@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/handlers/DdnsHandler.js

@@ -0,0 +1,306 @@
+"use strict";
+/**
+ * DDNS API Handler
+ *
+ * 提供 DDNS 服务的 HTTP API
+ *
+ * POST /api/v1/ddns/{subdomain}     - 更新 DNS 记录
+ * GET  /api/v1/ddns/{subdomain}     - 查询 DNS 记录
+ * POST /api/v1/ddns/allocate        - 分配子域名
+ * DELETE /api/v1/ddns/{subdomain}   - 释放子域名
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDdnsRoutes = registerDdnsRoutes;
+const global_logger_factory_1 = require("global-logger-factory");
+const logger = (0, global_logger_factory_1.getLoggerFor)('DdnsHandler');
+function registerDdnsRoutes(server, options) {
+    const { ddnsRepo, dnsProvider, defaultDomain } = options;
+    /**
+     * POST /api/v1/ddns/allocate
+     *
+     * 分配子域名
+     *
+     * Request body:
+     * {
+     *   "subdomain": "alice",
+     *   "nodeId": "node-xxx",  // optional
+     *   "ipAddress": "1.2.3.4"  // optional
+     * }
+     */
+    server.post('/api/v1/ddns/allocate', async (request, response, _params) => {
+        try {
+            const body = await readJsonBody(request);
+            const payload = body;
+            if (!payload?.subdomain) {
+                sendError(response, 400, 'subdomain is required');
+                return;
+            }
+            // 验证子域名格式
+            if (!/^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(payload.subdomain)) {
+                sendError(response, 400, 'Invalid subdomain format');
+                return;
+            }
+            // 检查是否已存在
+            const existing = await ddnsRepo.getRecord(payload.subdomain);
+            if (existing) {
+                sendError(response, 409, 'Subdomain already allocated');
+                return;
+            }
+            const record = await ddnsRepo.allocateSubdomain({
+                subdomain: payload.subdomain,
+                domain: defaultDomain,
+                nodeId: payload.nodeId,
+                username: payload.username,
+                ipAddress: payload.ipAddress,
+                ipv6Address: payload.ipv6Address,
+            });
+            // 如果有 DNS Provider 且有 IP，创建 DNS 记录
+            if (dnsProvider && (payload.ipAddress || payload.ipv6Address)) {
+                try {
+                    await dnsProvider.upsertRecord({
+                        domain: defaultDomain,
+                        subdomain: payload.subdomain,
+                        type: payload.ipv6Address ? 'AAAA' : 'A',
+                        value: payload.ipv6Address ?? payload.ipAddress,
+                        ttl: 60,
+                    });
+                    logger.info(`Created DNS record: ${payload.subdomain}.${defaultDomain}`);
+                }
+                catch (dnsError) {
+                    logger.error(`Failed to create DNS record: ${dnsError}`);
+                    // 不回滚数据库记录，DNS 可以稍后重试
+                }
+            }
+            logger.info(`Allocated subdomain: ${payload.subdomain}.${defaultDomain}`);
+            sendJson(response, 201, {
+                success: true,
+                subdomain: record.subdomain,
+                domain: record.domain,
+                fqdn: `${record.subdomain}.${record.domain}`,
+                ipAddress: record.ipAddress,
+                ipv6Address: record.ipv6Address,
+                createdAt: record.createdAt.toISOString(),
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to allocate subdomain: ${error}`);
+            sendError(response, 500, 'Internal server error');
+        }
+    });
+    /**
+     * POST /api/v1/ddns/{subdomain}
+     *
+     * 更新 DNS 记录
+     *
+     * Request body:
+     * {
+     *   "ip": "1.2.3.4",
+     *   "type": "A"  // optional, default: "A"
+     * }
+     */
+    server.post('/api/v1/ddns/:subdomain', async (request, response, params) => {
+        const subdomain = decodeURIComponent(params.subdomain);
+        // 跳过 allocate 路由
+        if (subdomain === 'allocate') {
+            return;
+        }
+        try {
+            const body = await readJsonBody(request);
+            const payload = body;
+            const ipAddress = payload?.ip ?? payload?.ipAddress;
+            const ipv6Address = payload?.ipv6Address;
+            if (!ipAddress && !ipv6Address) {
+                sendError(response, 400, 'ip or ipv6Address is required');
+                return;
+            }
+            // 更新数据库记录
+            const record = await ddnsRepo.updateRecordIp(subdomain, {
+                ipAddress,
+                ipv6Address,
+            });
+            if (!record) {
+                sendError(response, 404, 'Subdomain not found');
+                return;
+            }
+            // 更新 DNS 记录
+            if (dnsProvider) {
+                try {
+                    const recordType = ipv6Address ? 'AAAA' : 'A';
+                    const recordValue = ipv6Address ?? ipAddress;
+                    await dnsProvider.upsertRecord({
+                        domain: record.domain,
+                        subdomain: record.subdomain,
+                        type: recordType,
+                        value: recordValue,
+                        ttl: record.ttl,
+                    });
+                    logger.info(`Updated DNS record: ${subdomain}.${record.domain} -> ${recordValue}`);
+                }
+                catch (dnsError) {
+                    logger.error(`Failed to update DNS record: ${dnsError}`);
+                    // 数据库已更新，DNS 更新失败不影响响应
+                }
+            }
+            sendJson(response, 200, {
+                success: true,
+                subdomain: record.subdomain,
+                domain: record.domain,
+                fqdn: `${record.subdomain}.${record.domain}`,
+                ipAddress: record.ipAddress,
+                ipv6Address: record.ipv6Address,
+                updatedAt: record.updatedAt.toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('banned')) {
+                sendError(response, 403, error.message);
+                return;
+            }
+            logger.error(`Failed to update DDNS record: ${error}`);
+            sendError(response, 500, 'Internal server error');
+        }
+    });
+    /**
+     * GET /api/v1/ddns/{subdomain}
+     *
+     * 查询 DNS 记录
+     */
+    server.get('/api/v1/ddns/:subdomain', async (_request, response, params) => {
+        const subdomain = decodeURIComponent(params.subdomain);
+        try {
+            const record = await ddnsRepo.getRecord(subdomain);
+            if (!record) {
+                sendError(response, 404, 'Subdomain not found');
+                return;
+            }
+            sendJson(response, 200, {
+                subdomain: record.subdomain,
+                domain: record.domain,
+                fqdn: `${record.subdomain}.${record.domain}`,
+                ipAddress: record.ipAddress,
+                ipv6Address: record.ipv6Address,
+                recordType: record.recordType,
+                status: record.status,
+                ttl: record.ttl,
+                createdAt: record.createdAt.toISOString(),
+                updatedAt: record.updatedAt.toISOString(),
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to get DDNS record: ${error}`);
+            sendError(response, 500, 'Internal server error');
+        }
+    });
+    /**
+     * DELETE /api/v1/ddns/{subdomain}
+     *
+     * 释放子域名
+     */
+    server.delete('/api/v1/ddns/:subdomain', async (_request, response, params) => {
+        const subdomain = decodeURIComponent(params.subdomain);
+        try {
+            const record = await ddnsRepo.getRecord(subdomain);
+            if (!record) {
+                sendError(response, 404, 'Subdomain not found');
+                return;
+            }
+            // 删除 DNS 记录
+            if (dnsProvider) {
+                try {
+                    await dnsProvider.deleteRecord({
+                        domain: record.domain,
+                        subdomain: record.subdomain,
+                        type: record.recordType,
+                    });
+                    logger.info(`Deleted DNS record: ${subdomain}.${record.domain}`);
+                }
+                catch (dnsError) {
+                    logger.error(`Failed to delete DNS record: ${dnsError}`);
+                }
+            }
+            // 删除数据库记录
+            await ddnsRepo.releaseSubdomain(subdomain);
+            logger.info(`Released subdomain: ${subdomain}`);
+            sendJson(response, 200, {
+                success: true,
+                message: `Subdomain ${subdomain} released`,
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to release subdomain: ${error}`);
+            sendError(response, 500, 'Internal server error');
+        }
+    });
+    /**
+     * POST /api/v1/ddns/{subdomain}/ban
+     *
+     * 封禁子域名 (管理员)
+     */
+    server.post('/api/v1/ddns/:subdomain/ban', async (request, response, params) => {
+        const subdomain = decodeURIComponent(params.subdomain);
+        try {
+            const body = await readJsonBody(request);
+            const payload = body;
+            const reason = payload?.reason ?? 'Banned by administrator';
+            await ddnsRepo.banSubdomain(subdomain, reason);
+            // 删除 DNS 记录
+            if (dnsProvider) {
+                const record = await ddnsRepo.getRecord(subdomain);
+                if (record) {
+                    try {
+                        await dnsProvider.deleteRecord({
+                            domain: record.domain,
+                            subdomain: record.subdomain,
+                            type: record.recordType,
+                        });
+                    }
+                    catch (dnsError) {
+                        logger.error(`Failed to delete DNS record for banned subdomain: ${dnsError}`);
+                    }
+                }
+            }
+            logger.warn(`Banned subdomain: ${subdomain}, reason: ${reason}`);
+            sendJson(response, 200, {
+                success: true,
+                message: `Subdomain ${subdomain} banned`,
+                reason,
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to ban subdomain: ${error}`);
+            sendError(response, 500, 'Internal server error');
+        }
+    });
+    logger.info('DDNS routes registered');
+}
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                resolve(undefined);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+function sendError(response, status, message) {
+    sendJson(response, status, { error: message });
+}
+//# sourceMappingURL=DdnsHandler.js.map

package/dist/api/handlers/DdnsHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DdnsHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DdnsHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAgBH,gDA6SC;AA1TD,iEAAqD;AAKrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,aAAa,CAAC,CAAC;AAQ3C,SAAgB,kBAAkB,CAChC,MAAiB,EACjB,OAA2B;IAE3B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAEzD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAMH,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;gBACxB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,UAAU;YACV,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,6BAA6B,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC;gBAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YAEH,mCAAmC;YACnC,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,YAAY,CAAC;wBAC7B,MAAM,EAAE,aAAa;wBACrB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG;wBACxC,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,SAAU;wBAChD,GAAG,EAAE,EAAE;qBACR,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;oBACzD,sBAAsB;gBACxB,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE,CAAC,CAAC;YAE1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE;gBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,iBAAiB;QACjB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAKH,CAAC;YAEd,MAAM,SAAS,GAAG,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,SAAS,CAAC;YACpD,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;YAEzC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,+BAA+B,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,SAAS,EAAE;gBACtD,SAAS;gBACT,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC9C,MAAM,WAAW,GAAG,WAAW,IAAI,SAAU,CAAC;oBAE9C,MAAM,WAAW,CAAC,YAAY,CAAC;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE,WAAW;wBAClB,GAAG,EAAE,MAAM,CAAC,GAAG;qBAChB,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,IAAI,MAAM,CAAC,MAAM,OAAO,WAAW,EAAE,CAAC,CAAC;gBACrF,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;oBACzD,uBAAuB;gBACzB,CAAC;YACH,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE;gBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/D,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE;gBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACpD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,YAAY,CAAC;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,IAAI,EAAE,MAAM,CAAC,UAAU;qBACxB,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAE3C,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;YAEhD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa,SAAS,WAAW;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAuC,CAAC;YAExD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,yBAAyB,CAAC;YAE5D,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAE/C,YAAY;YACZ,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACnD,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,WAAW,CAAC,YAAY,CAAC;4BAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,IAAI,EAAE,MAAM,CAAC,UAAU;yBACxB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,MAAM,CAAC,KAAK,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;oBAChF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,qBAAqB,SAAS,aAAa,MAAM,EAAE,CAAC,CAAC;YAEjE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa,SAAS,SAAS;gBACxC,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * DDNS API Handler\n *\n * 提供 DDNS 服务的 HTTP API\n *\n * POST /api/v1/ddns/{subdomain}     - 更新 DNS 记录\n * GET  /api/v1/ddns/{subdomain}     - 查询 DNS 记录\n * POST /api/v1/ddns/allocate        - 分配子域名\n * DELETE /api/v1/ddns/{subdomain}   - 释放子域名\n */\n\nimport type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { DdnsRepository } from '../../identity/drizzle/DdnsRepository';\nimport type { DnsProvider } from '../../dns/DnsProvider';\n\nconst logger = getLoggerFor('DdnsHandler');\n\nexport interface DdnsHandlerOptions {\n  ddnsRepo: DdnsRepository;\n  dnsProvider?: DnsProvider;\n  defaultDomain: string;\n}\n\nexport function registerDdnsRoutes(\n  server: ApiServer,\n  options: DdnsHandlerOptions,\n): void {\n  const { ddnsRepo, dnsProvider, defaultDomain } = options;\n\n  /**\n   * POST /api/v1/ddns/allocate\n   *\n   * 分配子域名\n   *\n   * Request body:\n   * {\n   *   \"subdomain\": \"alice\",\n   *   \"nodeId\": \"node-xxx\",  // optional\n   *   \"ipAddress\": \"1.2.3.4\"  // optional\n   * }\n   */\n  server.post('/api/v1/ddns/allocate', async (request, response, _params) => {\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        subdomain?: string;\n        nodeId?: string;\n        username?: string;\n        ipAddress?: string;\n        ipv6Address?: string;\n      } | undefined;\n\n      if (!payload?.subdomain) {\n        sendError(response, 400, 'subdomain is required');\n        return;\n      }\n\n      // 验证子域名格式\n      if (!/^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(payload.subdomain)) {\n        sendError(response, 400, 'Invalid subdomain format');\n        return;\n      }\n\n      // 检查是否已存在\n      const existing = await ddnsRepo.getRecord(payload.subdomain);\n      if (existing) {\n        sendError(response, 409, 'Subdomain already allocated');\n        return;\n      }\n\n      const record = await ddnsRepo.allocateSubdomain({\n        subdomain: payload.subdomain,\n        domain: defaultDomain,\n        nodeId: payload.nodeId,\n        username: payload.username,\n        ipAddress: payload.ipAddress,\n        ipv6Address: payload.ipv6Address,\n      });\n\n      // 如果有 DNS Provider 且有 IP，创建 DNS 记录\n      if (dnsProvider && (payload.ipAddress || payload.ipv6Address)) {\n        try {\n          await dnsProvider.upsertRecord({\n            domain: defaultDomain,\n            subdomain: payload.subdomain,\n            type: payload.ipv6Address ? 'AAAA' : 'A',\n            value: payload.ipv6Address ?? payload.ipAddress!,\n            ttl: 60,\n          });\n          logger.info(`Created DNS record: ${payload.subdomain}.${defaultDomain}`);\n        } catch (dnsError) {\n          logger.error(`Failed to create DNS record: ${dnsError}`);\n          // 不回滚数据库记录，DNS 可以稍后重试\n        }\n      }\n\n      logger.info(`Allocated subdomain: ${payload.subdomain}.${defaultDomain}`);\n\n      sendJson(response, 201, {\n        success: true,\n        subdomain: record.subdomain,\n        domain: record.domain,\n        fqdn: `${record.subdomain}.${record.domain}`,\n        ipAddress: record.ipAddress,\n        ipv6Address: record.ipv6Address,\n        createdAt: record.createdAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to allocate subdomain: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * POST /api/v1/ddns/{subdomain}\n   *\n   * 更新 DNS 记录\n   *\n   * Request body:\n   * {\n   *   \"ip\": \"1.2.3.4\",\n   *   \"type\": \"A\"  // optional, default: \"A\"\n   * }\n   */\n  server.post('/api/v1/ddns/:subdomain', async (request, response, params) => {\n    const subdomain = decodeURIComponent(params.subdomain);\n\n    // 跳过 allocate 路由\n    if (subdomain === 'allocate') {\n      return;\n    }\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        ip?: string;\n        ipAddress?: string;\n        ipv6Address?: string;\n        type?: string;\n      } | undefined;\n\n      const ipAddress = payload?.ip ?? payload?.ipAddress;\n      const ipv6Address = payload?.ipv6Address;\n\n      if (!ipAddress && !ipv6Address) {\n        sendError(response, 400, 'ip or ipv6Address is required');\n        return;\n      }\n\n      // 更新数据库记录\n      const record = await ddnsRepo.updateRecordIp(subdomain, {\n        ipAddress,\n        ipv6Address,\n      });\n\n      if (!record) {\n        sendError(response, 404, 'Subdomain not found');\n        return;\n      }\n\n      // 更新 DNS 记录\n      if (dnsProvider) {\n        try {\n          const recordType = ipv6Address ? 'AAAA' : 'A';\n          const recordValue = ipv6Address ?? ipAddress!;\n\n          await dnsProvider.upsertRecord({\n            domain: record.domain,\n            subdomain: record.subdomain,\n            type: recordType,\n            value: recordValue,\n            ttl: record.ttl,\n          });\n          logger.info(`Updated DNS record: ${subdomain}.${record.domain} -> ${recordValue}`);\n        } catch (dnsError) {\n          logger.error(`Failed to update DNS record: ${dnsError}`);\n          // 数据库已更新，DNS 更新失败不影响响应\n        }\n      }\n\n      sendJson(response, 200, {\n        success: true,\n        subdomain: record.subdomain,\n        domain: record.domain,\n        fqdn: `${record.subdomain}.${record.domain}`,\n        ipAddress: record.ipAddress,\n        ipv6Address: record.ipv6Address,\n        updatedAt: record.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('banned')) {\n        sendError(response, 403, error.message);\n        return;\n      }\n      logger.error(`Failed to update DDNS record: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * GET /api/v1/ddns/{subdomain}\n   *\n   * 查询 DNS 记录\n   */\n  server.get('/api/v1/ddns/:subdomain', async (_request, response, params) => {\n    const subdomain = decodeURIComponent(params.subdomain);\n\n    try {\n      const record = await ddnsRepo.getRecord(subdomain);\n\n      if (!record) {\n        sendError(response, 404, 'Subdomain not found');\n        return;\n      }\n\n      sendJson(response, 200, {\n        subdomain: record.subdomain,\n        domain: record.domain,\n        fqdn: `${record.subdomain}.${record.domain}`,\n        ipAddress: record.ipAddress,\n        ipv6Address: record.ipv6Address,\n        recordType: record.recordType,\n        status: record.status,\n        ttl: record.ttl,\n        createdAt: record.createdAt.toISOString(),\n        updatedAt: record.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to get DDNS record: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * DELETE /api/v1/ddns/{subdomain}\n   *\n   * 释放子域名\n   */\n  server.delete('/api/v1/ddns/:subdomain', async (_request, response, params) => {\n    const subdomain = decodeURIComponent(params.subdomain);\n\n    try {\n      const record = await ddnsRepo.getRecord(subdomain);\n\n      if (!record) {\n        sendError(response, 404, 'Subdomain not found');\n        return;\n      }\n\n      // 删除 DNS 记录\n      if (dnsProvider) {\n        try {\n          await dnsProvider.deleteRecord({\n            domain: record.domain,\n            subdomain: record.subdomain,\n            type: record.recordType,\n          });\n          logger.info(`Deleted DNS record: ${subdomain}.${record.domain}`);\n        } catch (dnsError) {\n          logger.error(`Failed to delete DNS record: ${dnsError}`);\n        }\n      }\n\n      // 删除数据库记录\n      await ddnsRepo.releaseSubdomain(subdomain);\n\n      logger.info(`Released subdomain: ${subdomain}`);\n\n      sendJson(response, 200, {\n        success: true,\n        message: `Subdomain ${subdomain} released`,\n      });\n    } catch (error) {\n      logger.error(`Failed to release subdomain: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * POST /api/v1/ddns/{subdomain}/ban\n   *\n   * 封禁子域名 (管理员)\n   */\n  server.post('/api/v1/ddns/:subdomain/ban', async (request, response, params) => {\n    const subdomain = decodeURIComponent(params.subdomain);\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as { reason?: string } | undefined;\n\n      const reason = payload?.reason ?? 'Banned by administrator';\n\n      await ddnsRepo.banSubdomain(subdomain, reason);\n\n      // 删除 DNS 记录\n      if (dnsProvider) {\n        const record = await ddnsRepo.getRecord(subdomain);\n        if (record) {\n          try {\n            await dnsProvider.deleteRecord({\n              domain: record.domain,\n              subdomain: record.subdomain,\n              type: record.recordType,\n            });\n          } catch (dnsError) {\n            logger.error(`Failed to delete DNS record for banned subdomain: ${dnsError}`);\n          }\n        }\n      }\n\n      logger.warn(`Banned subdomain: ${subdomain}, reason: ${reason}`);\n\n      sendJson(response, 200, {\n        success: true,\n        message: `Subdomain ${subdomain} banned`,\n        reason,\n      });\n    } catch (error) {\n      logger.error(`Failed to ban subdomain: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  logger.info('DDNS routes registered');\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendError(response: ServerResponse, status: number, message: string): void {\n  sendJson(response, status, { error: message });\n}\n"]}

package/dist/api/handlers/DevHandler.d.ts

@@ -0,0 +1,18 @@
+import type { ApiServer } from '../ApiServer';
+import type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+import type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';
+export interface DevHandlerOptions {
+    nodeRepo: EdgeNodeRepository;
+    credentialsStore: DrizzleClientCredentialsStore;
+}
+/**
+ * 开发模式专用 Handler
+ *
+ * 仅在 NODE_ENV=development 时启用，用于集成测试
+ *
+ * POST /dev/credentials - 创建测试用 client credentials
+ * POST /dev/nodes - 创建测试用 edge node
+ * POST /dev/setup - 一键创建 credentials + node（完整测试环境）
+ * DELETE /dev/cleanup/:testId - 清理测试数据
+ */
+export declare function registerDevRoutes(server: ApiServer, options: DevHandlerOptions): void;

package/dist/api/handlers/DevHandler.js

@@ -0,0 +1,276 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDevRoutes = registerDevRoutes;
+const node_crypto_1 = require("node:crypto");
+const global_logger_factory_1 = require("global-logger-factory");
+/**
+ * 开发模式专用 Handler
+ *
+ * 仅在 NODE_ENV=development 时启用，用于集成测试
+ *
+ * POST /dev/credentials - 创建测试用 client credentials
+ * POST /dev/nodes - 创建测试用 edge node
+ * POST /dev/setup - 一键创建 credentials + node（完整测试环境）
+ * DELETE /dev/cleanup/:testId - 清理测试数据
+ */
+function registerDevRoutes(server, options) {
+    const logger = (0, global_logger_factory_1.getLoggerFor)('DevHandler');
+    const { nodeRepo, credentialsStore } = options;
+    // 安全检查：仅开发模式可用
+    const isDev = process.env.NODE_ENV === 'development';
+    if (!isDev) {
+        logger.info('Dev routes disabled (not in development mode)');
+        return;
+    }
+    logger.warn('⚠️  Dev routes enabled - DO NOT use in production!');
+    /**
+     * POST /dev/credentials
+     *
+     * 创建测试用的 client credentials
+     *
+     * Request body (optional):
+     * {
+     *   "displayName": "Test Client",
+     *   "testId": "my-test-run"  // 用于后续清理
+     * }
+     *
+     * Response:
+     * {
+     *   "clientId": "test-client-xxx",
+     *   "clientSecret": "secret-xxx",
+     *   "webId": "https://dev.local/test-xxx#me",
+     *   "testId": "my-test-run"
+     * }
+     */
+    server.post('/dev/credentials', async (request, response, _params) => {
+        const body = await readJsonBody(request);
+        const payload = body ?? {};
+        const testId = payload.testId ?? `test-${Date.now()}`;
+        const displayName = payload.displayName ?? `Dev Test ${testId}`;
+        // 生成 credentials
+        const clientId = `dev-client-${(0, node_crypto_1.randomUUID)().slice(0, 8)}`;
+        const clientSecret = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const webId = `https://dev.local/${testId}#me`;
+        try {
+            // 存储到数据库
+            await credentialsStore.store({
+                clientId,
+                clientSecret,
+                webId,
+                accountId: webId,
+                displayName,
+            });
+            logger.info(`[DEV] Created credentials: ${clientId} for ${webId}`);
+            sendJson(response, 201, {
+                clientId,
+                clientSecret,
+                webId,
+                testId,
+                displayName,
+                message: 'Development credentials created. Use these for testing.',
+            });
+        }
+        catch (error) {
+            logger.error(`[DEV] Failed to create credentials: ${error}`);
+            sendJson(response, 500, { error: 'Failed to create credentials' });
+        }
+    }, { public: true });
+    /**
+     * POST /dev/nodes
+     *
+     * 创建测试用的 edge node
+     *
+     * Request body (optional):
+     * {
+     *   "displayName": "Test Node",
+     *   "testId": "my-test-run",
+     *   "ownerWebId": "https://dev.local/test-xxx#me"  // 关联到指定用户
+     * }
+     *
+     * Response:
+     * {
+     *   "nodeId": "uuid-xxx",
+     *   "token": "node-token-xxx",
+     *   "testId": "my-test-run"
+     * }
+     */
+    server.post('/dev/nodes', async (request, response, _params) => {
+        const body = await readJsonBody(request);
+        const payload = body ?? {};
+        const testId = payload.testId ?? `test-${Date.now()}`;
+        const displayName = payload.displayName ?? `Dev Node ${testId}`;
+        const ownerWebId = payload.ownerWebId ?? `https://dev.local/${testId}#me`;
+        try {
+            // 创建节点
+            const result = await nodeRepo.createNode(displayName, ownerWebId);
+            logger.info(`[DEV] Created node: ${result.nodeId} for ${ownerWebId}`);
+            sendJson(response, 201, {
+                nodeId: result.nodeId,
+                token: result.token,
+                testId,
+                displayName,
+                ownerWebId,
+                createdAt: result.createdAt,
+                message: 'Development node created. Use nodeId + token for signaling.',
+            });
+        }
+        catch (error) {
+            logger.error(`[DEV] Failed to create node: ${error}`);
+            sendJson(response, 500, { error: 'Failed to create node' });
+        }
+    }, { public: true });
+    /**
+     * POST /dev/setup
+     *
+     * 一键创建完整测试环境：credentials + node
+     *
+     * Request body (optional):
+     * {
+     *   "testId": "my-test-run",
+     *   "displayName": "My Test"
+     * }
+     *
+     * Response:
+     * {
+     *   "testId": "my-test-run",
+     *   "credentials": { clientId, clientSecret, webId },
+     *   "node": { nodeId, token },
+     *   "signalingUrl": "ws://localhost:3001/ws/signaling",
+     *   "env": { ... }  // 可直接用于 .env 配置
+     * }
+     */
+    server.post('/dev/setup', async (request, response, _params) => {
+        const body = await readJsonBody(request);
+        const payload = body ?? {};
+        const testId = payload.testId ?? `test-${Date.now()}`;
+        const displayName = payload.displayName ?? `Test ${testId}`;
+        // 1. 创建 credentials
+        const clientId = `dev-client-${(0, node_crypto_1.randomUUID)().slice(0, 8)}`;
+        const clientSecret = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const webId = `https://dev.local/${testId}#me`;
+        // 2. 创建 node
+        try {
+            await credentialsStore.store({
+                clientId,
+                clientSecret,
+                webId,
+                accountId: webId,
+                displayName: `${displayName} Client`,
+            });
+            const nodeResult = await nodeRepo.createNode(`${displayName} Node`, webId);
+            // 生成符合 NodeTokenAuthenticator 格式的 token: username:secret
+            const formattedNodeToken = `${testId}:${nodeResult.token}`;
+            logger.info(`[DEV] Setup complete: credentials=${clientId}, node=${nodeResult.nodeId}`);
+            // 获取当前服务的基础 URL
+            const host = process.env.API_HOST ?? 'localhost';
+            const port = process.env.API_PORT ?? '3001';
+            const apiUrl = `http://${host === '0.0.0.0' ? 'localhost' : host}:${port}`;
+            sendJson(response, 201, {
+                testId,
+                credentials: {
+                    clientId,
+                    clientSecret,
+                    webId,
+                },
+                node: {
+                    nodeId: nodeResult.nodeId,
+                    token: formattedNodeToken,
+                },
+                apiUrl,
+                // 可直接导出为环境变量
+                env: {
+                    XPOD_CLIENT_ID: clientId,
+                    XPOD_CLIENT_SECRET: clientSecret,
+                    XPOD_NODE_ID: nodeResult.nodeId,
+                    XPOD_NODE_TOKEN: formattedNodeToken,
+                },
+                message: 'Development environment ready. Copy env values to your .env file or use directly.',
+            });
+        }
+        catch (error) {
+            logger.error(`[DEV] Setup failed: ${error}`);
+            sendJson(response, 500, { error: 'Failed to setup test environment' });
+        }
+    }, { public: true });
+    /**
+     * DELETE /dev/cleanup/:testId
+     *
+     * 清理指定 testId 的测试数据
+     */
+    server.delete('/dev/cleanup/:testId', async (request, response, params) => {
+        const testId = decodeURIComponent(params.testId);
+        const webId = `https://dev.local/${testId}#me`;
+        try {
+            // 清理 credentials
+            const keys = await credentialsStore.listByAccount(webId);
+            for (const key of keys) {
+                await credentialsStore.delete(key.clientId, webId);
+            }
+            // 清理 nodes
+            const nodes = await nodeRepo.listNodesByAccount(webId);
+            for (const node of nodes) {
+                await nodeRepo.deleteNode(node.nodeId);
+            }
+            logger.info(`[DEV] Cleaned up test: ${testId} (${keys.length} credentials, ${nodes.length} nodes)`);
+            sendJson(response, 200, {
+                testId,
+                deleted: {
+                    credentials: keys.length,
+                    nodes: nodes.length,
+                },
+                message: 'Test data cleaned up.',
+            });
+        }
+        catch (error) {
+            logger.error(`[DEV] Cleanup failed: ${error}`);
+            sendJson(response, 500, { error: 'Failed to cleanup test data' });
+        }
+    }, { public: true });
+    /**
+     * GET /dev/status
+     *
+     * 获取开发模式状态
+     */
+    server.get('/dev/status', async (_request, response, _params) => {
+        sendJson(response, 200, {
+            mode: 'development',
+            enabled: true,
+            endpoints: [
+                'POST /dev/credentials - Create test credentials',
+                'POST /dev/nodes - Create test node',
+                'POST /dev/setup - One-click setup (credentials + node)',
+                'DELETE /dev/cleanup/:testId - Cleanup test data',
+                'GET /dev/status - This endpoint',
+            ],
+            warning: 'These endpoints are for development only. Never expose in production!',
+        });
+    }, { public: true });
+}
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                resolve(undefined);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data, null, 2));
+}
+//# sourceMappingURL=DevHandler.js.map