@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/edge/acme/DnsChallengeClient.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DnsChallengeClient = void 0;
+class DnsChallengeClient {
+    constructor(options) {
+        this.endpoint = options.signalEndpoint.replace(/\/$/, '');
+        this.nodeId = options.nodeId;
+        this.nodeToken = options.nodeToken;
+    }
+    async setChallenge(host, value) {
+        await this.postChallenge('set', host, value);
+    }
+    async removeChallenge(host, value) {
+        await this.postChallenge('remove', host, value);
+    }
+    async postChallenge(action, host, value) {
+        const body = {
+            nodeId: this.nodeId,
+            token: this.nodeToken,
+            metadata: {
+                certificate: {
+                    dns01: {
+                        action,
+                        host,
+                        value,
+                    },
+                },
+            },
+        };
+        await fetch(this.endpoint, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(body),
+        });
+    }
+}
+exports.DnsChallengeClient = DnsChallengeClient;
+//# sourceMappingURL=DnsChallengeClient.js.map

package/dist/edge/acme/DnsChallengeClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DnsChallengeClient.js","sourceRoot":"","sources":["../../../src/edge/acme/DnsChallengeClient.ts"],"names":[],"mappings":";;;AAQA,MAAa,kBAAkB;IAK7B,YAAmB,OAAkC;QACnD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,KAAa;QACnD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,KAAc;QACvD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAuB,EAAE,IAAY,EAAE,KAAc;QAC/E,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,MAAM;wBACN,IAAI;wBACJ,KAAK;qBACN;iBACF;aACF;SACF,CAAC;QAEF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;CACF;AA1CD,gDA0CC","sourcesContent":["interface DnsChallengeClientOptions {\n  signalEndpoint: string;\n  nodeId: string;\n  nodeToken: string;\n}\n\ntype ChallengeAction = 'set' | 'remove';\n\nexport class DnsChallengeClient {\n  private readonly endpoint: string;\n  private readonly nodeId: string;\n  private readonly nodeToken: string;\n\n  public constructor(options: DnsChallengeClientOptions) {\n    this.endpoint = options.signalEndpoint.replace(/\\/$/, '');\n    this.nodeId = options.nodeId;\n    this.nodeToken = options.nodeToken;\n  }\n\n  public async setChallenge(host: string, value: string): Promise<void> {\n    await this.postChallenge('set', host, value);\n  }\n\n  public async removeChallenge(host: string, value?: string): Promise<void> {\n    await this.postChallenge('remove', host, value);\n  }\n\n  private async postChallenge(action: ChallengeAction, host: string, value?: string): Promise<void> {\n    const body = {\n      nodeId: this.nodeId,\n      token: this.nodeToken,\n      metadata: {\n        certificate: {\n          dns01: {\n            action,\n            host,\n            value,\n          },\n        },\n      },\n    };\n\n    await fetch(this.endpoint, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/json',\n      },\n      body: JSON.stringify(body),\n    });\n  }\n}\n"]}

package/dist/edge/acme/utils.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Convert ACME key authorization into DNS-01 TXT record value.
+ */
+export declare function toDns01Value(keyAuthorization: string): string;

package/dist/edge/acme/utils.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toDns01Value = toDns01Value;
+const node_crypto_1 = require("node:crypto");
+/**
+ * Convert ACME key authorization into DNS-01 TXT record value.
+ */
+function toDns01Value(keyAuthorization) {
+    const hash = (0, node_crypto_1.createHash)('sha256')
+        .update(keyAuthorization)
+        .digest('base64');
+    return hash
+        .replace(/=+$/u, '')
+        .replace(/\+/gu, '-')
+        .replace(/\//gu, '_');
+}
+//# sourceMappingURL=utils.js.map

package/dist/edge/acme/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/edge/acme/utils.ts"],"names":[],"mappings":";;AAKA,oCASC;AAdD,6CAAyC;AAEzC;;GAEG;AACH,SAAgB,YAAY,CAAC,gBAAwB;IACnD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,gBAAgB,CAAC;SACxB,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,OAAO,IAAI;SACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import { createHash } from 'node:crypto';\n\n/**\n * Convert ACME key authorization into DNS-01 TXT record value.\n */\nexport function toDns01Value(keyAuthorization: string): string {\n  const hash = createHash('sha256')\n    .update(keyAuthorization)\n    .digest('base64');\n\n  return hash\n    .replace(/=+$/u, '')\n    .replace(/\\+/gu, '-')\n    .replace(/\\//gu, '_');\n}\n"]}

package/dist/edge/frp/FrpRelay.d.ts

@@ -0,0 +1,11 @@
+export interface FrpRelayOptions {
+    bindPort: number;
+    targetHost: string;
+    targetPort: number;
+}
+export declare class FrpRelay {
+    private readonly logger;
+    private server?;
+    start(options: FrpRelayOptions): void;
+    stop(): void;
+}

package/dist/edge/frp/FrpRelay.js

@@ -0,0 +1,29 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrpRelay = void 0;
+const node_net_1 = __importDefault(require("node:net"));
+const global_logger_factory_1 = require("global-logger-factory");
+class FrpRelay {
+    constructor() {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+    }
+    start(options) {
+        this.server = node_net_1.default.createServer((socket) => {
+            const target = node_net_1.default.createConnection(options.targetPort, options.targetHost);
+            socket.pipe(target);
+            target.pipe(socket);
+        });
+        this.server.listen(options.bindPort, () => {
+            this.logger.info(`FRP relay listening on ${options.bindPort}`);
+        });
+    }
+    stop() {
+        this.server?.close();
+        this.server = undefined;
+    }
+}
+exports.FrpRelay = FrpRelay;
+//# sourceMappingURL=FrpRelay.js.map

package/dist/edge/frp/FrpRelay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FrpRelay.js","sourceRoot":"","sources":["../../../src/edge/frp/FrpRelay.ts"],"names":[],"mappings":";;;;;;AAAA,wDAA2B;AAC3B,iEAAqD;AAQrD,MAAa,QAAQ;IAArB;QACmB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;IAkB/C,CAAC;IAfQ,KAAK,CAAC,OAAwB;QACnC,IAAI,CAAC,MAAM,GAAG,kBAAG,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,kBAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,IAAI;QACT,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;CACF;AAnBD,4BAmBC","sourcesContent":["import net from 'node:net';\nimport { getLoggerFor } from 'global-logger-factory';\n\nexport interface FrpRelayOptions {\n  bindPort: number;\n  targetHost: string;\n  targetPort: number;\n}\n\nexport class FrpRelay {\n  private readonly logger = getLoggerFor(this);\n  private server?: net.Server;\n\n  public start(options: FrpRelayOptions): void {\n    this.server = net.createServer((socket) => {\n      const target = net.createConnection(options.targetPort, options.targetHost);\n      socket.pipe(target);\n      target.pipe(socket);\n    });\n    this.server.listen(options.bindPort, () => {\n      this.logger.info(`FRP relay listening on ${options.bindPort}`);\n    });\n  }\n\n  public stop(): void {\n    this.server?.close();\n    this.server = undefined;\n  }\n}\n"]}

package/dist/edge/frp/FrpcProcessManager.d.ts

@@ -0,0 +1,51 @@
+import { spawn } from 'node:child_process';
+interface FrpTunnelRuntimeConfig {
+    serverHost: string;
+    serverPort?: number;
+    token?: string;
+    protocol?: string;
+    proxyName?: string;
+    customDomains?: string[];
+    remotePort?: number;
+    entrypoint?: string;
+    type?: string;
+    [key: string]: unknown;
+}
+interface FrpcProcessManagerOptions {
+    binaryPath: string;
+    configPath: string;
+    workingDirectory?: string;
+    logPrefix?: string;
+    autoRestart?: boolean;
+    processFactory?: typeof spawn;
+}
+export interface FrpcRuntimeStatus {
+    state: 'inactive' | 'starting' | 'running' | 'error';
+    lastUpdated?: string;
+    error?: string;
+    entrypoint?: string;
+    pid?: number;
+}
+export declare class FrpcProcessManager {
+    private readonly logger;
+    private readonly binaryPath;
+    private readonly configPath;
+    private readonly workingDirectory?;
+    private readonly logPrefix;
+    private readonly autoRestart;
+    private readonly processFactory;
+    private process?;
+    private currentSignature?;
+    private restarting;
+    private status;
+    private desiredRunning;
+    constructor(options: FrpcProcessManagerOptions);
+    applyConfig(config?: FrpTunnelRuntimeConfig, status?: string, entrypoint?: string): Promise<void>;
+    stop(): Promise<void>;
+    private restart;
+    private ensureDirectory;
+    private writeConfigFile;
+    getStatus(): FrpcRuntimeStatus;
+    private setStatus;
+}
+export {};

package/dist/edge/frp/FrpcProcessManager.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrpcProcessManager = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const global_logger_factory_1 = require("global-logger-factory");
+class FrpcProcessManager {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.restarting = false;
+        this.status = { state: 'inactive' };
+        this.desiredRunning = false;
+        this.binaryPath = options.binaryPath;
+        this.configPath = options.configPath;
+        this.workingDirectory = options.workingDirectory;
+        this.logPrefix = options.logPrefix ?? '[frpc]';
+        this.autoRestart = options.autoRestart ?? true;
+        this.processFactory = options.processFactory ?? node_child_process_1.spawn;
+    }
+    async applyConfig(config, status, entrypoint) {
+        if (!config || !config.serverHost || status !== 'active') {
+            this.desiredRunning = false;
+            this.setStatus({ state: 'inactive', entrypoint, lastUpdated: new Date().toISOString() });
+            await this.stop();
+            this.currentSignature = undefined;
+            return;
+        }
+        this.desiredRunning = true;
+        const signature = JSON.stringify({ config });
+        if (signature === this.currentSignature && this.process) {
+            this.status.entrypoint = entrypoint ?? config.entrypoint;
+            return;
+        }
+        await this.writeConfigFile(config);
+        this.currentSignature = signature;
+        this.setStatus({ state: 'starting', entrypoint: entrypoint ?? config.entrypoint, lastUpdated: new Date().toISOString() });
+        await this.restart(entrypoint ?? config.entrypoint);
+    }
+    async stop() {
+        if (!this.process) {
+            return;
+        }
+        return new Promise((resolve) => {
+            const proc = this.process;
+            this.process = undefined;
+            if (!proc) {
+                resolve();
+                return;
+            }
+            proc.once('exit', () => resolve());
+            proc.once('error', () => resolve());
+            proc.kill();
+            setTimeout(() => resolve(), 5_000);
+        });
+    }
+    async restart(entrypoint) {
+        if (this.restarting) {
+            return;
+        }
+        this.restarting = true;
+        try {
+            await this.stop();
+            await this.ensureDirectory((0, node_path_1.dirname)(this.configPath));
+            this.logger.info(`${this.logPrefix} 启动 frpc 进程`);
+            const args = ['-c', this.configPath];
+            const proc = this.processFactory(this.binaryPath, args, {
+                cwd: this.workingDirectory,
+                stdio: 'pipe',
+            });
+            this.process = proc;
+            this.setStatus({
+                state: 'running',
+                entrypoint,
+                lastUpdated: new Date().toISOString(),
+                pid: proc.pid ?? undefined,
+            });
+            proc.stdout.on('data', (data) => {
+                this.logger.debug(`${this.logPrefix} ${data.toString().trim()}`);
+            });
+            proc.stderr.on('data', (data) => {
+                this.logger.warn(`${this.logPrefix} ${data.toString().trim()}`);
+            });
+            proc.once('exit', (code, signal) => {
+                this.logger.info(`${this.logPrefix} 退出，code=${code ?? ''} signal=${signal ?? ''}`);
+                this.process = undefined;
+                if (this.desiredRunning) {
+                    this.setStatus({
+                        state: 'error',
+                        error: `exit:${code ?? 'unknown'}`,
+                        lastUpdated: new Date().toISOString(),
+                        entrypoint,
+                    });
+                }
+                else {
+                    this.setStatus({
+                        state: 'inactive',
+                        lastUpdated: new Date().toISOString(),
+                    });
+                }
+                if (this.autoRestart && this.currentSignature && this.desiredRunning) {
+                    setTimeout(() => {
+                        void this.restart(entrypoint).catch((error) => {
+                            this.logger.error(`${this.logPrefix} 重启失败: ${error instanceof Error ? error.message : String(error)}`);
+                        });
+                    }, 1_000);
+                }
+            });
+            proc.once('error', (error) => {
+                this.logger.error(`${this.logPrefix} 启动失败: ${error.message}`);
+                this.process = undefined;
+                this.setStatus({
+                    state: 'error',
+                    error: error.message,
+                    lastUpdated: new Date().toISOString(),
+                    entrypoint,
+                });
+            });
+        }
+        finally {
+            this.restarting = false;
+        }
+    }
+    async ensureDirectory(path) {
+        if (!path || path === '.') {
+            return;
+        }
+        await node_fs_1.promises.mkdir(path, { recursive: true });
+    }
+    async writeConfigFile(config) {
+        const lines = [];
+        lines.push('[common]');
+        lines.push(`server_addr = ${config.serverHost}`);
+        if (config.serverPort) {
+            lines.push(`server_port = ${config.serverPort}`);
+        }
+        if (config.token) {
+            lines.push(`token = ${config.token}`);
+        }
+        if (config.protocol && config.protocol !== 'tcp') {
+            lines.push(`protocol = ${config.protocol}`);
+        }
+        lines.push('');
+        const proxyName = config.proxyName ?? 'xpod-edge';
+        lines.push(`[${proxyName}]`);
+        const type = config.type ?? (config.customDomains && config.customDomains.length > 0 ? 'http' : (config.protocol ?? 'tcp'));
+        lines.push(`type = ${type}`);
+        if (config.customDomains && config.customDomains.length > 0) {
+            lines.push(`custom_domains = ${config.customDomains.join(',')}`);
+        }
+        if (config.remotePort) {
+            lines.push(`remote_port = ${config.remotePort}`);
+        }
+        if (config.entrypoint) {
+            lines.push(`# public_url = ${config.entrypoint}`);
+        }
+        await this.ensureDirectory((0, node_path_1.dirname)(this.configPath));
+        await node_fs_1.promises.writeFile(this.configPath, `${lines.join('\n')}\n`, 'utf8');
+    }
+    getStatus() {
+        return { ...this.status };
+    }
+    setStatus(update) {
+        this.status = {
+            state: update.state,
+            lastUpdated: update.lastUpdated,
+            error: update.error,
+            entrypoint: update.entrypoint,
+            pid: update.pid,
+        };
+    }
+}
+exports.FrpcProcessManager = FrpcProcessManager;
+//# sourceMappingURL=FrpcProcessManager.js.map

package/dist/edge/frp/FrpcProcessManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FrpcProcessManager.js","sourceRoot":"","sources":["../../../src/edge/frp/FrpcProcessManager.ts"],"names":[],"mappings":";;;AAAA,2DAA2E;AAC3E,qCAAyC;AACzC,yCAAoC;AACpC,iEAAqD;AAgCrD,MAAa,kBAAkB;IAc7B,YAAmB,OAAkC;QAbpC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QASrC,eAAU,GAAG,KAAK,CAAC;QACnB,WAAM,GAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAClD,mBAAc,GAAG,KAAK,CAAC;QAG7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,0BAAK,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,MAA+B,EAAE,MAAe,EAAE,UAAmB;QAC5F,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzF,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,SAAS,KAAK,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1H,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAmB;QACvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,eAAe,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,aAAa,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,CAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;gBACtD,GAAG,EAAE,IAAI,CAAC,gBAAgB;gBAC1B,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,SAAS;gBAChB,UAAU;gBACV,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,SAAS;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,YAAY,IAAI,IAAI,EAAE,WAAW,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,OAAO;wBACd,KAAK,EAAE,QAAQ,IAAI,IAAI,SAAS,EAAE;wBAClC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACrC,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,UAAU;wBACjB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACtC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACrE,UAAU,CAAC,GAAG,EAAE;wBACd,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;4BAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBACzG,CAAC,CAAC,CAAC;oBACL,CAAC,EAAE,KAAK,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,UAAW,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,OAAO;oBACd,KAAK,EAAG,KAAe,CAAC,OAAO;oBAC/B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACrC,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAA8B;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC;QAC5H,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IAEM,SAAS;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAEO,SAAS,CAAC,MAAyB;QACzC,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC;IACJ,CAAC;CACF;AApLD,gDAoLC","sourcesContent":["import { spawn, ChildProcessWithoutNullStreams } from 'node:child_process';\nimport { promises as fs } from 'node:fs';\nimport { dirname } from 'node:path';\nimport { getLoggerFor } from 'global-logger-factory';\n\ninterface FrpTunnelRuntimeConfig {\n  serverHost: string;\n  serverPort?: number;\n  token?: string;\n  protocol?: string;\n  proxyName?: string;\n  customDomains?: string[];\n  remotePort?: number;\n  entrypoint?: string;\n  type?: string;\n  [key: string]: unknown;\n}\n\ninterface FrpcProcessManagerOptions {\n  binaryPath: string;\n  configPath: string;\n  workingDirectory?: string;\n  logPrefix?: string;\n  autoRestart?: boolean;\n  processFactory?: typeof spawn;\n}\n\nexport interface FrpcRuntimeStatus {\n  state: 'inactive' | 'starting' | 'running' | 'error';\n  lastUpdated?: string;\n  error?: string;\n  entrypoint?: string;\n  pid?: number;\n}\n\nexport class FrpcProcessManager {\n  private readonly logger = getLoggerFor(this);\n  private readonly binaryPath: string;\n  private readonly configPath: string;\n  private readonly workingDirectory?: string;\n  private readonly logPrefix: string;\n  private readonly autoRestart: boolean;\n  private readonly processFactory: typeof spawn;\n  private process?: ChildProcessWithoutNullStreams;\n  private currentSignature?: string;\n  private restarting = false;\n  private status: FrpcRuntimeStatus = { state: 'inactive' };\n  private desiredRunning = false;\n\n  public constructor(options: FrpcProcessManagerOptions) {\n    this.binaryPath = options.binaryPath;\n    this.configPath = options.configPath;\n    this.workingDirectory = options.workingDirectory;\n    this.logPrefix = options.logPrefix ?? '[frpc]';\n    this.autoRestart = options.autoRestart ?? true;\n    this.processFactory = options.processFactory ?? spawn;\n  }\n\n  public async applyConfig(config?: FrpTunnelRuntimeConfig, status?: string, entrypoint?: string): Promise<void> {\n    if (!config || !config.serverHost || status !== 'active') {\n      this.desiredRunning = false;\n      this.setStatus({ state: 'inactive', entrypoint, lastUpdated: new Date().toISOString() });\n      await this.stop();\n      this.currentSignature = undefined;\n      return;\n    }\n    this.desiredRunning = true;\n    const signature = JSON.stringify({ config });\n    if (signature === this.currentSignature && this.process) {\n      this.status.entrypoint = entrypoint ?? config.entrypoint;\n      return;\n    }\n    await this.writeConfigFile(config);\n    this.currentSignature = signature;\n    this.setStatus({ state: 'starting', entrypoint: entrypoint ?? config.entrypoint, lastUpdated: new Date().toISOString() });\n    await this.restart(entrypoint ?? config.entrypoint);\n  }\n\n  public async stop(): Promise<void> {\n    if (!this.process) {\n      return;\n    }\n    return new Promise((resolve) => {\n      const proc = this.process;\n      this.process = undefined;\n      if (!proc) {\n        resolve();\n        return;\n      }\n      proc.once('exit', () => resolve());\n      proc.once('error', () => resolve());\n      proc.kill();\n      setTimeout(() => resolve(), 5_000);\n    });\n  }\n\n  private async restart(entrypoint?: string): Promise<void> {\n    if (this.restarting) {\n      return;\n    }\n    this.restarting = true;\n    try {\n      await this.stop();\n      await this.ensureDirectory(dirname(this.configPath));\n      this.logger.info(`${this.logPrefix} 启动 frpc 进程`);\n      const args = [ '-c', this.configPath ];\n      const proc = this.processFactory(this.binaryPath, args, {\n        cwd: this.workingDirectory,\n        stdio: 'pipe',\n      });\n      this.process = proc;\n      this.setStatus({\n        state: 'running',\n        entrypoint,\n        lastUpdated: new Date().toISOString(),\n        pid: proc.pid ?? undefined,\n      });\n      proc.stdout.on('data', (data) => {\n        this.logger.debug(`${this.logPrefix} ${data.toString().trim()}`);\n      });\n      proc.stderr.on('data', (data) => {\n        this.logger.warn(`${this.logPrefix} ${data.toString().trim()}`);\n      });\n      proc.once('exit', (code, signal) => {\n        this.logger.info(`${this.logPrefix} 退出，code=${code ?? ''} signal=${signal ?? ''}`);\n        this.process = undefined;\n        if (this.desiredRunning) {\n          this.setStatus({\n            state: 'error',\n            error: `exit:${code ?? 'unknown'}`,\n            lastUpdated: new Date().toISOString(),\n            entrypoint,\n          });\n        } else {\n          this.setStatus({\n            state: 'inactive',\n            lastUpdated: new Date().toISOString(),\n          });\n        }\n        if (this.autoRestart && this.currentSignature && this.desiredRunning) {\n          setTimeout(() => {\n            void this.restart(entrypoint).catch((error) => {\n              this.logger.error(`${this.logPrefix} 重启失败: ${error instanceof Error ? error.message : String(error)}`);\n            });\n          }, 1_000);\n        }\n      });\n      proc.once('error', (error) => {\n        this.logger.error(`${this.logPrefix} 启动失败: ${(error as Error).message}`);\n        this.process = undefined;\n        this.setStatus({\n          state: 'error',\n          error: (error as Error).message,\n          lastUpdated: new Date().toISOString(),\n          entrypoint,\n        });\n      });\n    } finally {\n      this.restarting = false;\n    }\n  }\n\n  private async ensureDirectory(path: string): Promise<void> {\n    if (!path || path === '.') {\n      return;\n    }\n    await fs.mkdir(path, { recursive: true });\n  }\n\n  private async writeConfigFile(config: FrpTunnelRuntimeConfig): Promise<void> {\n    const lines: string[] = [];\n    lines.push('[common]');\n    lines.push(`server_addr = ${config.serverHost}`);\n    if (config.serverPort) {\n      lines.push(`server_port = ${config.serverPort}`);\n    }\n    if (config.token) {\n      lines.push(`token = ${config.token}`);\n    }\n    if (config.protocol && config.protocol !== 'tcp') {\n      lines.push(`protocol = ${config.protocol}`);\n    }\n    lines.push('');\n\n    const proxyName = config.proxyName ?? 'xpod-edge';\n    lines.push(`[${proxyName}]`);\n    const type = config.type ?? (config.customDomains && config.customDomains.length > 0 ? 'http' : (config.protocol ?? 'tcp'));\n    lines.push(`type = ${type}`);\n    if (config.customDomains && config.customDomains.length > 0) {\n      lines.push(`custom_domains = ${config.customDomains.join(',')}`);\n    }\n    if (config.remotePort) {\n      lines.push(`remote_port = ${config.remotePort}`);\n    }\n    if (config.entrypoint) {\n      lines.push(`# public_url = ${config.entrypoint}`);\n    }\n\n    await this.ensureDirectory(dirname(this.configPath));\n    await fs.writeFile(this.configPath, `${lines.join('\\n')}\\n`, 'utf8');\n  }\n\n  public getStatus(): FrpcRuntimeStatus {\n    return { ...this.status };\n  }\n\n  private setStatus(update: FrpcRuntimeStatus): void {\n    this.status = {\n      state: update.state,\n      lastUpdated: update.lastUpdated,\n      error: update.error,\n      entrypoint: update.entrypoint,\n      pid: update.pid,\n    };\n  }\n}\n"]}

package/dist/edge/interfaces/EdgeNodeTunnelManager.d.ts

@@ -0,0 +1,6 @@
+export interface EdgeNodeTunnelManager {
+    /**
+     * 根据当前 metadata 判断是否需要建立/更新隧道，当返回对象时表示需要写回 metadata。
+     */
+    ensureConnectivity(nodeId: string, metadata: Record<string, unknown>): Promise<Record<string, unknown> | undefined>;
+}

package/dist/edge/interfaces/EdgeNodeTunnelManager.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=EdgeNodeTunnelManager.js.map

package/dist/edge/interfaces/EdgeNodeTunnelManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeTunnelManager.js","sourceRoot":"","sources":["../../../src/edge/interfaces/EdgeNodeTunnelManager.ts"],"names":[],"mappings":"","sourcesContent":["export interface EdgeNodeTunnelManager {\n  /**\n   * 根据当前 metadata 判断是否需要建立/更新隧道，当返回对象时表示需要写回 metadata。\n   */\n  ensureConnectivity(nodeId: string, metadata: Record<string, unknown>): Promise<Record<string, unknown> | undefined>;\n}"]}

package/dist/edge/interfaces/EdgeNodeTunnelManager.jsonld

@@ -0,0 +1,21 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/edge/interfaces/EdgeNodeTunnelManager.jsonld#EdgeNodeTunnelManager",
+      "@type": "AbstractClass",
+      "requireElement": "EdgeNodeTunnelManager",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/interfaces/EdgeNodeTunnelManager.jsonld#EdgeNodeTunnelManager__member_ensureConnectivity",
+          "memberFieldName": "ensureConnectivity"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/embedding/CredentialReader.d.ts

@@ -0,0 +1,7 @@
+import type { AiCredential } from './types';
+/**
+ * 凭据读取器抽象基类
+ */
+export declare abstract class CredentialReader {
+    abstract getAiCredential(podBaseUrl: string, providerId: string, authenticatedFetch: typeof fetch, webId?: string): Promise<AiCredential | null>;
+}

package/dist/embedding/CredentialReader.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialReader = void 0;
+/**
+ * 凭据读取器抽象基类
+ */
+class CredentialReader {
+}
+exports.CredentialReader = CredentialReader;
+//# sourceMappingURL=CredentialReader.js.map

package/dist/embedding/CredentialReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialReader.js","sourceRoot":"","sources":["../../src/embedding/CredentialReader.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACH,MAAsB,gBAAgB;CAOrC;AAPD,4CAOC","sourcesContent":["import type { AiCredential } from './types';\n\n/**\n * 凭据读取器抽象基类\n */\nexport abstract class CredentialReader {\n  public abstract getAiCredential(\n    podBaseUrl: string,\n    providerId: string,\n    authenticatedFetch: typeof fetch,\n    webId?: string,\n  ): Promise<AiCredential | null>;\n}\n"]}

package/dist/embedding/CredentialReader.jsonld

@@ -0,0 +1,22 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/embedding/CredentialReader.jsonld#CredentialReader",
+      "@type": "AbstractClass",
+      "requireElement": "CredentialReader",
+      "comment": "凭据读取器抽象基类",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/embedding/CredentialReader.jsonld#CredentialReader__member_getAiCredential",
+          "memberFieldName": "getAiCredential"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/embedding/CredentialReaderImpl.d.ts

@@ -0,0 +1,6 @@
+import { CredentialReader } from './CredentialReader';
+import type { AiCredential } from './types';
+export declare class CredentialReaderImpl extends CredentialReader {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    getAiCredential(podBaseUrl: string, providerId: string, authenticatedFetch: typeof fetch, webId?: string): Promise<AiCredential | null>;
+}

package/dist/embedding/CredentialReaderImpl.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialReaderImpl = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const drizzle_solid_1 = require("drizzle-solid");
+const CredentialReader_1 = require("./CredentialReader");
+const tables_1 = require("../credential/schema/tables");
+const tables_2 = require("./schema/tables");
+const types_1 = require("../credential/schema/types");
+const schema = {
+    credential: tables_1.credentialTable,
+    provider: tables_2.providerTable,
+};
+class CredentialReaderImpl extends CredentialReader_1.CredentialReader {
+    constructor() {
+        super(...arguments);
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+    }
+    async getAiCredential(podBaseUrl, providerId, authenticatedFetch, webId) {
+        try {
+            const session = {
+                info: { isLoggedIn: true, webId },
+                fetch: authenticatedFetch,
+            };
+            const db = (0, drizzle_solid_1.drizzle)(session, { schema });
+            // 构建 Provider URI
+            const providerUri = `${podBaseUrl}settings/ai/providers.ttl#${providerId}`;
+            // 查询 credential，直接通过 provider URI 过滤
+            const credentials = await db.query.credential.findMany({
+                where: (0, drizzle_solid_1.and)((0, drizzle_solid_1.eq)(tables_1.credentialTable.service, types_1.ServiceType.AI), (0, drizzle_solid_1.eq)(tables_1.credentialTable.status, types_1.CredentialStatus.ACTIVE), (0, drizzle_solid_1.eq)(tables_1.credentialTable.provider, providerUri)),
+                with: {
+                    provider: true,
+                },
+            });
+            if (credentials.length === 0) {
+                this.logger.debug(`No active credential found for provider: ${providerId}`);
+                return null;
+            }
+            // 随机选择一个（负载均衡）
+            const credential = credentials[Math.floor(Math.random() * credentials.length)];
+            return {
+                provider: providerId,
+                apiKey: credential.apiKey,
+                baseUrl: credential.baseUrl || credential.provider?.baseUrl || undefined,
+                proxyUrl: credential.provider?.proxyUrl || undefined,
+            };
+        }
+        catch (error) {
+            this.logger.error(`Failed to read credential for provider ${providerId}:`, error);
+            return null;
+        }
+    }
+}
+exports.CredentialReaderImpl = CredentialReaderImpl;
+//# sourceMappingURL=CredentialReaderImpl.js.map

package/dist/embedding/CredentialReaderImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialReaderImpl.js","sourceRoot":"","sources":["../../src/embedding/CredentialReaderImpl.ts"],"names":[],"mappings":";;;AAAA,iEAAqD;AACrD,iDAAiD;AACjD,yDAAsD;AAEtD,wDAA8D;AAC9D,4CAAgD;AAChD,sDAA2E;AAE3E,MAAM,MAAM,GAAG;IACb,UAAU,EAAE,wBAAe;IAC3B,QAAQ,EAAE,sBAAa;CACxB,CAAC;AAEF,MAAa,oBAAqB,SAAQ,mCAAgB;IAA1D;;QACqB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;IAiDjD,CAAC;IA/CiB,KAAK,CAAC,eAAe,CACnC,UAAkB,EAClB,UAAkB,EAClB,kBAAgC,EAChC,KAAc;QAEd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;gBACjC,KAAK,EAAE,kBAAkB;aAC1B,CAAC;YACF,MAAM,EAAE,GAAG,IAAA,uBAAO,EAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAExC,kBAAkB;YAClB,MAAM,WAAW,GAAG,GAAG,UAAU,6BAA6B,UAAU,EAAE,CAAC;YAE3E,qCAAqC;YACrC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACrD,KAAK,EAAE,IAAA,mBAAG,EACR,IAAA,kBAAE,EAAC,wBAAe,CAAC,OAAO,EAAE,mBAAW,CAAC,EAAE,CAAC,EAC3C,IAAA,kBAAE,EAAC,wBAAe,CAAC,MAAM,EAAE,wBAAgB,CAAC,MAAM,CAAC,EACnD,IAAA,kBAAE,EAAC,wBAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C;gBACD,IAAI,EAAE;oBACJ,QAAQ,EAAE,IAAI;iBACf;aACF,CAAC,CAAC;YAEH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,UAAU,EAAE,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,eAAe;YACf,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAQ,CAAC;YAEtF,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS;gBACxE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS;aACrD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAlDD,oDAkDC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport { drizzle, eq, and } from 'drizzle-solid';\nimport { CredentialReader } from './CredentialReader';\nimport type { AiCredential } from './types';\nimport { credentialTable } from '../credential/schema/tables';\nimport { providerTable } from './schema/tables';\nimport { ServiceType, CredentialStatus } from '../credential/schema/types';\n\nconst schema = {\n  credential: credentialTable,\n  provider: providerTable,\n};\n\nexport class CredentialReaderImpl extends CredentialReader {\n  protected readonly logger = getLoggerFor(this);\n\n  public override async getAiCredential(\n    podBaseUrl: string,\n    providerId: string,\n    authenticatedFetch: typeof fetch,\n    webId?: string,\n  ): Promise<AiCredential | null> {\n    try {\n      const session = {\n        info: { isLoggedIn: true, webId },\n        fetch: authenticatedFetch,\n      };\n      const db = drizzle(session, { schema });\n\n      // 构建 Provider URI\n      const providerUri = `${podBaseUrl}settings/ai/providers.ttl#${providerId}`;\n\n      // 查询 credential，直接通过 provider URI 过滤\n      const credentials = await db.query.credential.findMany({\n        where: and(\n          eq(credentialTable.service, ServiceType.AI),\n          eq(credentialTable.status, CredentialStatus.ACTIVE),\n          eq(credentialTable.provider, providerUri),\n        ),\n        with: {\n          provider: true,\n        },\n      });\n\n      if (credentials.length === 0) {\n        this.logger.debug(`No active credential found for provider: ${providerId}`);\n        return null;\n      }\n\n      // 随机选择一个（负载均衡）\n      const credential = credentials[Math.floor(Math.random() * credentials.length)] as any;\n\n      return {\n        provider: providerId,\n        apiKey: credential.apiKey,\n        baseUrl: credential.baseUrl || credential.provider?.baseUrl || undefined,\n        proxyUrl: credential.provider?.proxyUrl || undefined,\n      };\n    } catch (error) {\n      this.logger.error(`Failed to read credential for provider ${providerId}:`, error);\n      return null;\n    }\n  }\n}\n"]}

package/dist/embedding/CredentialReaderImpl.jsonld

@@ -0,0 +1,31 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/embedding/CredentialReaderImpl.jsonld#CredentialReaderImpl",
+      "@type": "Class",
+      "requireElement": "CredentialReaderImpl",
+      "extends": [
+        "undefineds:dist/embedding/CredentialReader.jsonld#CredentialReader"
+      ],
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/embedding/CredentialReaderImpl.jsonld#CredentialReaderImpl__member_logger",
+          "memberFieldName": "logger",
+          "range": {
+            "@type": "ParameterRangeWildcard"
+          }
+        },
+        {
+          "@id": "undefineds:dist/embedding/CredentialReaderImpl.jsonld#CredentialReaderImpl__member_getAiCredential",
+          "memberFieldName": "getAiCredential"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/embedding/EmbeddingService.d.ts

@@ -0,0 +1,8 @@
+import type { AiCredential } from './types';
+/**
+ * Embedding 服务抽象基类
+ */
+export declare abstract class EmbeddingService {
+    abstract embed(text: string, credential: AiCredential, modelId: string): Promise<number[]>;
+    abstract embedBatch(texts: string[], credential: AiCredential, modelId: string): Promise<number[][]>;
+}

package/dist/embedding/EmbeddingService.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmbeddingService = void 0;
+/**
+ * Embedding 服务抽象基类
+ */
+class EmbeddingService {
+}
+exports.EmbeddingService = EmbeddingService;
+//# sourceMappingURL=EmbeddingService.js.map

package/dist/embedding/EmbeddingService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmbeddingService.js","sourceRoot":"","sources":["../../src/embedding/EmbeddingService.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACH,MAAsB,gBAAgB;CAGrC;AAHD,4CAGC","sourcesContent":["import type { AiCredential } from './types';\n\n/**\n * Embedding 服务抽象基类\n */\nexport abstract class EmbeddingService {\n  public abstract embed(text: string, credential: AiCredential, modelId: string): Promise<number[]>;\n  public abstract embedBatch(texts: string[], credential: AiCredential, modelId: string): Promise<number[][]>;\n}\n"]}

package/dist/embedding/EmbeddingService.jsonld

@@ -0,0 +1,26 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/embedding/EmbeddingService.jsonld#EmbeddingService",
+      "@type": "AbstractClass",
+      "requireElement": "EmbeddingService",
+      "comment": "Embedding 服务抽象基类",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/embedding/EmbeddingService.jsonld#EmbeddingService__member_embed",
+          "memberFieldName": "embed"
+        },
+        {
+          "@id": "undefineds:dist/embedding/EmbeddingService.jsonld#EmbeddingService__member_embedBatch",
+          "memberFieldName": "embedBatch"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/embedding/EmbeddingServiceImpl.d.ts

@@ -0,0 +1,11 @@
+import { EmbeddingService } from './EmbeddingService';
+import type { ProviderRegistry } from './ProviderRegistry';
+import type { AiCredential } from './types';
+export declare class EmbeddingServiceImpl extends EmbeddingService {
+    private providerRegistry;
+    constructor(providerRegistry: ProviderRegistry);
+    embed(text: string, credential: AiCredential, modelId: string): Promise<number[]>;
+    embedBatch(texts: string[], credential: AiCredential, modelId: string): Promise<number[][]>;
+    private createEmbeddingModel;
+    private createProxyFetch;
+}