@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/embedding/types.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Embedding 相关类型定义
+ */
+/**
+ * AI 凭据
+ */
+export interface AiCredential {
+    provider: string;
+    apiKey: string;
+    baseUrl?: string;
+    proxyUrl?: string;
+}

package/dist/embedding/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Embedding 相关类型定义
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/embedding/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/embedding/types.ts"],"names":[],"mappings":";AAAA;;GAEG","sourcesContent":["/**\n * Embedding 相关类型定义\n */\n\n/**\n * AI 凭据\n */\nexport interface AiCredential {\n  provider: string;\n  apiKey: string;\n  baseUrl?: string;\n  proxyUrl?: string;\n}"]}

package/dist/gateway/port-finder.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Find the next available port starting from basePort
+ */
+export declare function getFreePort(basePort: number): Promise<number>;

package/dist/gateway/port-finder.js

@@ -0,0 +1,15 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFreePort = getFreePort;
+const portfinder_1 = __importDefault(require("portfinder"));
+/**
+ * Find the next available port starting from basePort
+ */
+async function getFreePort(basePort) {
+    portfinder_1.default.basePort = basePort;
+    return portfinder_1.default.getPortPromise();
+}
+//# sourceMappingURL=port-finder.js.map

package/dist/gateway/port-finder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-finder.js","sourceRoot":"","sources":["../../src/gateway/port-finder.ts"],"names":[],"mappings":";;;;;AAKA,kCAGC;AARD,4DAAoC;AAEpC;;GAEG;AACI,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,oBAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC/B,OAAO,oBAAU,CAAC,cAAc,EAAE,CAAC;AACrC,CAAC","sourcesContent":["import portfinder from 'portfinder';\n\n/**\n * Find the next available port starting from basePort\n */\nexport async function getFreePort(basePort: number): Promise<number> {\n  portfinder.basePort = basePort;\n  return portfinder.getPortPromise();\n}\n"]}

package/dist/gateway/proxy.d.ts

@@ -0,0 +1,22 @@
+import type { Supervisor } from './supervisor';
+export declare class GatewayProxy {
+    private port;
+    private supervisor;
+    private readonly logger;
+    private proxy;
+    private server;
+    private targets;
+    constructor(port: number, supervisor: Supervisor);
+    setTargets(targets: {
+        css?: string;
+        api?: string;
+    }): void;
+    start(): void;
+    private handleRequest;
+    private handleCorsPreflightRequest;
+    /**
+     * Add CORS headers matching CSS CorsHandler configuration
+     */
+    private addCorsHeaders;
+    private handleInternalApi;
+}

package/dist/gateway/proxy.js

@@ -0,0 +1,149 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GatewayProxy = void 0;
+const http_proxy_1 = __importDefault(require("http-proxy"));
+const http_1 = __importDefault(require("http"));
+const global_logger_factory_1 = require("global-logger-factory");
+// CORS configuration matching CSS CorsHandler defaults
+const CORS_CONFIG = {
+    methods: ['GET', 'HEAD', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'],
+    credentials: true,
+    allowedHeaders: [
+        'Authorization', 'Content-Type', 'Accept', 'DPoP', 'Origin',
+        'X-Requested-With', 'If-Match', 'If-None-Match', 'Slug', 'Link'
+    ],
+    exposedHeaders: [
+        'Accept-Patch', 'Accept-Post', 'Accept-Put', 'Allow', 'Content-Range',
+        'ETag', 'Last-Modified', 'Link', 'Location', 'Updates-Via',
+        'WAC-Allow', 'Www-Authenticate', 'X-Request-Id'
+    ]
+};
+class GatewayProxy {
+    constructor(port, supervisor) {
+        this.port = port;
+        this.supervisor = supervisor;
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.targets = {};
+        this.proxy = http_proxy_1.default.createProxyServer({
+            xfwd: true,
+        });
+        this.proxy.on('error', (err, _req, res) => {
+            this.logger.error('Proxy error:', err);
+            if (res && 'writeHead' in res && !res.headersSent) {
+                res.writeHead(502, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Service Unavailable', details: err.message }));
+            }
+        });
+        this.server = http_1.default.createServer(this.handleRequest.bind(this));
+        this.server.on('upgrade', (req, socket, head) => {
+            const url = req.url ?? '/';
+            // Route /ws/* WebSocket connections to API server
+            if (url.startsWith('/ws/') && this.targets.api) {
+                this.proxy.ws(req, socket, head, { target: this.targets.api });
+            }
+            else if (this.targets.css) {
+                this.proxy.ws(req, socket, head, { target: this.targets.css });
+            }
+            else {
+                socket.destroy();
+            }
+        });
+    }
+    setTargets(targets) {
+        this.targets = targets;
+    }
+    start() {
+        this.server.listen(this.port, '0.0.0.0', () => {
+            this.logger.info(`Listening on http://0.0.0.0:${this.port}`);
+        });
+    }
+    handleRequest(req, res) {
+        const url = req.url ?? '/';
+        const origin = req.headers.origin;
+        // Store original host for x-forwarded-host before any rewrites
+        const originalHost = req.headers.host;
+        // Set x-forwarded-proto based on CSS_BASE_URL
+        // Override any existing value since cloudflared sets it to 'http' for local forwarding
+        const baseUrl = process.env.CSS_BASE_URL || '';
+        if (baseUrl.startsWith('https')) {
+            req.headers['x-forwarded-proto'] = 'https';
+        }
+        // Rewrite Host header to match CSS_BASE_URL for proper routing
+        // This ensures CSS RouterHandler can correctly match paths
+        // Also set x-forwarded-host to the same value so CSS OriginalUrlExtractor uses it
+        if (baseUrl) {
+            try {
+                const parsedBaseUrl = new URL(baseUrl);
+                req.headers.host = parsedBaseUrl.host;
+                // CSS uses x-forwarded-host if present, so we need to set it to match baseUrl
+                req.headers['x-forwarded-host'] = parsedBaseUrl.host;
+            }
+            catch {
+                // Ignore invalid baseUrl, keep original host
+                if (!req.headers['x-forwarded-host']) {
+                    req.headers['x-forwarded-host'] = originalHost;
+                }
+            }
+        }
+        else if (!req.headers['x-forwarded-host']) {
+            req.headers['x-forwarded-host'] = originalHost;
+        }
+        // Use debug level for per-request logs
+        this.logger.debug(`${req.method} ${url} x-forwarded-proto=${req.headers['x-forwarded-proto']} x-forwarded-host=${req.headers['x-forwarded-host']} host=${req.headers.host}`);
+        // 1. Gateway Internal API (Status & Control) - Gateway handles CORS
+        if (url.startsWith('/_gateway/')) {
+            if (req.method === 'OPTIONS') {
+                this.handleCorsPreflightRequest(res, origin);
+                return;
+            }
+            if (origin) {
+                this.addCorsHeaders(res, origin);
+            }
+            this.handleInternalApi(req, res);
+            return;
+        }
+        // 2. API Server Routing (/v1 or /api) - API Server handles its own CORS
+        if ((url.startsWith('/v1/') || url.startsWith('/api/')) && this.targets.api) {
+            this.proxy.web(req, res, { target: this.targets.api });
+            return;
+        }
+        // 3. CSS Routing (Default) - CSS handles its own CORS
+        if (this.targets.css) {
+            this.proxy.web(req, res, { target: this.targets.css });
+        }
+        else {
+            res.writeHead(503);
+            res.end('CSS Service Not Available');
+        }
+    }
+    handleCorsPreflightRequest(res, origin) {
+        this.addCorsHeaders(res, origin);
+        res.writeHead(204);
+        res.end();
+    }
+    /**
+     * Add CORS headers matching CSS CorsHandler configuration
+     */
+    addCorsHeaders(res, origin) {
+        res.setHeader('Access-Control-Allow-Origin', origin || '*');
+        res.setHeader('Access-Control-Allow-Credentials', String(CORS_CONFIG.credentials));
+        res.setHeader('Access-Control-Allow-Methods', CORS_CONFIG.methods.join(', '));
+        res.setHeader('Access-Control-Allow-Headers', CORS_CONFIG.allowedHeaders.join(', '));
+        res.setHeader('Access-Control-Expose-Headers', CORS_CONFIG.exposedHeaders.join(', '));
+    }
+    handleInternalApi(req, res) {
+        if (req.url === '/_gateway/status') {
+            const status = this.supervisor.getAllStatus();
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify(status));
+            return;
+        }
+        res.writeHead(404);
+        res.end('Not Found');
+    }
+}
+exports.GatewayProxy = GatewayProxy;
+//# sourceMappingURL=proxy.js.map

package/dist/gateway/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/gateway/proxy.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,gDAAwB;AACxB,iEAAqD;AAGrD,uDAAuD;AACvD,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACrE,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE;QACd,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAC3D,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM;KAChE;IACD,cAAc,EAAE;QACd,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe;QACrE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa;QAC1D,WAAW,EAAE,kBAAkB,EAAE,cAAc;KAChD;CACF,CAAC;AAEF,MAAa,YAAY;IAMvB,YAAoB,IAAY,EAAU,UAAsB;QAA5C,SAAI,GAAJ,IAAI,CAAQ;QAAU,eAAU,GAAV,UAAU,CAAY;QAL/C,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAGrC,YAAO,GAAmC,EAAE,CAAC;QAGnD,IAAI,CAAC,KAAK,GAAG,oBAAS,CAAC,iBAAiB,CAAC;YACvC,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAE3B,kDAAkD;YAClD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,UAAU,CAAC,OAAuC;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAyB,EAAE,GAAwB;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,+DAA+D;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAEtC,8CAA8C;QAC9C,uFAAuF;QACvF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;QAC7C,CAAC;QAED,+DAA+D;QAC/D,2DAA2D;QAC3D,kFAAkF;QAClF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;gBACtC,8EAA8E;gBAC9E,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;gBAC7C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACrC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QACjD,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,sBAAsB,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7K,oEAAoE;QACpE,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,sDAAsD;QACtD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,GAAwB,EACxB,MAA0B;QAE1B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAwB,EAAE,MAA0B;QACzE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,iBAAiB,CAAC,GAAyB,EAAE,GAAwB;QAC3E,IAAI,GAAG,CAAC,GAAG,KAAK,kBAAkB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;CACF;AA5ID,oCA4IC","sourcesContent":["import httpProxy from 'http-proxy';\nimport http from 'http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Supervisor } from './supervisor';\n\n// CORS configuration matching CSS CorsHandler defaults\nconst CORS_CONFIG = {\n  methods: ['GET', 'HEAD', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'],\n  credentials: true,\n  allowedHeaders: [\n    'Authorization', 'Content-Type', 'Accept', 'DPoP', 'Origin',\n    'X-Requested-With', 'If-Match', 'If-None-Match', 'Slug', 'Link'\n  ],\n  exposedHeaders: [\n    'Accept-Patch', 'Accept-Post', 'Accept-Put', 'Allow', 'Content-Range',\n    'ETag', 'Last-Modified', 'Link', 'Location', 'Updates-Via',\n    'WAC-Allow', 'Www-Authenticate', 'X-Request-Id'\n  ]\n};\n\nexport class GatewayProxy {\n  private readonly logger = getLoggerFor(this);\n  private proxy: httpProxy;\n  private server: http.Server;\n  private targets: { css?: string; api?: string } = {};\n\n  constructor(private port: number, private supervisor: Supervisor) {\n    this.proxy = httpProxy.createProxyServer({\n      xfwd: true,\n    });\n\n    this.proxy.on('error', (err, _req, res) => {\n      this.logger.error('Proxy error:', err);\n      if (res && 'writeHead' in res && !res.headersSent) {\n        res.writeHead(502, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ error: 'Service Unavailable', details: err.message }));\n      }\n    });\n\n    this.server = http.createServer(this.handleRequest.bind(this));\n\n    this.server.on('upgrade', (req, socket, head) => {\n      const url = req.url ?? '/';\n\n      // Route /ws/* WebSocket connections to API server\n      if (url.startsWith('/ws/') && this.targets.api) {\n        this.proxy.ws(req, socket, head, { target: this.targets.api });\n      } else if (this.targets.css) {\n        this.proxy.ws(req, socket, head, { target: this.targets.css });\n      } else {\n        socket.destroy();\n      }\n    });\n  }\n\n  public setTargets(targets: { css?: string; api?: string }) {\n    this.targets = targets;\n  }\n\n  public start(): void {\n    this.server.listen(this.port, '0.0.0.0', () => {\n      this.logger.info(`Listening on http://0.0.0.0:${this.port}`);\n    });\n  }\n\n  private handleRequest(req: http.IncomingMessage, res: http.ServerResponse): void {\n    const url = req.url ?? '/';\n    const origin = req.headers.origin;\n\n    // Store original host for x-forwarded-host before any rewrites\n    const originalHost = req.headers.host;\n\n    // Set x-forwarded-proto based on CSS_BASE_URL\n    // Override any existing value since cloudflared sets it to 'http' for local forwarding\n    const baseUrl = process.env.CSS_BASE_URL || '';\n    if (baseUrl.startsWith('https')) {\n      req.headers['x-forwarded-proto'] = 'https';\n    }\n\n    // Rewrite Host header to match CSS_BASE_URL for proper routing\n    // This ensures CSS RouterHandler can correctly match paths\n    // Also set x-forwarded-host to the same value so CSS OriginalUrlExtractor uses it\n    if (baseUrl) {\n      try {\n        const parsedBaseUrl = new URL(baseUrl);\n        req.headers.host = parsedBaseUrl.host;\n        // CSS uses x-forwarded-host if present, so we need to set it to match baseUrl\n        req.headers['x-forwarded-host'] = parsedBaseUrl.host;\n      } catch {\n        // Ignore invalid baseUrl, keep original host\n        if (!req.headers['x-forwarded-host']) {\n          req.headers['x-forwarded-host'] = originalHost;\n        }\n      }\n    } else if (!req.headers['x-forwarded-host']) {\n      req.headers['x-forwarded-host'] = originalHost;\n    }\n\n    // Use debug level for per-request logs\n    this.logger.debug(`${req.method} ${url} x-forwarded-proto=${req.headers['x-forwarded-proto']} x-forwarded-host=${req.headers['x-forwarded-host']} host=${req.headers.host}`);\n\n    // 1. Gateway Internal API (Status & Control) - Gateway handles CORS\n    if (url.startsWith('/_gateway/')) {\n      if (req.method === 'OPTIONS') {\n        this.handleCorsPreflightRequest(res, origin);\n        return;\n      }\n      if (origin) {\n        this.addCorsHeaders(res, origin);\n      }\n      this.handleInternalApi(req, res);\n      return;\n    }\n\n    // 2. API Server Routing (/v1 or /api) - API Server handles its own CORS\n    if ((url.startsWith('/v1/') || url.startsWith('/api/')) && this.targets.api) {\n      this.proxy.web(req, res, { target: this.targets.api });\n      return;\n    }\n\n    // 3. CSS Routing (Default) - CSS handles its own CORS\n    if (this.targets.css) {\n      this.proxy.web(req, res, { target: this.targets.css });\n    } else {\n      res.writeHead(503);\n      res.end('CSS Service Not Available');\n    }\n  }\n\n  private handleCorsPreflightRequest(\n    res: http.ServerResponse,\n    origin: string | undefined\n  ): void {\n    this.addCorsHeaders(res, origin);\n    res.writeHead(204);\n    res.end();\n  }\n\n  /**\n   * Add CORS headers matching CSS CorsHandler configuration\n   */\n  private addCorsHeaders(res: http.ServerResponse, origin: string | undefined): void {\n    res.setHeader('Access-Control-Allow-Origin', origin || '*');\n    res.setHeader('Access-Control-Allow-Credentials', String(CORS_CONFIG.credentials));\n    res.setHeader('Access-Control-Allow-Methods', CORS_CONFIG.methods.join(', '));\n    res.setHeader('Access-Control-Allow-Headers', CORS_CONFIG.allowedHeaders.join(', '));\n    res.setHeader('Access-Control-Expose-Headers', CORS_CONFIG.exposedHeaders.join(', '));\n  }\n\n  private handleInternalApi(req: http.IncomingMessage, res: http.ServerResponse): void {\n    if (req.url === '/_gateway/status') {\n      const status = this.supervisor.getAllStatus();\n      res.writeHead(200, { 'Content-Type': 'application/json' });\n      res.end(JSON.stringify(status));\n      return;\n    }\n\n    res.writeHead(404);\n    res.end('Not Found');\n  }\n}\n"]}

package/dist/gateway/supervisor.d.ts

@@ -0,0 +1,2 @@
+export { Supervisor } from '../supervisor';
+export type { ServiceConfig, ServiceState, ServiceStatus } from '../supervisor';

package/dist/gateway/supervisor.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Supervisor = void 0;
+// Re-export from shared lib
+var supervisor_1 = require("../supervisor");
+Object.defineProperty(exports, "Supervisor", { enumerable: true, get: function () { return supervisor_1.Supervisor; } });
+//# sourceMappingURL=supervisor.js.map

package/dist/gateway/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/gateway/supervisor.ts"],"names":[],"mappings":";;;AAAA,4BAA4B;AAC5B,4CAA2C;AAAlC,wGAAA,UAAU,OAAA","sourcesContent":["// Re-export from shared lib\nexport { Supervisor } from '../supervisor';\nexport type { ServiceConfig, ServiceState, ServiceStatus } from '../supervisor';\n"]}

package/dist/gateway/types.d.ts

@@ -0,0 +1 @@
+export type { ServiceConfig, ServiceState, ServiceStatus } from '../supervisor';

package/dist/gateway/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/gateway/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"","sourcesContent":["// Re-export from shared lib\nexport type { ServiceConfig, ServiceState, ServiceStatus } from '../supervisor';\n"]}

package/dist/http/AppStaticAssetHandler.d.ts

@@ -0,0 +1,8 @@
+import { StaticAssetHandler } from '@solid/community-server';
+/**
+ * A specialized StaticAssetHandler that serves the React UI assets
+ * from the 'static/app' directory under the '/app/' URL path.
+ */
+export declare class AppStaticAssetHandler extends StaticAssetHandler {
+    constructor();
+}

package/dist/http/AppStaticAssetHandler.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppStaticAssetHandler = void 0;
+const community_server_1 = require("@solid/community-server");
+const path_1 = __importDefault(require("path"));
+/**
+ * A specialized StaticAssetHandler that serves the React UI assets
+ * from the 'static/app' directory under the '/app/' URL path.
+ */
+class AppStaticAssetHandler extends community_server_1.StaticAssetHandler {
+    constructor() {
+        const assetsPath = path_1.default.join(process.cwd(), 'static/app/');
+        console.log('AppStaticAssetHandler initialized!');
+        console.log('Serving /app/ from:', assetsPath);
+        super([
+            {
+                relativeUrl: '/app/',
+                filePath: assetsPath
+            }
+        ], 'http://xpod.local/');
+    }
+}
+exports.AppStaticAssetHandler = AppStaticAssetHandler;
+//# sourceMappingURL=AppStaticAssetHandler.js.map

package/dist/http/AppStaticAssetHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppStaticAssetHandler.js","sourceRoot":"","sources":["../../src/http/AppStaticAssetHandler.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA6D;AAC7D,gDAAwB;AAExB;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,qCAAkB;IAC3D;QACE,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;QAE/C,KAAK,CACH;YACE;gBACE,WAAW,EAAE,OAAO;gBACpB,QAAQ,EAAE,UAAU;aACrB;SACF,EACD,oBAAoB,CACrB,CAAC;IACJ,CAAC;CACF;AAhBD,sDAgBC","sourcesContent":["import { StaticAssetHandler } from '@solid/community-server';\nimport path from 'path';\n\n/**\n * A specialized StaticAssetHandler that serves the React UI assets\n * from the 'static/app' directory under the '/app/' URL path.\n */\nexport class AppStaticAssetHandler extends StaticAssetHandler {\n  constructor() {\n    const assetsPath = path.join(process.cwd(), 'static/app/');\n    console.log('AppStaticAssetHandler initialized!');\n    console.log('Serving /app/ from:', assetsPath);\n    \n    super(\n      [\n        {\n          relativeUrl: '/app/',\n          filePath: assetsPath\n        }\n      ],\n      'http://xpod.local/' \n    );\n  }\n}\n"]}

package/dist/http/AppStaticAssetHandler.jsonld

@@ -0,0 +1,26 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/AppStaticAssetHandler.jsonld#AppStaticAssetHandler",
+      "@type": "Class",
+      "requireElement": "AppStaticAssetHandler",
+      "extends": [
+        "css:dist/server/middleware/StaticAssetHandler.jsonld#StaticAssetHandler"
+      ],
+      "comment": "A specialized StaticAssetHandler that serves the React UI assets from the 'static/app' directory under the '/app/' URL path.",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/AppStaticAssetHandler.jsonld#AppStaticAssetHandler__member_constructor",
+          "memberFieldName": "constructor"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/http/ClusterIngressRouter.d.ts

@@ -0,0 +1,93 @@
+import { HttpHandler } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
+import { EdgeNodeRepository } from '../identity/drizzle/EdgeNodeRepository';
+interface ClusterIngressRouterOptions {
+    identityDbUrl: string;
+    edgeNodesEnabled?: string | boolean;
+    repository?: EdgeNodeRepository;
+    clusterIngressDomain: string;
+    skipAuthRedirect?: boolean;
+    fetchImpl?: any;
+}
+/**
+ * Cluster Ingress Router - 集群统一入口路由器
+ *
+ * 实现我们设计的混合路由策略：
+ * 1. 所有节点子域名DNS都指向集群入口
+ * 2. 认证请求路由到集群IDP
+ * 3. 数据请求根据节点模式智能路由（307重定向 vs 代理）
+ *
+ * Note: WebSocket 代理由 ClusterWebSocketConfigurator 处理
+ */
+export declare class ClusterIngressRouter extends HttpHandler {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly repository;
+    private readonly enabled;
+    private readonly clusterIngressDomain;
+    private readonly skipAuthRedirect;
+    private readonly fetchImpl;
+    private readonly authPaths;
+    constructor(options: ClusterIngressRouterOptions);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ request, response }: HttpHandlerInput): Promise<void>;
+    /**
+     * Handle authentication requests - always route to cluster IDP
+     */
+    private handleAuthenticationRequest;
+    /**
+     * Handle data requests - route based on node access mode
+     */
+    private handleDataRequest;
+    /**
+     * Handle direct mode - redirect to node's public IP
+     */
+    private handleDirectModeRedirect;
+    /**
+     * Handle proxy mode - proxy the request through tunnel
+     */
+    private handleProxyModeRequest;
+    /**
+     * Resolve upstream endpoint from node metadata
+     */
+    private resolveUpstream;
+    /**
+     * Build headers for proxy request
+     */
+    private buildProxyHeaders;
+    /**
+     * Read request body for proxy forwarding
+     */
+    private readRequestBody;
+    /**
+     * Check if request path is for authentication
+     */
+    private isAuthenticationRequest;
+    /**
+     * Rewrite the incoming request so downstream handlers treat it as cluster IDP traffic.
+     */
+    private rewriteRequestForClusterIdp;
+    /**
+     * Extract node ID from hostname
+     * e.g., "node1.cluster.example.com" -> "node1"
+     */
+    private extractNodeIdFromHostname;
+    /**
+     * Extract hostname from request headers
+     * Check for original host header first (set by ClusterHttpServerFactory)
+     */
+    private extractHostname;
+    /**
+     * Parse request URL
+     */
+    private parseUrl;
+    /**
+     * Normalize domain input; accept bare host or full URL.
+     */
+    private normalizeDomain;
+    /**
+     * Normalize boolean values from string/boolean
+     */
+    private normalizeBoolean;
+    private normalizeMode;
+}
+export {};