge/EdgeNodeCapabilityDetector");
+const LocalNetworkManager_1 = require("../../edge/LocalNetworkManager");
+const DdnsManager_1 = require("../../edge/DdnsManager");
+/**
+ * 注册 Local 模式专属服务
+ */
+function registerLocalServices(container) {
+    const config = container.resolve('config');
+    const { cloudApiEndpoint, nodeId, nodeToken, cloudflareTunnelToken, sakuraToken, subdomain: subdomainConfig } = config;
+    // 1. 注册 Tunnel Provider (优先 Cloudflare，其次 SakuraFRP)
+    if (cloudflareTunnelToken) {
+        container.register({
+            localTunnelProvider: (0, awilix_1.asFunction)(() => {
+                return new LocalTunnelProvider_1.LocalTunnelProvider({
+                    tunnelToken: cloudflareTunnelToken,
+                });
+            }).singleton(),
+        });
+        console.log('[Local] Tunnel provider registered (CLOUDFLARE_TUNNEL_TOKEN configured)');
+    }
+    else if (sakuraToken) {
+        container.register({
+            localTunnelProvider: (0, awilix_1.asFunction)(() => {
+                return new SakuraFrpTunnelProvider_1.SakuraFrpTunnelProvider({
+                    token: sakuraToken,
+                });
+            }).singleton(),
+        });
+        console.log('[Local] Tunnel provider registered (SAKURA_TOKEN configured)');
+    }
+    // 2. 自适应 DNS 管理 (Self-Hosted DNS)
+    // 如果配置了 Cloudflare API Token 和 Base Domain，启用本地 DNS 管理
+    const apiToken = subdomainConfig?.cloudflareApiToken;
+    // 在 Local 模式下，强制使用 CSS_BASE_URL 作为域名来源
+    // 简化用户配置心智
+    let baseDomain;
+    if (process.env.CSS_BASE_URL) {
+        try {
+            const url = new URL(process.env.CSS_BASE_URL);
+            baseDomain = url.hostname;
+        }
+        catch {
+            console.warn('[Local] Invalid CSS_BASE_URL, cannot derive domain for DNS management');
+        }
+    }
+    // DEBUG: 打印变量状态
+    console.log(`[Local] Debug: apiToken=${apiToken ? '***' : 'undefined'}, baseDomain=${baseDomain}, CSS_BASE_URL=${process.env.CSS_BASE_URL}`);
+    if (apiToken && baseDomain) {
+        console.log('[Local] Self-hosted DNS mode detected (IPv6 Ready)');
+        container.register({
+            // DNS Provider
+            dnsProvider: (0, awilix_1.asFunction)(() => {
+                return new CloudflareDnsProvider_1.CloudflareDnsProvider({
+                    apiToken: apiToken,
+                });
+            }).singleton(),
+            // DNS Coordinator (DnsMaintainer)
+            dnsCoordinator: (0, awilix_1.asFunction)(({ dnsProvider }) => {
+                return new EdgeNodeDnsCoordinator_1.EdgeNodeDnsCoordinator({
+                    provider: dnsProvider,
+                    rootDomain: baseDomain,
+                });
+            }).singleton(),
+            // Network Detector
+            capabilityDetector: (0, awilix_1.asFunction)(() => {
+                return new EdgeNodeCapabilityDetector_1.EdgeNodeCapabilityDetector({
+                    dynamicDetection: { enableNetworkDetection: true },
+                });
+            }).singleton(),
+            // Local Network Manager (Orchestrator)
+            localNetworkManager: (0, awilix_1.asFunction)(({ capabilityDetector, dnsCoordinator, localTunnelProvider }) => {
+                // Tunnel 应该指向 Gateway 端口 (通常是 3000)，而不是 API Server 端口 (3004)
+                const mainPort = parseInt(process.env.XPOD_MAIN_PORT || '3000', 10);
+                return new LocalNetworkManager_1.LocalNetworkManager({
+                    detector: capabilityDetector,
+                    dnsCoordinator: dnsCoordinator,
+                    tunnelProvider: localTunnelProvider,
+                    localPort: mainPort,
+                });
+            }).singleton(),
+            // Subdomain Service (Keep for API support)
+            subdomainService: (0, awilix_1.asFunction)(({ dnsProvider, localTunnelProvider }) => {
+                // 如果没有配置 Tunnel Token，使用一个 Mock Provider
+                const tunnelProvider = localTunnelProvider ?? {
+                    name: 'noop',
+                    setup: async () => { throw new Error('Tunnel not configured'); },
+                    start: async () => { throw new Error('Tunnel not configured'); },
+                    stop: async () => { },
+                    cleanup: async () => { },
+                    getStatus: () => ({ running: false, connected: false }),
+                    getEndpoint: () => undefined,
+                };
+                return new SubdomainService_1.SubdomainService({
+                    baseDomain: baseDomain,
+                    dnsProvider: dnsProvider,
+                    tunnelProvider,
+                });
+            }).singleton(),
+        });
+        console.log(`[Local] Local DNS maintenance services registered for: ${baseDomain}`);
+        // 继续进行后续逻辑，不要 return，因为用户可能既用了自管 DNS 又开启了 Managed Client
+    }
+    // 独立式：没有配置 Node Token，用户自己管理域名和 IdP
+    if (!nodeToken) {
+        console.log('[Local] Standalone mode (no XPOD_NODE_TOKEN)');
+        console.log('[Local] User manages DNS and IdP externally');
+        if (cloudflareTunnelToken) {
+            console.log('[Local] Will start cloudflared with provided CLOUDFLARE_TUNNEL_TOKEN');
+        }
+        return;
+    }
+    // 托管式：有 Node Token，连接 Cloud
+    // Cloud API endpoint 可以从 Token 解析或使用默认值
+    const effectiveCloudApiEndpoint = cloudApiEndpoint || 'https://pods.undefineds.co';
+    // 从 Node Token 解析用户名作为子域名 (格式: username:secret)
+    const subdomain = parseSubdomainFromToken(nodeToken);
+    container.register({
+        subdomainClient: (0, awilix_1.asFunction)(() => {
+            return new SubdomainClient_1.SubdomainClient({
+                cloudApiEndpoint: effectiveCloudApiEndpoint,
+                nodeId: nodeId || 'auto', // 可以从 Token 解析
+                nodeToken: nodeToken,
+            });
+        }).singleton(),
+        // 注册网络检测器 (如果尚未注册)
+        capabilityDetector: (0, awilix_1.asFunction)(() => {
+            return new EdgeNodeCapabilityDetector_1.EdgeNodeCapabilityDetector({
+                dynamicDetection: { enableNetworkDetection: true },
+            });
+        }).singleton(),
+        // DDNS Manager: 自动分配和更新 DDNS
+        ddnsManager: (0, awilix_1.asFunction)(({ subdomainClient, capabilityDetector }) => {
+            return new DdnsManager_1.DdnsManager({
+                client: subdomainClient,
+                detector: capabilityDetector,
+                subdomain: subdomain || nodeId || 'auto',
+                autoAllocate: true,
+            });
+        }).singleton(),
+    });
+    console.log('[Local] Managed mode, SubdomainClient and DdnsManager registered');
+    console.log(`[Local] Cloud API endpoint: ${effectiveCloudApiEndpoint}`);
+    if (subdomain) {
+        console.log(`[Local] DDNS subdomain: ${subdomain}`);
+    }
+    if (config.oidcIssuer) {
+        console.log(`[Local] Using Cloud IdP: ${config.oidcIssuer}`);
+    }
+    if (!cloudflareTunnelToken) {
+        console.log('[Local] Note: No tunnel token configured, assuming direct network access');
+    }
+}
+/**
+ * 从 Node Token 解析子域名/用户名
+ * Token 格式: username:secret 或 base64 编码
+ */
+function parseSubdomainFromToken(token) {
+    // 尝试直接解析 username:secret 格式
+    if (token.includes(':')) {
+        const [username] = token.split(':');
+        if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {
+            return username;
+        }
+    }
+    // 尝试 base64 解码
+    try {
+        const decoded = Buffer.from(token, 'base64').toString('utf8');
+        if (decoded.includes(':')) {
+            const [username] = decoded.split(':');
+            if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {
+                return username;
+            }
+        }
+    }
+    catch {
+        // ignore
+    }
+    return undefined;
+}
+//# sourceMappingURL=local.js.map

package/dist/api/container/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/api/container/local.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAmBH,sDAqKC;AAtLD,mCAA0D;AAG1D,qEAAkE;AAClE,0EAAuE;AACvE,kFAA+E;AAC/E,sFAAmF;AACnF,uEAAoE;AACpE,8EAA2E;AAC3E,sFAAmF;AACnF,wEAAqE;AACrE,wDAAqD;AAGrD;;GAEG;AACH,SAAgB,qBAAqB,CACnC,SAA8C;IAE9C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAEvH,qDAAqD;IACrD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,WAAW,EAAE,qBAAqB;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,iDAAuB,CAAC;oBACjC,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC9E,CAAC;IAED,kCAAkC;IAClC,uDAAuD;IACvD,MAAM,QAAQ,GAAG,eAAe,EAAE,kBAAkB,CAAC;IAErD,uCAAuC;IACvC,WAAW;IACX,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,gBAAgB,UAAU,kBAAkB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAE7I,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAElE,SAAS,CAAC,QAAQ,CAAC;YACjB,eAAe;YACf,WAAW,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAC3B,OAAO,IAAI,6CAAqB,CAAC;oBAC/B,QAAQ,EAAE,QAAS;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,kCAAkC;YAClC,cAAc,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAsB,EAAE,EAAE;gBACjE,OAAO,IAAI,+CAAsB,CAAC;oBAChC,QAAQ,EAAE,WAAY;oBACtB,UAAU,EAAE,UAAU;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,mBAAmB;YACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAClC,OAAO,IAAI,uDAA0B,CAAC;oBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,uCAAuC;YACvC,mBAAmB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAsB,EAAE,EAAE;gBAClH,6DAA6D;gBAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpE,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,QAAQ,EAAE,kBAAmB;oBAC7B,cAAc,EAAE,cAAe;oBAC/B,cAAc,EAAE,mBAAmB;oBACnC,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,2CAA2C;YAC3C,gBAAgB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAsB,EAAE,EAAE;gBACxF,yCAAyC;gBACzC,MAAM,cAAc,GAAG,mBAAmB,IAAI;oBAC5C,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACvB,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAmB,CAAA;oBACvE,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;iBACX,CAAC;gBAEpB,OAAO,IAAI,mCAAgB,CAAC;oBAC1B,UAAU,EAAE,UAAW;oBACvB,WAAW,EAAE,WAAY;oBACzB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0DAA0D,UAAU,EAAE,CAAC,CAAC;QACpF,yDAAyD;IAC3D,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,wCAAwC;IACxC,MAAM,yBAAyB,GAAG,gBAAgB,IAAI,4BAA4B,CAAC;IAEnF,gDAAgD;IAChD,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAErD,SAAS,CAAC,QAAQ,CAAC;QACjB,eAAe,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAC/B,OAAO,IAAI,iCAAe,CAAC;gBACzB,gBAAgB,EAAE,yBAAyB;gBAC3C,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,eAAe;gBACzC,SAAS,EAAE,SAAU;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,mBAAmB;QACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAClC,OAAO,IAAI,uDAA0B,CAAC;gBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,6BAA6B;QAC7B,WAAW,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,eAAe,EAAE,kBAAkB,EAAsB,EAAE,EAAE;YACtF,OAAO,IAAI,yBAAW,CAAC;gBACrB,MAAM,EAAE,eAAgB;gBACxB,QAAQ,EAAE,kBAAmB;gBAC7B,SAAS,EAAE,SAAS,IAAI,MAAM,IAAI,MAAM;gBACxC,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,+BAA+B,yBAAyB,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,KAAa;IAC5C,4BAA4B;IAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Local 模式服务注册\n *\n * Local 模式有两种配置：\n * - 托管式 (managed): 配置 XPOD_NODE_TOKEN，自动连接 Cloud 获取身份服务和 DDNS\n * - 独立式 (standalone): 不配置 XPOD_NODE_TOKEN，用户自己配置 CSS_BASE_URL 和 IdP\n */\n\nimport { asFunction, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\nimport { SubdomainClient } from '../../subdomain/SubdomainClient';\nimport { LocalTunnelProvider } from '../../tunnel/LocalTunnelProvider';\nimport { SakuraFrpTunnelProvider } from '../../tunnel/SakuraFrpTunnelProvider';\nimport { CloudflareDnsProvider } from '../../dns/cloudflare/CloudflareDnsProvider';\nimport { SubdomainService } from '../../subdomain/SubdomainService';\nimport { EdgeNodeDnsCoordinator } from '../../edge/EdgeNodeDnsCoordinator';\nimport { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';\nimport { LocalNetworkManager } from '../../edge/LocalNetworkManager';\nimport { DdnsManager } from '../../edge/DdnsManager';\nimport type { TunnelProvider, TunnelStatus } from '../../tunnel/TunnelProvider';\n\n/**\n * 注册 Local 模式专属服务\n */\nexport function registerLocalServices(\n  container: AwilixContainer<ApiContainerCradle>,\n): void {\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  const { cloudApiEndpoint, nodeId, nodeToken, cloudflareTunnelToken, sakuraToken, subdomain: subdomainConfig } = config;\n\n  // 1. 注册 Tunnel Provider (优先 Cloudflare，其次 SakuraFRP)\n  if (cloudflareTunnelToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new LocalTunnelProvider({\n          tunnelToken: cloudflareTunnelToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (CLOUDFLARE_TUNNEL_TOKEN configured)');\n  } else if (sakuraToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new SakuraFrpTunnelProvider({\n          token: sakuraToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (SAKURA_TOKEN configured)');\n  }\n\n  // 2. 自适应 DNS 管理 (Self-Hosted DNS)\n  // 如果配置了 Cloudflare API Token 和 Base Domain，启用本地 DNS 管理\n  const apiToken = subdomainConfig?.cloudflareApiToken;\n\n  // 在 Local 模式下，强制使用 CSS_BASE_URL 作为域名来源\n  // 简化用户配置心智\n  let baseDomain: string | undefined;\n  if (process.env.CSS_BASE_URL) {\n    try {\n      const url = new URL(process.env.CSS_BASE_URL);\n      baseDomain = url.hostname;\n    } catch {\n      console.warn('[Local] Invalid CSS_BASE_URL, cannot derive domain for DNS management');\n    }\n  }\n\n  // DEBUG: 打印变量状态\n  console.log(`[Local] Debug: apiToken=${apiToken ? '***' : 'undefined'}, baseDomain=${baseDomain}, CSS_BASE_URL=${process.env.CSS_BASE_URL}`);\n\n  if (apiToken && baseDomain) {\n    console.log('[Local] Self-hosted DNS mode detected (IPv6 Ready)');\n\n    container.register({\n      // DNS Provider\n      dnsProvider: asFunction(() => {\n        return new CloudflareDnsProvider({\n          apiToken: apiToken!,\n        });\n      }).singleton(),\n\n      // DNS Coordinator (DnsMaintainer)\n      dnsCoordinator: asFunction(({ dnsProvider }: ApiContainerCradle) => {\n        return new EdgeNodeDnsCoordinator({\n          provider: dnsProvider!,\n          rootDomain: baseDomain,\n        });\n      }).singleton(),\n\n      // Network Detector\n      capabilityDetector: asFunction(() => {\n        return new EdgeNodeCapabilityDetector({\n          dynamicDetection: { enableNetworkDetection: true },\n        });\n      }).singleton(),\n\n      // Local Network Manager (Orchestrator)\n      localNetworkManager: asFunction(({ capabilityDetector, dnsCoordinator, localTunnelProvider }: ApiContainerCradle) => {\n        // Tunnel 应该指向 Gateway 端口 (通常是 3000)，而不是 API Server 端口 (3004)\n        const mainPort = parseInt(process.env.XPOD_MAIN_PORT || '3000', 10);\n        return new LocalNetworkManager({\n          detector: capabilityDetector!,\n          dnsCoordinator: dnsCoordinator!,\n          tunnelProvider: localTunnelProvider,\n          localPort: mainPort,\n        });\n      }).singleton(),\n\n      // Subdomain Service (Keep for API support)\n      subdomainService: asFunction(({ dnsProvider, localTunnelProvider }: ApiContainerCradle) => {\n        // 如果没有配置 Tunnel Token，使用一个 Mock Provider\n        const tunnelProvider = localTunnelProvider ?? {\n          name: 'noop',\n          setup: async () => { throw new Error('Tunnel not configured'); },\n          start: async () => { throw new Error('Tunnel not configured'); },\n          stop: async () => {},\n          cleanup: async () => {},\n          getStatus: () => ({ running: false, connected: false } as TunnelStatus),\n          getEndpoint: () => undefined,\n        } as TunnelProvider;\n\n        return new SubdomainService({\n          baseDomain: baseDomain!,\n          dnsProvider: dnsProvider!,\n          tunnelProvider,\n        });\n      }).singleton(),\n    });\n    console.log(`[Local] Local DNS maintenance services registered for: ${baseDomain}`);\n    // 继续进行后续逻辑，不要 return，因为用户可能既用了自管 DNS 又开启了 Managed Client\n  }\n\n  // 独立式：没有配置 Node Token，用户自己管理域名和 IdP\n  if (!nodeToken) {\n    console.log('[Local] Standalone mode (no XPOD_NODE_TOKEN)');\n    console.log('[Local] User manages DNS and IdP externally');\n    if (cloudflareTunnelToken) {\n      console.log('[Local] Will start cloudflared with provided CLOUDFLARE_TUNNEL_TOKEN');\n    }\n    return;\n  }\n\n  // 托管式：有 Node Token，连接 Cloud\n  // Cloud API endpoint 可以从 Token 解析或使用默认值\n  const effectiveCloudApiEndpoint = cloudApiEndpoint || 'https://pods.undefineds.co';\n\n  // 从 Node Token 解析用户名作为子域名 (格式: username:secret)\n  const subdomain = parseSubdomainFromToken(nodeToken);\n\n  container.register({\n    subdomainClient: asFunction(() => {\n      return new SubdomainClient({\n        cloudApiEndpoint: effectiveCloudApiEndpoint,\n        nodeId: nodeId || 'auto', // 可以从 Token 解析\n        nodeToken: nodeToken!,\n      });\n    }).singleton(),\n\n    // 注册网络检测器 (如果尚未注册)\n    capabilityDetector: asFunction(() => {\n      return new EdgeNodeCapabilityDetector({\n        dynamicDetection: { enableNetworkDetection: true },\n      });\n    }).singleton(),\n\n    // DDNS Manager: 自动分配和更新 DDNS\n    ddnsManager: asFunction(({ subdomainClient, capabilityDetector }: ApiContainerCradle) => {\n      return new DdnsManager({\n        client: subdomainClient!,\n        detector: capabilityDetector!,\n        subdomain: subdomain || nodeId || 'auto',\n        autoAllocate: true,\n      });\n    }).singleton(),\n  });\n\n  console.log('[Local] Managed mode, SubdomainClient and DdnsManager registered');\n  console.log(`[Local] Cloud API endpoint: ${effectiveCloudApiEndpoint}`);\n  if (subdomain) {\n    console.log(`[Local] DDNS subdomain: ${subdomain}`);\n  }\n  if (config.oidcIssuer) {\n    console.log(`[Local] Using Cloud IdP: ${config.oidcIssuer}`);\n  }\n\n  if (!cloudflareTunnelToken) {\n    console.log('[Local] Note: No tunnel token configured, assuming direct network access');\n  }\n}\n\n/**\n * 从 Node Token 解析子域名/用户名\n * Token 格式: username:secret 或 base64 编码\n */\nfunction parseSubdomainFromToken(token: string): string | undefined {\n  // 尝试直接解析 username:secret 格式\n  if (token.includes(':')) {\n    const [username] = token.split(':');\n    if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n      return username;\n    }\n  }\n\n  // 尝试 base64 解码\n  try {\n    const decoded = Buffer.from(token, 'base64').toString('utf8');\n    if (decoded.includes(':')) {\n      const [username] = decoded.split(':');\n      if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n        return username;\n      }\n    }\n  } catch {\n    // ignore\n  }\n\n  return undefined;\n}\n"]}

package/dist/api/container/routes.d.ts

@@ -0,0 +1,11 @@
+/**
+ * 路由注册
+ *
+ * 根据容器中的服务注册 API 路由
+ */
+import type { AwilixContainer } from 'awilix';
+import type { ApiContainerCradle } from './types';
+/**
+ * 注册所有 API 路由
+ */
+export declare function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void;

package/dist/api/container/routes.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * 路由注册
+ *
+ * 根据容器中的服务注册 API 路由
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerRoutes = registerRoutes;
+const SignalHandler_1 = require("../handlers/SignalHandler");
+const NodeHandler_1 = require("../handlers/NodeHandler");
+const ChatHandler_1 = require("../handlers/ChatHandler");
+const ApiKeyHandler_1 = require("../handlers/ApiKeyHandler");
+const SubdomainHandler_1 = require("../handlers/SubdomainHandler");
+const SubdomainClientHandler_1 = require("../handlers/SubdomainClientHandler");
+const DevHandler_1 = require("../handlers/DevHandler");
+const WebIdProfileHandler_1 = require("../handlers/WebIdProfileHandler");
+const DdnsHandler_1 = require("../handlers/DdnsHandler");
+/**
+ * 注册所有 API 路由
+ */
+function registerRoutes(container) {
+    const server = container.resolve('apiServer');
+    const config = container.resolve('config');
+    // 公共健康检查端点
+    registerHealthRoutes(server);
+    // 共享路由
+    registerSharedRoutes(container, server);
+    // 根据 edition 注册专属路由
+    if (config.edition === 'cloud') {
+        registerCloudRoutes(container, server);
+    }
+    else {
+        registerLocalRoutes(container, server);
+    }
+}
+/**
+ * 健康检查路由
+ */
+function registerHealthRoutes(server) {
+    server.get('/health', async (_req, res) => {
+        res.statusCode = 200;
+        res.setHeader('Content-Type', 'application/json');
+        res.end(JSON.stringify({ status: 'ok' }));
+    }, { public: true });
+    server.get('/ready', async (_req, res) => {
+        res.statusCode = 200;
+        res.setHeader('Content-Type', 'application/json');
+        res.end(JSON.stringify({ status: 'ready' }));
+    }, { public: true });
+}
+/**
+ * 共享路由 (cloud 和 local 都有)
+ */
+function registerSharedRoutes(container, server) {
+    const nodeRepo = container.resolve('nodeRepo');
+    const apiKeyStore = container.resolve('apiKeyStore');
+    const chatService = container.resolve('chatService');
+    (0, SignalHandler_1.registerSignalRoutes)(server, { repository: nodeRepo });
+    (0, NodeHandler_1.registerNodeRoutes)(server, { repository: nodeRepo });
+    (0, ApiKeyHandler_1.registerApiKeyRoutes)(server, { store: apiKeyStore });
+    (0, ChatHandler_1.registerChatRoutes)(server, { chatService: chatService });
+    // 开发模式路由 (仅 NODE_ENV=development 时启用)
+    (0, DevHandler_1.registerDevRoutes)(server, {
+        nodeRepo,
+        credentialsStore: apiKeyStore,
+    });
+}
+/**
+ * Cloud 模式专属路由
+ */
+function registerCloudRoutes(container, server) {
+    // 子域名管理 API (需要 SubdomainService)
+    try {
+        const subdomainService = container.resolve('subdomainService');
+        if (subdomainService) {
+            (0, SubdomainHandler_1.registerSubdomainRoutes)(server, { subdomainService });
+            console.log('[Cloud] Subdomain routes registered');
+        }
+    }
+    catch {
+        console.log('[Cloud] Subdomain routes not registered (service not available)');
+    }
+    // WebID Profile 托管服务
+    try {
+        const profileRepo = container.resolve('webIdProfileRepo', { allowUnregistered: true });
+        if (profileRepo) {
+            (0, WebIdProfileHandler_1.registerWebIdProfileRoutes)(server, { profileRepo: profileRepo });
+            console.log('[Cloud] WebID Profile routes registered');
+        }
+    }
+    catch {
+        console.log('[Cloud] WebID Profile routes not registered (repo not available)');
+    }
+    // DDNS 服务
+    try {
+        const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });
+        const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });
+        const config = container.resolve('config');
+        if (ddnsRepo) {
+            const ddnsDomain = config.subdomain?.ddnsDomain || 'undefineds.xyz';
+            (0, DdnsHandler_1.registerDdnsRoutes)(server, {
+                ddnsRepo: ddnsRepo,
+                dnsProvider: dnsProvider,
+                defaultDomain: ddnsDomain,
+            });
+            console.log(`[Cloud] DDNS routes registered (domain: ${ddnsDomain})`);
+        }
+    }
+    catch {
+        console.log('[Cloud] DDNS routes not registered (repo not available)');
+    }
+}
+/**
+ * Local 模式专属路由
+ */
+function registerLocalRoutes(container, server) {
+    // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)
+    try {
+        const subdomainClient = container.resolve('subdomainClient');
+        if (subdomainClient) {
+            (0, SubdomainClientHandler_1.registerSubdomainClientRoutes)(server, { subdomainClient });
+            console.log('[Local] Subdomain client routes registered');
+        }
+    }
+    catch {
+        console.log('[Local] Subdomain client routes not registered (client not available)');
+    }
+}
+//# sourceMappingURL=routes.js.map

package/dist/api/container/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/api/container/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAqBH,wCAgBC;AA/BD,6DAAiE;AACjE,yDAA6D;AAC7D,yDAA6D;AAC7D,6DAAiE;AACjE,mEAAuE;AACvE,+EAAmF;AACnF,uDAA2D;AAC3D,yEAA6E;AAC7E,yDAA6D;AAI7D;;GAEG;AACH,SAAgB,cAAc,CAAC,SAA8C;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAc,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,WAAW;IACX,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,OAAO;IACP,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAiB;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAkC,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAErD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,WAAkB,EAAE,CAAC,CAAC;IAEhE,sCAAsC;IACtC,IAAA,8BAAiB,EAAC,MAAM,EAAE;QACxB,QAAQ;QACR,gBAAgB,EAAE,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAA2C,CAAC;QACzG,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,WAAW,EAAE,CAAC;YAChB,IAAA,gDAA0B,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,WAAkB,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QAEjE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,UAAU,IAAI,gBAAgB,CAAC;YACpE,IAAA,gCAAkB,EAAC,MAAM,EAAE;gBACzB,QAAQ,EAAE,QAAe;gBACzB,WAAW,EAAE,WAAkB;gBAC/B,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,UAAU,GAAG,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAA0C,CAAC;QACtG,IAAI,eAAe,EAAE,CAAC;YACpB,IAAA,sDAA6B,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC","sourcesContent":["/**\n * 路由注册\n *\n * 根据容器中的服务注册 API 路由\n */\n\nimport type { AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport type { ApiServer } from '../ApiServer';\n\nimport { registerSignalRoutes } from '../handlers/SignalHandler';\nimport { registerNodeRoutes } from '../handlers/NodeHandler';\nimport { registerChatRoutes } from '../handlers/ChatHandler';\nimport { registerApiKeyRoutes } from '../handlers/ApiKeyHandler';\nimport { registerSubdomainRoutes } from '../handlers/SubdomainHandler';\nimport { registerSubdomainClientRoutes } from '../handlers/SubdomainClientHandler';\nimport { registerDevRoutes } from '../handlers/DevHandler';\nimport { registerWebIdProfileRoutes } from '../handlers/WebIdProfileHandler';\nimport { registerDdnsRoutes } from '../handlers/DdnsHandler';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\n\n/**\n * 注册所有 API 路由\n */\nexport function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void {\n  const server = container.resolve('apiServer') as ApiServer;\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  // 公共健康检查端点\n  registerHealthRoutes(server);\n\n  // 共享路由\n  registerSharedRoutes(container, server);\n\n  // 根据 edition 注册专属路由\n  if (config.edition === 'cloud') {\n    registerCloudRoutes(container, server);\n  } else {\n    registerLocalRoutes(container, server);\n  }\n}\n\n/**\n * 健康检查路由\n */\nfunction registerHealthRoutes(server: ApiServer): void {\n  server.get('/health', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ok' }));\n  }, { public: true });\n\n  server.get('/ready', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ready' }));\n  }, { public: true });\n}\n\n/**\n * 共享路由 (cloud 和 local 都有)\n */\nfunction registerSharedRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n  const apiKeyStore = container.resolve('apiKeyStore') as DrizzleClientCredentialsStore;\n  const chatService = container.resolve('chatService');\n\n  registerSignalRoutes(server, { repository: nodeRepo });\n  registerNodeRoutes(server, { repository: nodeRepo });\n  registerApiKeyRoutes(server, { store: apiKeyStore });\n  registerChatRoutes(server, { chatService: chatService as any });\n\n  // 开发模式路由 (仅 NODE_ENV=development 时启用)\n  registerDevRoutes(server, {\n    nodeRepo,\n    credentialsStore: apiKeyStore,\n  });\n}\n\n/**\n * Cloud 模式专属路由\n */\nfunction registerCloudRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名管理 API (需要 SubdomainService)\n  try {\n    const subdomainService = container.resolve('subdomainService') as ApiContainerCradle['subdomainService'];\n    if (subdomainService) {\n      registerSubdomainRoutes(server, { subdomainService });\n      console.log('[Cloud] Subdomain routes registered');\n    }\n  } catch {\n    console.log('[Cloud] Subdomain routes not registered (service not available)');\n  }\n\n  // WebID Profile 托管服务\n  try {\n    const profileRepo = container.resolve('webIdProfileRepo', { allowUnregistered: true });\n    if (profileRepo) {\n      registerWebIdProfileRoutes(server, { profileRepo: profileRepo as any });\n      console.log('[Cloud] WebID Profile routes registered');\n    }\n  } catch {\n    console.log('[Cloud] WebID Profile routes not registered (repo not available)');\n  }\n\n  // DDNS 服务\n  try {\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const config = container.resolve('config') as ApiContainerConfig;\n\n    if (ddnsRepo) {\n      const ddnsDomain = config.subdomain?.ddnsDomain || 'undefineds.xyz';\n      registerDdnsRoutes(server, {\n        ddnsRepo: ddnsRepo as any,\n        dnsProvider: dnsProvider as any,\n        defaultDomain: ddnsDomain,\n      });\n      console.log(`[Cloud] DDNS routes registered (domain: ${ddnsDomain})`);\n    }\n  } catch {\n    console.log('[Cloud] DDNS routes not registered (repo not available)');\n  }\n}\n\n/**\n * Local 模式专属路由\n */\nfunction registerLocalRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)\n  try {\n    const subdomainClient = container.resolve('subdomainClient') as ApiContainerCradle['subdomainClient'];\n    if (subdomainClient) {\n      registerSubdomainClientRoutes(server, { subdomainClient });\n      console.log('[Local] Subdomain client routes registered');\n    }\n  } catch {\n    console.log('[Local] Subdomain client routes not registered (client not available)');\n  }\n}\n"]}

package/dist/api/container/types.d.ts

@@ -0,0 +1,92 @@
+/**
+ * API Container 依赖类型定义
+ *
+ * 定义容器中注册的所有服务接口
+ */
+import type { ApiServer } from '../ApiServer';
+import type { AuthMiddleware } from '../middleware/AuthMiddleware';
+import type { Authenticator } from '../auth/Authenticator';
+import type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+import type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';
+import type { InternalPodService } from '../service/InternalPodService';
+import type { VercelChatService } from '../service/VercelChatService';
+import type { SubdomainService } from '../../subdomain/SubdomainService';
+import type { SubdomainClient } from '../../subdomain/SubdomainClient';
+import type { DnsProvider } from '../../dns/DnsProvider';
+import type { TunnelProvider } from '../../tunnel/TunnelProvider';
+import type { IdentityDatabase } from '../../identity/drizzle/db';
+import type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';
+import type { DdnsRepository } from '../../identity/drizzle/DdnsRepository';
+/**
+ * 容器配置
+ */
+export interface ApiContainerConfig {
+    /** 运行模式: cloud 持有密钥, local 调用远程 */
+    edition: 'cloud' | 'local';
+    /** API Server 端口 */
+    port: number;
+    /** API Server 主机 */
+    host: string;
+    /** 数据库连接 URL */
+    databaseUrl: string;
+    /** CORS 允许的源 */
+    corsOrigins: string[];
+    /** 加密密钥 */
+    encryptionKey: string;
+    /** CSS Token 端点 */
+    cssTokenEndpoint: string;
+    /** 子域名功能配置 (cloud 模式) */
+    subdomain?: {
+        enabled: boolean;
+        baseDomain?: string;
+        /** DDNS 服务使用的域名 (如 undefineds.xyz) */
+        ddnsDomain?: string;
+        cloudflareAccountId?: string;
+        cloudflareApiToken?: string;
+        tencentDnsSecretId?: string;
+        tencentDnsSecretKey?: string;
+    };
+    /** Cloud API 端点 (local 托管式，调用 cloud 的子域名 API) */
+    cloudApiEndpoint?: string;
+    /** 节点 ID (local 托管式) */
+    nodeId?: string;
+    /** 节点 Token (local 托管式，调用 Cloud API 的认证) */
+    nodeToken?: string;
+    /** OIDC Issuer URL (local 托管式，使用 Cloud IdP) */
+    oidcIssuer?: string;
+    /** Cloudflare Tunnel Token (local 托管式/自管式，启动 cloudflared) */
+    cloudflareTunnelToken?: string;
+    /** SakuraFRP Token (local 托管式/自管式，启动 frpc) */
+    sakuraToken?: string;
+    /** 是否接受 Edge 节点注册 (cloud 模式) */
+    edgeNodesEnabled?: boolean;
+}
+import { EdgeNodeDnsCoordinator } from '../../edge/EdgeNodeDnsCoordinator';
+import { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';
+import { LocalNetworkManager } from '../../edge/LocalNetworkManager';
+import { DdnsManager } from '../../edge/DdnsManager';
+/**
+ * 容器中注册的所有服务
+ */
+export interface ApiContainerCradle {
+    config: ApiContainerConfig;
+    db: IdentityDatabase;
+    apiServer: ApiServer;
+    authMiddleware: AuthMiddleware;
+    authenticator: Authenticator;
+    nodeRepo: EdgeNodeRepository;
+    apiKeyStore: DrizzleClientCredentialsStore;
+    podService: InternalPodService;
+    chatService: VercelChatService;
+    webIdProfileRepo?: WebIdProfileRepository;
+    ddnsRepo?: DdnsRepository;
+    dnsProvider?: DnsProvider;
+    dnsCoordinator?: EdgeNodeDnsCoordinator;
+    capabilityDetector?: EdgeNodeCapabilityDetector;
+    localNetworkManager?: LocalNetworkManager;
+    tunnelProvider?: TunnelProvider;
+    subdomainService?: SubdomainService;
+    subdomainClient?: SubdomainClient;
+    ddnsManager?: DdnsManager;
+    localTunnelProvider?: TunnelProvider;
+}

package/dist/api/container/types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * API Container 依赖类型定义
+ *
+ * 定义容器中注册的所有服务接口
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/api/container/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/api/container/types.ts"],"names":[],"mappings":";AAAA;;;;GAIG","sourcesContent":["/**\n * API Container 依赖类型定义\n *\n * 定义容器中注册的所有服务接口\n */\n\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthMiddleware } from '../middleware/AuthMiddleware';\nimport type { Authenticator } from '../auth/Authenticator';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\nimport type { InternalPodService } from '../service/InternalPodService';\nimport type { VercelChatService } from '../service/VercelChatService';\nimport type { SubdomainService } from '../../subdomain/SubdomainService';\nimport type { SubdomainClient } from '../../subdomain/SubdomainClient';\nimport type { DnsProvider } from '../../dns/DnsProvider';\nimport type { TunnelProvider } from '../../tunnel/TunnelProvider';\nimport type { IdentityDatabase } from '../../identity/drizzle/db';\nimport type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\nimport type { DdnsRepository } from '../../identity/drizzle/DdnsRepository';\n\n/**\n * 容器配置\n */\nexport interface ApiContainerConfig {\n  /** 运行模式: cloud 持有密钥, local 调用远程 */\n  edition: 'cloud' | 'local';\n\n  /** API Server 端口 */\n  port: number;\n\n  /** API Server 主机 */\n  host: string;\n\n  /** 数据库连接 URL */\n  databaseUrl: string;\n\n  /** CORS 允许的源 */\n  corsOrigins: string[];\n\n  /** 加密密钥 */\n  encryptionKey: string;\n\n  /** CSS Token 端点 */\n  cssTokenEndpoint: string;\n\n  /** 子域名功能配置 (cloud 模式) */\n  subdomain?: {\n    enabled: boolean;\n    baseDomain?: string;\n    /** DDNS 服务使用的域名 (如 undefineds.xyz) */\n    ddnsDomain?: string;\n    cloudflareAccountId?: string;\n    cloudflareApiToken?: string;\n    tencentDnsSecretId?: string;\n    tencentDnsSecretKey?: string;\n  };\n\n  /** Cloud API 端点 (local 托管式，调用 cloud 的子域名 API) */\n  cloudApiEndpoint?: string;\n\n  /** 节点 ID (local 托管式) */\n  nodeId?: string;\n\n  /** 节点 Token (local 托管式，调用 Cloud API 的认证) */\n  nodeToken?: string;\n\n  /** OIDC Issuer URL (local 托管式，使用 Cloud IdP) */\n  oidcIssuer?: string;\n\n  /** Cloudflare Tunnel Token (local 托管式/自管式，启动 cloudflared) */\n  cloudflareTunnelToken?: string;\n\n  /** SakuraFRP Token (local 托管式/自管式，启动 frpc) */\n  sakuraToken?: string;\n\n  /** 是否接受 Edge 节点注册 (cloud 模式) */\n  edgeNodesEnabled?: boolean;\n}\n\nimport { EdgeNodeDnsCoordinator } from '../../edge/EdgeNodeDnsCoordinator';\nimport { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';\nimport { LocalNetworkManager } from '../../edge/LocalNetworkManager';\nimport { DdnsManager } from '../../edge/DdnsManager';\n\n/**\n * 容器中注册的所有服务\n */\nexport interface ApiContainerCradle {\n  // 配置\n  config: ApiContainerConfig;\n\n  // 核心服务\n  db: IdentityDatabase;\n  apiServer: ApiServer;\n  authMiddleware: AuthMiddleware;\n  authenticator: Authenticator;\n\n  // 仓库\n  nodeRepo: EdgeNodeRepository;\n  apiKeyStore: DrizzleClientCredentialsStore;\n\n  // 业务服务\n  podService: InternalPodService;\n  chatService: VercelChatService;\n\n  // Cloud 模式: 身份服务\n  webIdProfileRepo?: WebIdProfileRepository;\n  ddnsRepo?: DdnsRepository;\n\n  // 子域名相关 (可选，按 edition 注册)\n  // Cloud 模式 或 Local 自管模式\n  dnsProvider?: DnsProvider;\n  dnsCoordinator?: EdgeNodeDnsCoordinator;\n  capabilityDetector?: EdgeNodeCapabilityDetector;\n  localNetworkManager?: LocalNetworkManager;\n\n  tunnelProvider?: TunnelProvider;\n  subdomainService?: SubdomainService;\n  // Local 托管式\n  subdomainClient?: SubdomainClient;\n  // Local 托管式 DDNS 管理\n  ddnsManager?: DdnsManager;\n  // Local 托管式/自管式 (启动 cloudflared)\n  localTunnelProvider?: TunnelProvider;\n}\n"]}

package/dist/api/handlers/AdminHandler.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Admin API Handler
+ * Provides configuration management, restart functionality, and log streaming
+ */
+import type { ApiServer } from '../ApiServer';
+export declare function registerAdminRoutes(server: ApiServer): void;