@undefineds.co/xpod 0.2.0-preview.2 → 0.2.1

package/dist/api/handlers/ChatKitV1Handler.js

@@ -12,6 +12,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerChatKitV1Routes = registerChatKitV1Routes;
+const types_1 = require("../chatkit/types");
 const AuthContext_1 = require("../auth/AuthContext");
 function registerChatKitV1Routes(server, options) {
     const { store } = options;
@@ -37,9 +38,13 @@ function registerChatKitV1Routes(server, options) {
     });
     // GET /v1/chatkit/threads/:thread_id
     server.get('/v1/chatkit/threads/:thread_id', async (request, response, params) => {
+        const threadRef = getThreadRefFromRequest(request, response, params.thread_id);
+        if (!threadRef) {
+            return;
+        }
         const ctx = buildContext(request);
-        const thread = await store.loadThread(params.thread_id, ctx);
-        const items = await store.loadThreadItems(params.thread_id, undefined, 50, 'asc', ctx);
+        const thread = await store.loadThread(threadRef, ctx);
+        const items = await store.loadThreadItems(threadRef, undefined, 50, 'asc', ctx);
         sendJson(response, 200, {
             ...thread,
             object: 'chatkit.thread',
@@ -52,17 +57,25 @@ function registerChatKitV1Routes(server, options) {
     });
     // DELETE /v1/chatkit/threads/:thread_id
     server.delete('/v1/chatkit/threads/:thread_id', async (request, response, params) => {
-        await store.deleteThread(params.thread_id, buildContext(request));
+        const threadRef = getThreadRefFromRequest(request, response, params.thread_id);
+        if (!threadRef) {
+            return;
+        }
+        await store.deleteThread(threadRef, buildContext(request));
         // OpenAI style: return a success object (keep simple)
         sendJson(response, 200, { success: true });
     });
     // GET /v1/chatkit/threads/:thread_id/items
     server.get('/v1/chatkit/threads/:thread_id/items', async (request, response, params) => {
         const url = new URL(request.url ?? '', `http://${request.headers.host}`);
+        const threadRef = getThreadRefFromRequest(request, response, params.thread_id);
+        if (!threadRef) {
+            return;
+        }
         const limit = parseOptionalInt(url.searchParams.get('limit')) ?? 50;
         const after = url.searchParams.get('after') ?? undefined;
         const order = (url.searchParams.get('order') ?? 'asc');
-        const page = await store.loadThreadItems(params.thread_id, after, limit, order, buildContext(request));
+        const page = await store.loadThreadItems(threadRef, after, limit, order, buildContext(request));
         const data = page.data.map((it) => ({ ...it, object: 'chatkit.thread_item' }));
         sendJson(response, 200, {
             object: 'list',
@@ -79,6 +92,21 @@ function parseOptionalInt(value) {
     const n = Number.parseInt(value, 10);
     return Number.isFinite(n) ? n : undefined;
 }
+function getThreadRefFromRequest(request, response, rawThreadId) {
+    const url = new URL(request.url ?? '', `http://${request.headers.host}`);
+    try {
+        return (0, types_1.toThreadRef)({
+            thread_id: decodeURIComponent(rawThreadId),
+            chat_id: url.searchParams.get('chat_id') ?? undefined,
+        });
+    }
+    catch (error) {
+        sendJson(response, 400, {
+            error: error instanceof Error ? error.message : 'Invalid thread reference',
+        });
+        return null;
+    }
+}
 function sendJson(response, status, data) {
     response.statusCode = status;
     response.setHeader('Content-Type', 'application/json');

package/dist/api/handlers/ChatKitV1Handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"ChatKitV1Handler.js","sourceRoot":"","sources":["../../../src/api/handlers/ChatKitV1Handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAeH,0DAoEC;AA7ED,qDAA6D;AAS7D,SAAgB,uBAAuB,CAAC,MAAiB,EAAE,OAAgC;IACzF,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE1B,MAAM,YAAY,GAAG,CAAC,OAA6B,EAAgB,EAAE;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,sBAAQ,EAAC,IAAI,CAAC,IAAI,IAAA,0BAAY,EAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,0BAA0B;IAC1B,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAmB,CAAC;QAE1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAA0B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAE/F,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAEvF,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,GAAG,MAAM;YACT,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;aACzE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,sDAAsD;QACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAmB,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACvG,MAAM,IAAI,GAA8B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QAE1G,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,QAAa,EAAE,MAAc,EAAE,IAAa;IAC5D,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["/**\n * ChatKit v1 (OpenAI-compatible) routes.\n *\n * This is a REST wrapper around our internal ChatKit store/service so that\n * clients expecting `/v1/chatkit/...` can work without speaking the single\n * `/v1/chatkit` protocol endpoint.\n *\n * Notes:\n * - We accept (but do not require) `OpenAI-Beta: chatkit_beta=v1`.\n * - Auth is handled by ApiServer middleware (same as other API routes).\n */\n\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { StoreContext, ChatKitStore } from '../chatkit/store';\nimport type { Page, ThreadItem, ThreadMetadata } from '../chatkit/types';\nimport { getWebId, getAccountId } from '../auth/AuthContext';\n\nexport interface ChatKitV1HandlerOptions {\n  store: ChatKitStore<StoreContext>;\n}\n\ntype ChatKitThreadObject = ThreadMetadata & { object: 'chatkit.thread' };\ntype ChatKitThreadItemObject = ThreadItem & { object: 'chatkit.thread_item' };\n\nexport function registerChatKitV1Routes(server: ApiServer, options: ChatKitV1HandlerOptions): void {\n  const { store } = options;\n\n  const buildContext = (request: AuthenticatedRequest): StoreContext => {\n    const auth = request.auth;\n    const userId = auth ? (getWebId(auth) ?? getAccountId(auth) ?? 'anonymous') : 'anonymous';\n    return { userId, auth };\n  };\n\n  // GET /v1/chatkit/threads\n  server.get('/v1/chatkit/threads', async (request, response) => {\n    const url = new URL(request.url ?? '', `http://${request.headers.host}`);\n    const limit = parseOptionalInt(url.searchParams.get('limit')) ?? 20;\n    const after = url.searchParams.get('after') ?? undefined;\n    const order = (url.searchParams.get('order') ?? 'desc') as 'asc' | 'desc';\n\n    const page = await store.loadThreads(limit, after, order, buildContext(request));\n    const data: ChatKitThreadObject[] = page.data.map((t) => ({ ...t, object: 'chatkit.thread' }));\n\n    sendJson(response, 200, {\n      object: 'list',\n      data,\n      has_more: page.has_more,\n      after: page.after,\n    });\n  });\n\n  // GET /v1/chatkit/threads/:thread_id\n  server.get('/v1/chatkit/threads/:thread_id', async (request, response, params) => {\n    const ctx = buildContext(request);\n    const thread = await store.loadThread(params.thread_id, ctx);\n    const items = await store.loadThreadItems(params.thread_id, undefined, 50, 'asc', ctx);\n\n    sendJson(response, 200, {\n      ...thread,\n      object: 'chatkit.thread',\n      items: {\n        ...items,\n        object: 'list',\n        data: items.data.map((it) => ({ ...it, object: 'chatkit.thread_item' })),\n      },\n    });\n  });\n\n  // DELETE /v1/chatkit/threads/:thread_id\n  server.delete('/v1/chatkit/threads/:thread_id', async (request, response, params) => {\n    await store.deleteThread(params.thread_id, buildContext(request));\n    // OpenAI style: return a success object (keep simple)\n    sendJson(response, 200, { success: true });\n  });\n\n  // GET /v1/chatkit/threads/:thread_id/items\n  server.get('/v1/chatkit/threads/:thread_id/items', async (request, response, params) => {\n    const url = new URL(request.url ?? '', `http://${request.headers.host}`);\n    const limit = parseOptionalInt(url.searchParams.get('limit')) ?? 50;\n    const after = url.searchParams.get('after') ?? undefined;\n    const order = (url.searchParams.get('order') ?? 'asc') as 'asc' | 'desc';\n\n    const page = await store.loadThreadItems(params.thread_id, after, limit, order, buildContext(request));\n    const data: ChatKitThreadItemObject[] = page.data.map((it) => ({ ...it, object: 'chatkit.thread_item' }));\n\n    sendJson(response, 200, {\n      object: 'list',\n      data,\n      has_more: page.has_more,\n      after: page.after,\n    });\n  });\n}\n\nfunction parseOptionalInt(value: string | null): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n  const n = Number.parseInt(value, 10);\n  return Number.isFinite(n) ? n : undefined;\n}\n\nfunction sendJson(response: any, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}
+{"version":3,"file":"ChatKitV1Handler.js","sourceRoot":"","sources":["../../../src/api/handlers/ChatKitV1Handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAgBH,0DAsFC;AAhGD,4CAA+C;AAC/C,qDAA6D;AAS7D,SAAgB,uBAAuB,CAAC,MAAiB,EAAE,OAAgC;IACzF,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE1B,MAAM,YAAY,GAAG,CAAC,OAA6B,EAAgB,EAAE;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,sBAAQ,EAAC,IAAI,CAAC,IAAI,IAAA,0BAAY,EAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,0BAA0B;IAC1B,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAmB,CAAC;QAE1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAA0B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAE/F,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/E,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAEhF,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,GAAG,MAAM;YACT,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;aACzE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,sDAAsD;QACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAmB,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,CACtC,SAAS,EACT,KAAK,EACL,KAAK,EACL,KAAK,EACL,YAAY,CAAC,OAAO,CAAC,CACtB,CAAC;QACF,MAAM,IAAI,GAA8B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QAE1G,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAA6B,EAC7B,QAAa,EACb,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,IAAA,mBAAW,EAAC;YACjB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC;YAC1C,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;SAC3E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAAa,EAAE,MAAc,EAAE,IAAa;IAC5D,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["/**\n * ChatKit v1 (OpenAI-compatible) routes.\n *\n * This is a REST wrapper around our internal ChatKit store/service so that\n * clients expecting `/v1/chatkit/...` can work without speaking the single\n * `/v1/chatkit` protocol endpoint.\n *\n * Notes:\n * - We accept (but do not require) `OpenAI-Beta: chatkit_beta=v1`.\n * - Auth is handled by ApiServer middleware (same as other API routes).\n */\n\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { StoreContext, ChatKitStore } from '../chatkit/store';\nimport type { Page, ThreadItem, ThreadMetadata, ThreadRef } from '../chatkit/types';\nimport { toThreadRef } from '../chatkit/types';\nimport { getWebId, getAccountId } from '../auth/AuthContext';\n\nexport interface ChatKitV1HandlerOptions {\n  store: ChatKitStore<StoreContext>;\n}\n\ntype ChatKitThreadObject = ThreadMetadata & { object: 'chatkit.thread' };\ntype ChatKitThreadItemObject = ThreadItem & { object: 'chatkit.thread_item' };\n\nexport function registerChatKitV1Routes(server: ApiServer, options: ChatKitV1HandlerOptions): void {\n  const { store } = options;\n\n  const buildContext = (request: AuthenticatedRequest): StoreContext => {\n    const auth = request.auth;\n    const userId = auth ? (getWebId(auth) ?? getAccountId(auth) ?? 'anonymous') : 'anonymous';\n    return { userId, auth };\n  };\n\n  // GET /v1/chatkit/threads\n  server.get('/v1/chatkit/threads', async (request, response) => {\n    const url = new URL(request.url ?? '', `http://${request.headers.host}`);\n    const limit = parseOptionalInt(url.searchParams.get('limit')) ?? 20;\n    const after = url.searchParams.get('after') ?? undefined;\n    const order = (url.searchParams.get('order') ?? 'desc') as 'asc' | 'desc';\n\n    const page = await store.loadThreads(limit, after, order, buildContext(request));\n    const data: ChatKitThreadObject[] = page.data.map((t) => ({ ...t, object: 'chatkit.thread' }));\n\n    sendJson(response, 200, {\n      object: 'list',\n      data,\n      has_more: page.has_more,\n      after: page.after,\n    });\n  });\n\n  // GET /v1/chatkit/threads/:thread_id\n  server.get('/v1/chatkit/threads/:thread_id', async (request, response, params) => {\n    const threadRef = getThreadRefFromRequest(request, response, params.thread_id);\n    if (!threadRef) {\n      return;\n    }\n    const ctx = buildContext(request);\n    const thread = await store.loadThread(threadRef, ctx);\n    const items = await store.loadThreadItems(threadRef, undefined, 50, 'asc', ctx);\n\n    sendJson(response, 200, {\n      ...thread,\n      object: 'chatkit.thread',\n      items: {\n        ...items,\n        object: 'list',\n        data: items.data.map((it) => ({ ...it, object: 'chatkit.thread_item' })),\n      },\n    });\n  });\n\n  // DELETE /v1/chatkit/threads/:thread_id\n  server.delete('/v1/chatkit/threads/:thread_id', async (request, response, params) => {\n    const threadRef = getThreadRefFromRequest(request, response, params.thread_id);\n    if (!threadRef) {\n      return;\n    }\n    await store.deleteThread(threadRef, buildContext(request));\n    // OpenAI style: return a success object (keep simple)\n    sendJson(response, 200, { success: true });\n  });\n\n  // GET /v1/chatkit/threads/:thread_id/items\n  server.get('/v1/chatkit/threads/:thread_id/items', async (request, response, params) => {\n    const url = new URL(request.url ?? '', `http://${request.headers.host}`);\n    const threadRef = getThreadRefFromRequest(request, response, params.thread_id);\n    if (!threadRef) {\n      return;\n    }\n    const limit = parseOptionalInt(url.searchParams.get('limit')) ?? 50;\n    const after = url.searchParams.get('after') ?? undefined;\n    const order = (url.searchParams.get('order') ?? 'asc') as 'asc' | 'desc';\n\n    const page = await store.loadThreadItems(\n      threadRef,\n      after,\n      limit,\n      order,\n      buildContext(request),\n    );\n    const data: ChatKitThreadItemObject[] = page.data.map((it) => ({ ...it, object: 'chatkit.thread_item' }));\n\n    sendJson(response, 200, {\n      object: 'list',\n      data,\n      has_more: page.has_more,\n      after: page.after,\n    });\n  });\n}\n\nfunction parseOptionalInt(value: string | null): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n  const n = Number.parseInt(value, 10);\n  return Number.isFinite(n) ? n : undefined;\n}\n\nfunction getThreadRefFromRequest(\n  request: AuthenticatedRequest,\n  response: any,\n  rawThreadId: string,\n): ThreadRef | null {\n  const url = new URL(request.url ?? '', `http://${request.headers.host}`);\n  try {\n    return toThreadRef({\n      thread_id: decodeURIComponent(rawThreadId),\n      chat_id: url.searchParams.get('chat_id') ?? undefined,\n    });\n  } catch (error) {\n    sendJson(response, 400, {\n      error: error instanceof Error ? error.message : 'Invalid thread reference',\n    });\n    return null;\n  }\n}\n\nfunction sendJson(response: any, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}

package/dist/api/handlers/DashboardHandler.js

@@ -55,7 +55,7 @@ function registerDashboardRoutes(server, options) {
     // 检查目录是否存在
     if (!fs.existsSync(staticDir)) {
         console.warn(`[Dashboard] Static directory not found: ${staticDir}`);
-        console.warn('[Dashboard] Run "cd dashboard && yarn build" to build the dashboard UI');
+        console.warn('[Dashboard] Run "cd ui && bun run build" to build the dashboard UI');
         return;
     }
     console.log(`[Dashboard] Serving from: ${staticDir}`);

package/dist/api/handlers/DashboardHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"DashboardHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DashboardHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAiCH,0DAqGC;AApID,4CAA8B;AAC9B,gDAAkC;AAKlC,MAAM,UAAU,GAA2B;IACzC,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;CACxC,CAAC;AAOF;;GAEG;AACH,SAAgB,uBAAuB,CACrC,MAAiB,EACjB,OAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE9B,WAAW;IACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;IAEtD,kCAAkC;IAClC,MAAM,eAAe,GAAiB,KAAK,EACzC,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,UAAU;IACV,MAAM,aAAa,GAAiB,KAAK,EACvC,GAAyB,EACzB,GAAmB,EACnB,MAA8B,EAC9B,EAAE;QACF,IAAI,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;QAE3C,cAAc;QACd,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE9C,wCAAwC;QACxC,6CAA6C;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,eAAe;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,aAAa;QACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;QAE/D,UAAU;QACV,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;YAE1F,0CAA0C;YAC1C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;gBAClD,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;YACpE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,2BAA2B;IAC3B,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,oEAAoE;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC","sourcesContent":["/**\n * Dashboard 静态资源处理器\n *\n * Serve /dashboard/ 路径下的运维 UI 静态资源\n */\n\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport type { ServerResponse } from 'node:http';\nimport type { ApiServer, RouteHandler } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\n\nconst MIME_TYPES: Record<string, string> = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.eot': 'application/vnd.ms-fontobject',\n};\n\nexport interface DashboardHandlerOptions {\n  /** 静态资源目录路径 */\n  staticDir: string;\n}\n\n/**\n * 注册 Dashboard 路由\n */\nexport function registerDashboardRoutes(\n  server: ApiServer,\n  options: DashboardHandlerOptions,\n): void {\n  const { staticDir } = options;\n\n  // 检查目录是否存在\n  if (!fs.existsSync(staticDir)) {\n    console.warn(`[Dashboard] Static directory not found: ${staticDir}`);\n    console.warn('[Dashboard] Run \"cd dashboard && yarn build\" to build the dashboard UI');\n    return;\n  }\n\n  console.log(`[Dashboard] Serving from: ${staticDir}`);\n\n  // 处理 /dashboard 和 /dashboard/ 重定向\n  const redirectHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    res.statusCode = 302;\n    res.setHeader('Location', '/dashboard/');\n    res.end();\n  };\n\n  // 静态资源处理器\n  const staticHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n    params: Record<string, string>,\n  ) => {\n    let filePath = params.path || 'index.html';\n\n    // 安全检查：防止路径遍历\n    if (filePath.includes('..')) {\n      res.statusCode = 403;\n      res.end('Forbidden');\n      return;\n    }\n\n    let fullPath = path.join(staticDir, filePath);\n\n    // 优先兼容 dashboard.html，其次回退到 index.html。\n    // 这样能兼容当前产物（dashboard.html）和旧构建（index.html）。\n    if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {\n      const dashboardEntry = path.join(fullPath, 'dashboard.html');\n      const indexEntry = path.join(fullPath, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // SPA fallback\n    if (!fs.existsSync(fullPath)) {\n      const dashboardEntry = path.join(staticDir, 'dashboard.html');\n      const indexEntry = path.join(staticDir, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // 再次检查文件是否存在\n    if (!fs.existsSync(fullPath)) {\n      res.statusCode = 404;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Not Found' }));\n      return;\n    }\n\n    // 获取 MIME 类型\n    const ext = path.extname(fullPath).toLowerCase();\n    const mimeType = MIME_TYPES[ext] || 'application/octet-stream';\n\n    // 读取并返回文件\n    try {\n      const content = fs.readFileSync(fullPath);\n      res.statusCode = 200;\n      res.setHeader('Content-Type', mimeType);\n      res.setHeader('Cache-Control', ext === '.html' ? 'no-cache' : 'public, max-age=31536000');\n\n      // For HEAD requests, only return headers.\n      if ((req.method ?? 'GET').toUpperCase() == 'HEAD') {\n        res.end();\n        return;\n      }\n\n      res.end(content);\n    } catch (error) {\n      console.error(`[Dashboard] Error reading file: ${fullPath}`, error);\n      res.statusCode = 500;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Internal Server Error' }));\n    }\n  };\n\n  // 注册路由 - 都是 public 的，不需要认证\n  // 使用通配符 *path 匹配所有子路径（包括 assets/xxx.js）\n  server.get('/dashboard', redirectHandler, { public: true });\n  server.get('/dashboard/', staticHandler, { public: true });\n  server.get('/dashboard/*path', staticHandler, { public: true });\n\n  // HEAD support for tooling (e.g. curl -I) and legacy health checks.\n  server.route('HEAD', '/dashboard', redirectHandler, { public: true });\n  server.route('HEAD', '/dashboard/', staticHandler, { public: true });\n  server.route('HEAD', '/dashboard/*path', staticHandler, { public: true });\n}\n"]}
+{"version":3,"file":"DashboardHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DashboardHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAiCH,0DAqGC;AApID,4CAA8B;AAC9B,gDAAkC;AAKlC,MAAM,UAAU,GAA2B;IACzC,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;CACxC,CAAC;AAOF;;GAEG;AACH,SAAgB,uBAAuB,CACrC,MAAiB,EACjB,OAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE9B,WAAW;IACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;IAEtD,kCAAkC;IAClC,MAAM,eAAe,GAAiB,KAAK,EACzC,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,UAAU;IACV,MAAM,aAAa,GAAiB,KAAK,EACvC,GAAyB,EACzB,GAAmB,EACnB,MAA8B,EAC9B,EAAE;QACF,IAAI,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;QAE3C,cAAc;QACd,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE9C,wCAAwC;QACxC,6CAA6C;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,eAAe;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,aAAa;QACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;QAE/D,UAAU;QACV,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;YAE1F,0CAA0C;YAC1C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;gBAClD,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;YACpE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,2BAA2B;IAC3B,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,oEAAoE;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC","sourcesContent":["/**\n * Dashboard 静态资源处理器\n *\n * Serve /dashboard/ 路径下的运维 UI 静态资源\n */\n\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport type { ServerResponse } from 'node:http';\nimport type { ApiServer, RouteHandler } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\n\nconst MIME_TYPES: Record<string, string> = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.eot': 'application/vnd.ms-fontobject',\n};\n\nexport interface DashboardHandlerOptions {\n  /** 静态资源目录路径 */\n  staticDir: string;\n}\n\n/**\n * 注册 Dashboard 路由\n */\nexport function registerDashboardRoutes(\n  server: ApiServer,\n  options: DashboardHandlerOptions,\n): void {\n  const { staticDir } = options;\n\n  // 检查目录是否存在\n  if (!fs.existsSync(staticDir)) {\n    console.warn(`[Dashboard] Static directory not found: ${staticDir}`);\n    console.warn('[Dashboard] Run \"cd ui && bun run build\" to build the dashboard UI');\n    return;\n  }\n\n  console.log(`[Dashboard] Serving from: ${staticDir}`);\n\n  // 处理 /dashboard 和 /dashboard/ 重定向\n  const redirectHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    res.statusCode = 302;\n    res.setHeader('Location', '/dashboard/');\n    res.end();\n  };\n\n  // 静态资源处理器\n  const staticHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n    params: Record<string, string>,\n  ) => {\n    let filePath = params.path || 'index.html';\n\n    // 安全检查：防止路径遍历\n    if (filePath.includes('..')) {\n      res.statusCode = 403;\n      res.end('Forbidden');\n      return;\n    }\n\n    let fullPath = path.join(staticDir, filePath);\n\n    // 优先兼容 dashboard.html，其次回退到 index.html。\n    // 这样能兼容当前产物（dashboard.html）和旧构建（index.html）。\n    if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {\n      const dashboardEntry = path.join(fullPath, 'dashboard.html');\n      const indexEntry = path.join(fullPath, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // SPA fallback\n    if (!fs.existsSync(fullPath)) {\n      const dashboardEntry = path.join(staticDir, 'dashboard.html');\n      const indexEntry = path.join(staticDir, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // 再次检查文件是否存在\n    if (!fs.existsSync(fullPath)) {\n      res.statusCode = 404;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Not Found' }));\n      return;\n    }\n\n    // 获取 MIME 类型\n    const ext = path.extname(fullPath).toLowerCase();\n    const mimeType = MIME_TYPES[ext] || 'application/octet-stream';\n\n    // 读取并返回文件\n    try {\n      const content = fs.readFileSync(fullPath);\n      res.statusCode = 200;\n      res.setHeader('Content-Type', mimeType);\n      res.setHeader('Cache-Control', ext === '.html' ? 'no-cache' : 'public, max-age=31536000');\n\n      // For HEAD requests, only return headers.\n      if ((req.method ?? 'GET').toUpperCase() == 'HEAD') {\n        res.end();\n        return;\n      }\n\n      res.end(content);\n    } catch (error) {\n      console.error(`[Dashboard] Error reading file: ${fullPath}`, error);\n      res.statusCode = 500;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Internal Server Error' }));\n    }\n  };\n\n  // 注册路由 - 都是 public 的，不需要认证\n  // 使用通配符 *path 匹配所有子路径（包括 assets/xxx.js）\n  server.get('/dashboard', redirectHandler, { public: true });\n  server.get('/dashboard/', staticHandler, { public: true });\n  server.get('/dashboard/*path', staticHandler, { public: true });\n\n  // HEAD support for tooling (e.g. curl -I) and legacy health checks.\n  server.route('HEAD', '/dashboard', redirectHandler, { public: true });\n  server.route('HEAD', '/dashboard/', staticHandler, { public: true });\n  server.route('HEAD', '/dashboard/*path', staticHandler, { public: true });\n}\n"]}

package/dist/api/main.d.ts

@@ -11,4 +11,4 @@
  * - Solid DPoP Token: for browser/frontend users
  * - Client Credentials (Basic Auth with client_id:client_secret): for edge nodes and third-party backends
  */
-export {};
+import '../runtime/configure-drizzle-solid';

package/dist/api/main.js

@@ -13,105 +13,15 @@
  * - Client Credentials (Basic Auth with client_id:client_secret): for edge nodes and third-party backends
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-const container_1 = require("./container");
-const routes_1 = require("./container/routes");
+require("../runtime/configure-drizzle-solid");
 const global_logger_factory_1 = require("global-logger-factory");
-const ConfigurableLoggerFactory_1 = require("../logging/ConfigurableLoggerFactory");
+const runtime_1 = require("./runtime");
 async function main() {
-    // 从环境变量加载配置
-    const config = (0, container_1.loadConfigFromEnv)();
-    // 初始化全局统一日志工厂
-    const loggerFactory = new ConfigurableLoggerFactory_1.ConfigurableLoggerFactory(process.env.CSS_LOGGING_LEVEL || 'info', {
-        fileName: './logs/xpod-%DATE%.log',
-        showLocation: true,
-    });
-    (0, global_logger_factory_1.setGlobalLoggerFactory)(loggerFactory);
     const logger = (0, global_logger_factory_1.getLoggerFor)('Main');
-    if (!config.databaseUrl) {
-        logger.error('CSS_IDENTITY_DB_URL or DATABASE_URL environment variable is required');
-        process.exit(1);
-    }
-    logger.info(`Starting API Service (edition: ${config.edition})...`);
-    // 创建 DI 容器
-    const container = (0, container_1.createApiContainer)(config);
-    // 注册路由
-    (0, routes_1.registerRoutes)(container);
-    // 自动注册 service token（如果配置了 XPOD_SERVICE_TOKEN）
-    try {
-        const serviceToken = process.env.XPOD_SERVICE_TOKEN;
-        if (serviceToken) {
-            const serviceTokenRepo = container.resolve('serviceTokenRepo');
-            const serviceType = config.edition === 'cloud' ? 'cloud' : 'local';
-            const serviceId = process.env.XPOD_NODE_ID || (config.edition === 'cloud' ? 'cloud-1' : 'local-1');
-            await serviceTokenRepo.registerToken(serviceToken, {
-                serviceType,
-                serviceId,
-                scopes: ['quota:write', 'usage:read', 'account:manage'],
-            });
-            logger.info(`Registered service token for ${serviceType}:${serviceId}`);
-        }
-    }
-    catch (error) {
-        logger.error(`Failed to register service token: ${error}`);
-    }
-    // Start background maintenance (IPv6 DDNS / Tunnel Control)
-    try {
-        const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });
-        if (localNetworkManager) {
-            localNetworkManager.start();
-        }
-    }
-    catch (error) {
-        logger.error(`Failed to initialize LocalNetworkManager: ${error}`);
-    }
-    // Start DDNS Manager (托管式 Local 模式)
-    try {
-        const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });
-        if (ddnsManager) {
-            await ddnsManager.start();
-            logger.info('DDNS Manager started');
-        }
-    }
-    catch (error) {
-        logger.error(`Failed to initialize DdnsManager: ${error}`);
-    }
-    // Start Cloudflare Tunnel (独立式 Local 模式，没有 LocalNetworkManager 时直接启动)
-    try {
-        const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });
-        const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true });
-        // 只有当没有 LocalNetworkManager（它会自动管理 Tunnel）且有 Tunnel Provider 时才手动启动
-        if (!localNetworkManager && localTunnelProvider) {
-            logger.info('Starting Cloudflare Tunnel (standalone mode)...');
-            await localTunnelProvider.start();
-            logger.info('Cloudflare Tunnel started');
-        }
-    }
-    catch (error) {
-        logger.error(`Failed to start Cloudflare Tunnel: ${error}`);
-    }
-    // Start the HTTP server
-    const server = container.resolve('apiServer');
-    await server.start();
-    logger.info(`API Service active on ${config.host}:${config.port}`);
-    // Graceful shutdown
+    const service = await (0, runtime_1.startApiService)();
     const shutdown = async (signal) => {
         logger.info(`Stopping API Service (${signal})...`);
-        try {
-            const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });
-            ddnsManager?.stop();
-        }
-        catch { }
-        try {
-            const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });
-            await localNetworkManager?.stop();
-        }
-        catch { }
-        try {
-            const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true });
-            await localTunnelProvider?.stop();
-        }
-        catch { }
-        await server.stop();
+        await service.stop();
         process.exit(0);
     };
     process.on('SIGTERM', () => shutdown('SIGTERM'));

package/dist/api/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/api/main.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;GAWG;;AAEH,2CAAoE;AACpE,+CAAoD;AACpD,iEAA6E;AAC7E,oFAAiF;AAEjF,KAAK,UAAU,IAAI;IACjB,YAAY;IACZ,MAAM,MAAM,GAAG,IAAA,6BAAiB,GAAE,CAAC;IAEnC,cAAc;IACd,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE;QAC3F,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,MAAM,CAAC,CAAC;IAEpC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC;IAEpE,WAAW;IACX,MAAM,SAAS,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;IAE7C,OAAO;IACP,IAAA,uBAAc,EAAC,SAAS,CAAC,CAAC;IAE1B,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAQ,CAAC;YACtE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAEnG,MAAM,gBAAgB,CAAC,aAAa,CAAC,YAAY,EAAE;gBACjD,WAAW;gBACX,SAAS;gBACT,MAAM,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC;aACxD,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,gCAAgC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzG,IAAI,mBAAmB,EAAE,CAAC;YACxB,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAEzG,oEAAoE;QACpE,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC/D,MAAM,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,wBAAwB;IACxB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAQ,CAAC;IACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnE,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;YACzF,WAAW,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,CAAC;YACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,CAAC;YACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;YACzG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n/**\n * API Service Entry Point\n *\n * 使用 Awilix 依赖注入，根据 XPOD_EDITION 环境变量切换 cloud/local 模式\n *\n * - cloud: 持有 DNS/Tunnel 密钥，直接操作子域名，提供身份服务\n * - local: 连接 Cloud 获取身份服务和 DDNS，或独立运行\n *\n * Authentication:\n * - Solid DPoP Token: for browser/frontend users\n * - Client Credentials (Basic Auth with client_id:client_secret): for edge nodes and third-party backends\n */\n\nimport { createApiContainer, loadConfigFromEnv } from './container';\nimport { registerRoutes } from './container/routes';\nimport { setGlobalLoggerFactory, getLoggerFor } from 'global-logger-factory';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\n\nasync function main(): Promise<void> {\n  // 从环境变量加载配置\n  const config = loadConfigFromEnv();\n\n  // 初始化全局统一日志工厂\n  const loggerFactory = new ConfigurableLoggerFactory(process.env.CSS_LOGGING_LEVEL || 'info', {\n    fileName: './logs/xpod-%DATE%.log',\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n\n  const logger = getLoggerFor('Main');\n\n  if (!config.databaseUrl) {\n    logger.error('CSS_IDENTITY_DB_URL or DATABASE_URL environment variable is required');\n    process.exit(1);\n  }\n\n  logger.info(`Starting API Service (edition: ${config.edition})...`);\n\n  // 创建 DI 容器\n  const container = createApiContainer(config);\n\n  // 注册路由\n  registerRoutes(container);\n\n  // 自动注册 service token（如果配置了 XPOD_SERVICE_TOKEN）\n  try {\n    const serviceToken = process.env.XPOD_SERVICE_TOKEN;\n    if (serviceToken) {\n      const serviceTokenRepo = container.resolve('serviceTokenRepo') as any;\n      const serviceType = config.edition === 'cloud' ? 'cloud' : 'local';\n      const serviceId = process.env.XPOD_NODE_ID || (config.edition === 'cloud' ? 'cloud-1' : 'local-1');\n\n      await serviceTokenRepo.registerToken(serviceToken, {\n        serviceType,\n        serviceId,\n        scopes: ['quota:write', 'usage:read', 'account:manage'],\n      });\n\n      logger.info(`Registered service token for ${serviceType}:${serviceId}`);\n    }\n  } catch (error) {\n    logger.error(`Failed to register service token: ${error}`);\n  }\n\n  // Start background maintenance (IPv6 DDNS / Tunnel Control)\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true }) as any;\n    if (localNetworkManager) {\n      localNetworkManager.start();\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize LocalNetworkManager: ${error}`);\n  }\n\n  // Start DDNS Manager (托管式 Local 模式)\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    if (ddnsManager) {\n      await ddnsManager.start();\n      logger.info('DDNS Manager started');\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize DdnsManager: ${error}`);\n  }\n\n  // Start Cloudflare Tunnel (独立式 Local 模式，没有 LocalNetworkManager 时直接启动)\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n\n    // 只有当没有 LocalNetworkManager（它会自动管理 Tunnel）且有 Tunnel Provider 时才手动启动\n    if (!localNetworkManager && localTunnelProvider) {\n      logger.info('Starting Cloudflare Tunnel (standalone mode)...');\n      await localTunnelProvider.start();\n      logger.info('Cloudflare Tunnel started');\n    }\n  } catch (error) {\n    logger.error(`Failed to start Cloudflare Tunnel: ${error}`);\n  }\n\n  // Start the HTTP server\n  const server = container.resolve('apiServer') as any;\n  await server.start();\n  logger.info(`API Service active on ${config.host}:${config.port}`);\n\n  // Graceful shutdown\n  const shutdown = async (signal: string): Promise<void> => {\n    logger.info(`Stopping API Service (${signal})...`);\n\n    try {\n      const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n      ddnsManager?.stop();\n    } catch {}\n\n    try {\n      const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n      await localNetworkManager?.stop();\n    } catch {}\n\n    try {\n      const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n      await localTunnelProvider?.stop();\n    } catch {}\n\n    await server.stop();\n    process.exit(0);\n  };\n\n  process.on('SIGTERM', () => shutdown('SIGTERM'));\n  process.on('SIGINT', () => shutdown('SIGINT'));\n}\n\nmain().catch((error) => {\n  console.error(`Failed to start API Service: ${error}`);\n  process.exit(1);\n});\n"]}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/api/main.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;GAWG;;AAEH,8CAA4C;AAC5C,iEAAqD;AACrD,uCAA4C;AAE5C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n/**\n * API Service Entry Point\n *\n * 使用 Awilix 依赖注入，根据 XPOD_EDITION 环境变量切换 cloud/local 模式\n *\n * - cloud: 持有 DNS/Tunnel 密钥，直接操作子域名，提供身份服务\n * - local: 连接 Cloud 获取身份服务和 DDNS，或独立运行\n *\n * Authentication:\n * - Solid DPoP Token: for browser/frontend users\n * - Client Credentials (Basic Auth with client_id:client_secret): for edge nodes and third-party backends\n */\n\nimport '../runtime/configure-drizzle-solid';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { startApiService } from './runtime';\n\nasync function main(): Promise<void> {\n  const logger = getLoggerFor('Main');\n  const service = await startApiService();\n\n  const shutdown = async (signal: string): Promise<void> => {\n    logger.info(`Stopping API Service (${signal})...`);\n    await service.stop();\n    process.exit(0);\n  };\n\n  process.on('SIGTERM', () => shutdown('SIGTERM'));\n  process.on('SIGINT', () => shutdown('SIGINT'));\n}\n\nmain().catch((error) => {\n  console.error(`Failed to start API Service: ${error}`);\n  process.exit(1);\n});\n"]}

package/dist/api/models/namespaces.d.ts

@@ -1,9 +1,2 @@
-type NamespaceObject = ((term: string) => string) & {
-    prefix: string;
-    uri: string;
-    NAMESPACE: string;
-    term: (name: string) => string;
-} & Record<string, string>;
-export declare const DCTerms: NamespaceObject;
-export declare const LINQ: NamespaceObject;
-export {};
+import { ACL, AS, DCTerms, FOAF, LINQ, LINX_CHAT, LINX_MSG, LDP, MEETING, ODRL, OWL, RDF, RDFS, SCHEMA, SIOC, UDFS, UDFS_NAMESPACE, VCARD, WF } from '@undefineds.co/models';
+export { ACL, AS, DCTerms, FOAF, LINQ, LINX_CHAT, LINX_MSG, LDP, MEETING, ODRL, OWL, RDF, RDFS, SCHEMA, SIOC, UDFS, UDFS_NAMESPACE, VCARD, WF, };

package/dist/api/models/namespaces.js

@@ -1,34 +1,24 @@
 "use strict";
-// Copied from linx/packages/models/src/namespaces.ts
-// TODO: Centralize this in a shared package (@udfs/vocab or @linx/models)
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LINQ = exports.DCTerms = void 0;
-const ABSOLUTE_IRI = /^[a-zA-Z][a-zA-Z\d+.-]*:/;
-const createNamespace = (prefix, baseUri, terms) => {
-    const builder = ((term) => ABSOLUTE_IRI.test(term) ? term : `${baseUri}${term}`);
-    builder.prefix = prefix;
-    builder.uri = baseUri;
-    builder.NAMESPACE = baseUri;
-    builder.term = (name) => builder(name);
-    Object.entries(terms).forEach(([key, local]) => {
-        Object.defineProperty(builder, key, {
-            value: builder(local),
-            enumerable: true,
-        });
-    });
-    return builder;
-};
-exports.DCTerms = createNamespace('dc', 'http://purl.org/dc/terms/', {
-    modified: 'modified',
-    created: 'created',
-});
-exports.LINQ = createNamespace('linx', 'https://linx.ai/ns#', {
-    provider: 'provider',
-    status: 'status',
-    apiKey: 'apiKey',
-    baseUrl: 'baseUrl',
-    proxy: 'proxy',
-    aiModels: 'aiModels',
-    ModelProvider: 'ModelProvider',
-});
+exports.WF = exports.VCARD = exports.UDFS_NAMESPACE = exports.UDFS = exports.SIOC = exports.SCHEMA = exports.RDFS = exports.RDF = exports.OWL = exports.ODRL = exports.MEETING = exports.LDP = exports.LINX_MSG = exports.LINX_CHAT = exports.LINQ = exports.FOAF = exports.DCTerms = exports.AS = exports.ACL = void 0;
+const models_1 = require("@undefineds.co/models");
+Object.defineProperty(exports, "ACL", { enumerable: true, get: function () { return models_1.ACL; } });
+Object.defineProperty(exports, "AS", { enumerable: true, get: function () { return models_1.AS; } });
+Object.defineProperty(exports, "DCTerms", { enumerable: true, get: function () { return models_1.DCTerms; } });
+Object.defineProperty(exports, "FOAF", { enumerable: true, get: function () { return models_1.FOAF; } });
+Object.defineProperty(exports, "LINQ", { enumerable: true, get: function () { return models_1.LINQ; } });
+Object.defineProperty(exports, "LINX_CHAT", { enumerable: true, get: function () { return models_1.LINX_CHAT; } });
+Object.defineProperty(exports, "LINX_MSG", { enumerable: true, get: function () { return models_1.LINX_MSG; } });
+Object.defineProperty(exports, "LDP", { enumerable: true, get: function () { return models_1.LDP; } });
+Object.defineProperty(exports, "MEETING", { enumerable: true, get: function () { return models_1.MEETING; } });
+Object.defineProperty(exports, "ODRL", { enumerable: true, get: function () { return models_1.ODRL; } });
+Object.defineProperty(exports, "OWL", { enumerable: true, get: function () { return models_1.OWL; } });
+Object.defineProperty(exports, "RDF", { enumerable: true, get: function () { return models_1.RDF; } });
+Object.defineProperty(exports, "RDFS", { enumerable: true, get: function () { return models_1.RDFS; } });
+Object.defineProperty(exports, "SCHEMA", { enumerable: true, get: function () { return models_1.SCHEMA; } });
+Object.defineProperty(exports, "SIOC", { enumerable: true, get: function () { return models_1.SIOC; } });
+Object.defineProperty(exports, "UDFS", { enumerable: true, get: function () { return models_1.UDFS; } });
+Object.defineProperty(exports, "UDFS_NAMESPACE", { enumerable: true, get: function () { return models_1.UDFS_NAMESPACE; } });
+Object.defineProperty(exports, "VCARD", { enumerable: true, get: function () { return models_1.VCARD; } });
+Object.defineProperty(exports, "WF", { enumerable: true, get: function () { return models_1.WF; } });
 //# sourceMappingURL=namespaces.js.map

package/dist/api/models/namespaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"namespaces.js","sourceRoot":"","sources":["../../../src/api/models/namespaces.ts"],"names":[],"mappings":";AAAA,qDAAqD;AACrD,0EAA0E;;;AAS1E,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAE/C,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,KAA6B,EAAmB,EAAE;IAC1G,MAAM,OAAO,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAChC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,CAAoB,CAAA;IAC1E,OAAO,CAAC,MAAM,GAAG,MAAM,CAAA;IACvB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAA;IACrB,OAAO,CAAC,SAAS,GAAG,OAAO,CAAA;IAC3B,OAAO,CAAC,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAEY,QAAA,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,2BAA2B,EAAE;IACxE,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AAEW,QAAA,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,qBAAqB,EAAE;IACjE,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,eAAe;CAC/B,CAAC,CAAA","sourcesContent":["// Copied from linx/packages/models/src/namespaces.ts\n// TODO: Centralize this in a shared package (@udfs/vocab or @linx/models)\n\ntype NamespaceObject = ((term: string) => string) & {\n  prefix: string\n  uri: string\n  NAMESPACE: string\n  term: (name: string) => string\n} & Record<string, string>\n\nconst ABSOLUTE_IRI = /^[a-zA-Z][a-zA-Z\\d+.-]*:/\n\nconst createNamespace = (prefix: string, baseUri: string, terms: Record<string, string>): NamespaceObject => {\n  const builder = ((term: string) =>\n    ABSOLUTE_IRI.test(term) ? term : `${baseUri}${term}`) as NamespaceObject\n  builder.prefix = prefix\n  builder.uri = baseUri\n  builder.NAMESPACE = baseUri\n  builder.term = (name: string) => builder(name)\n  Object.entries(terms).forEach(([key, local]) => {\n    Object.defineProperty(builder, key, {\n      value: builder(local),\n      enumerable: true,\n    })\n  })\n  return builder\n}\n\nexport const DCTerms = createNamespace('dc', 'http://purl.org/dc/terms/', {\n  modified: 'modified',\n  created: 'created',\n})\n\nexport const LINQ = createNamespace('linx', 'https://linx.ai/ns#', {\n  provider: 'provider',\n  status: 'status',\n  apiKey: 'apiKey',\n  baseUrl: 'baseUrl',\n  proxy: 'proxy',\n  aiModels: 'aiModels',\n  ModelProvider: 'ModelProvider',\n})\n"]}
+{"version":3,"file":"namespaces.js","sourceRoot":"","sources":["../../../src/api/models/namespaces.ts"],"names":[],"mappings":";;;AAAA,kDAoB+B;AAG7B,oFAtBA,YAAG,OAsBA;AACH,mFAtBA,WAAE,OAsBA;AACF,wFAtBA,gBAAO,OAsBA;AACP,qFAtBA,aAAI,OAsBA;AACJ,qFAtBA,aAAI,OAsBA;AACJ,0FAtBA,kBAAS,OAsBA;AACT,yFAtBA,iBAAQ,OAsBA;AACR,oFAtBA,YAAG,OAsBA;AACH,wFAtBA,gBAAO,OAsBA;AACP,qFAtBA,aAAI,OAsBA;AACJ,oFAtBA,YAAG,OAsBA;AACH,oFAtBA,YAAG,OAsBA;AACH,qFAtBA,aAAI,OAsBA;AACJ,uFAtBA,eAAM,OAsBA;AACN,qFAtBA,aAAI,OAsBA;AACJ,qFAtBA,aAAI,OAsBA;AACJ,+FAtBA,uBAAc,OAsBA;AACd,sFAtBA,cAAK,OAsBA;AACL,mFAtBA,WAAE,OAsBA","sourcesContent":["import {\n  ACL,\n  AS,\n  DCTerms,\n  FOAF,\n  LINQ,\n  LINX_CHAT,\n  LINX_MSG,\n  LDP,\n  MEETING,\n  ODRL,\n  OWL,\n  RDF,\n  RDFS,\n  SCHEMA,\n  SIOC,\n  UDFS,\n  UDFS_NAMESPACE,\n  VCARD,\n  WF,\n} from '@undefineds.co/models';\n\nexport {\n  ACL,\n  AS,\n  DCTerms,\n  FOAF,\n  LINQ,\n  LINX_CHAT,\n  LINX_MSG,\n  LDP,\n  MEETING,\n  ODRL,\n  OWL,\n  RDF,\n  RDFS,\n  SCHEMA,\n  SIOC,\n  UDFS,\n  UDFS_NAMESPACE,\n  VCARD,\n  WF,\n};\n"]}

package/dist/api/runtime.d.ts

@@ -1,11 +1,13 @@
 import { type AwilixContainer } from 'awilix';
 import { type ApiContainerConfig, type ApiContainerCradle } from './container';
 import type { AuthContext } from './auth/AuthContext';
+import type { RuntimeHost } from '../runtime/host/types';
 export interface StartApiServiceOptions {
     config?: ApiContainerConfig;
     open?: boolean;
     authContext?: AuthContext;
     initializeLogger?: boolean;
+    runtimeHost?: RuntimeHost;
 }
 export interface ApiServiceHandle {
     config: ApiContainerConfig;

package/dist/api/runtime.js

@@ -14,6 +14,26 @@ function initApiLogger() {
     });
     (0, global_logger_factory_1.setGlobalLoggerFactory)(loggerFactory);
 }
+async function registerPrimaryServiceToken(container, config, logger) {
+    try {
+        const serviceToken = process.env.XPOD_SERVICE_TOKEN;
+        if (!serviceToken) {
+            return;
+        }
+        const serviceTokenRepo = container.resolve('serviceTokenRepo');
+        const serviceType = config.edition === 'cloud' ? 'cloud' : 'local';
+        const serviceId = process.env.XPOD_NODE_ID || (config.edition === 'cloud' ? 'cloud-1' : 'local-1');
+        await serviceTokenRepo.registerToken(serviceToken, {
+            serviceType,
+            serviceId,
+            scopes: ['quota:write', 'usage:read', 'account:manage'],
+        });
+        logger.info(`Registered service token for ${serviceType}:${serviceId}`);
+    }
+    catch (error) {
+        logger.error(`Failed to register service token: ${error}`);
+    }
+}
 async function startBackgroundServices(container, logger) {
     try {
         const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });
@@ -74,7 +94,11 @@ async function startApiService(options = {}) {
     if (options.initializeLogger !== false) {
         initApiLogger();
     }
-    const config = options.config ?? (0, container_1.loadConfigFromEnv)();
+    const baseConfig = options.config ?? (0, container_1.loadConfigFromEnv)();
+    const config = {
+        ...baseConfig,
+        runtimeHost: options.runtimeHost ?? baseConfig.runtimeHost,
+    };
     const logger = (0, global_logger_factory_1.getLoggerFor)('ApiRuntime');
     if (!config.databaseUrl) {
         throw new Error('CSS_IDENTITY_DB_URL or DATABASE_URL environment variable is required');
@@ -87,6 +111,7 @@ async function startApiService(options = {}) {
         });
     }
     (0, routes_1.registerRoutes)(container);
+    await registerPrimaryServiceToken(container, config, logger);
     await startBackgroundServices(container, logger);
     const server = container.resolve('apiServer');
     await server.start();

package/dist/api/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/api/runtime.ts"],"names":[],"mappings":";;AAyFA,0CAsCC;AA/HD,mCAAuD;AACvD,iEAA6E;AAC7E,oFAAiF;AACjF,2CAAsH;AACtH,+CAAoD;AAEpD,wEAAqE;AAerE,SAAS,aAAa;IACpB,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE;QAC3F,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAA8C,EAC9C,MAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzG,IAAI,mBAAmB,EAAE,CAAC;YACxB,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAEzG,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC/D,MAAM,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,SAA8C;IAClF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,WAAW,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,UAAkC,EAAE;IACxE,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACvC,aAAa,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,6BAAiB,GAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,YAAY,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC;IAEpE,MAAM,SAAS,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,QAAQ,CAAC;YACjB,cAAc,EAAE,IAAA,gBAAO,EAAC,IAAI,uCAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;SAClF,CAAC,CAAC;IACL,CAAC;IAED,IAAA,uBAAc,EAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5H,OAAO;QACL,MAAM;QACN,SAAS;QACT,IAAI,EAAE,KAAK,IAAkB,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACvC,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { asValue, type AwilixContainer } from 'awilix';\nimport { setGlobalLoggerFactory, getLoggerFor } from 'global-logger-factory';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { createApiContainer, loadConfigFromEnv, type ApiContainerConfig, type ApiContainerCradle } from './container';\nimport { registerRoutes } from './container/routes';\nimport type { AuthContext } from './auth/AuthContext';\nimport { OpenAuthMiddleware } from './middleware/OpenAuthMiddleware';\n\nexport interface StartApiServiceOptions {\n  config?: ApiContainerConfig;\n  open?: boolean;\n  authContext?: AuthContext;\n  initializeLogger?: boolean;\n}\n\nexport interface ApiServiceHandle {\n  config: ApiContainerConfig;\n  container: AwilixContainer<ApiContainerCradle>;\n  stop: () => Promise<void>;\n}\n\nfunction initApiLogger(): void {\n  const loggerFactory = new ConfigurableLoggerFactory(process.env.CSS_LOGGING_LEVEL || 'info', {\n    fileName: './logs/xpod-%DATE%.log',\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n\nasync function startBackgroundServices(\n  container: AwilixContainer<ApiContainerCradle>,\n  logger: ReturnType<typeof getLoggerFor>,\n): Promise<void> {\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true }) as any;\n    if (localNetworkManager) {\n      localNetworkManager.start();\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize LocalNetworkManager: ${error}`);\n  }\n\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    if (ddnsManager) {\n      await ddnsManager.start();\n      logger.info('DDNS Manager started');\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize DdnsManager: ${error}`);\n  }\n\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n\n    if (!localNetworkManager && localTunnelProvider) {\n      logger.info('Starting Cloudflare Tunnel (standalone mode)...');\n      await localTunnelProvider.start();\n      logger.info('Cloudflare Tunnel started');\n    }\n  } catch (error) {\n    logger.error(`Failed to start Cloudflare Tunnel: ${error}`);\n  }\n}\n\nasync function stopBackgroundServices(container: AwilixContainer<ApiContainerCradle>): Promise<void> {\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    ddnsManager?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n    await localNetworkManager?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n\n  try {\n    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n    await localTunnelProvider?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n}\n\nexport async function startApiService(options: StartApiServiceOptions = {}): Promise<ApiServiceHandle> {\n  if (options.initializeLogger !== false) {\n    initApiLogger();\n  }\n\n  const config = options.config ?? loadConfigFromEnv();\n  const logger = getLoggerFor('ApiRuntime');\n\n  if (!config.databaseUrl) {\n    throw new Error('CSS_IDENTITY_DB_URL or DATABASE_URL environment variable is required');\n  }\n\n  logger.info(`Starting API Service (edition: ${config.edition})...`);\n\n  const container = createApiContainer(config);\n\n  if (options.open) {\n    container.register({\n      authMiddleware: asValue(new OpenAuthMiddleware({ context: options.authContext })),\n    });\n  }\n\n  registerRoutes(container);\n  await startBackgroundServices(container, logger);\n\n  const server = container.resolve('apiServer');\n  await server.start();\n  logger.info(`API Service active on ${config.socketPath ? `unix://${config.socketPath}` : `${config.host}:${config.port}`}`);\n\n  return {\n    config,\n    container,\n    stop: async(): Promise<void> => {\n      logger.info('Stopping API Service...');\n      await stopBackgroundServices(container);\n      await server.stop();\n    },\n  };\n}\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/api/runtime.ts"],"names":[],"mappings":";;AAsHA,0CA2CC;AAjKD,mCAAuD;AACvD,iEAA6E;AAC7E,oFAAiF;AACjF,2CAAsH;AACtH,+CAAoD;AAEpD,wEAAqE;AAiBrE,SAAS,aAAa;IACpB,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE;QAC3F,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAA8C,EAC9C,MAA0B,EAC1B,MAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAQ,CAAC;QACtE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEnG,MAAM,gBAAgB,CAAC,aAAa,CAAC,YAAY,EAAE;YACjD,WAAW;YACX,SAAS;YACT,MAAM,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC;SACxD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gCAAgC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAA8C,EAC9C,MAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzG,IAAI,mBAAmB,EAAE,CAAC;YACxB,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAEzG,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC/D,MAAM,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,SAA8C;IAClF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,WAAW,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzG,MAAM,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,UAAkC,EAAE;IACxE,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACvC,aAAa,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,6BAAiB,GAAE,CAAC;IACzD,MAAM,MAAM,GAAG;QACb,GAAG,UAAU;QACb,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;KAC3D,CAAC;IACF,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,YAAY,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC;IAEpE,MAAM,SAAS,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,QAAQ,CAAC;YACjB,cAAc,EAAE,IAAA,gBAAO,EAAC,IAAI,uCAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;SAClF,CAAC,CAAC;IACL,CAAC;IAED,IAAA,uBAAc,EAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5H,OAAO;QACL,MAAM;QACN,SAAS;QACT,IAAI,EAAE,KAAK,IAAkB,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACvC,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { asValue, type AwilixContainer } from 'awilix';\nimport { setGlobalLoggerFactory, getLoggerFor } from 'global-logger-factory';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { createApiContainer, loadConfigFromEnv, type ApiContainerConfig, type ApiContainerCradle } from './container';\nimport { registerRoutes } from './container/routes';\nimport type { AuthContext } from './auth/AuthContext';\nimport { OpenAuthMiddleware } from './middleware/OpenAuthMiddleware';\nimport type { RuntimeHost } from '../runtime/host/types';\n\nexport interface StartApiServiceOptions {\n  config?: ApiContainerConfig;\n  open?: boolean;\n  authContext?: AuthContext;\n  initializeLogger?: boolean;\n  runtimeHost?: RuntimeHost;\n}\n\nexport interface ApiServiceHandle {\n  config: ApiContainerConfig;\n  container: AwilixContainer<ApiContainerCradle>;\n  stop: () => Promise<void>;\n}\n\nfunction initApiLogger(): void {\n  const loggerFactory = new ConfigurableLoggerFactory(process.env.CSS_LOGGING_LEVEL || 'info', {\n    fileName: './logs/xpod-%DATE%.log',\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n\nasync function registerPrimaryServiceToken(\n  container: AwilixContainer<ApiContainerCradle>,\n  config: ApiContainerConfig,\n  logger: ReturnType<typeof getLoggerFor>,\n): Promise<void> {\n  try {\n    const serviceToken = process.env.XPOD_SERVICE_TOKEN;\n    if (!serviceToken) {\n      return;\n    }\n\n    const serviceTokenRepo = container.resolve('serviceTokenRepo') as any;\n    const serviceType = config.edition === 'cloud' ? 'cloud' : 'local';\n    const serviceId = process.env.XPOD_NODE_ID || (config.edition === 'cloud' ? 'cloud-1' : 'local-1');\n\n    await serviceTokenRepo.registerToken(serviceToken, {\n      serviceType,\n      serviceId,\n      scopes: ['quota:write', 'usage:read', 'account:manage'],\n    });\n\n    logger.info(`Registered service token for ${serviceType}:${serviceId}`);\n  } catch (error) {\n    logger.error(`Failed to register service token: ${error}`);\n  }\n}\n\nasync function startBackgroundServices(\n  container: AwilixContainer<ApiContainerCradle>,\n  logger: ReturnType<typeof getLoggerFor>,\n): Promise<void> {\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true }) as any;\n    if (localNetworkManager) {\n      localNetworkManager.start();\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize LocalNetworkManager: ${error}`);\n  }\n\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    if (ddnsManager) {\n      await ddnsManager.start();\n      logger.info('DDNS Manager started');\n    }\n  } catch (error) {\n    logger.error(`Failed to initialize DdnsManager: ${error}`);\n  }\n\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n\n    if (!localNetworkManager && localTunnelProvider) {\n      logger.info('Starting Cloudflare Tunnel (standalone mode)...');\n      await localTunnelProvider.start();\n      logger.info('Cloudflare Tunnel started');\n    }\n  } catch (error) {\n    logger.error(`Failed to start Cloudflare Tunnel: ${error}`);\n  }\n}\n\nasync function stopBackgroundServices(container: AwilixContainer<ApiContainerCradle>): Promise<void> {\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    ddnsManager?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n\n  try {\n    const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });\n    await localNetworkManager?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n\n  try {\n    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true }) as any;\n    await localTunnelProvider?.stop();\n  } catch {\n    // ignore shutdown errors\n  }\n}\n\nexport async function startApiService(options: StartApiServiceOptions = {}): Promise<ApiServiceHandle> {\n  if (options.initializeLogger !== false) {\n    initApiLogger();\n  }\n\n  const baseConfig = options.config ?? loadConfigFromEnv();\n  const config = {\n    ...baseConfig,\n    runtimeHost: options.runtimeHost ?? baseConfig.runtimeHost,\n  };\n  const logger = getLoggerFor('ApiRuntime');\n\n  if (!config.databaseUrl) {\n    throw new Error('CSS_IDENTITY_DB_URL or DATABASE_URL environment variable is required');\n  }\n\n  logger.info(`Starting API Service (edition: ${config.edition})...`);\n\n  const container = createApiContainer(config);\n\n  if (options.open) {\n    container.register({\n      authMiddleware: asValue(new OpenAuthMiddleware({ context: options.authContext })),\n    });\n  }\n\n  registerRoutes(container);\n  await registerPrimaryServiceToken(container, config, logger);\n  await startBackgroundServices(container, logger);\n\n  const server = container.resolve('apiServer');\n  await server.start();\n  logger.info(`API Service active on ${config.socketPath ? `unix://${config.socketPath}` : `${config.host}:${config.port}`}`);\n\n  return {\n    config,\n    container,\n    stop: async(): Promise<void> => {\n      logger.info('Stopping API Service...');\n      await stopBackgroundServices(container);\n      await server.stop();\n    },\n  };\n}\n"]}