@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/http/admin/EdgeNodeAdminHttpHandler.d.ts

@@ -0,0 +1,45 @@
+import { HttpHandler } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
+import { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+import { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';
+interface EdgeNodeAdminHttpHandlerOptions {
+    identityDbUrl: string;
+    basePath?: string;
+    edgeNodesEnabled?: string | boolean;
+    repository?: EdgeNodeRepository;
+    capabilityDetector?: EdgeNodeCapabilityDetector;
+}
+/**
+ * Edge Node Administration HTTP Handler
+ *
+ * Provides REST API endpoints for edge node administration:
+ * - GET /admin/nodes - List all nodes with their capabilities
+ * - GET /admin/nodes/{nodeId} - Get specific node information
+ * - GET /admin/nodes/{nodeId}/capabilities - Get node capability details
+ */
+export declare class EdgeNodeAdminHttpHandler extends HttpHandler {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly repo;
+    private readonly basePath;
+    private readonly basePathWithSlash;
+    private readonly enabled;
+    private readonly capabilityDetector?;
+    constructor(options: EdgeNodeAdminHttpHandlerOptions);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ request, response }: HttpHandlerInput): Promise<void>;
+    private handleGet;
+    private listNodes;
+    private getNode;
+    private getNodeCapabilities;
+    private handlePost;
+    private createNode;
+    private readRequestBody;
+    private writeOptions;
+    private writeJsonResponse;
+    private parseUrl;
+    private matchesBase;
+    private toRelative;
+    private normalizeBasePath;
+    private normalizeBoolean;
+}
+export {};

package/dist/http/admin/EdgeNodeAdminHttpHandler.js

@@ -0,0 +1,292 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EdgeNodeAdminHttpHandler = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const community_server_2 = require("@solid/community-server");
+const db_1 = require("../../identity/drizzle/db");
+const EdgeNodeRepository_1 = require("../../identity/drizzle/EdgeNodeRepository");
+const EdgeNodeCapabilityDetector_1 = require("../../edge/EdgeNodeCapabilityDetector");
+/**
+ * Edge Node Administration HTTP Handler
+ *
+ * Provides REST API endpoints for edge node administration:
+ * - GET /admin/nodes - List all nodes with their capabilities
+ * - GET /admin/nodes/{nodeId} - Get specific node information
+ * - GET /admin/nodes/{nodeId}/capabilities - Get node capability details
+ */
+class EdgeNodeAdminHttpHandler extends community_server_1.HttpHandler {
+    constructor(options) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.repo = options.repository ?? new EdgeNodeRepository_1.EdgeNodeRepository((0, db_1.getIdentityDatabase)(options.identityDbUrl));
+        this.basePath = this.normalizeBasePath(options.basePath ?? '/admin/nodes');
+        this.basePathWithSlash = `${this.basePath}/`;
+        this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);
+        this.capabilityDetector = options.capabilityDetector;
+    }
+    async canHandle({ request }) {
+        if (!this.enabled) {
+            throw new community_server_2.NotImplementedHttpError('Edge node admin API is disabled.');
+        }
+        const pathname = this.parseUrl(request).pathname;
+        if (!this.matchesBase(pathname)) {
+            throw new community_server_2.NotImplementedHttpError('Not an edge node admin request.');
+        }
+    }
+    async handle({ request, response }) {
+        const method = (request.method ?? 'GET').toUpperCase();
+        if (method === 'OPTIONS') {
+            this.writeOptions(response);
+            return;
+        }
+        const url = this.parseUrl(request);
+        const relative = this.toRelative(url.pathname);
+        try {
+            switch (method) {
+                case 'GET':
+                    await this.handleGet(relative, response);
+                    break;
+                case 'POST':
+                    await this.handlePost(relative, request, response);
+                    break;
+                default:
+                    throw new community_server_2.MethodNotAllowedHttpError(['GET', 'POST', 'OPTIONS']);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.logger.error(`Edge node admin API error: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    async handleGet(path, response) {
+        if (path === '') {
+            // GET /admin/nodes - List all nodes
+            await this.listNodes(response);
+        }
+        else {
+            // Parse path segments
+            const segments = path.split('/').filter(s => s.length > 0);
+            if (segments.length === 1) {
+                // GET /admin/nodes/{nodeId} - Get specific node
+                await this.getNode(segments[0], response);
+            }
+            else if (segments.length === 2 && segments[1] === 'capabilities') {
+                // GET /admin/nodes/{nodeId}/capabilities - Get node capabilities
+                await this.getNodeCapabilities(segments[0], response);
+            }
+            else {
+                throw new community_server_2.NotFoundHttpError('Unknown endpoint.');
+            }
+        }
+    }
+    async listNodes(response) {
+        try {
+            const nodes = await this.repo.listNodeCapabilities();
+            const result = {
+                nodes: nodes.map(node => ({
+                    nodeId: node.nodeId,
+                    accessMode: node.accessMode,
+                    connectivityStatus: node.connectivityStatus,
+                    lastSeen: node.lastSeen?.toISOString(),
+                    capabilities: {
+                        structured: node.capabilities,
+                        strings: node.stringCapabilities,
+                    },
+                })),
+                total: nodes.length,
+                timestamp: new Date().toISOString(),
+            };
+            this.writeJsonResponse(response, result);
+        }
+        catch (error) {
+            throw new community_server_2.InternalServerError('Failed to list edge nodes.', { cause: error });
+        }
+    }
+    async getNode(nodeId, response) {
+        try {
+            const nodeInfo = await this.repo.getNodeCapabilities(nodeId);
+            if (!nodeInfo) {
+                throw new community_server_2.NotFoundHttpError(`Edge node '${nodeId}' not found.`);
+            }
+            const result = {
+                nodeId: nodeInfo.nodeId,
+                accessMode: nodeInfo.accessMode,
+                connectivityStatus: nodeInfo.connectivityStatus,
+                lastSeen: nodeInfo.lastSeen?.toISOString(),
+                capabilities: {
+                    structured: nodeInfo.capabilities,
+                    strings: nodeInfo.stringCapabilities,
+                },
+                timestamp: new Date().toISOString(),
+            };
+            this.writeJsonResponse(response, result);
+        }
+        catch (error) {
+            if (error instanceof community_server_2.NotFoundHttpError) {
+                throw error;
+            }
+            throw new community_server_2.InternalServerError('Failed to get edge node information.', { cause: error });
+        }
+    }
+    async getNodeCapabilities(nodeId, response) {
+        try {
+            const nodeInfo = await this.repo.getNodeCapabilities(nodeId);
+            if (!nodeInfo) {
+                throw new community_server_2.NotFoundHttpError(`Edge node '${nodeId}' not found.`);
+            }
+            // If we have a capability detector, also provide real-time capability detection
+            let detectedCapabilities;
+            if (this.capabilityDetector) {
+                try {
+                    detectedCapabilities = await this.capabilityDetector.detectCapabilities();
+                }
+                catch (error) {
+                    this.logger.warn(`Failed to detect real-time capabilities for node ${nodeId}: ${error.message}`);
+                }
+            }
+            const result = {
+                nodeId: nodeInfo.nodeId,
+                capabilities: {
+                    // Stored structured capabilities from the database
+                    stored: nodeInfo.capabilities,
+                    // String capabilities array for backward compatibility
+                    strings: nodeInfo.stringCapabilities,
+                    // Real-time detected capabilities (if available)
+                    detected: detectedCapabilities,
+                    // Parsed capabilities from strings for easier consumption
+                    parsed: nodeInfo.stringCapabilities ?
+                        EdgeNodeCapabilityDetector_1.EdgeNodeCapabilityDetector.parseCapabilitiesFromStringArray(nodeInfo.stringCapabilities) :
+                        null,
+                },
+                accessMode: nodeInfo.accessMode,
+                connectivityStatus: nodeInfo.connectivityStatus,
+                lastSeen: nodeInfo.lastSeen?.toISOString(),
+                timestamp: new Date().toISOString(),
+            };
+            this.writeJsonResponse(response, result);
+        }
+        catch (error) {
+            if (error instanceof community_server_2.NotFoundHttpError) {
+                throw error;
+            }
+            throw new community_server_2.InternalServerError('Failed to get edge node capabilities.', { cause: error });
+        }
+    }
+    async handlePost(path, request, response) {
+        if (path === '') {
+            // POST /admin/nodes - Create new node
+            await this.createNode(request, response);
+        }
+        else {
+            throw new community_server_2.NotFoundHttpError('Unknown endpoint.');
+        }
+    }
+    async createNode(request, response) {
+        const payload = await this.readRequestBody(request);
+        let displayName;
+        // Parse request body if provided
+        if (payload) {
+            try {
+                const data = JSON.parse(payload);
+                displayName = typeof data.displayName === 'string' ? data.displayName : undefined;
+            }
+            catch {
+                // Ignore JSON parsing errors, displayName will remain undefined
+            }
+        }
+        try {
+            const result = await this.repo.createNode(displayName);
+            this.logger.info(`Created new edge node: ${result.nodeId} (${displayName || 'no display name'})`);
+            const response_data = {
+                success: true,
+                nodeId: result.nodeId,
+                token: result.token,
+                displayName: displayName,
+                createdAt: result.createdAt,
+                message: 'Edge node created successfully. Save the token - it will not be shown again.',
+            };
+            this.writeJsonResponse(response, response_data, 201);
+        }
+        catch (error) {
+            this.logger.error(`Failed to create edge node: ${String(error)}`);
+            throw new community_server_2.InternalServerError('Failed to create edge node.', { cause: error });
+        }
+    }
+    async readRequestBody(request) {
+        return new Promise((resolve, reject) => {
+            let body = '';
+            request.on('data', (chunk) => {
+                body += chunk.toString();
+            });
+            request.on('end', () => {
+                resolve(body);
+            });
+            request.on('error', reject);
+        });
+    }
+    writeOptions(response) {
+        response.writeHead(204, {
+            'Access-Control-Allow-Origin': '*',
+            'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+            'Access-Control-Allow-Headers': 'Authorization, Content-Type',
+            'Access-Control-Max-Age': '86400',
+        });
+        response.end();
+    }
+    writeJsonResponse(response, data, statusCode = 200) {
+        const json = JSON.stringify(data, null, 2);
+        response.writeHead(statusCode, {
+            'Content-Type': 'application/json; charset=utf-8',
+            'Content-Length': Buffer.byteLength(json),
+            'Access-Control-Allow-Origin': '*',
+            'Cache-Control': 'no-cache, no-store, must-revalidate',
+        });
+        response.end(json);
+    }
+    parseUrl(request) {
+        const urlString = request.url;
+        if (!urlString) {
+            throw new community_server_2.BadRequestHttpError('Invalid request URL.');
+        }
+        try {
+            return new URL(urlString, `http://${request.headers.host ?? 'localhost'}`);
+        }
+        catch {
+            throw new community_server_2.BadRequestHttpError('Invalid request URL format.');
+        }
+    }
+    matchesBase(pathname) {
+        return pathname === this.basePath || pathname.startsWith(this.basePathWithSlash);
+    }
+    toRelative(pathname) {
+        if (pathname === this.basePath) {
+            return '';
+        }
+        if (pathname.startsWith(this.basePathWithSlash)) {
+            return pathname.substring(this.basePathWithSlash.length);
+        }
+        return pathname;
+    }
+    normalizeBasePath(path) {
+        const trimmed = path.trim();
+        if (!trimmed.startsWith('/')) {
+            return `/${trimmed}`;
+        }
+        return trimmed.endsWith('/') ? trimmed.slice(0, -1) : trimmed;
+    }
+    normalizeBoolean(value) {
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        if (typeof value === 'string') {
+            const normalized = value.trim().toLowerCase();
+            return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';
+        }
+        return false;
+    }
+}
+exports.EdgeNodeAdminHttpHandler = EdgeNodeAdminHttpHandler;
+//# sourceMappingURL=EdgeNodeAdminHttpHandler.js.map

package/dist/http/admin/EdgeNodeAdminHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeAdminHttpHandler.js","sourceRoot":"","sources":["../../../src/http/admin/EdgeNodeAdminHttpHandler.ts"],"names":[],"mappings":";;;AACA,iEAAqD;AACrD,8DAAsD;AAEtD,8DAOiC;AACjC,kDAAgE;AAChE,kFAA+E;AAC/E,sFAAmF;AAUnF;;;;;;;GAOG;AACH,MAAa,wBAAyB,SAAQ,8BAAW;IAQvD,YAAmB,OAAwC;QACzD,KAAK,EAAE,CAAC;QARS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAS7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,uCAAkB,CAAC,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC;QAC3E,IAAI,CAAC,iBAAiB,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvD,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,0CAAuB,CAAC,kCAAkC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,0CAAuB,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,KAAK;oBACR,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACzC,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACnD,MAAM;gBACR;oBACE,MAAM,IAAI,4CAAyB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,QAAsB;QAC1D,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,oCAAoC;YACpC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,sBAAsB;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,gDAAgD;gBAChD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;gBACnE,iEAAiE;gBACjE,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,oCAAiB,CAAC,mBAAmB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAsB;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAErD,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE;oBACtC,YAAY,EAAE;wBACZ,UAAU,EAAE,IAAI,CAAC,YAAY;wBAC7B,OAAO,EAAE,IAAI,CAAC,kBAAkB;qBACjC;iBACF,CAAC,CAAC;gBACH,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,QAAsB;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,oCAAiB,CAAC,cAAc,MAAM,cAAc,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE;gBAC1C,YAAY,EAAE;oBACZ,UAAU,EAAE,QAAQ,CAAC,YAAY;oBACjC,OAAO,EAAE,QAAQ,CAAC,kBAAkB;iBACrC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,oCAAiB,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,sCAAmB,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,QAAsB;QACtE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,oCAAiB,CAAC,cAAc,MAAM,cAAc,CAAC,CAAC;YAClE,CAAC;YAED,gFAAgF;YAChF,IAAI,oBAAoB,CAAC;YACzB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,oBAAoB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;gBAC5E,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,MAAM,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,YAAY,EAAE;oBACZ,mDAAmD;oBACnD,MAAM,EAAE,QAAQ,CAAC,YAAY;oBAC7B,uDAAuD;oBACvD,OAAO,EAAE,QAAQ,CAAC,kBAAkB;oBACpC,iDAAiD;oBACjD,QAAQ,EAAE,oBAAoB;oBAC9B,0DAA0D;oBAC1D,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;wBACnC,uDAA0B,CAAC,gCAAgC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;wBAC1F,IAAI;iBACP;gBACD,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE;gBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,oCAAiB,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,sCAAmB,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAwB,EAAE,QAAsB;QACrF,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,sCAAsC;YACtC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,oCAAiB,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAwB,EAAE,QAAsB;QACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,WAA+B,CAAC;QAEpC,iCAAiC;QACjC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACjC,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAEvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,iBAAiB,GAAG,CAAC,CAAC;YAElG,MAAM,aAAa,GAAG;gBACpB,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,WAAW;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,8EAA8E;aACxF,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,sCAAmB,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAwB;QACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACrB,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,QAAsB;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,6BAA6B,EAAE,GAAG;YAClC,8BAA8B,EAAE,oBAAoB;YACpD,8BAA8B,EAAE,6BAA6B;YAC7D,wBAAwB,EAAE,OAAO;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,iBAAiB,CAAC,QAAsB,EAAE,IAAa,EAAE,UAAU,GAAG,GAAG;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,iCAAiC;YACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACzC,6BAA6B,EAAE,GAAG;YAClC,eAAe,EAAE,qCAAqC;SACvD,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAEO,QAAQ,CAAC,OAAwB;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,sCAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,sCAAmB,CAAC,6BAA6B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,CAAC;IAEO,gBAAgB,CAAC,KAAwB;QAC/C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC;QACpG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA3SD,4DA2SC","sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpResponse } from '@solid/community-server';\nimport {\n  BadRequestHttpError,\n  InternalServerError,\n  MethodNotAllowedHttpError,\n  NotFoundHttpError,\n  NotImplementedHttpError,\n  \n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';\n\ninterface EdgeNodeAdminHttpHandlerOptions {\n  identityDbUrl: string;\n  basePath?: string;\n  edgeNodesEnabled?: string | boolean;\n  repository?: EdgeNodeRepository;\n  capabilityDetector?: EdgeNodeCapabilityDetector;\n}\n\n/**\n * Edge Node Administration HTTP Handler\n * \n * Provides REST API endpoints for edge node administration:\n * - GET /admin/nodes - List all nodes with their capabilities\n * - GET /admin/nodes/{nodeId} - Get specific node information\n * - GET /admin/nodes/{nodeId}/capabilities - Get node capability details\n */\nexport class EdgeNodeAdminHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly repo: EdgeNodeRepository;\n  private readonly basePath: string;\n  private readonly basePathWithSlash: string;\n  private readonly enabled: boolean;\n  private readonly capabilityDetector?: EdgeNodeCapabilityDetector;\n\n  public constructor(options: EdgeNodeAdminHttpHandlerOptions) {\n    super();\n    this.repo = options.repository ?? new EdgeNodeRepository(getIdentityDatabase(options.identityDbUrl));\n    this.basePath = this.normalizeBasePath(options.basePath ?? '/admin/nodes');\n    this.basePathWithSlash = `${this.basePath}/`;\n    this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);\n    this.capabilityDetector = options.capabilityDetector;\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    if (!this.enabled) {\n      throw new NotImplementedHttpError('Edge node admin API is disabled.');\n    }\n    const pathname = this.parseUrl(request).pathname;\n    if (!this.matchesBase(pathname)) {\n      throw new NotImplementedHttpError('Not an edge node admin request.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n    \n    const url = this.parseUrl(request);\n    const relative = this.toRelative(url.pathname);\n    \n    try {\n      switch (method) {\n        case 'GET':\n          await this.handleGet(relative, response);\n          break;\n        case 'POST':\n          await this.handlePost(relative, request, response);\n          break;\n        default:\n          throw new MethodNotAllowedHttpError(['GET', 'POST', 'OPTIONS']);\n      }\n    } catch (error: unknown) {\n      if (error instanceof Error) {\n        this.logger.error(`Edge node admin API error: ${error.message}`);\n      }\n      throw error;\n    }\n  }\n\n  private async handleGet(path: string, response: HttpResponse): Promise<void> {\n    if (path === '') {\n      // GET /admin/nodes - List all nodes\n      await this.listNodes(response);\n    } else {\n      // Parse path segments\n      const segments = path.split('/').filter(s => s.length > 0);\n      \n      if (segments.length === 1) {\n        // GET /admin/nodes/{nodeId} - Get specific node\n        await this.getNode(segments[0], response);\n      } else if (segments.length === 2 && segments[1] === 'capabilities') {\n        // GET /admin/nodes/{nodeId}/capabilities - Get node capabilities\n        await this.getNodeCapabilities(segments[0], response);\n      } else {\n        throw new NotFoundHttpError('Unknown endpoint.');\n      }\n    }\n  }\n\n  private async listNodes(response: HttpResponse): Promise<void> {\n    try {\n      const nodes = await this.repo.listNodeCapabilities();\n      \n      const result = {\n        nodes: nodes.map(node => ({\n          nodeId: node.nodeId,\n          accessMode: node.accessMode,\n          connectivityStatus: node.connectivityStatus,\n          lastSeen: node.lastSeen?.toISOString(),\n          capabilities: {\n            structured: node.capabilities,\n            strings: node.stringCapabilities,\n          },\n        })),\n        total: nodes.length,\n        timestamp: new Date().toISOString(),\n      };\n\n      this.writeJsonResponse(response, result);\n    } catch (error: unknown) {\n      throw new InternalServerError('Failed to list edge nodes.', { cause: error });\n    }\n  }\n\n  private async getNode(nodeId: string, response: HttpResponse): Promise<void> {\n    try {\n      const nodeInfo = await this.repo.getNodeCapabilities(nodeId);\n      \n      if (!nodeInfo) {\n        throw new NotFoundHttpError(`Edge node '${nodeId}' not found.`);\n      }\n\n      const result = {\n        nodeId: nodeInfo.nodeId,\n        accessMode: nodeInfo.accessMode,\n        connectivityStatus: nodeInfo.connectivityStatus,\n        lastSeen: nodeInfo.lastSeen?.toISOString(),\n        capabilities: {\n          structured: nodeInfo.capabilities,\n          strings: nodeInfo.stringCapabilities,\n        },\n        timestamp: new Date().toISOString(),\n      };\n\n      this.writeJsonResponse(response, result);\n    } catch (error: unknown) {\n      if (error instanceof NotFoundHttpError) {\n        throw error;\n      }\n      throw new InternalServerError('Failed to get edge node information.', { cause: error });\n    }\n  }\n\n  private async getNodeCapabilities(nodeId: string, response: HttpResponse): Promise<void> {\n    try {\n      const nodeInfo = await this.repo.getNodeCapabilities(nodeId);\n      \n      if (!nodeInfo) {\n        throw new NotFoundHttpError(`Edge node '${nodeId}' not found.`);\n      }\n\n      // If we have a capability detector, also provide real-time capability detection\n      let detectedCapabilities;\n      if (this.capabilityDetector) {\n        try {\n          detectedCapabilities = await this.capabilityDetector.detectCapabilities();\n        } catch (error: unknown) {\n          this.logger.warn(`Failed to detect real-time capabilities for node ${nodeId}: ${(error as Error).message}`);\n        }\n      }\n\n      const result = {\n        nodeId: nodeInfo.nodeId,\n        capabilities: {\n          // Stored structured capabilities from the database\n          stored: nodeInfo.capabilities,\n          // String capabilities array for backward compatibility\n          strings: nodeInfo.stringCapabilities,\n          // Real-time detected capabilities (if available)\n          detected: detectedCapabilities,\n          // Parsed capabilities from strings for easier consumption\n          parsed: nodeInfo.stringCapabilities ? \n            EdgeNodeCapabilityDetector.parseCapabilitiesFromStringArray(nodeInfo.stringCapabilities) : \n            null,\n        },\n        accessMode: nodeInfo.accessMode,\n        connectivityStatus: nodeInfo.connectivityStatus,\n        lastSeen: nodeInfo.lastSeen?.toISOString(),\n        timestamp: new Date().toISOString(),\n      };\n\n      this.writeJsonResponse(response, result);\n    } catch (error: unknown) {\n      if (error instanceof NotFoundHttpError) {\n        throw error;\n      }\n      throw new InternalServerError('Failed to get edge node capabilities.', { cause: error });\n    }\n  }\n\n  private async handlePost(path: string, request: IncomingMessage, response: HttpResponse): Promise<void> {\n    if (path === '') {\n      // POST /admin/nodes - Create new node\n      await this.createNode(request, response);\n    } else {\n      throw new NotFoundHttpError('Unknown endpoint.');\n    }\n  }\n\n  private async createNode(request: IncomingMessage, response: HttpResponse): Promise<void> {\n    const payload = await this.readRequestBody(request);\n    let displayName: string | undefined;\n\n    // Parse request body if provided\n    if (payload) {\n      try {\n        const data = JSON.parse(payload);\n        displayName = typeof data.displayName === 'string' ? data.displayName : undefined;\n      } catch {\n        // Ignore JSON parsing errors, displayName will remain undefined\n      }\n    }\n\n    try {\n      const result = await this.repo.createNode(displayName);\n      \n      this.logger.info(`Created new edge node: ${result.nodeId} (${displayName || 'no display name'})`);\n      \n      const response_data = {\n        success: true,\n        nodeId: result.nodeId,\n        token: result.token,\n        displayName: displayName,\n        createdAt: result.createdAt,\n        message: 'Edge node created successfully. Save the token - it will not be shown again.',\n      };\n\n      this.writeJsonResponse(response, response_data, 201);\n    } catch (error: unknown) {\n      this.logger.error(`Failed to create edge node: ${String(error)}`);\n      throw new InternalServerError('Failed to create edge node.', { cause: error });\n    }\n  }\n\n  private async readRequestBody(request: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      let body = '';\n      request.on('data', (chunk: Buffer) => {\n        body += chunk.toString();\n      });\n      request.on('end', () => {\n        resolve(body);\n      });\n      request.on('error', reject);\n    });\n  }\n\n  private writeOptions(response: HttpResponse): void {\n    response.writeHead(204, {\n      'Access-Control-Allow-Origin': '*',\n      'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',\n      'Access-Control-Allow-Headers': 'Authorization, Content-Type',\n      'Access-Control-Max-Age': '86400',\n    });\n    response.end();\n  }\n\n  private writeJsonResponse(response: HttpResponse, data: unknown, statusCode = 200): void {\n    const json = JSON.stringify(data, null, 2);\n    response.writeHead(statusCode, {\n      'Content-Type': 'application/json; charset=utf-8',\n      'Content-Length': Buffer.byteLength(json),\n      'Access-Control-Allow-Origin': '*',\n      'Cache-Control': 'no-cache, no-store, must-revalidate',\n    });\n    response.end(json);\n  }\n\n  private parseUrl(request: IncomingMessage): URL {\n    const urlString = request.url;\n    if (!urlString) {\n      throw new BadRequestHttpError('Invalid request URL.');\n    }\n    try {\n      return new URL(urlString, `http://${request.headers.host ?? 'localhost'}`);\n    } catch {\n      throw new BadRequestHttpError('Invalid request URL format.');\n    }\n  }\n\n  private matchesBase(pathname: string): boolean {\n    return pathname === this.basePath || pathname.startsWith(this.basePathWithSlash);\n  }\n\n  private toRelative(pathname: string): string {\n    if (pathname === this.basePath) {\n      return '';\n    }\n    if (pathname.startsWith(this.basePathWithSlash)) {\n      return pathname.substring(this.basePathWithSlash.length);\n    }\n    return pathname;\n  }\n\n  private normalizeBasePath(path: string): string {\n    const trimmed = path.trim();\n    if (!trimmed.startsWith('/')) {\n      return `/${trimmed}`;\n    }\n    return trimmed.endsWith('/') ? trimmed.slice(0, -1) : trimmed;\n  }\n\n  private normalizeBoolean(value?: string | boolean): boolean {\n    if (typeof value === 'boolean') {\n      return value;\n    }\n    if (typeof value === 'string') {\n      const normalized = value.trim().toLowerCase();\n      return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';\n    }\n    return false;\n  }\n}"]}

package/dist/http/admin/EdgeNodeCertificateHttpHandler.d.ts

@@ -0,0 +1,33 @@
+import { HttpHandler } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
+import { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+import { EdgeNodeCertificateService } from '../../service/EdgeNodeCertificateService';
+interface EdgeNodeCertificateHttpHandlerOptions {
+    identityDbUrl: string;
+    edgeNodesEnabled?: string | boolean;
+    repository?: EdgeNodeRepository;
+    certificateService: EdgeNodeCertificateService;
+    basePath?: string;
+}
+export declare class EdgeNodeCertificateHttpHandler extends HttpHandler {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly repo;
+    private readonly basePath;
+    private readonly basePathWithSlash;
+    private readonly enabled;
+    private readonly service;
+    constructor(options: EdgeNodeCertificateHttpHandlerOptions);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ request, response }: HttpHandlerInput): Promise<void>;
+    private readPayload;
+    private extractSubdomain;
+    private readBody;
+    private writeOptions;
+    private requireString;
+    private matchesBase;
+    private toRelative;
+    private parseUrl;
+    private normalizeBasePath;
+    private normalizeBoolean;
+}
+export {};

package/dist/http/admin/EdgeNodeCertificateHttpHandler.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EdgeNodeCertificateHttpHandler = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const community_server_2 = require("@solid/community-server");
+const db_1 = require("../../identity/drizzle/db");
+const EdgeNodeRepository_1 = require("../../identity/drizzle/EdgeNodeRepository");
+class EdgeNodeCertificateHttpHandler extends community_server_1.HttpHandler {
+    constructor(options) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.repo = options.repository ?? new EdgeNodeRepository_1.EdgeNodeRepository((0, db_1.getIdentityDatabase)(options.identityDbUrl));
+        this.service = options.certificateService;
+        this.basePath = this.normalizeBasePath(options.basePath ?? '/api/signal/certificate');
+        this.basePathWithSlash = `${this.basePath}/`;
+        this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);
+    }
+    async canHandle({ request }) {
+        if (!this.enabled) {
+            throw new community_server_2.NotImplementedHttpError('Edge node certificates are disabled.');
+        }
+        const pathname = this.parseUrl(request).pathname;
+        if (!this.matchesBase(pathname)) {
+            throw new community_server_2.NotImplementedHttpError('Not an edge node certificate request.');
+        }
+    }
+    async handle({ request, response }) {
+        const method = (request.method ?? 'GET').toUpperCase();
+        if (method === 'OPTIONS') {
+            this.writeOptions(response);
+            return;
+        }
+        if (method !== 'POST') {
+            throw new community_server_2.MethodNotAllowedHttpError(['POST', 'OPTIONS']);
+        }
+        const url = this.parseUrl(request);
+        const relative = this.toRelative(url.pathname);
+        if (relative !== '') {
+            throw new community_server_2.NotImplementedHttpError('Unknown certificate endpoint.');
+        }
+        const payload = await this.readPayload(request);
+        const secret = await this.repo.getNodeSecret(payload.nodeId);
+        if (!secret || !secret.tokenHash || !this.repo.matchesToken(secret.tokenHash, payload.token)) {
+            throw new community_server_2.UnauthorizedHttpError('Edge node authentication failed.');
+        }
+        const connectivity = await this.repo.getNodeConnectivityInfo(payload.nodeId);
+        const subdomain = this.extractSubdomain(connectivity?.subdomain, secret.metadata);
+        if (!subdomain) {
+            throw new community_server_2.BadRequestHttpError('Node has no assigned subdomain; cannot issue certificate.');
+        }
+        try {
+            const issued = await this.service.issueCertificate({
+                nodeId: payload.nodeId,
+                csr: payload.csr,
+                subdomain,
+            });
+            response.statusCode = 200;
+            response.setHeader('Content-Type', 'application/json; charset=utf-8');
+            response.setHeader('Cache-Control', 'no-store');
+            response.end(JSON.stringify({
+                status: 'issued',
+                certificate: {
+                    pem: issued.certificate,
+                    fullChain: issued.fullChain,
+                    expiresAt: issued.expiresAt,
+                    domains: issued.domains,
+                },
+            }));
+        }
+        catch (error) {
+            this.logger.error(`Failed to issue certificate for node ${payload.nodeId}: ${error.message}`);
+            throw new community_server_2.InternalServerError('Failed to issue certificate.', { cause: error });
+        }
+    }
+    async readPayload(request) {
+        const body = await this.readBody(request);
+        if (!body) {
+            throw new community_server_2.BadRequestHttpError('请求体不能为空。');
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch (error) {
+            throw new community_server_2.BadRequestHttpError('请求体必须是有效 JSON。', { cause: error });
+        }
+        if (typeof parsed !== 'object' || parsed === null) {
+            throw new community_server_2.BadRequestHttpError('请求体必须是 JSON 对象。');
+        }
+        const record = parsed;
+        const nodeId = this.requireString(record.nodeId, 'nodeId');
+        const token = this.requireString(record.token, 'token');
+        const csr = this.requireString(record.csr, 'csr');
+        return { nodeId, token, csr };
+    }
+    extractSubdomain(connectivitySubdomain, metadata) {
+        if (typeof connectivitySubdomain === 'string' && connectivitySubdomain.trim().length > 0) {
+            return connectivitySubdomain.trim();
+        }
+        const meta = metadata ?? undefined;
+        if (meta && typeof meta === 'object' && typeof meta.subdomain === 'string') {
+            const trimmed = meta.subdomain.trim();
+            return trimmed.length > 0 ? trimmed : undefined;
+        }
+        return undefined;
+    }
+    readBody(request) {
+        return new Promise((resolve, reject) => {
+            let data = '';
+            request.setEncoding('utf8');
+            request.on('data', (chunk) => {
+                data += chunk;
+            });
+            request.on('end', () => resolve(data));
+            request.on('error', reject);
+        });
+    }
+    writeOptions(response) {
+        response.statusCode = 204;
+        response.setHeader('Allow', 'POST,OPTIONS');
+        response.end();
+    }
+    requireString(value, field) {
+        if (typeof value !== 'string') {
+            throw new community_server_2.BadRequestHttpError(`${field} 必须是字符串。`);
+        }
+        const trimmed = value.trim();
+        if (trimmed.length === 0) {
+            throw new community_server_2.BadRequestHttpError(`${field} 不能为空。`);
+        }
+        return trimmed;
+    }
+    matchesBase(pathname) {
+        return pathname === this.basePath || pathname.startsWith(this.basePathWithSlash);
+    }
+    toRelative(pathname) {
+        if (pathname === this.basePath) {
+            return '';
+        }
+        if (!pathname.startsWith(this.basePathWithSlash)) {
+            return null;
+        }
+        return pathname.slice(this.basePathWithSlash.length);
+    }
+    parseUrl(request) {
+        const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';
+        const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];
+        const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;
+        const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';
+        const rawUrl = request.url ?? '/';
+        return new URL(rawUrl, `${scheme}://${hostHeader}`);
+    }
+    normalizeBasePath(input) {
+        if (!input.startsWith('/')) {
+            throw new community_server_2.BadRequestHttpError('Certificate base path must start with /.');
+        }
+        return input.endsWith('/') ? input.slice(0, -1) : input;
+    }
+    normalizeBoolean(value) {
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        if (typeof value === 'string') {
+            const normalized = value.trim().toLowerCase();
+            return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';
+        }
+        return false;
+    }
+}
+exports.EdgeNodeCertificateHttpHandler = EdgeNodeCertificateHttpHandler;
+//# sourceMappingURL=EdgeNodeCertificateHttpHandler.js.map

package/dist/http/admin/EdgeNodeCertificateHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeCertificateHttpHandler.js","sourceRoot":"","sources":["../../../src/http/admin/EdgeNodeCertificateHttpHandler.ts"],"names":[],"mappings":";;;AACA,iEAAqD;AACrD,8DAAsD;AAEtD,8DAOiC;AACjC,kDAAgE;AAChE,kFAA+E;AAiB/E,MAAa,8BAA+B,SAAQ,8BAAW;IAQ7D,YAAmB,OAA8C;QAC/D,KAAK,EAAE,CAAC;QARS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAS7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,uCAAkB,CAAC,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC;QACtF,IAAI,CAAC,iBAAiB,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,0CAAuB,CAAC,sCAAsC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,0CAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,4CAAyB,CAAC,CAAE,MAAM,EAAE,SAAS,CAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,0CAAuB,CAAC,+BAA+B,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,wCAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,sCAAmB,CAAC,2DAA2D,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBACjD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS;aACV,CAAC,CAAC;YAEH,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;YACtE,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAChD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC1B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE;oBACX,GAAG,EAAE,MAAM,CAAC,WAAW;oBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,OAAO,CAAC,MAAM,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACzG,MAAM,IAAI,sCAAmB,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAwB;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,sCAAmB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,sCAAmB,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IAEO,gBAAgB,CAAC,qBAA8B,EAAE,QAAyC;QAChG,IAAI,OAAO,qBAAqB,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzF,OAAO,qBAAqB,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,IAAI,SAAS,CAAC;QACnC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,QAAQ,CAAC,OAAwB;QACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,QAAa;QAChC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC5C,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,KAAc,EAAE,KAAa;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,sCAAmB,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,sCAAmB,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAEO,QAAQ,CAAC,OAAwB;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAClC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACrC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,sCAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,CAAC;IAEO,gBAAgB,CAAC,KAAwB;QAC/C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC;QACpG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAtLD,wEAsLC","sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput } from '@solid/community-server';\nimport {\n  BadRequestHttpError,\n  MethodNotAllowedHttpError,\n  NotImplementedHttpError,\n  UnauthorizedHttpError,\n  InternalServerError,\n  \n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { EdgeNodeCertificateService } from '../../service/EdgeNodeCertificateService';\n\ninterface EdgeNodeCertificateHttpHandlerOptions {\n  identityDbUrl: string;\n  edgeNodesEnabled?: string | boolean;\n  repository?: EdgeNodeRepository;\n  certificateService: EdgeNodeCertificateService;\n  basePath?: string;\n}\n\ninterface CertificateRequestPayload {\n  nodeId: string;\n  token: string;\n  csr: string;\n}\n\nexport class EdgeNodeCertificateHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly repo: EdgeNodeRepository;\n  private readonly basePath: string;\n  private readonly basePathWithSlash: string;\n  private readonly enabled: boolean;\n  private readonly service: EdgeNodeCertificateService;\n\n  public constructor(options: EdgeNodeCertificateHttpHandlerOptions) {\n    super();\n    this.repo = options.repository ?? new EdgeNodeRepository(getIdentityDatabase(options.identityDbUrl));\n    this.service = options.certificateService;\n    this.basePath = this.normalizeBasePath(options.basePath ?? '/api/signal/certificate');\n    this.basePathWithSlash = `${this.basePath}/`;\n    this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    if (!this.enabled) {\n      throw new NotImplementedHttpError('Edge node certificates are disabled.');\n    }\n    const pathname = this.parseUrl(request).pathname;\n    if (!this.matchesBase(pathname)) {\n      throw new NotImplementedHttpError('Not an edge node certificate request.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n    if (method !== 'POST') {\n      throw new MethodNotAllowedHttpError([ 'POST', 'OPTIONS' ]);\n    }\n\n    const url = this.parseUrl(request);\n    const relative = this.toRelative(url.pathname);\n    if (relative !== '') {\n      throw new NotImplementedHttpError('Unknown certificate endpoint.');\n    }\n\n    const payload = await this.readPayload(request);\n    const secret = await this.repo.getNodeSecret(payload.nodeId);\n    if (!secret || !secret.tokenHash || !this.repo.matchesToken(secret.tokenHash, payload.token)) {\n      throw new UnauthorizedHttpError('Edge node authentication failed.');\n    }\n\n    const connectivity = await this.repo.getNodeConnectivityInfo(payload.nodeId);\n    const subdomain = this.extractSubdomain(connectivity?.subdomain, secret.metadata);\n    if (!subdomain) {\n      throw new BadRequestHttpError('Node has no assigned subdomain; cannot issue certificate.');\n    }\n\n    try {\n      const issued = await this.service.issueCertificate({\n        nodeId: payload.nodeId,\n        csr: payload.csr,\n        subdomain,\n      });\n\n      response.statusCode = 200;\n      response.setHeader('Content-Type', 'application/json; charset=utf-8');\n      response.setHeader('Cache-Control', 'no-store');\n      response.end(JSON.stringify({\n        status: 'issued',\n        certificate: {\n          pem: issued.certificate,\n          fullChain: issued.fullChain,\n          expiresAt: issued.expiresAt,\n          domains: issued.domains,\n        },\n      }));\n    } catch (error: unknown) {\n      this.logger.error(`Failed to issue certificate for node ${payload.nodeId}: ${(error as Error).message}`);\n      throw new InternalServerError('Failed to issue certificate.', { cause: error });\n    }\n  }\n\n  private async readPayload(request: IncomingMessage): Promise<CertificateRequestPayload> {\n    const body = await this.readBody(request);\n    if (!body) {\n      throw new BadRequestHttpError('请求体不能为空。');\n    }\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(body);\n    } catch (error: unknown) {\n      throw new BadRequestHttpError('请求体必须是有效 JSON。', { cause: error });\n    }\n    if (typeof parsed !== 'object' || parsed === null) {\n      throw new BadRequestHttpError('请求体必须是 JSON 对象。');\n    }\n    const record = parsed as Record<string, unknown>;\n    const nodeId = this.requireString(record.nodeId, 'nodeId');\n    const token = this.requireString(record.token, 'token');\n    const csr = this.requireString(record.csr, 'csr');\n    return { nodeId, token, csr };\n  }\n\n  private extractSubdomain(connectivitySubdomain?: string, metadata?: Record<string, unknown> | null): string | undefined {\n    if (typeof connectivitySubdomain === 'string' && connectivitySubdomain.trim().length > 0) {\n      return connectivitySubdomain.trim();\n    }\n    const meta = metadata ?? undefined;\n    if (meta && typeof meta === 'object' && typeof meta.subdomain === 'string') {\n      const trimmed = meta.subdomain.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n    return undefined;\n  }\n\n  private readBody(request: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      let data = '';\n      request.setEncoding('utf8');\n      request.on('data', (chunk: string) => {\n        data += chunk;\n      });\n      request.on('end', () => resolve(data));\n      request.on('error', reject);\n    });\n  }\n\n  private writeOptions(response: any): void {\n    response.statusCode = 204;\n    response.setHeader('Allow', 'POST,OPTIONS');\n    response.end();\n  }\n\n  private requireString(value: unknown, field: string): string {\n    if (typeof value !== 'string') {\n      throw new BadRequestHttpError(`${field} 必须是字符串。`);\n    }\n    const trimmed = value.trim();\n    if (trimmed.length === 0) {\n      throw new BadRequestHttpError(`${field} 不能为空。`);\n    }\n    return trimmed;\n  }\n\n  private matchesBase(pathname: string): boolean {\n    return pathname === this.basePath || pathname.startsWith(this.basePathWithSlash);\n  }\n\n  private toRelative(pathname: string): string | null {\n    if (pathname === this.basePath) {\n      return '';\n    }\n    if (!pathname.startsWith(this.basePathWithSlash)) {\n      return null;\n    }\n    return pathname.slice(this.basePathWithSlash.length);\n  }\n\n  private parseUrl(request: IncomingMessage): URL {\n    const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';\n    const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];\n    const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;\n    const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';\n    const rawUrl = request.url ?? '/';\n    return new URL(rawUrl, `${scheme}://${hostHeader}`);\n  }\n\n  private normalizeBasePath(input: string): string {\n    if (!input.startsWith('/')) {\n      throw new BadRequestHttpError('Certificate base path must start with /.');\n    }\n    return input.endsWith('/') ? input.slice(0, -1) : input;\n  }\n\n  private normalizeBoolean(value?: string | boolean): boolean {\n    if (typeof value === 'boolean') {\n      return value;\n    }\n    if (typeof value === 'string') {\n      const normalized = value.trim().toLowerCase();\n      return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';\n    }\n    return false;\n  }\n}\n"]}