@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/http/quota/QuotaAdminHttpHandler.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QuotaAdminHttpHandler = void 0;
+const access_token_verifier_1 = require("@solid/access-token-verifier");
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const community_server_2 = require("@solid/community-server");
+const db_1 = require("../../identity/drizzle/db");
+const AccountRepository_1 = require("../../identity/drizzle/AccountRepository");
+const AccountRoleRepository_1 = require("../../identity/drizzle/AccountRoleRepository");
+class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
+    constructor(options) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.verify = (0, access_token_verifier_1.createSolidTokenVerifier)();
+        const db = (0, db_1.getIdentityDatabase)(options.identityDbUrl);
+        this.accountRepo = new AccountRepository_1.AccountRepository(db);
+        this.roleRepo = options.roleRepository ?? new AccountRoleRepository_1.AccountRoleRepository(db);
+        this.basePath = options.basePath ?? '/api/quota/';
+        this.quotaService = options.quotaService;
+    }
+    async canHandle({ request }) {
+        const path = this.getUrl(request).pathname;
+        if (!path.startsWith(this.basePath)) {
+            throw new community_server_2.NotImplementedHttpError('Not a quota admin request.');
+        }
+    }
+    async handle({ request, response }) {
+        const method = (request.method ?? 'GET').toUpperCase();
+        if (method === 'OPTIONS') {
+            this.writeOptions(response);
+            return;
+        }
+        if (!['GET', 'PUT', 'DELETE'].includes(method)) {
+            throw new community_server_2.MethodNotAllowedHttpError(['GET', 'PUT', 'DELETE', 'OPTIONS']);
+        }
+        await this.authenticateAdmin(request);
+        const target = this.parseTarget(this.getUrl(request).pathname);
+        switch (method) {
+            case 'GET':
+                await this.handleGet(target, response);
+                break;
+            case 'PUT':
+                await this.handlePut(target, request, response);
+                break;
+            case 'DELETE':
+                await this.handleDelete(target, response);
+                break;
+        }
+    }
+    async handleGet(target, response) {
+        if (target.type === 'account') {
+            const quota = await this.quotaService.getAccountLimit(target.id);
+            this.writeJson(response, 200, {
+                type: 'account',
+                accountId: target.id,
+                quotaLimit: quota ?? null,
+            });
+            return;
+        }
+        const podInfo = await this.accountRepo.getPodInfo(target.id);
+        if (!podInfo) {
+            throw new community_server_2.BadRequestHttpError('Unknown pod identifier.');
+        }
+        const quota = await this.quotaService.getPodLimit(target.id);
+        this.writeJson(response, 200, {
+            type: 'pod',
+            podId: target.id,
+            accountId: podInfo.accountId,
+            baseUrl: podInfo.baseUrl ?? null,
+            quotaLimit: quota ?? null,
+        });
+    }
+    async handlePut(target, request, response) {
+        const body = await this.readJson(request);
+        if (body == null || typeof body !== 'object') {
+            throw new community_server_2.BadRequestHttpError('Request body must be an object.');
+        }
+        const payload = body;
+        const quota = this.extractQuota(payload);
+        if (target.type === 'pod') {
+            const podInfo = await this.accountRepo.getPodInfo(target.id);
+            if (!podInfo) {
+                throw new community_server_2.BadRequestHttpError('Unknown pod identifier.');
+            }
+        }
+        if (target.type === 'account') {
+            await this.quotaService.setAccountLimit(target.id, quota);
+            const latest = await this.quotaService.getAccountLimit(target.id);
+            this.writeJson(response, 200, {
+                status: 'updated',
+                targetType: target.type,
+                targetId: target.id,
+                quotaLimit: latest ?? null,
+            });
+            return;
+        }
+        await this.quotaService.setPodLimit(target.id, quota);
+        const latest = await this.quotaService.getPodLimit(target.id);
+        this.writeJson(response, 200, {
+            status: 'updated',
+            targetType: target.type,
+            targetId: target.id,
+            quotaLimit: latest ?? null,
+        });
+    }
+    async handleDelete(target, response) {
+        if (target.type === 'pod') {
+            const podInfo = await this.accountRepo.getPodInfo(target.id);
+            if (!podInfo) {
+                throw new community_server_2.BadRequestHttpError('Unknown pod identifier.');
+            }
+        }
+        if (target.type === 'account') {
+            await this.quotaService.setAccountLimit(target.id, null);
+        }
+        else {
+            await this.quotaService.setPodLimit(target.id, null);
+        }
+        this.writeJson(response, 200, {
+            status: 'cleared',
+            targetType: target.type,
+            targetId: target.id,
+        });
+    }
+    async authenticateAdmin(request) {
+        const authorization = request.headers.authorization;
+        if (!authorization || !authorization.startsWith('Bearer ')) {
+            throw new community_server_2.UnauthorizedHttpError('Quota管理接口需要携带 Bearer Token。');
+        }
+        let payload;
+        try {
+            payload = await this.verify(authorization);
+        }
+        catch (error) {
+            throw new community_server_2.UnauthorizedHttpError('无法验证访问令牌。', { cause: error });
+        }
+        const webId = this.extractWebId(payload);
+        if (!webId) {
+            throw new community_server_2.UnauthorizedHttpError('访问令牌缺少 webid。');
+        }
+        const context = await this.roleRepo.findByWebId(webId);
+        if (!context || !context.roles.includes('admin')) {
+            throw new community_server_2.ForbiddenHttpError('仅限管理员修改配额。');
+        }
+    }
+    parseTarget(pathname) {
+        const relative = pathname.slice(this.basePath.length);
+        const segments = relative.split('/').filter(Boolean);
+        if (segments.length !== 2) {
+            throw new community_server_2.BadRequestHttpError('Quota path must match /accounts/{id} or /pods/{id}.');
+        }
+        const [scope, identifier] = segments;
+        if (!identifier) {
+            throw new community_server_2.BadRequestHttpError('Missing identifier.');
+        }
+        if (scope === 'accounts') {
+            return { type: 'account', id: decodeURIComponent(identifier) };
+        }
+        if (scope === 'pods') {
+            return { type: 'pod', id: decodeURIComponent(identifier) };
+        }
+        throw new community_server_2.BadRequestHttpError('Unknown quota scope.');
+    }
+    async readJson(request) {
+        const body = await this.readBody(request);
+        if (!body) {
+            return undefined;
+        }
+        try {
+            return JSON.parse(body);
+        }
+        catch (error) {
+            throw new community_server_2.BadRequestHttpError('Body must contain valid JSON.', { cause: error });
+        }
+    }
+    extractQuota(body) {
+        if (!Object.prototype.hasOwnProperty.call(body, 'quotaLimit')) {
+            throw new community_server_2.BadRequestHttpError('Body must include quotaLimit.');
+        }
+        const quotaValue = body.quotaLimit;
+        if (quotaValue === null) {
+            return null;
+        }
+        if (typeof quotaValue !== 'number' || !Number.isFinite(quotaValue) || quotaValue < 0) {
+            throw new community_server_2.BadRequestHttpError('quotaLimit must be a non-negative number or null.');
+        }
+        return quotaValue;
+    }
+    writeOptions(response) {
+        response.statusCode = 204;
+        response.setHeader('Allow', 'GET,PUT,DELETE,OPTIONS');
+        response.end();
+    }
+    writeJson(response, status, payload) {
+        response.statusCode = status;
+        response.setHeader('Content-Type', 'application/json; charset=utf-8');
+        response.setHeader('Cache-Control', 'no-store');
+        response.end(JSON.stringify(payload));
+    }
+    async readBody(request) {
+        return await new Promise((resolve, reject) => {
+            let data = '';
+            request.setEncoding('utf8');
+            request.on('data', (chunk) => {
+                data += chunk;
+            });
+            request.on('end', () => resolve(data));
+            request.on('error', reject);
+        });
+    }
+    getUrl(request) {
+        const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';
+        const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];
+        const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;
+        const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';
+        const rawUrl = request.url ?? '/';
+        return new URL(rawUrl, `${scheme}://${hostHeader}`);
+    }
+    extractWebId(payload) {
+        const getString = (key) => {
+            const value = payload[key];
+            if (typeof value !== 'string') {
+                return undefined;
+            }
+            const trimmed = value.trim();
+            return trimmed.length > 0 ? trimmed : undefined;
+        };
+        const direct = getString('webid') ?? getString('webId') ?? getString('sub');
+        if (direct) {
+            return direct;
+        }
+        const clientId = getString('client_id');
+        if (clientId && clientId.startsWith('https://')) {
+            return clientId;
+        }
+        return undefined;
+    }
+}
+exports.QuotaAdminHttpHandler = QuotaAdminHttpHandler;
+//# sourceMappingURL=QuotaAdminHttpHandler.js.map

package/dist/http/quota/QuotaAdminHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QuotaAdminHttpHandler.js","sourceRoot":"","sources":["../../../src/http/quota/QuotaAdminHttpHandler.ts"],"names":[],"mappings":";;;AAAA,wEAAwE;AACxE,iEAAqD;AACrD,8DAAsD;AAEtD,8DAOiC;AACjC,kDAAgE;AAChE,gFAA6E;AAC7E,wFAAqF;AAcrF,MAAa,qBAAsB,SAAQ,8BAAW;IAQpD,YAAmB,OAAqC;QACtD,KAAK,EAAE,CAAC;QARS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAC9B,WAAM,GAAG,IAAA,gDAAwB,GAAE,CAAC;QAQnD,MAAM,EAAE,GAAG,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,IAAI,qCAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,6CAAqB,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,0CAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,4CAAyB,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE/D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,QAAsB;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,UAAU,EAAE,KAAK,IAAI,IAAI;aAC1B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,UAAU,EAAE,KAAK,IAAI,IAAI;SAC1B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,OAAoB,EAAE,QAAsB;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,sCAAmB,CAAC,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,IAAI,IAAI;aAC3B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,IAAI,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAmB,EAAE,QAAsB;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,wCAAqB,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAuC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,wCAAqB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wCAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,qCAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,sCAAmB,CAAC,qDAAqD,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAE,KAAK,EAAE,UAAU,CAAE,GAAG,QAAQ,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,sCAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,sCAAmB,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,sCAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAqB,CAAC;QAC9C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,sCAAmB,CAAC,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,QAAsB;QACzC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,QAAsB,EAAE,MAAc,EAAE,OAAgB;QACxE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACtE,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,OAAoB;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAClC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,YAAY,CAAC,OAAgC;QACnD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAsB,EAAE;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA9PD,sDA8PC","sourcesContent":["import { createSolidTokenVerifier } from '@solid/access-token-verifier';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpRequest, HttpResponse } from '@solid/community-server';\nimport {\n  \n  BadRequestHttpError,\n  ForbiddenHttpError,\n  MethodNotAllowedHttpError,\n  NotImplementedHttpError,\n  UnauthorizedHttpError,\n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { AccountRepository } from '../../identity/drizzle/AccountRepository';\nimport { AccountRoleRepository } from '../../identity/drizzle/AccountRoleRepository';\nimport type { QuotaService } from '../../quota/QuotaService';\n\ninterface QuotaAdminHttpHandlerOptions {\n  identityDbUrl: string;\n  basePath?: string;\n  roleRepository?: AccountRoleRepository;\n  quotaService: QuotaService;\n}\n\ntype QuotaTarget =\n  | { type: 'account'; id: string }\n  | { type: 'pod'; id: string };\n\nexport class QuotaAdminHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly verify = createSolidTokenVerifier();\n  private readonly accountRepo: AccountRepository;\n  private readonly roleRepo: AccountRoleRepository;\n  private readonly quotaService: QuotaService;\n  private readonly basePath: string;\n\n  public constructor(options: QuotaAdminHttpHandlerOptions) {\n    super();\n    const db = getIdentityDatabase(options.identityDbUrl);\n    this.accountRepo = new AccountRepository(db);\n    this.roleRepo = options.roleRepository ?? new AccountRoleRepository(db);\n    this.basePath = options.basePath ?? '/api/quota/';\n    this.quotaService = options.quotaService;\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    const path = this.getUrl(request).pathname;\n    if (!path.startsWith(this.basePath)) {\n      throw new NotImplementedHttpError('Not a quota admin request.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n\n    if (![ 'GET', 'PUT', 'DELETE' ].includes(method)) {\n      throw new MethodNotAllowedHttpError([ 'GET', 'PUT', 'DELETE', 'OPTIONS' ]);\n    }\n\n    await this.authenticateAdmin(request);\n\n    const target = this.parseTarget(this.getUrl(request).pathname);\n\n    switch (method) {\n      case 'GET':\n        await this.handleGet(target, response);\n        break;\n      case 'PUT':\n        await this.handlePut(target, request, response);\n        break;\n      case 'DELETE':\n        await this.handleDelete(target, response);\n        break;\n    }\n  }\n\n  private async handleGet(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'account') {\n      const quota = await this.quotaService.getAccountLimit(target.id);\n      this.writeJson(response, 200, {\n        type: 'account',\n        accountId: target.id,\n        quotaLimit: quota ?? null,\n      });\n      return;\n    }\n\n    const podInfo = await this.accountRepo.getPodInfo(target.id);\n    if (!podInfo) {\n      throw new BadRequestHttpError('Unknown pod identifier.');\n    }\n    const quota = await this.quotaService.getPodLimit(target.id);\n    this.writeJson(response, 200, {\n      type: 'pod',\n      podId: target.id,\n      accountId: podInfo.accountId,\n      baseUrl: podInfo.baseUrl ?? null,\n      quotaLimit: quota ?? null,\n    });\n  }\n\n  private async handlePut(target: QuotaTarget, request: HttpRequest, response: HttpResponse): Promise<void> {\n    const body = await this.readJson(request);\n    if (body == null || typeof body !== 'object') {\n      throw new BadRequestHttpError('Request body must be an object.');\n    }\n    const payload = body as Record<string, unknown>;\n    const quota = this.extractQuota(payload);\n\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.setAccountLimit(target.id, quota);\n      const latest = await this.quotaService.getAccountLimit(target.id);\n      this.writeJson(response, 200, {\n        status: 'updated',\n        targetType: target.type,\n        targetId: target.id,\n        quotaLimit: latest ?? null,\n      });\n      return;\n    }\n\n    await this.quotaService.setPodLimit(target.id, quota);\n    const latest = await this.quotaService.getPodLimit(target.id);\n\n    this.writeJson(response, 200, {\n      status: 'updated',\n      targetType: target.type,\n      targetId: target.id,\n      quotaLimit: latest ?? null,\n    });\n  }\n\n  private async handleDelete(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.setAccountLimit(target.id, null);\n    } else {\n      await this.quotaService.setPodLimit(target.id, null);\n    }\n    this.writeJson(response, 200, {\n      status: 'cleared',\n      targetType: target.type,\n      targetId: target.id,\n    });\n  }\n\n  private async authenticateAdmin(request: HttpRequest): Promise<void> {\n    const authorization = request.headers.authorization;\n    if (!authorization || !authorization.startsWith('Bearer ')) {\n      throw new UnauthorizedHttpError('Quota管理接口需要携带 Bearer Token。');\n    }\n    let payload: Record<string, unknown>;\n    try {\n      payload = await this.verify(authorization) as unknown as Record<string, unknown>;\n    } catch (error: unknown) {\n      throw new UnauthorizedHttpError('无法验证访问令牌。', { cause: error });\n    }\n    const webId = this.extractWebId(payload);\n    if (!webId) {\n      throw new UnauthorizedHttpError('访问令牌缺少 webid。');\n    }\n    const context = await this.roleRepo.findByWebId(webId);\n    if (!context || !context.roles.includes('admin')) {\n      throw new ForbiddenHttpError('仅限管理员修改配额。');\n    }\n  }\n\n  private parseTarget(pathname: string): QuotaTarget {\n    const relative = pathname.slice(this.basePath.length);\n    const segments = relative.split('/').filter(Boolean);\n    if (segments.length !== 2) {\n      throw new BadRequestHttpError('Quota path must match /accounts/{id} or /pods/{id}.');\n    }\n    const [ scope, identifier ] = segments;\n    if (!identifier) {\n      throw new BadRequestHttpError('Missing identifier.');\n    }\n    if (scope === 'accounts') {\n      return { type: 'account', id: decodeURIComponent(identifier) };\n    }\n    if (scope === 'pods') {\n      return { type: 'pod', id: decodeURIComponent(identifier) };\n    }\n    throw new BadRequestHttpError('Unknown quota scope.');\n  }\n\n  private async readJson(request: HttpRequest): Promise<unknown> {\n    const body = await this.readBody(request);\n    if (!body) {\n      return undefined;\n    }\n    try {\n      return JSON.parse(body);\n    } catch (error: unknown) {\n      throw new BadRequestHttpError('Body must contain valid JSON.', { cause: error });\n    }\n  }\n\n  private extractQuota(body: Record<string, unknown>): number | null {\n    if (!Object.prototype.hasOwnProperty.call(body, 'quotaLimit')) {\n      throw new BadRequestHttpError('Body must include quotaLimit.');\n    }\n    const quotaValue = body.quotaLimit as unknown;\n    if (quotaValue === null) {\n      return null;\n    }\n    if (typeof quotaValue !== 'number' || !Number.isFinite(quotaValue) || quotaValue < 0) {\n      throw new BadRequestHttpError('quotaLimit must be a non-negative number or null.');\n    }\n    return quotaValue;\n  }\n\n  private writeOptions(response: HttpResponse): void {\n    response.statusCode = 204;\n    response.setHeader('Allow', 'GET,PUT,DELETE,OPTIONS');\n    response.end();\n  }\n\n  private writeJson(response: HttpResponse, status: number, payload: unknown): void {\n    response.statusCode = status;\n    response.setHeader('Content-Type', 'application/json; charset=utf-8');\n    response.setHeader('Cache-Control', 'no-store');\n    response.end(JSON.stringify(payload));\n  }\n\n  private async readBody(request: HttpRequest): Promise<string> {\n    return await new Promise<string>((resolve, reject) => {\n      let data = '';\n      request.setEncoding('utf8');\n      request.on('data', (chunk: string) => {\n        data += chunk;\n      });\n      request.on('end', () => resolve(data));\n      request.on('error', reject);\n    });\n  }\n\n  private getUrl(request: HttpRequest): URL {\n    const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';\n    const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];\n    const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;\n    const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';\n    const rawUrl = request.url ?? '/';\n    return new URL(rawUrl, `${scheme}://${hostHeader}`);\n  }\n\n  private extractWebId(payload: Record<string, unknown>): string | undefined {\n    const getString = (key: string): string | undefined => {\n      const value = payload[key];\n      if (typeof value !== 'string') {\n        return undefined;\n      }\n      const trimmed = value.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    };\n    const direct = getString('webid') ?? getString('webId') ?? getString('sub');\n    if (direct) {\n      return direct;\n    }\n    const clientId = getString('client_id');\n    if (clientId && clientId.startsWith('https://')) {\n      return clientId;\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/http/quota/QuotaAdminHttpHandler.jsonld

@@ -0,0 +1,171 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler",
+      "@type": "Class",
+      "requireElement": "QuotaAdminHttpHandler",
+      "extends": [
+        "css:dist/server/HttpHandler.jsonld#HttpHandler"
+      ],
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_identityDbUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_basePath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_roleRepository",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "undefineds:dist/identity/drizzle/AccountRoleRepository.jsonld#AccountRoleRepository",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_quotaService",
+          "range": "undefineds:dist/quota/QuotaService.jsonld#QuotaService"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_logger",
+          "memberFieldName": "logger",
+          "range": {
+            "@type": "ParameterRangeWildcard"
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_verify",
+          "memberFieldName": "verify"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_accountRepo",
+          "memberFieldName": "accountRepo"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_roleRepo",
+          "memberFieldName": "roleRepo"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_quotaService",
+          "memberFieldName": "quotaService"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_basePath",
+          "memberFieldName": "basePath"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_canHandle",
+          "memberFieldName": "canHandle"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_handleGet",
+          "memberFieldName": "handleGet"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_handlePut",
+          "memberFieldName": "handlePut"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_handleDelete",
+          "memberFieldName": "handleDelete"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_authenticateAdmin",
+          "memberFieldName": "authenticateAdmin"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_parseTarget",
+          "memberFieldName": "parseTarget"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_readJson",
+          "memberFieldName": "readJson"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_extractQuota",
+          "memberFieldName": "extractQuota"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_writeOptions",
+          "memberFieldName": "writeOptions"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_writeJson",
+          "memberFieldName": "writeJson"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_readBody",
+          "memberFieldName": "readBody"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_getUrl",
+          "memberFieldName": "getUrl"
+        },
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler__member_extractWebId",
+          "memberFieldName": "extractWebId"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "identityDbUrl",
+              "value": {
+                "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_identityDbUrl"
+              }
+            },
+            {
+              "keyRaw": "basePath",
+              "value": {
+                "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_basePath"
+              }
+            },
+            {
+              "keyRaw": "roleRepository",
+              "value": {
+                "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_roleRepository"
+              }
+            },
+            {
+              "keyRaw": "quotaService",
+              "value": {
+                "@id": "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld#QuotaAdminHttpHandler_options_quotaService"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/http/search/SearchHttpHandler.d.ts

@@ -0,0 +1,59 @@
+/**
+ * SearchHttpHandler - 语义搜索 HTTP 处理器
+ *
+ * 提供 /-/search 端点，支持基于向量的语义搜索。
+ *
+ * 端点：
+ * - GET  {path}/-/search?q=...     简单搜索
+ * - POST {path}/-/search           复杂搜索（支持 filter 等）
+ */
+import { HttpHandler } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
+import type { CredentialsExtractor, PermissionReader, Authorizer } from '@solid/community-server';
+import type { VectorStore } from '../../storage/vector/VectorStore';
+import type { EmbeddingService } from '../../ai/service/EmbeddingService';
+import type { SparqlEngine } from '../../storage/sparql/SubgraphQueryEngine';
+export interface SearchHttpHandlerOptions {
+    sidecarPath?: string;
+    defaultModel?: string;
+    defaultLimit?: number;
+}
+export declare class SearchHttpHandler extends HttpHandler {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly vectorStore;
+    private readonly embeddingService;
+    private readonly sparqlEngine;
+    private readonly credentialsExtractor;
+    private readonly permissionReader;
+    private readonly authorizer;
+    private readonly sidecarPath;
+    private readonly defaultModel;
+    private readonly defaultLimit;
+    constructor(vectorStore: VectorStore, embeddingService: EmbeddingService, sparqlEngine: SparqlEngine, credentialsExtractor: CredentialsExtractor, permissionReader: PermissionReader, authorizer: Authorizer, options?: SearchHttpHandlerOptions);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ request, response }: HttpHandlerInput): Promise<void>;
+    /**
+     * 解析搜索请求
+     */
+    private parseSearchRequest;
+    /**
+     * 执行搜索
+     */
+    private executeSearch;
+    /**
+     * 获取 AI 凭据
+     */
+    private getAiCredential;
+    /**
+     * 将向量 ID 转换回 subject URI
+     * 注意：这是一个简化实现，实际需要维护 ID -> URI 的映射
+     */
+    private vectorIdToSubject;
+    private handleError;
+    private authorizeFor;
+    private parseUrl;
+    private readJsonBody;
+    private sendJsonResponse;
+    private sendErrorResponse;
+    private writeOptions;
+}