@undefineds.co/xpod 0.1.7 → 0.2.0-preview.2

package/dist/identity/drizzle/schema.sqlite.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.apiClientCredentials = exports.edgeNodePods = exports.edgeNodes = exports.ddnsRecords = exports.ddnsDomains = exports.webidProfiles = exports.podUsage = exports.accountUsage = void 0;
+exports.serviceTokens = exports.apiClientCredentials = exports.edgeNodePods = exports.edgeNodes = exports.ddnsRecords = exports.ddnsDomains = exports.webidProfiles = exports.podUsage = exports.accountUsage = void 0;
 const sqlite_core_1 = require("drizzle-orm/sqlite-core");
 exports.accountUsage = (0, sqlite_core_1.sqliteTable)('identity_account_usage', {
     accountId: (0, sqlite_core_1.text)('account_id').primaryKey(),
@@ -9,7 +9,12 @@ exports.accountUsage = (0, sqlite_core_1.sqliteTable)('identity_account_usage',
     egressBytes: (0, sqlite_core_1.integer)('egress_bytes').notNull().default(0),
     storageLimitBytes: (0, sqlite_core_1.integer)('storage_limit_bytes'),
     bandwidthLimitBps: (0, sqlite_core_1.integer)('bandwidth_limit_bps'),
-    updatedAt: (0, sqlite_core_1.integer)('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    computeSeconds: (0, sqlite_core_1.integer)('compute_seconds').notNull().default(0),
+    tokensUsed: (0, sqlite_core_1.integer)('tokens_used').notNull().default(0),
+    computeLimitSeconds: (0, sqlite_core_1.integer)('compute_limit_seconds'),
+    tokenLimitMonthly: (0, sqlite_core_1.integer)('token_limit_monthly'),
+    periodStart: (0, sqlite_core_1.integer)('period_start'),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
 });
 exports.podUsage = (0, sqlite_core_1.sqliteTable)('identity_pod_usage', {
     podId: (0, sqlite_core_1.text)('pod_id').primaryKey(),
@@ -19,7 +24,12 @@ exports.podUsage = (0, sqlite_core_1.sqliteTable)('identity_pod_usage', {
     egressBytes: (0, sqlite_core_1.integer)('egress_bytes').notNull().default(0),
     storageLimitBytes: (0, sqlite_core_1.integer)('storage_limit_bytes'),
     bandwidthLimitBps: (0, sqlite_core_1.integer)('bandwidth_limit_bps'),
-    updatedAt: (0, sqlite_core_1.integer)('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    computeSeconds: (0, sqlite_core_1.integer)('compute_seconds').notNull().default(0),
+    tokensUsed: (0, sqlite_core_1.integer)('tokens_used').notNull().default(0),
+    computeLimitSeconds: (0, sqlite_core_1.integer)('compute_limit_seconds'),
+    tokenLimitMonthly: (0, sqlite_core_1.integer)('token_limit_monthly'),
+    periodStart: (0, sqlite_core_1.integer)('period_start'),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
 });
 /**
  * WebID Profile 托管表
@@ -33,8 +43,8 @@ exports.webidProfiles = (0, sqlite_core_1.sqliteTable)('identity_webid_profile',
     oidcIssuer: (0, sqlite_core_1.text)('oidc_issuer'), // https://id.undefineds.co/
     profileData: (0, sqlite_core_1.text)('profile_data', { mode: 'json' }), // WebID Profile 的 JSON-LD 表示
     accountId: (0, sqlite_core_1.text)('account_id'), // 关联的 CSS 账户 ID
-    createdAt: (0, sqlite_core_1.integer)('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
-    updatedAt: (0, sqlite_core_1.integer)('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
 });
 /**
  * DDNS 域名池表
@@ -45,7 +55,7 @@ exports.ddnsDomains = (0, sqlite_core_1.sqliteTable)('identity_ddns_domain', {
     status: (0, sqlite_core_1.text)('status').default('active'), // 'active' | 'suspended'
     provider: (0, sqlite_core_1.text)('provider'), // 'cloudflare' | 'tencent'
     zoneId: (0, sqlite_core_1.text)('zone_id'), // DNS Zone ID
-    createdAt: (0, sqlite_core_1.integer)('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
 });
 /**
  * DDNS 记录表
@@ -62,28 +72,36 @@ exports.ddnsRecords = (0, sqlite_core_1.sqliteTable)('identity_ddns_record', {
     status: (0, sqlite_core_1.text)('status').default('active'), // 'active' | 'banned'
     bannedReason: (0, sqlite_core_1.text)('banned_reason'),
     ttl: (0, sqlite_core_1.integer)('ttl').default(60),
-    createdAt: (0, sqlite_core_1.integer)('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
-    updatedAt: (0, sqlite_core_1.integer)('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
 });
 exports.edgeNodes = (0, sqlite_core_1.sqliteTable)('identity_edge_node', {
     id: (0, sqlite_core_1.text)('id').primaryKey(),
     ownerAccountId: (0, sqlite_core_1.text)('owner_account_id'), // Owner of the node
     displayName: (0, sqlite_core_1.text)('display_name'),
     tokenHash: (0, sqlite_core_1.text)('token_hash').notNull(),
-    nodeType: (0, sqlite_core_1.text)('node_type').default('edge'), // 'center' | 'edge'
+    nodeType: (0, sqlite_core_1.text)('node_type').default('edge'), // 'center' | 'edge' | 'sp'
     subdomain: (0, sqlite_core_1.text)('subdomain').unique(),
     accessMode: (0, sqlite_core_1.text)('access_mode'),
-    publicIp: (0, sqlite_core_1.text)('public_ip'),
+    ipv4: (0, sqlite_core_1.text)('ipv4'), // IPv4 地址
     publicPort: (0, sqlite_core_1.integer)('public_port'),
+    publicUrl: (0, sqlite_core_1.text)('public_url'), // SP 的公网地址 (e.g. https://sp.example)
+    serviceTokenHash: (0, sqlite_core_1.text)('service_token_hash'), // Cloud → SP 回调认证 token (明文)
+    provisionCodeHash: (0, sqlite_core_1.text)('provision_code_hash'), // bind 时用户传入的配对码 (hash)
     internalIp: (0, sqlite_core_1.text)('internal_ip'), // Internal network IP for center nodes
     internalPort: (0, sqlite_core_1.integer)('internal_port'),
-    capabilities: (0, sqlite_core_1.text)('capabilities', { mode: 'json' }),
-    metadata: (0, sqlite_core_1.text)('metadata', { mode: 'json' }),
+    // Extracted from metadata
+    hostname: (0, sqlite_core_1.text)('hostname'), // 节点主机名
+    ipv6: (0, sqlite_core_1.text)('ipv6'), // IPv6 地址
+    version: (0, sqlite_core_1.text)('version'), // Agent 版本
+    // JSON fields
+    capabilities: (0, sqlite_core_1.text)('capabilities'), // JSON string: 能力列表
+    metadata: (0, sqlite_core_1.text)('metadata'), // JSON string: 复杂对象 (tunnel, certificate, metrics)
     connectivityStatus: (0, sqlite_core_1.text)('connectivity_status').default('unknown'),
-    lastConnectivityCheck: (0, sqlite_core_1.integer)('last_connectivity_check', { mode: 'timestamp' }),
-    createdAt: (0, sqlite_core_1.integer)('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
-    updatedAt: (0, sqlite_core_1.integer)('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
-    lastSeen: (0, sqlite_core_1.integer)('last_seen', { mode: 'timestamp' }),
+    lastConnectivityCheck: (0, sqlite_core_1.integer)('last_connectivity_check'),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    lastSeen: (0, sqlite_core_1.integer)('last_seen'),
 });
 exports.edgeNodePods = (0, sqlite_core_1.sqliteTable)('identity_edge_node_pod', {
     nodeId: (0, sqlite_core_1.text)('node_id').notNull().references(() => exports.edgeNodes.id, { onDelete: 'cascade' }),
@@ -91,10 +109,22 @@ exports.edgeNodePods = (0, sqlite_core_1.sqliteTable)('identity_edge_node_pod',
 });
 exports.apiClientCredentials = (0, sqlite_core_1.sqliteTable)('identity_api_client_credentials', {
     clientId: (0, sqlite_core_1.text)('client_id').primaryKey(),
-    clientSecretEncrypted: (0, sqlite_core_1.text)('client_secret_encrypted').notNull(),
     webId: (0, sqlite_core_1.text)('web_id').notNull(),
     accountId: (0, sqlite_core_1.text)('account_id').notNull(),
     displayName: (0, sqlite_core_1.text)('display_name'),
-    createdAt: (0, sqlite_core_1.integer)('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+});
+/**
+ * Service Token 表
+ * 用于服务间认证 (Business, Local SP, Cloud, Compute)
+ */
+exports.serviceTokens = (0, sqlite_core_1.sqliteTable)('identity_service_token', {
+    id: (0, sqlite_core_1.text)('id').primaryKey(),
+    tokenHash: (0, sqlite_core_1.text)('token_hash').notNull().unique(),
+    serviceType: (0, sqlite_core_1.text)('service_type').notNull(), // 'local' | 'business' | 'cloud' | 'compute'
+    serviceId: (0, sqlite_core_1.text)('service_id').notNull(),
+    scopes: (0, sqlite_core_1.text)('scopes').notNull(), // JSON array: ["quota:write","usage:read"]
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    expiresAt: (0, sqlite_core_1.integer)('expires_at'),
 });
 //# sourceMappingURL=schema.sqlite.js.map

package/dist/identity/drizzle/schema.sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.sqlite.js","sourceRoot":"","sources":["../../../src/identity/drizzle/schema.sqlite.ts"],"names":[],"mappings":";;;AAAA,yDAAqE;AAExD,QAAA,YAAY,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IAChE,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,UAAU,EAAE;IAC1C,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC;AAEU,QAAA,QAAQ,GAAG,IAAA,yBAAW,EAAC,oBAAoB,EAAE;IACxD,KAAK,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE;IAClC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,aAAa,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IACjE,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACvC,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE,EAAe,iDAAiD;IACrG,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAqB,oEAAoE;IACxH,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,+BAA+B;IACnF,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAqB,4BAA4B;IAChF,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,6BAA6B;IAClF,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,EAAuB,gBAAgB;IACpE,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAW,EAAC,sBAAsB,EAAE;IAC7D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,EAAiB,iBAAiB;IACrE,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,yBAAyB;IAC7E,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAA0B,2BAA2B;IAC/E,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,EAA6B,cAAc;IAClE,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAW,EAAC,sBAAsB,EAAE;IAC7D,SAAS,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE,EAAW,QAAQ;IAC5D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAoB,iBAAiB;IACrE,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAQ,eAAe;IACnE,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,EAA6B,WAAW;IAC/D,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAA0B,SAAS;IAC7D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,sBAAsB;IAC1E,YAAY,EAAE,IAAA,kBAAI,EAAC,eAAe,CAAC;IACnC,GAAG,EAAE,IAAA,qBAAO,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC;AAEU,QAAA,SAAS,GAAG,IAAA,yBAAW,EAAC,oBAAoB,EAAE;IACzD,EAAE,EAAE,IAAA,kBAAI,EAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,cAAc,EAAE,IAAA,kBAAI,EAAC,kBAAkB,CAAC,EAAM,oBAAoB;IAClE,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAG,oBAAoB;IAClE,SAAS,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC;IAC/B,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC;IAC3B,UAAU,EAAE,IAAA,qBAAO,EAAC,aAAa,CAAC;IAClC,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAe,uCAAuC;IACrF,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC;IACtC,YAAY,EAAE,IAAA,kBAAI,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpD,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5C,kBAAkB,EAAE,IAAA,kBAAI,EAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClE,qBAAqB,EAAE,IAAA,qBAAO,EAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAChF,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9F,QAAQ,EAAE,IAAA,qBAAO,EAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;CACtD,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IAChE,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACzF,OAAO,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,IAAA,yBAAW,EAAC,iCAAiC,EAAE;IACjF,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE;IACxC,qBAAqB,EAAE,IAAA,kBAAI,EAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,KAAK,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/F,CAAC,CAAC","sourcesContent":["import { sqliteTable, text, integer } from 'drizzle-orm/sqlite-core';\n\nexport const accountUsage = sqliteTable('identity_account_usage', {\n  accountId: text('account_id').primaryKey(),\n  storageBytes: integer('storage_bytes').notNull().default(0),\n  ingressBytes: integer('ingress_bytes').notNull().default(0),\n  egressBytes: integer('egress_bytes').notNull().default(0),\n  storageLimitBytes: integer('storage_limit_bytes'),\n  bandwidthLimitBps: integer('bandwidth_limit_bps'),\n  updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n\nexport const podUsage = sqliteTable('identity_pod_usage', {\n  podId: text('pod_id').primaryKey(),\n  accountId: text('account_id').notNull(),\n  storageBytes: integer('storage_bytes').notNull().default(0),\n  ingressBytes: integer('ingress_bytes').notNull().default(0),\n  egressBytes: integer('egress_bytes').notNull().default(0),\n  storageLimitBytes: integer('storage_limit_bytes'),\n  bandwidthLimitBps: integer('bandwidth_limit_bps'),\n  updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n\n/**\n * WebID Profile 托管表\n * 用于身份与存储分离架构，Cloud 托管用户的 WebID Profile\n */\nexport const webidProfiles = sqliteTable('identity_webid_profile', {\n  username: text('username').primaryKey(),\n  webidUrl: text('webid_url').notNull(),              // https://id.undefineds.co/alice/profile/card#me\n  storageUrl: text('storage_url'),                    // https://alice.undefineds.xyz/ 或 https://pods.undefineds.co/alice/\n  storageMode: text('storage_mode').default('cloud'), // 'cloud' | 'local' | 'custom'\n  oidcIssuer: text('oidc_issuer'),                    // https://id.undefineds.co/\n  profileData: text('profile_data', { mode: 'json' }), // WebID Profile 的 JSON-LD 表示\n  accountId: text('account_id'),                      // 关联的 CSS 账户 ID\n  createdAt: integer('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n  updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n\n/**\n * DDNS 域名池表\n * 管理可用的 DDNS 域名\n */\nexport const ddnsDomains = sqliteTable('identity_ddns_domain', {\n  domain: text('domain').primaryKey(),                // undefineds.xyz\n  status: text('status').default('active'),           // 'active' | 'suspended'\n  provider: text('provider'),                         // 'cloudflare' | 'tencent'\n  zoneId: text('zone_id'),                            // DNS Zone ID\n  createdAt: integer('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n\n/**\n * DDNS 记录表\n * 已分配的子域名记录\n */\nexport const ddnsRecords = sqliteTable('identity_ddns_record', {\n  subdomain: text('subdomain').primaryKey(),          // alice\n  domain: text('domain').notNull(),                   // undefineds.xyz\n  ipAddress: text('ip_address'),\n  ipv6Address: text('ipv6_address'),\n  recordType: text('record_type').default('A'),       // 'A' | 'AAAA'\n  nodeId: text('node_id'),                            // 关联的节点 ID\n  username: text('username'),                         // 关联的用户名\n  status: text('status').default('active'),           // 'active' | 'banned'\n  bannedReason: text('banned_reason'),\n  ttl: integer('ttl').default(60),\n  createdAt: integer('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n  updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n\nexport const edgeNodes = sqliteTable('identity_edge_node', {\n  id: text('id').primaryKey(),\n  ownerAccountId: text('owner_account_id'),     // Owner of the node\n  displayName: text('display_name'),\n  tokenHash: text('token_hash').notNull(),\n  nodeType: text('node_type').default('edge'),  // 'center' | 'edge'\n  subdomain: text('subdomain').unique(),\n  accessMode: text('access_mode'),\n  publicIp: text('public_ip'),\n  publicPort: integer('public_port'),\n  internalIp: text('internal_ip'),              // Internal network IP for center nodes\n  internalPort: integer('internal_port'),\n  capabilities: text('capabilities', { mode: 'json' }),\n  metadata: text('metadata', { mode: 'json' }),\n  connectivityStatus: text('connectivity_status').default('unknown'),\n  lastConnectivityCheck: integer('last_connectivity_check', { mode: 'timestamp' }),\n  createdAt: integer('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n  updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n  lastSeen: integer('last_seen', { mode: 'timestamp' }),\n});\n\nexport const edgeNodePods = sqliteTable('identity_edge_node_pod', {\n  nodeId: text('node_id').notNull().references(() => edgeNodes.id, { onDelete: 'cascade' }),\n  baseUrl: text('base_url').notNull(),\n});\n\nexport const apiClientCredentials = sqliteTable('identity_api_client_credentials', {\n  clientId: text('client_id').primaryKey(),\n  clientSecretEncrypted: text('client_secret_encrypted').notNull(),\n  webId: text('web_id').notNull(),\n  accountId: text('account_id').notNull(),\n  displayName: text('display_name'),\n  createdAt: integer('created_at', { mode: 'timestamp' }).notNull().$defaultFn(() => new Date()),\n});\n"]}
+{"version":3,"file":"schema.sqlite.js","sourceRoot":"","sources":["../../../src/identity/drizzle/schema.sqlite.ts"],"names":[],"mappings":";;;AAAA,yDAAqE;AAExD,QAAA,YAAY,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IAChE,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,UAAU,EAAE;IAC1C,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,cAAc,EAAE,IAAA,qBAAO,EAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,UAAU,EAAE,IAAA,qBAAO,EAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,mBAAmB,EAAE,IAAA,qBAAO,EAAC,uBAAuB,CAAC;IACrD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC;IACpC,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEU,QAAA,QAAQ,GAAG,IAAA,yBAAW,EAAC,oBAAoB,EAAE;IACxD,KAAK,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE;IAClC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,cAAc,EAAE,IAAA,qBAAO,EAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,UAAU,EAAE,IAAA,qBAAO,EAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,mBAAmB,EAAE,IAAA,qBAAO,EAAC,uBAAuB,CAAC;IACrD,iBAAiB,EAAE,IAAA,qBAAO,EAAC,qBAAqB,CAAC;IACjD,WAAW,EAAE,IAAA,qBAAO,EAAC,cAAc,CAAC;IACpC,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,aAAa,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IACjE,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACvC,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE,EAAe,iDAAiD;IACrG,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAqB,oEAAoE;IACxH,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,+BAA+B;IACnF,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAqB,4BAA4B;IAChF,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,6BAA6B;IAClF,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,EAAuB,gBAAgB;IACpE,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAW,EAAC,sBAAsB,EAAE;IAC7D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,EAAiB,iBAAiB;IACrE,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,yBAAyB;IAC7E,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAA0B,2BAA2B;IAC/E,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,EAA6B,cAAc;IAClE,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAW,EAAC,sBAAsB,EAAE;IAC7D,SAAS,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE,EAAW,QAAQ;IAC5D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAoB,iBAAiB;IACrE,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAQ,eAAe;IACnE,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,EAA6B,WAAW;IAC/D,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAA0B,SAAS;IAC7D,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,sBAAsB;IAC1E,YAAY,EAAE,IAAA,kBAAI,EAAC,eAAe,CAAC;IACnC,GAAG,EAAE,IAAA,qBAAO,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEU,QAAA,SAAS,GAAG,IAAA,yBAAW,EAAC,oBAAoB,EAAE;IACzD,EAAE,EAAE,IAAA,kBAAI,EAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,cAAc,EAAE,IAAA,kBAAI,EAAC,kBAAkB,CAAC,EAAM,oBAAoB;IAClE,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAG,2BAA2B;IACzE,SAAS,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,IAAA,kBAAI,EAAC,MAAM,CAAC,EAA2B,UAAU;IACvD,UAAU,EAAE,IAAA,qBAAO,EAAC,aAAa,CAAC;IAClC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,EAAiB,qCAAqC;IACnF,gBAAgB,EAAE,IAAA,kBAAI,EAAC,oBAAoB,CAAC,EAAE,6BAA6B;IAC3E,iBAAiB,EAAE,IAAA,kBAAI,EAAC,qBAAqB,CAAC,EAAE,wBAAwB;IACxE,UAAU,EAAE,IAAA,kBAAI,EAAC,aAAa,CAAC,EAAe,uCAAuC;IACrF,YAAY,EAAE,IAAA,qBAAO,EAAC,eAAe,CAAC;IACtC,0BAA0B;IAC1B,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAAoB,QAAQ;IACtD,IAAI,EAAE,IAAA,kBAAI,EAAC,MAAM,CAAC,EAA2B,UAAU;IACvD,OAAO,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,EAAqB,WAAW;IACxD,cAAc;IACd,YAAY,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC,EAAY,oBAAoB;IAClE,QAAQ,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,EAAoB,mDAAmD;IACjG,kBAAkB,EAAE,IAAA,kBAAI,EAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClE,qBAAqB,EAAE,IAAA,qBAAO,EAAC,yBAAyB,CAAC;IACzD,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,QAAQ,EAAE,IAAA,qBAAO,EAAC,WAAW,CAAC;CAC/B,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IAChE,MAAM,EAAE,IAAA,kBAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACzF,OAAO,EAAE,IAAA,kBAAI,EAAC,UAAU,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,IAAA,yBAAW,EAAC,iCAAiC,EAAE;IACjF,QAAQ,EAAE,IAAA,kBAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE;IACxC,KAAK,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,aAAa,GAAG,IAAA,yBAAW,EAAC,wBAAwB,EAAE;IACjE,EAAE,EAAE,IAAA,kBAAI,EAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAChD,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,6CAA6C;IAC1F,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,IAAA,kBAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,2CAA2C;IAC7E,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC;CACjC,CAAC,CAAC","sourcesContent":["import { sqliteTable, text, integer } from 'drizzle-orm/sqlite-core';\n\nexport const accountUsage = sqliteTable('identity_account_usage', {\n  accountId: text('account_id').primaryKey(),\n  storageBytes: integer('storage_bytes').notNull().default(0),\n  ingressBytes: integer('ingress_bytes').notNull().default(0),\n  egressBytes: integer('egress_bytes').notNull().default(0),\n  storageLimitBytes: integer('storage_limit_bytes'),\n  bandwidthLimitBps: integer('bandwidth_limit_bps'),\n  computeSeconds: integer('compute_seconds').notNull().default(0),\n  tokensUsed: integer('tokens_used').notNull().default(0),\n  computeLimitSeconds: integer('compute_limit_seconds'),\n  tokenLimitMonthly: integer('token_limit_monthly'),\n  periodStart: integer('period_start'),\n  updatedAt: integer('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\nexport const podUsage = sqliteTable('identity_pod_usage', {\n  podId: text('pod_id').primaryKey(),\n  accountId: text('account_id').notNull(),\n  storageBytes: integer('storage_bytes').notNull().default(0),\n  ingressBytes: integer('ingress_bytes').notNull().default(0),\n  egressBytes: integer('egress_bytes').notNull().default(0),\n  storageLimitBytes: integer('storage_limit_bytes'),\n  bandwidthLimitBps: integer('bandwidth_limit_bps'),\n  computeSeconds: integer('compute_seconds').notNull().default(0),\n  tokensUsed: integer('tokens_used').notNull().default(0),\n  computeLimitSeconds: integer('compute_limit_seconds'),\n  tokenLimitMonthly: integer('token_limit_monthly'),\n  periodStart: integer('period_start'),\n  updatedAt: integer('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\n/**\n * WebID Profile 托管表\n * 用于身份与存储分离架构，Cloud 托管用户的 WebID Profile\n */\nexport const webidProfiles = sqliteTable('identity_webid_profile', {\n  username: text('username').primaryKey(),\n  webidUrl: text('webid_url').notNull(),              // https://id.undefineds.co/alice/profile/card#me\n  storageUrl: text('storage_url'),                    // https://alice.undefineds.xyz/ 或 https://pods.undefineds.co/alice/\n  storageMode: text('storage_mode').default('cloud'), // 'cloud' | 'local' | 'custom'\n  oidcIssuer: text('oidc_issuer'),                    // https://id.undefineds.co/\n  profileData: text('profile_data', { mode: 'json' }), // WebID Profile 的 JSON-LD 表示\n  accountId: text('account_id'),                      // 关联的 CSS 账户 ID\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n  updatedAt: integer('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\n/**\n * DDNS 域名池表\n * 管理可用的 DDNS 域名\n */\nexport const ddnsDomains = sqliteTable('identity_ddns_domain', {\n  domain: text('domain').primaryKey(),                // undefineds.xyz\n  status: text('status').default('active'),           // 'active' | 'suspended'\n  provider: text('provider'),                         // 'cloudflare' | 'tencent'\n  zoneId: text('zone_id'),                            // DNS Zone ID\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\n/**\n * DDNS 记录表\n * 已分配的子域名记录\n */\nexport const ddnsRecords = sqliteTable('identity_ddns_record', {\n  subdomain: text('subdomain').primaryKey(),          // alice\n  domain: text('domain').notNull(),                   // undefineds.xyz\n  ipAddress: text('ip_address'),\n  ipv6Address: text('ipv6_address'),\n  recordType: text('record_type').default('A'),       // 'A' | 'AAAA'\n  nodeId: text('node_id'),                            // 关联的节点 ID\n  username: text('username'),                         // 关联的用户名\n  status: text('status').default('active'),           // 'active' | 'banned'\n  bannedReason: text('banned_reason'),\n  ttl: integer('ttl').default(60),\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n  updatedAt: integer('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\nexport const edgeNodes = sqliteTable('identity_edge_node', {\n  id: text('id').primaryKey(),\n  ownerAccountId: text('owner_account_id'),     // Owner of the node\n  displayName: text('display_name'),\n  tokenHash: text('token_hash').notNull(),\n  nodeType: text('node_type').default('edge'),  // 'center' | 'edge' | 'sp'\n  subdomain: text('subdomain').unique(),\n  accessMode: text('access_mode'),\n  ipv4: text('ipv4'),                          // IPv4 地址\n  publicPort: integer('public_port'),\n  publicUrl: text('public_url'),                // SP 的公网地址 (e.g. https://sp.example)\n  serviceTokenHash: text('service_token_hash'), // Cloud → SP 回调认证 token (明文)\n  provisionCodeHash: text('provision_code_hash'), // bind 时用户传入的配对码 (hash)\n  internalIp: text('internal_ip'),              // Internal network IP for center nodes\n  internalPort: integer('internal_port'),\n  // Extracted from metadata\n  hostname: text('hostname'),                   // 节点主机名\n  ipv6: text('ipv6'),                          // IPv6 地址\n  version: text('version'),                    // Agent 版本\n  // JSON fields\n  capabilities: text('capabilities'),           // JSON string: 能力列表\n  metadata: text('metadata'),                   // JSON string: 复杂对象 (tunnel, certificate, metrics)\n  connectivityStatus: text('connectivity_status').default('unknown'),\n  lastConnectivityCheck: integer('last_connectivity_check'),\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n  updatedAt: integer('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n  lastSeen: integer('last_seen'),\n});\n\nexport const edgeNodePods = sqliteTable('identity_edge_node_pod', {\n  nodeId: text('node_id').notNull().references(() => edgeNodes.id, { onDelete: 'cascade' }),\n  baseUrl: text('base_url').notNull(),\n});\n\nexport const apiClientCredentials = sqliteTable('identity_api_client_credentials', {\n  clientId: text('client_id').primaryKey(),\n  webId: text('web_id').notNull(),\n  accountId: text('account_id').notNull(),\n  displayName: text('display_name'),\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n});\n\n/**\n * Service Token 表\n * 用于服务间认证 (Business, Local SP, Cloud, Compute)\n */\nexport const serviceTokens = sqliteTable('identity_service_token', {\n  id: text('id').primaryKey(),\n  tokenHash: text('token_hash').notNull().unique(),\n  serviceType: text('service_type').notNull(), // 'local' | 'business' | 'cloud' | 'compute'\n  serviceId: text('service_id').notNull(),\n  scopes: text('scopes').notNull(), // JSON array: [\"quota:write\",\"usage:read\"]\n  createdAt: integer('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),\n  expiresAt: integer('expires_at'),\n});\n"]}

package/dist/identity/oidc/AutoDetectIdentityProviderHandler.js

@@ -35,9 +35,9 @@ class AutoDetectIdentityProviderHandler extends community_server_1.HttpHandler {
         if (!this.isIdpPath(url)) {
             throw new community_server_1.NotImplementedHttpError('Not an IdP request');
         }
-        // SP 模式：拒绝所有 IdP 请求
+        // SP 模式：接受 IdP 路径请求，在 handle 中返回 404
         if (this.idpUrl) {
-            throw new community_server_1.NotImplementedHttpError(`External IdP mode: ${this.message}. Please use the external identity provider.`);
+            return;
         }
         // 标准模式：委托给 source Handler
         if (this.source) {
@@ -54,8 +54,10 @@ class AutoDetectIdentityProviderHandler extends community_server_1.HttpHandler {
      */
     async handle(input) {
         if (this.idpUrl) {
-            // SP 模式下不应该到达这里
-            throw new community_server_1.NotImplementedHttpError(`External IdP mode: ${this.message}. Please use the external identity provider.`);
+            const { response } = input;
+            response.writeHead(404, { 'Content-Type': 'application/json' });
+            response.end(JSON.stringify({ error: this.message }));
+            return;
         }
         // 标准模式：委托给 source Handler
         if (this.source) {

package/dist/identity/oidc/AutoDetectIdentityProviderHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"AutoDetectIdentityProviderHandler.js","sourceRoot":"","sources":["../../../src/identity/oidc/AutoDetectIdentityProviderHandler.ts"],"names":[],"mappings":";;;AAAA,iEAAqD;AACrD,8DAIiC;AAWjC;;;;;;GAMG;AACH,MAAa,iCAAkC,SAAQ,8BAAW;IAMhE,YAAY,UAAoD,EAAE;QAChE,KAAK,EAAE,CAAC;QANO,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,4CAA4C,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,OAAO,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED;;;;OAIG;IACa,KAAK,CAAC,SAAS,CAAC,KAAuB;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAEpC,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,0CAAuB,CAAC,oBAAoB,CAAC,CAAC;QAC1D,CAAC;QAED,oBAAoB;QACpB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,0CAAuB,CAC/B,sBAAsB,IAAI,CAAC,OAAO,8CAA8C,CACjF,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,0CAAuB,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACa,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,gBAAgB;YAChB,MAAM,IAAI,0CAAuB,CAC/B,sBAAsB,IAAI,CAAC,OAAO,8CAA8C,CACjF,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,0CAAuB,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;YACjC,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,SAAS,CACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AA5FD,8EA4FC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport {\n  HttpHandler,\n  type HttpHandlerInput,\n  NotImplementedHttpError,\n} from '@solid/community-server';\n\nexport interface AutoDetectIdentityProviderHandlerOptions {\n  /** 外部 IdP 的基础 URL，如果提供则启用 SP 模式 */\n  idpUrl?: string;\n  /** 禁用时的消息 */\n  message?: string;\n  /** CSS 默认的 IdentityProviderHandler，标准模式下委托给它 */\n  source?: HttpHandler;\n}\n\n/**\n * Auto-detect Identity Provider Handler\n *\n * 自动检测运行模式：\n * - 如果配置了 idpUrl -> SP 模式：禁用本地账户管理\n * - 如果没有配置 idpUrl -> 标准模式：委托给 CSS 默认 Handler\n */\nexport class AutoDetectIdentityProviderHandler extends HttpHandler {\n  private readonly logger = getLoggerFor(this);\n  private readonly idpUrl?: string;\n  private readonly message: string;\n  private readonly source?: HttpHandler;\n\n  constructor(options: AutoDetectIdentityProviderHandlerOptions = {}) {\n    super();\n    this.idpUrl = options.idpUrl;\n    this.message = options.message ?? 'Account management handled by external IdP';\n    this.source = options.source;\n\n    if (this.idpUrl) {\n      this.logger.info(`SP mode enabled: ${this.message}, external IdP: ${this.idpUrl}`);\n    } else {\n      this.logger.info('Standard mode enabled, delegating to source IdentityProviderHandler');\n    }\n  }\n\n  /**\n   * 判断是否处理请求\n   * - SP 模式：拒绝所有 IdP 请求\n   * - 标准模式：委托给 source Handler\n   */\n  public override async canHandle(input: HttpHandlerInput): Promise<void> {\n    const url = input.request.url ?? '';\n\n    // 检查是否是 IdP 路径\n    if (!this.isIdpPath(url)) {\n      throw new NotImplementedHttpError('Not an IdP request');\n    }\n\n    // SP 模式：拒绝所有 IdP 请求\n    if (this.idpUrl) {\n      throw new NotImplementedHttpError(\n        `External IdP mode: ${this.message}. Please use the external identity provider.`\n      );\n    }\n\n    // 标准模式：委托给 source Handler\n    if (this.source) {\n      await this.source.canHandle(input);\n    } else {\n      throw new NotImplementedHttpError('No source IdentityProviderHandler configured');\n    }\n  }\n\n  /**\n   * 处理请求\n   * - SP 模式：不应该到达这里\n   * - 标准模式：委托给 source Handler\n   */\n  public override async handle(input: HttpHandlerInput): Promise<void> {\n    if (this.idpUrl) {\n      // SP 模式下不应该到达这里\n      throw new NotImplementedHttpError(\n        `External IdP mode: ${this.message}. Please use the external identity provider.`\n      );\n    }\n\n    // 标准模式：委托给 source Handler\n    if (this.source) {\n      await this.source.handle(input);\n    } else {\n      throw new NotImplementedHttpError('No source IdentityProviderHandler configured');\n    }\n  }\n\n  /**\n   * 检查是否是 IdP 路径\n   */\n  private isIdpPath(url: string): boolean {\n    const pathname = this.getPathname(url);\n    return (\n      pathname.startsWith('/idp/') ||\n      pathname.startsWith('/.account/') ||\n      pathname === '/register' ||\n      pathname === '/login' ||\n      pathname === '/logout'\n    );\n  }\n\n  /**\n   * 从 URL 提取 pathname\n   */\n  private getPathname(url: string): string {\n    try {\n      return new URL(url, 'http://localhost').pathname;\n    } catch {\n      return url.split('?')[0];\n    }\n  }\n}\n"]}
+{"version":3,"file":"AutoDetectIdentityProviderHandler.js","sourceRoot":"","sources":["../../../src/identity/oidc/AutoDetectIdentityProviderHandler.ts"],"names":[],"mappings":";;;AAAA,iEAAqD;AACrD,8DAIiC;AAWjC;;;;;;GAMG;AACH,MAAa,iCAAkC,SAAQ,8BAAW;IAMhE,YAAY,UAAoD,EAAE;QAChE,KAAK,EAAE,CAAC;QANO,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,4CAA4C,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,OAAO,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED;;;;OAIG;IACa,KAAK,CAAC,SAAS,CAAC,KAAuB;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAEpC,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,0CAAuB,CAAC,oBAAoB,CAAC,CAAC;QAC1D,CAAC;QAED,qCAAqC;QACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,0CAAuB,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACa,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAC3B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,0CAAuB,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;YACjC,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,SAAS,CACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AA1FD,8EA0FC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport {\n  HttpHandler,\n  type HttpHandlerInput,\n  NotImplementedHttpError,\n} from '@solid/community-server';\n\nexport interface AutoDetectIdentityProviderHandlerOptions {\n  /** 外部 IdP 的基础 URL，如果提供则启用 SP 模式 */\n  idpUrl?: string;\n  /** 禁用时的消息 */\n  message?: string;\n  /** CSS 默认的 IdentityProviderHandler，标准模式下委托给它 */\n  source?: HttpHandler;\n}\n\n/**\n * Auto-detect Identity Provider Handler\n *\n * 自动检测运行模式：\n * - 如果配置了 idpUrl -> SP 模式：禁用本地账户管理\n * - 如果没有配置 idpUrl -> 标准模式：委托给 CSS 默认 Handler\n */\nexport class AutoDetectIdentityProviderHandler extends HttpHandler {\n  private readonly logger = getLoggerFor(this);\n  private readonly idpUrl?: string;\n  private readonly message: string;\n  private readonly source?: HttpHandler;\n\n  constructor(options: AutoDetectIdentityProviderHandlerOptions = {}) {\n    super();\n    this.idpUrl = options.idpUrl;\n    this.message = options.message ?? 'Account management handled by external IdP';\n    this.source = options.source;\n\n    if (this.idpUrl) {\n      this.logger.info(`SP mode enabled: ${this.message}, external IdP: ${this.idpUrl}`);\n    } else {\n      this.logger.info('Standard mode enabled, delegating to source IdentityProviderHandler');\n    }\n  }\n\n  /**\n   * 判断是否处理请求\n   * - SP 模式：拒绝所有 IdP 请求\n   * - 标准模式：委托给 source Handler\n   */\n  public override async canHandle(input: HttpHandlerInput): Promise<void> {\n    const url = input.request.url ?? '';\n\n    // 检查是否是 IdP 路径\n    if (!this.isIdpPath(url)) {\n      throw new NotImplementedHttpError('Not an IdP request');\n    }\n\n    // SP 模式：接受 IdP 路径请求，在 handle 中返回 404\n    if (this.idpUrl) {\n      return;\n    }\n\n    // 标准模式：委托给 source Handler\n    if (this.source) {\n      await this.source.canHandle(input);\n    } else {\n      throw new NotImplementedHttpError('No source IdentityProviderHandler configured');\n    }\n  }\n\n  /**\n   * 处理请求\n   * - SP 模式：不应该到达这里\n   * - 标准模式：委托给 source Handler\n   */\n  public override async handle(input: HttpHandlerInput): Promise<void> {\n    if (this.idpUrl) {\n      const { response } = input;\n      response.writeHead(404, { 'Content-Type': 'application/json' });\n      response.end(JSON.stringify({ error: this.message }));\n      return;\n    }\n\n    // 标准模式：委托给 source Handler\n    if (this.source) {\n      await this.source.handle(input);\n    } else {\n      throw new NotImplementedHttpError('No source IdentityProviderHandler configured');\n    }\n  }\n\n  /**\n   * 检查是否是 IdP 路径\n   */\n  private isIdpPath(url: string): boolean {\n    const pathname = this.getPathname(url);\n    return (\n      pathname.startsWith('/idp/') ||\n      pathname.startsWith('/.account/') ||\n      pathname === '/register' ||\n      pathname === '/login' ||\n      pathname === '/logout'\n    );\n  }\n\n  /**\n   * 从 URL 提取 pathname\n   */\n  private getPathname(url: string): string {\n    try {\n      return new URL(url, 'http://localhost').pathname;\n    } catch {\n      return url.split('?')[0];\n    }\n  }\n}\n"]}

package/dist/index.d.ts

@@ -8,13 +8,11 @@ import { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } fr
 export type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';
 import { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';
 import { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';
-import { EdgeNodeSignalHttpHandler } from './http/admin/EdgeNodeSignalHttpHandler';
 import { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';
 import { ClusterIngressRouter } from './http/ClusterIngressRouter';
 import { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';
 import { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';
 import { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';
-import { SignalInterceptHttpHandler } from './http/SignalInterceptHttpHandler';
 import { RouterHttpHandler } from './http/RouterHttpHandler';
 import { RouterHttpRoute } from './http/RouterHttpRoute';
 import { TracingHandler } from './http/TracingHandler';
@@ -25,7 +23,6 @@ import { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage'
 import { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';
 import { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';
 import { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';
-import { DefaultQuotaService } from './quota/DefaultQuotaService';
 import { DrizzleQuotaService } from './quota/DrizzleQuotaService';
 import { NoopQuotaService } from './quota/NoopQuotaService';
 import { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';
@@ -43,9 +40,6 @@ import { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';
 import { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';
 import { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';
 import { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';
-import { TieredMinioDataAccessor } from './storage/accessors/TieredMinioDataAccessor';
-import { PodMigrationHttpHandler } from './http/cluster/PodMigrationHttpHandler';
-import { PodMigrationService } from './service/PodMigrationService';
 import { ReactAppViewHandler } from './identity/ReactAppViewHandler';
 import { SqliteQuintStore } from './storage/quint/SqliteQuintStore';
 import { PgQuintStore } from './storage/quint/PgQuintStore';
@@ -63,18 +57,21 @@ import { VectorStore } from './storage/vector/VectorStore';
 import { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';
 import { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';
 import { SubdomainService } from './subdomain/SubdomainService';
+import { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';
 import { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';
 import { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';
 import { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';
 import { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';
 import { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';
 import { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';
-export type { MigratableDataAccessor, MigrationProgress } from './storage/MigratableDataAccessor';
+import { ProvisionPodCreator } from './provision/ProvisionPodCreator';
+import { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';
+import { AuthModeSelector } from './authorization/AuthModeSelector';
 export type { DnsProvider, ListDnsRecordsInput, ListableDnsProvider, DeleteDnsRecordInput, DnsRecordSummary, UpsertDnsRecordInput, } from './dns/DnsProvider';
 export type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';
 export type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';
-export type { QuotaService } from './quota/QuotaService';
+export type { QuotaService, AccountQuota } from './quota/QuotaService';
 export type { TunnelProvider, TunnelConfig, TunnelSetupOptions, TunnelStatus, } from './tunnel/TunnelProvider';
 export type { SubdomainRegistration, ConnectivityResult, SubdomainServiceOptions, } from './subdomain/SubdomainService';
 export { AppStaticAssetHandler } from './http/AppStaticAssetHandler';
-export { RepresentationPartialConvertingStore, MinioDataAccessor, QuadstoreSparqlDataAccessor, QuintStoreSparqlDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, SparqlUpdateResourceStore, SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, EdgeNodeSignalHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, SignalInterceptHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, DefaultQuotaService, DrizzleQuotaService, NoopQuotaService, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, EdgeNodeAgent, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, TieredMinioDataAccessor, PodMigrationHttpHandler, PodMigrationService, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, BaseQuintStore, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, };
+export { RepresentationPartialConvertingStore, MinioDataAccessor, QuadstoreSparqlDataAccessor, QuintStoreSparqlDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, SparqlUpdateResourceStore, SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, DrizzleQuotaService, NoopQuotaService, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, EdgeNodeAgent, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, BaseQuintStore, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionCodeCodec, AuthModeSelector, };

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PodMigrationHttpHandler = exports.TieredMinioDataAccessor = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.DefaultQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.SignalInterceptHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.EdgeNodeSignalHttpHandler = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
-exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.BaseQuintStore = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodMigrationService = void 0;
+exports.BaseQuintStore = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
+exports.AuthModeSelector = exports.ProvisionCodeCodec = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = void 0;
 const RepresentationPartialConvertingStore_1 = require("./storage/RepresentationPartialConvertingStore");
 Object.defineProperty(exports, "RepresentationPartialConvertingStore", { enumerable: true, get: function () { return RepresentationPartialConvertingStore_1.RepresentationPartialConvertingStore; } });
 const MinioDataAccessor_1 = require("./storage/accessors/MinioDataAccessor");
@@ -22,8 +22,6 @@ const SubgraphSparqlHttpHandler_1 = require("./http/SubgraphSparqlHttpHandler");
 Object.defineProperty(exports, "SubgraphSparqlHttpHandler", { enumerable: true, get: function () { return SubgraphSparqlHttpHandler_1.SubgraphSparqlHttpHandler; } });
 const QuotaAdminHttpHandler_1 = require("./http/quota/QuotaAdminHttpHandler");
 Object.defineProperty(exports, "QuotaAdminHttpHandler", { enumerable: true, get: function () { return QuotaAdminHttpHandler_1.QuotaAdminHttpHandler; } });
-const EdgeNodeSignalHttpHandler_1 = require("./http/admin/EdgeNodeSignalHttpHandler");
-Object.defineProperty(exports, "EdgeNodeSignalHttpHandler", { enumerable: true, get: function () { return EdgeNodeSignalHttpHandler_1.EdgeNodeSignalHttpHandler; } });
 const SparqlUpdateResourceStore_1 = require("./storage/SparqlUpdateResourceStore");
 Object.defineProperty(exports, "SparqlUpdateResourceStore", { enumerable: true, get: function () { return SparqlUpdateResourceStore_1.SparqlUpdateResourceStore; } });
 const ClusterIngressRouter_1 = require("./http/ClusterIngressRouter");
@@ -34,8 +32,6 @@ const EdgeNodeDirectDebugHttpHandler_1 = require("./http/EdgeNodeDirectDebugHttp
 Object.defineProperty(exports, "EdgeNodeDirectDebugHttpHandler", { enumerable: true, get: function () { return EdgeNodeDirectDebugHttpHandler_1.EdgeNodeDirectDebugHttpHandler; } });
 const EdgeNodeProxyHttpHandler_1 = require("./http/EdgeNodeProxyHttpHandler");
 Object.defineProperty(exports, "EdgeNodeProxyHttpHandler", { enumerable: true, get: function () { return EdgeNodeProxyHttpHandler_1.EdgeNodeProxyHttpHandler; } });
-const SignalInterceptHttpHandler_1 = require("./http/SignalInterceptHttpHandler");
-Object.defineProperty(exports, "SignalInterceptHttpHandler", { enumerable: true, get: function () { return SignalInterceptHttpHandler_1.SignalInterceptHttpHandler; } });
 const RouterHttpHandler_1 = require("./http/RouterHttpHandler");
 Object.defineProperty(exports, "RouterHttpHandler", { enumerable: true, get: function () { return RouterHttpHandler_1.RouterHttpHandler; } });
 const RouterHttpRoute_1 = require("./http/RouterHttpRoute");
@@ -56,8 +52,6 @@ const RedisKeyValueStorage_1 = require("./storage/keyvalue/RedisKeyValueStorage"
 Object.defineProperty(exports, "RedisKeyValueStorage", { enumerable: true, get: function () { return RedisKeyValueStorage_1.RedisKeyValueStorage; } });
 const SqliteKeyValueStorage_1 = require("./storage/keyvalue/SqliteKeyValueStorage");
 Object.defineProperty(exports, "SqliteKeyValueStorage", { enumerable: true, get: function () { return SqliteKeyValueStorage_1.SqliteKeyValueStorage; } });
-const DefaultQuotaService_1 = require("./quota/DefaultQuotaService");
-Object.defineProperty(exports, "DefaultQuotaService", { enumerable: true, get: function () { return DefaultQuotaService_1.DefaultQuotaService; } });
 const DrizzleQuotaService_1 = require("./quota/DrizzleQuotaService");
 Object.defineProperty(exports, "DrizzleQuotaService", { enumerable: true, get: function () { return DrizzleQuotaService_1.DrizzleQuotaService; } });
 const NoopQuotaService_1 = require("./quota/NoopQuotaService");
@@ -93,12 +87,6 @@ const CenterNodeRegistrationService_1 = require("./identity/CenterNodeRegistrati
 Object.defineProperty(exports, "CenterNodeRegistrationService", { enumerable: true, get: function () { return CenterNodeRegistrationService_1.CenterNodeRegistrationService; } });
 const PodRoutingHttpHandler_1 = require("./http/PodRoutingHttpHandler");
 Object.defineProperty(exports, "PodRoutingHttpHandler", { enumerable: true, get: function () { return PodRoutingHttpHandler_1.PodRoutingHttpHandler; } });
-const TieredMinioDataAccessor_1 = require("./storage/accessors/TieredMinioDataAccessor");
-Object.defineProperty(exports, "TieredMinioDataAccessor", { enumerable: true, get: function () { return TieredMinioDataAccessor_1.TieredMinioDataAccessor; } });
-const PodMigrationHttpHandler_1 = require("./http/cluster/PodMigrationHttpHandler");
-Object.defineProperty(exports, "PodMigrationHttpHandler", { enumerable: true, get: function () { return PodMigrationHttpHandler_1.PodMigrationHttpHandler; } });
-const PodMigrationService_1 = require("./service/PodMigrationService");
-Object.defineProperty(exports, "PodMigrationService", { enumerable: true, get: function () { return PodMigrationService_1.PodMigrationService; } });
 const ReactAppViewHandler_1 = require("./identity/ReactAppViewHandler");
 Object.defineProperty(exports, "ReactAppViewHandler", { enumerable: true, get: function () { return ReactAppViewHandler_1.ReactAppViewHandler; } });
 const SqliteQuintStore_1 = require("./storage/quint/SqliteQuintStore");
@@ -136,6 +124,8 @@ const LocalTunnelProvider_1 = require("./tunnel/LocalTunnelProvider");
 Object.defineProperty(exports, "LocalTunnelProvider", { enumerable: true, get: function () { return LocalTunnelProvider_1.LocalTunnelProvider; } });
 const SubdomainService_1 = require("./subdomain/SubdomainService");
 Object.defineProperty(exports, "SubdomainService", { enumerable: true, get: function () { return SubdomainService_1.SubdomainService; } });
+const UrlAwareRedisLocker_1 = require("./storage/locking/UrlAwareRedisLocker");
+Object.defineProperty(exports, "UrlAwareRedisLocker", { enumerable: true, get: function () { return UrlAwareRedisLocker_1.UrlAwareRedisLocker; } });
 // IdP/SP separation components
 const MultiDomainIdentifierStrategy_1 = require("./util/identifiers/MultiDomainIdentifierStrategy");
 Object.defineProperty(exports, "MultiDomainIdentifierStrategy", { enumerable: true, get: function () { return MultiDomainIdentifierStrategy_1.MultiDomainIdentifierStrategy; } });
@@ -149,6 +139,14 @@ const AutoDetectOidcHandler_1 = require("./identity/oidc/AutoDetectOidcHandler")
 Object.defineProperty(exports, "AutoDetectOidcHandler", { enumerable: true, get: function () { return AutoDetectOidcHandler_1.AutoDetectOidcHandler; } });
 const AutoDetectIdentityProviderHandler_1 = require("./identity/oidc/AutoDetectIdentityProviderHandler");
 Object.defineProperty(exports, "AutoDetectIdentityProviderHandler", { enumerable: true, get: function () { return AutoDetectIdentityProviderHandler_1.AutoDetectIdentityProviderHandler; } });
+// Provision components
+const ProvisionPodCreator_1 = require("./provision/ProvisionPodCreator");
+Object.defineProperty(exports, "ProvisionPodCreator", { enumerable: true, get: function () { return ProvisionPodCreator_1.ProvisionPodCreator; } });
+const ProvisionCodeCodec_1 = require("./provision/ProvisionCodeCodec");
+Object.defineProperty(exports, "ProvisionCodeCodec", { enumerable: true, get: function () { return ProvisionCodeCodec_1.ProvisionCodeCodec; } });
+// Authorization components
+const AuthModeSelector_1 = require("./authorization/AuthModeSelector");
+Object.defineProperty(exports, "AuthModeSelector", { enumerable: true, get: function () { return AuthModeSelector_1.AuthModeSelector; } });
 // Export the new AppStaticAssetHandler
 var AppStaticAssetHandler_1 = require("./http/AppStaticAssetHandler");
 Object.defineProperty(exports, "AppStaticAssetHandler", { enumerable: true, get: function () { return AppStaticAssetHandler_1.AppStaticAssetHandler; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yGAAsG;AAyGlG,qHAzGK,2EAAoC,OAyGL;AAxGxC,6EAA0E;AAyGtE,kGAzGK,qCAAiB,OAyGL;AAxGrB,iGAA8F;AAyG1F,4GAzGK,yDAA2B,OAyGL;AAxG/B,mGAAgG;AAyG5F,6GAzGK,2DAA4B,OAyGL;AAxGhC,yEAAsE;AAyGlE,gGAzGK,iCAAe,OAyGL;AAxGnB,mFAAgF;AAyG5E,0GAzGK,qDAAyB,OAyGL;AAxG7B,8EAA0H;AA0GtH,oGA1GK,yCAAmB,OA0GL;AACnB,sGA3G0B,2CAAqB,OA2G1B;AACrB,uGA5GiD,4CAAsB,OA4GjD;AA1G1B,gFAA6E;AA2GzE,0GA3GK,qDAAyB,OA2GL;AA1G7B,8EAA2E;AA2GvE,sGA3GK,6CAAqB,OA2GL;AA1GzB,sFAAmF;AA2G/E,0GA3GK,qDAAyB,OA2GL;AA1G7B,mFAAgF;AAoG5E,0GApGK,qDAAyB,OAoGL;AAnG7B,sEAAmE;AA0G/D,qGA1GK,2CAAoB,OA0GL;AAzGxB,sFAAmF;AA0G/E,6GA1GK,2DAA4B,OA0GL;AAzGhC,0FAAuF;AA0GnF,+GA1GK,+DAA8B,OA0GL;AAzGlC,8EAA2E;AA0GvE,yGA1GK,mDAAwB,OA0GL;AAzG5B,kFAA+E;AA0G3E,2GA1GK,uDAA0B,OA0GL;AAzG9B,gEAA6D;AA0GzD,kGA1GK,qCAAiB,OA0GL;AAzGrB,4DAAyD;AA0GrD,gGA1GK,iCAAe,OA0GL;AAzGnB,0DAAuD;AA0GnD,+FA1GK,+BAAc,OA0GL;AAzGlB,6EAA0E;AA2GtE,oGA3GK,yCAAmB,OA2GL;AA1GvB,gGAA6F;AAyGzF,+GAzGK,+DAA8B,OAyGL;AAxGlC,gGAA6F;AA0GzF,kHA1GK,qEAAiC,OA0GL;AAzGrC,oFAAiF;AA0G7E,sGA1GK,6CAAqB,OA0GL;AAzGzB,wFAAqF;AA0GjF,wGA1GK,iDAAuB,OA0GL;AAzG3B,kFAA+E;AA0G3E,qGA1GK,2CAAoB,OA0GL;AAzGxB,oFAAiF;AA0G7E,sGA1GK,6CAAqB,OA0GL;AAzGzB,qEAAkE;AA0GhE,oGA1GO,yCAAmB,OA0GP;AAzGrB,qEAAkE;AA0GhE,oGA1GO,yCAAmB,OA0GP;AAzGrB,+DAA4D;AA0GxD,iGA1GK,mCAAgB,OA0GL;AAzGpB,qFAAkF;AA0G9E,wGA1GK,iDAAuB,OA0GL;AAzG3B,yEAAsE;AA0GlE,mGA1GK,uCAAkB,OA0GL;AAzGtB,0EAAuE;AA0GnE,uGA1GK,+CAAsB,OA0GL;AAzG1B,oFAAiF;AA0G7E,4GA1GK,yDAA2B,OA0GL;AAzG/B,wEAAsG;AA0GlG,4GA1GK,mDAA2B,OA0GL;AAC3B,0GA3GkC,iDAAyB,OA2GlC;AA1G7B,8DAA2D;AA2GvD,iGA3GK,mCAAgB,OA2GL;AA1GpB,+EAA4E;AA8GxE,uGA9GK,+CAAsB,OA8GL;AA7G1B,kFAA+E;AA0G3E,2GA1GK,uDAA0B,OA0GL;AAzG9B,wDAAqD;AA0GjD,8FA1GK,6BAAa,OA0GL;AAzGjB,qFAAkF;AA0G9E,2GA1GK,uDAA0B,OA0GL;AAxG9B,2EAAwE;AA4GtE,mGA5GO,uCAAkB,OA4GP;AA3GpB,sEAAmE;AAyG/D,qGAzGK,2CAAoB,OAyGL;AAxGxB,4FAAyF;AAyGrF,0GAzGK,qDAAyB,OAyGL;AAxG7B,4FAAyF;AA0GvF,8GA1GO,6DAA6B,OA0GP;AAzG/B,wEAAqE;AA0GnE,sGA1GO,6CAAqB,OA0GP;AAzGvB,yFAAsF;AA0GpF,wGA1GO,iDAAuB,OA0GP;AAzGzB,oFAAiF;AA0G/E,wGA1GO,iDAAuB,OA0GP;AAzGzB,uEAAoE;AA0GlE,oGA1GO,yCAAmB,OA0GP;AAzGrB,wEAAqE;AA0GnE,oGA1GO,yCAAmB,OA0GP;AAzGrB,uEAAoE;AA4GlE,iGA5GO,mCAAgB,OA4GP;AA3GlB,+DAA4D;AA4G1D,6FA5GO,2BAAY,OA4GP;AA3Gd,mEAAgE;AA4G9D,+FA5GO,+BAAc,OA4GP;AA3GhB,iDAAmD;AAwGjD,2FAxGO,kBAAU,OAwGP;AAtGZ,oBAAoB;AACpB,kDAAgF;AA2G9E,kGA3GO,yBAAiB,OA2GP;AACjB,oGA5G0B,2BAAmB,OA4G1B;AA3GrB,uEAAoE;AA4GlE,kGA5GO,qCAAiB,OA4GP;AA3GnB,oEAAiE;AA6G/D,iGA7GO,mCAAgB,OA6GP;AA5GlB,4EAAyE;AA6GvE,qGA7GO,2CAAoB,OA6GP;AA5GtB,oEAAiE;AA6G/D,iGA7GO,mCAAgB,OA6GP;AA5GlB,4EAAyE;AA6GvE,qGA7GO,2CAAoB,OA6GP;AA5GtB,oEAAiE;AA6G/D,iGA7GO,mCAAgB,OA6GP;AA5GlB,4EAAyE;AA6GvE,qGA7GO,2CAAoB,OA6GP;AA5GtB,8DAA2D;AAkGzD,4FAlGO,yBAAW,OAkGP;AAjGb,kCAAkC;AAClC,gFAA6E;AA4G3E,yGA5GO,mDAAwB,OA4GP;AA3G1B,sEAAmE;AA4GjE,oGA5GO,yCAAmB,OA4GP;AA3GrB,mEAAgE;AA4G9D,iGA5GO,mCAAgB,OA4GP;AA3GlB,+BAA+B;AAC/B,oGAAiG;AA4G/F,8GA5GO,6DAA6B,OA4GP;AA3G/B,sGAAmG;AA4GjG,+GA5GO,+DAA8B,OA4GP;AA3GhC,6EAA0E;AA4GxE,oGA5GO,yCAAmB,OA4GP;AA3GrB,qGAAkG;AA4GhG,gHA5GO,iEAA+B,OA4GP;AA3GjC,iFAA8E;AA4G5E,sGA5GO,6CAAqB,OA4GP;AA3GvB,yGAAsG;AA4GpG,kHA5GO,qEAAiC,OA4GP;AAlFnC,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { EdgeNodeSignalHttpHandler } from './http/admin/EdgeNodeSignalHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { SignalInterceptHttpHandler } from './http/SignalInterceptHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DefaultQuotaService } from './quota/DefaultQuotaService';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { TieredMinioDataAccessor } from './storage/accessors/TieredMinioDataAccessor';\nimport { PodMigrationHttpHandler } from './http/cluster/PodMigrationHttpHandler';\nimport { PodMigrationService } from './service/PodMigrationService';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { BaseQuintStore } from './storage/quint/BaseQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\nexport type { MigratableDataAccessor, MigrationProgress } from './storage/MigratableDataAccessor';\n// Note: isMigratableAccessor is a function, not exported to avoid componentsjs-generator issues\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService } from './quota/QuotaService';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    EdgeNodeSignalHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    SignalInterceptHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DefaultQuotaService,\n  DrizzleQuotaService,\n    NoopQuotaService,\n    PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  TieredMinioDataAccessor,\n  PodMigrationHttpHandler,\n  PodMigrationService,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  BaseQuintStore,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yGAAsG;AAuGlG,qHAvGK,2EAAoC,OAuGL;AAtGxC,6EAA0E;AAuGtE,kGAvGK,qCAAiB,OAuGL;AAtGrB,iGAA8F;AAuG1F,4GAvGK,yDAA2B,OAuGL;AAtG/B,mGAAgG;AAuG5F,6GAvGK,2DAA4B,OAuGL;AAtGhC,yEAAsE;AAuGlE,gGAvGK,iCAAe,OAuGL;AAtGnB,mFAAgF;AAuG5E,0GAvGK,qDAAyB,OAuGL;AAtG7B,8EAA0H;AAwGtH,oGAxGK,yCAAmB,OAwGL;AACnB,sGAzG0B,2CAAqB,OAyG1B;AACrB,uGA1GiD,4CAAsB,OA0GjD;AAxG1B,gFAA6E;AAyGzE,0GAzGK,qDAAyB,OAyGL;AAxG7B,8EAA2E;AAyGvE,sGAzGK,6CAAqB,OAyGL;AAxGzB,mFAAgF;AAmG5E,0GAnGK,qDAAyB,OAmGL;AAlG7B,sEAAmE;AAwG/D,qGAxGK,2CAAoB,OAwGL;AAvGxB,sFAAmF;AAwG/E,6GAxGK,2DAA4B,OAwGL;AAvGhC,0FAAuF;AAwGnF,+GAxGK,+DAA8B,OAwGL;AAvGlC,8EAA2E;AAwGvE,yGAxGK,mDAAwB,OAwGL;AAvG5B,gEAA6D;AAwGzD,kGAxGK,qCAAiB,OAwGL;AAvGrB,4DAAyD;AAwGrD,gGAxGK,iCAAe,OAwGL;AAvGnB,0DAAuD;AAwGnD,+FAxGK,+BAAc,OAwGL;AAvGlB,6EAA0E;AAyGtE,oGAzGK,yCAAmB,OAyGL;AAxGvB,gGAA6F;AAuGzF,+GAvGK,+DAA8B,OAuGL;AAtGlC,gGAA6F;AAwGzF,kHAxGK,qEAAiC,OAwGL;AAvGrC,oFAAiF;AAwG7E,sGAxGK,6CAAqB,OAwGL;AAvGzB,wFAAqF;AAwGjF,wGAxGK,iDAAuB,OAwGL;AAvG3B,kFAA+E;AAwG3E,qGAxGK,2CAAoB,OAwGL;AAvGxB,oFAAiF;AAwG7E,sGAxGK,6CAAqB,OAwGL;AAvGzB,qEAAkE;AAwGhE,oGAxGO,yCAAmB,OAwGP;AAvGrB,+DAA4D;AAwGxD,iGAxGK,mCAAgB,OAwGL;AAvGpB,qFAAkF;AAwG9E,wGAxGK,iDAAuB,OAwGL;AAvG3B,yEAAsE;AAwGlE,mGAxGK,uCAAkB,OAwGL;AAvGtB,0EAAuE;AAwGnE,uGAxGK,+CAAsB,OAwGL;AAvG1B,oFAAiF;AAwG7E,4GAxGK,yDAA2B,OAwGL;AAvG/B,wEAAsG;AAwGlG,4GAxGK,mDAA2B,OAwGL;AAC3B,0GAzGkC,iDAAyB,OAyGlC;AAxG7B,8DAA2D;AAyGvD,iGAzGK,mCAAgB,OAyGL;AAxGpB,+EAA4E;AA4GxE,uGA5GK,+CAAsB,OA4GL;AA3G1B,kFAA+E;AAwG3E,2GAxGK,uDAA0B,OAwGL;AAvG9B,wDAAqD;AAwGjD,8FAxGK,6BAAa,OAwGL;AAvGjB,qFAAkF;AAwG9E,2GAxGK,uDAA0B,OAwGL;AAtG9B,2EAAwE;AA0GtE,mGA1GO,uCAAkB,OA0GP;AAzGpB,sEAAmE;AAuG/D,qGAvGK,2CAAoB,OAuGL;AAtGxB,4FAAyF;AAuGrF,0GAvGK,qDAAyB,OAuGL;AAtG7B,4FAAyF;AAwGvF,8GAxGO,6DAA6B,OAwGP;AAvG/B,wEAAqE;AAwGnE,sGAxGO,6CAAqB,OAwGP;AAvGvB,wEAAqE;AAwGnE,oGAxGO,yCAAmB,OAwGP;AAvGrB,uEAAoE;AA0GlE,iGA1GO,mCAAgB,OA0GP;AAzGlB,+DAA4D;AA0G1D,6FA1GO,2BAAY,OA0GP;AAzGd,mEAAgE;AA0G9D,+FA1GO,+BAAc,OA0GP;AAzGhB,iDAAmD;AAsGjD,2FAtGO,kBAAU,OAsGP;AApGZ,oBAAoB;AACpB,kDAAgF;AAyG9E,kGAzGO,yBAAiB,OAyGP;AACjB,oGA1G0B,2BAAmB,OA0G1B;AAzGrB,uEAAoE;AA0GlE,kGA1GO,qCAAiB,OA0GP;AAzGnB,oEAAiE;AA2G/D,iGA3GO,mCAAgB,OA2GP;AA1GlB,4EAAyE;AA2GvE,qGA3GO,2CAAoB,OA2GP;AA1GtB,oEAAiE;AA2G/D,iGA3GO,mCAAgB,OA2GP;AA1GlB,4EAAyE;AA2GvE,qGA3GO,2CAAoB,OA2GP;AA1GtB,oEAAiE;AA2G/D,iGA3GO,mCAAgB,OA2GP;AA1GlB,4EAAyE;AA2GvE,qGA3GO,2CAAoB,OA2GP;AA1GtB,8DAA2D;AAgGzD,4FAhGO,yBAAW,OAgGP;AA/Fb,kCAAkC;AAClC,gFAA6E;AA0G3E,yGA1GO,mDAAwB,OA0GP;AAzG1B,sEAAmE;AA0GjE,oGA1GO,yCAAmB,OA0GP;AAzGrB,mEAAgE;AA0G9D,iGA1GO,mCAAgB,OA0GP;AAzGlB,+EAA4E;AAiH1E,oGAjHO,yCAAmB,OAiHP;AAhHrB,+BAA+B;AAC/B,oGAAiG;AAyG/F,8GAzGO,6DAA6B,OAyGP;AAxG/B,sGAAmG;AAyGjG,+GAzGO,+DAA8B,OAyGP;AAxGhC,6EAA0E;AAyGxE,oGAzGO,yCAAmB,OAyGP;AAxGrB,qGAAkG;AAyGhG,gHAzGO,iEAA+B,OAyGP;AAxGjC,iFAA8E;AAyG5E,sGAzGO,6CAAqB,OAyGP;AAxGvB,yGAAsG;AAyGpG,kHAzGO,qEAAiC,OAyGP;AAxGnC,uBAAuB;AACvB,yEAAsE;AA0GpE,oGA1GO,yCAAmB,OA0GP;AAzGrB,uEAAoE;AA0GlE,mGA1GO,uCAAkB,OA0GP;AAzGpB,2BAA2B;AAC3B,uEAAoE;AA0GlE,iGA1GO,mCAAgB,OA0GP;AAlFlB,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { BaseQuintStore } from './storage/quint/BaseQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\nimport { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\n// Provision components\nimport { ProvisionPodCreator } from './provision/ProvisionPodCreator';\nimport { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';\n// Authorization components\nimport { AuthModeSelector } from './authorization/AuthModeSelector';\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService, AccountQuota } from './quota/QuotaService';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DrizzleQuotaService,\n    NoopQuotaService,\n    PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  BaseQuintStore,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n  UrlAwareRedisLocker,\n  // Provision exports\n  ProvisionPodCreator,\n  ProvisionCodeCodec,\n  // Authorization exports\n  AuthModeSelector,\n};\n\n"]}

package/dist/main.js

@@ -45,7 +45,10 @@ function loadEnvFile(envPath) {
             (value.startsWith("'") && value.endsWith("'"))) {
             value = value.slice(1, -1);
         }
-        process.env[key] = value;
+        // Only set if not already defined — CLI / parent env takes precedence.
+        if (process.env[key] === undefined) {
+            process.env[key] = value;
+        }
     }
 }
 function ensureTrailingSlash(url) {
@@ -228,10 +231,21 @@ async function startRuntime(options) {
             CSS_BASE_URL: baseUrl,
         },
     });
+    // API server: resolve the entry point dynamically
+    // In dev (ts-node): use ts-node to run the .ts file
+    // In production: use the compiled .js file
+    const isDevMode = __filename.endsWith('.ts');
+    const apiArgs = isDevMode
+        ? [
+            '-r',
+            require.resolve('ts-node/register/transpile-only'),
+            path_1.default.join(__dirname, 'api', 'main.ts'),
+        ]
+        : [path_1.default.join(__dirname, 'api', 'main.js')];
     supervisor.register({
         name: 'api',
         command: process.execPath,
-        args: [path_1.default.join(__dirname, 'api', 'main.js')],
+        args: apiArgs,
         env: {
             ...process.env,
             API_PORT: apiPort.toString(),
@@ -241,9 +255,9 @@ async function startRuntime(options) {
             CSS_TOKEN_ENDPOINT: `${baseUrl}.oidc/token`,
         },
     });
-    // Default bind host: prefer explicit XPOD_LISTEN_HOST; otherwise derive from the public Base URL.
+    // Bind host: use CLI --host value; if not explicitly set, derive from the public Base URL.
     // In local dev/sandboxed environments, binding 0.0.0.0 can fail with EPERM.
-    const bindHost = process.env.XPOD_LISTEN_HOST || (() => {
+    const bindHost = options.host || (() => {
         try {
             const hostname = new URL(baseUrl).hostname;
             if (hostname === 'localhost')
@@ -258,13 +272,16 @@ async function startRuntime(options) {
         }
         return '0.0.0.0';
     })();
-    const proxy = new runtime_1.GatewayProxy(mainPort, supervisor, bindHost);
+    const proxy = new runtime_1.GatewayProxy(mainPort, supervisor, bindHost, {
+        exitOnStop: true,
+        baseUrl,
+    });
     proxy.setTargets({
         css: `http://localhost:${cssPort}`,
         api: `http://localhost:${apiPort}`,
     });
     await supervisor.startAll();
-    proxy.start();
+    await proxy.start();
     let restarting = false;
     const restart = async () => {
         if (restarting) {
@@ -443,7 +460,7 @@ async function main() {
             .option('config', { alias: 'c', type: 'string', description: 'Path to config file (overrides --mode)' })
             .option('env', { alias: 'e', type: 'string', description: 'Path to .env file' })
             .option('port', { alias: 'p', type: 'number', description: 'Gateway port', default: 3000 })
-            .option('host', { type: 'string', description: 'Gateway host', default: '127.0.0.1' })
+            .option('host', { type: 'string', description: 'Gateway bind host' })
             .help()
             .parse();
         try {
@@ -467,7 +484,7 @@ async function main() {
         .option('mode', { alias: 'm', type: 'string', choices: ['local', 'cloud'], description: 'Run mode' })
         .option('config', { alias: 'c', type: 'string', description: 'Path to config file (overrides --mode)' })
         .option('port', { alias: 'p', type: 'number', description: 'Gateway port', default: 3000 })
-        .option('host', { type: 'string', description: 'Gateway host', default: '127.0.0.1' }), async (argv) => {
+        .option('host', { type: 'string', description: 'Gateway bind host' }), async (argv) => {
         try {
             await startRuntime({
                 mode: argv.mode,