@undefineds.co/xpod 0.1.7 → 0.2.0-preview.2

package/dist/api/handlers/QuotaHandler.js

@@ -2,31 +2,46 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerQuotaRoutes = registerQuotaRoutes;
 const global_logger_factory_1 = require("global-logger-factory");
+const AuthContext_1 = require("../auth/AuthContext");
 /**
  * Handler for quota management API
  *
- * These endpoints are for internal billing system use.
- * They require authentication via client credentials.
+ * Supports four resource types: storage, bandwidth, compute, token.
+ * Requires ServiceAuthContext with 'quota:write' scope for mutations.
  *
- * GET    /v1/quota/accounts/:accountId - Get account quota
+ * GET    /v1/quota/accounts/:accountId - Get account quota + usage
  * PUT    /v1/quota/accounts/:accountId - Set account quota
- * DELETE /v1/quota/accounts/:accountId - Clear account quota
- * GET    /v1/quota/pods/:podId - Get pod quota
+ * DELETE /v1/quota/accounts/:accountId - Clear account quota (revert to defaults)
+ * GET    /v1/quota/pods/:podId - Get pod quota + usage
  * PUT    /v1/quota/pods/:podId - Set pod quota
  * DELETE /v1/quota/pods/:podId - Clear pod quota
  */
 function registerQuotaRoutes(server, options) {
     const logger = (0, global_logger_factory_1.getLoggerFor)('QuotaHandler');
-    const { quotaService, accountRepo } = options;
-    // GET /api/quota/accounts/:accountId
+    const { quotaService, usageRepo } = options;
+    // GET /v1/quota/accounts/:accountId
     server.get('/v1/quota/accounts/:accountId', async (request, response, params) => {
         const accountId = decodeURIComponent(params.accountId);
         try {
-            const limit = await quotaService.getAccountLimit(accountId);
+            const quota = await quotaService.getAccountQuota(accountId);
+            const usage = await usageRepo.getAccountUsage(accountId);
             sendJson(response, 200, {
-                type: 'account',
                 accountId,
-                quotaLimit: limit ?? null,
+                quota: {
+                    storageLimitBytes: quota.storageLimitBytes,
+                    bandwidthLimitBps: quota.bandwidthLimitBps,
+                    computeLimitSeconds: quota.computeLimitSeconds,
+                    tokenLimitMonthly: quota.tokenLimitMonthly,
+                },
+                usage: {
+                    storageBytes: usage?.storageBytes ?? 0,
+                    ingressBytes: usage?.ingressBytes ?? 0,
+                    egressBytes: usage?.egressBytes ?? 0,
+                    computeSeconds: usage?.computeSeconds ?? 0,
+                    tokensUsed: usage?.tokensUsed ?? 0,
+                    periodStart: usage?.periodStart ? new Date(usage.periodStart * 1000).toISOString() : null,
+                },
+                source: hasCustomQuota(usage) ? 'custom' : 'default',
             });
         }
         catch (error) {
@@ -34,8 +49,11 @@ function registerQuotaRoutes(server, options) {
             sendJson(response, 500, { error: 'Failed to get quota' });
         }
     });
-    // PUT /api/quota/accounts/:accountId
+    // PUT /v1/quota/accounts/:accountId
     server.put('/v1/quota/accounts/:accountId', async (request, response, params) => {
+        if (!requireScope(request, response, 'quota:write')) {
+            return;
+        }
         const accountId = decodeURIComponent(params.accountId);
         const body = await readJsonBody(request);
         if (!body || typeof body !== 'object') {
@@ -43,24 +61,19 @@ function registerQuotaRoutes(server, options) {
             return;
         }
         const payload = body;
-        if (!Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {
-            sendJson(response, 400, { error: 'Body must include quotaLimit' });
-            return;
-        }
-        const quota = extractQuota(payload.quotaLimit);
-        if (quota === undefined) {
-            sendJson(response, 400, { error: 'quotaLimit must be a non-negative number or null' });
+        const partial = extractQuotaFields(payload);
+        if (!partial) {
+            sendJson(response, 400, { error: 'Body must include at least one quota field (storageLimitBytes, bandwidthLimitBps, computeLimitSeconds, tokenLimitMonthly)' });
             return;
         }
         try {
-            await quotaService.setAccountLimit(accountId, quota);
-            const latest = await quotaService.getAccountLimit(accountId);
-            logger.info(`Set account ${accountId} quota to ${quota}`);
+            await quotaService.setAccountQuota(accountId, partial);
+            const latest = await quotaService.getAccountQuota(accountId);
+            logger.info(`Set account ${accountId} quota: ${JSON.stringify(partial)}`);
             sendJson(response, 200, {
                 status: 'updated',
-                targetType: 'account',
-                targetId: accountId,
-                quotaLimit: latest ?? null,
+                accountId,
+                quota: latest,
             });
         }
         catch (error) {
@@ -68,16 +81,18 @@ function registerQuotaRoutes(server, options) {
             sendJson(response, 500, { error: 'Failed to set quota' });
         }
     });
-    // DELETE /api/quota/accounts/:accountId
+    // DELETE /v1/quota/accounts/:accountId
     server.delete('/v1/quota/accounts/:accountId', async (request, response, params) => {
+        if (!requireScope(request, response, 'quota:write')) {
+            return;
+        }
         const accountId = decodeURIComponent(params.accountId);
         try {
-            await quotaService.setAccountLimit(accountId, null);
+            await quotaService.clearAccountQuota(accountId);
             logger.info(`Cleared account ${accountId} quota`);
             sendJson(response, 200, {
                 status: 'cleared',
-                targetType: 'account',
-                targetId: accountId,
+                accountId,
             });
         }
         catch (error) {
@@ -85,22 +100,30 @@ function registerQuotaRoutes(server, options) {
             sendJson(response, 500, { error: 'Failed to clear quota' });
         }
     });
-    // GET /api/quota/pods/:podId
+    // GET /v1/quota/pods/:podId
     server.get('/v1/quota/pods/:podId', async (request, response, params) => {
         const podId = decodeURIComponent(params.podId);
         try {
-            const podInfo = await accountRepo.getPodInfo(podId);
-            if (!podInfo) {
-                sendJson(response, 404, { error: 'Pod not found' });
-                return;
-            }
-            const limit = await quotaService.getPodLimit(podId);
+            const quota = await quotaService.getPodQuota(podId);
+            const usage = await usageRepo.getPodUsage(podId);
             sendJson(response, 200, {
-                type: 'pod',
                 podId,
-                accountId: podInfo.accountId,
-                baseUrl: podInfo.baseUrl ?? null,
-                quotaLimit: limit ?? null,
+                accountId: usage?.accountId ?? null,
+                quota: {
+                    storageLimitBytes: quota.storageLimitBytes,
+                    bandwidthLimitBps: quota.bandwidthLimitBps,
+                    computeLimitSeconds: quota.computeLimitSeconds,
+                    tokenLimitMonthly: quota.tokenLimitMonthly,
+                },
+                usage: {
+                    storageBytes: usage?.storageBytes ?? 0,
+                    ingressBytes: usage?.ingressBytes ?? 0,
+                    egressBytes: usage?.egressBytes ?? 0,
+                    computeSeconds: usage?.computeSeconds ?? 0,
+                    tokensUsed: usage?.tokensUsed ?? 0,
+                    periodStart: usage?.periodStart ? new Date(usage.periodStart * 1000).toISOString() : null,
+                },
+                source: hasCustomQuota(usage) ? 'custom' : 'default',
             });
         }
         catch (error) {
@@ -108,8 +131,11 @@ function registerQuotaRoutes(server, options) {
             sendJson(response, 500, { error: 'Failed to get quota' });
         }
     });
-    // PUT /api/quota/pods/:podId
+    // PUT /v1/quota/pods/:podId
     server.put('/v1/quota/pods/:podId', async (request, response, params) => {
+        if (!requireScope(request, response, 'quota:write')) {
+            return;
+        }
         const podId = decodeURIComponent(params.podId);
         const body = await readJsonBody(request);
         if (!body || typeof body !== 'object') {
@@ -117,29 +143,19 @@ function registerQuotaRoutes(server, options) {
             return;
         }
         const payload = body;
-        if (!Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {
-            sendJson(response, 400, { error: 'Body must include quotaLimit' });
-            return;
-        }
-        const quota = extractQuota(payload.quotaLimit);
-        if (quota === undefined) {
-            sendJson(response, 400, { error: 'quotaLimit must be a non-negative number or null' });
+        const partial = extractQuotaFields(payload);
+        if (!partial) {
+            sendJson(response, 400, { error: 'Body must include at least one quota field' });
             return;
         }
         try {
-            const podInfo = await accountRepo.getPodInfo(podId);
-            if (!podInfo) {
-                sendJson(response, 404, { error: 'Pod not found' });
-                return;
-            }
-            await quotaService.setPodLimit(podId, quota);
-            const latest = await quotaService.getPodLimit(podId);
-            logger.info(`Set pod ${podId} quota to ${quota}`);
+            await quotaService.setPodQuota(podId, partial);
+            const latest = await quotaService.getPodQuota(podId);
+            logger.info(`Set pod ${podId} quota: ${JSON.stringify(partial)}`);
             sendJson(response, 200, {
                 status: 'updated',
-                targetType: 'pod',
-                targetId: podId,
-                quotaLimit: latest ?? null,
+                podId,
+                quota: latest,
             });
         }
         catch (error) {
@@ -147,21 +163,18 @@ function registerQuotaRoutes(server, options) {
             sendJson(response, 500, { error: 'Failed to set quota' });
         }
     });
-    // DELETE /api/quota/pods/:podId
+    // DELETE /v1/quota/pods/:podId
     server.delete('/v1/quota/pods/:podId', async (request, response, params) => {
+        if (!requireScope(request, response, 'quota:write')) {
+            return;
+        }
         const podId = decodeURIComponent(params.podId);
         try {
-            const podInfo = await accountRepo.getPodInfo(podId);
-            if (!podInfo) {
-                sendJson(response, 404, { error: 'Pod not found' });
-                return;
-            }
-            await quotaService.setPodLimit(podId, null);
+            await quotaService.clearPodQuota(podId);
             logger.info(`Cleared pod ${podId} quota`);
             sendJson(response, 200, {
                 status: 'cleared',
-                targetType: 'pod',
-                targetId: podId,
+                podId,
             });
         }
         catch (error) {
@@ -170,14 +183,71 @@ function registerQuotaRoutes(server, options) {
         }
     });
 }
-function extractQuota(value) {
-    if (value === null) {
-        return null;
+/**
+ * Check if the request has the required scope. Sends 403 if not.
+ */
+function requireScope(request, response, scope) {
+    if (!request.auth) {
+        sendJson(response, 401, { error: 'Authentication required' });
+        return false;
+    }
+    // Service tokens need explicit scope; Solid users with admin role can also access
+    if (request.auth.type === 'service') {
+        if (!(0, AuthContext_1.hasScope)(request.auth, scope)) {
+            sendJson(response, 403, { error: `Missing required scope: ${scope}` });
+            return false;
+        }
+        return true;
+    }
+    // Allow Solid auth (for admin users) - actual admin check can be added later
+    if (request.auth.type === 'solid') {
+        return true;
+    }
+    sendJson(response, 403, { error: 'Insufficient permissions' });
+    return false;
+}
+const QUOTA_FIELDS = ['storageLimitBytes', 'bandwidthLimitBps', 'computeLimitSeconds', 'tokenLimitMonthly'];
+function extractQuotaFields(payload) {
+    const result = {};
+    let hasField = false;
+    for (const field of QUOTA_FIELDS) {
+        if (Object.prototype.hasOwnProperty.call(payload, field)) {
+            const value = payload[field];
+            if (value === null) {
+                result[field] = null;
+                hasField = true;
+            }
+            else if (typeof value === 'number' && Number.isFinite(value) && value >= 0) {
+                result[field] = value;
+                hasField = true;
+            }
+            else {
+                return undefined; // Invalid value
+            }
+        }
     }
-    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
-        return undefined;
+    // Backward compat: support legacy 'quotaLimit' field
+    if (!hasField && Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {
+        const value = payload.quotaLimit;
+        if (value === null) {
+            result.storageLimitBytes = null;
+            hasField = true;
+        }
+        else if (typeof value === 'number' && Number.isFinite(value) && value >= 0) {
+            result.storageLimitBytes = value;
+            hasField = true;
+        }
+    }
+    return hasField ? result : undefined;
+}
+function hasCustomQuota(usage) {
+    if (!usage) {
+        return false;
     }
-    return value;
+    return typeof usage.storageLimitBytes === 'number'
+        || typeof usage.bandwidthLimitBps === 'number'
+        || typeof usage.computeLimitSeconds === 'number'
+        || typeof usage.tokenLimitMonthly === 'number';
 }
 async function readJsonBody(request) {
     return new Promise((resolve, reject) => {

package/dist/api/handlers/QuotaHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"QuotaHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/QuotaHandler.ts"],"names":[],"mappings":";;AAyBA,kDAiLC;AAzMD,iEAAqD;AAWrD;;;;;;;;;;;;GAYG;AACH,SAAgB,mBAAmB,CAAC,MAAiB,EAAE,OAA4B;IACjF,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAE9C,qCAAqC;IACrC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,IAAI,EAAE,SAAS;gBACf,SAAS;gBACT,UAAU,EAAE,KAAK,IAAI,IAAI;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAE7D,MAAM,CAAC,IAAI,CAAC,eAAe,SAAS,aAAa,KAAK,EAAE,CAAC,CAAC;YAE1D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,MAAM,IAAI,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,MAAM,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACjF,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEpD,MAAM,CAAC,IAAI,CAAC,mBAAmB,SAAS,QAAQ,CAAC,CAAC;YAElD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;YACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,IAAI,EAAE,KAAK;gBACX,KAAK;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;gBAChC,UAAU,EAAE,KAAK,IAAI,IAAI;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAErD,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,aAAa,KAAK,EAAE,CAAC,CAAC;YAElD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,MAAM,IAAI,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAE5C,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC;YAE1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACpD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { QuotaService } from '../../quota/QuotaService';\nimport type { AccountRepository } from '../../identity/drizzle/AccountRepository';\n\nexport interface QuotaHandlerOptions {\n  quotaService: QuotaService;\n  accountRepo: AccountRepository;\n}\n\n/**\n * Handler for quota management API\n * \n * These endpoints are for internal billing system use.\n * They require authentication via client credentials.\n * \n * GET    /v1/quota/accounts/:accountId - Get account quota\n * PUT    /v1/quota/accounts/:accountId - Set account quota\n * DELETE /v1/quota/accounts/:accountId - Clear account quota\n * GET    /v1/quota/pods/:podId - Get pod quota\n * PUT    /v1/quota/pods/:podId - Set pod quota\n * DELETE /v1/quota/pods/:podId - Clear pod quota\n */\nexport function registerQuotaRoutes(server: ApiServer, options: QuotaHandlerOptions): void {\n  const logger = getLoggerFor('QuotaHandler');\n  const { quotaService, accountRepo } = options;\n\n  // GET /api/quota/accounts/:accountId\n  server.get('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    const accountId = decodeURIComponent(params.accountId);\n\n    try {\n      const limit = await quotaService.getAccountLimit(accountId);\n      sendJson(response, 200, {\n        type: 'account',\n        accountId,\n        quotaLimit: limit ?? null,\n      });\n    } catch (error) {\n      logger.error(`Failed to get account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to get quota' });\n    }\n  });\n\n  // PUT /api/quota/accounts/:accountId\n  server.put('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    const accountId = decodeURIComponent(params.accountId);\n    const body = await readJsonBody(request);\n\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Request body must be a JSON object' });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n    if (!Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {\n      sendJson(response, 400, { error: 'Body must include quotaLimit' });\n      return;\n    }\n\n    const quota = extractQuota(payload.quotaLimit);\n    if (quota === undefined) {\n      sendJson(response, 400, { error: 'quotaLimit must be a non-negative number or null' });\n      return;\n    }\n\n    try {\n      await quotaService.setAccountLimit(accountId, quota);\n      const latest = await quotaService.getAccountLimit(accountId);\n      \n      logger.info(`Set account ${accountId} quota to ${quota}`);\n      \n      sendJson(response, 200, {\n        status: 'updated',\n        targetType: 'account',\n        targetId: accountId,\n        quotaLimit: latest ?? null,\n      });\n    } catch (error) {\n      logger.error(`Failed to set account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to set quota' });\n    }\n  });\n\n  // DELETE /api/quota/accounts/:accountId\n  server.delete('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    const accountId = decodeURIComponent(params.accountId);\n\n    try {\n      await quotaService.setAccountLimit(accountId, null);\n      \n      logger.info(`Cleared account ${accountId} quota`);\n      \n      sendJson(response, 200, {\n        status: 'cleared',\n        targetType: 'account',\n        targetId: accountId,\n      });\n    } catch (error) {\n      logger.error(`Failed to clear account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to clear quota' });\n    }\n  });\n\n  // GET /api/quota/pods/:podId\n  server.get('/v1/quota/pods/:podId', async (request, response, params) => {\n    const podId = decodeURIComponent(params.podId);\n\n    try {\n      const podInfo = await accountRepo.getPodInfo(podId);\n      if (!podInfo) {\n        sendJson(response, 404, { error: 'Pod not found' });\n        return;\n      }\n\n      const limit = await quotaService.getPodLimit(podId);\n      sendJson(response, 200, {\n        type: 'pod',\n        podId,\n        accountId: podInfo.accountId,\n        baseUrl: podInfo.baseUrl ?? null,\n        quotaLimit: limit ?? null,\n      });\n    } catch (error) {\n      logger.error(`Failed to get pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to get quota' });\n    }\n  });\n\n  // PUT /api/quota/pods/:podId\n  server.put('/v1/quota/pods/:podId', async (request, response, params) => {\n    const podId = decodeURIComponent(params.podId);\n    const body = await readJsonBody(request);\n\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Request body must be a JSON object' });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n    if (!Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {\n      sendJson(response, 400, { error: 'Body must include quotaLimit' });\n      return;\n    }\n\n    const quota = extractQuota(payload.quotaLimit);\n    if (quota === undefined) {\n      sendJson(response, 400, { error: 'quotaLimit must be a non-negative number or null' });\n      return;\n    }\n\n    try {\n      const podInfo = await accountRepo.getPodInfo(podId);\n      if (!podInfo) {\n        sendJson(response, 404, { error: 'Pod not found' });\n        return;\n      }\n\n      await quotaService.setPodLimit(podId, quota);\n      const latest = await quotaService.getPodLimit(podId);\n      \n      logger.info(`Set pod ${podId} quota to ${quota}`);\n      \n      sendJson(response, 200, {\n        status: 'updated',\n        targetType: 'pod',\n        targetId: podId,\n        quotaLimit: latest ?? null,\n      });\n    } catch (error) {\n      logger.error(`Failed to set pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to set quota' });\n    }\n  });\n\n  // DELETE /api/quota/pods/:podId\n  server.delete('/v1/quota/pods/:podId', async (request, response, params) => {\n    const podId = decodeURIComponent(params.podId);\n\n    try {\n      const podInfo = await accountRepo.getPodInfo(podId);\n      if (!podInfo) {\n        sendJson(response, 404, { error: 'Pod not found' });\n        return;\n      }\n\n      await quotaService.setPodLimit(podId, null);\n      \n      logger.info(`Cleared pod ${podId} quota`);\n      \n      sendJson(response, 200, {\n        status: 'cleared',\n        targetType: 'pod',\n        targetId: podId,\n      });\n    } catch (error) {\n      logger.error(`Failed to clear pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to clear quota' });\n    }\n  });\n}\n\nfunction extractQuota(value: unknown): number | null | undefined {\n  if (value === null) {\n    return null;\n  }\n  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {\n    return undefined;\n  }\n  return value;\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}
+{"version":3,"file":"QuotaHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/QuotaHandler.ts"],"names":[],"mappings":";;AA0BA,kDA8LC;AAvND,iEAAqD;AAKrD,qDAA+C;AAO/C;;;;;;;;;;;;GAYG;AACH,SAAgB,mBAAmB,CAAC,MAAiB,EAAE,OAA4B;IACjF,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE5C,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAEzD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,SAAS;gBACT,KAAK,EAAE;oBACL,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;oBAC9C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;iBAC3C;gBACD,KAAK,EAAE;oBACL,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACtC,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACtC,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC;oBACpC,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,CAAC;oBAC1C,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC;oBAClC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC1F;gBACD,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC9E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2HAA2H,EAAE,CAAC,CAAC;YAChK,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAE7D,MAAM,CAAC,IAAI,CAAC,eAAe,SAAS,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS;gBACT,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,CAAC,MAAM,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACjF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC,mBAAmB,SAAS,QAAQ,CAAC,CAAC;YAElD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;YACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAEjD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK;gBACL,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI;gBACnC,KAAK,EAAE;oBACL,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;oBAC9C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;iBAC3C;gBACD,KAAK,EAAE;oBACL,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACtC,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACtC,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC;oBACpC,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,CAAC;oBAC1C,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC;oBAClC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC1F;gBACD,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAErD,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAElE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,KAAK;gBACL,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAExC,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC;YAE1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,SAAS;gBACjB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACpD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,OAA6B,EAAE,QAAwB,EAAE,KAAa;IAC1F,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,kFAAkF;IAClF,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,IAAA,sBAAQ,EAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,KAAK,EAAE,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAU,CAAC;AAErH,SAAS,kBAAkB,CAAC,OAAgC;IAC1D,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;gBACrB,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;gBACtB,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,SAAS,CAAC,CAAC,gBAAgB;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,KAAmK;IACzL,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;WAC7C,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;WAC3C,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;WAC7C,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { QuotaService } from '../../quota/QuotaService';\nimport type { UsageRepository } from '../../storage/quota/UsageRepository';\nimport { hasScope } from '../auth/AuthContext';\n\nexport interface QuotaHandlerOptions {\n  quotaService: QuotaService;\n  usageRepo: UsageRepository;\n}\n\n/**\n * Handler for quota management API\n *\n * Supports four resource types: storage, bandwidth, compute, token.\n * Requires ServiceAuthContext with 'quota:write' scope for mutations.\n *\n * GET    /v1/quota/accounts/:accountId - Get account quota + usage\n * PUT    /v1/quota/accounts/:accountId - Set account quota\n * DELETE /v1/quota/accounts/:accountId - Clear account quota (revert to defaults)\n * GET    /v1/quota/pods/:podId - Get pod quota + usage\n * PUT    /v1/quota/pods/:podId - Set pod quota\n * DELETE /v1/quota/pods/:podId - Clear pod quota\n */\nexport function registerQuotaRoutes(server: ApiServer, options: QuotaHandlerOptions): void {\n  const logger = getLoggerFor('QuotaHandler');\n  const { quotaService, usageRepo } = options;\n\n  // GET /v1/quota/accounts/:accountId\n  server.get('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    const accountId = decodeURIComponent(params.accountId);\n\n    try {\n      const quota = await quotaService.getAccountQuota(accountId);\n      const usage = await usageRepo.getAccountUsage(accountId);\n\n      sendJson(response, 200, {\n        accountId,\n        quota: {\n          storageLimitBytes: quota.storageLimitBytes,\n          bandwidthLimitBps: quota.bandwidthLimitBps,\n          computeLimitSeconds: quota.computeLimitSeconds,\n          tokenLimitMonthly: quota.tokenLimitMonthly,\n        },\n        usage: {\n          storageBytes: usage?.storageBytes ?? 0,\n          ingressBytes: usage?.ingressBytes ?? 0,\n          egressBytes: usage?.egressBytes ?? 0,\n          computeSeconds: usage?.computeSeconds ?? 0,\n          tokensUsed: usage?.tokensUsed ?? 0,\n          periodStart: usage?.periodStart ? new Date(usage.periodStart * 1000).toISOString() : null,\n        },\n        source: hasCustomQuota(usage) ? 'custom' : 'default',\n      });\n    } catch (error) {\n      logger.error(`Failed to get account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to get quota' });\n    }\n  });\n\n  // PUT /v1/quota/accounts/:accountId\n  server.put('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    if (!requireScope(request, response, 'quota:write')) {\n      return;\n    }\n\n    const accountId = decodeURIComponent(params.accountId);\n    const body = await readJsonBody(request);\n\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Request body must be a JSON object' });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n    const partial = extractQuotaFields(payload);\n    if (!partial) {\n      sendJson(response, 400, { error: 'Body must include at least one quota field (storageLimitBytes, bandwidthLimitBps, computeLimitSeconds, tokenLimitMonthly)' });\n      return;\n    }\n\n    try {\n      await quotaService.setAccountQuota(accountId, partial);\n      const latest = await quotaService.getAccountQuota(accountId);\n\n      logger.info(`Set account ${accountId} quota: ${JSON.stringify(partial)}`);\n\n      sendJson(response, 200, {\n        status: 'updated',\n        accountId,\n        quota: latest,\n      });\n    } catch (error) {\n      logger.error(`Failed to set account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to set quota' });\n    }\n  });\n\n  // DELETE /v1/quota/accounts/:accountId\n  server.delete('/v1/quota/accounts/:accountId', async (request, response, params) => {\n    if (!requireScope(request, response, 'quota:write')) {\n      return;\n    }\n\n    const accountId = decodeURIComponent(params.accountId);\n\n    try {\n      await quotaService.clearAccountQuota(accountId);\n\n      logger.info(`Cleared account ${accountId} quota`);\n\n      sendJson(response, 200, {\n        status: 'cleared',\n        accountId,\n      });\n    } catch (error) {\n      logger.error(`Failed to clear account quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to clear quota' });\n    }\n  });\n\n  // GET /v1/quota/pods/:podId\n  server.get('/v1/quota/pods/:podId', async (request, response, params) => {\n    const podId = decodeURIComponent(params.podId);\n\n    try {\n      const quota = await quotaService.getPodQuota(podId);\n      const usage = await usageRepo.getPodUsage(podId);\n\n      sendJson(response, 200, {\n        podId,\n        accountId: usage?.accountId ?? null,\n        quota: {\n          storageLimitBytes: quota.storageLimitBytes,\n          bandwidthLimitBps: quota.bandwidthLimitBps,\n          computeLimitSeconds: quota.computeLimitSeconds,\n          tokenLimitMonthly: quota.tokenLimitMonthly,\n        },\n        usage: {\n          storageBytes: usage?.storageBytes ?? 0,\n          ingressBytes: usage?.ingressBytes ?? 0,\n          egressBytes: usage?.egressBytes ?? 0,\n          computeSeconds: usage?.computeSeconds ?? 0,\n          tokensUsed: usage?.tokensUsed ?? 0,\n          periodStart: usage?.periodStart ? new Date(usage.periodStart * 1000).toISOString() : null,\n        },\n        source: hasCustomQuota(usage) ? 'custom' : 'default',\n      });\n    } catch (error) {\n      logger.error(`Failed to get pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to get quota' });\n    }\n  });\n\n  // PUT /v1/quota/pods/:podId\n  server.put('/v1/quota/pods/:podId', async (request, response, params) => {\n    if (!requireScope(request, response, 'quota:write')) {\n      return;\n    }\n\n    const podId = decodeURIComponent(params.podId);\n    const body = await readJsonBody(request);\n\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Request body must be a JSON object' });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n    const partial = extractQuotaFields(payload);\n    if (!partial) {\n      sendJson(response, 400, { error: 'Body must include at least one quota field' });\n      return;\n    }\n\n    try {\n      await quotaService.setPodQuota(podId, partial);\n      const latest = await quotaService.getPodQuota(podId);\n\n      logger.info(`Set pod ${podId} quota: ${JSON.stringify(partial)}`);\n\n      sendJson(response, 200, {\n        status: 'updated',\n        podId,\n        quota: latest,\n      });\n    } catch (error) {\n      logger.error(`Failed to set pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to set quota' });\n    }\n  });\n\n  // DELETE /v1/quota/pods/:podId\n  server.delete('/v1/quota/pods/:podId', async (request, response, params) => {\n    if (!requireScope(request, response, 'quota:write')) {\n      return;\n    }\n\n    const podId = decodeURIComponent(params.podId);\n\n    try {\n      await quotaService.clearPodQuota(podId);\n\n      logger.info(`Cleared pod ${podId} quota`);\n\n      sendJson(response, 200, {\n        status: 'cleared',\n        podId,\n      });\n    } catch (error) {\n      logger.error(`Failed to clear pod quota: ${error}`);\n      sendJson(response, 500, { error: 'Failed to clear quota' });\n    }\n  });\n}\n\n/**\n * Check if the request has the required scope. Sends 403 if not.\n */\nfunction requireScope(request: AuthenticatedRequest, response: ServerResponse, scope: string): boolean {\n  if (!request.auth) {\n    sendJson(response, 401, { error: 'Authentication required' });\n    return false;\n  }\n  // Service tokens need explicit scope; Solid users with admin role can also access\n  if (request.auth.type === 'service') {\n    if (!hasScope(request.auth, scope)) {\n      sendJson(response, 403, { error: `Missing required scope: ${scope}` });\n      return false;\n    }\n    return true;\n  }\n  // Allow Solid auth (for admin users) - actual admin check can be added later\n  if (request.auth.type === 'solid') {\n    return true;\n  }\n  sendJson(response, 403, { error: 'Insufficient permissions' });\n  return false;\n}\n\nconst QUOTA_FIELDS = ['storageLimitBytes', 'bandwidthLimitBps', 'computeLimitSeconds', 'tokenLimitMonthly'] as const;\n\nfunction extractQuotaFields(payload: Record<string, unknown>): Record<string, number | null> | undefined {\n  const result: Record<string, number | null> = {};\n  let hasField = false;\n\n  for (const field of QUOTA_FIELDS) {\n    if (Object.prototype.hasOwnProperty.call(payload, field)) {\n      const value = payload[field];\n      if (value === null) {\n        result[field] = null;\n        hasField = true;\n      } else if (typeof value === 'number' && Number.isFinite(value) && value >= 0) {\n        result[field] = value;\n        hasField = true;\n      } else {\n        return undefined; // Invalid value\n      }\n    }\n  }\n\n  // Backward compat: support legacy 'quotaLimit' field\n  if (!hasField && Object.prototype.hasOwnProperty.call(payload, 'quotaLimit')) {\n    const value = payload.quotaLimit;\n    if (value === null) {\n      result.storageLimitBytes = null;\n      hasField = true;\n    } else if (typeof value === 'number' && Number.isFinite(value) && value >= 0) {\n      result.storageLimitBytes = value;\n      hasField = true;\n    }\n  }\n\n  return hasField ? result : undefined;\n}\n\nfunction hasCustomQuota(usage: { storageLimitBytes?: number | null; bandwidthLimitBps?: number | null; computeLimitSeconds?: number | null; tokenLimitMonthly?: number | null } | undefined): boolean {\n  if (!usage) {\n    return false;\n  }\n  return typeof usage.storageLimitBytes === 'number'\n    || typeof usage.bandwidthLimitBps === 'number'\n    || typeof usage.computeLimitSeconds === 'number'\n    || typeof usage.tokenLimitMonthly === 'number';\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}

package/dist/api/handlers/SubdomainClientHandler.js

@@ -74,7 +74,7 @@ function registerSubdomainClientRoutes(server, options) {
             sendJson(response, 400, { error: 'Invalid request body' });
             return;
         }
-        const { subdomain, localPort, publicIp } = body;
+        const { subdomain, localPort, ipv4 } = body;
         if (!subdomain || typeof subdomain !== 'string') {
             sendJson(response, 400, { error: 'Missing "subdomain" field' });
             return;
@@ -87,7 +87,7 @@ function registerSubdomainClientRoutes(server, options) {
             const result = await client.register({
                 subdomain,
                 localPort,
-                publicIp: typeof publicIp === 'string' ? publicIp : undefined,
+                ipv4: typeof ipv4 === 'string' ? ipv4 : undefined,
             });
             sendJson(response, 201, result);
         }

package/dist/api/handlers/SubdomainClientHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"SubdomainClientHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/SubdomainClientHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAyBH,sEA8HC;AApJD,iEAAqD;AASrD;;;;;;;;;;;;GAYG;AACH,SAAgB,6BAA6B,CAC3C,MAAiB,EACjB,OAAsC;IAEtC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAEvC,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACpD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAA+B,CAAC;QAE3E,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACnC,SAAS;gBACT,SAAS;gBACT,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACjD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6CAA6C;AAE7C,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB,EAAE,KAAc;IAC7D,MAAM,MAAM,GAAI,KAAa,EAAE,MAAM,IAAI,GAAG,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * SubdomainClientHandler - Local 模式子域名 API\n * \n * 代理请求到 Cloud API，供本地 UI 调用\n */\n\nimport type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { SubdomainClient } from '../../subdomain/SubdomainClient';\n\nexport interface SubdomainClientHandlerOptions {\n  subdomainClient: SubdomainClient;\n}\n\n/**\n * 注册 Local 模式子域名路由\n * \n * 这些路由是本地 UI 调用的入口，内部通过 SubdomainClient 转发到 Cloud\n * \n * GET  /v1/subdomain/check?name=xxx - 检查子域名可用性\n * GET  /v1/subdomain - 列出子域名\n * GET  /v1/subdomain/:name - 获取子域名详情\n * POST /v1/subdomain/register - 注册子域名\n * DELETE /v1/subdomain/:name - 释放子域名\n * POST /v1/subdomain/:name/start - 启动隧道\n * POST /v1/subdomain/:name/stop - 停止隧道\n */\nexport function registerSubdomainClientRoutes(\n  server: ApiServer,\n  options: SubdomainClientHandlerOptions,\n): void {\n  const logger = getLoggerFor('SubdomainClientHandler');\n  const client = options.subdomainClient;\n\n  // GET /v1/subdomain/check?name=xxx - 检查可用性 (public)\n  server.get('/v1/subdomain/check', async (request, response, _params) => {\n    const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);\n    const name = url.searchParams.get('name');\n\n    if (!name) {\n      sendJson(response, 400, { error: 'Missing \"name\" query parameter' });\n      return;\n    }\n\n    try {\n      const result = await client.checkAvailability(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to check availability: ${error}`);\n      sendErrorJson(response, error);\n    }\n  }, { public: true });\n\n  // GET /v1/subdomain - 列出子域名\n  server.get('/v1/subdomain', async (_request, response, _params) => {\n    try {\n      const result = await client.list();\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to list subdomains: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // GET /v1/subdomain/:name - 获取子域名详情\n  server.get('/v1/subdomain/:name', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.getInfo(name);\n      if (!result) {\n        sendJson(response, 404, { error: 'Subdomain not found' });\n        return;\n      }\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to get subdomain info: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/register - 注册子域名\n  server.post('/v1/subdomain/register', async (request, response, _params) => {\n    const body = await readJsonBody(request);\n    \n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Invalid request body' });\n      return;\n    }\n\n    const { subdomain, localPort, publicIp } = body as Record<string, unknown>;\n\n    if (!subdomain || typeof subdomain !== 'string') {\n      sendJson(response, 400, { error: 'Missing \"subdomain\" field' });\n      return;\n    }\n\n    if (!localPort || typeof localPort !== 'number') {\n      sendJson(response, 400, { error: 'Missing or invalid \"localPort\" field' });\n      return;\n    }\n\n    try {\n      const result = await client.register({\n        subdomain,\n        localPort,\n        publicIp: typeof publicIp === 'string' ? publicIp : undefined,\n      });\n      sendJson(response, 201, result);\n    } catch (error) {\n      logger.error(`Failed to register subdomain: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // DELETE /v1/subdomain/:name - 释放子域名\n  server.delete('/v1/subdomain/:name', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.release(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to release subdomain: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/:name/start - 启动隧道\n  server.post('/v1/subdomain/:name/start', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.startTunnel(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to start tunnel: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/:name/stop - 停止隧道\n  server.post('/v1/subdomain/:name/stop', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.stopTunnel(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to stop tunnel: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n}\n\n// ============ Helper Functions ============\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendErrorJson(response: ServerResponse, error: unknown): void {\n  const status = (error as any)?.status ?? 500;\n  const message = error instanceof Error ? error.message : 'Unknown error';\n  sendJson(response, status, { error: message });\n}\n"]}
+{"version":3,"file":"SubdomainClientHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/SubdomainClientHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAyBH,sEA8HC;AApJD,iEAAqD;AASrD;;;;;;;;;;;;GAYG;AACH,SAAgB,6BAA6B,CAC3C,MAAiB,EACjB,OAAsC;IAEtC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAEvC,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACpD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAA+B,CAAC;QAEvE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACnC,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAClD,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YACtD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACjD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6CAA6C;AAE7C,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB,EAAE,KAAc;IAC7D,MAAM,MAAM,GAAI,KAAa,EAAE,MAAM,IAAI,GAAG,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * SubdomainClientHandler - Local 模式子域名 API\n * \n * 代理请求到 Cloud API，供本地 UI 调用\n */\n\nimport type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { SubdomainClient } from '../../subdomain/SubdomainClient';\n\nexport interface SubdomainClientHandlerOptions {\n  subdomainClient: SubdomainClient;\n}\n\n/**\n * 注册 Local 模式子域名路由\n * \n * 这些路由是本地 UI 调用的入口，内部通过 SubdomainClient 转发到 Cloud\n * \n * GET  /v1/subdomain/check?name=xxx - 检查子域名可用性\n * GET  /v1/subdomain - 列出子域名\n * GET  /v1/subdomain/:name - 获取子域名详情\n * POST /v1/subdomain/register - 注册子域名\n * DELETE /v1/subdomain/:name - 释放子域名\n * POST /v1/subdomain/:name/start - 启动隧道\n * POST /v1/subdomain/:name/stop - 停止隧道\n */\nexport function registerSubdomainClientRoutes(\n  server: ApiServer,\n  options: SubdomainClientHandlerOptions,\n): void {\n  const logger = getLoggerFor('SubdomainClientHandler');\n  const client = options.subdomainClient;\n\n  // GET /v1/subdomain/check?name=xxx - 检查可用性 (public)\n  server.get('/v1/subdomain/check', async (request, response, _params) => {\n    const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);\n    const name = url.searchParams.get('name');\n\n    if (!name) {\n      sendJson(response, 400, { error: 'Missing \"name\" query parameter' });\n      return;\n    }\n\n    try {\n      const result = await client.checkAvailability(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to check availability: ${error}`);\n      sendErrorJson(response, error);\n    }\n  }, { public: true });\n\n  // GET /v1/subdomain - 列出子域名\n  server.get('/v1/subdomain', async (_request, response, _params) => {\n    try {\n      const result = await client.list();\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to list subdomains: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // GET /v1/subdomain/:name - 获取子域名详情\n  server.get('/v1/subdomain/:name', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.getInfo(name);\n      if (!result) {\n        sendJson(response, 404, { error: 'Subdomain not found' });\n        return;\n      }\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to get subdomain info: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/register - 注册子域名\n  server.post('/v1/subdomain/register', async (request, response, _params) => {\n    const body = await readJsonBody(request);\n    \n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Invalid request body' });\n      return;\n    }\n\n    const { subdomain, localPort, ipv4 } = body as Record<string, unknown>;\n\n    if (!subdomain || typeof subdomain !== 'string') {\n      sendJson(response, 400, { error: 'Missing \"subdomain\" field' });\n      return;\n    }\n\n    if (!localPort || typeof localPort !== 'number') {\n      sendJson(response, 400, { error: 'Missing or invalid \"localPort\" field' });\n      return;\n    }\n\n    try {\n      const result = await client.register({\n        subdomain,\n        localPort,\n        ipv4: typeof ipv4 === 'string' ? ipv4 : undefined,\n      });\n      sendJson(response, 201, result);\n    } catch (error) {\n      logger.error(`Failed to register subdomain: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // DELETE /v1/subdomain/:name - 释放子域名\n  server.delete('/v1/subdomain/:name', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.release(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to release subdomain: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/:name/start - 启动隧道\n  server.post('/v1/subdomain/:name/start', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.startTunnel(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to start tunnel: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n\n  // POST /v1/subdomain/:name/stop - 停止隧道\n  server.post('/v1/subdomain/:name/stop', async (_request, response, params) => {\n    const name = decodeURIComponent(params.name);\n\n    try {\n      const result = await client.stopTunnel(name);\n      sendJson(response, 200, result);\n    } catch (error) {\n      logger.error(`Failed to stop tunnel: ${error}`);\n      sendErrorJson(response, error);\n    }\n  });\n}\n\n// ============ Helper Functions ============\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendErrorJson(response: ServerResponse, error: unknown): void {\n  const status = (error as any)?.status ?? 500;\n  const message = error instanceof Error ? error.message : 'Unknown error';\n  sendJson(response, status, { error: message });\n}\n"]}

package/dist/api/handlers/SubdomainHandler.js

@@ -60,7 +60,7 @@ function registerSubdomainRoutes(server, options) {
         }
         try {
             // Filter registrations by owner
-            const allRegistrations = service.getAllRegistrations();
+            const allRegistrations = await service.getAllRegistrations();
             const userRegistrations = allRegistrations.filter(r => r.ownerId === webId);
             sendJson(response, 200, {
                 registrations: userRegistrations.map(formatRegistration),
@@ -86,7 +86,7 @@ function registerSubdomainRoutes(server, options) {
             return;
         }
         try {
-            const registration = service.getRegistration(name);
+            const registration = await service.getRegistration(name);
             if (!registration) {
                 sendJson(response, 404, { error: 'Subdomain not found' });
                 return;
@@ -122,11 +122,15 @@ function registerSubdomainRoutes(server, options) {
             sendJson(response, 400, { error: 'Invalid request body' });
             return;
         }
-        const { subdomain, localPort, publicIp } = body;
+        const { subdomain, nodeId, localPort, ipv4 } = body;
         if (!subdomain || typeof subdomain !== 'string') {
             sendJson(response, 400, { error: 'Missing "subdomain" field' });
             return;
         }
+        if (!nodeId || typeof nodeId !== 'string') {
+            sendJson(response, 400, { error: 'Missing "nodeId" field' });
+            return;
+        }
         if (!localPort || typeof localPort !== 'number') {
             sendJson(response, 400, { error: 'Missing or invalid "localPort" field' });
             return;
@@ -134,8 +138,9 @@ function registerSubdomainRoutes(server, options) {
         try {
             const registration = await service.register({
                 subdomain,
+                nodeId,
                 localPort,
-                publicIp: typeof publicIp === 'string' ? publicIp : undefined,
+                ipv4: typeof ipv4 === 'string' ? ipv4 : undefined,
                 ownerId: webId,
             });
             logger.info(`Registered subdomain: ${registration.fullDomain} for ${webId} (mode: ${registration.mode})`);
@@ -168,7 +173,7 @@ function registerSubdomainRoutes(server, options) {
             return;
         }
         try {
-            const registration = service.getRegistration(name);
+            const registration = await service.getRegistration(name);
             if (!registration) {
                 sendJson(response, 404, { error: 'Subdomain not found' });
                 return;
@@ -205,7 +210,7 @@ function registerSubdomainRoutes(server, options) {
             return;
         }
         try {
-            const registration = service.getRegistration(name);
+            const registration = await service.getRegistration(name);
             if (!registration) {
                 sendJson(response, 404, { error: 'Subdomain not found' });
                 return;
@@ -246,7 +251,7 @@ function registerSubdomainRoutes(server, options) {
             return;
         }
         try {
-            const registration = service.getRegistration(name);
+            const registration = await service.getRegistration(name);
             if (!registration) {
                 sendJson(response, 404, { error: 'Subdomain not found' });
                 return;
@@ -275,7 +280,7 @@ function formatRegistration(reg) {
         subdomain: reg.subdomain,
         fullDomain: reg.fullDomain,
         mode: reg.mode,
-        publicIp: reg.publicIp,
+        ipv4: reg.ipv4,
         tunnelProvider: reg.tunnelConfig?.provider,
         tunnelEndpoint: reg.tunnelConfig?.endpoint,
         registeredAt: reg.registeredAt.toISOString(),