@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/http/vector/VectorHttpHandler.js

@@ -0,0 +1,301 @@
+"use strict";
+/**
+ * VectorHttpHandler - 纯向量存储 HTTP API
+ *
+ * 提供 /-/vector 端点，只负责向量的存储和搜索，不访问 Pod 数据。
+ * AI embedding 生成、credential 管理等逻辑由外部 API Server 处理。
+ *
+ * 端点设计：
+ * - POST /-/vector/upsert   - 存入向量
+ * - POST /-/vector/search   - 搜索向量（只接受向量输入）
+ * - DELETE /-/vector/delete - 删除向量
+ * - GET  /-/vector/status   - 索引状态
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VectorHttpHandler = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const community_server_2 = require("@solid/community-server");
+const policy_engine_1 = require("@solidlab/policy-engine");
+const ALLOWED_METHODS = ['GET', 'POST', 'DELETE', 'OPTIONS'];
+class VectorApiError extends Error {
+    constructor(code, statusCode, message, details) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+        this.details = details;
+        this.name = 'VectorApiError';
+    }
+    static invalidRequest(message, details) {
+        return new VectorApiError('INVALID_REQUEST', 400, message, details);
+    }
+    static unauthorized(message) {
+        return new VectorApiError('UNAUTHORIZED', 401, message);
+    }
+    static notFound(action) {
+        return new VectorApiError('NOT_FOUND', 404, `Unknown vector action: ${action}`);
+    }
+    static dimensionMismatch(expected, actual) {
+        return new VectorApiError('DIMENSION_MISMATCH', 422, `Vector dimension mismatch: expected ${expected}, got ${actual}`, {
+            expected,
+            actual,
+        });
+    }
+    static storageError(message) {
+        return new VectorApiError('STORAGE_ERROR', 500, message);
+    }
+}
+class VectorHttpHandler extends community_server_1.HttpHandler {
+    constructor(vectorStore, credentialsExtractor, permissionReader, authorizer, options = {}) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.vectorStore = vectorStore;
+        this.credentialsExtractor = credentialsExtractor;
+        this.permissionReader = permissionReader;
+        this.authorizer = authorizer;
+        this.sidecarPath = options.sidecarPath ?? '/-/vector';
+    }
+    async canHandle({ request }) {
+        const path = this.parseUrl(request).pathname;
+        if (!path.includes(this.sidecarPath)) {
+            throw new community_server_2.NotImplementedHttpError('Request is not targeting a vector endpoint.');
+        }
+    }
+    async handle({ request, response }) {
+        const method = (request.method ?? 'GET').toUpperCase();
+        if (method === 'OPTIONS') {
+            this.writeOptions(response);
+            return;
+        }
+        if (!ALLOWED_METHODS.includes(method)) {
+            throw new community_server_2.MethodNotAllowedHttpError(ALLOWED_METHODS);
+        }
+        try {
+            const url = this.parseUrl(request);
+            const path = decodeURIComponent(url.pathname);
+            const sidecarIndex = path.indexOf(this.sidecarPath);
+            if (sidecarIndex === -1) {
+                throw new community_server_2.NotImplementedHttpError('Request is not targeting a vector endpoint.');
+            }
+            let basePath = path.slice(0, sidecarIndex);
+            if (!basePath.endsWith('/')) {
+                basePath = `${basePath}/`;
+            }
+            const actionPath = path.slice(sidecarIndex + this.sidecarPath.length);
+            const action = actionPath.replace(/^\//, '').split('/')[0] || '';
+            const origin = `${url.protocol}//${url.host}`;
+            const baseUrl = `${origin}${basePath}`;
+            this.logger.debug(`Vector request: ${method} ${path}, action=${action}, baseUrl=${baseUrl}`);
+            switch (action) {
+                case 'upsert':
+                    await this.handleUpsert(request, response, baseUrl, method);
+                    break;
+                case 'search':
+                    await this.handleSearch(request, response, baseUrl, method);
+                    break;
+                case 'delete':
+                    await this.handleDelete(request, response, baseUrl, method);
+                    break;
+                case 'status':
+                case 'stats':
+                    await this.handleStatus(request, response, baseUrl, method);
+                    break;
+                default:
+                    throw VectorApiError.notFound(action);
+            }
+        }
+        catch (error) {
+            this.handleError(response, error);
+        }
+    }
+    // ============================================
+    // HTTP Handlers
+    // ============================================
+    async handleUpsert(request, response, baseUrl, method) {
+        if (method !== 'POST') {
+            throw new community_server_2.MethodNotAllowedHttpError(['POST']);
+        }
+        const startTime = Date.now();
+        await this.authorizeFor(baseUrl, request, [policy_engine_1.PERMISSIONS.Append]);
+        const body = await this.readJsonBody(request);
+        if (!body.model) {
+            throw VectorApiError.invalidRequest('Missing "model" field');
+        }
+        if (!Array.isArray(body.vectors) || body.vectors.length === 0) {
+            throw VectorApiError.invalidRequest('Missing or empty "vectors" field');
+        }
+        // 确保向量表存在
+        await this.vectorStore.ensureVectorTable(body.model);
+        let upserted = 0;
+        const errors = [];
+        for (const item of body.vectors) {
+            try {
+                if (typeof item.id !== 'number') {
+                    throw new Error('Invalid id: must be a number');
+                }
+                if (!Array.isArray(item.vector) || item.vector.length === 0) {
+                    throw new Error('Invalid vector: must be a non-empty array');
+                }
+                await this.vectorStore.upsertVector(body.model, item.id, item.vector);
+                upserted++;
+            }
+            catch (err) {
+                errors.push(`id=${item.id}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        this.sendJsonResponse(response, {
+            upserted,
+            errors,
+            took_ms: Date.now() - startTime,
+        });
+    }
+    async handleSearch(request, response, baseUrl, method) {
+        if (method !== 'POST') {
+            throw new community_server_2.MethodNotAllowedHttpError(['POST']);
+        }
+        const startTime = Date.now();
+        await this.authorizeFor(baseUrl, request, [policy_engine_1.PERMISSIONS.Read]);
+        const body = await this.readJsonBody(request);
+        if (!body.model) {
+            throw VectorApiError.invalidRequest('Missing "model" field');
+        }
+        if (!Array.isArray(body.vector) || body.vector.length === 0) {
+            throw VectorApiError.invalidRequest('Missing or empty "vector" field');
+        }
+        const searchOptions = {
+            limit: body.limit ?? 10,
+            threshold: body.threshold,
+            excludeIds: body.excludeIds ? new Set(body.excludeIds) : undefined,
+        };
+        const results = await this.vectorStore.search(body.model, body.vector, searchOptions);
+        this.sendJsonResponse(response, {
+            results: results.map((r) => ({
+                id: r.id,
+                score: r.score,
+                distance: r.distance,
+            })),
+            model: body.model,
+            took_ms: Date.now() - startTime,
+        });
+    }
+    async handleDelete(request, response, baseUrl, method) {
+        if (method !== 'POST' && method !== 'DELETE') {
+            throw new community_server_2.MethodNotAllowedHttpError(['POST', 'DELETE']);
+        }
+        const startTime = Date.now();
+        // 使用 Modify 权限，因为删除向量是对向量存储的修改操作
+        await this.authorizeFor(baseUrl, request, [policy_engine_1.PERMISSIONS.Modify]);
+        const body = await this.readJsonBody(request);
+        if (!body.model) {
+            throw VectorApiError.invalidRequest('Missing "model" field');
+        }
+        if (!Array.isArray(body.ids) || body.ids.length === 0) {
+            throw VectorApiError.invalidRequest('Missing or empty "ids" field');
+        }
+        let deleted = 0;
+        const errors = [];
+        for (const id of body.ids) {
+            try {
+                await this.vectorStore.deleteVector(body.model, id);
+                deleted++;
+            }
+            catch (err) {
+                errors.push(`id=${id}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        this.sendJsonResponse(response, {
+            deleted,
+            errors,
+            took_ms: Date.now() - startTime,
+        });
+    }
+    async handleStatus(request, response, baseUrl, method) {
+        if (method !== 'GET') {
+            throw new community_server_2.MethodNotAllowedHttpError(['GET']);
+        }
+        await this.authorizeFor(baseUrl, request, [policy_engine_1.PERMISSIONS.Read]);
+        // 获取所有模型的向量统计
+        const tables = await this.vectorStore.listVectorTables();
+        const byModel = [];
+        let totalCount = 0;
+        for (const table of tables) {
+            const count = await this.vectorStore.countVectors(table);
+            byModel.push({ model: table, count });
+            totalCount += count;
+        }
+        this.sendJsonResponse(response, { byModel, totalCount });
+    }
+    // ============================================
+    // 辅助方法
+    // ============================================
+    handleError(response, error) {
+        if (error instanceof VectorApiError) {
+            this.logger.error(`Vector API error [${error.code}]: ${error.message}`);
+            this.sendErrorResponse(response, error);
+            return;
+        }
+        if (error instanceof community_server_2.HttpError) {
+            const errorMsg = error.message || error.name || `HTTP ${error.statusCode}`;
+            this.logger.error(`HTTP error ${error.statusCode}: ${errorMsg}`);
+            this.sendErrorResponse(response, new VectorApiError('INVALID_REQUEST', error.statusCode, errorMsg));
+            return;
+        }
+        const errorMsg = error instanceof Error ? error.message : String(error);
+        this.logger.error(`Unexpected error: ${errorMsg}`);
+        this.sendErrorResponse(response, VectorApiError.storageError(errorMsg || 'Internal server error'));
+    }
+    async authorizeFor(baseUrl, request, permissions) {
+        const credentials = await this.credentialsExtractor.handleSafe(request);
+        const identifier = { path: baseUrl };
+        const requestedModes = new community_server_2.IdentifierSetMultiMap([[identifier, permissions]]);
+        const availablePermissions = await this.permissionReader.handleSafe({ credentials, identifier, requestedModes });
+        this.logger.debug(`authorizeFor: baseUrl=${baseUrl}, webId=${credentials.agent?.webId}, requested=${permissions}`);
+        await this.authorizer.handleSafe({ credentials, identifier, requestedModes, availablePermissions });
+    }
+    parseUrl(request) {
+        const protocol = request.headers['x-forwarded-proto'] || 'http';
+        const host = request.headers['x-forwarded-host'] || request.headers.host || 'localhost';
+        return new URL(request.url, `${protocol}://${host}`);
+    }
+    async readJsonBody(request) {
+        const chunks = [];
+        for await (const chunk of request) {
+            chunks.push(chunk);
+        }
+        const body = Buffer.concat(chunks).toString('utf8');
+        try {
+            return JSON.parse(body);
+        }
+        catch {
+            throw VectorApiError.invalidRequest('Invalid JSON body');
+        }
+    }
+    sendJsonResponse(response, data, status = 200) {
+        response.writeHead(status, {
+            'Content-Type': 'application/json',
+            'Cache-Control': 'no-cache',
+        });
+        response.end(JSON.stringify(data));
+    }
+    sendErrorResponse(response, error) {
+        response.writeHead(error.statusCode, {
+            'Content-Type': 'application/json',
+            'Cache-Control': 'no-cache',
+        });
+        response.end(JSON.stringify({
+            error: true,
+            code: error.code,
+            message: error.message,
+            details: error.details,
+        }));
+    }
+    writeOptions(response) {
+        response.writeHead(204, {
+            'Access-Control-Allow-Methods': ALLOWED_METHODS.join(', '),
+            'Access-Control-Allow-Headers': 'Content-Type, Authorization',
+        });
+        response.end();
+    }
+}
+exports.VectorHttpHandler = VectorHttpHandler;
+//# sourceMappingURL=VectorHttpHandler.js.map

package/dist/http/vector/VectorHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VectorHttpHandler.js","sourceRoot":"","sources":["../../../src/http/vector/VectorHttpHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,iEAAqD;AACrD,8DAAsD;AAEtD,8DAKiC;AACjC,2DAAsD;AAKtD,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAc7D,MAAM,cAAe,SAAQ,KAAK;IAChC,YACkB,IAAqB,EACrB,UAAkB,EAClC,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,SAAI,GAAJ,IAAI,CAAiB;QACrB,eAAU,GAAV,UAAU,CAAQ;QAElB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAAe,EAAE,OAAiC;QACtE,OAAO,IAAI,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAe;QACjC,OAAO,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAc;QAC5B,OAAO,IAAI,cAAc,CAAC,WAAW,EAAE,GAAG,EAAE,0BAA0B,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,QAAgB,EAAE,MAAc;QACvD,OAAO,IAAI,cAAc,CAAC,oBAAoB,EAAE,GAAG,EAAE,uCAAuC,QAAQ,SAAS,MAAM,EAAE,EAAE;YACrH,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAe;QACjC,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;CACF;AA4CD,MAAa,iBAAkB,SAAQ,8BAAW;IAShD,YACE,WAAwB,EACxB,oBAA0C,EAC1C,gBAAkC,EAClC,UAAsB,EACtB,UAAoC,EAAE;QAEtC,KAAK,EAAE,CAAC;QAfS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAgB7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;IACxD,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,0CAAuB,CAAC,6CAA6C,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAEvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,4CAAyB,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,0CAAuB,CAAC,6CAA6C,CAAC,CAAC;YACnF,CAAC;YAED,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,QAAQ,GAAG,GAAG,QAAQ,GAAG,CAAC;YAC5B,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAEjE,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;YAEvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,IAAI,IAAI,YAAY,MAAM,aAAa,OAAO,EAAE,CAAC,CAAC;YAE7F,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,QAAQ;oBACX,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5D,MAAM;gBACR,KAAK,QAAQ;oBACX,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5D,MAAM;gBACR,KAAK,QAAQ;oBACX,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5D,MAAM;gBACR,KAAK,QAAQ,CAAC;gBACd,KAAK,OAAO;oBACV,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5D,MAAM;gBACR;oBACE,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,gBAAgB;IAChB,+CAA+C;IAEvC,KAAK,CAAC,YAAY,CAAC,OAAoB,EAAE,QAAsB,EAAE,OAAe,EAAE,MAAc;QACtG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,4CAAyB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,2BAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAgB,OAAO,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,cAAc,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,cAAc,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAAC;QAC1E,CAAC;QAED,UAAU;QACV,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtE,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAC9B,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAoB,EAAE,QAAsB,EAAE,OAAe,EAAE,MAAc;QACtG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,4CAAyB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,2BAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAgB,OAAO,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,cAAc,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,cAAc,CAAC,cAAc,CAAC,iCAAiC,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,aAAa,GAAwB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAEtF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC;gBAC/C,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;YACH,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAoB,EAAE,QAAsB,EAAE,OAAe,EAAE,MAAc;QACtG,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,4CAAyB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,iCAAiC;QACjC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,2BAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAgB,OAAO,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,cAAc,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,cAAc,CAAC,cAAc,CAAC,8BAA8B,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAC9B,OAAO;YACP,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAoB,EAAE,QAAsB,EAAE,OAAe,EAAE,MAAc;QACtG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,4CAAyB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,2BAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAE9D,cAAc;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,OAAO,GAAuC,EAAE,CAAC;QACvD,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,+CAA+C;IAC/C,OAAO;IACP,+CAA+C;IAEvC,WAAW,CAAC,QAAsB,EAAE,KAAc;QACxD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,KAAK,YAAY,4BAAS,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC,YAAY,CAAC,QAAQ,IAAI,uBAAuB,CAAC,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAoB,EAAE,WAA2D;QAC3H,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,UAAU,GAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,wCAAqB,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAQ,CAAC,CAAC;QAErF,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAS,CAAC,CAAC;QAExH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,OAAO,WAAW,WAAW,CAAC,KAAK,EAAE,KAAK,eAAe,WAAW,EAAE,CAAC,CAAC;QAEnH,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,oBAAoB,EAAS,CAAC,CAAC;IAC7G,CAAC;IAEO,QAAQ,CAAC,OAAoB;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACxF,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAI,EAAE,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAI,OAAoB;QAChD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,cAAc,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,QAAsB,EAAE,IAAa,EAAE,MAAM,GAAG,GAAG;QAC1E,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;YACzB,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAEO,iBAAiB,CAAC,QAAsB,EAAE,KAAqB;QACrE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAAsB;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,8BAA8B,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1D,8BAA8B,EAAE,6BAA6B;SAC9D,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;CACF;AA9TD,8CA8TC","sourcesContent":["/**\n * VectorHttpHandler - 纯向量存储 HTTP API\n *\n * 提供 /-/vector 端点，只负责向量的存储和搜索，不访问 Pod 数据。\n * AI embedding 生成、credential 管理等逻辑由外部 API Server 处理。\n *\n * 端点设计：\n * - POST /-/vector/upsert   - 存入向量\n * - POST /-/vector/search   - 搜索向量（只接受向量输入）\n * - DELETE /-/vector/delete - 删除向量\n * - GET  /-/vector/status   - 索引状态\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpRequest, HttpResponse } from '@solid/community-server';\nimport {\n  NotImplementedHttpError,\n  MethodNotAllowedHttpError,\n  HttpError,\n  IdentifierSetMultiMap,\n} from '@solid/community-server';\nimport { PERMISSIONS } from '@solidlab/policy-engine';\nimport type { CredentialsExtractor, PermissionReader, Authorizer, ResourceIdentifier } from '@solid/community-server';\nimport { VectorStore } from '../../storage/vector/VectorStore';\nimport type { VectorSearchOptions, VectorSearchResult } from '../../storage/vector/types';\n\nconst ALLOWED_METHODS = ['GET', 'POST', 'DELETE', 'OPTIONS'];\n\n// ============================================\n// 统一错误处理\n// ============================================\n\ntype VectorErrorCode =\n  | 'INVALID_REQUEST'\n  | 'UNAUTHORIZED'\n  | 'FORBIDDEN'\n  | 'NOT_FOUND'\n  | 'DIMENSION_MISMATCH'\n  | 'STORAGE_ERROR';\n\nclass VectorApiError extends Error {\n  constructor(\n    public readonly code: VectorErrorCode,\n    public readonly statusCode: number,\n    message: string,\n    public readonly details?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'VectorApiError';\n  }\n\n  static invalidRequest(message: string, details?: Record<string, unknown>): VectorApiError {\n    return new VectorApiError('INVALID_REQUEST', 400, message, details);\n  }\n\n  static unauthorized(message: string): VectorApiError {\n    return new VectorApiError('UNAUTHORIZED', 401, message);\n  }\n\n  static notFound(action: string): VectorApiError {\n    return new VectorApiError('NOT_FOUND', 404, `Unknown vector action: ${action}`);\n  }\n\n  static dimensionMismatch(expected: number, actual: number): VectorApiError {\n    return new VectorApiError('DIMENSION_MISMATCH', 422, `Vector dimension mismatch: expected ${expected}, got ${actual}`, {\n      expected,\n      actual,\n    });\n  }\n\n  static storageError(message: string): VectorApiError {\n    return new VectorApiError('STORAGE_ERROR', 500, message);\n  }\n}\n\n// ============================================\n// 请求/响应类型\n// ============================================\n\ninterface UpsertRequest {\n  /** 模型名，如 text-embedding-004 */\n  model: string;\n  /** 要存入的向量列表 */\n  vectors: {\n    /** 向量 ID（通常是 subject URI 的哈希） */\n    id: number;\n    /** 向量数据 */\n    vector: number[];\n    /** 可选的元数据 */\n    metadata?: Record<string, unknown>;\n  }[];\n}\n\ninterface SearchRequest {\n  /** 模型名 */\n  model: string;\n  /** 查询向量 */\n  vector: number[];\n  /** 返回结果数量，默认 10 */\n  limit?: number;\n  /** 相似度阈值 */\n  threshold?: number;\n  /** 排除的 ID 列表 */\n  excludeIds?: number[];\n}\n\ninterface DeleteRequest {\n  /** 模型名 */\n  model: string;\n  /** 要删除的向量 ID 列表 */\n  ids: number[];\n}\n\ninterface VectorHttpHandlerOptions {\n  sidecarPath?: string;\n}\n\nexport class VectorHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n\n  private readonly vectorStore: VectorStore;\n  private readonly credentialsExtractor: CredentialsExtractor;\n  private readonly permissionReader: PermissionReader;\n  private readonly authorizer: Authorizer;\n  private readonly sidecarPath: string;\n\n  public constructor(\n    vectorStore: VectorStore,\n    credentialsExtractor: CredentialsExtractor,\n    permissionReader: PermissionReader,\n    authorizer: Authorizer,\n    options: VectorHttpHandlerOptions = {},\n  ) {\n    super();\n    this.vectorStore = vectorStore;\n    this.credentialsExtractor = credentialsExtractor;\n    this.permissionReader = permissionReader;\n    this.authorizer = authorizer;\n    this.sidecarPath = options.sidecarPath ?? '/-/vector';\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    const path = this.parseUrl(request).pathname;\n    if (!path.includes(this.sidecarPath)) {\n      throw new NotImplementedHttpError('Request is not targeting a vector endpoint.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n\n    if (!ALLOWED_METHODS.includes(method)) {\n      throw new MethodNotAllowedHttpError(ALLOWED_METHODS);\n    }\n\n    try {\n      const url = this.parseUrl(request);\n      const path = decodeURIComponent(url.pathname);\n\n      const sidecarIndex = path.indexOf(this.sidecarPath);\n      if (sidecarIndex === -1) {\n        throw new NotImplementedHttpError('Request is not targeting a vector endpoint.');\n      }\n\n      let basePath = path.slice(0, sidecarIndex);\n      if (!basePath.endsWith('/')) {\n        basePath = `${basePath}/`;\n      }\n\n      const actionPath = path.slice(sidecarIndex + this.sidecarPath.length);\n      const action = actionPath.replace(/^\\//, '').split('/')[0] || '';\n\n      const origin = `${url.protocol}//${url.host}`;\n      const baseUrl = `${origin}${basePath}`;\n\n      this.logger.debug(`Vector request: ${method} ${path}, action=${action}, baseUrl=${baseUrl}`);\n\n      switch (action) {\n        case 'upsert':\n          await this.handleUpsert(request, response, baseUrl, method);\n          break;\n        case 'search':\n          await this.handleSearch(request, response, baseUrl, method);\n          break;\n        case 'delete':\n          await this.handleDelete(request, response, baseUrl, method);\n          break;\n        case 'status':\n        case 'stats':\n          await this.handleStatus(request, response, baseUrl, method);\n          break;\n        default:\n          throw VectorApiError.notFound(action);\n      }\n    } catch (error: unknown) {\n      this.handleError(response, error);\n    }\n  }\n\n  // ============================================\n  // HTTP Handlers\n  // ============================================\n\n  private async handleUpsert(request: HttpRequest, response: HttpResponse, baseUrl: string, method: string): Promise<void> {\n    if (method !== 'POST') {\n      throw new MethodNotAllowedHttpError(['POST']);\n    }\n\n    const startTime = Date.now();\n    await this.authorizeFor(baseUrl, request, [PERMISSIONS.Append]);\n\n    const body = await this.readJsonBody<UpsertRequest>(request);\n\n    if (!body.model) {\n      throw VectorApiError.invalidRequest('Missing \"model\" field');\n    }\n\n    if (!Array.isArray(body.vectors) || body.vectors.length === 0) {\n      throw VectorApiError.invalidRequest('Missing or empty \"vectors\" field');\n    }\n\n    // 确保向量表存在\n    await this.vectorStore.ensureVectorTable(body.model);\n\n    let upserted = 0;\n    const errors: string[] = [];\n\n    for (const item of body.vectors) {\n      try {\n        if (typeof item.id !== 'number') {\n          throw new Error('Invalid id: must be a number');\n        }\n        if (!Array.isArray(item.vector) || item.vector.length === 0) {\n          throw new Error('Invalid vector: must be a non-empty array');\n        }\n\n        await this.vectorStore.upsertVector(body.model, item.id, item.vector);\n        upserted++;\n      } catch (err) {\n        errors.push(`id=${item.id}: ${err instanceof Error ? err.message : String(err)}`);\n      }\n    }\n\n    this.sendJsonResponse(response, {\n      upserted,\n      errors,\n      took_ms: Date.now() - startTime,\n    });\n  }\n\n  private async handleSearch(request: HttpRequest, response: HttpResponse, baseUrl: string, method: string): Promise<void> {\n    if (method !== 'POST') {\n      throw new MethodNotAllowedHttpError(['POST']);\n    }\n\n    const startTime = Date.now();\n    await this.authorizeFor(baseUrl, request, [PERMISSIONS.Read]);\n\n    const body = await this.readJsonBody<SearchRequest>(request);\n\n    if (!body.model) {\n      throw VectorApiError.invalidRequest('Missing \"model\" field');\n    }\n\n    if (!Array.isArray(body.vector) || body.vector.length === 0) {\n      throw VectorApiError.invalidRequest('Missing or empty \"vector\" field');\n    }\n\n    const searchOptions: VectorSearchOptions = {\n      limit: body.limit ?? 10,\n      threshold: body.threshold,\n      excludeIds: body.excludeIds ? new Set(body.excludeIds) : undefined,\n    };\n\n    const results = await this.vectorStore.search(body.model, body.vector, searchOptions);\n\n    this.sendJsonResponse(response, {\n      results: results.map((r: VectorSearchResult) => ({\n        id: r.id,\n        score: r.score,\n        distance: r.distance,\n      })),\n      model: body.model,\n      took_ms: Date.now() - startTime,\n    });\n  }\n\n  private async handleDelete(request: HttpRequest, response: HttpResponse, baseUrl: string, method: string): Promise<void> {\n    if (method !== 'POST' && method !== 'DELETE') {\n      throw new MethodNotAllowedHttpError(['POST', 'DELETE']);\n    }\n\n    const startTime = Date.now();\n    // 使用 Modify 权限，因为删除向量是对向量存储的修改操作\n    await this.authorizeFor(baseUrl, request, [PERMISSIONS.Modify]);\n\n    const body = await this.readJsonBody<DeleteRequest>(request);\n\n    if (!body.model) {\n      throw VectorApiError.invalidRequest('Missing \"model\" field');\n    }\n\n    if (!Array.isArray(body.ids) || body.ids.length === 0) {\n      throw VectorApiError.invalidRequest('Missing or empty \"ids\" field');\n    }\n\n    let deleted = 0;\n    const errors: string[] = [];\n\n    for (const id of body.ids) {\n      try {\n        await this.vectorStore.deleteVector(body.model, id);\n        deleted++;\n      } catch (err) {\n        errors.push(`id=${id}: ${err instanceof Error ? err.message : String(err)}`);\n      }\n    }\n\n    this.sendJsonResponse(response, {\n      deleted,\n      errors,\n      took_ms: Date.now() - startTime,\n    });\n  }\n\n  private async handleStatus(request: HttpRequest, response: HttpResponse, baseUrl: string, method: string): Promise<void> {\n    if (method !== 'GET') {\n      throw new MethodNotAllowedHttpError(['GET']);\n    }\n\n    await this.authorizeFor(baseUrl, request, [PERMISSIONS.Read]);\n\n    // 获取所有模型的向量统计\n    const tables = await this.vectorStore.listVectorTables();\n    const byModel: { model: string; count: number }[] = [];\n    let totalCount = 0;\n\n    for (const table of tables) {\n      const count = await this.vectorStore.countVectors(table);\n      byModel.push({ model: table, count });\n      totalCount += count;\n    }\n\n    this.sendJsonResponse(response, { byModel, totalCount });\n  }\n\n  // ============================================\n  // 辅助方法\n  // ============================================\n\n  private handleError(response: HttpResponse, error: unknown): void {\n    if (error instanceof VectorApiError) {\n      this.logger.error(`Vector API error [${error.code}]: ${error.message}`);\n      this.sendErrorResponse(response, error);\n      return;\n    }\n\n    if (error instanceof HttpError) {\n      const errorMsg = error.message || error.name || `HTTP ${error.statusCode}`;\n      this.logger.error(`HTTP error ${error.statusCode}: ${errorMsg}`);\n      this.sendErrorResponse(response, new VectorApiError('INVALID_REQUEST', error.statusCode, errorMsg));\n      return;\n    }\n\n    const errorMsg = error instanceof Error ? error.message : String(error);\n    this.logger.error(`Unexpected error: ${errorMsg}`);\n    this.sendErrorResponse(response, VectorApiError.storageError(errorMsg || 'Internal server error'));\n  }\n\n  private async authorizeFor(baseUrl: string, request: HttpRequest, permissions: typeof PERMISSIONS[keyof typeof PERMISSIONS][]): Promise<void> {\n    const credentials = await this.credentialsExtractor.handleSafe(request);\n    const identifier: ResourceIdentifier = { path: baseUrl };\n    const requestedModes = new IdentifierSetMultiMap([[identifier, permissions]] as any);\n\n    const availablePermissions = await this.permissionReader.handleSafe({ credentials, identifier, requestedModes } as any);\n\n    this.logger.debug(`authorizeFor: baseUrl=${baseUrl}, webId=${credentials.agent?.webId}, requested=${permissions}`);\n\n    await this.authorizer.handleSafe({ credentials, identifier, requestedModes, availablePermissions } as any);\n  }\n\n  private parseUrl(request: HttpRequest): URL {\n    const protocol = request.headers['x-forwarded-proto'] || 'http';\n    const host = request.headers['x-forwarded-host'] || request.headers.host || 'localhost';\n    return new URL(request.url!, `${protocol}://${host}`);\n  }\n\n  private async readJsonBody<T>(request: HttpRequest): Promise<T> {\n    const chunks: Buffer[] = [];\n    for await (const chunk of request) {\n      chunks.push(chunk);\n    }\n    const body = Buffer.concat(chunks).toString('utf8');\n    try {\n      return JSON.parse(body) as T;\n    } catch {\n      throw VectorApiError.invalidRequest('Invalid JSON body');\n    }\n  }\n\n  private sendJsonResponse(response: HttpResponse, data: unknown, status = 200): void {\n    response.writeHead(status, {\n      'Content-Type': 'application/json',\n      'Cache-Control': 'no-cache',\n    });\n    response.end(JSON.stringify(data));\n  }\n\n  private sendErrorResponse(response: HttpResponse, error: VectorApiError): void {\n    response.writeHead(error.statusCode, {\n      'Content-Type': 'application/json',\n      'Cache-Control': 'no-cache',\n    });\n    response.end(\n      JSON.stringify({\n        error: true,\n        code: error.code,\n        message: error.message,\n        details: error.details,\n      }),\n    );\n  }\n\n  private writeOptions(response: HttpResponse): void {\n    response.writeHead(204, {\n      'Access-Control-Allow-Methods': ALLOWED_METHODS.join(', '),\n      'Access-Control-Allow-Headers': 'Content-Type, Authorization',\n    });\n    response.end();\n  }\n}\n"]}

package/dist/http/vector/VectorHttpHandler.jsonld

@@ -0,0 +1,157 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler",
+      "@type": "Class",
+      "requireElement": "VectorHttpHandler",
+      "extends": [
+        "css:dist/server/HttpHandler.jsonld#HttpHandler"
+      ],
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_options_sidecarPath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_vectorStore",
+          "range": "undefineds:dist/storage/vector/VectorStore.jsonld#VectorStore"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_credentialsExtractor",
+          "range": "css:dist/authentication/CredentialsExtractor.jsonld#CredentialsExtractor"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_permissionReader",
+          "range": "css:dist/authorization/PermissionReader.jsonld#PermissionReader"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_authorizer",
+          "range": "css:dist/authorization/Authorizer.jsonld#Authorizer"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_logger",
+          "memberFieldName": "logger",
+          "range": {
+            "@type": "ParameterRangeWildcard"
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_vectorStore",
+          "memberFieldName": "vectorStore"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_credentialsExtractor",
+          "memberFieldName": "credentialsExtractor"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_permissionReader",
+          "memberFieldName": "permissionReader"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_authorizer",
+          "memberFieldName": "authorizer"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_sidecarPath",
+          "memberFieldName": "sidecarPath"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_canHandle",
+          "memberFieldName": "canHandle"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handleUpsert",
+          "memberFieldName": "handleUpsert"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handleSearch",
+          "memberFieldName": "handleSearch"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handleDelete",
+          "memberFieldName": "handleDelete"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handleStatus",
+          "memberFieldName": "handleStatus"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_handleError",
+          "memberFieldName": "handleError"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_authorizeFor",
+          "memberFieldName": "authorizeFor"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_parseUrl",
+          "memberFieldName": "parseUrl"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_readJsonBody",
+          "memberFieldName": "readJsonBody"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_sendJsonResponse",
+          "memberFieldName": "sendJsonResponse"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_sendErrorResponse",
+          "memberFieldName": "sendErrorResponse"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler__member_writeOptions",
+          "memberFieldName": "writeOptions"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_vectorStore"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_credentialsExtractor"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_permissionReader"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_authorizer"
+        },
+        {
+          "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "sidecarPath",
+              "value": {
+                "@id": "undefineds:dist/http/vector/VectorHttpHandler.jsonld#VectorHttpHandler_options_sidecarPath"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/http/vector/index.d.ts

@@ -0,0 +1 @@
+export * from './VectorHttpHandler';

package/dist/http/vector/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./VectorHttpHandler"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/vector/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/vector/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC","sourcesContent":["export * from './VectorHttpHandler';\n"]}

package/dist/ice/IceServerProvider.d.ts

@@ -0,0 +1,85 @@
+/**
+ * TURN 凭证提供器
+ *
+ * 生成带时间限制的 TURN 服务器凭证
+ * 支持 coturn 的 static-auth-secret 模式
+ */
+import type { RTCIceServer } from '../signaling/types';
+/**
+ * TURN 服务器配置
+ */
+export interface TurnServerConfig {
+    /** TURN 服务器 URL，如 turn:turn.example.com:3478 */
+    urls: string | string[];
+    /** 共享密钥（用于生成临时凭证） */
+    sharedSecret?: string;
+    /** 静态用户名（不使用共享密钥时） */
+    username?: string;
+    /** 静态密码（不使用共享密钥时） */
+    credential?: string;
+}
+/**
+ * STUN 服务器配置
+ */
+export interface StunServerConfig {
+    /** STUN 服务器 URL，如 stun:stun.example.com:3478 */
+    urls: string | string[];
+}
+/**
+ * ICE 服务器配置选项
+ */
+export interface IceServerOptions {
+    /** STUN 服务器列表 */
+    stunServers?: StunServerConfig[];
+    /** TURN 服务器列表 */
+    turnServers?: TurnServerConfig[];
+    /** 凭证有效期（秒） */
+    credentialTTL?: number;
+}
+/**
+ * ICE 服务器配置提供器
+ *
+ * 功能：
+ * - 管理 STUN/TURN 服务器配置
+ * - 为 TURN 服务器生成时间限制的凭证
+ */
+export declare class IceServerProvider {
+    private readonly stunServers;
+    private readonly turnServers;
+    private readonly credentialTTL;
+    constructor(options?: IceServerOptions);
+    /**
+     * 获取 ICE 服务器配置
+     *
+     * @param userId 可选的用户标识，用于生成唯一用户名
+     */
+    getIceServers(userId?: string): RTCIceServer[];
+    /**
+     * 创建 TURN 服务器凭证
+     */
+    private createTurnCredential;
+    /**
+     * 生成临时凭证（coturn static-auth-secret 模式）
+     *
+     * 凭证格式：
+     * - username: timestamp:userId
+     * - credential: HMAC-SHA1(sharedSecret, username)
+     */
+    private generateTempCredential;
+    /**
+     * 从环境变量创建 IceServerProvider
+     *
+     * 环境变量：
+     * - STUN_SERVERS: 逗号分隔的 STUN 服务器 URL
+     * - TURN_SERVERS: 逗号分隔的 TURN 服务器 URL
+     * - TURN_SECRET: TURN 共享密钥
+     * - TURN_USERNAME: TURN 静态用户名
+     * - TURN_CREDENTIAL: TURN 静态密码
+     * - TURN_CREDENTIAL_TTL: 凭证有效期（秒）
+     */
+    static fromEnv(): IceServerProvider;
+}
+/**
+ * 默认的 ICE 服务器配置（公共 STUN 服务器）
+ */
+export declare const DEFAULT_ICE_SERVERS: RTCIceServer[];