@undefineds.co/xpod 0.2.34 → 0.2.35

package/dist/api/container/local.js

@@ -85,14 +85,10 @@ function registerLocalServices(container) {
                 });
             }).singleton(),
             // Local Network Manager (Orchestrator)
-            localNetworkManager: (0, awilix_1.asFunction)(({ capabilityDetector, dnsCoordinator, localTunnelProvider }) => {
-                // Tunnel 应该指向 Gateway 端口 (通常是 3000)，而不是 API Server 端口 (3004)
-                const mainPort = parseInt(process.env.XPOD_MAIN_PORT || '3000', 10);
+            localNetworkManager: (0, awilix_1.asFunction)(({ capabilityDetector, dnsCoordinator }) => {
                 return new LocalNetworkManager_1.LocalNetworkManager({
                     detector: capabilityDetector,
                     dnsCoordinator: dnsCoordinator,
-                    tunnelProvider: localTunnelProvider,
-                    localPort: mainPort,
                 });
             }).singleton(),
             // Subdomain Service (Keep for API support)

package/dist/api/container/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/api/container/local.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAmBH,sDAqLC;AAtMD,mCAA0D;AAG1D,qEAAkE;AAClE,0EAAuE;AACvE,kFAA+E;AAC/E,sFAAmF;AACnF,uEAAoE;AACpE,8EAA2E;AAC3E,sFAAmF;AACnF,wEAAqE;AACrE,wDAAqD;AAGrD;;GAEG;AACH,SAAgB,qBAAqB,CACnC,SAA8C;IAE9C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,MAAM,EACJ,gBAAgB,EAChB,MAAM,EACN,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EAAE,eAAe,GAC3B,GAAG,MAAM,CAAC;IAEX,qDAAqD;IACrD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,WAAW,EAAE,qBAAqB;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,iBAAiB,EAAE,CAAC;QAC7B,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,iDAAuB,CAAC;oBACjC,KAAK,EAAE,iBAAiB;iBACzB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IACrF,CAAC;IAED,kCAAkC;IAClC,uDAAuD;IACvD,MAAM,QAAQ,GAAG,eAAe,EAAE,kBAAkB,CAAC;IAErD,uCAAuC;IACvC,WAAW;IACX,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,gBAAgB,UAAU,kBAAkB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAE7I,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAElE,SAAS,CAAC,QAAQ,CAAC;YACjB,eAAe;YACf,WAAW,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAC3B,OAAO,IAAI,6CAAqB,CAAC;oBAC/B,QAAQ,EAAE,QAAS;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,kCAAkC;YAClC,cAAc,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAsB,EAAE,EAAE;gBACjE,OAAO,IAAI,+CAAsB,CAAC;oBAChC,QAAQ,EAAE,WAAY;oBACtB,UAAU,EAAE,UAAU;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,mBAAmB;YACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAClC,OAAO,IAAI,uDAA0B,CAAC;oBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,uCAAuC;YACvC,mBAAmB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAsB,EAAE,EAAE;gBAClH,6DAA6D;gBAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpE,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,QAAQ,EAAE,kBAAmB;oBAC7B,cAAc,EAAE,cAAe;oBAC/B,cAAc,EAAE,mBAAmB;oBACnC,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,2CAA2C;YAC3C,gBAAgB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAsB,EAAE,EAAE;gBAClG,yCAAyC;gBACzC,MAAM,cAAc,GAAG,mBAAmB,IAAI;oBAC5C,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACvB,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAmB,CAAA;oBACvE,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;iBACX,CAAC;gBAEpB,OAAO,IAAI,mCAAgB,CAAC;oBAC1B,UAAU,EAAE,UAAW;oBACvB,WAAW,EAAE,WAAY;oBACzB,cAAc;oBACd,YAAY,EAAE,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0DAA0D,UAAU,EAAE,CAAC,CAAC;QACpF,yDAAyD;IAC3D,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,wCAAwC;IACxC,MAAM,yBAAyB,GAAG,gBAAgB,IAAI,4BAA4B,CAAC;IACnF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtG,gDAAgD;IAChD,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAyC,qBAAqB;QACpF,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,iBAAiB;YACjB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,MAAM,CAAC;IAEb,SAAS,CAAC,QAAQ,CAAC;QACjB,eAAe,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAC/B,OAAO,IAAI,iCAAe,CAAC;gBACzB,gBAAgB,EAAE,yBAAyB;gBAC3C,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,eAAe;gBACzC,SAAS,EAAE,SAAU;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,mBAAmB;QACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAClC,OAAO,IAAI,uDAA0B,CAAC;gBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,6BAA6B;QAC7B,WAAW,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,eAAe,EAAE,kBAAkB,EAAsB,EAAE,EAAE;YACpF,OAAO,IAAI,yBAAW,CAAC;gBACrB,MAAM,EAAE,eAAgB;gBACxB,QAAQ,EAAE,kBAAmB;gBAC7B,SAAS,EAAE,SAAS,IAAI,MAAM,IAAI,MAAM;gBACxC,SAAS,EAAE,kBAAkB;gBAC7B,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,kBAAkB;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,+BAA+B,yBAAyB,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,qBAAqB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,KAAa;IAC5C,4BAA4B;IAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Local 模式服务注册\n *\n * Local 模式有两种配置：\n * - 托管式 (managed): 配置 XPOD_NODE_TOKEN，自动连接 Cloud 获取身份服务和 DDNS\n * - 独立式 (standalone): 不配置 XPOD_NODE_TOKEN，用户自己配置 CSS_BASE_URL 和 IdP\n */\n\nimport { asFunction, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\nimport { SubdomainClient } from '../../subdomain/SubdomainClient';\nimport { LocalTunnelProvider } from '../../tunnel/LocalTunnelProvider';\nimport { SakuraFrpTunnelProvider } from '../../tunnel/SakuraFrpTunnelProvider';\nimport { CloudflareDnsProvider } from '../../dns/cloudflare/CloudflareDnsProvider';\nimport { SubdomainService } from '../../subdomain/SubdomainService';\nimport { EdgeNodeDnsCoordinator } from '../../edge/EdgeNodeDnsCoordinator';\nimport { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';\nimport { LocalNetworkManager } from '../../edge/LocalNetworkManager';\nimport { DdnsManager } from '../../edge/DdnsManager';\nimport type { TunnelProvider, TunnelStatus } from '../../tunnel/TunnelProvider';\n\n/**\n * 注册 Local 模式专属服务\n */\nexport function registerLocalServices(\n  container: AwilixContainer<ApiContainerCradle>,\n): void {\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  const {\n    cloudApiEndpoint,\n    nodeId,\n    nodeToken,\n    cloudflareTunnelToken,\n    sakuraTunnelToken,\n    subdomain: subdomainConfig,\n  } = config;\n\n  // 1. 注册 Tunnel Provider (优先 Cloudflare，其次 SakuraFRP)\n  if (cloudflareTunnelToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new LocalTunnelProvider({\n          tunnelToken: cloudflareTunnelToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (CLOUDFLARE_TUNNEL_TOKEN configured)');\n  } else if (sakuraTunnelToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new SakuraFrpTunnelProvider({\n          token: sakuraTunnelToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (SAKURA_TUNNEL_TOKEN configured)');\n  }\n\n  // 2. 自适应 DNS 管理 (Self-Hosted DNS)\n  // 如果配置了 Cloudflare API Token 和 Base Domain，启用本地 DNS 管理\n  const apiToken = subdomainConfig?.cloudflareApiToken;\n\n  // 在 Local 模式下，强制使用 CSS_BASE_URL 作为域名来源\n  // 简化用户配置心智\n  let baseDomain: string | undefined;\n  if (process.env.CSS_BASE_URL) {\n    try {\n      const url = new URL(process.env.CSS_BASE_URL);\n      baseDomain = url.hostname;\n    } catch {\n      console.warn('[Local] Invalid CSS_BASE_URL, cannot derive domain for DNS management');\n    }\n  }\n\n  // DEBUG: 打印变量状态\n  console.log(`[Local] Debug: apiToken=${apiToken ? '***' : 'undefined'}, baseDomain=${baseDomain}, CSS_BASE_URL=${process.env.CSS_BASE_URL}`);\n\n  if (apiToken && baseDomain) {\n    console.log('[Local] Self-hosted DNS mode detected (IPv6 Ready)');\n\n    container.register({\n      // DNS Provider\n      dnsProvider: asFunction(() => {\n        return new CloudflareDnsProvider({\n          apiToken: apiToken!,\n        });\n      }).singleton(),\n\n      // DNS Coordinator (DnsMaintainer)\n      dnsCoordinator: asFunction(({ dnsProvider }: ApiContainerCradle) => {\n        return new EdgeNodeDnsCoordinator({\n          provider: dnsProvider!,\n          rootDomain: baseDomain,\n        });\n      }).singleton(),\n\n      // Network Detector\n      capabilityDetector: asFunction(() => {\n        return new EdgeNodeCapabilityDetector({\n          dynamicDetection: { enableNetworkDetection: true },\n        });\n      }).singleton(),\n\n      // Local Network Manager (Orchestrator)\n      localNetworkManager: asFunction(({ capabilityDetector, dnsCoordinator, localTunnelProvider }: ApiContainerCradle) => {\n        // Tunnel 应该指向 Gateway 端口 (通常是 3000)，而不是 API Server 端口 (3004)\n        const mainPort = parseInt(process.env.XPOD_MAIN_PORT || '3000', 10);\n        return new LocalNetworkManager({\n          detector: capabilityDetector!,\n          dnsCoordinator: dnsCoordinator!,\n          tunnelProvider: localTunnelProvider,\n          localPort: mainPort,\n        });\n      }).singleton(),\n\n      // Subdomain Service (Keep for API support)\n      subdomainService: asFunction(({ dnsProvider, localTunnelProvider, nodeRepo }: ApiContainerCradle) => {\n        // 如果没有配置 Tunnel Token，使用一个 Mock Provider\n        const tunnelProvider = localTunnelProvider ?? {\n          name: 'noop',\n          setup: async () => { throw new Error('Tunnel not configured'); },\n          start: async () => { throw new Error('Tunnel not configured'); },\n          stop: async () => {},\n          cleanup: async () => {},\n          getStatus: () => ({ running: false, connected: false } as TunnelStatus),\n          getEndpoint: () => undefined,\n        } as TunnelProvider;\n\n        return new SubdomainService({\n          baseDomain: baseDomain!,\n          dnsProvider: dnsProvider!,\n          tunnelProvider,\n          edgeNodeRepo: nodeRepo,\n        });\n      }).singleton(),\n    });\n    console.log(`[Local] Local DNS maintenance services registered for: ${baseDomain}`);\n    // 继续进行后续逻辑，不要 return，因为用户可能既用了自管 DNS 又开启了 Managed Client\n  }\n\n  // 独立式：没有配置 Node Token，用户自己管理域名和 IdP\n  if (!nodeToken) {\n    console.log('[Local] Standalone mode (no XPOD_NODE_TOKEN)');\n    console.log('[Local] User manages DNS and IdP externally');\n    if (cloudflareTunnelToken) {\n      console.log('[Local] Will start cloudflared with provided CLOUDFLARE_TUNNEL_TOKEN');\n    }\n    return;\n  }\n\n  // 托管式：有 Node Token，连接 Cloud\n  // Cloud API endpoint 可以从 Token 解析或使用默认值\n  const effectiveCloudApiEndpoint = cloudApiEndpoint || 'https://pods.undefineds.co';\n  const effectiveLocalPort = parseInt(process.env.XPOD_MAIN_PORT || process.env.CSS_PORT || '3000', 10);\n\n  // 从 Node Token 解析用户名作为子域名 (格式: username:secret)\n  const subdomain = parseSubdomainFromToken(nodeToken);\n  const tunnelProviderHint: 'cloudflare' | 'sakura_frp' | 'none' = cloudflareTunnelToken\n    ? 'cloudflare'\n    : sakuraTunnelToken\n      ? 'sakura_frp'\n      : 'none';\n\n  container.register({\n    subdomainClient: asFunction(() => {\n      return new SubdomainClient({\n        cloudApiEndpoint: effectiveCloudApiEndpoint,\n        nodeId: nodeId || 'auto', // 可以从 Token 解析\n        nodeToken: nodeToken!,\n      });\n    }).singleton(),\n\n    // 注册网络检测器 (如果尚未注册)\n    capabilityDetector: asFunction(() => {\n      return new EdgeNodeCapabilityDetector({\n        dynamicDetection: { enableNetworkDetection: true },\n      });\n    }).singleton(),\n\n    // DDNS Manager: 自动分配和更新 DDNS\n    ddnsManager: asFunction(({ subdomainClient, capabilityDetector }: ApiContainerCradle) => {\n        return new DdnsManager({\n          client: subdomainClient!,\n          detector: capabilityDetector!,\n          subdomain: subdomain || nodeId || 'auto',\n          localPort: effectiveLocalPort,\n          autoAllocate: true,\n          tunnelProvider: tunnelProviderHint,\n        });\n      }).singleton(),\n  });\n\n  console.log('[Local] Managed mode, SubdomainClient and DdnsManager registered');\n  console.log(`[Local] Cloud API endpoint: ${effectiveCloudApiEndpoint}`);\n  if (subdomain) {\n    console.log(`[Local] DDNS subdomain: ${subdomain}`);\n  }\n  if (config.oidcIssuer) {\n    console.log(`[Local] Using Cloud IdP: ${config.oidcIssuer}`);\n  }\n\n  if (!cloudflareTunnelToken && !sakuraTunnelToken) {\n    console.log('[Local] Note: No tunnel token configured, assuming direct network access');\n  }\n}\n\n/**\n * 从 Node Token 解析子域名/用户名\n * Token 格式: username:secret 或 base64 编码\n */\nfunction parseSubdomainFromToken(token: string): string | undefined {\n  // 尝试直接解析 username:secret 格式\n  if (token.includes(':')) {\n    const [username] = token.split(':');\n    if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n      return username;\n    }\n  }\n\n  // 尝试 base64 解码\n  try {\n    const decoded = Buffer.from(token, 'base64').toString('utf8');\n    if (decoded.includes(':')) {\n      const [username] = decoded.split(':');\n      if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n        return username;\n      }\n    }\n  } catch {\n    // ignore\n  }\n\n  return undefined;\n}\n"]}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/api/container/local.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAmBH,sDAiLC;AAlMD,mCAA0D;AAG1D,qEAAkE;AAClE,0EAAuE;AACvE,kFAA+E;AAC/E,sFAAmF;AACnF,uEAAoE;AACpE,8EAA2E;AAC3E,sFAAmF;AACnF,wEAAqE;AACrE,wDAAqD;AAGrD;;GAEG;AACH,SAAgB,qBAAqB,CACnC,SAA8C;IAE9C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,MAAM,EACJ,gBAAgB,EAChB,MAAM,EACN,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EAAE,eAAe,GAC3B,GAAG,MAAM,CAAC;IAEX,qDAAqD;IACrD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,WAAW,EAAE,qBAAqB;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,iBAAiB,EAAE,CAAC;QAC7B,SAAS,CAAC,QAAQ,CAAC;YACjB,mBAAmB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBACnC,OAAO,IAAI,iDAAuB,CAAC;oBACjC,KAAK,EAAE,iBAAiB;iBACzB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IACrF,CAAC;IAED,kCAAkC;IAClC,uDAAuD;IACvD,MAAM,QAAQ,GAAG,eAAe,EAAE,kBAAkB,CAAC;IAErD,uCAAuC;IACvC,WAAW;IACX,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,gBAAgB,UAAU,kBAAkB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAE7I,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAElE,SAAS,CAAC,QAAQ,CAAC;YACjB,eAAe;YACf,WAAW,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAC3B,OAAO,IAAI,6CAAqB,CAAC;oBAC/B,QAAQ,EAAE,QAAS;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,kCAAkC;YAClC,cAAc,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAsB,EAAE,EAAE;gBACjE,OAAO,IAAI,+CAAsB,CAAC;oBAChC,QAAQ,EAAE,WAAY;oBACtB,UAAU,EAAE,UAAU;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,mBAAmB;YACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAClC,OAAO,IAAI,uDAA0B,CAAC;oBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,uCAAuC;YACvC,mBAAmB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAsB,EAAE,EAAE;gBAC7F,OAAO,IAAI,yCAAmB,CAAC;oBAC7B,QAAQ,EAAE,kBAAmB;oBAC7B,cAAc,EAAE,cAAe;iBAChC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;YAEd,2CAA2C;YAC3C,gBAAgB,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAsB,EAAE,EAAE;gBAClG,yCAAyC;gBACzC,MAAM,cAAc,GAAG,mBAAmB,IAAI;oBAC5C,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACvB,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAmB,CAAA;oBACvE,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;iBACX,CAAC;gBAEpB,OAAO,IAAI,mCAAgB,CAAC;oBAC1B,UAAU,EAAE,UAAW;oBACvB,WAAW,EAAE,WAAY;oBACzB,cAAc;oBACd,YAAY,EAAE,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0DAA0D,UAAU,EAAE,CAAC,CAAC;QACpF,yDAAyD;IAC3D,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,wCAAwC;IACxC,MAAM,yBAAyB,GAAG,gBAAgB,IAAI,4BAA4B,CAAC;IACnF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtG,gDAAgD;IAChD,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAyC,qBAAqB;QACpF,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,iBAAiB;YACjB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,MAAM,CAAC;IAEb,SAAS,CAAC,QAAQ,CAAC;QACjB,eAAe,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAC/B,OAAO,IAAI,iCAAe,CAAC;gBACzB,gBAAgB,EAAE,yBAAyB;gBAC3C,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,eAAe;gBACzC,SAAS,EAAE,SAAU;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,mBAAmB;QACnB,kBAAkB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAClC,OAAO,IAAI,uDAA0B,CAAC;gBACpC,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,6BAA6B;QAC7B,WAAW,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,eAAe,EAAE,kBAAkB,EAAsB,EAAE,EAAE;YACpF,OAAO,IAAI,yBAAW,CAAC;gBACrB,MAAM,EAAE,eAAgB;gBACxB,QAAQ,EAAE,kBAAmB;gBAC7B,SAAS,EAAE,SAAS,IAAI,MAAM,IAAI,MAAM;gBACxC,SAAS,EAAE,kBAAkB;gBAC7B,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,kBAAkB;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,+BAA+B,yBAAyB,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,qBAAqB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,KAAa;IAC5C,4BAA4B;IAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Local 模式服务注册\n *\n * Local 模式有两种配置：\n * - 托管式 (managed): 配置 XPOD_NODE_TOKEN，自动连接 Cloud 获取身份服务和 DDNS\n * - 独立式 (standalone): 不配置 XPOD_NODE_TOKEN，用户自己配置 CSS_BASE_URL 和 IdP\n */\n\nimport { asFunction, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\nimport { SubdomainClient } from '../../subdomain/SubdomainClient';\nimport { LocalTunnelProvider } from '../../tunnel/LocalTunnelProvider';\nimport { SakuraFrpTunnelProvider } from '../../tunnel/SakuraFrpTunnelProvider';\nimport { CloudflareDnsProvider } from '../../dns/cloudflare/CloudflareDnsProvider';\nimport { SubdomainService } from '../../subdomain/SubdomainService';\nimport { EdgeNodeDnsCoordinator } from '../../edge/EdgeNodeDnsCoordinator';\nimport { EdgeNodeCapabilityDetector } from '../../edge/EdgeNodeCapabilityDetector';\nimport { LocalNetworkManager } from '../../edge/LocalNetworkManager';\nimport { DdnsManager } from '../../edge/DdnsManager';\nimport type { TunnelProvider, TunnelStatus } from '../../tunnel/TunnelProvider';\n\n/**\n * 注册 Local 模式专属服务\n */\nexport function registerLocalServices(\n  container: AwilixContainer<ApiContainerCradle>,\n): void {\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  const {\n    cloudApiEndpoint,\n    nodeId,\n    nodeToken,\n    cloudflareTunnelToken,\n    sakuraTunnelToken,\n    subdomain: subdomainConfig,\n  } = config;\n\n  // 1. 注册 Tunnel Provider (优先 Cloudflare，其次 SakuraFRP)\n  if (cloudflareTunnelToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new LocalTunnelProvider({\n          tunnelToken: cloudflareTunnelToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (CLOUDFLARE_TUNNEL_TOKEN configured)');\n  } else if (sakuraTunnelToken) {\n    container.register({\n      localTunnelProvider: asFunction(() => {\n        return new SakuraFrpTunnelProvider({\n          token: sakuraTunnelToken,\n        });\n      }).singleton(),\n    });\n    console.log('[Local] Tunnel provider registered (SAKURA_TUNNEL_TOKEN configured)');\n  }\n\n  // 2. 自适应 DNS 管理 (Self-Hosted DNS)\n  // 如果配置了 Cloudflare API Token 和 Base Domain，启用本地 DNS 管理\n  const apiToken = subdomainConfig?.cloudflareApiToken;\n\n  // 在 Local 模式下，强制使用 CSS_BASE_URL 作为域名来源\n  // 简化用户配置心智\n  let baseDomain: string | undefined;\n  if (process.env.CSS_BASE_URL) {\n    try {\n      const url = new URL(process.env.CSS_BASE_URL);\n      baseDomain = url.hostname;\n    } catch {\n      console.warn('[Local] Invalid CSS_BASE_URL, cannot derive domain for DNS management');\n    }\n  }\n\n  // DEBUG: 打印变量状态\n  console.log(`[Local] Debug: apiToken=${apiToken ? '***' : 'undefined'}, baseDomain=${baseDomain}, CSS_BASE_URL=${process.env.CSS_BASE_URL}`);\n\n  if (apiToken && baseDomain) {\n    console.log('[Local] Self-hosted DNS mode detected (IPv6 Ready)');\n\n    container.register({\n      // DNS Provider\n      dnsProvider: asFunction(() => {\n        return new CloudflareDnsProvider({\n          apiToken: apiToken!,\n        });\n      }).singleton(),\n\n      // DNS Coordinator (DnsMaintainer)\n      dnsCoordinator: asFunction(({ dnsProvider }: ApiContainerCradle) => {\n        return new EdgeNodeDnsCoordinator({\n          provider: dnsProvider!,\n          rootDomain: baseDomain,\n        });\n      }).singleton(),\n\n      // Network Detector\n      capabilityDetector: asFunction(() => {\n        return new EdgeNodeCapabilityDetector({\n          dynamicDetection: { enableNetworkDetection: true },\n        });\n      }).singleton(),\n\n      // Local Network Manager (Orchestrator)\n      localNetworkManager: asFunction(({ capabilityDetector, dnsCoordinator }: ApiContainerCradle) => {\n        return new LocalNetworkManager({\n          detector: capabilityDetector!,\n          dnsCoordinator: dnsCoordinator!,\n        });\n      }).singleton(),\n\n      // Subdomain Service (Keep for API support)\n      subdomainService: asFunction(({ dnsProvider, localTunnelProvider, nodeRepo }: ApiContainerCradle) => {\n        // 如果没有配置 Tunnel Token，使用一个 Mock Provider\n        const tunnelProvider = localTunnelProvider ?? {\n          name: 'noop',\n          setup: async () => { throw new Error('Tunnel not configured'); },\n          start: async () => { throw new Error('Tunnel not configured'); },\n          stop: async () => {},\n          cleanup: async () => {},\n          getStatus: () => ({ running: false, connected: false } as TunnelStatus),\n          getEndpoint: () => undefined,\n        } as TunnelProvider;\n\n        return new SubdomainService({\n          baseDomain: baseDomain!,\n          dnsProvider: dnsProvider!,\n          tunnelProvider,\n          edgeNodeRepo: nodeRepo,\n        });\n      }).singleton(),\n    });\n    console.log(`[Local] Local DNS maintenance services registered for: ${baseDomain}`);\n    // 继续进行后续逻辑，不要 return，因为用户可能既用了自管 DNS 又开启了 Managed Client\n  }\n\n  // 独立式：没有配置 Node Token，用户自己管理域名和 IdP\n  if (!nodeToken) {\n    console.log('[Local] Standalone mode (no XPOD_NODE_TOKEN)');\n    console.log('[Local] User manages DNS and IdP externally');\n    if (cloudflareTunnelToken) {\n      console.log('[Local] Will start cloudflared with provided CLOUDFLARE_TUNNEL_TOKEN');\n    }\n    return;\n  }\n\n  // 托管式：有 Node Token，连接 Cloud\n  // Cloud API endpoint 可以从 Token 解析或使用默认值\n  const effectiveCloudApiEndpoint = cloudApiEndpoint || 'https://pods.undefineds.co';\n  const effectiveLocalPort = parseInt(process.env.XPOD_MAIN_PORT || process.env.CSS_PORT || '3000', 10);\n\n  // 从 Node Token 解析用户名作为子域名 (格式: username:secret)\n  const subdomain = parseSubdomainFromToken(nodeToken);\n  const tunnelProviderHint: 'cloudflare' | 'sakura_frp' | 'none' = cloudflareTunnelToken\n    ? 'cloudflare'\n    : sakuraTunnelToken\n      ? 'sakura_frp'\n      : 'none';\n\n  container.register({\n    subdomainClient: asFunction(() => {\n      return new SubdomainClient({\n        cloudApiEndpoint: effectiveCloudApiEndpoint,\n        nodeId: nodeId || 'auto', // 可以从 Token 解析\n        nodeToken: nodeToken!,\n      });\n    }).singleton(),\n\n    // 注册网络检测器 (如果尚未注册)\n    capabilityDetector: asFunction(() => {\n      return new EdgeNodeCapabilityDetector({\n        dynamicDetection: { enableNetworkDetection: true },\n      });\n    }).singleton(),\n\n    // DDNS Manager: 自动分配和更新 DDNS\n    ddnsManager: asFunction(({ subdomainClient, capabilityDetector }: ApiContainerCradle) => {\n        return new DdnsManager({\n          client: subdomainClient!,\n          detector: capabilityDetector!,\n          subdomain: subdomain || nodeId || 'auto',\n          localPort: effectiveLocalPort,\n          autoAllocate: true,\n          tunnelProvider: tunnelProviderHint,\n        });\n      }).singleton(),\n  });\n\n  console.log('[Local] Managed mode, SubdomainClient and DdnsManager registered');\n  console.log(`[Local] Cloud API endpoint: ${effectiveCloudApiEndpoint}`);\n  if (subdomain) {\n    console.log(`[Local] DDNS subdomain: ${subdomain}`);\n  }\n  if (config.oidcIssuer) {\n    console.log(`[Local] Using Cloud IdP: ${config.oidcIssuer}`);\n  }\n\n  if (!cloudflareTunnelToken && !sakuraTunnelToken) {\n    console.log('[Local] Note: No tunnel token configured, assuming direct network access');\n  }\n}\n\n/**\n * 从 Node Token 解析子域名/用户名\n * Token 格式: username:secret 或 base64 编码\n */\nfunction parseSubdomainFromToken(token: string): string | undefined {\n  // 尝试直接解析 username:secret 格式\n  if (token.includes(':')) {\n    const [username] = token.split(':');\n    if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n      return username;\n    }\n  }\n\n  // 尝试 base64 解码\n  try {\n    const decoded = Buffer.from(token, 'base64').toString('utf8');\n    if (decoded.includes(':')) {\n      const [username] = decoded.split(':');\n      if (username && /^[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(username)) {\n        return username;\n      }\n    }\n  } catch {\n    // ignore\n  }\n\n  return undefined;\n}\n"]}

package/dist/api/container/routes.js

@@ -49,6 +49,7 @@ const QuotaHandler_1 = require("../handlers/QuotaHandler");
 const UsageHandler_1 = require("../handlers/UsageHandler");
 const UsageRepository_1 = require("../../storage/quota/UsageRepository");
 const DrizzleQuotaService_1 = require("../../quota/DrizzleQuotaService");
+const LocalPodProvisioningService_1 = require("../../provision/LocalPodProvisioningService");
 const path = __importStar(require("node:path"));
 const runtime_1 = require("../../runtime");
 /**
@@ -228,11 +229,25 @@ function registerLocalRoutes(container, server) {
         // serviceToken 验证：从 SP 配置中读取
         const expectedServiceToken = process.env.XPOD_SERVICE_TOKEN;
         if (expectedServiceToken) {
+            const config = container.resolve('config');
+            const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';
+            const sparqlEndpoint = process.env.CSS_SPARQL_ENDPOINT || process.env.SPARQL_ENDPOINT;
+            const identityDbUrl = process.env.CSS_IDENTITY_DB_URL || process.env.DATABASE_URL;
+            const provisioningService = sparqlEndpoint && identityDbUrl
+                ? new LocalPodProvisioningService_1.LocalPodProvisioningService({
+                    baseUrl,
+                    rootDir,
+                    sparqlEndpoint,
+                    identityDbUrl,
+                    oidcIssuer: process.env.CSS_OIDC_ISSUER ?? process.env.oidcIssuer ?? config.oidcIssuer,
+                })
+                : undefined;
             (0, PodManagementHandler_1.registerPodManagementRoutes)(server, {
                 rootDir,
                 verifyServiceToken: async (token) => token === expectedServiceToken,
+                provisioningService,
             });
-            console.log('[Local] Pod provision routes registered (/provision/pods)');
+            console.log(`[Local] Pod provision routes registered (/provision/pods, ${provisioningService ? 'css-compatible' : 'directory-only'})`);
         }
         else {
             console.log('[Local] Pod provision routes not registered (XPOD_SERVICE_TOKEN not configured)');

package/dist/api/container/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/api/container/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAkCH,wCAgBC;AA5CD,6EAAiF;AACjF,yDAA6D;AAC7D,yDAA6D;AAC7D,6DAAiE;AACjE,mEAAuE;AACvE,+EAAmF;AACnF,yEAA6E;AAC7E,yDAA6D;AAC7D,+DAAmE;AACnE,mEAAuE;AACvE,mEAAuE;AACvE,2DAA+D;AAC/D,mEAAuE;AACvE,iFAAqF;AACrF,mEAAqG;AACrG,2EAA+E;AAC/E,2DAA+D;AAC/D,2DAA+D;AAG/D,yEAAsE;AACtE,yEAAsE;AACtE,gDAAkC;AAClC,2CAA6C;AAE7C;;GAEG;AACH,SAAgB,cAAc,CAAC,SAA8C;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAc,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,WAAW;IACX,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,OAAO;IACP,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAiB;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAY,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAkC,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,IAAA,oDAA4B,EAAC,MAAM,EAAE;QACnC,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;QACvF,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;KAChG,CAAC,CAAC;IACH,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,IAAA,sCAAqB,EAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzD,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,yCAAmB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,IAAI,iCAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAA2C,CAAC;QACzG,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,WAAW,EAAE,CAAC;YAChB,IAAA,gDAA0B,EAAC,MAAM,EAAE;gBACjC,WAAW,EAAE,WAAkB;gBAC/B,aAAa,EAAE,aAAoB;aACpC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QAEjE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC9D,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAA,gCAAkB,EAAC,MAAM,EAAE;oBACzB,QAAQ,EAAE,QAAe;oBACzB,WAAW,EAAE,WAAkB;oBAC/B,aAAa,EAAE,iBAAiB;iBACjC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,iBAAiB,GAAG,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACnF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAC/F,IAAA,0CAAuB,EAAC,MAAM,EAAE;YAC9B,UAAU,EAAE,QAAQ;YACpB,QAAQ;YACR,WAAW;YACX,cAAc;YACd,OAAO;YACP,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,IAAA,wDAA8B,EAAC,MAAM,CAAC,CAAC;IAEvC,sBAAsB;IACtB,IAAA,kCAAmB,EAAC,MAAM,CAAC,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAA0C,CAAC;QACtG,IAAI,eAAe,EAAE,CAAC;YACpB,IAAA,sDAA6B,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;QAC3D,6BAA6B;QAC7B,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE5D,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAA,kDAA2B,EAAC,MAAM,EAAE;gBAClC,OAAO;gBACP,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,oBAAoB;aAC5E,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,IAAA,+CAA4B,EAAC,MAAM,EAAE;YACnC,QAAQ,EAAE,MAAM,CAAC,gBAAgB;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB;SAC3D,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kDAAkD,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC","sourcesContent":["/**\n * 路由注册\n *\n * 根据容器中的服务注册 API 路由\n */\n\nimport type { AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport type { ApiServer } from '../ApiServer';\n\nimport { registerEdgeNodeSignalRoutes } from '../handlers/EdgeNodeSignalHandler';\nimport { registerNodeRoutes } from '../handlers/NodeHandler';\nimport { registerChatRoutes } from '../handlers/ChatHandler';\nimport { registerApiKeyRoutes } from '../handlers/ApiKeyHandler';\nimport { registerSubdomainRoutes } from '../handlers/SubdomainHandler';\nimport { registerSubdomainClientRoutes } from '../handlers/SubdomainClientHandler';\nimport { registerWebIdProfileRoutes } from '../handlers/WebIdProfileHandler';\nimport { registerDdnsRoutes } from '../handlers/DdnsHandler';\nimport { registerChatKitRoutes } from '../handlers/ChatKitHandler';\nimport { registerChatKitV1Routes } from '../handlers/ChatKitV1Handler';\nimport { registerDashboardRoutes } from '../handlers/DashboardHandler';\nimport { registerAdminRoutes } from '../handlers/AdminHandler';\nimport { registerAdminDdnsRoutes } from '../handlers/AdminDdnsHandler';\nimport { registerLinxCapabilitiesRoutes } from '../handlers/LinxCapabilitiesHandler';\nimport { registerProvisionRoutes, registerProvisionStatusRoute } from '../handlers/ProvisionHandler';\nimport { registerPodManagementRoutes } from '../handlers/PodManagementHandler';\nimport { registerQuotaRoutes } from '../handlers/QuotaHandler';\nimport { registerUsageRoutes } from '../handlers/UsageHandler';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\nimport { UsageRepository } from '../../storage/quota/UsageRepository';\nimport { DrizzleQuotaService } from '../../quota/DrizzleQuotaService';\nimport * as path from 'node:path';\nimport { PACKAGE_ROOT } from '../../runtime';\n\n/**\n * 注册所有 API 路由\n */\nexport function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void {\n  const server = container.resolve('apiServer') as ApiServer;\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  // 公共健康检查端点\n  registerHealthRoutes(server);\n\n  // 共享路由\n  registerSharedRoutes(container, server);\n\n  // 根据 edition 注册专属路由\n  if (config.edition === 'cloud') {\n    registerCloudRoutes(container, server);\n  } else {\n    registerLocalRoutes(container, server);\n  }\n}\n\n/**\n * 健康检查路由\n */\nfunction registerHealthRoutes(server: ApiServer): void {\n  server.get('/health', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ok' }));\n  }, { public: true });\n\n  server.get('/ready', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ready' }));\n  }, { public: true });\n\n  // Dashboard 静态资源\n  const staticDir = path.resolve(PACKAGE_ROOT, 'static/dashboard');\n  registerDashboardRoutes(server, { staticDir });\n}\n\n/**\n * 共享路由 (cloud 和 local 都有)\n */\nfunction registerSharedRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n  const apiKeyStore = container.resolve('apiKeyStore') as DrizzleClientCredentialsStore;\n  const chatService = container.resolve('chatService');\n  const chatKitService = container.resolve('chatKitService');\n  const chatKitStore = container.resolve('chatKitStore');\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  registerEdgeNodeSignalRoutes(server, {\n    repository: nodeRepo,\n    dnsCoordinator: container.resolve('dnsCoordinator', { allowUnregistered: true }) as any,\n    healthProbeService: container.resolve('healthProbeService', { allowUnregistered: true }) as any,\n  });\n  registerNodeRoutes(server, { repository: nodeRepo });\n  registerApiKeyRoutes(server, { store: apiKeyStore });\n  registerChatRoutes(server, { chatService });\n  registerChatKitRoutes(server, { chatKitService });\n  registerChatKitV1Routes(server, { store: chatKitStore });\n\n  // Quota & Usage API (Business 对接)\n  try {\n    const quotaService = new DrizzleQuotaService({ identityDbUrl: config.databaseUrl });\n    const usageRepo = new UsageRepository(container.resolve('db'));\n    registerQuotaRoutes(server, { quotaService, usageRepo });\n    registerUsageRoutes(server, { usageRepo });\n    console.log('[Shared] Quota & Usage routes registered');\n  } catch (error) {\n    console.log(`[Shared] Quota & Usage routes not registered: ${error}`);\n  }\n}\n\n/**\n * Cloud 模式专属路由\n */\nfunction registerCloudRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名管理 API (需要 SubdomainService)\n  try {\n    const subdomainService = container.resolve('subdomainService') as ApiContainerCradle['subdomainService'];\n    if (subdomainService) {\n      registerSubdomainRoutes(server, { subdomainService });\n      console.log('[Cloud] Subdomain routes registered');\n    }\n  } catch {\n    console.log('[Cloud] Subdomain routes not registered (service not available)');\n  }\n\n  // WebID Profile 托管服务\n  try {\n    const profileRepo = container.resolve('webIdProfileRepo', { allowUnregistered: true });\n    const podLookupRepo = container.resolve('podLookupRepo', { allowUnregistered: true });\n    if (profileRepo) {\n      registerWebIdProfileRoutes(server, {\n        profileRepo: profileRepo as any,\n        podLookupRepo: podLookupRepo as any,\n      });\n      console.log('[Cloud] WebID Profile routes registered');\n    }\n  } catch {\n    console.log('[Cloud] WebID Profile routes not registered (repo not available)');\n  }\n\n  // DDNS 服务\n  try {\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const config = container.resolve('config') as ApiContainerConfig;\n\n    if (ddnsRepo) {\n      const baseStorageDomain = config.subdomain?.baseStorageDomain;\n      if (baseStorageDomain) {\n        registerDdnsRoutes(server, {\n          ddnsRepo: ddnsRepo as any,\n          dnsProvider: dnsProvider as any,\n          defaultDomain: baseStorageDomain,\n        });\n        console.log(`[Cloud] DDNS routes registered (domain: ${baseStorageDomain})`);\n      } else {\n        console.log('[Cloud] DDNS routes not registered (no CSS_BASE_STORAGE_DOMAIN)');\n      }\n    }\n  } catch {\n    console.log('[Cloud] DDNS routes not registered (repo not available)');\n  }\n\n  // SP Provision API (SP 注册)\n  try {\n    const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n    const config = container.resolve('config') as ApiContainerConfig;\n    const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n    const baseStorageDomain = config.subdomain?.baseStorageDomain;\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true }) as any;\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true }) as any;\n    const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true }) as any;\n    registerProvisionRoutes(server, {\n      repository: nodeRepo,\n      ddnsRepo,\n      dnsProvider,\n      tunnelProvider,\n      baseUrl,\n      baseStorageDomain,\n    });\n    console.log(`[Cloud] Provision routes registered${baseStorageDomain ? ` (baseStorageDomain: ${baseStorageDomain})` : ''}`);\n  } catch {\n    console.log('[Cloud] Provision routes not registered (dependencies not available)');\n  }\n}\n\n/**\n * Local 模式专属路由\n */\nfunction registerLocalRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  registerLinxCapabilitiesRoutes(server);\n\n  // Admin API (配置管理、重启)\n  registerAdminRoutes(server);\n\n  // DDNS status (托管式 Local 模式)\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    registerAdminDdnsRoutes(server, { ddnsManager });\n  } catch {\n    // ignore\n  }\n\n  // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)\n  try {\n    const subdomainClient = container.resolve('subdomainClient') as ApiContainerCradle['subdomainClient'];\n    if (subdomainClient) {\n      registerSubdomainClientRoutes(server, { subdomainClient });\n      console.log('[Local] Subdomain client routes registered');\n    }\n  } catch {\n    console.log('[Local] Subdomain client routes not registered (client not available)');\n  }\n\n  // Pod Provision API (SP 端，供 Cloud 回调创建 Pod)\n  try {\n    // rootDir: CSS 数据目录，默认 ./data\n    const rootDir = process.env.CSS_ROOT_FILE_PATH || './data';\n    // serviceToken 验证：从 SP 配置中读取\n    const expectedServiceToken = process.env.XPOD_SERVICE_TOKEN;\n\n    if (expectedServiceToken) {\n      registerPodManagementRoutes(server, {\n        rootDir,\n        verifyServiceToken: async (token: string) => token === expectedServiceToken,\n      });\n      console.log('[Local] Pod provision routes registered (/provision/pods)');\n    } else {\n      console.log('[Local] Pod provision routes not registered (XPOD_SERVICE_TOKEN not configured)');\n    }\n  } catch (error) {\n    console.log(`[Local] Pod provision routes not registered: ${error}`);\n  }\n\n  // SP 状态查询 (供 Linx 查询 SP 配置状态)\n  try {\n    const config = container.resolve('config') as ApiContainerConfig;\n    registerProvisionStatusRoute(server, {\n      cloudUrl: config.cloudApiEndpoint,\n      nodeId: config.nodeId,\n      cloudBaseUrl: config.oidcIssuer || config.cloudApiEndpoint,\n    });\n    console.log('[Local] Provision status route registered (/provision/status)');\n  } catch (error) {\n    console.log(`[Local] Provision status route not registered: ${error}`);\n  }\n}\n"]}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/api/container/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAmCH,wCAgBC;AA7CD,6EAAiF;AACjF,yDAA6D;AAC7D,yDAA6D;AAC7D,6DAAiE;AACjE,mEAAuE;AACvE,+EAAmF;AACnF,yEAA6E;AAC7E,yDAA6D;AAC7D,+DAAmE;AACnE,mEAAuE;AACvE,mEAAuE;AACvE,2DAA+D;AAC/D,mEAAuE;AACvE,iFAAqF;AACrF,mEAAqG;AACrG,2EAA+E;AAC/E,2DAA+D;AAC/D,2DAA+D;AAG/D,yEAAsE;AACtE,yEAAsE;AACtE,6FAA0F;AAC1F,gDAAkC;AAClC,2CAA6C;AAE7C;;GAEG;AACH,SAAgB,cAAc,CAAC,SAA8C;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAc,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,WAAW;IACX,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,OAAO;IACP,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAiB;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAY,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAkC,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,IAAA,oDAA4B,EAAC,MAAM,EAAE;QACnC,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;QACvF,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;KAChG,CAAC,CAAC;IACH,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,IAAA,sCAAqB,EAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzD,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,yCAAmB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,IAAI,iCAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAA2C,CAAC;QACzG,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,WAAW,EAAE,CAAC;YAChB,IAAA,gDAA0B,EAAC,MAAM,EAAE;gBACjC,WAAW,EAAE,WAAkB;gBAC/B,aAAa,EAAE,aAAoB;aACpC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QAEjE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC9D,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAA,gCAAkB,EAAC,MAAM,EAAE;oBACzB,QAAQ,EAAE,QAAe;oBACzB,WAAW,EAAE,WAAkB;oBAC/B,aAAa,EAAE,iBAAiB;iBACjC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,iBAAiB,GAAG,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACnF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAC/F,IAAA,0CAAuB,EAAC,MAAM,EAAE;YAC9B,UAAU,EAAE,QAAQ;YACpB,QAAQ;YACR,WAAW;YACX,cAAc;YACd,OAAO;YACP,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,IAAA,wDAA8B,EAAC,MAAM,CAAC,CAAC;IAEvC,sBAAsB;IACtB,IAAA,kCAAmB,EAAC,MAAM,CAAC,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAA0C,CAAC;QACtG,IAAI,eAAe,EAAE,CAAC;YACpB,IAAA,sDAA6B,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;QAC3D,6BAA6B;QAC7B,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE5D,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;YACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;YACrE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACtF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClF,MAAM,mBAAmB,GAAG,cAAc,IAAI,aAAa;gBACzD,CAAC,CAAC,IAAI,yDAA2B,CAAC;oBAChC,OAAO;oBACP,OAAO;oBACP,cAAc;oBACd,aAAa;oBACb,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;iBACvF,CAAC;gBACF,CAAC,CAAC,SAAS,CAAC;YAEd,IAAA,kDAA2B,EAAC,MAAM,EAAE;gBAClC,OAAO;gBACP,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,oBAAoB;gBAC3E,mBAAmB;aACpB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,6DAA6D,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;QACzI,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,IAAA,+CAA4B,EAAC,MAAM,EAAE;YACnC,QAAQ,EAAE,MAAM,CAAC,gBAAgB;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB;SAC3D,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kDAAkD,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC","sourcesContent":["/**\n * 路由注册\n *\n * 根据容器中的服务注册 API 路由\n */\n\nimport type { AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport type { ApiServer } from '../ApiServer';\n\nimport { registerEdgeNodeSignalRoutes } from '../handlers/EdgeNodeSignalHandler';\nimport { registerNodeRoutes } from '../handlers/NodeHandler';\nimport { registerChatRoutes } from '../handlers/ChatHandler';\nimport { registerApiKeyRoutes } from '../handlers/ApiKeyHandler';\nimport { registerSubdomainRoutes } from '../handlers/SubdomainHandler';\nimport { registerSubdomainClientRoutes } from '../handlers/SubdomainClientHandler';\nimport { registerWebIdProfileRoutes } from '../handlers/WebIdProfileHandler';\nimport { registerDdnsRoutes } from '../handlers/DdnsHandler';\nimport { registerChatKitRoutes } from '../handlers/ChatKitHandler';\nimport { registerChatKitV1Routes } from '../handlers/ChatKitV1Handler';\nimport { registerDashboardRoutes } from '../handlers/DashboardHandler';\nimport { registerAdminRoutes } from '../handlers/AdminHandler';\nimport { registerAdminDdnsRoutes } from '../handlers/AdminDdnsHandler';\nimport { registerLinxCapabilitiesRoutes } from '../handlers/LinxCapabilitiesHandler';\nimport { registerProvisionRoutes, registerProvisionStatusRoute } from '../handlers/ProvisionHandler';\nimport { registerPodManagementRoutes } from '../handlers/PodManagementHandler';\nimport { registerQuotaRoutes } from '../handlers/QuotaHandler';\nimport { registerUsageRoutes } from '../handlers/UsageHandler';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\nimport { UsageRepository } from '../../storage/quota/UsageRepository';\nimport { DrizzleQuotaService } from '../../quota/DrizzleQuotaService';\nimport { LocalPodProvisioningService } from '../../provision/LocalPodProvisioningService';\nimport * as path from 'node:path';\nimport { PACKAGE_ROOT } from '../../runtime';\n\n/**\n * 注册所有 API 路由\n */\nexport function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void {\n  const server = container.resolve('apiServer') as ApiServer;\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  // 公共健康检查端点\n  registerHealthRoutes(server);\n\n  // 共享路由\n  registerSharedRoutes(container, server);\n\n  // 根据 edition 注册专属路由\n  if (config.edition === 'cloud') {\n    registerCloudRoutes(container, server);\n  } else {\n    registerLocalRoutes(container, server);\n  }\n}\n\n/**\n * 健康检查路由\n */\nfunction registerHealthRoutes(server: ApiServer): void {\n  server.get('/health', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ok' }));\n  }, { public: true });\n\n  server.get('/ready', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ready' }));\n  }, { public: true });\n\n  // Dashboard 静态资源\n  const staticDir = path.resolve(PACKAGE_ROOT, 'static/dashboard');\n  registerDashboardRoutes(server, { staticDir });\n}\n\n/**\n * 共享路由 (cloud 和 local 都有)\n */\nfunction registerSharedRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n  const apiKeyStore = container.resolve('apiKeyStore') as DrizzleClientCredentialsStore;\n  const chatService = container.resolve('chatService');\n  const chatKitService = container.resolve('chatKitService');\n  const chatKitStore = container.resolve('chatKitStore');\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  registerEdgeNodeSignalRoutes(server, {\n    repository: nodeRepo,\n    dnsCoordinator: container.resolve('dnsCoordinator', { allowUnregistered: true }) as any,\n    healthProbeService: container.resolve('healthProbeService', { allowUnregistered: true }) as any,\n  });\n  registerNodeRoutes(server, { repository: nodeRepo });\n  registerApiKeyRoutes(server, { store: apiKeyStore });\n  registerChatRoutes(server, { chatService });\n  registerChatKitRoutes(server, { chatKitService });\n  registerChatKitV1Routes(server, { store: chatKitStore });\n\n  // Quota & Usage API (Business 对接)\n  try {\n    const quotaService = new DrizzleQuotaService({ identityDbUrl: config.databaseUrl });\n    const usageRepo = new UsageRepository(container.resolve('db'));\n    registerQuotaRoutes(server, { quotaService, usageRepo });\n    registerUsageRoutes(server, { usageRepo });\n    console.log('[Shared] Quota & Usage routes registered');\n  } catch (error) {\n    console.log(`[Shared] Quota & Usage routes not registered: ${error}`);\n  }\n}\n\n/**\n * Cloud 模式专属路由\n */\nfunction registerCloudRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名管理 API (需要 SubdomainService)\n  try {\n    const subdomainService = container.resolve('subdomainService') as ApiContainerCradle['subdomainService'];\n    if (subdomainService) {\n      registerSubdomainRoutes(server, { subdomainService });\n      console.log('[Cloud] Subdomain routes registered');\n    }\n  } catch {\n    console.log('[Cloud] Subdomain routes not registered (service not available)');\n  }\n\n  // WebID Profile 托管服务\n  try {\n    const profileRepo = container.resolve('webIdProfileRepo', { allowUnregistered: true });\n    const podLookupRepo = container.resolve('podLookupRepo', { allowUnregistered: true });\n    if (profileRepo) {\n      registerWebIdProfileRoutes(server, {\n        profileRepo: profileRepo as any,\n        podLookupRepo: podLookupRepo as any,\n      });\n      console.log('[Cloud] WebID Profile routes registered');\n    }\n  } catch {\n    console.log('[Cloud] WebID Profile routes not registered (repo not available)');\n  }\n\n  // DDNS 服务\n  try {\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const config = container.resolve('config') as ApiContainerConfig;\n\n    if (ddnsRepo) {\n      const baseStorageDomain = config.subdomain?.baseStorageDomain;\n      if (baseStorageDomain) {\n        registerDdnsRoutes(server, {\n          ddnsRepo: ddnsRepo as any,\n          dnsProvider: dnsProvider as any,\n          defaultDomain: baseStorageDomain,\n        });\n        console.log(`[Cloud] DDNS routes registered (domain: ${baseStorageDomain})`);\n      } else {\n        console.log('[Cloud] DDNS routes not registered (no CSS_BASE_STORAGE_DOMAIN)');\n      }\n    }\n  } catch {\n    console.log('[Cloud] DDNS routes not registered (repo not available)');\n  }\n\n  // SP Provision API (SP 注册)\n  try {\n    const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n    const config = container.resolve('config') as ApiContainerConfig;\n    const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n    const baseStorageDomain = config.subdomain?.baseStorageDomain;\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true }) as any;\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true }) as any;\n    const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true }) as any;\n    registerProvisionRoutes(server, {\n      repository: nodeRepo,\n      ddnsRepo,\n      dnsProvider,\n      tunnelProvider,\n      baseUrl,\n      baseStorageDomain,\n    });\n    console.log(`[Cloud] Provision routes registered${baseStorageDomain ? ` (baseStorageDomain: ${baseStorageDomain})` : ''}`);\n  } catch {\n    console.log('[Cloud] Provision routes not registered (dependencies not available)');\n  }\n}\n\n/**\n * Local 模式专属路由\n */\nfunction registerLocalRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  registerLinxCapabilitiesRoutes(server);\n\n  // Admin API (配置管理、重启)\n  registerAdminRoutes(server);\n\n  // DDNS status (托管式 Local 模式)\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    registerAdminDdnsRoutes(server, { ddnsManager });\n  } catch {\n    // ignore\n  }\n\n  // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)\n  try {\n    const subdomainClient = container.resolve('subdomainClient') as ApiContainerCradle['subdomainClient'];\n    if (subdomainClient) {\n      registerSubdomainClientRoutes(server, { subdomainClient });\n      console.log('[Local] Subdomain client routes registered');\n    }\n  } catch {\n    console.log('[Local] Subdomain client routes not registered (client not available)');\n  }\n\n  // Pod Provision API (SP 端，供 Cloud 回调创建 Pod)\n  try {\n    // rootDir: CSS 数据目录，默认 ./data\n    const rootDir = process.env.CSS_ROOT_FILE_PATH || './data';\n    // serviceToken 验证：从 SP 配置中读取\n    const expectedServiceToken = process.env.XPOD_SERVICE_TOKEN;\n\n    if (expectedServiceToken) {\n      const config = container.resolve('config') as ApiContainerConfig;\n      const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n      const sparqlEndpoint = process.env.CSS_SPARQL_ENDPOINT || process.env.SPARQL_ENDPOINT;\n      const identityDbUrl = process.env.CSS_IDENTITY_DB_URL || process.env.DATABASE_URL;\n      const provisioningService = sparqlEndpoint && identityDbUrl\n        ? new LocalPodProvisioningService({\n          baseUrl,\n          rootDir,\n          sparqlEndpoint,\n          identityDbUrl,\n          oidcIssuer: process.env.CSS_OIDC_ISSUER ?? process.env.oidcIssuer ?? config.oidcIssuer,\n        })\n        : undefined;\n\n      registerPodManagementRoutes(server, {\n        rootDir,\n        verifyServiceToken: async (token: string) => token === expectedServiceToken,\n        provisioningService,\n      });\n      console.log(`[Local] Pod provision routes registered (/provision/pods, ${provisioningService ? 'css-compatible' : 'directory-only'})`);\n    } else {\n      console.log('[Local] Pod provision routes not registered (XPOD_SERVICE_TOKEN not configured)');\n    }\n  } catch (error) {\n    console.log(`[Local] Pod provision routes not registered: ${error}`);\n  }\n\n  // SP 状态查询 (供 Linx 查询 SP 配置状态)\n  try {\n    const config = container.resolve('config') as ApiContainerConfig;\n    registerProvisionStatusRoute(server, {\n      cloudUrl: config.cloudApiEndpoint,\n      nodeId: config.nodeId,\n      cloudBaseUrl: config.oidcIssuer || config.cloudApiEndpoint,\n    });\n    console.log('[Local] Provision status route registered (/provision/status)');\n  } catch (error) {\n    console.log(`[Local] Provision status route not registered: ${error}`);\n  }\n}\n"]}

package/dist/api/handlers/PodManagementHandler.d.ts

@@ -6,10 +6,18 @@ export interface PodManagementHandlerOptions {
     verifyServiceToken: (token: string) => Promise<boolean>;
     /** 可选：限制允许的 pod 名称正则 */
     podNameRegex?: RegExp;
+    /** 可选：创建 CSS-compatible Pod 数据，而不是只创建裸目录 */
+    provisioningService?: {
+        createPod(input: CreatePodRequest): Promise<{
+            podUrl: string;
+        }>;
+    };
 }
 export interface CreatePodRequest {
     /** Pod 名称（通常是用户名） */
     podName: string;
+    /** Owner WebID，Cloud IDP + Local SP 时应为 Cloud WebID */
+    webId?: string;
     /** 可选：初始资源 */
     initialResources?: Record<string, string>;
 }

package/dist/api/handlers/PodManagementHandler.js

@@ -42,7 +42,7 @@ const global_logger_factory_1 = require("global-logger-factory");
  */
 function registerPodManagementRoutes(server, options) {
     const logger = (0, global_logger_factory_1.getLoggerFor)('PodManagementHandler');
-    const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/ } = options;
+    const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/, provisioningService } = options;
     /**
      * 验证 service token
      */
@@ -119,11 +119,13 @@ function registerPodManagementRoutes(server, options) {
         }
         // 5. 创建 Pod 目录
         try {
-            await createPodDirectory(podPath, initialResources);
+            const result = provisioningService
+                ? await provisioningService.createPod(body)
+                : await createPodDirectory(podPath, initialResources).then(() => undefined);
             logger.info(`Created pod: ${podName} at ${podPath}`);
             // 构建 pod URL (基于请求的 host)
             const host = request.headers.host || 'localhost';
-            const podUrl = `https://${host}/${podName}/`;
+            const podUrl = result?.podUrl || `https://${host}/${podName}/`;
             sendJson(response, 201, {
                 success: true,
                 podUrl,

package/dist/api/handlers/PodManagementHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"PodManagementHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/PodManagementHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,kEAyMC;AAtPD,iEAAqD;AA8BrD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CACzC,MAAiB,EACjB,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,sBAAsB,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAEnF;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAAwB;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,SAAS,eAAe,CAAC,OAAe;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACzD,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,WAAW;QACX,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAqB,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;QAE3C,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,qBAAqB,OAAO,gBAAgB,YAAY,CAAC,QAAQ,EAAE,EAAE;aAC/E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,OAAO,iBAAiB,EAAE,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;YAErD,0BAA0B;YAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,wCAAwC;IAE9D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YAEvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,IAAI,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAyC;IAEzC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;IAE3C,OAAO;IACP,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,SAAS;IACT,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAChD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC","sourcesContent":["import type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\n\nexport interface PodManagementHandlerOptions {\n  /** Pod 存储根目录 */\n  rootDir: string;\n  /** 验证 IdP service token */\n  verifyServiceToken: (token: string) => Promise<boolean>;\n  /** 可选：限制允许的 pod 名称正则 */\n  podNameRegex?: RegExp;\n}\n\nexport interface CreatePodRequest {\n  /** Pod 名称（通常是用户名） */\n  podName: string;\n  /** 可选：初始资源 */\n  initialResources?: Record<string, string>;\n}\n\nexport interface CreatePodResponse {\n  success: boolean;\n  podUrl: string;\n  message: string;\n}\n\nexport interface DeletePodResponse {\n  success: boolean;\n  message: string;\n}\n\n/**\n * Pod Management Handler\n *\n * SP (Storage Provider) 端供 IdP 调用的 API。\n * 用于创建/删除/查询 Pod 目录。\n *\n * 端点 (Solid Storage Provision Protocol):\n * - POST   /provision/pods           - 创建 Pod\n * - GET    /provision/pods/:podName  - 查询 Pod\n * - DELETE /provision/pods/:podName  - 删除 Pod\n *\n * 认证:\n * - 使用 IdP service token (Bearer)\n * - 验证 token 是否来自信任的 IdP\n */\nexport function registerPodManagementRoutes(\n  server: ApiServer,\n  options: PodManagementHandlerOptions\n): void {\n  const logger = getLoggerFor('PodManagementHandler');\n  const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/ } = options;\n\n  /**\n   * 验证 service token\n   */\n  async function authenticate(request: IncomingMessage): Promise<boolean> {\n    const authHeader = request.headers.authorization;\n    if (!authHeader || !authHeader.startsWith('Bearer ')) {\n      return false;\n    }\n    const token = authHeader.slice(7);\n    return verifyServiceToken(token);\n  }\n\n  /**\n   * 验证 pod 名称\n   */\n  function validatePodName(podName: string): boolean {\n    if (!podName || podName.length < 1 || podName.length > 64) {\n      return false;\n    }\n    return podNameRegex.test(podName);\n  }\n\n  /**\n   * POST /provision/pods\n   *\n   * 创建 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *   Content-Type: application/json\n   *   Body: { podName: \"alice\", initialResources?: {...} }\n   *\n   * Response:\n   *   201: { success: true, podUrl: \"https://node1.pods.site/alice/\" }\n   *   400: { error: \"Invalid pod name\" }\n   *   401: { error: \"Unauthorized\" }\n   *   409: { error: \"Pod already exists\" }\n   */\n  server.post('/provision/pods', async (request, response) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    // 2. 解析请求体\n    let body: CreatePodRequest;\n    try {\n      body = await readJsonBody(request) as CreatePodRequest;\n    } catch (error) {\n      sendJson(response, 400, { error: 'Bad Request', message: 'Invalid JSON body' });\n      return;\n    }\n\n    const { podName, initialResources } = body;\n\n    // 3. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, {\n        error: 'Bad Request',\n        message: `Invalid pod name: ${podName}. Must match ${podNameRegex.toString()}`\n      });\n      return;\n    }\n\n    // 4. 检查是否已存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (exists) {\n        sendJson(response, 409, { error: 'Conflict', message: `Pod ${podName} already exists` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 5. 创建 Pod 目录\n    try {\n      await createPodDirectory(podPath, initialResources);\n      logger.info(`Created pod: ${podName} at ${podPath}`);\n\n      // 构建 pod URL (基于请求的 host)\n      const host = request.headers.host || 'localhost';\n      const podUrl = `https://${host}/${podName}/`;\n\n      sendJson(response, 201, {\n        success: true,\n        podUrl,\n        message: `Pod ${podName} created successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to create pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to create pod' });\n    }\n  }, { public: true }); // Service token auth handled internally\n\n  /**\n   * DELETE /provision/pods/:podName\n   *\n   * 删除 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *\n   * Response:\n   *   200: { success: true }\n   *   401: { error: \"Unauthorized\" }\n   *   404: { error: \"Pod not found\" }\n   */\n  server.delete('/provision/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n\n    // 2. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, { error: 'Bad Request', message: `Invalid pod name: ${podName}` });\n      return;\n    }\n\n    // 3. 检查是否存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 4. 删除 Pod 目录\n    try {\n      await deletePodDirectory(podPath);\n      logger.info(`Deleted pod: ${podName}`);\n\n      sendJson(response, 200, {\n        success: true,\n        message: `Pod ${podName} deleted successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to delete pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to delete pod' });\n    }\n  }, { public: true });\n\n  /**\n   * GET /provision/pods/:podName\n   *\n   * 获取 Pod 信息（存在性检查）\n   */\n  server.get('/provision/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n    const podPath = `${rootDir}/${podName}`;\n\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n\n      const host = request.headers.host || 'localhost';\n      const podUrl = `https://${host}/${podName}/`;\n\n      sendJson(response, 200, {\n        exists: true,\n        podName,\n        podUrl,\n        storagePath: podPath\n      });\n    } catch (error) {\n      logger.error(`Error getting pod info: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to get pod info' });\n    }\n  }, { public: true });\n\n  logger.info(`Pod management routes registered with rootDir: ${rootDir}`);\n}\n\n/**\n * 读取 JSON 请求体\n */\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve({});\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch (error) {\n        reject(error);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\n/**\n * 发送 JSON 响应\n */\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\n/**\n * 检查文件/目录是否存在\n */\nasync function fileExists(path: string): Promise<boolean> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * 创建 Pod 目录\n */\nasync function createPodDirectory(\n  podPath: string,\n  initialResources?: Record<string, string>\n): Promise<void> {\n  const { mkdir, writeFile } = await import('node:fs/promises');\n  const { join } = await import('node:path');\n\n  // 创建目录\n  await mkdir(podPath, { recursive: true });\n\n  // 创建初始资源\n  if (initialResources) {\n    for (const [filename, content] of Object.entries(initialResources)) {\n      const filePath = join(podPath, filename);\n      await writeFile(filePath, content, 'utf8');\n    }\n  }\n}\n\n/**\n * 删除 Pod 目录\n */\nasync function deletePodDirectory(podPath: string): Promise<void> {\n  const { rm } = await import('node:fs/promises');\n  await rm(podPath, { recursive: true, force: true });\n}\n"]}
+{"version":3,"file":"PodManagementHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/PodManagementHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAoDA,kEA2MC;AA9PD,iEAAqD;AAoCrD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CACzC,MAAiB,EACjB,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,sBAAsB,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,GAAG,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC;IAExG;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAAwB;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,SAAS,eAAe,CAAC,OAAe;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACzD,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,WAAW;QACX,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAqB,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;QAE3C,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,qBAAqB,OAAO,gBAAgB,YAAY,CAAC,QAAQ,EAAE,EAAE;aAC/E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,OAAO,iBAAiB,EAAE,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB;gBAChC,CAAC,CAAC,MAAM,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3C,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;YAErD,0BAA0B;YAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE/D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,wCAAwC;IAE9D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YAEvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,OAAO,uBAAuB;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,QAAQ;QACR,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,OAAO,GAAG,CAAC;YAE7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,IAAI,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAyC;IAEzC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;IAE3C,OAAO;IACP,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,SAAS;IACT,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAChD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC","sourcesContent":["import type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\n\nexport interface PodManagementHandlerOptions {\n  /** Pod 存储根目录 */\n  rootDir: string;\n  /** 验证 IdP service token */\n  verifyServiceToken: (token: string) => Promise<boolean>;\n  /** 可选：限制允许的 pod 名称正则 */\n  podNameRegex?: RegExp;\n  /** 可选：创建 CSS-compatible Pod 数据，而不是只创建裸目录 */\n  provisioningService?: {\n    createPod(input: CreatePodRequest): Promise<{ podUrl: string }>;\n  };\n}\n\nexport interface CreatePodRequest {\n  /** Pod 名称（通常是用户名） */\n  podName: string;\n  /** Owner WebID，Cloud IDP + Local SP 时应为 Cloud WebID */\n  webId?: string;\n  /** 可选：初始资源 */\n  initialResources?: Record<string, string>;\n}\n\nexport interface CreatePodResponse {\n  success: boolean;\n  podUrl: string;\n  message: string;\n}\n\nexport interface DeletePodResponse {\n  success: boolean;\n  message: string;\n}\n\n/**\n * Pod Management Handler\n *\n * SP (Storage Provider) 端供 IdP 调用的 API。\n * 用于创建/删除/查询 Pod 目录。\n *\n * 端点 (Solid Storage Provision Protocol):\n * - POST   /provision/pods           - 创建 Pod\n * - GET    /provision/pods/:podName  - 查询 Pod\n * - DELETE /provision/pods/:podName  - 删除 Pod\n *\n * 认证:\n * - 使用 IdP service token (Bearer)\n * - 验证 token 是否来自信任的 IdP\n */\nexport function registerPodManagementRoutes(\n  server: ApiServer,\n  options: PodManagementHandlerOptions\n): void {\n  const logger = getLoggerFor('PodManagementHandler');\n  const { rootDir, verifyServiceToken, podNameRegex = /^[a-zA-Z0-9_-]+$/, provisioningService } = options;\n\n  /**\n   * 验证 service token\n   */\n  async function authenticate(request: IncomingMessage): Promise<boolean> {\n    const authHeader = request.headers.authorization;\n    if (!authHeader || !authHeader.startsWith('Bearer ')) {\n      return false;\n    }\n    const token = authHeader.slice(7);\n    return verifyServiceToken(token);\n  }\n\n  /**\n   * 验证 pod 名称\n   */\n  function validatePodName(podName: string): boolean {\n    if (!podName || podName.length < 1 || podName.length > 64) {\n      return false;\n    }\n    return podNameRegex.test(podName);\n  }\n\n  /**\n   * POST /provision/pods\n   *\n   * 创建 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *   Content-Type: application/json\n   *   Body: { podName: \"alice\", initialResources?: {...} }\n   *\n   * Response:\n   *   201: { success: true, podUrl: \"https://node1.pods.site/alice/\" }\n   *   400: { error: \"Invalid pod name\" }\n   *   401: { error: \"Unauthorized\" }\n   *   409: { error: \"Pod already exists\" }\n   */\n  server.post('/provision/pods', async (request, response) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    // 2. 解析请求体\n    let body: CreatePodRequest;\n    try {\n      body = await readJsonBody(request) as CreatePodRequest;\n    } catch (error) {\n      sendJson(response, 400, { error: 'Bad Request', message: 'Invalid JSON body' });\n      return;\n    }\n\n    const { podName, initialResources } = body;\n\n    // 3. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, {\n        error: 'Bad Request',\n        message: `Invalid pod name: ${podName}. Must match ${podNameRegex.toString()}`\n      });\n      return;\n    }\n\n    // 4. 检查是否已存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (exists) {\n        sendJson(response, 409, { error: 'Conflict', message: `Pod ${podName} already exists` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 5. 创建 Pod 目录\n    try {\n      const result = provisioningService\n        ? await provisioningService.createPod(body)\n        : await createPodDirectory(podPath, initialResources).then(() => undefined);\n      logger.info(`Created pod: ${podName} at ${podPath}`);\n\n      // 构建 pod URL (基于请求的 host)\n      const host = request.headers.host || 'localhost';\n      const podUrl = result?.podUrl || `https://${host}/${podName}/`;\n\n      sendJson(response, 201, {\n        success: true,\n        podUrl,\n        message: `Pod ${podName} created successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to create pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to create pod' });\n    }\n  }, { public: true }); // Service token auth handled internally\n\n  /**\n   * DELETE /provision/pods/:podName\n   *\n   * 删除 Pod 目录\n   *\n   * Request:\n   *   Authorization: Bearer {service_token}\n   *\n   * Response:\n   *   200: { success: true }\n   *   401: { error: \"Unauthorized\" }\n   *   404: { error: \"Pod not found\" }\n   */\n  server.delete('/provision/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n\n    // 2. 验证 pod 名称\n    if (!validatePodName(podName)) {\n      sendJson(response, 400, { error: 'Bad Request', message: `Invalid pod name: ${podName}` });\n      return;\n    }\n\n    // 3. 检查是否存在\n    const podPath = `${rootDir}/${podName}`;\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n    } catch (error) {\n      logger.error(`Error checking pod existence: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to check pod existence' });\n      return;\n    }\n\n    // 4. 删除 Pod 目录\n    try {\n      await deletePodDirectory(podPath);\n      logger.info(`Deleted pod: ${podName}`);\n\n      sendJson(response, 200, {\n        success: true,\n        message: `Pod ${podName} deleted successfully`\n      });\n    } catch (error) {\n      logger.error(`Failed to delete pod: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to delete pod' });\n    }\n  }, { public: true });\n\n  /**\n   * GET /provision/pods/:podName\n   *\n   * 获取 Pod 信息（存在性检查）\n   */\n  server.get('/provision/pods/:podName', async (request, response, params) => {\n    // 1. 认证\n    if (!await authenticate(request)) {\n      sendJson(response, 401, { error: 'Unauthorized', message: 'Invalid or missing service token' });\n      return;\n    }\n\n    const podName = decodeURIComponent(params.podName);\n    const podPath = `${rootDir}/${podName}`;\n\n    try {\n      const exists = await fileExists(podPath);\n      if (!exists) {\n        sendJson(response, 404, { error: 'Not Found', message: `Pod ${podName} not found` });\n        return;\n      }\n\n      const host = request.headers.host || 'localhost';\n      const podUrl = `https://${host}/${podName}/`;\n\n      sendJson(response, 200, {\n        exists: true,\n        podName,\n        podUrl,\n        storagePath: podPath\n      });\n    } catch (error) {\n      logger.error(`Error getting pod info: ${(error as Error).message}`);\n      sendJson(response, 500, { error: 'Internal Server Error', message: 'Failed to get pod info' });\n    }\n  }, { public: true });\n\n  logger.info(`Pod management routes registered with rootDir: ${rootDir}`);\n}\n\n/**\n * 读取 JSON 请求体\n */\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve({});\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch (error) {\n        reject(error);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\n/**\n * 发送 JSON 响应\n */\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\n/**\n * 检查文件/目录是否存在\n */\nasync function fileExists(path: string): Promise<boolean> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * 创建 Pod 目录\n */\nasync function createPodDirectory(\n  podPath: string,\n  initialResources?: Record<string, string>\n): Promise<void> {\n  const { mkdir, writeFile } = await import('node:fs/promises');\n  const { join } = await import('node:path');\n\n  // 创建目录\n  await mkdir(podPath, { recursive: true });\n\n  // 创建初始资源\n  if (initialResources) {\n    for (const [filename, content] of Object.entries(initialResources)) {\n      const filePath = join(podPath, filename);\n      await writeFile(filePath, content, 'utf8');\n    }\n  }\n}\n\n/**\n * 删除 Pod 目录\n */\nasync function deletePodDirectory(podPath: string): Promise<void> {\n  const { rm } = await import('node:fs/promises');\n  await rm(podPath, { recursive: true, force: true });\n}\n"]}

package/dist/api/handlers/WebIdProfileHandler.js

@@ -97,20 +97,25 @@ function registerWebIdProfileRoutes(server, options) {
     server.get('/api/v1/identity/:username', async (_request, response, params) => {
         const username = decodeURIComponent(params.username);
         try {
-            const profile = await resolveProfileWithStorageBackfill(username, options);
+            const profile = await resolveIdentityLookup(username, options);
             if (!profile) {
                 sendError(response, 404, 'Profile not found');
                 return;
             }
-            sendJson(response, 200, {
+            const body = {
                 username: profile.username,
                 webidUrl: profile.webidUrl,
                 storageUrl: profile.storageUrl,
                 storageMode: profile.storageMode,
                 oidcIssuer: profile.oidcIssuer,
-                createdAt: profile.createdAt.toISOString(),
-                updatedAt: profile.updatedAt.toISOString(),
-            });
+            };
+            if (profile.createdAt) {
+                body.createdAt = profile.createdAt.toISOString();
+            }
+            if (profile.updatedAt) {
+                body.updatedAt = profile.updatedAt.toISOString();
+            }
+            sendJson(response, 200, body);
         }
         catch (error) {
             logger.error(`Failed to get profile for ${username}: ${error}`);
@@ -171,6 +176,44 @@ function registerWebIdProfileRoutes(server, options) {
     });
     logger.info('WebID Profile routes registered');
 }
+async function resolveIdentityLookup(username, options) {
+    try {
+        const profile = await resolveProfileWithStorageBackfill(username, options);
+        if (profile) {
+            return profile;
+        }
+    }
+    catch (error) {
+        logger.warn(`Profile lookup unavailable for ${username}, falling back to Pod index: ${error}`);
+    }
+    return resolveProfileFromPods(username, options);
+}
+async function resolveProfileFromPods(username, options) {
+    const { podLookupRepo } = options;
+    if (!podLookupRepo) {
+        return null;
+    }
+    let pods;
+    try {
+        pods = await podLookupRepo.listAllPods();
+    }
+    catch (error) {
+        logger.warn(`Pod index lookup unavailable for ${username}: ${error}`);
+        return null;
+    }
+    const match = pods.find((pod) => derivePodSlug(pod.baseUrl) === username);
+    if (!match) {
+        return null;
+    }
+    const storageUrl = ensureTrailingSlash(match.baseUrl);
+    return {
+        username,
+        webidUrl: `${storageUrl}profile/card#me`,
+        storageUrl,
+        storageMode: 'cloud',
+        oidcIssuer: deriveOrigin(storageUrl),
+    };
+}
 async function resolveProfileWithStorageBackfill(username, options) {
     const { profileRepo, podLookupRepo } = options;
     const profile = await profileRepo.get(username);
@@ -180,7 +223,14 @@ async function resolveProfileWithStorageBackfill(username, options) {
     if (profile.storageUrl || !profile.accountId || !podLookupRepo) {
         return profile;
     }
-    const pods = await podLookupRepo.listByAccountId(profile.accountId);
+    let pods;
+    try {
+        pods = await podLookupRepo.listByAccountId(profile.accountId);
+    }
+    catch (error) {
+        logger.warn(`Skipped storage backfill for ${username}: pod index unavailable for account ${profile.accountId}: ${error}`);
+        return profile;
+    }
     const storageUrl = selectStorageBackfillCandidate(username, pods);
     if (!storageUrl) {
         logger.warn(`Skipped storage backfill for ${username}: no unambiguous pod found for account ${profile.accountId}`);
@@ -230,6 +280,14 @@ function derivePodSlug(baseUrl) {
 function ensureTrailingSlash(url) {
     return url.replace(/\/+$/, '') + '/';
 }
+function deriveOrigin(url) {
+    try {
+        return ensureTrailingSlash(new URL(url).origin);
+    }
+    catch {
+        return undefined;
+    }
+}
 async function readJsonBody(request) {
     return new Promise((resolve, reject) => {
         let data = '';

package/dist/api/handlers/WebIdProfileHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebIdProfileHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/WebIdProfileHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAeH,gEA2LC;AAvMD,iEAAqD;AAKrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,qBAAqB,CAAC,CAAC;AAOnD,SAAgB,0BAA0B,CACxC,MAAiB,EACjB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAE1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAClD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,sBAAsB,CAAC,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAiE,CAAC;YAElF,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;gBACzB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACxD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAuD;aAC7E,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAEtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAKH,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACvB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,UAAU;YACV,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAuD;gBAC5E,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,QAAgB,EAChB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,gCAAgC,QAAQ,0CAA0C,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACxD,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,0BAA0B,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAgB,EAChB,IAAuB;IAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACnF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * WebID Profile API Handler\n *\n * 提供 WebID Profile 托管服务的 HTTP API\n *\n * GET  /{username}/profile/card     - 获取 WebID Profile (Turtle 格式)\n * POST /api/v1/identity/{username}/storage - 更新 storage 指针 (需认证)\n */\n\nimport type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\nimport type { PodLookupRepository, PodLookupResult } from '../../identity/drizzle/PodLookupRepository';\n\nconst logger = getLoggerFor('WebIdProfileHandler');\n\nexport interface WebIdProfileHandlerOptions {\n  profileRepo: WebIdProfileRepository;\n  podLookupRepo?: PodLookupRepository;\n}\n\nexport function registerWebIdProfileRoutes(\n  server: ApiServer,\n  options: WebIdProfileHandlerOptions,\n): void {\n  const { profileRepo } = options;\n\n  /**\n   * GET /{username}/profile/card\n   *\n   * 获取 WebID Profile (Turtle 格式)\n   * 这是 Solid 标准的 WebID 端点\n   */\n  server.get('/:username/profile/card', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveProfileWithStorageBackfill(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      // 返回 Turtle 格式\n      const turtle = profileRepo.generateProfileTurtle(profile);\n\n      response.statusCode = 200;\n      response.setHeader('Content-Type', 'text/turtle');\n      response.setHeader('Link', `<${profile.webidUrl}>; rel=\"describedby\"`);\n      response.end(turtle);\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity/{username}/storage\n   *\n   * 更新 storage 指针\n   * 用于 Local 节点更新其 storage URL\n   *\n   * Request body:\n   * {\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"\n   * }\n   */\n  server.post('/api/v1/identity/:username/storage', async (request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as { storageUrl?: string; storageMode?: string } | undefined;\n\n      if (!payload?.storageUrl) {\n        sendError(response, 400, 'storageUrl is required');\n        return;\n      }\n\n      // 验证 URL 格式\n      try {\n        new URL(payload.storageUrl);\n      } catch {\n        sendError(response, 400, 'Invalid storageUrl format');\n        return;\n      }\n\n      const profile = await profileRepo.updateStorage(username, {\n        storageUrl: payload.storageUrl,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n      });\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      logger.info(`Updated storage for ${username}: ${payload.storageUrl}`);\n\n      sendJson(response, 200, {\n        success: true,\n        username,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to update storage for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * GET /api/v1/identity/{username}\n   *\n   * 获取 WebID Profile 信息 (JSON 格式)\n   */\n  server.get('/api/v1/identity/:username', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveProfileWithStorageBackfill(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      sendJson(response, 200, {\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        oidcIssuer: profile.oidcIssuer,\n        createdAt: profile.createdAt.toISOString(),\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity\n   *\n   * 创建 WebID Profile\n   *\n   * Request body:\n   * {\n   *   \"username\": \"alice\",\n   *   \"storageMode\": \"local\",  // optional, default: \"cloud\"\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"  // optional\n   * }\n   */\n  server.post('/api/v1/identity', async (request, response, _params) => {\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        username?: string;\n        storageMode?: string;\n        storageUrl?: string;\n        accountId?: string;\n      } | undefined;\n\n      if (!payload?.username) {\n        sendError(response, 400, 'username is required');\n        return;\n      }\n\n      // 验证用户名格式\n      if (!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(payload.username)) {\n        sendError(response, 400, 'Invalid username format');\n        return;\n      }\n\n      // 检查是否已存在\n      const existing = await profileRepo.get(payload.username);\n      if (existing) {\n        sendError(response, 409, 'Username already taken');\n        return;\n      }\n\n      const profile = await profileRepo.create({\n        username: payload.username,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n        storageUrl: payload.storageUrl,\n        accountId: payload.accountId,\n      });\n\n      logger.info(`Created profile for ${payload.username}`);\n\n      sendJson(response, 201, {\n        success: true,\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        createdAt: profile.createdAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to create profile: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  logger.info('WebID Profile routes registered');\n}\n\nasync function resolveProfileWithStorageBackfill(\n  username: string,\n  options: WebIdProfileHandlerOptions,\n) {\n  const { profileRepo, podLookupRepo } = options;\n  const profile = await profileRepo.get(username);\n  if (!profile) {\n    return null;\n  }\n\n  if (profile.storageUrl || !profile.accountId || !podLookupRepo) {\n    return profile;\n  }\n\n  const pods = await podLookupRepo.listByAccountId(profile.accountId);\n  const storageUrl = selectStorageBackfillCandidate(username, pods);\n  if (!storageUrl) {\n    logger.warn(`Skipped storage backfill for ${username}: no unambiguous pod found for account ${profile.accountId}`);\n    return profile;\n  }\n\n  try {\n    const updated = await profileRepo.updateStorage(username, {\n      storageUrl,\n      storageMode: profile.storageMode,\n    });\n    if (updated) {\n      logger.info(`Backfilled storage for ${username}: ${storageUrl}`);\n      return updated;\n    }\n  } catch (error) {\n    logger.warn(`Failed to backfill storage for ${username}: ${error}`);\n  }\n\n  return profile;\n}\n\nfunction selectStorageBackfillCandidate(\n  username: string,\n  pods: PodLookupResult[],\n): string | null {\n  if (pods.length === 0) {\n    return null;\n  }\n\n  const exactMatches = pods.filter((pod) => derivePodSlug(pod.baseUrl) === username);\n  if (exactMatches.length === 1) {\n    return ensureTrailingSlash(exactMatches[0].baseUrl);\n  }\n\n  if (exactMatches.length > 1) {\n    return null;\n  }\n\n  if (pods.length === 1) {\n    return ensureTrailingSlash(pods[0].baseUrl);\n  }\n\n  return null;\n}\n\nfunction derivePodSlug(baseUrl: string): string | null {\n  try {\n    const parsed = new URL(baseUrl);\n    const [slug] = parsed.pathname.split('/').filter(Boolean);\n    return slug || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, '') + '/';\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendError(response: ServerResponse, status: number, message: string): void {\n  sendJson(response, status, { error: message });\n}\n"]}
+{"version":3,"file":"WebIdProfileHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/WebIdProfileHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAyBH,gEAgMC;AAtND,iEAAqD;AAKrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,qBAAqB,CAAC,CAAC;AAiBnD,SAAgB,0BAA0B,CACxC,MAAiB,EACjB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAE1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAClD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,sBAAsB,CAAC,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAiE,CAAC;YAElF,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;gBACzB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACxD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAuD;aAC7E,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAEtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE/D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAA4B;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAKH,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACvB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,UAAU;YACV,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAuD;gBAC5E,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAgB,EAChB,OAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,OAAmC;IAEnC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,oCAAoC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,GAAG,UAAU,iBAAiB;QACxC,UAAU;QACV,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,QAAgB,EAChB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,QAAQ,uCAAuC,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;QAC1H,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,gCAAgC,QAAQ,0CAA0C,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACxD,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,0BAA0B,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAgB,EAChB,IAAuB;IAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACnF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * WebID Profile API Handler\n *\n * 提供 WebID Profile 托管服务的 HTTP API\n *\n * GET  /{username}/profile/card     - 获取 WebID Profile (Turtle 格式)\n * POST /api/v1/identity/{username}/storage - 更新 storage 指针 (需认证)\n */\n\nimport type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\nimport type { PodLookupRepository, PodLookupResult } from '../../identity/drizzle/PodLookupRepository';\n\nconst logger = getLoggerFor('WebIdProfileHandler');\n\nexport interface WebIdProfileHandlerOptions {\n  profileRepo: WebIdProfileRepository;\n  podLookupRepo?: PodLookupRepository;\n}\n\ninterface IdentityProfileResponse {\n  username: string;\n  webidUrl: string;\n  storageUrl?: string;\n  storageMode: 'cloud' | 'local' | 'custom';\n  oidcIssuer?: string;\n  createdAt?: Date;\n  updatedAt?: Date;\n}\n\nexport function registerWebIdProfileRoutes(\n  server: ApiServer,\n  options: WebIdProfileHandlerOptions,\n): void {\n  const { profileRepo } = options;\n\n  /**\n   * GET /{username}/profile/card\n   *\n   * 获取 WebID Profile (Turtle 格式)\n   * 这是 Solid 标准的 WebID 端点\n   */\n  server.get('/:username/profile/card', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveProfileWithStorageBackfill(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      // 返回 Turtle 格式\n      const turtle = profileRepo.generateProfileTurtle(profile);\n\n      response.statusCode = 200;\n      response.setHeader('Content-Type', 'text/turtle');\n      response.setHeader('Link', `<${profile.webidUrl}>; rel=\"describedby\"`);\n      response.end(turtle);\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity/{username}/storage\n   *\n   * 更新 storage 指针\n   * 用于 Local 节点更新其 storage URL\n   *\n   * Request body:\n   * {\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"\n   * }\n   */\n  server.post('/api/v1/identity/:username/storage', async (request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as { storageUrl?: string; storageMode?: string } | undefined;\n\n      if (!payload?.storageUrl) {\n        sendError(response, 400, 'storageUrl is required');\n        return;\n      }\n\n      // 验证 URL 格式\n      try {\n        new URL(payload.storageUrl);\n      } catch {\n        sendError(response, 400, 'Invalid storageUrl format');\n        return;\n      }\n\n      const profile = await profileRepo.updateStorage(username, {\n        storageUrl: payload.storageUrl,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n      });\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      logger.info(`Updated storage for ${username}: ${payload.storageUrl}`);\n\n      sendJson(response, 200, {\n        success: true,\n        username,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to update storage for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * GET /api/v1/identity/{username}\n   *\n   * 获取 WebID Profile 信息 (JSON 格式)\n   */\n  server.get('/api/v1/identity/:username', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveIdentityLookup(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      const body: Record<string, unknown> = {\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        oidcIssuer: profile.oidcIssuer,\n      };\n      if (profile.createdAt) {\n        body.createdAt = profile.createdAt.toISOString();\n      }\n      if (profile.updatedAt) {\n        body.updatedAt = profile.updatedAt.toISOString();\n      }\n      sendJson(response, 200, body);\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity\n   *\n   * 创建 WebID Profile\n   *\n   * Request body:\n   * {\n   *   \"username\": \"alice\",\n   *   \"storageMode\": \"local\",  // optional, default: \"cloud\"\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"  // optional\n   * }\n   */\n  server.post('/api/v1/identity', async (request, response, _params) => {\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        username?: string;\n        storageMode?: string;\n        storageUrl?: string;\n        accountId?: string;\n      } | undefined;\n\n      if (!payload?.username) {\n        sendError(response, 400, 'username is required');\n        return;\n      }\n\n      // 验证用户名格式\n      if (!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(payload.username)) {\n        sendError(response, 400, 'Invalid username format');\n        return;\n      }\n\n      // 检查是否已存在\n      const existing = await profileRepo.get(payload.username);\n      if (existing) {\n        sendError(response, 409, 'Username already taken');\n        return;\n      }\n\n      const profile = await profileRepo.create({\n        username: payload.username,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n        storageUrl: payload.storageUrl,\n        accountId: payload.accountId,\n      });\n\n      logger.info(`Created profile for ${payload.username}`);\n\n      sendJson(response, 201, {\n        success: true,\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        createdAt: profile.createdAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to create profile: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  logger.info('WebID Profile routes registered');\n}\n\nasync function resolveIdentityLookup(\n  username: string,\n  options: WebIdProfileHandlerOptions,\n): Promise<IdentityProfileResponse | null> {\n  try {\n    const profile = await resolveProfileWithStorageBackfill(username, options);\n    if (profile) {\n      return profile;\n    }\n  } catch (error) {\n    logger.warn(`Profile lookup unavailable for ${username}, falling back to Pod index: ${error}`);\n  }\n\n  return resolveProfileFromPods(username, options);\n}\n\nasync function resolveProfileFromPods(\n  username: string,\n  options: WebIdProfileHandlerOptions,\n): Promise<IdentityProfileResponse | null> {\n  const { podLookupRepo } = options;\n  if (!podLookupRepo) {\n    return null;\n  }\n\n  let pods: PodLookupResult[];\n  try {\n    pods = await podLookupRepo.listAllPods();\n  } catch (error) {\n    logger.warn(`Pod index lookup unavailable for ${username}: ${error}`);\n    return null;\n  }\n\n  const match = pods.find((pod) => derivePodSlug(pod.baseUrl) === username);\n  if (!match) {\n    return null;\n  }\n\n  const storageUrl = ensureTrailingSlash(match.baseUrl);\n  return {\n    username,\n    webidUrl: `${storageUrl}profile/card#me`,\n    storageUrl,\n    storageMode: 'cloud',\n    oidcIssuer: deriveOrigin(storageUrl),\n  };\n}\n\nasync function resolveProfileWithStorageBackfill(\n  username: string,\n  options: WebIdProfileHandlerOptions,\n) {\n  const { profileRepo, podLookupRepo } = options;\n  const profile = await profileRepo.get(username);\n  if (!profile) {\n    return null;\n  }\n\n  if (profile.storageUrl || !profile.accountId || !podLookupRepo) {\n    return profile;\n  }\n\n  let pods: PodLookupResult[];\n  try {\n    pods = await podLookupRepo.listByAccountId(profile.accountId);\n  } catch (error) {\n    logger.warn(`Skipped storage backfill for ${username}: pod index unavailable for account ${profile.accountId}: ${error}`);\n    return profile;\n  }\n  const storageUrl = selectStorageBackfillCandidate(username, pods);\n  if (!storageUrl) {\n    logger.warn(`Skipped storage backfill for ${username}: no unambiguous pod found for account ${profile.accountId}`);\n    return profile;\n  }\n\n  try {\n    const updated = await profileRepo.updateStorage(username, {\n      storageUrl,\n      storageMode: profile.storageMode,\n    });\n    if (updated) {\n      logger.info(`Backfilled storage for ${username}: ${storageUrl}`);\n      return updated;\n    }\n  } catch (error) {\n    logger.warn(`Failed to backfill storage for ${username}: ${error}`);\n  }\n\n  return profile;\n}\n\nfunction selectStorageBackfillCandidate(\n  username: string,\n  pods: PodLookupResult[],\n): string | null {\n  if (pods.length === 0) {\n    return null;\n  }\n\n  const exactMatches = pods.filter((pod) => derivePodSlug(pod.baseUrl) === username);\n  if (exactMatches.length === 1) {\n    return ensureTrailingSlash(exactMatches[0].baseUrl);\n  }\n\n  if (exactMatches.length > 1) {\n    return null;\n  }\n\n  if (pods.length === 1) {\n    return ensureTrailingSlash(pods[0].baseUrl);\n  }\n\n  return null;\n}\n\nfunction derivePodSlug(baseUrl: string): string | null {\n  try {\n    const parsed = new URL(baseUrl);\n    const [slug] = parsed.pathname.split('/').filter(Boolean);\n    return slug || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, '') + '/';\n}\n\nfunction deriveOrigin(url: string): string | undefined {\n  try {\n    return ensureTrailingSlash(new URL(url).origin);\n  } catch {\n    return undefined;\n  }\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendError(response: ServerResponse, status: number, message: string): void {\n  sendJson(response, status, { error: message });\n}\n"]}

package/dist/api/runtime.js

@@ -55,16 +55,21 @@ async function startBackgroundServices(container, logger) {
         logger.error(`Failed to initialize DdnsManager: ${error}`);
     }
     try {
-        const localNetworkManager = container.resolve('localNetworkManager', { allowUnregistered: true });
         const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true });
-        if (!localNetworkManager && localTunnelProvider) {
-            logger.info('Starting Cloudflare Tunnel (standalone mode)...');
-            await localTunnelProvider.start();
-            logger.info('Cloudflare Tunnel started');
+        if (localTunnelProvider) {
+            logger.info('Starting local tunnel provider...');
+            const localPort = Number.parseInt(process.env.XPOD_MAIN_PORT ?? process.env.CSS_PORT ?? process.env.PORT ?? '3000', 10);
+            const config = await localTunnelProvider.setup({
+                subdomain: 'local',
+                localPort: Number.isFinite(localPort) && localPort > 0 ? localPort : 3000,
+                localProtocol: 'http',
+            });
+            await localTunnelProvider.start(config);
+            logger.info('Local tunnel provider started');
         }
     }
     catch (error) {
-        logger.error(`Failed to start Cloudflare Tunnel: ${error}`);
+        logger.error(`Failed to start local tunnel provider: ${error}`);
     }
 }
 async function stopBackgroundServices(container) {