@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/document/JinaDocumentParser.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * JinaDocumentParser - 基于 JINA Reader API 的文档解析器
+ *
+ * 使用 JINA Reader API (https://r.jina.ai/) 将各种格式的文档转换为 Markdown
+ * 支持：PDF, Office 文档, HTML, 图片等
+ *
+ * @see https://jina.ai/reader/
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JinaDocumentParser = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+/**
+ * JINA Reader API 文档解析器
+ */
+class JinaDocumentParser {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.apiKey = options.apiKey;
+        this.baseUrl = options.baseUrl ?? 'https://r.jina.ai';
+        this.defaultTimeout = options.defaultTimeout ?? 30000;
+    }
+    /**
+     * 解析文档为 Markdown
+     */
+    async parse(url, options) {
+        const timeout = options?.timeout ?? this.defaultTimeout;
+        this.logger.debug(`Parsing document: ${url}`);
+        try {
+            // 构建 JINA Reader URL
+            const readerUrl = `${this.baseUrl}/${encodeURIComponent(url)}`;
+            // 创建 AbortController 用于超时控制
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeout);
+            const headers = {
+                Authorization: `Bearer ${this.apiKey}`,
+                Accept: 'text/markdown',
+                'X-Return-Format': 'markdown',
+            };
+            // 如果需要包含图片描述
+            if (options?.includeImages) {
+                headers['X-With-Images-Summary'] = 'true';
+            }
+            // 如果需要包含链接
+            if (options?.includeLinks !== false) {
+                headers['X-With-Links-Summary'] = 'true';
+            }
+            const response = await fetch(readerUrl, {
+                method: 'GET',
+                headers,
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            if (!response.ok) {
+                const errorText = await response.text();
+                throw new Error(`JINA parse failed: ${response.status} ${errorText}`);
+            }
+            const markdown = await response.text();
+            // 提取元数据（从 Markdown 头部）
+            const metadata = this.extractMetadata(markdown, url);
+            this.logger.info(`Parsed document: ${url}, ${markdown.length} chars`);
+            return {
+                markdown,
+                metadata,
+                rawUrl: url,
+            };
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === 'AbortError') {
+                throw new Error(`Document parsing timed out after ${timeout}ms: ${url}`);
+            }
+            this.logger.error(`Failed to parse document ${url}: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * 检查是否支持该 URL
+     * JINA Reader 支持大多数 URL
+     */
+    supports(url) {
+        try {
+            const parsed = new URL(url);
+            // 支持 http 和 https
+            return parsed.protocol === 'http:' || parsed.protocol === 'https:';
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * 从 Markdown 内容中提取元数据
+     */
+    extractMetadata(markdown, url) {
+        const metadata = {
+            url,
+        };
+        // 尝试从 YAML front matter 提取
+        const frontMatterMatch = markdown.match(/^---\n([\s\S]*?)\n---/);
+        if (frontMatterMatch) {
+            const frontMatter = frontMatterMatch[1];
+            // 提取 title
+            const titleMatch = frontMatter.match(/^title:\s*(.+)$/m);
+            if (titleMatch) {
+                metadata.title = titleMatch[1].replace(/^["']|["']$/g, '');
+            }
+            // 提取 description
+            const descMatch = frontMatter.match(/^description:\s*(.+)$/m);
+            if (descMatch) {
+                metadata.description = descMatch[1].replace(/^["']|["']$/g, '');
+            }
+        }
+        // 如果没有从 front matter 获取 title，尝试从第一个 H1 获取
+        if (!metadata.title) {
+            const h1Match = markdown.match(/^#\s+(.+)$/m);
+            if (h1Match) {
+                metadata.title = h1Match[1];
+            }
+        }
+        // 计算字数（简单估算）
+        const textContent = markdown
+            .replace(/```[\s\S]*?```/g, '') // 移除代码块
+            .replace(/[#*_`\[\]()]/g, '') // 移除 Markdown 标记
+            .trim();
+        metadata.wordCount = textContent.split(/\s+/).filter(Boolean).length;
+        return metadata;
+    }
+}
+exports.JinaDocumentParser = JinaDocumentParser;
+//# sourceMappingURL=JinaDocumentParser.js.map

package/dist/document/JinaDocumentParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JinaDocumentParser.js","sourceRoot":"","sources":["../../src/document/JinaDocumentParser.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,iEAAqD;AAYrD;;GAEG;AACH,MAAa,kBAAkB;IAO7B,YAAmB,OAAkC;QANlC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC;QACtD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAsB;QACpD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAE/D,4BAA4B;YAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhE,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,MAAM,EAAE,eAAe;gBACvB,iBAAiB,EAAE,UAAU;aAC9B,CAAC;YAEF,aAAa;YACb,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;gBAC3B,OAAO,CAAC,uBAAuB,CAAC,GAAG,MAAM,CAAC;YAC5C,CAAC;YAED,WAAW;YACX,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC;YAC3C,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEvC,uBAAuB;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAErD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,GAAG,KAAK,QAAQ,CAAC,MAAM,QAAQ,CAAC,CAAC;YAEtE,OAAO;gBACL,QAAQ;gBACR,QAAQ;gBACR,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,OAAO,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,QAAQ,CAAC,GAAW;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,kBAAkB;YAClB,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,QAAgB,EAChB,GAAW;QAEX,MAAM,QAAQ,GAA+B;YAC3C,GAAG;SACJ,CAAC;QAEF,2BAA2B;QAC3B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjE,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAExC,WAAW;YACX,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACzD,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,iBAAiB;YACjB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,aAAa;QACb,MAAM,WAAW,GAAG,QAAQ;aACzB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,QAAQ;aACvC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,iBAAiB;aAC9C,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAErE,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA3ID,gDA2IC","sourcesContent":["/**\n * JinaDocumentParser - 基于 JINA Reader API 的文档解析器\n *\n * 使用 JINA Reader API (https://r.jina.ai/) 将各种格式的文档转换为 Markdown\n * 支持：PDF, Office 文档, HTML, 图片等\n *\n * @see https://jina.ai/reader/\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { DocumentParser, ParsedDocument, ParseOptions } from './DocumentParser';\n\nexport interface JinaDocumentParserOptions {\n  /** JINA API Key */\n  apiKey: string;\n  /** 自定义 API 端点（默认 https://r.jina.ai） */\n  baseUrl?: string;\n  /** 默认超时时间（毫秒） */\n  defaultTimeout?: number;\n}\n\n/**\n * JINA Reader API 文档解析器\n */\nexport class JinaDocumentParser implements DocumentParser {\n  protected readonly logger = getLoggerFor(this);\n\n  private readonly apiKey: string;\n  private readonly baseUrl: string;\n  private readonly defaultTimeout: number;\n\n  public constructor(options: JinaDocumentParserOptions) {\n    this.apiKey = options.apiKey;\n    this.baseUrl = options.baseUrl ?? 'https://r.jina.ai';\n    this.defaultTimeout = options.defaultTimeout ?? 30000;\n  }\n\n  /**\n   * 解析文档为 Markdown\n   */\n  public async parse(url: string, options?: ParseOptions): Promise<ParsedDocument> {\n    const timeout = options?.timeout ?? this.defaultTimeout;\n\n    this.logger.debug(`Parsing document: ${url}`);\n\n    try {\n      // 构建 JINA Reader URL\n      const readerUrl = `${this.baseUrl}/${encodeURIComponent(url)}`;\n\n      // 创建 AbortController 用于超时控制\n      const controller = new AbortController();\n      const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n      const headers: Record<string, string> = {\n        Authorization: `Bearer ${this.apiKey}`,\n        Accept: 'text/markdown',\n        'X-Return-Format': 'markdown',\n      };\n\n      // 如果需要包含图片描述\n      if (options?.includeImages) {\n        headers['X-With-Images-Summary'] = 'true';\n      }\n\n      // 如果需要包含链接\n      if (options?.includeLinks !== false) {\n        headers['X-With-Links-Summary'] = 'true';\n      }\n\n      const response = await fetch(readerUrl, {\n        method: 'GET',\n        headers,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      if (!response.ok) {\n        const errorText = await response.text();\n        throw new Error(`JINA parse failed: ${response.status} ${errorText}`);\n      }\n\n      const markdown = await response.text();\n\n      // 提取元数据（从 Markdown 头部）\n      const metadata = this.extractMetadata(markdown, url);\n\n      this.logger.info(`Parsed document: ${url}, ${markdown.length} chars`);\n\n      return {\n        markdown,\n        metadata,\n        rawUrl: url,\n      };\n    } catch (error) {\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new Error(`Document parsing timed out after ${timeout}ms: ${url}`);\n      }\n      this.logger.error(`Failed to parse document ${url}: ${error}`);\n      throw error;\n    }\n  }\n\n  /**\n   * 检查是否支持该 URL\n   * JINA Reader 支持大多数 URL\n   */\n  public supports(url: string): boolean {\n    try {\n      const parsed = new URL(url);\n      // 支持 http 和 https\n      return parsed.protocol === 'http:' || parsed.protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * 从 Markdown 内容中提取元数据\n   */\n  private extractMetadata(\n    markdown: string,\n    url: string,\n  ): ParsedDocument['metadata'] {\n    const metadata: ParsedDocument['metadata'] = {\n      url,\n    };\n\n    // 尝试从 YAML front matter 提取\n    const frontMatterMatch = markdown.match(/^---\\n([\\s\\S]*?)\\n---/);\n    if (frontMatterMatch) {\n      const frontMatter = frontMatterMatch[1];\n\n      // 提取 title\n      const titleMatch = frontMatter.match(/^title:\\s*(.+)$/m);\n      if (titleMatch) {\n        metadata.title = titleMatch[1].replace(/^[\"']|[\"']$/g, '');\n      }\n\n      // 提取 description\n      const descMatch = frontMatter.match(/^description:\\s*(.+)$/m);\n      if (descMatch) {\n        metadata.description = descMatch[1].replace(/^[\"']|[\"']$/g, '');\n      }\n    }\n\n    // 如果没有从 front matter 获取 title，尝试从第一个 H1 获取\n    if (!metadata.title) {\n      const h1Match = markdown.match(/^#\\s+(.+)$/m);\n      if (h1Match) {\n        metadata.title = h1Match[1];\n      }\n    }\n\n    // 计算字数（简单估算）\n    const textContent = markdown\n      .replace(/```[\\s\\S]*?```/g, '') // 移除代码块\n      .replace(/[#*_`\\[\\]()]/g, '') // 移除 Markdown 标记\n      .trim();\n    metadata.wordCount = textContent.split(/\\s+/).filter(Boolean).length;\n\n    return metadata;\n  }\n}\n"]}

package/dist/document/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Document module - 文档解析和分块
+ */
+export * from './DocumentParser';
+export * from './Chunker';
+export * from './JinaDocumentParser';
+export * from './HeadingChunker';

package/dist/document/index.js

@@ -0,0 +1,26 @@
+"use strict";
+/**
+ * Document module - 文档解析和分块
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// 接口
+__exportStar(require("./DocumentParser"), exports);
+__exportStar(require("./Chunker"), exports);
+// 实现
+__exportStar(require("./JinaDocumentParser"), exports);
+__exportStar(require("./HeadingChunker"), exports);
+//# sourceMappingURL=index.js.map

package/dist/document/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/document/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,KAAK;AACL,mDAAiC;AACjC,4CAA0B;AAE1B,KAAK;AACL,uDAAqC;AACrC,mDAAiC","sourcesContent":["/**\n * Document module - 文档解析和分块\n */\n\n// 接口\nexport * from './DocumentParser';\nexport * from './Chunker';\n\n// 实现\nexport * from './JinaDocumentParser';\nexport * from './HeadingChunker';\n"]}

package/dist/edge/DdnsManager.d.ts

@@ -0,0 +1,53 @@
+/**
+ * DDNS Manager for Local Managed Mode
+ *
+ * 负责在托管式 Local 模式下：
+ * 1. 启动时自动向 Cloud 注册并分配 DDNS 子域名
+ * 2. 定期检测本机 IP 变化并更新 DDNS 记录
+ */
+import type { SubdomainClient } from '../subdomain/SubdomainClient';
+import type { EdgeNodeCapabilityDetector } from './EdgeNodeCapabilityDetector';
+export interface DdnsManagerOptions {
+    /** SubdomainClient 实例 */
+    client: SubdomainClient;
+    /** 网络检测器 */
+    detector: EdgeNodeCapabilityDetector;
+    /** 要分配的子域名 (通常从 Node Token 解析) */
+    subdomain: string;
+    /** IP 检测和更新间隔 (ms) */
+    intervalMs?: number;
+    /** 是否在启动时自动分配子域名 */
+    autoAllocate?: boolean;
+}
+export declare class DdnsManager {
+    private readonly logger;
+    private readonly client;
+    private readonly detector;
+    private readonly subdomain;
+    private readonly intervalMs;
+    private readonly autoAllocate;
+    private interval?;
+    private lastIpv4?;
+    private lastIpv6?;
+    private allocated;
+    constructor(options: DdnsManagerOptions);
+    /**
+     * 启动 DDNS 管理
+     */
+    start(): Promise<void>;
+    /**
+     * 停止 DDNS 管理
+     */
+    stop(): void;
+    /**
+     * 获取当前 FQDN
+     */
+    getFqdn(): string | undefined;
+    /**
+     * 是否已分配子域名
+     */
+    isAllocated(): boolean;
+    private runCycle;
+    private allocateSubdomain;
+    private updateDdns;
+}

package/dist/edge/DdnsManager.js

@@ -0,0 +1,153 @@
+"use strict";
+/**
+ * DDNS Manager for Local Managed Mode
+ *
+ * 负责在托管式 Local 模式下：
+ * 1. 启动时自动向 Cloud 注册并分配 DDNS 子域名
+ * 2. 定期检测本机 IP 变化并更新 DDNS 记录
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DdnsManager = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+class DdnsManager {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.allocated = false;
+        this.client = options.client;
+        this.detector = options.detector;
+        this.subdomain = options.subdomain;
+        this.intervalMs = options.intervalMs ?? 60_000;
+        this.autoAllocate = options.autoAllocate ?? true;
+    }
+    /**
+     * 启动 DDNS 管理
+     */
+    async start() {
+        if (this.interval) {
+            return;
+        }
+        this.logger.info(`Starting DDNS manager for subdomain: ${this.subdomain}`);
+        // 初始检测并注册
+        await this.runCycle();
+        // 定期检测 IP 变化
+        this.interval = setInterval(() => this.runCycle(), this.intervalMs);
+    }
+    /**
+     * 停止 DDNS 管理
+     */
+    stop() {
+        if (this.interval) {
+            clearInterval(this.interval);
+            this.interval = undefined;
+        }
+        this.logger.info('DDNS manager stopped');
+    }
+    /**
+     * 获取当前 FQDN
+     */
+    getFqdn() {
+        if (!this.allocated) {
+            return undefined;
+        }
+        // 需要从 Cloud 获取实际的 domain
+        return undefined;
+    }
+    /**
+     * 是否已分配子域名
+     */
+    isAllocated() {
+        return this.allocated;
+    }
+    async runCycle() {
+        try {
+            // 1. 检测本机 IP
+            const netInfo = await this.detector.detectNetworkAddresses();
+            const ipv4 = netInfo.ipv4Public ?? netInfo.ipv4;
+            const ipv6 = netInfo.ipv6Public ?? netInfo.ipv6;
+            // 2. 如果尚未分配，先尝试分配
+            if (!this.allocated && this.autoAllocate) {
+                await this.allocateSubdomain(ipv4, ipv6);
+            }
+            // 3. 如果已分配，检查 IP 是否变化
+            if (this.allocated) {
+                const ipChanged = ipv4 !== this.lastIpv4 || ipv6 !== this.lastIpv6;
+                if (ipChanged) {
+                    await this.updateDdns(ipv4, ipv6);
+                }
+            }
+        }
+        catch (error) {
+            this.logger.error(`DDNS cycle failed: ${error.message}`);
+        }
+    }
+    async allocateSubdomain(ipv4, ipv6) {
+        try {
+            // 先检查是否已存在
+            const existing = await this.client.getDdns(this.subdomain);
+            if (existing) {
+                this.logger.info(`DDNS subdomain already allocated: ${existing.fqdn}`);
+                this.allocated = true;
+                this.lastIpv4 = existing.ipAddress;
+                this.lastIpv6 = existing.ipv6Address;
+                // 如果 IP 不同，更新
+                if (existing.ipAddress !== ipv4 || existing.ipv6Address !== ipv6) {
+                    await this.updateDdns(ipv4, ipv6);
+                }
+                return;
+            }
+            // 分配新子域名
+            this.logger.info(`Allocating DDNS subdomain: ${this.subdomain}`);
+            const result = await this.client.allocateDdns({
+                subdomain: this.subdomain,
+                ipAddress: ipv4,
+                ipv6Address: ipv6,
+            });
+            if (result.success) {
+                this.logger.info(`DDNS allocated: ${result.fqdn}`);
+                this.allocated = true;
+                this.lastIpv4 = ipv4;
+                this.lastIpv6 = ipv6;
+            }
+        }
+        catch (error) {
+            const message = error.message;
+            if (message.includes('409') || message.includes('already')) {
+                // 子域名已被占用，可能是之前注册的
+                this.logger.warn(`Subdomain ${this.subdomain} already taken, trying to claim...`);
+                // 尝试获取现有记录
+                const existing = await this.client.getDdns(this.subdomain);
+                if (existing) {
+                    this.allocated = true;
+                    this.lastIpv4 = existing.ipAddress;
+                    this.lastIpv6 = existing.ipv6Address;
+                }
+            }
+            else {
+                this.logger.error(`Failed to allocate DDNS: ${message}`);
+            }
+        }
+    }
+    async updateDdns(ipv4, ipv6) {
+        if (!ipv4 && !ipv6) {
+            this.logger.debug('No IP address to update');
+            return;
+        }
+        try {
+            this.logger.info(`Updating DDNS: ${this.subdomain} -> IPv4=${ipv4 ?? 'none'}, IPv6=${ipv6 ?? 'none'}`);
+            const result = await this.client.updateDdns(this.subdomain, {
+                ipAddress: ipv4,
+                ipv6Address: ipv6,
+            });
+            if (result.success) {
+                this.lastIpv4 = ipv4;
+                this.lastIpv6 = ipv6;
+                this.logger.info(`DDNS updated: ${result.fqdn}`);
+            }
+        }
+        catch (error) {
+            this.logger.error(`Failed to update DDNS: ${error.message}`);
+        }
+    }
+}
+exports.DdnsManager = DdnsManager;
+//# sourceMappingURL=DdnsManager.js.map

package/dist/edge/DdnsManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DdnsManager.js","sourceRoot":"","sources":["../../src/edge/DdnsManager.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,iEAAqD;AAqBrD,MAAa,WAAW;IAatB,YAAmB,OAA2B;QAZ7B,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAUrC,cAAS,GAAG,KAAK,CAAC;QAGxB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3E,UAAU;QACV,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEtB,aAAa;QACb,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACI,IAAI;QACT,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,OAAO;QACZ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,yBAAyB;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,WAAW;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC;YACH,aAAa;YACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAEhD,kBAAkB;YAClB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC;gBACnE,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,IAAa,EAAE,IAAa;QAC1D,IAAI,CAAC;YACH,WAAW;YACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;gBACnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;gBAErC,cAAc;gBACd,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBACjE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO;YACT,CAAC;YAED,SAAS;YACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAC;YACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,mBAAmB;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,oCAAoC,CAAC,CAAC;gBAClF,WAAW;gBACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;oBACnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;gBACvC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAa,EAAE,IAAa;QACnD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,YAAY,IAAI,IAAI,MAAM,UAAU,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;YAEvG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE;gBAC1D,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA2B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAnKD,kCAmKC","sourcesContent":["/**\n * DDNS Manager for Local Managed Mode\n *\n * 负责在托管式 Local 模式下：\n * 1. 启动时自动向 Cloud 注册并分配 DDNS 子域名\n * 2. 定期检测本机 IP 变化并更新 DDNS 记录\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { SubdomainClient } from '../subdomain/SubdomainClient';\nimport type { EdgeNodeCapabilityDetector, NetworkAddressInfo } from './EdgeNodeCapabilityDetector';\n\nexport interface DdnsManagerOptions {\n  /** SubdomainClient 实例 */\n  client: SubdomainClient;\n\n  /** 网络检测器 */\n  detector: EdgeNodeCapabilityDetector;\n\n  /** 要分配的子域名 (通常从 Node Token 解析) */\n  subdomain: string;\n\n  /** IP 检测和更新间隔 (ms) */\n  intervalMs?: number;\n\n  /** 是否在启动时自动分配子域名 */\n  autoAllocate?: boolean;\n}\n\nexport class DdnsManager {\n  private readonly logger = getLoggerFor(this);\n  private readonly client: SubdomainClient;\n  private readonly detector: EdgeNodeCapabilityDetector;\n  private readonly subdomain: string;\n  private readonly intervalMs: number;\n  private readonly autoAllocate: boolean;\n\n  private interval?: NodeJS.Timeout;\n  private lastIpv4?: string;\n  private lastIpv6?: string;\n  private allocated = false;\n\n  public constructor(options: DdnsManagerOptions) {\n    this.client = options.client;\n    this.detector = options.detector;\n    this.subdomain = options.subdomain;\n    this.intervalMs = options.intervalMs ?? 60_000;\n    this.autoAllocate = options.autoAllocate ?? true;\n  }\n\n  /**\n   * 启动 DDNS 管理\n   */\n  public async start(): Promise<void> {\n    if (this.interval) {\n      return;\n    }\n\n    this.logger.info(`Starting DDNS manager for subdomain: ${this.subdomain}`);\n\n    // 初始检测并注册\n    await this.runCycle();\n\n    // 定期检测 IP 变化\n    this.interval = setInterval(() => this.runCycle(), this.intervalMs);\n  }\n\n  /**\n   * 停止 DDNS 管理\n   */\n  public stop(): void {\n    if (this.interval) {\n      clearInterval(this.interval);\n      this.interval = undefined;\n    }\n    this.logger.info('DDNS manager stopped');\n  }\n\n  /**\n   * 获取当前 FQDN\n   */\n  public getFqdn(): string | undefined {\n    if (!this.allocated) {\n      return undefined;\n    }\n    // 需要从 Cloud 获取实际的 domain\n    return undefined;\n  }\n\n  /**\n   * 是否已分配子域名\n   */\n  public isAllocated(): boolean {\n    return this.allocated;\n  }\n\n  private async runCycle(): Promise<void> {\n    try {\n      // 1. 检测本机 IP\n      const netInfo = await this.detector.detectNetworkAddresses();\n      const ipv4 = netInfo.ipv4Public ?? netInfo.ipv4;\n      const ipv6 = netInfo.ipv6Public ?? netInfo.ipv6;\n\n      // 2. 如果尚未分配，先尝试分配\n      if (!this.allocated && this.autoAllocate) {\n        await this.allocateSubdomain(ipv4, ipv6);\n      }\n\n      // 3. 如果已分配，检查 IP 是否变化\n      if (this.allocated) {\n        const ipChanged = ipv4 !== this.lastIpv4 || ipv6 !== this.lastIpv6;\n        if (ipChanged) {\n          await this.updateDdns(ipv4, ipv6);\n        }\n      }\n    } catch (error: unknown) {\n      this.logger.error(`DDNS cycle failed: ${(error as Error).message}`);\n    }\n  }\n\n  private async allocateSubdomain(ipv4?: string, ipv6?: string): Promise<void> {\n    try {\n      // 先检查是否已存在\n      const existing = await this.client.getDdns(this.subdomain);\n      if (existing) {\n        this.logger.info(`DDNS subdomain already allocated: ${existing.fqdn}`);\n        this.allocated = true;\n        this.lastIpv4 = existing.ipAddress;\n        this.lastIpv6 = existing.ipv6Address;\n\n        // 如果 IP 不同，更新\n        if (existing.ipAddress !== ipv4 || existing.ipv6Address !== ipv6) {\n          await this.updateDdns(ipv4, ipv6);\n        }\n        return;\n      }\n\n      // 分配新子域名\n      this.logger.info(`Allocating DDNS subdomain: ${this.subdomain}`);\n      const result = await this.client.allocateDdns({\n        subdomain: this.subdomain,\n        ipAddress: ipv4,\n        ipv6Address: ipv6,\n      });\n\n      if (result.success) {\n        this.logger.info(`DDNS allocated: ${result.fqdn}`);\n        this.allocated = true;\n        this.lastIpv4 = ipv4;\n        this.lastIpv6 = ipv6;\n      }\n    } catch (error: unknown) {\n      const message = (error as Error).message;\n      if (message.includes('409') || message.includes('already')) {\n        // 子域名已被占用，可能是之前注册的\n        this.logger.warn(`Subdomain ${this.subdomain} already taken, trying to claim...`);\n        // 尝试获取现有记录\n        const existing = await this.client.getDdns(this.subdomain);\n        if (existing) {\n          this.allocated = true;\n          this.lastIpv4 = existing.ipAddress;\n          this.lastIpv6 = existing.ipv6Address;\n        }\n      } else {\n        this.logger.error(`Failed to allocate DDNS: ${message}`);\n      }\n    }\n  }\n\n  private async updateDdns(ipv4?: string, ipv6?: string): Promise<void> {\n    if (!ipv4 && !ipv6) {\n      this.logger.debug('No IP address to update');\n      return;\n    }\n\n    try {\n      this.logger.info(`Updating DDNS: ${this.subdomain} -> IPv4=${ipv4 ?? 'none'}, IPv6=${ipv6 ?? 'none'}`);\n\n      const result = await this.client.updateDdns(this.subdomain, {\n        ipAddress: ipv4,\n        ipv6Address: ipv6,\n      });\n\n      if (result.success) {\n        this.lastIpv4 = ipv4;\n        this.lastIpv6 = ipv6;\n        this.logger.info(`DDNS updated: ${result.fqdn}`);\n      }\n    } catch (error: unknown) {\n      this.logger.error(`Failed to update DDNS: ${(error as Error).message}`);\n    }\n  }\n}\n"]}

package/dist/edge/Dns01CertificateProvisioner.d.ts

@@ -0,0 +1,27 @@
+import type { DnsProvider } from '../dns/DnsProvider';
+import type { EdgeNodeCertificateProvisioner } from './EdgeNodeCertificateProvisioner';
+interface Dns01CertificateProvisionerOptions {
+    provider: DnsProvider;
+    rootDomain?: string | null;
+    ttl?: number | string | null;
+}
+export declare class Dns01CertificateProvisioner implements EdgeNodeCertificateProvisioner {
+    private readonly logger;
+    private readonly provider;
+    private readonly rootDomain?;
+    private readonly ttl?;
+    private readonly enabled;
+    constructor(options: Dns01CertificateProvisionerOptions);
+    handleCertificateRequest(nodeId: string, metadata: Record<string, unknown>): Promise<void>;
+    publishChallenge(host: string, value: string, nodeId?: string): Promise<void>;
+    removeChallenge(host: string, nodeId?: string): Promise<void>;
+    private extractPayload;
+    private extractSubdomain;
+    private asString;
+    private composeHost;
+    private splitHost;
+    private normalizeRootDomain;
+    private normalizeTtl;
+    private removeRecord;
+}
+export {};

package/dist/edge/Dns01CertificateProvisioner.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Dns01CertificateProvisioner = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+class Dns01CertificateProvisioner {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.provider = options.provider;
+        this.rootDomain = this.normalizeRootDomain(options.rootDomain);
+        this.ttl = this.normalizeTtl(options.ttl);
+        this.enabled = true;
+    }
+    async handleCertificateRequest(nodeId, metadata) {
+        if (!this.enabled) {
+            return;
+        }
+        const payload = this.extractPayload(metadata);
+        if (!payload) {
+            return;
+        }
+        const host = payload.host ?? this.composeHost(payload.subdomain ?? this.extractSubdomain(metadata));
+        if (!host) {
+            this.logger.warn(`节点 ${nodeId} 未提供有效的证书域名，跳过 DNS-01 编排。`);
+            return;
+        }
+        const action = (payload.action ?? 'set').toLowerCase();
+        if (action === 'remove') {
+            await this.removeRecord(nodeId, host);
+            return;
+        }
+        const value = payload.value?.trim();
+        if (!value) {
+            this.logger.warn(`节点 ${nodeId} 未提供 DNS-01 challenge 值，跳过处理。`);
+            return;
+        }
+        await this.publishChallenge(host, value, nodeId);
+    }
+    async publishChallenge(host, value, nodeId) {
+        if (!this.enabled) {
+            return;
+        }
+        const { domain, subdomain } = this.splitHost(host);
+        try {
+            await this.provider.upsertRecord({
+                domain,
+                subdomain,
+                type: 'TXT',
+                value,
+                ttl: this.ttl,
+            });
+            this.logger.debug(`已写入 DNS-01 challenge 记录 ${subdomain}.${domain}${nodeId ? `（节点 ${nodeId}）` : ''}`);
+        }
+        catch (error) {
+            this.logger.error(`DNS-01 编排失败${nodeId ? `（节点 ${nodeId}）` : ''}: ${error.message}`);
+            throw error;
+        }
+    }
+    async removeChallenge(host, nodeId) {
+        if (!this.enabled) {
+            return;
+        }
+        const { domain, subdomain } = this.splitHost(host);
+        try {
+            await this.provider.deleteRecord({
+                domain,
+                subdomain,
+                type: 'TXT',
+            });
+            this.logger.debug(`已移除 DNS-01 记录 ${subdomain}.${domain}${nodeId ? `（节点 ${nodeId}）` : ''}`);
+        }
+        catch (error) {
+            this.logger.warn(`删除 DNS-01 记录失败${nodeId ? `（节点 ${nodeId}）` : ''}：${error.message}`);
+        }
+    }
+    extractPayload(metadata) {
+        const certificate = metadata?.certificate;
+        if (!certificate || typeof certificate !== 'object') {
+            return undefined;
+        }
+        const dns01 = certificate.dns01;
+        if (!dns01 || typeof dns01 !== 'object') {
+            return undefined;
+        }
+        const record = dns01;
+        return {
+            subdomain: this.asString(record.subdomain),
+            host: this.asString(record.host),
+            value: this.asString(record.value),
+            action: this.asString(record.action),
+        };
+    }
+    extractSubdomain(metadata) {
+        const dns = metadata?.dns;
+        if (!dns || typeof dns !== 'object') {
+            return undefined;
+        }
+        return this.asString(dns.subdomain);
+    }
+    asString(value) {
+        if (typeof value !== 'string') {
+            return undefined;
+        }
+        const trimmed = value.trim();
+        return trimmed.length > 0 ? trimmed : undefined;
+    }
+    composeHost(subdomain) {
+        if (!subdomain || !this.rootDomain) {
+            return undefined;
+        }
+        return `${subdomain}.${this.rootDomain}`;
+    }
+    splitHost(host) {
+        const normalized = host.replace(/\s+/gu, '.').replace(/\.+/gu, '.').replace(/\.$/, '');
+        if (this.rootDomain && normalized.endsWith(`.${this.rootDomain}`)) {
+            const sub = normalized.slice(0, -1 * (`.${this.rootDomain}`.length));
+            return { domain: this.rootDomain, subdomain: sub.length > 0 ? sub : '@' };
+        }
+        const parts = normalized.split('.');
+        const fallbackDomain = this.rootDomain ?? normalized;
+        if (parts.length <= 1) {
+            return { domain: fallbackDomain, subdomain: '@' };
+        }
+        const domain = this.rootDomain ?? parts.slice(-2).join('.');
+        const subdomain = parts.slice(0, -2).join('.') || '@';
+        return { domain, subdomain };
+    }
+    normalizeRootDomain(value) {
+        if (typeof value !== 'string') {
+            return undefined;
+        }
+        let trimmed = value.trim();
+        if (trimmed.includes('://')) {
+            try {
+                trimmed = new URL(trimmed).hostname;
+            }
+            catch {
+                // ignore
+            }
+        }
+        trimmed = trimmed.replace(/\.$/, '');
+        return trimmed.length > 0 ? trimmed : undefined;
+    }
+    normalizeTtl(value) {
+        if (typeof value === 'number' && Number.isFinite(value) && value > 0) {
+            return Math.trunc(value);
+        }
+        if (typeof value === 'string') {
+            const parsed = Number(value.trim());
+            if (Number.isFinite(parsed) && parsed > 0) {
+                return Math.trunc(parsed);
+            }
+        }
+        return undefined;
+    }
+    async removeRecord(nodeId, host) {
+        await this.removeChallenge(host, nodeId);
+    }
+}
+exports.Dns01CertificateProvisioner = Dns01CertificateProvisioner;
+//# sourceMappingURL=Dns01CertificateProvisioner.js.map

package/dist/edge/Dns01CertificateProvisioner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Dns01CertificateProvisioner.js","sourceRoot":"","sources":["../../src/edge/Dns01CertificateProvisioner.ts"],"names":[],"mappings":";;;AAAA,iEAAqD;AAkBrD,MAAa,2BAA2B;IAOtC,YAAmB,OAA2C;QAN7C,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO3C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,MAAc,EAAE,QAAiC;QACrF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,2BAA2B,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,+BAA+B,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,MAAe;QACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC/B,MAAM;gBACN,SAAS;gBACT,IAAI,EAAE,KAAK;gBACX,KAAK;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,MAAe;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC/B,MAAM;gBACN,SAAS;gBACT,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,IAAK,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAiC;QACtD,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,CAAC;QAC1C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAI,WAAuC,CAAC,KAAK,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAiC;QACxD,MAAM,GAAG,GAAG,QAAQ,EAAE,GAAG,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAE,GAA+B,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAEO,WAAW,CAAC,SAAkB;QACpC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAEO,mBAAmB,CAAC,KAAqB;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAEO,YAAY,CAAC,KAA8B;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAY;QACrD,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;CACF;AA3KD,kEA2KC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport type { DnsProvider } from '../dns/DnsProvider';\nimport type { EdgeNodeCertificateProvisioner } from './EdgeNodeCertificateProvisioner';\n\ninterface Dns01CertificateProvisionerOptions {\n  provider: DnsProvider;\n  rootDomain?: string | null;\n  ttl?: number | string | null;\n}\n\ninterface DnsChallengePayload {\n  subdomain?: string;\n  /** 完整主机名，若提供将覆盖 subdomain。 */\n  host?: string;\n  value?: string;\n  action?: string;\n}\n\nexport class Dns01CertificateProvisioner implements EdgeNodeCertificateProvisioner {\n  private readonly logger = getLoggerFor(this);\n  private readonly provider: DnsProvider;\n  private readonly rootDomain?: string;\n  private readonly ttl?: number;\n  private readonly enabled: boolean;\n\n  public constructor(options: Dns01CertificateProvisionerOptions) {\n    this.provider = options.provider;\n    this.rootDomain = this.normalizeRootDomain(options.rootDomain);\n    this.ttl = this.normalizeTtl(options.ttl);\n    this.enabled = true;\n  }\n\n  public async handleCertificateRequest(nodeId: string, metadata: Record<string, unknown>): Promise<void> {\n    if (!this.enabled) {\n      return;\n    }\n    const payload = this.extractPayload(metadata);\n    if (!payload) {\n      return;\n    }\n\n    const host = payload.host ?? this.composeHost(payload.subdomain ?? this.extractSubdomain(metadata));\n    if (!host) {\n      this.logger.warn(`节点 ${nodeId} 未提供有效的证书域名，跳过 DNS-01 编排。`);\n      return;\n    }\n\n    const action = (payload.action ?? 'set').toLowerCase();\n    if (action === 'remove') {\n      await this.removeRecord(nodeId, host);\n      return;\n    }\n\n    const value = payload.value?.trim();\n    if (!value) {\n      this.logger.warn(`节点 ${nodeId} 未提供 DNS-01 challenge 值，跳过处理。`);\n      return;\n    }\n\n    await this.publishChallenge(host, value, nodeId);\n  }\n\n  public async publishChallenge(host: string, value: string, nodeId?: string): Promise<void> {\n    if (!this.enabled) {\n      return;\n    }\n    const { domain, subdomain } = this.splitHost(host);\n\n    try {\n      await this.provider.upsertRecord({\n        domain,\n        subdomain,\n        type: 'TXT',\n        value,\n        ttl: this.ttl,\n      });\n      this.logger.debug(`已写入 DNS-01 challenge 记录 ${subdomain}.${domain}${nodeId ? `（节点 ${nodeId}）` : ''}`);\n    } catch (error: unknown) {\n      this.logger.error(`DNS-01 编排失败${nodeId ? `（节点 ${nodeId}）` : ''}: ${(error as Error).message}`);\n      throw error;\n    }\n  }\n\n  public async removeChallenge(host: string, nodeId?: string): Promise<void> {\n    if (!this.enabled) {\n      return;\n    }\n    const { domain, subdomain } = this.splitHost(host);\n    try {\n      await this.provider.deleteRecord({\n        domain,\n        subdomain,\n        type: 'TXT',\n      });\n      this.logger.debug(`已移除 DNS-01 记录 ${subdomain}.${domain}${nodeId ? `（节点 ${nodeId}）` : ''}`);\n    } catch (error: unknown) {\n      this.logger.warn(`删除 DNS-01 记录失败${nodeId ? `（节点 ${nodeId}）` : ''}：${(error as Error).message}`);\n    }\n  }\n\n  private extractPayload(metadata: Record<string, unknown>): DnsChallengePayload | undefined {\n    const certificate = metadata?.certificate;\n    if (!certificate || typeof certificate !== 'object') {\n      return undefined;\n    }\n    const dns01 = (certificate as Record<string, unknown>).dns01;\n    if (!dns01 || typeof dns01 !== 'object') {\n      return undefined;\n    }\n    const record = dns01 as Record<string, unknown>;\n    return {\n      subdomain: this.asString(record.subdomain),\n      host: this.asString(record.host),\n      value: this.asString(record.value),\n      action: this.asString(record.action),\n    };\n  }\n\n  private extractSubdomain(metadata: Record<string, unknown>): string | undefined {\n    const dns = metadata?.dns;\n    if (!dns || typeof dns !== 'object') {\n      return undefined;\n    }\n    return this.asString((dns as Record<string, unknown>).subdomain);\n  }\n\n  private asString(value: unknown): string | undefined {\n    if (typeof value !== 'string') {\n      return undefined;\n    }\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n\n  private composeHost(subdomain?: string): string | undefined {\n    if (!subdomain || !this.rootDomain) {\n      return undefined;\n    }\n    return `${subdomain}.${this.rootDomain}`;\n  }\n\n  private splitHost(host: string): { domain: string; subdomain: string } {\n    const normalized = host.replace(/\\s+/gu, '.').replace(/\\.+/gu, '.').replace(/\\.$/, '');\n    if (this.rootDomain && normalized.endsWith(`.${this.rootDomain}`)) {\n      const sub = normalized.slice(0, -1 * (`.${this.rootDomain}`.length));\n      return { domain: this.rootDomain, subdomain: sub.length > 0 ? sub : '@' };\n    }\n    const parts = normalized.split('.');\n    const fallbackDomain = this.rootDomain ?? normalized;\n    if (parts.length <= 1) {\n      return { domain: fallbackDomain, subdomain: '@' };\n    }\n    const domain = this.rootDomain ?? parts.slice(-2).join('.');\n    const subdomain = parts.slice(0, -2).join('.') || '@';\n    return { domain, subdomain };\n  }\n\n  private normalizeRootDomain(value?: string | null): string | undefined {\n    if (typeof value !== 'string') {\n      return undefined;\n    }\n    let trimmed = value.trim();\n    if (trimmed.includes('://')) {\n      try {\n        trimmed = new URL(trimmed).hostname;\n      } catch {\n        // ignore\n      }\n    }\n    trimmed = trimmed.replace(/\\.$/, '');\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n\n  private normalizeTtl(value?: number | string | null): number | undefined {\n    if (typeof value === 'number' && Number.isFinite(value) && value > 0) {\n      return Math.trunc(value);\n    }\n    if (typeof value === 'string') {\n      const parsed = Number(value.trim());\n      if (Number.isFinite(parsed) && parsed > 0) {\n        return Math.trunc(parsed);\n      }\n    }\n    return undefined;\n  }\n\n  private async removeRecord(nodeId: string, host: string): Promise<void> {\n    await this.removeChallenge(host, nodeId);\n  }\n}\n"]}