@undefineds.co/xpod 0.3.18 → 0.3.23

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
-exports.AuthModeSelector = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.ScopedPickWebIdHandler = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.SolidRdfSparqlEngine = exports.SolidRdfEngine = exports.ShadowRdfQuintStore = exports.RdfSparqlAdapter = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = void 0;
+exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.SolidRdfDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
+exports.AuthModeSelector = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.ScopedPickWebIdHandler = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.SolidRdfSparqlEngine = exports.SolidRdfEngine = exports.ShadowRdfQuintStore = exports.RdfSparqlAdapter = exports.Rdf3xIndex = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = void 0;
 require("./runtime/configure-drizzle-solid");
 const RepresentationPartialConvertingStore_1 = require("./storage/RepresentationPartialConvertingStore");
 Object.defineProperty(exports, "RepresentationPartialConvertingStore", { enumerable: true, get: function () { return RepresentationPartialConvertingStore_1.RepresentationPartialConvertingStore; } });
@@ -11,14 +11,17 @@ const QuadstoreSparqlDataAccessor_1 = require("./storage/accessors/QuadstoreSpar
 Object.defineProperty(exports, "QuadstoreSparqlDataAccessor", { enumerable: true, get: function () { return QuadstoreSparqlDataAccessor_1.QuadstoreSparqlDataAccessor; } });
 const QuintStoreSparqlDataAccessor_1 = require("./storage/accessors/QuintStoreSparqlDataAccessor");
 Object.defineProperty(exports, "QuintStoreSparqlDataAccessor", { enumerable: true, get: function () { return QuintStoreSparqlDataAccessor_1.QuintStoreSparqlDataAccessor; } });
+const SolidRdfDataAccessor_1 = require("./storage/accessors/SolidRdfDataAccessor");
+Object.defineProperty(exports, "SolidRdfDataAccessor", { enumerable: true, get: function () { return SolidRdfDataAccessor_1.SolidRdfDataAccessor; } });
 const MixDataAccessor_1 = require("./storage/accessors/MixDataAccessor");
 Object.defineProperty(exports, "MixDataAccessor", { enumerable: true, get: function () { return MixDataAccessor_1.MixDataAccessor; } });
 const ConfigurableLoggerFactory_1 = require("./logging/ConfigurableLoggerFactory");
 Object.defineProperty(exports, "ConfigurableLoggerFactory", { enumerable: true, get: function () { return ConfigurableLoggerFactory_1.ConfigurableLoggerFactory; } });
 const SubgraphQueryEngine_1 = require("./storage/sparql/SubgraphQueryEngine");
 Object.defineProperty(exports, "SubgraphQueryEngine", { enumerable: true, get: function () { return SubgraphQueryEngine_1.SubgraphQueryEngine; } });
-Object.defineProperty(exports, "QuadstoreSparqlEngine", { enumerable: true, get: function () { return SubgraphQueryEngine_1.QuadstoreSparqlEngine; } });
-Object.defineProperty(exports, "QuintstoreSparqlEngine", { enumerable: true, get: function () { return SubgraphQueryEngine_1.QuintstoreSparqlEngine; } });
+const CompatibilitySparqlEngine_1 = require("./storage/sparql/CompatibilitySparqlEngine");
+Object.defineProperty(exports, "QuadstoreSparqlEngine", { enumerable: true, get: function () { return CompatibilitySparqlEngine_1.QuadstoreSparqlEngine; } });
+Object.defineProperty(exports, "QuintstoreSparqlEngine", { enumerable: true, get: function () { return CompatibilitySparqlEngine_1.QuintstoreSparqlEngine; } });
 const SubgraphSparqlHttpHandler_1 = require("./http/SubgraphSparqlHttpHandler");
 Object.defineProperty(exports, "SubgraphSparqlHttpHandler", { enumerable: true, get: function () { return SubgraphSparqlHttpHandler_1.SubgraphSparqlHttpHandler; } });
 const QuotaAdminHttpHandler_1 = require("./http/quota/QuotaAdminHttpHandler");
@@ -103,6 +106,8 @@ const types_1 = require("./storage/quint/types");
 Object.defineProperty(exports, "QuintStore", { enumerable: true, get: function () { return types_1.QuintStore; } });
 const RdfQuadIndex_1 = require("./storage/rdf/RdfQuadIndex");
 Object.defineProperty(exports, "RdfQuadIndex", { enumerable: true, get: function () { return RdfQuadIndex_1.RdfQuadIndex; } });
+const Rdf3xIndex_1 = require("./storage/rdf/Rdf3xIndex");
+Object.defineProperty(exports, "Rdf3xIndex", { enumerable: true, get: function () { return Rdf3xIndex_1.Rdf3xIndex; } });
 const RdfSparqlAdapter_1 = require("./storage/rdf/RdfSparqlAdapter");
 Object.defineProperty(exports, "RdfSparqlAdapter", { enumerable: true, get: function () { return RdfSparqlAdapter_1.RdfSparqlAdapter; } });
 const RdfTermDictionary_1 = require("./storage/rdf/RdfTermDictionary");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAC3C,yGAAsG;AAsIlG,qHAtIK,2EAAoC,OAsIL;AArIxC,6EAA0E;AAsItE,kGAtIK,qCAAiB,OAsIL;AArIrB,iGAA8F;AAsI1F,4GAtIK,yDAA2B,OAsIL;AArI/B,mGAAgG;AAsI5F,6GAtIK,2DAA4B,OAsIL;AArIhC,yEAAsE;AAsIlE,gGAtIK,iCAAe,OAsIL;AArInB,mFAAgF;AAsI5E,0GAtIK,qDAAyB,OAsIL;AArI7B,8EAA0H;AAuItH,oGAvIK,yCAAmB,OAuIL;AACnB,sGAxI0B,2CAAqB,OAwI1B;AACrB,uGAzIiD,4CAAsB,OAyIjD;AAnH1B,gFAA6E;AAoHzE,0GApHK,qDAAyB,OAoHL;AAnH7B,8EAA2E;AAoHvE,sGApHK,6CAAqB,OAoHL;AAnHzB,mFAAgF;AA8G5E,0GA9GK,qDAAyB,OA8GL;AA7G7B,sEAAmE;AAmH/D,qGAnHK,2CAAoB,OAmHL;AAlHxB,sFAAmF;AAmH/E,6GAnHK,2DAA4B,OAmHL;AAlHhC,0FAAuF;AAmHnF,+GAnHK,+DAA8B,OAmHL;AAlHlC,8EAA2E;AAmHvE,yGAnHK,mDAAwB,OAmHL;AAlH5B,gEAA6D;AAmHzD,kGAnHK,qCAAiB,OAmHL;AAlHrB,4DAAyD;AAmHrD,gGAnHK,iCAAe,OAmHL;AAlHnB,0DAAuD;AAmHnD,+FAnHK,+BAAc,OAmHL;AAlHlB,6EAA0E;AAoHtE,oGApHK,yCAAmB,OAoHL;AAnHvB,gGAA6F;AAkHzF,+GAlHK,+DAA8B,OAkHL;AAjHlC,gGAA6F;AAmHzF,kHAnHK,qEAAiC,OAmHL;AAlHrC,oFAAiF;AAmH7E,sGAnHK,6CAAqB,OAmHL;AAlHzB,4GAAyG;AAmHrG,sHAnHK,6EAAqC,OAmHL;AAlHzC,wFAAqF;AAmHjF,wGAnHK,iDAAuB,OAmHL;AAlH3B,kFAA+E;AAmH3E,qGAnHK,2CAAoB,OAmHL;AAlHxB,oFAAiF;AAmH7E,sGAnHK,6CAAqB,OAmHL;AAlHzB,qEAAkE;AAmHhE,oGAnHO,yCAAmB,OAmHP;AAlHrB,+DAA4D;AAmH1D,iGAnHO,mCAAgB,OAmHP;AAlHlB,qEAA+F;AAmH7F,wGAnHO,6CAAuB,OAmHP;AACvB,wGApHgC,6CAAuB,OAoHhC;AAnHzB,qFAAkF;AAoHhF,wGApHO,iDAAuB,OAoHP;AAnHzB,yEAAsE;AAoHlE,mGApHK,uCAAkB,OAoHL;AAnHtB,0EAAuE;AAoHnE,uGApHK,+CAAsB,OAoHL;AAnH1B,oFAAiF;AAoH7E,4GApHK,yDAA2B,OAoHL;AAnH/B,wEAAsG;AAoHlG,4GApHK,mDAA2B,OAoHL;AAC3B,0GArHkC,iDAAyB,OAqHlC;AApH7B,8DAA2D;AAqHvD,iGArHK,mCAAgB,OAqHL;AApHpB,+EAA4E;AAwHxE,uGAxHK,+CAAsB,OAwHL;AAvH1B,kFAA+E;AAoH3E,2GApHK,uDAA0B,OAoHL;AAnH9B,wDAAqD;AAoHjD,8FApHK,6BAAa,OAoHL;AAnHjB,qFAAkF;AAoH9E,2GApHK,uDAA0B,OAoHL;AAlH9B,2EAAwE;AAsHtE,mGAtHO,uCAAkB,OAsHP;AArHpB,sEAAmE;AAmH/D,qGAnHK,2CAAoB,OAmHL;AAlHxB,4FAAyF;AAmHrF,0GAnHK,qDAAyB,OAmHL;AAlH7B,4FAAyF;AAoHvF,8GApHO,6DAA6B,OAoHP;AAnH/B,wEAAqE;AAoHnE,sGApHO,6CAAqB,OAoHP;AAnHvB,wEAAqE;AAoHnE,oGApHO,yCAAmB,OAoHP;AAnHrB,uEAAoE;AAsHlE,iGAtHO,mCAAgB,OAsHP;AArHlB,+DAA4D;AAsH1D,6FAtHO,2BAAY,OAsHP;AArHd,iDAAmD;AAmHjD,2FAnHO,kBAAU,OAmHP;AAlHZ,6DAA0D;AAuHxD,6FAvHO,2BAAY,OAuHP;AAtHd,qEAAkE;AAuHhE,iGAvHO,mCAAgB,OAuHP;AAtHlB,uEAAoE;AAoHlE,kGApHO,qCAAiB,OAoHP;AAnHnB,2EAAwE;AAsHtE,oGAtHO,yCAAmB,OAsHP;AArHrB,iEAA8D;AAsH5D,+FAtHO,+BAAc,OAsHP;AArHhB,6EAA0E;AAsHxE,qGAtHO,2CAAoB,OAsHP;AApHtB,oBAAoB;AACpB,kDAAgF;AAsH9E,kGAtHO,yBAAiB,OAsHP;AACjB,oGAvH0B,2BAAmB,OAuH1B;AAtHrB,uEAAoE;AAuHlE,kGAvHO,qCAAiB,OAuHP;AAtHnB,oEAAiE;AAwH/D,iGAxHO,mCAAgB,OAwHP;AAvHlB,4EAAyE;AAwHvE,qGAxHO,2CAAoB,OAwHP;AAvHtB,oEAAiE;AAwH/D,iGAxHO,mCAAgB,OAwHP;AAvHlB,4EAAyE;AAwHvE,qGAxHO,2CAAoB,OAwHP;AAvHtB,oEAAiE;AAwH/D,iGAxHO,mCAAgB,OAwHP;AAvHlB,4EAAyE;AAwHvE,qGAxHO,2CAAoB,OAwHP;AAvHtB,8DAA2D;AA6GzD,4FA7GO,yBAAW,OA6GP;AA5Gb,kCAAkC;AAClC,gFAA6E;AAuH3E,yGAvHO,mDAAwB,OAuHP;AAtH1B,sEAAmE;AAuHjE,oGAvHO,yCAAmB,OAuHP;AAtHrB,mEAAgE;AAuH9D,iGAvHO,mCAAgB,OAuHP;AAtHlB,+EAA4E;AAgI1E,oGAhIO,yCAAmB,OAgIP;AA/HrB,+BAA+B;AAC/B,oGAAiG;AAsH/F,8GAtHO,6DAA6B,OAsHP;AArH/B,sGAAmG;AAsHjG,+GAtHO,+DAA8B,OAsHP;AArHhC,6EAA0E;AAsHxE,oGAtHO,yCAAmB,OAsHP;AArHrB,qGAAkG;AAsHhG,gHAtHO,iEAA+B,OAsHP;AArHjC,iFAA8E;AAsH5E,sGAtHO,6CAAqB,OAsHP;AArHvB,yGAAsG;AAsHpG,kHAtHO,qEAAiC,OAsHP;AArHnC,mGAAgG;AAsH9F,+GAtHO,+DAA8B,OAsHP;AArHhC,mFAAgF;AAsH9E,uGAtHO,+CAAsB,OAsHP;AArHxB,uBAAuB;AACvB,yEAAsE;AAuHpE,oGAvHO,yCAAmB,OAuHP;AAtHrB,uEAAoE;AAuHlE,mGAvHO,uCAAkB,OAuHP;AAtHpB,yFAAsF;AAuHpF,4GAvHO,yDAA2B,OAuHP;AAtH7B,2BAA2B;AAC3B,uEAAoE;AAuHlE,iGAvHO,mCAAgB,OAuHP;AA9FlB,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import './runtime/configure-drizzle-solid';\nimport { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type {\n  RdfIndexStats,\n  RdfIndexSpaceObject,\n  RdfIndexMetrics,\n  RdfIndexPutOptions,\n  RdfPatternQuery,\n  RdfQuadIndexOptions,\n  RdfQuadIndexScanResult,\n  RdfShadowBackfillOptions,\n  RdfShadowBackfillResult,\n  RdfShadowDiff,\n  RdfShadowScanResult,\n  RdfSourceInput,\n} from './storage/rdf/types';\nexport type { RdfSparqlCompileResult } from './storage/rdf/RdfSparqlAdapter';\nexport type { ShadowRdfQuintStoreOptions } from './storage/rdf/ShadowRdfQuintStore';\nexport type {\n  SolidRdfSparqlEngineOptions,\n  SolidRdfSparqlFallback,\n} from './storage/rdf/SolidRdfSparqlEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { ValidatingIdentityProviderHttpHandler } from './identity/ValidatingIdentityProviderHttpHandler';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { HttpEntitlementProvider, NoopEntitlementProvider } from './quota/EntitlementProvider';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport { RdfQuadIndex } from './storage/rdf/RdfQuadIndex';\nimport { RdfSparqlAdapter } from './storage/rdf/RdfSparqlAdapter';\nimport { RdfTermDictionary } from './storage/rdf/RdfTermDictionary';\nimport { ShadowRdfQuintStore } from './storage/rdf/ShadowRdfQuintStore';\nimport { SolidRdfEngine } from './storage/rdf/SolidRdfEngine';\nimport { SolidRdfSparqlEngine } from './storage/rdf/SolidRdfSparqlEngine';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\nimport { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\nimport { LoopbackClientIdAdapterFactory } from './identity/oidc/LoopbackClientIdAdapterFactory';\nimport { ScopedPickWebIdHandler } from './identity/oidc/ScopedPickWebIdHandler';\n// Provision components\nimport { ProvisionPodCreator } from './provision/ProvisionPodCreator';\nimport { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';\nimport { LocalPodProvisioningService } from './provision/LocalPodProvisioningService';\n// Authorization components\nimport { AuthModeSelector } from './authorization/AuthModeSelector';\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService, AccountQuota } from './quota/QuotaService';\nexport type { EntitlementProvider, AccountEntitlement } from './quota/EntitlementProvider';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    ValidatingIdentityProviderHttpHandler,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DrizzleQuotaService,\n  NoopQuotaService,\n  HttpEntitlementProvider,\n  NoopEntitlementProvider,\n  PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  // RDF engine exports\n  RdfTermDictionary,\n  RdfQuadIndex,\n  RdfSparqlAdapter,\n  ShadowRdfQuintStore,\n  SolidRdfEngine,\n  SolidRdfSparqlEngine,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n  LoopbackClientIdAdapterFactory,\n  ScopedPickWebIdHandler,\n  UrlAwareRedisLocker,\n  // Provision exports\n  ProvisionPodCreator,\n  ProvisionCodeCodec,\n  LocalPodProvisioningService,\n  // Authorization exports\n  AuthModeSelector,\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAC3C,yGAAsG;AA0IlG,qHA1IK,2EAAoC,OA0IL;AAzIxC,6EAA0E;AA0ItE,kGA1IK,qCAAiB,OA0IL;AAzIrB,iGAA8F;AA0I1F,4GA1IK,yDAA2B,OA0IL;AAzI/B,mGAAgG;AA0I5F,6GA1IK,2DAA4B,OA0IL;AAzIhC,mFAAgF;AA0I5E,qGA1IK,2CAAoB,OA0IL;AAzIxB,yEAAsE;AA0IlE,gGA1IK,iCAAe,OA0IL;AAzInB,mFAAgF;AA0I5E,0GA1IK,qDAAyB,OA0IL;AAzI7B,8EAA2E;AA2IvE,oGA3IK,yCAAmB,OA2IL;AA1IvB,0FAA2G;AA2IvG,sGA3IK,iDAAqB,OA2IL;AACrB,uGA5I4B,kDAAsB,OA4I5B;AAtH1B,gFAA6E;AAuHzE,0GAvHK,qDAAyB,OAuHL;AAtH7B,8EAA2E;AAuHvE,sGAvHK,6CAAqB,OAuHL;AAtHzB,mFAAgF;AAiH5E,0GAjHK,qDAAyB,OAiHL;AAhH7B,sEAAmE;AAsH/D,qGAtHK,2CAAoB,OAsHL;AArHxB,sFAAmF;AAsH/E,6GAtHK,2DAA4B,OAsHL;AArHhC,0FAAuF;AAsHnF,+GAtHK,+DAA8B,OAsHL;AArHlC,8EAA2E;AAsHvE,yGAtHK,mDAAwB,OAsHL;AArH5B,gEAA6D;AAsHzD,kGAtHK,qCAAiB,OAsHL;AArHrB,4DAAyD;AAsHrD,gGAtHK,iCAAe,OAsHL;AArHnB,0DAAuD;AAsHnD,+FAtHK,+BAAc,OAsHL;AArHlB,6EAA0E;AAuHtE,oGAvHK,yCAAmB,OAuHL;AAtHvB,gGAA6F;AAqHzF,+GArHK,+DAA8B,OAqHL;AApHlC,gGAA6F;AAsHzF,kHAtHK,qEAAiC,OAsHL;AArHrC,oFAAiF;AAsH7E,sGAtHK,6CAAqB,OAsHL;AArHzB,4GAAyG;AAsHrG,sHAtHK,6EAAqC,OAsHL;AArHzC,wFAAqF;AAsHjF,wGAtHK,iDAAuB,OAsHL;AArH3B,kFAA+E;AAsH3E,qGAtHK,2CAAoB,OAsHL;AArHxB,oFAAiF;AAsH7E,sGAtHK,6CAAqB,OAsHL;AArHzB,qEAAkE;AAsHhE,oGAtHO,yCAAmB,OAsHP;AArHrB,+DAA4D;AAsH1D,iGAtHO,mCAAgB,OAsHP;AArHlB,qEAA+F;AAsH7F,wGAtHO,6CAAuB,OAsHP;AACvB,wGAvHgC,6CAAuB,OAuHhC;AAtHzB,qFAAkF;AAuHhF,wGAvHO,iDAAuB,OAuHP;AAtHzB,yEAAsE;AAuHlE,mGAvHK,uCAAkB,OAuHL;AAtHtB,0EAAuE;AAuHnE,uGAvHK,+CAAsB,OAuHL;AAtH1B,oFAAiF;AAuH7E,4GAvHK,yDAA2B,OAuHL;AAtH/B,wEAAsG;AAuHlG,4GAvHK,mDAA2B,OAuHL;AAC3B,0GAxHkC,iDAAyB,OAwHlC;AAvH7B,8DAA2D;AAwHvD,iGAxHK,mCAAgB,OAwHL;AAvHpB,+EAA4E;AA2HxE,uGA3HK,+CAAsB,OA2HL;AA1H1B,kFAA+E;AAuH3E,2GAvHK,uDAA0B,OAuHL;AAtH9B,wDAAqD;AAuHjD,8FAvHK,6BAAa,OAuHL;AAtHjB,qFAAkF;AAuH9E,2GAvHK,uDAA0B,OAuHL;AArH9B,2EAAwE;AAyHtE,mGAzHO,uCAAkB,OAyHP;AAxHpB,sEAAmE;AAsH/D,qGAtHK,2CAAoB,OAsHL;AArHxB,4FAAyF;AAsHrF,0GAtHK,qDAAyB,OAsHL;AArH7B,4FAAyF;AAuHvF,8GAvHO,6DAA6B,OAuHP;AAtH/B,wEAAqE;AAuHnE,sGAvHO,6CAAqB,OAuHP;AAtHvB,wEAAqE;AAuHnE,oGAvHO,yCAAmB,OAuHP;AAtHrB,uEAAoE;AAyHlE,iGAzHO,mCAAgB,OAyHP;AAxHlB,+DAA4D;AAyH1D,6FAzHO,2BAAY,OAyHP;AAxHd,iDAAmD;AAsHjD,2FAtHO,kBAAU,OAsHP;AArHZ,6DAA0D;AA0HxD,6FA1HO,2BAAY,OA0HP;AAzHd,yDAAsD;AA0HpD,2FA1HO,uBAAU,OA0HP;AAzHZ,qEAAkE;AA0HhE,iGA1HO,mCAAgB,OA0HP;AAzHlB,uEAAoE;AAsHlE,kGAtHO,qCAAiB,OAsHP;AArHnB,2EAAwE;AAyHtE,oGAzHO,yCAAmB,OAyHP;AAxHrB,iEAA8D;AAyH5D,+FAzHO,+BAAc,OAyHP;AAxHhB,6EAA0E;AAyHxE,qGAzHO,2CAAoB,OAyHP;AAvHtB,oBAAoB;AACpB,kDAAgF;AAyH9E,kGAzHO,yBAAiB,OAyHP;AACjB,oGA1H0B,2BAAmB,OA0H1B;AAzHrB,uEAAoE;AA0HlE,kGA1HO,qCAAiB,OA0HP;AAzHnB,oEAAiE;AA2H/D,iGA3HO,mCAAgB,OA2HP;AA1HlB,4EAAyE;AA2HvE,qGA3HO,2CAAoB,OA2HP;AA1HtB,oEAAiE;AA2H/D,iGA3HO,mCAAgB,OA2HP;AA1HlB,4EAAyE;AA2HvE,qGA3HO,2CAAoB,OA2HP;AA1HtB,oEAAiE;AA2H/D,iGA3HO,mCAAgB,OA2HP;AA1HlB,4EAAyE;AA2HvE,qGA3HO,2CAAoB,OA2HP;AA1HtB,8DAA2D;AAgHzD,4FAhHO,yBAAW,OAgHP;AA/Gb,kCAAkC;AAClC,gFAA6E;AA0H3E,yGA1HO,mDAAwB,OA0HP;AAzH1B,sEAAmE;AA0HjE,oGA1HO,yCAAmB,OA0HP;AAzHrB,mEAAgE;AA0H9D,iGA1HO,mCAAgB,OA0HP;AAzHlB,+EAA4E;AAmI1E,oGAnIO,yCAAmB,OAmIP;AAlIrB,+BAA+B;AAC/B,oGAAiG;AAyH/F,8GAzHO,6DAA6B,OAyHP;AAxH/B,sGAAmG;AAyHjG,+GAzHO,+DAA8B,OAyHP;AAxHhC,6EAA0E;AAyHxE,oGAzHO,yCAAmB,OAyHP;AAxHrB,qGAAkG;AAyHhG,gHAzHO,iEAA+B,OAyHP;AAxHjC,iFAA8E;AAyH5E,sGAzHO,6CAAqB,OAyHP;AAxHvB,yGAAsG;AAyHpG,kHAzHO,qEAAiC,OAyHP;AAxHnC,mGAAgG;AAyH9F,+GAzHO,+DAA8B,OAyHP;AAxHhC,mFAAgF;AAyH9E,uGAzHO,+CAAsB,OAyHP;AAxHxB,uBAAuB;AACvB,yEAAsE;AA0HpE,oGA1HO,yCAAmB,OA0HP;AAzHrB,uEAAoE;AA0HlE,mGA1HO,uCAAkB,OA0HP;AAzHpB,yFAAsF;AA0HpF,4GA1HO,yDAA2B,OA0HP;AAzH7B,2BAA2B;AAC3B,uEAAoE;AA0HlE,iGA1HO,mCAAgB,OA0HP;AAhGlB,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import './runtime/configure-drizzle-solid';\nimport { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { SolidRdfDataAccessor } from './storage/accessors/SolidRdfDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine } from './storage/sparql/SubgraphQueryEngine';\nimport { QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/CompatibilitySparqlEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type {\n  RdfIndexStats,\n  RdfIndexSpaceObject,\n  RdfIndexMetrics,\n  RdfIndexPutOptions,\n  RdfPatternQuery,\n  RdfQuadIndexOptions,\n  RdfQuadIndexScanResult,\n  RdfShadowBackfillOptions,\n  RdfShadowBackfillResult,\n  RdfShadowDiff,\n  RdfShadowScanResult,\n  RdfSourceInput,\n} from './storage/rdf/types';\nexport type { RdfSparqlCompileResult } from './storage/rdf/RdfSparqlAdapter';\nexport type { ShadowRdfQuintStoreOptions } from './storage/rdf/ShadowRdfQuintStore';\nexport type {\n  SolidRdfSparqlEngineOptions,\n  SolidRdfSparqlFallback,\n} from './storage/rdf/SolidRdfSparqlEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { ValidatingIdentityProviderHttpHandler } from './identity/ValidatingIdentityProviderHttpHandler';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { HttpEntitlementProvider, NoopEntitlementProvider } from './quota/EntitlementProvider';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport { RdfQuadIndex } from './storage/rdf/RdfQuadIndex';\nimport { Rdf3xIndex } from './storage/rdf/Rdf3xIndex';\nimport { RdfSparqlAdapter } from './storage/rdf/RdfSparqlAdapter';\nimport { RdfTermDictionary } from './storage/rdf/RdfTermDictionary';\nimport { ShadowRdfQuintStore } from './storage/rdf/ShadowRdfQuintStore';\nimport { SolidRdfEngine } from './storage/rdf/SolidRdfEngine';\nimport { SolidRdfSparqlEngine } from './storage/rdf/SolidRdfSparqlEngine';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\nimport { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\nimport { LoopbackClientIdAdapterFactory } from './identity/oidc/LoopbackClientIdAdapterFactory';\nimport { ScopedPickWebIdHandler } from './identity/oidc/ScopedPickWebIdHandler';\n// Provision components\nimport { ProvisionPodCreator } from './provision/ProvisionPodCreator';\nimport { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';\nimport { LocalPodProvisioningService } from './provision/LocalPodProvisioningService';\n// Authorization components\nimport { AuthModeSelector } from './authorization/AuthModeSelector';\n\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService, AccountQuota } from './quota/QuotaService';\nexport type { EntitlementProvider, AccountEntitlement } from './quota/EntitlementProvider';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    SolidRdfDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    ValidatingIdentityProviderHttpHandler,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DrizzleQuotaService,\n  NoopQuotaService,\n  HttpEntitlementProvider,\n  NoopEntitlementProvider,\n  PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  // RDF engine exports\n  RdfTermDictionary,\n  RdfQuadIndex,\n  Rdf3xIndex,\n  RdfSparqlAdapter,\n  ShadowRdfQuintStore,\n  SolidRdfEngine,\n  SolidRdfSparqlEngine,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n  LoopbackClientIdAdapterFactory,\n  ScopedPickWebIdHandler,\n  UrlAwareRedisLocker,\n  // Provision exports\n  ProvisionPodCreator,\n  ProvisionCodeCodec,\n  LocalPodProvisioningService,\n  // Authorization exports\n  AuthModeSelector,\n};\n"]}

package/dist/runtime/Proxy.d.ts

@@ -20,7 +20,10 @@ export declare class GatewayProxy {
     stop(): Promise<void>;
     private handleRequest;
     private shouldInspectRootMutation;
+    private shouldRejectRootResourceMutation;
+    private writeRootMutationForbidden;
     private normalizeRootMutationProxyResponse;
+    private createRootMutationForbiddenBody;
     private sanitizeProxyResponseHeaders;
     private handleCorsPreflightRequest;
     /**

package/dist/runtime/Proxy.js

@@ -148,6 +148,10 @@ class GatewayProxy {
         }
         // 3. CSS Routing (Default)
         if (this.targets.css) {
+            if (this.shouldRejectRootResourceMutation(req)) {
+                this.writeRootMutationForbidden(res);
+                return;
+            }
             const interceptedRequest = req;
             interceptedRequest.__xpodInspectRootMutation = this.shouldInspectRootMutation(req);
             this.proxy.web(req, res, {
@@ -169,6 +173,23 @@ class GatewayProxy {
         const segments = pathname.split('/').filter(Boolean);
         return segments.length === 1 && !segments[0].startsWith('.');
     }
+    shouldRejectRootResourceMutation(req) {
+        const method = (req.method ?? 'GET').toUpperCase();
+        if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(method)) {
+            return false;
+        }
+        const pathname = new URL(req.url ?? '/', 'http://localhost').pathname;
+        const segments = pathname.split('/').filter(Boolean);
+        return segments.length === 1 && !segments[0].startsWith('.') && !pathname.endsWith('/');
+    }
+    writeRootMutationForbidden(res) {
+        const body = Buffer.from(JSON.stringify(this.createRootMutationForbiddenBody()));
+        res.writeHead(403, {
+            'Content-Type': 'application/json',
+            'Content-Length': String(body.byteLength),
+        });
+        res.end(body);
+    }
     normalizeRootMutationProxyResponse(proxyRes, body) {
         const headers = { ...proxyRes.headers };
         const statusCode = proxyRes.statusCode ?? 500;
@@ -181,13 +202,7 @@ class GatewayProxy {
         if (statusCode === 500 &&
             bodyText.includes('Cannot obtain the parent of') &&
             bodyText.includes('because it is a root container')) {
-            const normalizedBody = Buffer.from(JSON.stringify({
-                name: 'ForbiddenHttpError',
-                message: 'Write to server root is not allowed.',
-                statusCode: 403,
-                errorCode: 'H403',
-                details: { cause: 'root-container-write' },
-            }));
+            const normalizedBody = Buffer.from(JSON.stringify(this.createRootMutationForbiddenBody()));
             delete headers['content-length'];
             delete headers['transfer-encoding'];
             headers['content-type'] = 'application/json';
@@ -198,6 +213,15 @@ class GatewayProxy {
         headers['content-length'] = String(body.byteLength);
         return { statusCode, headers, body };
     }
+    createRootMutationForbiddenBody() {
+        return {
+            name: 'ForbiddenHttpError',
+            message: 'Write to server root is not allowed.',
+            statusCode: 403,
+            errorCode: 'H403',
+            details: { cause: 'root-container-write' },
+        };
+    }
     sanitizeProxyResponseHeaders(req, proxyRes) {
         const method = (req.method ?? 'GET').toUpperCase();
         const statusCode = proxyRes.statusCode ?? 200;

package/dist/runtime/Proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"Proxy.js","sourceRoot":"","sources":["../../src/runtime/Proxy.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,gDAAwB;AACxB,iEAAqD;AAErD,iEAA8D;AAK9D,uDAAuD;AACvD,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACrE,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE;QACd,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAC3D,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM;KAChE;IACD,cAAc,EAAE;QACd,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe;QACrE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa;QAC1D,WAAW,EAAE,kBAAkB,EAAE,cAAc;KAChD;CACF,CAAC;AAEF,MAAa,YAAY;IAWvB,YACE,IAAwB,EAChB,UAAsB,EAC9B,QAAQ,GAAG,SAAS,EACpB,UAA+B,EAAE;QAFzB,eAAU,GAAV,UAAU,CAAY;QAZf,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAGrC,YAAO,GAA2D,EAAE,CAAC;QAa3E,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iCAAe,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC;YACpF,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,oBAAS,CAAC,iBAAiB,CAAC;YACvC,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/C,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,kBAAkB,GAAG,GAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,GAA0B,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvF,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,kCAAkC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAClF,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAE3B,kDAAkD;YAClD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,UAAU,CAAC,OAAiF;QACjG,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAyB,EAAE,GAAwB;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,+DAA+D;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAEtC,8CAA8C;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;QAC7C,CAAC;QAED,+DAA+D;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACrC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,sBAAsB,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAC1J,CAAC;QAEF,gCAAgC;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,KAAK,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,sCAAsC;QAEtC,8DAA8D;QAC9D,IAAI,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7G,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACrB,MAAM,kBAAkB,GAAG,GAAyB,CAAC;YACrD,kBAAkB,CAAC,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ;gBACnD,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,GAAyB;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,CAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAEO,kCAAkC,CACxC,QAA8B,EAC9B,IAAY;QAEZ,MAAM,OAAO,GAA6B,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAC9C,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;YACtE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;YAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvF,IACE,UAAU,KAAK,GAAG;YAClB,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAChD,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACnD,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,sCAAsC;gBAC/C,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;aAC3C,CAAC,CAAC,CAAC;YACJ,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAC9D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpC,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAEO,4BAA4B,CAAC,GAAyB,EAAE,QAA8B;QAC5F,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAwD,CAAC;QAClF,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACzD,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3E,CAAC,CAAC,OAAO,gBAAgB,KAAK,QAAQ;gBACpC,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACpD,CAAC,CAAC,KAAK,CAAC;QAEZ,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7G,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,IAAI,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,GAAwB,EACxB,MAA0B;QAE1B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAwB,EAAE,MAA0B;QACzE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAyB,EAAE,GAAwB;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAEjC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;gBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;gBAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEhE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBACnC,KAAK;oBACL,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBAC5D,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtC,YAAY,CAAC,GAAG,EAAE;oBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3E,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;wBACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe,CAAC,MAAoC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,MAA0B;QAC9C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO;gBACL,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,GAAI,CAAC;IACrB,CAAC;CACF;AApVD,oCAoVC","sourcesContent":["import httpProxy from 'http-proxy';\nimport http from 'http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Supervisor } from '../supervisor/Supervisor';\nimport { nodeRuntimeHost } from './host/node/NodeRuntimeHost';\nimport type { RuntimeHost, RuntimeListenEndpoint } from './host/types';\n\ntype InterceptedRequest = http.IncomingMessage & { __xpodInspectRootMutation?: boolean };\n\n// CORS configuration matching CSS CorsHandler defaults\nconst CORS_CONFIG = {\n  methods: ['GET', 'HEAD', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'],\n  credentials: true,\n  allowedHeaders: [\n    'Authorization', 'Content-Type', 'Accept', 'DPoP', 'Origin',\n    'X-Requested-With', 'If-Match', 'If-None-Match', 'Slug', 'Link',\n  ],\n  exposedHeaders: [\n    'Accept-Patch', 'Accept-Post', 'Accept-Put', 'Allow', 'Content-Range',\n    'ETag', 'Last-Modified', 'Link', 'Location', 'Updates-Via',\n    'WAC-Allow', 'Www-Authenticate', 'X-Request-Id',\n  ],\n};\n\nexport class GatewayProxy {\n  private readonly logger = getLoggerFor(this);\n  private proxy: httpProxy;\n  private server: http.Server;\n  private targets: { css?: GatewayProxyTarget; api?: GatewayProxyTarget } = {};\n  private readonly runtimeHost: RuntimeHost;\n  private readonly listenEndpoint: RuntimeListenEndpoint;\n  private readonly exitOnStop: boolean;\n  private readonly shutdownHandler?: () => Promise<void>;\n  private readonly baseUrl?: string;\n\n  constructor(\n    port: number | undefined,\n    private supervisor: Supervisor,\n    bindHost = '0.0.0.0',\n    options: GatewayProxyOptions = {},\n  ) {\n    this.runtimeHost = options.runtimeHost ?? nodeRuntimeHost;\n    this.listenEndpoint = options.listenEndpoint ?? this.runtimeHost.createListenEndpoint({\n      port,\n      host: bindHost,\n      socketPath: options.socketPath,\n    });\n    this.exitOnStop = options.exitOnStop ?? false;\n    this.shutdownHandler = options.shutdownHandler;\n    this.baseUrl = options.baseUrl;\n    this.proxy = httpProxy.createProxyServer({\n      xfwd: true,\n    });\n\n    this.proxy.on('error', (err, _req, res) => {\n      this.logger.error('Proxy error:', err);\n      if (res && 'writeHead' in res && !res.headersSent) {\n        res.writeHead(502, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ error: 'Service Unavailable', details: err.message }));\n      }\n    });\n\n    this.proxy.on('proxyRes', (proxyRes, req, res) => {\n      this.sanitizeProxyResponseHeaders(req, proxyRes);\n      const interceptedRequest = req as InterceptedRequest;\n      const outgoing = res as http.ServerResponse;\n      if (!interceptedRequest.__xpodInspectRootMutation || !outgoing || outgoing.headersSent) {\n        return;\n      }\n\n      const chunks: Buffer[] = [];\n      proxyRes.on('data', (chunk) => {\n        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n      });\n      proxyRes.on('end', () => {\n        const originalBody = Buffer.concat(chunks);\n        const rewritten = this.normalizeRootMutationProxyResponse(proxyRes, originalBody);\n        outgoing.writeHead(rewritten.statusCode, rewritten.headers);\n        outgoing.end(rewritten.body);\n      });\n    });\n\n    this.server = http.createServer(this.handleRequest.bind(this));\n\n    this.server.on('upgrade', (req, socket, head) => {\n      const url = req.url ?? '/';\n\n      // Route /ws/* WebSocket connections to API server\n      if (url.startsWith('/ws/') && this.targets.api) {\n        this.proxy.ws(req, socket, head, { target: this.toProxyTarget(this.targets.api) as any });\n      } else if (this.targets.css) {\n        this.proxy.ws(req, socket, head, { target: this.toProxyTarget(this.targets.css) as any });\n      } else {\n        socket.destroy();\n      }\n    });\n  }\n\n  public setTargets(targets: { css?: string | GatewayProxyTarget; api?: string | GatewayProxyTarget }): void {\n    this.targets = {\n      css: this.normalizeTarget(targets.css),\n      api: this.normalizeTarget(targets.api),\n    };\n  }\n\n  public async start(): Promise<void> {\n    await this.runtimeHost.listen(this.server, this.listenEndpoint);\n    this.logger.info(`Listening on ${this.runtimeHost.formatListenEndpoint(this.listenEndpoint)}`);\n  }\n\n  public stop(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      this.proxy.close();\n      this.runtimeHost.close(this.server, this.listenEndpoint).then(() => {\n        resolve();\n      }, reject);\n    });\n  }\n\n  private handleRequest(req: http.IncomingMessage, res: http.ServerResponse): void {\n    const url = req.url ?? '/';\n    const origin = req.headers.origin;\n\n    // Store original host for x-forwarded-host before any rewrites\n    const originalHost = req.headers.host;\n\n    // Set x-forwarded-proto based on CSS_BASE_URL\n    const baseUrl = this.baseUrl ?? process.env.CSS_BASE_URL ?? '';\n    if (baseUrl.startsWith('https')) {\n      req.headers['x-forwarded-proto'] = 'https';\n    }\n\n    // Rewrite Host header to match CSS_BASE_URL for proper routing\n    if (baseUrl) {\n      try {\n        const parsedBaseUrl = new URL(baseUrl);\n        req.headers.host = parsedBaseUrl.host;\n        req.headers['x-forwarded-host'] = parsedBaseUrl.host;\n      } catch {\n        if (!req.headers['x-forwarded-host']) {\n          req.headers['x-forwarded-host'] = originalHost;\n        }\n      }\n    } else if (!req.headers['x-forwarded-host']) {\n      req.headers['x-forwarded-host'] = originalHost;\n    }\n\n    this.logger.debug(\n      `${req.method} ${url} x-forwarded-proto=${req.headers['x-forwarded-proto']} x-forwarded-host=${req.headers['x-forwarded-host']} host=${req.headers.host}`,\n    );\n\n    // 1. Internal service endpoints\n    if (url.startsWith('/service/')) {\n      if (req.method === 'OPTIONS') {\n        this.handleCorsPreflightRequest(res, origin);\n        return;\n      }\n      if (origin) {\n        this.addCorsHeaders(res, origin);\n      }\n      void this.handleInternalApi(req, res);\n      return;\n    }\n\n    // 2. API Server Routing (/v1 or /api)\n\n    // 2a. Dashboard UI is served by API server under /dashboard/*\n    if ((url === '/dashboard' || url.startsWith('/dashboard/')) && this.targets.api) {\n      this.proxy.web(req, res, { target: this.toProxyTarget(this.targets.api) as any });\n      return;\n    }\n\n    if ((url.startsWith('/v1/') || url.startsWith('/api/') || url.startsWith('/provision/')) && this.targets.api) {\n      this.proxy.web(req, res, { target: this.toProxyTarget(this.targets.api) as any });\n      return;\n    }\n\n    // 3. CSS Routing (Default)\n    if (this.targets.css) {\n      const interceptedRequest = req as InterceptedRequest;\n      interceptedRequest.__xpodInspectRootMutation = this.shouldInspectRootMutation(req);\n      this.proxy.web(req, res, {\n        target: this.toProxyTarget(this.targets.css) as any,\n        ...(interceptedRequest.__xpodInspectRootMutation ? { selfHandleResponse: true } : {}),\n      } as any);\n    } else {\n      res.writeHead(503);\n      res.end('CSS Service Not Available');\n    }\n  }\n\n  private shouldInspectRootMutation(req: http.IncomingMessage): boolean {\n    const method = (req.method ?? 'GET').toUpperCase();\n    if (![ 'POST', 'PUT', 'PATCH', 'DELETE' ].includes(method)) {\n      return false;\n    }\n\n    const pathname = new URL(req.url ?? '/', 'http://localhost').pathname;\n    const segments = pathname.split('/').filter(Boolean);\n    return segments.length === 1 && !segments[0].startsWith('.');\n  }\n\n  private normalizeRootMutationProxyResponse(\n    proxyRes: http.IncomingMessage,\n    body: Buffer,\n  ): { statusCode: number; headers: http.OutgoingHttpHeaders; body: Buffer } {\n    const headers: http.OutgoingHttpHeaders = { ...proxyRes.headers };\n    const statusCode = proxyRes.statusCode ?? 500;\n    const contentType = typeof proxyRes.headers['content-type'] === 'string'\n      ? proxyRes.headers['content-type']\n      : Array.isArray(proxyRes.headers['content-type'])\n        ? proxyRes.headers['content-type'][0] ?? ''\n        : '';\n    const bodyText = contentType.includes('application/json') ? body.toString('utf8') : '';\n\n    if (\n      statusCode === 500 &&\n      bodyText.includes('Cannot obtain the parent of') &&\n      bodyText.includes('because it is a root container')\n    ) {\n      const normalizedBody = Buffer.from(JSON.stringify({\n        name: 'ForbiddenHttpError',\n        message: 'Write to server root is not allowed.',\n        statusCode: 403,\n        errorCode: 'H403',\n        details: { cause: 'root-container-write' },\n      }));\n      delete headers['content-length'];\n      delete headers['transfer-encoding'];\n      headers['content-type'] = 'application/json';\n      headers['content-length'] = String(normalizedBody.byteLength);\n      return { statusCode: 403, headers, body: normalizedBody };\n    }\n\n    delete headers['transfer-encoding'];\n    headers['content-length'] = String(body.byteLength);\n    return { statusCode, headers, body };\n  }\n\n  private sanitizeProxyResponseHeaders(req: http.IncomingMessage, proxyRes: http.IncomingMessage): void {\n    const method = (req.method ?? 'GET').toUpperCase();\n    const statusCode = proxyRes.statusCode ?? 200;\n    const headers = proxyRes.headers as Record<string, string | string[] | undefined>;\n    const transferEncoding = headers['transfer-encoding'];\n    const hasTransferEncoding = Array.isArray(transferEncoding)\n      ? transferEncoding.some((value) => value.toLowerCase().includes('chunked'))\n      : typeof transferEncoding === 'string'\n        ? transferEncoding.toLowerCase().includes('chunked')\n        : false;\n\n    if (method === 'HEAD' || statusCode === 204 || statusCode === 304 || (statusCode >= 100 && statusCode < 200)) {\n      delete headers['transfer-encoding'];\n      return;\n    }\n\n    if (hasTransferEncoding && headers['content-length'] !== undefined) {\n      delete headers['content-length'];\n    }\n  }\n\n  private handleCorsPreflightRequest(\n    res: http.ServerResponse,\n    origin: string | undefined,\n  ): void {\n    this.addCorsHeaders(res, origin);\n    res.writeHead(204);\n    res.end();\n  }\n\n  /**\n   * Add CORS headers matching CSS CorsHandler configuration\n   */\n  private addCorsHeaders(res: http.ServerResponse, origin: string | undefined): void {\n    res.setHeader('Access-Control-Allow-Origin', origin || '*');\n    res.setHeader('Access-Control-Allow-Credentials', String(CORS_CONFIG.credentials));\n    res.setHeader('Access-Control-Allow-Methods', CORS_CONFIG.methods.join(', '));\n    res.setHeader('Access-Control-Allow-Headers', CORS_CONFIG.allowedHeaders.join(', '));\n    res.setHeader('Access-Control-Expose-Headers', CORS_CONFIG.exposedHeaders.join(', '));\n  }\n\n  private async handleInternalApi(req: http.IncomingMessage, res: http.ServerResponse): Promise<void> {\n    try {\n      const reqUrl = req.url ?? '/';\n      const parsed = new URL(reqUrl, 'http://localhost');\n      const pathname = parsed.pathname;\n\n      if (pathname === '/service/status') {\n        const status = this.supervisor.getAllStatus();\n        const cssReady = await this.isCssReady();\n        const code = cssReady ? 200 : 503;\n        res.writeHead(code, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify(status));\n        return;\n      }\n\n      if (pathname === '/service/logs') {\n        const level = parsed.searchParams.get('level') ?? undefined;\n        const source = parsed.searchParams.get('source') ?? undefined;\n        const limitValue = parsed.searchParams.get('limit');\n        const limit = limitValue ? parseInt(limitValue, 10) : undefined;\n\n        const logs = this.supervisor.getLogs({\n          level,\n          source,\n          limit: Number.isFinite(limit as number) ? limit : undefined,\n        });\n\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify(logs));\n        return;\n      }\n\n      if (pathname === '/service/stop' && req.method === 'POST') {\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ ok: true }));\n        setImmediate(() => {\n          const shutdown = this.shutdownHandler ?? (() => this.supervisor.stopAll());\n          void shutdown().then(() => {\n            if (this.exitOnStop) {\n              process.exit(0);\n            }\n          });\n        });\n        return;\n      }\n\n      res.writeHead(404);\n      res.end('Not Found');\n    } catch (error) {\n      this.logger.error('Internal service endpoint failed:', error);\n      if (!res.headersSent) {\n        res.writeHead(500, { 'Content-Type': 'application/json' });\n      }\n      res.end(JSON.stringify({ error: 'Internal Server Error' }));\n    }\n  }\n\n  private async isCssReady(): Promise<boolean> {\n    if (!this.targets.css) {\n      return true;\n    }\n\n    return this.runtimeHost.isConnectionTargetReady(this.targets.css, 1_500);\n  }\n\n  private normalizeTarget(target?: string | GatewayProxyTarget): GatewayProxyTarget | undefined {\n    if (!target) {\n      return undefined;\n    }\n    if (typeof target === 'string') {\n      return { url: target };\n    }\n    return target;\n  }\n\n  private toProxyTarget(target: GatewayProxyTarget): string | { socketPath: string; protocol: string } {\n    if (target.socketPath) {\n      return {\n        socketPath: target.socketPath,\n        protocol: 'http:',\n      };\n    }\n    return target.url!;\n  }\n}\n\nexport interface GatewayProxyTarget {\n  url?: string;\n  socketPath?: string;\n}\n\nexport interface GatewayProxyOptions {\n  socketPath?: string;\n  listenEndpoint?: RuntimeListenEndpoint;\n  runtimeHost?: RuntimeHost;\n  exitOnStop?: boolean;\n  shutdownHandler?: () => Promise<void>;\n  baseUrl?: string;\n}\n"]}
+{"version":3,"file":"Proxy.js","sourceRoot":"","sources":["../../src/runtime/Proxy.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,gDAAwB;AACxB,iEAAqD;AAErD,iEAA8D;AAa9D,uDAAuD;AACvD,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACrE,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE;QACd,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAC3D,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM;KAChE;IACD,cAAc,EAAE;QACd,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe;QACrE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa;QAC1D,WAAW,EAAE,kBAAkB,EAAE,cAAc;KAChD;CACF,CAAC;AAEF,MAAa,YAAY;IAWvB,YACE,IAAwB,EAChB,UAAsB,EAC9B,QAAQ,GAAG,SAAS,EACpB,UAA+B,EAAE;QAFzB,eAAU,GAAV,UAAU,CAAY;QAZf,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAGrC,YAAO,GAA2D,EAAE,CAAC;QAa3E,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iCAAe,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC;YACpF,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,oBAAS,CAAC,iBAAiB,CAAC;YACvC,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/C,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,kBAAkB,GAAG,GAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,GAA0B,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvF,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,kCAAkC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAClF,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAE3B,kDAAkD;YAClD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,UAAU,CAAC,OAAiF;QACjG,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAyB,EAAE,GAAwB;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,+DAA+D;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAEtC,8CAA8C;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;QAC7C,CAAC;QAED,+DAA+D;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACrC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,sBAAsB,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAC1J,CAAC;QAEF,gCAAgC;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,KAAK,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,sCAAsC;QAEtC,8DAA8D;QAC9D,IAAI,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7G,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,kBAAkB,GAAG,GAAyB,CAAC;YACrD,kBAAkB,CAAC,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAQ;gBACnD,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,GAAyB;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,CAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAEO,gCAAgC,CAAC,GAAyB;QAChE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,CAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IAEO,0BAA0B,CAAC,GAAwB;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;SAC1C,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAEO,kCAAkC,CACxC,QAA8B,EAC9B,IAAY;QAEZ,MAAM,OAAO,GAA6B,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAC9C,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;YACtE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;YAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvF,IACE,UAAU,KAAK,GAAG;YAClB,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAChD,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACnD,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC;YAC3F,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAC9D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpC,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAEO,+BAA+B;QACrC,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,sCAAsC;YAC/C,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;SAC3C,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAAC,GAAyB,EAAE,QAA8B;QAC5F,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAwD,CAAC;QAClF,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACzD,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3E,CAAC,CAAC,OAAO,gBAAgB,KAAK,QAAQ;gBACpC,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACpD,CAAC,CAAC,KAAK,CAAC;QAEZ,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7G,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,IAAI,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,GAAwB,EACxB,MAA0B;QAE1B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAwB,EAAE,MAA0B;QACzE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAyB,EAAE,GAAwB;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAEjC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;gBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;gBAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEhE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBACnC,KAAK;oBACL,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBAC5D,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtC,YAAY,CAAC,GAAG,EAAE;oBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3E,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;wBACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe,CAAC,MAAoC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,MAA0B;QAC9C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO;gBACL,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,GAAI,CAAC;IACrB,CAAC;CACF;AAjXD,oCAiXC","sourcesContent":["import httpProxy from 'http-proxy';\nimport http from 'http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Supervisor } from '../supervisor/Supervisor';\nimport { nodeRuntimeHost } from './host/node/NodeRuntimeHost';\nimport type { RuntimeHost, RuntimeListenEndpoint } from './host/types';\n\ntype InterceptedRequest = http.IncomingMessage & { __xpodInspectRootMutation?: boolean };\n\ninterface RootMutationForbiddenBody {\n  name: 'ForbiddenHttpError';\n  message: string;\n  statusCode: 403;\n  errorCode: 'H403';\n  details: { cause: 'root-container-write' };\n}\n\n// CORS configuration matching CSS CorsHandler defaults\nconst CORS_CONFIG = {\n  methods: ['GET', 'HEAD', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'],\n  credentials: true,\n  allowedHeaders: [\n    'Authorization', 'Content-Type', 'Accept', 'DPoP', 'Origin',\n    'X-Requested-With', 'If-Match', 'If-None-Match', 'Slug', 'Link',\n  ],\n  exposedHeaders: [\n    'Accept-Patch', 'Accept-Post', 'Accept-Put', 'Allow', 'Content-Range',\n    'ETag', 'Last-Modified', 'Link', 'Location', 'Updates-Via',\n    'WAC-Allow', 'Www-Authenticate', 'X-Request-Id',\n  ],\n};\n\nexport class GatewayProxy {\n  private readonly logger = getLoggerFor(this);\n  private proxy: httpProxy;\n  private server: http.Server;\n  private targets: { css?: GatewayProxyTarget; api?: GatewayProxyTarget } = {};\n  private readonly runtimeHost: RuntimeHost;\n  private readonly listenEndpoint: RuntimeListenEndpoint;\n  private readonly exitOnStop: boolean;\n  private readonly shutdownHandler?: () => Promise<void>;\n  private readonly baseUrl?: string;\n\n  constructor(\n    port: number | undefined,\n    private supervisor: Supervisor,\n    bindHost = '0.0.0.0',\n    options: GatewayProxyOptions = {},\n  ) {\n    this.runtimeHost = options.runtimeHost ?? nodeRuntimeHost;\n    this.listenEndpoint = options.listenEndpoint ?? this.runtimeHost.createListenEndpoint({\n      port,\n      host: bindHost,\n      socketPath: options.socketPath,\n    });\n    this.exitOnStop = options.exitOnStop ?? false;\n    this.shutdownHandler = options.shutdownHandler;\n    this.baseUrl = options.baseUrl;\n    this.proxy = httpProxy.createProxyServer({\n      xfwd: true,\n    });\n\n    this.proxy.on('error', (err, _req, res) => {\n      this.logger.error('Proxy error:', err);\n      if (res && 'writeHead' in res && !res.headersSent) {\n        res.writeHead(502, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ error: 'Service Unavailable', details: err.message }));\n      }\n    });\n\n    this.proxy.on('proxyRes', (proxyRes, req, res) => {\n      this.sanitizeProxyResponseHeaders(req, proxyRes);\n      const interceptedRequest = req as InterceptedRequest;\n      const outgoing = res as http.ServerResponse;\n      if (!interceptedRequest.__xpodInspectRootMutation || !outgoing || outgoing.headersSent) {\n        return;\n      }\n\n      const chunks: Buffer[] = [];\n      proxyRes.on('data', (chunk) => {\n        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n      });\n      proxyRes.on('end', () => {\n        const originalBody = Buffer.concat(chunks);\n        const rewritten = this.normalizeRootMutationProxyResponse(proxyRes, originalBody);\n        outgoing.writeHead(rewritten.statusCode, rewritten.headers);\n        outgoing.end(rewritten.body);\n      });\n    });\n\n    this.server = http.createServer(this.handleRequest.bind(this));\n\n    this.server.on('upgrade', (req, socket, head) => {\n      const url = req.url ?? '/';\n\n      // Route /ws/* WebSocket connections to API server\n      if (url.startsWith('/ws/') && this.targets.api) {\n        this.proxy.ws(req, socket, head, { target: this.toProxyTarget(this.targets.api) as any });\n      } else if (this.targets.css) {\n        this.proxy.ws(req, socket, head, { target: this.toProxyTarget(this.targets.css) as any });\n      } else {\n        socket.destroy();\n      }\n    });\n  }\n\n  public setTargets(targets: { css?: string | GatewayProxyTarget; api?: string | GatewayProxyTarget }): void {\n    this.targets = {\n      css: this.normalizeTarget(targets.css),\n      api: this.normalizeTarget(targets.api),\n    };\n  }\n\n  public async start(): Promise<void> {\n    await this.runtimeHost.listen(this.server, this.listenEndpoint);\n    this.logger.info(`Listening on ${this.runtimeHost.formatListenEndpoint(this.listenEndpoint)}`);\n  }\n\n  public stop(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      this.proxy.close();\n      this.runtimeHost.close(this.server, this.listenEndpoint).then(() => {\n        resolve();\n      }, reject);\n    });\n  }\n\n  private handleRequest(req: http.IncomingMessage, res: http.ServerResponse): void {\n    const url = req.url ?? '/';\n    const origin = req.headers.origin;\n\n    // Store original host for x-forwarded-host before any rewrites\n    const originalHost = req.headers.host;\n\n    // Set x-forwarded-proto based on CSS_BASE_URL\n    const baseUrl = this.baseUrl ?? process.env.CSS_BASE_URL ?? '';\n    if (baseUrl.startsWith('https')) {\n      req.headers['x-forwarded-proto'] = 'https';\n    }\n\n    // Rewrite Host header to match CSS_BASE_URL for proper routing\n    if (baseUrl) {\n      try {\n        const parsedBaseUrl = new URL(baseUrl);\n        req.headers.host = parsedBaseUrl.host;\n        req.headers['x-forwarded-host'] = parsedBaseUrl.host;\n      } catch {\n        if (!req.headers['x-forwarded-host']) {\n          req.headers['x-forwarded-host'] = originalHost;\n        }\n      }\n    } else if (!req.headers['x-forwarded-host']) {\n      req.headers['x-forwarded-host'] = originalHost;\n    }\n\n    this.logger.debug(\n      `${req.method} ${url} x-forwarded-proto=${req.headers['x-forwarded-proto']} x-forwarded-host=${req.headers['x-forwarded-host']} host=${req.headers.host}`,\n    );\n\n    // 1. Internal service endpoints\n    if (url.startsWith('/service/')) {\n      if (req.method === 'OPTIONS') {\n        this.handleCorsPreflightRequest(res, origin);\n        return;\n      }\n      if (origin) {\n        this.addCorsHeaders(res, origin);\n      }\n      void this.handleInternalApi(req, res);\n      return;\n    }\n\n    // 2. API Server Routing (/v1 or /api)\n\n    // 2a. Dashboard UI is served by API server under /dashboard/*\n    if ((url === '/dashboard' || url.startsWith('/dashboard/')) && this.targets.api) {\n      this.proxy.web(req, res, { target: this.toProxyTarget(this.targets.api) as any });\n      return;\n    }\n\n    if ((url.startsWith('/v1/') || url.startsWith('/api/') || url.startsWith('/provision/')) && this.targets.api) {\n      this.proxy.web(req, res, { target: this.toProxyTarget(this.targets.api) as any });\n      return;\n    }\n\n    // 3. CSS Routing (Default)\n    if (this.targets.css) {\n      if (this.shouldRejectRootResourceMutation(req)) {\n        this.writeRootMutationForbidden(res);\n        return;\n      }\n\n      const interceptedRequest = req as InterceptedRequest;\n      interceptedRequest.__xpodInspectRootMutation = this.shouldInspectRootMutation(req);\n      this.proxy.web(req, res, {\n        target: this.toProxyTarget(this.targets.css) as any,\n        ...(interceptedRequest.__xpodInspectRootMutation ? { selfHandleResponse: true } : {}),\n      } as any);\n    } else {\n      res.writeHead(503);\n      res.end('CSS Service Not Available');\n    }\n  }\n\n  private shouldInspectRootMutation(req: http.IncomingMessage): boolean {\n    const method = (req.method ?? 'GET').toUpperCase();\n    if (![ 'POST', 'PUT', 'PATCH', 'DELETE' ].includes(method)) {\n      return false;\n    }\n\n    const pathname = new URL(req.url ?? '/', 'http://localhost').pathname;\n    const segments = pathname.split('/').filter(Boolean);\n    return segments.length === 1 && !segments[0].startsWith('.');\n  }\n\n  private shouldRejectRootResourceMutation(req: http.IncomingMessage): boolean {\n    const method = (req.method ?? 'GET').toUpperCase();\n    if (![ 'POST', 'PUT', 'PATCH', 'DELETE' ].includes(method)) {\n      return false;\n    }\n\n    const pathname = new URL(req.url ?? '/', 'http://localhost').pathname;\n    const segments = pathname.split('/').filter(Boolean);\n    return segments.length === 1 && !segments[0].startsWith('.') && !pathname.endsWith('/');\n  }\n\n  private writeRootMutationForbidden(res: http.ServerResponse): void {\n    const body = Buffer.from(JSON.stringify(this.createRootMutationForbiddenBody()));\n    res.writeHead(403, {\n      'Content-Type': 'application/json',\n      'Content-Length': String(body.byteLength),\n    });\n    res.end(body);\n  }\n\n  private normalizeRootMutationProxyResponse(\n    proxyRes: http.IncomingMessage,\n    body: Buffer,\n  ): { statusCode: number; headers: http.OutgoingHttpHeaders; body: Buffer } {\n    const headers: http.OutgoingHttpHeaders = { ...proxyRes.headers };\n    const statusCode = proxyRes.statusCode ?? 500;\n    const contentType = typeof proxyRes.headers['content-type'] === 'string'\n      ? proxyRes.headers['content-type']\n      : Array.isArray(proxyRes.headers['content-type'])\n        ? proxyRes.headers['content-type'][0] ?? ''\n        : '';\n    const bodyText = contentType.includes('application/json') ? body.toString('utf8') : '';\n\n    if (\n      statusCode === 500 &&\n      bodyText.includes('Cannot obtain the parent of') &&\n      bodyText.includes('because it is a root container')\n    ) {\n      const normalizedBody = Buffer.from(JSON.stringify(this.createRootMutationForbiddenBody()));\n      delete headers['content-length'];\n      delete headers['transfer-encoding'];\n      headers['content-type'] = 'application/json';\n      headers['content-length'] = String(normalizedBody.byteLength);\n      return { statusCode: 403, headers, body: normalizedBody };\n    }\n\n    delete headers['transfer-encoding'];\n    headers['content-length'] = String(body.byteLength);\n    return { statusCode, headers, body };\n  }\n\n  private createRootMutationForbiddenBody(): RootMutationForbiddenBody {\n    return {\n      name: 'ForbiddenHttpError',\n      message: 'Write to server root is not allowed.',\n      statusCode: 403,\n      errorCode: 'H403',\n      details: { cause: 'root-container-write' },\n    };\n  }\n\n  private sanitizeProxyResponseHeaders(req: http.IncomingMessage, proxyRes: http.IncomingMessage): void {\n    const method = (req.method ?? 'GET').toUpperCase();\n    const statusCode = proxyRes.statusCode ?? 200;\n    const headers = proxyRes.headers as Record<string, string | string[] | undefined>;\n    const transferEncoding = headers['transfer-encoding'];\n    const hasTransferEncoding = Array.isArray(transferEncoding)\n      ? transferEncoding.some((value) => value.toLowerCase().includes('chunked'))\n      : typeof transferEncoding === 'string'\n        ? transferEncoding.toLowerCase().includes('chunked')\n        : false;\n\n    if (method === 'HEAD' || statusCode === 204 || statusCode === 304 || (statusCode >= 100 && statusCode < 200)) {\n      delete headers['transfer-encoding'];\n      return;\n    }\n\n    if (hasTransferEncoding && headers['content-length'] !== undefined) {\n      delete headers['content-length'];\n    }\n  }\n\n  private handleCorsPreflightRequest(\n    res: http.ServerResponse,\n    origin: string | undefined,\n  ): void {\n    this.addCorsHeaders(res, origin);\n    res.writeHead(204);\n    res.end();\n  }\n\n  /**\n   * Add CORS headers matching CSS CorsHandler configuration\n   */\n  private addCorsHeaders(res: http.ServerResponse, origin: string | undefined): void {\n    res.setHeader('Access-Control-Allow-Origin', origin || '*');\n    res.setHeader('Access-Control-Allow-Credentials', String(CORS_CONFIG.credentials));\n    res.setHeader('Access-Control-Allow-Methods', CORS_CONFIG.methods.join(', '));\n    res.setHeader('Access-Control-Allow-Headers', CORS_CONFIG.allowedHeaders.join(', '));\n    res.setHeader('Access-Control-Expose-Headers', CORS_CONFIG.exposedHeaders.join(', '));\n  }\n\n  private async handleInternalApi(req: http.IncomingMessage, res: http.ServerResponse): Promise<void> {\n    try {\n      const reqUrl = req.url ?? '/';\n      const parsed = new URL(reqUrl, 'http://localhost');\n      const pathname = parsed.pathname;\n\n      if (pathname === '/service/status') {\n        const status = this.supervisor.getAllStatus();\n        const cssReady = await this.isCssReady();\n        const code = cssReady ? 200 : 503;\n        res.writeHead(code, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify(status));\n        return;\n      }\n\n      if (pathname === '/service/logs') {\n        const level = parsed.searchParams.get('level') ?? undefined;\n        const source = parsed.searchParams.get('source') ?? undefined;\n        const limitValue = parsed.searchParams.get('limit');\n        const limit = limitValue ? parseInt(limitValue, 10) : undefined;\n\n        const logs = this.supervisor.getLogs({\n          level,\n          source,\n          limit: Number.isFinite(limit as number) ? limit : undefined,\n        });\n\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify(logs));\n        return;\n      }\n\n      if (pathname === '/service/stop' && req.method === 'POST') {\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ ok: true }));\n        setImmediate(() => {\n          const shutdown = this.shutdownHandler ?? (() => this.supervisor.stopAll());\n          void shutdown().then(() => {\n            if (this.exitOnStop) {\n              process.exit(0);\n            }\n          });\n        });\n        return;\n      }\n\n      res.writeHead(404);\n      res.end('Not Found');\n    } catch (error) {\n      this.logger.error('Internal service endpoint failed:', error);\n      if (!res.headersSent) {\n        res.writeHead(500, { 'Content-Type': 'application/json' });\n      }\n      res.end(JSON.stringify({ error: 'Internal Server Error' }));\n    }\n  }\n\n  private async isCssReady(): Promise<boolean> {\n    if (!this.targets.css) {\n      return true;\n    }\n\n    return this.runtimeHost.isConnectionTargetReady(this.targets.css, 1_500);\n  }\n\n  private normalizeTarget(target?: string | GatewayProxyTarget): GatewayProxyTarget | undefined {\n    if (!target) {\n      return undefined;\n    }\n    if (typeof target === 'string') {\n      return { url: target };\n    }\n    return target;\n  }\n\n  private toProxyTarget(target: GatewayProxyTarget): string | { socketPath: string; protocol: string } {\n    if (target.socketPath) {\n      return {\n        socketPath: target.socketPath,\n        protocol: 'http:',\n      };\n    }\n    return target.url!;\n  }\n}\n\nexport interface GatewayProxyTarget {\n  url?: string;\n  socketPath?: string;\n}\n\nexport interface GatewayProxyOptions {\n  socketPath?: string;\n  listenEndpoint?: RuntimeListenEndpoint;\n  runtimeHost?: RuntimeHost;\n  exitOnStop?: boolean;\n  shutdownHandler?: () => Promise<void>;\n  baseUrl?: string;\n}\n"]}