@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/handlers/DevHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DevHandler.ts"],"names":[],"mappings":";;AAsBA,8CAiQC;AAtRD,6CAAsD;AACtD,iEAAqD;AAUrD;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,MAAiB,EAAE,OAA0B;IAC7E,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IAE/C,eAAe;IACf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;IAErD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAElE;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAI,IAAgC,IAAI,EAAE,CAAC;QAExD,MAAM,MAAM,GAAI,OAAO,CAAC,MAAiB,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,MAAM,WAAW,GAAI,OAAO,CAAC,WAAsB,IAAI,YAAY,MAAM,EAAE,CAAC;QAE5E,iBAAiB;QACjB,MAAM,QAAQ,GAAG,cAAc,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,qBAAqB,MAAM,KAAK,CAAC;QAE/C,IAAI,CAAC;YACH,SAAS;YACT,MAAM,gBAAgB,CAAC,KAAK,CAAC;gBAC3B,QAAQ;gBACR,YAAY;gBACZ,KAAK;gBACL,SAAS,EAAE,KAAK;gBAChB,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,QAAQ,KAAK,EAAE,CAAC,CAAC;YAEnE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ;gBACR,YAAY;gBACZ,KAAK;gBACL,MAAM;gBACN,WAAW;gBACX,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;YAC7D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAI,IAAgC,IAAI,EAAE,CAAC;QAExD,MAAM,MAAM,GAAI,OAAO,CAAC,MAAiB,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,MAAM,WAAW,GAAI,OAAO,CAAC,WAAsB,IAAI,YAAY,MAAM,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAI,OAAO,CAAC,UAAqB,IAAI,qBAAqB,MAAM,KAAK,CAAC;QAEtF,IAAI,CAAC;YACH,OAAO;YACP,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAElE,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,MAAM,QAAQ,UAAU,EAAE,CAAC,CAAC;YAEtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM;gBACN,WAAW;gBACX,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,6DAA6D;aACvE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAI,IAAgC,IAAI,EAAE,CAAC;QAExD,MAAM,MAAM,GAAI,OAAO,CAAC,MAAiB,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,MAAM,WAAW,GAAI,OAAO,CAAC,WAAsB,IAAI,QAAQ,MAAM,EAAE,CAAC;QAExE,oBAAoB;QACpB,MAAM,QAAQ,GAAG,cAAc,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,qBAAqB,MAAM,KAAK,CAAC;QAE/C,aAAa;QACb,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,CAAC;gBAC3B,QAAQ;gBACR,YAAY;gBACZ,KAAK;gBACL,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,GAAG,WAAW,SAAS;aACrC,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,GAAG,WAAW,OAAO,EAAE,KAAK,CAAC,CAAC;YAE3E,yDAAyD;YACzD,MAAM,kBAAkB,GAAG,GAAG,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YAE3D,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,UAAU,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAExF,gBAAgB;YAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;YACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC;YAC5C,MAAM,MAAM,GAAG,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YAE3E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM;gBACN,WAAW,EAAE;oBACX,QAAQ;oBACR,YAAY;oBACZ,KAAK;iBACN;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,kBAAkB;iBAC1B;gBACD,MAAM;gBACN,aAAa;gBACb,GAAG,EAAE;oBACH,cAAc,EAAE,QAAQ;oBACxB,kBAAkB,EAAE,YAAY;oBAChC,YAAY,EAAE,UAAU,CAAC,MAAM;oBAC/B,eAAe,EAAE,kBAAkB;iBACpC;gBACD,OAAO,EAAE,mFAAmF;aAC7F,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,qBAAqB,MAAM,KAAK,CAAC;QAE/C,IAAI,CAAC;YACH,iBAAiB;YACjB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YAED,WAAW;YACX,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,KAAK,IAAI,CAAC,MAAM,iBAAiB,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YAEpG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM;gBACN,OAAO,EAAE;oBACP,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,KAAK,EAAE,KAAK,CAAC,MAAM;iBACpB;gBACD,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC9D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACT,iDAAiD;gBACjD,oCAAoC;gBACpC,wDAAwD;gBACxD,iDAAiD;gBACjD,iCAAiC;aAClC;YACD,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC","sourcesContent":["import type { ServerResponse, IncomingMessage } from 'node:http';\nimport { randomBytes, randomUUID } from 'node:crypto';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\n\nexport interface DevHandlerOptions {\n  nodeRepo: EdgeNodeRepository;\n  credentialsStore: DrizzleClientCredentialsStore;\n}\n\n/**\n * 开发模式专用 Handler\n *\n * 仅在 NODE_ENV=development 时启用，用于集成测试\n *\n * POST /dev/credentials - 创建测试用 client credentials\n * POST /dev/nodes - 创建测试用 edge node\n * POST /dev/setup - 一键创建 credentials + node（完整测试环境）\n * DELETE /dev/cleanup/:testId - 清理测试数据\n */\nexport function registerDevRoutes(server: ApiServer, options: DevHandlerOptions): void {\n  const logger = getLoggerFor('DevHandler');\n  const { nodeRepo, credentialsStore } = options;\n\n  // 安全检查：仅开发模式可用\n  const isDev = process.env.NODE_ENV === 'development';\n\n  if (!isDev) {\n    logger.info('Dev routes disabled (not in development mode)');\n    return;\n  }\n\n  logger.warn('⚠️  Dev routes enabled - DO NOT use in production!');\n\n  /**\n   * POST /dev/credentials\n   *\n   * 创建测试用的 client credentials\n   *\n   * Request body (optional):\n   * {\n   *   \"displayName\": \"Test Client\",\n   *   \"testId\": \"my-test-run\"  // 用于后续清理\n   * }\n   *\n   * Response:\n   * {\n   *   \"clientId\": \"test-client-xxx\",\n   *   \"clientSecret\": \"secret-xxx\",\n   *   \"webId\": \"https://dev.local/test-xxx#me\",\n   *   \"testId\": \"my-test-run\"\n   * }\n   */\n  server.post('/dev/credentials', async (request, response, _params) => {\n    const body = await readJsonBody(request);\n    const payload = (body as Record<string, unknown>) ?? {};\n\n    const testId = (payload.testId as string) ?? `test-${Date.now()}`;\n    const displayName = (payload.displayName as string) ?? `Dev Test ${testId}`;\n\n    // 生成 credentials\n    const clientId = `dev-client-${randomUUID().slice(0, 8)}`;\n    const clientSecret = randomBytes(32).toString('base64url');\n    const webId = `https://dev.local/${testId}#me`;\n\n    try {\n      // 存储到数据库\n      await credentialsStore.store({\n        clientId,\n        clientSecret,\n        webId,\n        accountId: webId,\n        displayName,\n      });\n\n      logger.info(`[DEV] Created credentials: ${clientId} for ${webId}`);\n\n      sendJson(response, 201, {\n        clientId,\n        clientSecret,\n        webId,\n        testId,\n        displayName,\n        message: 'Development credentials created. Use these for testing.',\n      });\n    } catch (error) {\n      logger.error(`[DEV] Failed to create credentials: ${error}`);\n      sendJson(response, 500, { error: 'Failed to create credentials' });\n    }\n  }, { public: true });\n\n  /**\n   * POST /dev/nodes\n   *\n   * 创建测试用的 edge node\n   *\n   * Request body (optional):\n   * {\n   *   \"displayName\": \"Test Node\",\n   *   \"testId\": \"my-test-run\",\n   *   \"ownerWebId\": \"https://dev.local/test-xxx#me\"  // 关联到指定用户\n   * }\n   *\n   * Response:\n   * {\n   *   \"nodeId\": \"uuid-xxx\",\n   *   \"token\": \"node-token-xxx\",\n   *   \"testId\": \"my-test-run\"\n   * }\n   */\n  server.post('/dev/nodes', async (request, response, _params) => {\n    const body = await readJsonBody(request);\n    const payload = (body as Record<string, unknown>) ?? {};\n\n    const testId = (payload.testId as string) ?? `test-${Date.now()}`;\n    const displayName = (payload.displayName as string) ?? `Dev Node ${testId}`;\n    const ownerWebId = (payload.ownerWebId as string) ?? `https://dev.local/${testId}#me`;\n\n    try {\n      // 创建节点\n      const result = await nodeRepo.createNode(displayName, ownerWebId);\n\n      logger.info(`[DEV] Created node: ${result.nodeId} for ${ownerWebId}`);\n\n      sendJson(response, 201, {\n        nodeId: result.nodeId,\n        token: result.token,\n        testId,\n        displayName,\n        ownerWebId,\n        createdAt: result.createdAt,\n        message: 'Development node created. Use nodeId + token for signaling.',\n      });\n    } catch (error) {\n      logger.error(`[DEV] Failed to create node: ${error}`);\n      sendJson(response, 500, { error: 'Failed to create node' });\n    }\n  }, { public: true });\n\n  /**\n   * POST /dev/setup\n   *\n   * 一键创建完整测试环境：credentials + node\n   *\n   * Request body (optional):\n   * {\n   *   \"testId\": \"my-test-run\",\n   *   \"displayName\": \"My Test\"\n   * }\n   *\n   * Response:\n   * {\n   *   \"testId\": \"my-test-run\",\n   *   \"credentials\": { clientId, clientSecret, webId },\n   *   \"node\": { nodeId, token },\n   *   \"signalingUrl\": \"ws://localhost:3001/ws/signaling\",\n   *   \"env\": { ... }  // 可直接用于 .env 配置\n   * }\n   */\n  server.post('/dev/setup', async (request, response, _params) => {\n    const body = await readJsonBody(request);\n    const payload = (body as Record<string, unknown>) ?? {};\n\n    const testId = (payload.testId as string) ?? `test-${Date.now()}`;\n    const displayName = (payload.displayName as string) ?? `Test ${testId}`;\n\n    // 1. 创建 credentials\n    const clientId = `dev-client-${randomUUID().slice(0, 8)}`;\n    const clientSecret = randomBytes(32).toString('base64url');\n    const webId = `https://dev.local/${testId}#me`;\n\n    // 2. 创建 node\n    try {\n      await credentialsStore.store({\n        clientId,\n        clientSecret,\n        webId,\n        accountId: webId,\n        displayName: `${displayName} Client`,\n      });\n\n      const nodeResult = await nodeRepo.createNode(`${displayName} Node`, webId);\n\n      // 生成符合 NodeTokenAuthenticator 格式的 token: username:secret\n      const formattedNodeToken = `${testId}:${nodeResult.token}`;\n\n      logger.info(`[DEV] Setup complete: credentials=${clientId}, node=${nodeResult.nodeId}`);\n\n      // 获取当前服务的基础 URL\n      const host = process.env.API_HOST ?? 'localhost';\n      const port = process.env.API_PORT ?? '3001';\n      const apiUrl = `http://${host === '0.0.0.0' ? 'localhost' : host}:${port}`;\n\n      sendJson(response, 201, {\n        testId,\n        credentials: {\n          clientId,\n          clientSecret,\n          webId,\n        },\n        node: {\n          nodeId: nodeResult.nodeId,\n          token: formattedNodeToken,\n        },\n        apiUrl,\n        // 可直接导出为环境变量\n        env: {\n          XPOD_CLIENT_ID: clientId,\n          XPOD_CLIENT_SECRET: clientSecret,\n          XPOD_NODE_ID: nodeResult.nodeId,\n          XPOD_NODE_TOKEN: formattedNodeToken,\n        },\n        message: 'Development environment ready. Copy env values to your .env file or use directly.',\n      });\n    } catch (error) {\n      logger.error(`[DEV] Setup failed: ${error}`);\n      sendJson(response, 500, { error: 'Failed to setup test environment' });\n    }\n  }, { public: true });\n\n  /**\n   * DELETE /dev/cleanup/:testId\n   *\n   * 清理指定 testId 的测试数据\n   */\n  server.delete('/dev/cleanup/:testId', async (request, response, params) => {\n    const testId = decodeURIComponent(params.testId);\n    const webId = `https://dev.local/${testId}#me`;\n\n    try {\n      // 清理 credentials\n      const keys = await credentialsStore.listByAccount(webId);\n      for (const key of keys) {\n        await credentialsStore.delete(key.clientId, webId);\n      }\n\n      // 清理 nodes\n      const nodes = await nodeRepo.listNodesByAccount(webId);\n      for (const node of nodes) {\n        await nodeRepo.deleteNode(node.nodeId);\n      }\n\n      logger.info(`[DEV] Cleaned up test: ${testId} (${keys.length} credentials, ${nodes.length} nodes)`);\n\n      sendJson(response, 200, {\n        testId,\n        deleted: {\n          credentials: keys.length,\n          nodes: nodes.length,\n        },\n        message: 'Test data cleaned up.',\n      });\n    } catch (error) {\n      logger.error(`[DEV] Cleanup failed: ${error}`);\n      sendJson(response, 500, { error: 'Failed to cleanup test data' });\n    }\n  }, { public: true });\n\n  /**\n   * GET /dev/status\n   *\n   * 获取开发模式状态\n   */\n  server.get('/dev/status', async (_request, response, _params) => {\n    sendJson(response, 200, {\n      mode: 'development',\n      enabled: true,\n      endpoints: [\n        'POST /dev/credentials - Create test credentials',\n        'POST /dev/nodes - Create test node',\n        'POST /dev/setup - One-click setup (credentials + node)',\n        'DELETE /dev/cleanup/:testId - Cleanup test data',\n        'GET /dev/status - This endpoint',\n      ],\n      warning: 'These endpoints are for development only. Never expose in production!',\n    });\n  }, { public: true });\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data, null, 2));\n}\n"]}

package/dist/api/handlers/NodeHandler.d.ts

@@ -0,0 +1,16 @@
+import type { ApiServer } from '../ApiServer';
+import type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+export interface NodeHandlerOptions {
+    repository: EdgeNodeRepository;
+}
+/**
+ * Handler for edge node management API
+ *
+ * GET  /v1/nodes - List user's nodes
+ * POST /v1/nodes - Create a new node
+ * GET  /v1/nodes/:nodeId - Get node info
+ * DELETE /v1/nodes/:nodeId - Delete a node
+ *
+ * All endpoints require Solid Token (user must have a Pod)
+ */
+export declare function registerNodeRoutes(server: ApiServer, options: NodeHandlerOptions): void;

package/dist/api/handlers/NodeHandler.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerNodeRoutes = registerNodeRoutes;
+const global_logger_factory_1 = require("global-logger-factory");
+const AuthContext_1 = require("../auth/AuthContext");
+/**
+ * Handler for edge node management API
+ *
+ * GET  /v1/nodes - List user's nodes
+ * POST /v1/nodes - Create a new node
+ * GET  /v1/nodes/:nodeId - Get node info
+ * DELETE /v1/nodes/:nodeId - Delete a node
+ *
+ * All endpoints require Solid Token (user must have a Pod)
+ */
+function registerNodeRoutes(server, options) {
+    const logger = (0, global_logger_factory_1.getLoggerFor)('NodeHandler');
+    const repo = options.repository;
+    const rejectApiKey = (request, response) => {
+        const auth = request.auth;
+        if (auth && (0, AuthContext_1.isSolidAuth)(auth) && auth.viaApiKey) {
+            sendJson(response, 403, { error: 'API key is not allowed for this endpoint' });
+            return true;
+        }
+        return false;
+    };
+    // GET /v1/nodes - List user's nodes
+    server.get('/v1/nodes', async (request, response, _params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        try {
+            // Use webId as owner identifier
+            const nodes = await repo.listNodesByAccount(webId);
+            sendJson(response, 200, {
+                nodes: nodes.map(formatNodeInfo),
+                total: nodes.length,
+                timestamp: new Date().toISOString(),
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to list nodes: ${error}`);
+            sendJson(response, 500, { error: 'Failed to list nodes' });
+        }
+    });
+    // POST /api/nodes - Create a new node
+    server.post('/v1/nodes', async (request, response, _params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        console.log(`[NodeHandler] POST /v1/nodes - auth: ${JSON.stringify(auth)}, webId: ${webId}`);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        const body = await readJsonBody(request);
+        const displayName = body && typeof body === 'object'
+            ? body.displayName
+            : undefined;
+        try {
+            // Use webId as owner identifier
+            const result = await repo.createNode(displayName, webId);
+            logger.info(`Created node ${result.nodeId} for user ${webId}`);
+            sendJson(response, 201, {
+                success: true,
+                nodeId: result.nodeId,
+                token: result.token,
+                displayName,
+                createdAt: result.createdAt,
+                message: 'Edge node created. Save the token - it will not be shown again.',
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to create node: ${error}`);
+            sendJson(response, 500, { error: 'Failed to create node' });
+        }
+    });
+    // GET /api/nodes/:nodeId - Get node info
+    server.get('/v1/nodes/:nodeId', async (request, response, params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        const nodeId = decodeURIComponent(params.nodeId);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        try {
+            // Check ownership
+            const nodeOwner = await repo.getNodeOwner(nodeId);
+            if (nodeOwner !== webId) {
+                sendJson(response, 403, { error: 'Access denied' });
+                return;
+            }
+            const nodeInfo = await repo.getNodeCapabilities(nodeId);
+            if (!nodeInfo) {
+                sendJson(response, 404, { error: 'Node not found' });
+                return;
+            }
+            sendJson(response, 200, formatNodeInfo(nodeInfo));
+        }
+        catch (error) {
+            logger.error(`Failed to get node: ${error}`);
+            sendJson(response, 500, { error: 'Failed to get node info' });
+        }
+    });
+    // DELETE /api/nodes/:nodeId - Delete a node
+    server.delete('/v1/nodes/:nodeId', async (request, response, params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        const nodeId = decodeURIComponent(params.nodeId);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        try {
+            // Check ownership
+            const nodeOwner = await repo.getNodeOwner(nodeId);
+            if (nodeOwner !== webId) {
+                sendJson(response, 403, { error: 'Access denied' });
+                return;
+            }
+            const deleted = await repo.deleteNode(nodeId);
+            if (!deleted) {
+                sendJson(response, 404, { error: 'Node not found' });
+                return;
+            }
+            logger.info(`Deleted node ${nodeId}`);
+            sendJson(response, 200, { status: 'deleted', nodeId });
+        }
+        catch (error) {
+            logger.error(`Failed to delete node: ${error}`);
+            sendJson(response, 500, { error: 'Failed to delete node' });
+        }
+    });
+}
+function formatNodeInfo(node) {
+    return {
+        nodeId: node.nodeId,
+        displayName: node.displayName,
+        accessMode: node.accessMode,
+        connectivityStatus: node.connectivityStatus,
+        lastSeen: node.lastSeen?.toISOString?.() ?? node.lastSeen,
+        capabilities: {
+            structured: node.capabilities,
+            strings: node.stringCapabilities,
+        },
+    };
+}
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                resolve(undefined);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+//# sourceMappingURL=NodeHandler.js.map

package/dist/api/handlers/NodeHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/NodeHandler.ts"],"names":[],"mappings":";;AAqBA,gDAuJC;AA3KD,iEAAqD;AAIrD,qDAA4D;AAM5D;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAAC,MAAiB,EAAE,OAA2B;IAC/E,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;IAEhC,MAAM,YAAY,GAAG,CAAC,OAA6B,EAAE,QAAwB,EAAW,EAAE;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,IAAI,IAAA,yBAAW,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC3D,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAEnD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;gBAChC,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC5D,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;QAE7F,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAClD,CAAC,CAAE,IAAgC,CAAC,WAAiC;YACrE,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAEzD,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC;YAE/D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW;gBACX,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClE,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB;YAClB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrE,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB;YAClB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,IAAS;IAC/B,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC,QAAQ;QACzD,YAAY,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,kBAAkB;SACjC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { getWebId, isSolidAuth } from '../auth/AuthContext';\n\nexport interface NodeHandlerOptions {\n  repository: EdgeNodeRepository;\n}\n\n/**\n * Handler for edge node management API\n *\n * GET  /v1/nodes - List user's nodes\n * POST /v1/nodes - Create a new node\n * GET  /v1/nodes/:nodeId - Get node info\n * DELETE /v1/nodes/:nodeId - Delete a node\n *\n * All endpoints require Solid Token (user must have a Pod)\n */\nexport function registerNodeRoutes(server: ApiServer, options: NodeHandlerOptions): void {\n  const logger = getLoggerFor('NodeHandler');\n  const repo = options.repository;\n\n  const rejectApiKey = (request: AuthenticatedRequest, response: ServerResponse): boolean => {\n    const auth = request.auth;\n    if (auth && isSolidAuth(auth) && auth.viaApiKey) {\n      sendJson(response, 403, { error: 'API key is not allowed for this endpoint' });\n      return true;\n    }\n    return false;\n  };\n\n  // GET /v1/nodes - List user's nodes\n  server.get('/v1/nodes', async (request, response, _params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    try {\n      // Use webId as owner identifier\n      const nodes = await repo.listNodesByAccount(webId);\n\n      sendJson(response, 200, {\n        nodes: nodes.map(formatNodeInfo),\n        total: nodes.length,\n        timestamp: new Date().toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to list nodes: ${error}`);\n      sendJson(response, 500, { error: 'Failed to list nodes' });\n    }\n  });\n\n  // POST /api/nodes - Create a new node\n  server.post('/v1/nodes', async (request, response, _params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n\n    console.log(`[NodeHandler] POST /v1/nodes - auth: ${JSON.stringify(auth)}, webId: ${webId}`);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    const body = await readJsonBody(request);\n    const displayName = body && typeof body === 'object'\n      ? (body as Record<string, unknown>).displayName as string | undefined\n      : undefined;\n\n    try {\n      // Use webId as owner identifier\n      const result = await repo.createNode(displayName, webId);\n\n      logger.info(`Created node ${result.nodeId} for user ${webId}`);\n\n      sendJson(response, 201, {\n        success: true,\n        nodeId: result.nodeId,\n        token: result.token,\n        displayName,\n        createdAt: result.createdAt,\n        message: 'Edge node created. Save the token - it will not be shown again.',\n      });\n    } catch (error) {\n      logger.error(`Failed to create node: ${error}`);\n      sendJson(response, 500, { error: 'Failed to create node' });\n    }\n  });\n\n  // GET /api/nodes/:nodeId - Get node info\n  server.get('/v1/nodes/:nodeId', async (request, response, params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n    const nodeId = decodeURIComponent(params.nodeId);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    try {\n      // Check ownership\n      const nodeOwner = await repo.getNodeOwner(nodeId);\n      if (nodeOwner !== webId) {\n        sendJson(response, 403, { error: 'Access denied' });\n        return;\n      }\n\n      const nodeInfo = await repo.getNodeCapabilities(nodeId);\n      if (!nodeInfo) {\n        sendJson(response, 404, { error: 'Node not found' });\n        return;\n      }\n\n      sendJson(response, 200, formatNodeInfo(nodeInfo));\n    } catch (error) {\n      logger.error(`Failed to get node: ${error}`);\n      sendJson(response, 500, { error: 'Failed to get node info' });\n    }\n  });\n\n  // DELETE /api/nodes/:nodeId - Delete a node\n  server.delete('/v1/nodes/:nodeId', async (request, response, params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n    const nodeId = decodeURIComponent(params.nodeId);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    try {\n      // Check ownership\n      const nodeOwner = await repo.getNodeOwner(nodeId);\n      if (nodeOwner !== webId) {\n        sendJson(response, 403, { error: 'Access denied' });\n        return;\n      }\n\n      const deleted = await repo.deleteNode(nodeId);\n      if (!deleted) {\n        sendJson(response, 404, { error: 'Node not found' });\n        return;\n      }\n\n      logger.info(`Deleted node ${nodeId}`);\n      sendJson(response, 200, { status: 'deleted', nodeId });\n    } catch (error) {\n      logger.error(`Failed to delete node: ${error}`);\n      sendJson(response, 500, { error: 'Failed to delete node' });\n    }\n  });\n}\n\nfunction formatNodeInfo(node: any): Record<string, unknown> {\n  return {\n    nodeId: node.nodeId,\n    displayName: node.displayName,\n    accessMode: node.accessMode,\n    connectivityStatus: node.connectivityStatus,\n    lastSeen: node.lastSeen?.toISOString?.() ?? node.lastSeen,\n    capabilities: {\n      structured: node.capabilities,\n      strings: node.stringCapabilities,\n    },\n  };\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}

package/dist/api/handlers/PodManagementHandler.d.ts

@@ -0,0 +1,39 @@
+import type { ApiServer } from '../ApiServer';
+export interface PodManagementHandlerOptions {
+    /** Pod 存储根目录 */
+    rootDir: string;
+    /** 验证 IdP service token */
+    verifyServiceToken: (token: string) => Promise<boolean>;
+    /** 可选：限制允许的 pod 名称正则 */
+    podNameRegex?: RegExp;
+}
+export interface CreatePodRequest {
+    /** Pod 名称（通常是用户名） */
+    podName: string;
+    /** 可选：初始资源 */
+    initialResources?: Record<string, string>;
+}
+export interface CreatePodResponse {
+    success: boolean;
+    podUrl: string;
+    message: string;
+}
+export interface DeletePodResponse {
+    success: boolean;
+    message: string;
+}
+/**
+ * Pod Management Handler
+ *
+ * SP (Storage Provider) 端供 IdP 调用的 API。
+ * 用于创建/删除 Pod 目录。
+ *
+ * 端点:
+ * - POST /api/v1/pods - 创建 Pod
+ * - DELETE /api/v1/pods/:podName - 删除 Pod
+ *
+ * 认证:
+ * - 使用 IdP service token (Bearer)
+ * - 验证 token 是否来自信任的 IdP
+ */
+export declare function registerPodManagementRoutes(server: ApiServer, options: PodManagementHandlerOptions): void;

package/dist/api/handlers/PodManagementHandler.js

@@ -0,0 +1,294 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPodManagementRoutes = registerPodManagementRoutes;
+const global_logger_factory_1 = require("global-logger-factory");
+/**
+ * Pod Management Handler
+ *
+ * SP (Storage Provider) 端供 IdP 调用的 API。
+ * 用于创建/删除 Pod 目录。
+ *
+ * 端点:
+ * - POST /api/v1/pods - 创建 Pod
+ * - DELETE /api/v1/pods/:podName - 删除 Pod
+ *
+ * 认证:
+ * - 使用 IdP service token (Bearer)
+ * - 验证 token 是否来自信任的 IdP
+ */
+function registerPodManagementRoutes(server, options) {
+    const logger = (0, global_logger_factory_1.getLoggerFor)('PodManagementHandler');
+    const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/ } = options;
+    /**
+     * 验证 service token
+     */
+    async function authenticate(request) {
+        const authHeader = request.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            return false;
+        }
+        const token = authHeader.slice(7);
+        return verifyServiceToken(token);
+    }
+    /**
+     * 验证 pod 名称
+     */
+    function validatePodName(podName) {
+        if (!podName || podName.length < 1 || podName.length > 64) {
+            return false;
+        }
+        return podNameRegex.test(podName);
+    }
+    /**
+     * POST /api/v1/pods
+     *
+     * 创建 Pod 目录
+     *
+     * Request:
+     *   Authorization: Bearer {service_token}
+     *   Content-Type: application/json
+     *   Body: { podName: "alice", initialResources?: {...} }
+     *
+     * Response:
+     *   201: { success: true, podUrl: "https://node1.pods.site/alice/" }
+     *   400: { error: "Invalid pod name" }
+     *   401: { error: "Unauthorized" }
+     *   409: { error: "Pod already exists" }
+     */
+    server.post('/api/v1/pods', async (request, response) => {
+        // 1. 认证
+        if (!await authenticate(request)) {
+            sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });
+            return;
+        }
+        // 2. 解析请求体
+        let body;
+        try {
+            body = await readJsonBody(request);
+        }
+        catch (error) {
+            sendJson(response, 400, { error: 'Bad Request', message: 'Invalid JSON body' });
+            return;
+        }
+        const { podName, initialResources } = body;
+        // 3. 验证 pod 名称
+        if (!validatePodName(podName)) {
+            sendJson(response, 400, {
+                error: 'Bad Request',
+                message: `Invalid pod name: ${podName}. Must match ${podNameRegex.toString()}`
+            });
+            return;
+        }
+        // 4. 检查是否已存在
+        const podPath = `${rootDir}/${podName}`;
+        try {
+            const exists = await fileExists(podPath);
+            if (exists) {
+                sendJson(response, 409, { error: 'Conflict', message: `Pod ${podName} already exists` });
+                return;
+            }
+        }
+        catch (error) {
+            logger.error(`Error checking pod existence: ${error.message}`);
+            sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });
+            return;
+        }
+        // 5. 创建 Pod 目录
+        try {
+            await createPodDirectory(podPath, initialResources);
+            logger.info(`Created pod: ${podName} at ${podPath}`);
+            // 构建 pod URL (基于请求的 host)
+            const host = request.headers.host || 'localhost';
+            const podUrl = `https://${host}/${podName}/`;
+            sendJson(response, 201, {
+                success: true,
+                podUrl,
+                message: `Pod ${podName} created successfully`
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to create pod: ${error.message}`);
+            sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to create pod' });
+        }
+    }, { public: true }); // Service token auth handled internally
+    /**
+     * DELETE /api/v1/pods/:podName
+     *
+     * 删除 Pod 目录
+     *
+     * Request:
+     *   Authorization: Bearer {service_token}
+     *
+     * Response:
+     *   200: { success: true }
+     *   401: { error: "Unauthorized" }
+     *   404: { error: "Pod not found" }
+     */
+    server.delete('/api/v1/pods/:podName', async (request, response, params) => {
+        // 1. 认证
+        if (!await authenticate(request)) {
+            sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });
+            return;
+        }
+        const podName = decodeURIComponent(params.podName);
+        // 2. 验证 pod 名称
+        if (!validatePodName(podName)) {
+            sendJson(response, 400, { error: 'Bad Request', message: `Invalid pod name: ${podName}` });
+            return;
+        }
+        // 3. 检查是否存在
+        const podPath = `${rootDir}/${podName}`;
+        try {
+            const exists = await fileExists(podPath);
+            if (!exists) {
+                sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });
+                return;
+            }
+        }
+        catch (error) {
+            logger.error(`Error checking pod existence: ${error.message}`);
+            sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });
+            return;
+        }
+        // 4. 删除 Pod 目录
+        try {
+            await deletePodDirectory(podPath);
+            logger.info(`Deleted pod: ${podName}`);
+            sendJson(response, 200, {
+                success: true,
+                message: `Pod ${podName} deleted successfully`
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to delete pod: ${error.message}`);
+            sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to delete pod' });
+        }
+    }, { public: true });
+    /**
+     * GET /api/v1/pods/:podName
+     *
+     * 获取 Pod 信息（存在性检查）
+     */
+    server.get('/api/v1/pods/:podName', async (request, response, params) => {
+        // 1. 认证
+        if (!await authenticate(request)) {
+            sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });
+            return;
+        }
+        const podName = decodeURIComponent(params.podName);
+        const podPath = `${rootDir}/${podName}`;
+        try {
+            const exists = await fileExists(podPath);
+            if (!exists) {
+                sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });
+                return;
+            }
+            const host = request.headers.host || 'localhost';
+            const podUrl = `https://${host}/${podName}/`;
+            sendJson(response, 200, {
+                exists: true,
+                podName,
+                podUrl,
+                storagePath: podPath
+            });
+        }
+        catch (error) {
+            logger.error(`Error getting pod info: ${error.message}`);
+            sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to get pod info' });
+        }
+    }, { public: true });
+    logger.info(`Pod management routes registered with rootDir: ${rootDir}`);
+}
+/**
+ * 读取 JSON 请求体
+ */
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve({});
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+/**
+ * 发送 JSON 响应
+ */
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+/**
+ * 检查文件/目录是否存在
+ */
+async function fileExists(path) {
+    const { stat } = await Promise.resolve().then(() => __importStar(require('node:fs/promises')));
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * 创建 Pod 目录
+ */
+async function createPodDirectory(podPath, initialResources) {
+    const { mkdir, writeFile } = await Promise.resolve().then(() => __importStar(require('node:fs/promises')));
+    const { join } = await Promise.resolve().then(() => __importStar(require('node:path')));
+    // 创建目录
+    await mkdir(podPath, { recursive: true });
+    // 创建初始资源
+    if (initialResources) {
+        for (const [filename, content] of Object.entries(initialResources)) {
+            const filePath = join(podPath, filename);
+            await writeFile(filePath, content, 'utf8');
+        }
+    }
+}
+/**
+ * 删除 Pod 目录
+ */
+async function deletePodDirectory(podPath) {
+    const { rm } = await Promise.resolve().then(() => __importStar(require('node:fs/promises')));
+    await rm(podPath, { recursive: true, force: true });
+}
+//# sourceMappingURL=PodManagementHandler.js.map

package/dist/api/handlers/PodManagementHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PodManagementHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/PodManagementHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,kEAyMC;AArPD,iEAAqD;AA8BrD;;;;;;;;;;;;;GAaG;AACH,SAAgB,2BAA2B,CACzC,MAAiB,EACjB,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,sBAAsB,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAEnF;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAAwB;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,SAAS,eAAe,CAAC,OAAe;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,WAAW;QACX,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAqB,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;QAE3C,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,qBAAqB,OAAO,gBAAgB,YAAY,CAAC,QAAQ,EAAE,EAAE;aAC/E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,OAAO,iBAAiB,EAAE,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;YAErD,0BAA0B;YAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,wCAAwC;IAE9D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YAEvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,IAAI,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAyC;IAEzC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;IAE3C,OAAO;IACP,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,SAAS;IACT,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAChD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC","sourcesContent":["import type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\n\nexport interface PodManagementHandlerOptions {\n  /** Pod 存储根目录 */\n  rootDir: string;\n  /** 验证 IdP service token */\n  verifyServiceToken: (token: string) => Promise<boolean>;\n  /** 可选：限制允许的 pod 名称正则 */\n  podNameRegex?: RegExp;\n}\n\nexport interface CreatePodRequest {\n  /** Pod 名称（通常是用户名） */\n  podName: string;\n  /** 可选：初始资源 */\n  initialResources?: Record<string, string>;\n}\n\nexport interface CreatePodResponse {\n  success: boolean;\n  podUrl: string;\n  message: string;\n}\n\nexport interface DeletePodResponse {\n  success: boolean;\n  message: string;\n}\n\n/**\n * Pod Management Handler\n *\n * SP (Storage Provider) 端供 IdP 调用的 API。\n * 用于创建/删除 Pod 目录。\n *\n * 端点:\n * - POST /api/v1/pods - 创建 Pod\n * - DELETE /api/v1/pods/:podName - 删除 Pod\n *\n * 认证:\n * - 使用 IdP service token (Bearer)\n * - 验证 token 是否来自信任的 IdP\n */\nexport function registerPodManagementRoutes(\n  server: ApiServer,\n  options: PodManagementHandlerOptions\n): void {\n  const logger = getLoggerFor('PodManagementHandler');\n  const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/ } = options;\n\n  /**\n   * 验证 service token\n   */\n  async function authenticate(request: IncomingMessage): Promise<boolean> {\n    const authHeader = request.headers.authorization;\n    if (!authHeader || !authHeader.startsWith('Bearer ')) {\n      return false;\n    }\n    const token = authHeader.slice(7);\n    return verifyServiceToken(token);\n  }\n\n  /**\n   * 验证 pod 名称\n   */\n  function validatePodName(podName: string): boolean {\n    if (!podName || podName.length < 1 || podName.length > 64) {\n      return false;\n    }\n    return podNameRegex.test(podName);\n  }\n\n  /**\n   * POST /api/v1/pods\n   *\n   * 创建 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *   Content-Type: application/json\n   *   Body: { podName: \"alice\", initialResources?: {...} }\n   *\n   * Response:\n   *   201: { success: true, podUrl: \"https://node1.pods.site/alice/\" }\n   *   400: { error: \"Invalid pod name\" }\n   *   401: { error: \"Unauthorized\" }\n   *   409: { error: \"Pod already exists\" }\n   */\n  server.post('/api/v1/pods', async (request, response) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    // 2. 解析请求体\n    let body: CreatePodRequest;\n    try {\n      body = await readJsonBody(request) as CreatePodRequest;\n    } catch (error) {\n      sendJson(response, 400, { error: 'Bad Request', message: 'Invalid JSON body' });\n      return;\n    }\n\n    const { podName, initialResources } = body;\n\n    // 3. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, {\n        error: 'Bad Request',\n        message: `Invalid pod name: ${podName}. Must match ${podNameRegex.toString()}`\n      });\n      return;\n    }\n\n    // 4. 检查是否已存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (exists) {\n        sendJson(response, 409, { error: 'Conflict', message: `Pod ${podName} already exists` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 5. 创建 Pod 目录\n    try {\n      await createPodDirectory(podPath, initialResources);\n      logger.info(`Created pod: ${podName} at ${podPath}`);\n\n      // 构建 pod URL (基于请求的 host)\n      const host = request.headers.host || 'localhost';\n      const podUrl = `https://${host}/${podName}/`;\n\n      sendJson(response, 201, {\n        success: true,\n        podUrl,\n        message: `Pod ${podName} created successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to create pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to create pod' });\n    }\n  }, { public: true }); // Service token auth handled internally\n\n  /**\n   * DELETE /api/v1/pods/:podName\n   *\n   * 删除 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *\n   * Response:\n   *   200: { success: true }\n   *   401: { error: \"Unauthorized\" }\n   *   404: { error: \"Pod not found\" }\n   */\n  server.delete('/api/v1/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n\n    // 2. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, { error: 'Bad Request', message: `Invalid pod name: ${podName}` });\n      return;\n    }\n\n    // 3. 检查是否存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 4. 删除 Pod 目录\n    try {\n      await deletePodDirectory(podPath);\n      logger.info(`Deleted pod: ${podName}`);\n\n      sendJson(response, 200, {\n        success: true,\n        message: `Pod ${podName} deleted successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to delete pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to delete pod' });\n    }\n  }, { public: true });\n\n  /**\n   * GET /api/v1/pods/:podName\n   *\n   * 获取 Pod 信息（存在性检查）\n   */\n  server.get('/api/v1/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n    const podPath = `${rootDir}/${podName}`;\n\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n\n      const host = request.headers.host || 'localhost';\n      const podUrl = `https://${host}/${podName}/`;\n\n      sendJson(response, 200, {\n        exists: true,\n        podName,\n        podUrl,\n        storagePath: podPath\n      });\n    } catch (error) {\n      logger.error(`Error getting pod info: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to get pod info' });\n    }\n  }, { public: true });\n\n  logger.info(`Pod management routes registered with rootDir: ${rootDir}`);\n}\n\n/**\n * 读取 JSON 请求体\n */\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve({});\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch (error) {\n        reject(error);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\n/**\n * 发送 JSON 响应\n */\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\n/**\n * 检查文件/目录是否存在\n */\nasync function fileExists(path: string): Promise<boolean> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * 创建 Pod 目录\n */\nasync function createPodDirectory(\n  podPath: string,\n  initialResources?: Record<string, string>\n): Promise<void> {\n  const { mkdir, writeFile } = await import('node:fs/promises');\n  const { join } = await import('node:path');\n\n  // 创建目录\n  await mkdir(podPath, { recursive: true });\n\n  // 创建初始资源\n  if (initialResources) {\n    for (const [filename, content] of Object.entries(initialResources)) {\n      const filePath = join(podPath, filename);\n      await writeFile(filePath, content, 'utf8');\n    }\n  }\n}\n\n/**\n * 删除 Pod 目录\n */\nasync function deletePodDirectory(podPath: string): Promise<void> {\n  const { rm } = await import('node:fs/promises');\n  await rm(podPath, { recursive: true, force: true });\n}\n"]}