@undefineds.co/xpod 0.3.58 → 0.3.61

package/dist/api/container/rdf.d.ts

@@ -0,0 +1,15 @@
+import type { StoreContext } from '../chatkit/store';
+import type { RunContextRetriever } from '../runs/RunExecutionBackend';
+import { type RdfEngineLike } from '../../storage/rdf';
+import type { ApiContainerConfig } from './types';
+import type { PodChatKitStore } from '../chatkit';
+import type { EmbeddingService } from '../../ai/service';
+import { RdfSearchIndexingService } from '../service/RdfSearchIndexingService';
+export interface ApiRunContextRetrieverDependencies {
+    chatKitStore?: Pick<PodChatKitStore, 'getAiConfig'>;
+    embeddingService?: Partial<Pick<EmbeddingService, 'embed' | 'embedBatch'>>;
+}
+export declare function createApiRdfEngine(config: ApiContainerConfig): RdfEngineLike | undefined;
+export declare function createApiRunContextRetriever(rdfEngine: RdfEngineLike | undefined, dependencies?: ApiRunContextRetrieverDependencies): RunContextRetriever<StoreContext> | undefined;
+export declare function createApiRdfSearchIndexingService(rdfEngine: RdfEngineLike | undefined, dependencies?: ApiRunContextRetrieverDependencies): RdfSearchIndexingService | undefined;
+export declare function isPostgresConnectionString(value: string): boolean;

package/dist/api/container/rdf.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApiRdfEngine = createApiRdfEngine;
+exports.createApiRunContextRetriever = createApiRunContextRetriever;
+exports.createApiRdfSearchIndexingService = createApiRdfSearchIndexingService;
+exports.isPostgresConnectionString = isPostgresConnectionString;
+const RdfRunContextRetriever_1 = require("../runs/RdfRunContextRetriever");
+const rdf_1 = require("../../storage/rdf");
+const RdfSearchIndexingService_1 = require("../service/RdfSearchIndexingService");
+function createApiRdfEngine(config) {
+    const connectionString = config.sparqlEndpoint;
+    if (config.edition !== 'cloud' || !connectionString || !isPostgresConnectionString(connectionString)) {
+        return undefined;
+    }
+    return new rdf_1.PostgresRdfEngine({
+        driver: 'pg',
+        connectionString,
+        rdfAccelerationProfile: 'pg-hot-operators',
+        nativeSparqlEnabled: config.rdfNativeSparqlEnabled,
+        deferPgCustomIndexInitialization: true,
+        maintenanceIntervalMs: 0,
+        textIndex: {
+            driver: 'pg',
+            connectionString,
+        },
+        vectorIndex: {
+            driver: 'pg',
+            connectionString,
+        },
+    });
+}
+function createApiRunContextRetriever(rdfEngine, dependencies = {}) {
+    if (!rdfEngine) {
+        return undefined;
+    }
+    return new RdfRunContextRetriever_1.RdfRunContextRetriever({
+        rdfEngine,
+        embedding: createRunContextEmbeddingProvider(dependencies),
+        accessScope: (input) => contextRdfAccessScope(input.context),
+    });
+}
+function createApiRdfSearchIndexingService(rdfEngine, dependencies = {}) {
+    const { chatKitStore, embeddingService } = dependencies;
+    const embedBatch = embeddingService?.embedBatch;
+    if (!rdfEngine || !chatKitStore || !embedBatch) {
+        return undefined;
+    }
+    return new RdfSearchIndexingService_1.RdfSearchIndexingService({
+        rdfEngine,
+        store: chatKitStore,
+        embeddingService: { embedBatch },
+    });
+}
+function createRunContextEmbeddingProvider(dependencies) {
+    const { chatKitStore, embeddingService } = dependencies;
+    const embed = embeddingService?.embed;
+    if (!chatKitStore || !embed) {
+        return undefined;
+    }
+    return async (input) => {
+        const config = await chatKitStore.getAiConfig(input.context);
+        if (!config?.embeddingModel || !config.apiKey) {
+            return undefined;
+        }
+        return {
+            embedding: await embed(input.prompt, {
+                provider: config.providerId,
+                apiKey: config.apiKey,
+                baseUrl: config.baseUrl,
+                proxyUrl: config.proxyUrl,
+            }, config.embeddingModel),
+            model: config.embeddingModel,
+        };
+    };
+}
+function isPostgresConnectionString(value) {
+    return value.startsWith('postgres://') || value.startsWith('postgresql://');
+}
+function contextRdfAccessScope(context) {
+    const candidate = context.rdfAccessScope;
+    if (!candidate || typeof candidate !== 'object') {
+        return undefined;
+    }
+    const scope = candidate;
+    if (typeof scope.basePath !== 'string' || !scope.basePath || typeof scope.mode !== 'string') {
+        return undefined;
+    }
+    return scope;
+}
+//# sourceMappingURL=rdf.js.map

package/dist/api/container/rdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rdf.js","sourceRoot":"","sources":["../../../src/api/container/rdf.ts"],"names":[],"mappings":";;AAcA,gDAsBC;AAED,oEAaC;AAED,8EAeC;AA6BD,gEAEC;AAlGD,2EAA4G;AAE5G,2CAA+F;AAI/F,kFAA+E;AAO/E,SAAgB,kBAAkB,CAAC,MAA0B;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,gBAAgB,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,uBAAiB,CAAC;QAC3B,MAAM,EAAE,IAAI;QACZ,gBAAgB;QAChB,sBAAsB,EAAE,kBAAkB;QAC1C,mBAAmB,EAAE,MAAM,CAAC,sBAAsB;QAClD,gCAAgC,EAAE,IAAI;QACtC,qBAAqB,EAAE,CAAC;QACxB,SAAS,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,gBAAgB;SACjB;QACD,WAAW,EAAE;YACX,MAAM,EAAE,IAAI;YACZ,gBAAgB;SACjB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,4BAA4B,CAC1C,SAAoC,EACpC,eAAmD,EAAE;IAErD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,+CAAsB,CAAC;QAChC,SAAS;QACT,SAAS,EAAE,iCAAiC,CAAC,YAAY,CAAC;QAC1D,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iCAAiC,CAC/C,SAAoC,EACpC,eAAmD,EAAE;IAErD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,EAAE,UAAU,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,mDAAwB,CAAC;QAClC,SAAS;QACT,KAAK,EAAE,YAAY;QACnB,gBAAgB,EAAE,EAAE,UAAU,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CACxC,YAAgD;IAEhD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;IACxD,MAAM,KAAK,GAAG,gBAAgB,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;gBACnC,QAAQ,EAAE,MAAM,CAAC,UAAU;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,EAAE,MAAM,CAAC,cAAc,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,cAAc;SAC7B,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAAa;IACtD,OAAO,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAqB;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,SAAoC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAuB,CAAC;AACjC,CAAC","sourcesContent":["import type { StoreContext } from '../chatkit/store';\nimport { RdfRunContextRetriever, type RdfRunContextRetrieverOptions } from '../runs/RdfRunContextRetriever';\nimport type { RunContextRetriever } from '../runs/RunExecutionBackend';\nimport { PostgresRdfEngine, type RdfAccessScope, type RdfEngineLike } from '../../storage/rdf';\nimport type { ApiContainerConfig } from './types';\nimport type { PodChatKitStore } from '../chatkit';\nimport type { EmbeddingService } from '../../ai/service';\nimport { RdfSearchIndexingService } from '../service/RdfSearchIndexingService';\n\nexport interface ApiRunContextRetrieverDependencies {\n  chatKitStore?: Pick<PodChatKitStore, 'getAiConfig'>;\n  embeddingService?: Partial<Pick<EmbeddingService, 'embed' | 'embedBatch'>>;\n}\n\nexport function createApiRdfEngine(config: ApiContainerConfig): RdfEngineLike | undefined {\n  const connectionString = config.sparqlEndpoint;\n  if (config.edition !== 'cloud' || !connectionString || !isPostgresConnectionString(connectionString)) {\n    return undefined;\n  }\n\n  return new PostgresRdfEngine({\n    driver: 'pg',\n    connectionString,\n    rdfAccelerationProfile: 'pg-hot-operators',\n    nativeSparqlEnabled: config.rdfNativeSparqlEnabled,\n    deferPgCustomIndexInitialization: true,\n    maintenanceIntervalMs: 0,\n    textIndex: {\n      driver: 'pg',\n      connectionString,\n    },\n    vectorIndex: {\n      driver: 'pg',\n      connectionString,\n    },\n  });\n}\n\nexport function createApiRunContextRetriever(\n  rdfEngine: RdfEngineLike | undefined,\n  dependencies: ApiRunContextRetrieverDependencies = {},\n): RunContextRetriever<StoreContext> | undefined {\n  if (!rdfEngine) {\n    return undefined;\n  }\n\n  return new RdfRunContextRetriever({\n    rdfEngine,\n    embedding: createRunContextEmbeddingProvider(dependencies),\n    accessScope: (input) => contextRdfAccessScope(input.context),\n  });\n}\n\nexport function createApiRdfSearchIndexingService(\n  rdfEngine: RdfEngineLike | undefined,\n  dependencies: ApiRunContextRetrieverDependencies = {},\n): RdfSearchIndexingService | undefined {\n  const { chatKitStore, embeddingService } = dependencies;\n  const embedBatch = embeddingService?.embedBatch;\n  if (!rdfEngine || !chatKitStore || !embedBatch) {\n    return undefined;\n  }\n\n  return new RdfSearchIndexingService({\n    rdfEngine,\n    store: chatKitStore,\n    embeddingService: { embedBatch },\n  });\n}\n\nfunction createRunContextEmbeddingProvider(\n  dependencies: ApiRunContextRetrieverDependencies,\n): RdfRunContextRetrieverOptions<StoreContext>['embedding'] | undefined {\n  const { chatKitStore, embeddingService } = dependencies;\n  const embed = embeddingService?.embed;\n  if (!chatKitStore || !embed) {\n    return undefined;\n  }\n\n  return async (input) => {\n    const config = await chatKitStore.getAiConfig(input.context);\n    if (!config?.embeddingModel || !config.apiKey) {\n      return undefined;\n    }\n\n    return {\n      embedding: await embed(input.prompt, {\n        provider: config.providerId,\n        apiKey: config.apiKey,\n        baseUrl: config.baseUrl,\n        proxyUrl: config.proxyUrl,\n      }, config.embeddingModel),\n      model: config.embeddingModel,\n    };\n  };\n}\n\nexport function isPostgresConnectionString(value: string): boolean {\n  return value.startsWith('postgres://') || value.startsWith('postgresql://');\n}\n\nfunction contextRdfAccessScope(context: StoreContext): RdfAccessScope | undefined {\n  const candidate = context.rdfAccessScope;\n  if (!candidate || typeof candidate !== 'object') {\n    return undefined;\n  }\n  const scope = candidate as Partial<RdfAccessScope>;\n  if (typeof scope.basePath !== 'string' || !scope.basePath || typeof scope.mode !== 'string') {\n    return undefined;\n  }\n  return scope as RdfAccessScope;\n}\n"]}

package/dist/api/container/routes.js

@@ -43,16 +43,25 @@ const RunHandler_1 = require("../handlers/RunHandler");
 const MatrixHandler_1 = require("../handlers/MatrixHandler");
 const CoordinationHandler_1 = require("../handlers/CoordinationHandler");
 const DashboardHandler_1 = require("../handlers/DashboardHandler");
+const SettingsHandler_1 = require("../handlers/SettingsHandler");
 const AdminHandler_1 = require("../handlers/AdminHandler");
 const AdminDdnsHandler_1 = require("../handlers/AdminDdnsHandler");
 const LinxCapabilitiesHandler_1 = require("../handlers/LinxCapabilitiesHandler");
 const ProvisionHandler_1 = require("../handlers/ProvisionHandler");
 const PodManagementHandler_1 = require("../handlers/PodManagementHandler");
+const PodSettingsHandler_1 = require("../handlers/PodSettingsHandler");
+const NetworkSettingsHandler_1 = require("../handlers/NetworkSettingsHandler");
 const QuotaHandler_1 = require("../handlers/QuotaHandler");
 const UsageHandler_1 = require("../handlers/UsageHandler");
+const RdfStatsHandler_1 = require("../handlers/RdfStatsHandler");
+const AiGatewayManagementHandler_1 = require("../handlers/AiGatewayManagementHandler");
+const AiClientConfigurationHandler_1 = require("../handlers/AiClientConfigurationHandler");
+const AiClientConfigurationService_1 = require("../service/AiClientConfigurationService");
 const UsageRepository_1 = require("../../storage/quota/UsageRepository");
 const DrizzleQuotaService_1 = require("../../quota/DrizzleQuotaService");
 const LocalPodProvisioningService_1 = require("../../provision/LocalPodProvisioningService");
+const ServiceAccessTokenCodec_1 = require("../../provision/ServiceAccessTokenCodec");
+const EdgeNodeCertificateCapabilityBridge_1 = require("../../edge/EdgeNodeCertificateCapabilityBridge");
 const path = __importStar(require("node:path"));
 const runtime_1 = require("../../runtime");
 /**
@@ -90,6 +99,8 @@ function registerHealthRoutes(server) {
     // Dashboard 静态资源
     const staticDir = path.resolve(runtime_1.PACKAGE_ROOT, 'static/dashboard');
     (0, DashboardHandler_1.registerDashboardRoutes)(server, { staticDir });
+    const settingsStaticDir = path.resolve(runtime_1.PACKAGE_ROOT, 'static/settings');
+    (0, SettingsHandler_1.registerSettingsRoutes)(server, { staticDir: settingsStaticDir });
 }
 /**
  * 共享路由 (cloud 和 local 都有)
@@ -104,7 +115,27 @@ function registerSharedRoutes(container, server) {
     const clientReconcilerCoordinator = container.resolve('clientReconcilerCoordinator');
     const inngestTaskScheduler = container.resolve('inngestTaskScheduler');
     const inngestRuntimeConfig = container.resolve('inngestRuntimeConfig');
+    const rdfStorageStatsService = container.resolve('rdfStorageStatsService');
+    const gatewayAccessKeyRepository = container.resolve('gatewayAccessKeyRepository');
+    const gatewayInternalPodAccess = container.resolve('gatewayInternalPodAccess');
+    const aiConnectionInvocationKeyIssuer = container.resolve('aiConnectionInvocationKeyIssuer');
+    const providerConnectService = container.resolve('providerConnectService');
+    const providerQuotaService = container.resolve('providerQuotaService', { allowUnregistered: true });
     const config = container.resolve('config');
+    const aiClientConfigurationService = resolveAiClientConfigurationService(container, config);
+    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });
+    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });
+    const dnsCoordinator = container.resolve('dnsCoordinator', { allowUnregistered: true });
+    const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true });
+    const cloudTunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true });
+    const tunnelProvider = localTunnelProvider ?? cloudTunnelProvider;
+    const edgeCertificateBridge = createDynamicEdgeCertificateBridge(config);
+    const certificateCapability = (0, NetworkSettingsHandler_1.createCertificateCapability)(container.resolve('certificateManager', { allowUnregistered: true }), container.resolve('acmeCertificateManager', { allowUnregistered: true }), container.resolve('clusterCertificateManager', { allowUnregistered: true }), edgeCertificateBridge);
+    const podLookupRepository = container.resolve('podLookupRepo');
+    const accountRoleRepository = container.resolve('accountRoleRepo', { allowUnregistered: true });
+    if (!podLookupRepository) {
+        throw new Error('Pod settings route requires podLookupRepo');
+    }
     (0, EdgeNodeSignalHandler_1.registerEdgeNodeSignalRoutes)(server, {
         repository: nodeRepo,
         dnsCoordinator: container.resolve('dnsCoordinator', { allowUnregistered: true }),
@@ -116,7 +147,12 @@ function registerSharedRoutes(container, server) {
         apiBaseUrl: config.cloudApiEndpoint ?? process.env.XPOD_CLOUD_API_ENDPOINT ?? process.env.CSS_BASE_URL,
     });
     (0, NodeHandler_1.registerNodeRoutes)(server, { repository: nodeRepo });
-    (0, ChatHandler_1.registerChatRoutes)(server, { chatService });
+    const aiGatewayService = container.resolve('aiGatewayService');
+    (0, ChatHandler_1.registerChatRoutes)(server, {
+        chatService,
+        aiGatewayService,
+        acceptanceEndpointsEnabled: process.env.XPOD_ACCEPTANCE_ENDPOINTS_ENABLED === 'true',
+    });
     (0, ChatKitHandler_1.registerChatKitRoutes)(server, { chatKitService });
     (0, ChatKitV1Handler_1.registerChatKitV1Routes)(server, { store: chatKitStore });
     (0, RunHandler_1.registerRunRoutes)(server, { runStore: chatKitStore });
@@ -127,6 +163,53 @@ function registerSharedRoutes(container, server) {
         taskScheduler: inngestTaskScheduler,
         runtimeConfig: inngestRuntimeConfig,
     });
+    (0, RdfStatsHandler_1.registerRdfStatsRoutes)(server, {
+        rdfStorageStatsService,
+    });
+    (0, AiGatewayManagementHandler_1.registerAiGatewayManagementRoutes)(server, {
+        repository: gatewayAccessKeyRepository,
+        deployment: config.edition,
+        connectService: providerConnectService,
+        quotaService: providerQuotaService,
+        servicePrincipal: gatewayInternalPodAccess,
+        aiClientConfiguration: aiClientConfigurationService?.capability(),
+        aiConnectionInvocationKeyIssuer,
+    });
+    (0, AiClientConfigurationHandler_1.registerAiClientConfigurationRoutes)(server, {
+        service: aiClientConfigurationService,
+    });
+    (0, PodSettingsHandler_1.registerPodSettingsRoutes)(server, {
+        podLookupRepository,
+        usageRepo: new UsageRepository_1.UsageRepository(container.resolve('db')),
+        aiConnectionStatusReader: new PodSettingsHandler_1.DrizzlePodAiConnectionStatusReader(gatewayInternalPodAccess),
+    });
+    (0, NetworkSettingsHandler_1.registerNetworkSettingsRoutes)(server, {
+        endpoint: () => resolveNetworkEndpoint(config),
+        ...(0, NetworkSettingsHandler_1.createAddressReaders)({
+            endpoint: () => resolveNetworkEndpoint(config),
+            port: config.port,
+            publicUrls: [
+                config.publicUrl,
+                config.activeTunnelProfile?.publicUrl,
+            ],
+        }),
+        publicAddresses: (0, NetworkSettingsHandler_1.createPublicAddressReader)({
+            configuredUrls: [
+                config.publicUrl,
+                config.activeTunnelProfile?.publicUrl,
+            ],
+            ddnsManager,
+            tunnelProvider,
+        }),
+        dnsStatusReader: (0, NetworkSettingsHandler_1.createDnsStatusReader)({ ddnsManager, dnsProvider, dnsCoordinator }),
+        tunnelStatusReader: (0, NetworkSettingsHandler_1.createTunnelStatusReader)(tunnelProvider),
+        tlsStatusReader: certificateCapability?.tlsStatusReader,
+        certificateRenewer: certificateCapability?.certificateRenewer,
+        authorizer: (0, NetworkSettingsHandler_1.createDeploymentNetworkSettingsAuthorizer)({
+            deployment: config.edition,
+            accountRoleRepository,
+        }),
+    });
     // Quota & Usage API (Business 对接)
     try {
         const quotaService = new DrizzleQuotaService_1.DrizzleQuotaService({ identityDbUrl: config.databaseUrl });
@@ -139,6 +222,47 @@ function registerSharedRoutes(container, server) {
         console.log(`[Shared] Quota & Usage routes not registered: ${error}`);
     }
 }
+function resolveAiClientConfigurationService(container, config) {
+    const injected = container.resolve('aiClientConfigurationService', { allowUnregistered: true });
+    if (injected)
+        return injected;
+    const capability = config.aiClientConfiguration;
+    if (!capability?.enabled || capability.authority !== 'local-filesystem') {
+        return undefined;
+    }
+    return new AiClientConfigurationService_1.AiClientConfigurationService({
+        homeDir: capability.homeDir,
+        backupRoot: capability.backupRoot,
+    });
+}
+function createDynamicEdgeCertificateBridge(config) {
+    const bridgeId = (0, EdgeNodeCertificateCapabilityBridge_1.resolveEdgeNodeCertificateCapabilityBridgeId)({
+        nodeId: config.nodeId,
+        baseUrl: config.solidBaseUrl ?? config.publicUrl,
+    });
+    if (!bridgeId) {
+        return undefined;
+    }
+    return {
+        readCertificateStatus: async () => {
+            return await (0, EdgeNodeCertificateCapabilityBridge_1.findEdgeNodeCertificateCapabilityBridge)(bridgeId)?.readCertificateStatus()
+                ?? { supported: false, status: 'unsupported' };
+        },
+        renewCertificate: async () => {
+            const bridge = (0, EdgeNodeCertificateCapabilityBridge_1.findEdgeNodeCertificateCapabilityBridge)(bridgeId);
+            if (!bridge) {
+                throw Object.assign(new Error('Certificate runtime is not available.'), {
+                    statusCode: 503,
+                    code: 'certificate_renewal_unavailable',
+                });
+            }
+            return await bridge.renewCertificate();
+        },
+        isAvailable: async () => {
+            return Boolean(await (0, EdgeNodeCertificateCapabilityBridge_1.findEdgeNodeCertificateCapabilityBridge)(bridgeId)?.isAvailable());
+        },
+    };
+}
 /**
  * Cloud 模式专属路由
  */
@@ -204,9 +328,12 @@ function registerCloudRoutes(container, server) {
  * Local 模式专属路由
  */
 function registerLocalRoutes(container, server) {
+    const config = container.resolve('config');
     (0, LinxCapabilitiesHandler_1.registerLinxCapabilitiesRoutes)(server);
     // Admin API (配置管理、重启)
-    (0, AdminHandler_1.registerAdminRoutes)(server);
+    (0, AdminHandler_1.registerAdminRoutes)(server, {
+        internalAdminAuthSecret: config.gatewayAdminProxyAuthSecret,
+    });
     // DDNS status (托管式 Local 模式)
     try {
         const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });
@@ -228,12 +355,12 @@ function registerLocalRoutes(container, server) {
     }
     // Pod Provision API (SP 端，供 Cloud 回调创建 Pod)
     try {
+        const config = container.resolve('config');
         // rootDir: CSS 数据目录，默认 ./data
         const rootDir = process.env.CSS_ROOT_FILE_PATH || './data';
         // serviceToken 验证：从 SP 配置中读取
-        const expectedServiceToken = process.env.XPOD_SERVICE_TOKEN;
+        const expectedServiceToken = config.serviceToken;
         if (expectedServiceToken) {
-            const config = container.resolve('config');
             const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';
             const sparqlEndpoint = process.env.CSS_SPARQL_ENDPOINT || process.env.SPARQL_ENDPOINT;
             const identityDbUrl = process.env.CSS_IDENTITY_DB_URL || process.env.DATABASE_URL;
@@ -250,7 +377,8 @@ function registerLocalRoutes(container, server) {
                 : undefined;
             (0, PodManagementHandler_1.registerPodManagementRoutes)(server, {
                 rootDir,
-                verifyServiceToken: async (token) => token === expectedServiceToken,
+                verifyServiceToken: async (token) => (token === expectedServiceToken
+                    || (0, ServiceAccessTokenCodec_1.verifyServiceAccessToken)(token, { serviceToken: expectedServiceToken }).valid),
                 provisioningService,
                 podLookupRepository: container.resolve('podLookupRepo', { allowUnregistered: true }),
                 storageProviderBaseUrl: baseUrl,
@@ -258,7 +386,7 @@ function registerLocalRoutes(container, server) {
             console.log(`[Local] Pod provision routes registered (/provision/pods, /provision/webids, ${provisioningService ? 'css-compatible' : 'directory-only'})`);
         }
         else {
-            console.log('[Local] Pod provision routes not registered (XPOD_SERVICE_TOKEN not configured)');
+            console.log('[Local] Pod provision routes not registered (serviceToken not configured)');
         }
     }
     catch (error) {
@@ -271,14 +399,14 @@ function registerLocalRoutes(container, server) {
             cloudUrl: config.cloudApiEndpoint,
             nodeId: config.nodeId,
             nodeToken: config.nodeToken,
-            serviceToken: process.env.XPOD_SERVICE_TOKEN,
-            publicUrl: process.env.CSS_BASE_URL,
-            spDomain: process.env.XPOD_SP_DOMAIN,
+            serviceToken: config.serviceToken,
+            publicUrl: process.env.XPOD_PUBLIC_URL ?? config.publicUrl ?? process.env.CSS_BASE_URL,
+            spDomain: process.env.XPOD_SP_DOMAIN ?? config.spDomain,
             localPort: readPositiveInteger(process.env.CSS_PORT ?? process.env.XPOD_PORT ?? process.env.PORT),
             tunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN ?? process.env.SAKURA_TUNNEL_TOKEN ?? process.env.SAKURA_TOKEN,
             cloudBaseUrl: config.oidcIssuer || config.cloudApiEndpoint,
-            provisionCode: process.env.XPOD_PROVISION_CODE,
-            persistState: (0, ProvisionHandler_1.createLocalSetupProvisionStateWriter)(process.env.XPOD_LOCAL_SETUP_PATH, process.env.XPOD_PROVIDER_ID),
+            provisionCode: process.env.XPOD_PROVISION_CODE ?? config.provisionCode,
+            persistState: (0, ProvisionHandler_1.createLocalSetupProvisionStateWriter)(config.localSetupPath, config.localSetupProviderId),
         });
         console.log('[Local] Provision status route registered (/provision/status)');
     }
@@ -293,4 +421,16 @@ function readPositiveInteger(value) {
     const parsed = Number.parseInt(value, 10);
     return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
 }
+function resolveNetworkEndpoint(config) {
+    const configured = config.publicUrl
+        ?? config.activeTunnelProfile?.publicUrl
+        ?? config.solidBaseUrl
+        ?? `http://${config.host === '0.0.0.0' ? '127.0.0.1' : config.host}:${config.port}/`;
+    try {
+        return new URL(configured).toString().replace(/\/+$/u, '') + '/';
+    }
+    catch {
+        return `http://127.0.0.1:${config.port}/`;
+    }
+}
 //# sourceMappingURL=routes.js.map

package/dist/api/container/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/api/container/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAqCH,wCAgBC;AA/CD,6EAAiF;AACjF,yEAA6E;AAC7E,yDAA6D;AAC7D,yDAA6D;AAC7D,mEAAuE;AACvE,+EAAmF;AACnF,yDAA6D;AAC7D,+DAAmE;AACnE,mEAAuE;AACvE,+DAAmE;AACnE,uDAA2D;AAC3D,6DAAiE;AACjE,yEAA6E;AAC7E,mEAAuE;AACvE,2DAA+D;AAC/D,mEAAuE;AACvE,iFAAqF;AACrF,mEAA2I;AAC3I,2EAA+E;AAC/E,2DAA+D;AAC/D,2DAA+D;AAE/D,yEAAsE;AACtE,yEAAsE;AACtE,6FAA0F;AAC1F,gDAAkC;AAClC,2CAA6C;AAE7C;;GAEG;AACH,SAAgB,cAAc,CAAC,SAA8C;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAc,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,WAAW;IACX,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,OAAO;IACP,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAiB;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAY,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,2BAA2B,GAAG,SAAS,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrF,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,IAAA,oDAA4B,EAAC,MAAM,EAAE;QACnC,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;QACvF,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;KAChG,CAAC,CAAC;IACH,IAAA,gDAA0B,EAAC,MAAM,EAAE;QACjC,UAAU,EAAE,QAAQ;QACpB,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,iBAAiB;QACtD,UAAU,EAAE,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;KACvG,CAAC,CAAC;IACH,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,IAAA,sCAAqB,EAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,IAAA,8BAAiB,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACtD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAA,gDAA0B,EAAC,MAAM,EAAE,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,IAAA,sCAAqB,EAAC,MAAM,EAAE;QAC5B,OAAO,EAAE,mBAAmB;QAC5B,aAAa,EAAE,oBAAoB;QACnC,aAAa,EAAE,oBAAoB;KACpC,CAAC,CAAC;IAEH,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,yCAAmB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,IAAI,iCAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAA2C,CAAC;QACzG,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QAEjE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC9D,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAA,gCAAkB,EAAC,MAAM,EAAE;oBACzB,QAAQ,EAAE,QAAe;oBACzB,WAAW,EAAE,WAAkB;oBAC/B,aAAa,EAAE,iBAAiB;iBACjC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,iBAAiB,GAAG,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACnF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAC/F,IAAA,0CAAuB,EAAC,MAAM,EAAE;YAC9B,UAAU,EAAE,QAAQ;YACpB,QAAQ;YACR,WAAW;YACX,cAAc;YACd,OAAO;YACP,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,IAAA,wDAA8B,EAAC,MAAM,CAAC,CAAC;IAEvC,sBAAsB;IACtB,IAAA,kCAAmB,EAAC,MAAM,CAAC,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAA0C,CAAC;QACtG,IAAI,eAAe,EAAE,CAAC;YACpB,IAAA,sDAA6B,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;QAC3D,6BAA6B;QAC7B,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE5D,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;YACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;YACrE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACtF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClF,MAAM,mBAAmB,GAAG,cAAc,IAAI,aAAa;gBACzD,CAAC,CAAC,IAAI,yDAA2B,CAAC;oBAChC,OAAO;oBACP,OAAO;oBACP,cAAc;oBACd,aAAa;oBACb,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;oBACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC;gBACF,CAAC,CAAC,SAAS,CAAC;YAEd,IAAA,kDAA2B,EAAC,MAAM,EAAE;gBAClC,OAAO;gBACP,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,oBAAoB;gBAC3E,mBAAmB;gBACnB,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;gBACpF,sBAAsB,EAAE,OAAO;aAChC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,gFAAgF,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;QAC5J,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,IAAA,+CAA4B,EAAC,MAAM,EAAE;YACnC,QAAQ,EAAE,MAAM,CAAC,gBAAgB;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC5C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YACnC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;YACpC,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACjG,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YAC/G,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB;YAC1D,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC9C,YAAY,EAAE,IAAA,uDAAoC,EAChD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAC7B;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kDAAkD,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC","sourcesContent":["/**\n * 路由注册\n *\n * 根据容器中的服务注册 API 路由\n */\n\nimport type { AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport type { ApiServer } from '../ApiServer';\n\nimport { registerEdgeNodeSignalRoutes } from '../handlers/EdgeNodeSignalHandler';\nimport { registerReachabilityRoutes } from '../handlers/ReachabilityHandler';\nimport { registerNodeRoutes } from '../handlers/NodeHandler';\nimport { registerChatRoutes } from '../handlers/ChatHandler';\nimport { registerSubdomainRoutes } from '../handlers/SubdomainHandler';\nimport { registerSubdomainClientRoutes } from '../handlers/SubdomainClientHandler';\nimport { registerDdnsRoutes } from '../handlers/DdnsHandler';\nimport { registerChatKitRoutes } from '../handlers/ChatKitHandler';\nimport { registerChatKitV1Routes } from '../handlers/ChatKitV1Handler';\nimport { registerInngestRoutes } from '../handlers/InngestHandler';\nimport { registerRunRoutes } from '../handlers/RunHandler';\nimport { registerMatrixRoutes } from '../handlers/MatrixHandler';\nimport { registerCoordinationRoutes } from '../handlers/CoordinationHandler';\nimport { registerDashboardRoutes } from '../handlers/DashboardHandler';\nimport { registerAdminRoutes } from '../handlers/AdminHandler';\nimport { registerAdminDdnsRoutes } from '../handlers/AdminDdnsHandler';\nimport { registerLinxCapabilitiesRoutes } from '../handlers/LinxCapabilitiesHandler';\nimport { createLocalSetupProvisionStateWriter, registerProvisionRoutes, registerProvisionStatusRoute } from '../handlers/ProvisionHandler';\nimport { registerPodManagementRoutes } from '../handlers/PodManagementHandler';\nimport { registerQuotaRoutes } from '../handlers/QuotaHandler';\nimport { registerUsageRoutes } from '../handlers/UsageHandler';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { UsageRepository } from '../../storage/quota/UsageRepository';\nimport { DrizzleQuotaService } from '../../quota/DrizzleQuotaService';\nimport { LocalPodProvisioningService } from '../../provision/LocalPodProvisioningService';\nimport * as path from 'node:path';\nimport { PACKAGE_ROOT } from '../../runtime';\n\n/**\n * 注册所有 API 路由\n */\nexport function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void {\n  const server = container.resolve('apiServer') as ApiServer;\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  // 公共健康检查端点\n  registerHealthRoutes(server);\n\n  // 共享路由\n  registerSharedRoutes(container, server);\n\n  // 根据 edition 注册专属路由\n  if (config.edition === 'cloud') {\n    registerCloudRoutes(container, server);\n  } else {\n    registerLocalRoutes(container, server);\n  }\n}\n\n/**\n * 健康检查路由\n */\nfunction registerHealthRoutes(server: ApiServer): void {\n  server.get('/health', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ok' }));\n  }, { public: true });\n\n  server.get('/ready', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ready' }));\n  }, { public: true });\n\n  // Dashboard 静态资源\n  const staticDir = path.resolve(PACKAGE_ROOT, 'static/dashboard');\n  registerDashboardRoutes(server, { staticDir });\n}\n\n/**\n * 共享路由 (cloud 和 local 都有)\n */\nfunction registerSharedRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n  const chatService = container.resolve('chatService');\n  const chatKitService = container.resolve('chatKitService');\n  const chatKitStore = container.resolve('chatKitStore');\n  const runExecutionBackend = container.resolve('runExecutionBackend');\n  const matrixStore = container.resolve('matrixStore');\n  const clientReconcilerCoordinator = container.resolve('clientReconcilerCoordinator');\n  const inngestTaskScheduler = container.resolve('inngestTaskScheduler');\n  const inngestRuntimeConfig = container.resolve('inngestRuntimeConfig');\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  registerEdgeNodeSignalRoutes(server, {\n    repository: nodeRepo,\n    dnsCoordinator: container.resolve('dnsCoordinator', { allowUnregistered: true }) as any,\n    healthProbeService: container.resolve('healthProbeService', { allowUnregistered: true }) as any,\n  });\n  registerReachabilityRoutes(server, {\n    repository: nodeRepo,\n    baseStorageDomain: config.subdomain?.baseStorageDomain,\n    apiBaseUrl: config.cloudApiEndpoint ?? process.env.XPOD_CLOUD_API_ENDPOINT ?? process.env.CSS_BASE_URL,\n  });\n  registerNodeRoutes(server, { repository: nodeRepo });\n  registerChatRoutes(server, { chatService });\n  registerChatKitRoutes(server, { chatKitService });\n  registerChatKitV1Routes(server, { store: chatKitStore });\n  registerRunRoutes(server, { runStore: chatKitStore });\n  registerMatrixRoutes(server, { store: matrixStore });\n  registerCoordinationRoutes(server, { clientReconcilerCoordinator });\n  registerInngestRoutes(server, {\n    backend: runExecutionBackend,\n    taskScheduler: inngestTaskScheduler,\n    runtimeConfig: inngestRuntimeConfig,\n  });\n\n  // Quota & Usage API (Business 对接)\n  try {\n    const quotaService = new DrizzleQuotaService({ identityDbUrl: config.databaseUrl });\n    const usageRepo = new UsageRepository(container.resolve('db'));\n    registerQuotaRoutes(server, { quotaService, usageRepo });\n    registerUsageRoutes(server, { usageRepo });\n    console.log('[Shared] Quota & Usage routes registered');\n  } catch (error) {\n    console.log(`[Shared] Quota & Usage routes not registered: ${error}`);\n  }\n}\n\n/**\n * Cloud 模式专属路由\n */\nfunction registerCloudRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名管理 API (需要 SubdomainService)\n  try {\n    const subdomainService = container.resolve('subdomainService') as ApiContainerCradle['subdomainService'];\n    if (subdomainService) {\n      registerSubdomainRoutes(server, { subdomainService });\n      console.log('[Cloud] Subdomain routes registered');\n    }\n  } catch {\n    console.log('[Cloud] Subdomain routes not registered (service not available)');\n  }\n\n  // DDNS 服务\n  try {\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const config = container.resolve('config') as ApiContainerConfig;\n\n    if (ddnsRepo) {\n      const baseStorageDomain = config.subdomain?.baseStorageDomain;\n      if (baseStorageDomain) {\n        registerDdnsRoutes(server, {\n          ddnsRepo: ddnsRepo as any,\n          dnsProvider: dnsProvider as any,\n          defaultDomain: baseStorageDomain,\n        });\n        console.log(`[Cloud] DDNS routes registered (domain: ${baseStorageDomain})`);\n      } else {\n        console.log('[Cloud] DDNS routes not registered (no CSS_BASE_STORAGE_DOMAIN)');\n      }\n    }\n  } catch {\n    console.log('[Cloud] DDNS routes not registered (repo not available)');\n  }\n\n  // SP Provision API (SP 注册)\n  try {\n    const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n    const config = container.resolve('config') as ApiContainerConfig;\n    const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n    const baseStorageDomain = config.subdomain?.baseStorageDomain;\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true }) as any;\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true }) as any;\n    const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true }) as any;\n    registerProvisionRoutes(server, {\n      repository: nodeRepo,\n      ddnsRepo,\n      dnsProvider,\n      tunnelProvider,\n      baseUrl,\n      baseStorageDomain,\n    });\n    console.log(`[Cloud] Provision routes registered${baseStorageDomain ? ` (baseStorageDomain: ${baseStorageDomain})` : ''}`);\n  } catch {\n    console.log('[Cloud] Provision routes not registered (dependencies not available)');\n  }\n}\n\n/**\n * Local 模式专属路由\n */\nfunction registerLocalRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  registerLinxCapabilitiesRoutes(server);\n\n  // Admin API (配置管理、重启)\n  registerAdminRoutes(server);\n\n  // DDNS status (托管式 Local 模式)\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    registerAdminDdnsRoutes(server, { ddnsManager });\n  } catch {\n    // ignore\n  }\n\n  // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)\n  try {\n    const subdomainClient = container.resolve('subdomainClient') as ApiContainerCradle['subdomainClient'];\n    if (subdomainClient) {\n      registerSubdomainClientRoutes(server, { subdomainClient });\n      console.log('[Local] Subdomain client routes registered');\n    }\n  } catch {\n    console.log('[Local] Subdomain client routes not registered (client not available)');\n  }\n\n  // Pod Provision API (SP 端，供 Cloud 回调创建 Pod)\n  try {\n    // rootDir: CSS 数据目录，默认 ./data\n    const rootDir = process.env.CSS_ROOT_FILE_PATH || './data';\n    // serviceToken 验证：从 SP 配置中读取\n    const expectedServiceToken = process.env.XPOD_SERVICE_TOKEN;\n\n    if (expectedServiceToken) {\n      const config = container.resolve('config') as ApiContainerConfig;\n      const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n      const sparqlEndpoint = process.env.CSS_SPARQL_ENDPOINT || process.env.SPARQL_ENDPOINT;\n      const identityDbUrl = process.env.CSS_IDENTITY_DB_URL || process.env.DATABASE_URL;\n      const provisioningService = sparqlEndpoint && identityDbUrl\n        ? new LocalPodProvisioningService({\n          baseUrl,\n          rootDir,\n          sparqlEndpoint,\n          identityDbUrl,\n          rdfIndexPath: config.rdfIndexPath,\n          oidcIssuer: process.env.oidcIssuer ?? config.oidcIssuer,\n          authMode: config.authMode,\n        })\n        : undefined;\n\n      registerPodManagementRoutes(server, {\n        rootDir,\n        verifyServiceToken: async (token: string) => token === expectedServiceToken,\n        provisioningService,\n        podLookupRepository: container.resolve('podLookupRepo', { allowUnregistered: true }),\n        storageProviderBaseUrl: baseUrl,\n      });\n      console.log(`[Local] Pod provision routes registered (/provision/pods, /provision/webids, ${provisioningService ? 'css-compatible' : 'directory-only'})`);\n    } else {\n      console.log('[Local] Pod provision routes not registered (XPOD_SERVICE_TOKEN not configured)');\n    }\n  } catch (error) {\n    console.log(`[Local] Pod provision routes not registered: ${error}`);\n  }\n\n  // SP 状态查询 (供 Linx 查询 SP 配置状态)\n  try {\n    const config = container.resolve('config') as ApiContainerConfig;\n    registerProvisionStatusRoute(server, {\n      cloudUrl: config.cloudApiEndpoint,\n      nodeId: config.nodeId,\n      nodeToken: config.nodeToken,\n      serviceToken: process.env.XPOD_SERVICE_TOKEN,\n      publicUrl: process.env.CSS_BASE_URL,\n      spDomain: process.env.XPOD_SP_DOMAIN,\n      localPort: readPositiveInteger(process.env.CSS_PORT ?? process.env.XPOD_PORT ?? process.env.PORT),\n      tunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN ?? process.env.SAKURA_TUNNEL_TOKEN ?? process.env.SAKURA_TOKEN,\n      cloudBaseUrl: config.oidcIssuer || config.cloudApiEndpoint,\n      provisionCode: process.env.XPOD_PROVISION_CODE,\n      persistState: createLocalSetupProvisionStateWriter(\n        process.env.XPOD_LOCAL_SETUP_PATH,\n        process.env.XPOD_PROVIDER_ID,\n      ),\n    });\n    console.log('[Local] Provision status route registered (/provision/status)');\n  } catch (error) {\n    console.log(`[Local] Provision status route not registered: ${error}`);\n  }\n}\n\nfunction readPositiveInteger(value: string | undefined): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n\n  const parsed = Number.parseInt(value, 10);\n  return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;\n}\n"]}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/api/container/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAyDH,wCAgBC;AAnED,6EAAiF;AACjF,yEAA6E;AAC7E,yDAA6D;AAC7D,yDAA6D;AAC7D,mEAAuE;AACvE,+EAAmF;AACnF,yDAA6D;AAC7D,+DAAmE;AACnE,mEAAuE;AACvE,+DAAmE;AACnE,uDAA2D;AAC3D,6DAAiE;AACjE,yEAA6E;AAC7E,mEAAuE;AACvE,iEAAqE;AACrE,2DAA+D;AAC/D,mEAAuE;AACvE,iFAAqF;AACrF,mEAA2I;AAC3I,2EAA+E;AAC/E,uEAA+G;AAC/G,+EAQ4C;AAC5C,2DAA+D;AAC/D,2DAA+D;AAC/D,iEAAqE;AACrE,uFAA2F;AAC3F,2FAA+F;AAC/F,0FAAuF;AAEvF,yEAAsE;AACtE,yEAAsE;AACtE,6FAA0F;AAC1F,qFAAmF;AACnF,wGAGwD;AACxD,gDAAkC;AAClC,2CAA6C;AAE7C;;GAEG;AACH,SAAgB,cAAc,CAAC,SAA8C;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAc,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IAEjE,WAAW;IACX,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,OAAO;IACP,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAiB;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAY,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAY,EAAE,iBAAiB,CAAC,CAAC;IACxE,IAAA,wCAAsB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,2BAA2B,GAAG,SAAS,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrF,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,sBAAsB,GAAG,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,MAAM,0BAA0B,GAAG,SAAS,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACnF,MAAM,wBAAwB,GAAG,SAAS,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/E,MAAM,+BAA+B,GAAG,SAAS,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC7F,MAAM,sBAAsB,GAAG,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IACjE,MAAM,4BAA4B,GAAG,mCAAmC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,mBAAmB,IAAI,mBAAmB,CAAC;IAClE,MAAM,qBAAqB,GAAG,kCAAkC,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,qBAAqB,GAAG,IAAA,oDAA2B,EACvD,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EACpE,SAAS,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EACxE,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EAC3E,qBAAqB,CACtB,CAAC;IACF,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,MAAM,qBAAqB,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAA,oDAA4B,EAAC,MAAM,EAAE;QACnC,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;QACvF,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ;KAChG,CAAC,CAAC;IACH,IAAA,gDAA0B,EAAC,MAAM,EAAE;QACjC,UAAU,EAAE,QAAQ;QACpB,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,iBAAiB;QACtD,UAAU,EAAE,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;KACvG,CAAC,CAAC;IACH,IAAA,gCAAkB,EAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,IAAA,gCAAkB,EAAC,MAAM,EAAE;QACzB,WAAW;QACX,gBAAgB;QAChB,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM;KACrF,CAAC,CAAC;IACH,IAAA,sCAAqB,EAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,IAAA,8BAAiB,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACtD,IAAA,oCAAoB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAA,gDAA0B,EAAC,MAAM,EAAE,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,IAAA,sCAAqB,EAAC,MAAM,EAAE;QAC5B,OAAO,EAAE,mBAAmB;QAC5B,aAAa,EAAE,oBAAoB;QACnC,aAAa,EAAE,oBAAoB;KACpC,CAAC,CAAC;IACH,IAAA,wCAAsB,EAAC,MAAM,EAAE;QAC7B,sBAAsB;KACvB,CAAC,CAAC;IACH,IAAA,8DAAiC,EAAC,MAAM,EAAE;QACxC,UAAU,EAAE,0BAA0B;QACtC,UAAU,EAAE,MAAM,CAAC,OAAO;QAC1B,cAAc,EAAE,sBAAsB;QACtC,YAAY,EAAE,oBAAoB;QAClC,gBAAgB,EAAE,wBAAwB;QAC1C,qBAAqB,EAAE,4BAA4B,EAAE,UAAU,EAAE;QACjE,+BAA+B;KAChC,CAAC,CAAC;IACH,IAAA,kEAAmC,EAAC,MAAM,EAAE;QAC1C,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IACH,IAAA,8CAAyB,EAAC,MAAM,EAAE;QAChC,mBAAmB;QACnB,SAAS,EAAE,IAAI,iCAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,wBAAwB,EAAE,IAAI,uDAAkC,CAAC,wBAAwB,CAAC;KAC3F,CAAC,CAAC;IACH,IAAA,sDAA6B,EAAC,MAAM,EAAE;QACpC,QAAQ,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;QAC9C,GAAG,IAAA,6CAAoB,EAAC;YACtB,QAAQ,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;YAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE;gBACV,MAAM,CAAC,SAAS;gBAChB,MAAM,CAAC,mBAAmB,EAAE,SAAS;aACtC;SACF,CAAC;QACF,eAAe,EAAE,IAAA,kDAAyB,EAAC;YACzC,cAAc,EAAE;gBACd,MAAM,CAAC,SAAS;gBAChB,MAAM,CAAC,mBAAmB,EAAE,SAAS;aACtC;YACD,WAAW;YACX,cAAc;SACf,CAAC;QACF,eAAe,EAAE,IAAA,8CAAqB,EAAC,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QACpF,kBAAkB,EAAE,IAAA,iDAAwB,EAAC,cAAc,CAAC;QAC5D,eAAe,EAAE,qBAAqB,EAAE,eAAe;QACvD,kBAAkB,EAAE,qBAAqB,EAAE,kBAAkB;QAC7D,UAAU,EAAE,IAAA,kEAAyC,EAAC;YACpD,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,qBAAqB;SACtB,CAAC;KACH,CAAC,CAAC;IAEH,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,yCAAmB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,IAAI,iCAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAA,kCAAmB,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAC1C,SAA8C,EAC9C,MAA0B;IAE1B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC;IAChD,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,UAAU,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,2DAA4B,CAAC;QACtC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kCAAkC,CAAC,MAA0B;IACpE,MAAM,QAAQ,GAAG,IAAA,kFAA4C,EAAC;QAC5D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,qBAAqB,EAAE,KAAK,IAAI,EAAE;YAChC,OAAO,MAAM,IAAA,6EAAuC,EAAC,QAAQ,CAAC,EAAE,qBAAqB,EAAE;mBAClF,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,CAAC;QACD,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,MAAM,GAAG,IAAA,6EAAuC,EAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAAE;oBACtE,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,iCAAiC;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,OAAO,OAAO,CAAC,MAAM,IAAA,6EAAuC,EAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACzF,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAA2C,CAAC;QACzG,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QAEjE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC9D,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAA,gCAAkB,EAAC,MAAM,EAAE;oBACzB,QAAQ,EAAE,QAAe;oBACzB,WAAW,EAAE,WAAkB;oBAC/B,aAAa,EAAE,iBAAiB;iBACjC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,iBAAiB,GAAG,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACnF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QAC/F,IAAA,0CAAuB,EAAC,MAAM,EAAE;YAC9B,UAAU,EAAE,QAAQ;YACpB,QAAQ;YACR,WAAW;YACX,cAAc;YACd,OAAO;YACP,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,SAA8C,EAC9C,MAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IACjE,IAAA,wDAA8B,EAAC,MAAM,CAAC,CAAC;IAEvC,sBAAsB;IACtB,IAAA,kCAAmB,EAAC,MAAM,EAAE;QAC1B,uBAAuB,EAAE,MAAM,CAAC,2BAA2B;KAC5D,CAAC,CAAC;IACH,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAQ,CAAC;QACzF,IAAA,0CAAuB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAA0C,CAAC;QACtG,IAAI,eAAe,EAAE,CAAC;YACpB,IAAA,sDAA6B,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,8BAA8B;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;QAC3D,6BAA6B;QAC7B,MAAM,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC;QAEjD,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;YACrE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACtF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClF,MAAM,mBAAmB,GAAG,cAAc,IAAI,aAAa;gBACzD,CAAC,CAAC,IAAI,yDAA2B,CAAC;oBAChC,OAAO;oBACP,OAAO;oBACP,cAAc;oBACd,aAAa;oBACb,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;oBACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC;gBACF,CAAC,CAAC,SAAS,CAAC;YAEd,IAAA,kDAA2B,EAAC,MAAM,EAAE;gBAClC,OAAO;gBACP,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,CAC3C,KAAK,KAAK,oBAAoB;uBAC3B,IAAA,kDAAwB,EAAC,KAAK,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CACjF;gBACD,mBAAmB;gBACnB,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;gBACpF,sBAAsB,EAAE,OAAO;aAChC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,gFAAgF,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;QAC5J,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;QACjE,IAAA,+CAA4B,EAAC,MAAM,EAAE;YACnC,QAAQ,EAAE,MAAM,CAAC,gBAAgB;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YACtF,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACvD,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACjG,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YAC/G,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB;YAC1D,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,aAAa;YACtE,YAAY,EAAE,IAAA,uDAAoC,EAChD,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,oBAAoB,CAC5B;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kDAAkD,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA0B;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS;WAC9B,MAAM,CAAC,mBAAmB,EAAE,SAAS;WACrC,MAAM,CAAC,YAAY;WACnB,UAAU,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;IACvF,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,MAAM,CAAC,IAAI,GAAG,CAAC;IAC5C,CAAC;AACH,CAAC","sourcesContent":["/**\n * 路由注册\n *\n * 根据容器中的服务注册 API 路由\n */\n\nimport type { AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport type { ApiServer } from '../ApiServer';\n\nimport { registerEdgeNodeSignalRoutes } from '../handlers/EdgeNodeSignalHandler';\nimport { registerReachabilityRoutes } from '../handlers/ReachabilityHandler';\nimport { registerNodeRoutes } from '../handlers/NodeHandler';\nimport { registerChatRoutes } from '../handlers/ChatHandler';\nimport { registerSubdomainRoutes } from '../handlers/SubdomainHandler';\nimport { registerSubdomainClientRoutes } from '../handlers/SubdomainClientHandler';\nimport { registerDdnsRoutes } from '../handlers/DdnsHandler';\nimport { registerChatKitRoutes } from '../handlers/ChatKitHandler';\nimport { registerChatKitV1Routes } from '../handlers/ChatKitV1Handler';\nimport { registerInngestRoutes } from '../handlers/InngestHandler';\nimport { registerRunRoutes } from '../handlers/RunHandler';\nimport { registerMatrixRoutes } from '../handlers/MatrixHandler';\nimport { registerCoordinationRoutes } from '../handlers/CoordinationHandler';\nimport { registerDashboardRoutes } from '../handlers/DashboardHandler';\nimport { registerSettingsRoutes } from '../handlers/SettingsHandler';\nimport { registerAdminRoutes } from '../handlers/AdminHandler';\nimport { registerAdminDdnsRoutes } from '../handlers/AdminDdnsHandler';\nimport { registerLinxCapabilitiesRoutes } from '../handlers/LinxCapabilitiesHandler';\nimport { createLocalSetupProvisionStateWriter, registerProvisionRoutes, registerProvisionStatusRoute } from '../handlers/ProvisionHandler';\nimport { registerPodManagementRoutes } from '../handlers/PodManagementHandler';\nimport { DrizzlePodAiConnectionStatusReader, registerPodSettingsRoutes } from '../handlers/PodSettingsHandler';\nimport {\n  createAddressReaders,\n  createCertificateCapability,\n  createDeploymentNetworkSettingsAuthorizer,\n  createDnsStatusReader,\n  createPublicAddressReader,\n  createTunnelStatusReader,\n  registerNetworkSettingsRoutes,\n} from '../handlers/NetworkSettingsHandler';\nimport { registerQuotaRoutes } from '../handlers/QuotaHandler';\nimport { registerUsageRoutes } from '../handlers/UsageHandler';\nimport { registerRdfStatsRoutes } from '../handlers/RdfStatsHandler';\nimport { registerAiGatewayManagementRoutes } from '../handlers/AiGatewayManagementHandler';\nimport { registerAiClientConfigurationRoutes } from '../handlers/AiClientConfigurationHandler';\nimport { AiClientConfigurationService } from '../service/AiClientConfigurationService';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { UsageRepository } from '../../storage/quota/UsageRepository';\nimport { DrizzleQuotaService } from '../../quota/DrizzleQuotaService';\nimport { LocalPodProvisioningService } from '../../provision/LocalPodProvisioningService';\nimport { verifyServiceAccessToken } from '../../provision/ServiceAccessTokenCodec';\nimport {\n  findEdgeNodeCertificateCapabilityBridge,\n  resolveEdgeNodeCertificateCapabilityBridgeId,\n} from '../../edge/EdgeNodeCertificateCapabilityBridge';\nimport * as path from 'node:path';\nimport { PACKAGE_ROOT } from '../../runtime';\n\n/**\n * 注册所有 API 路由\n */\nexport function registerRoutes(container: AwilixContainer<ApiContainerCradle>): void {\n  const server = container.resolve('apiServer') as ApiServer;\n  const config = container.resolve('config') as ApiContainerConfig;\n\n  // 公共健康检查端点\n  registerHealthRoutes(server);\n\n  // 共享路由\n  registerSharedRoutes(container, server);\n\n  // 根据 edition 注册专属路由\n  if (config.edition === 'cloud') {\n    registerCloudRoutes(container, server);\n  } else {\n    registerLocalRoutes(container, server);\n  }\n}\n\n/**\n * 健康检查路由\n */\nfunction registerHealthRoutes(server: ApiServer): void {\n  server.get('/health', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ok' }));\n  }, { public: true });\n\n  server.get('/ready', async (_req, res) => {\n    res.statusCode = 200;\n    res.setHeader('Content-Type', 'application/json');\n    res.end(JSON.stringify({ status: 'ready' }));\n  }, { public: true });\n\n  // Dashboard 静态资源\n  const staticDir = path.resolve(PACKAGE_ROOT, 'static/dashboard');\n  registerDashboardRoutes(server, { staticDir });\n  const settingsStaticDir = path.resolve(PACKAGE_ROOT, 'static/settings');\n  registerSettingsRoutes(server, { staticDir: settingsStaticDir });\n}\n\n/**\n * 共享路由 (cloud 和 local 都有)\n */\nfunction registerSharedRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n  const chatService = container.resolve('chatService');\n  const chatKitService = container.resolve('chatKitService');\n  const chatKitStore = container.resolve('chatKitStore');\n  const runExecutionBackend = container.resolve('runExecutionBackend');\n  const matrixStore = container.resolve('matrixStore');\n  const clientReconcilerCoordinator = container.resolve('clientReconcilerCoordinator');\n  const inngestTaskScheduler = container.resolve('inngestTaskScheduler');\n  const inngestRuntimeConfig = container.resolve('inngestRuntimeConfig');\n  const rdfStorageStatsService = container.resolve('rdfStorageStatsService');\n  const gatewayAccessKeyRepository = container.resolve('gatewayAccessKeyRepository');\n  const gatewayInternalPodAccess = container.resolve('gatewayInternalPodAccess');\n  const aiConnectionInvocationKeyIssuer = container.resolve('aiConnectionInvocationKeyIssuer');\n  const providerConnectService = container.resolve('providerConnectService');\n  const providerQuotaService = container.resolve('providerQuotaService', { allowUnregistered: true });\n  const config = container.resolve('config') as ApiContainerConfig;\n  const aiClientConfigurationService = resolveAiClientConfigurationService(container, config);\n  const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });\n  const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n  const dnsCoordinator = container.resolve('dnsCoordinator', { allowUnregistered: true });\n  const localTunnelProvider = container.resolve('localTunnelProvider', { allowUnregistered: true });\n  const cloudTunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true });\n  const tunnelProvider = localTunnelProvider ?? cloudTunnelProvider;\n  const edgeCertificateBridge = createDynamicEdgeCertificateBridge(config);\n  const certificateCapability = createCertificateCapability(\n    container.resolve('certificateManager', { allowUnregistered: true }),\n    container.resolve('acmeCertificateManager', { allowUnregistered: true }),\n    container.resolve('clusterCertificateManager', { allowUnregistered: true }),\n    edgeCertificateBridge,\n  );\n  const podLookupRepository = container.resolve('podLookupRepo');\n  const accountRoleRepository = container.resolve('accountRoleRepo', { allowUnregistered: true });\n  if (!podLookupRepository) {\n    throw new Error('Pod settings route requires podLookupRepo');\n  }\n\n  registerEdgeNodeSignalRoutes(server, {\n    repository: nodeRepo,\n    dnsCoordinator: container.resolve('dnsCoordinator', { allowUnregistered: true }) as any,\n    healthProbeService: container.resolve('healthProbeService', { allowUnregistered: true }) as any,\n  });\n  registerReachabilityRoutes(server, {\n    repository: nodeRepo,\n    baseStorageDomain: config.subdomain?.baseStorageDomain,\n    apiBaseUrl: config.cloudApiEndpoint ?? process.env.XPOD_CLOUD_API_ENDPOINT ?? process.env.CSS_BASE_URL,\n  });\n  registerNodeRoutes(server, { repository: nodeRepo });\n  const aiGatewayService = container.resolve('aiGatewayService');\n  registerChatRoutes(server, {\n    chatService,\n    aiGatewayService,\n    acceptanceEndpointsEnabled: process.env.XPOD_ACCEPTANCE_ENDPOINTS_ENABLED === 'true',\n  });\n  registerChatKitRoutes(server, { chatKitService });\n  registerChatKitV1Routes(server, { store: chatKitStore });\n  registerRunRoutes(server, { runStore: chatKitStore });\n  registerMatrixRoutes(server, { store: matrixStore });\n  registerCoordinationRoutes(server, { clientReconcilerCoordinator });\n  registerInngestRoutes(server, {\n    backend: runExecutionBackend,\n    taskScheduler: inngestTaskScheduler,\n    runtimeConfig: inngestRuntimeConfig,\n  });\n  registerRdfStatsRoutes(server, {\n    rdfStorageStatsService,\n  });\n  registerAiGatewayManagementRoutes(server, {\n    repository: gatewayAccessKeyRepository,\n    deployment: config.edition,\n    connectService: providerConnectService,\n    quotaService: providerQuotaService,\n    servicePrincipal: gatewayInternalPodAccess,\n    aiClientConfiguration: aiClientConfigurationService?.capability(),\n    aiConnectionInvocationKeyIssuer,\n  });\n  registerAiClientConfigurationRoutes(server, {\n    service: aiClientConfigurationService,\n  });\n  registerPodSettingsRoutes(server, {\n    podLookupRepository,\n    usageRepo: new UsageRepository(container.resolve('db')),\n    aiConnectionStatusReader: new DrizzlePodAiConnectionStatusReader(gatewayInternalPodAccess),\n  });\n  registerNetworkSettingsRoutes(server, {\n    endpoint: () => resolveNetworkEndpoint(config),\n    ...createAddressReaders({\n      endpoint: () => resolveNetworkEndpoint(config),\n      port: config.port,\n      publicUrls: [\n        config.publicUrl,\n        config.activeTunnelProfile?.publicUrl,\n      ],\n    }),\n    publicAddresses: createPublicAddressReader({\n      configuredUrls: [\n        config.publicUrl,\n        config.activeTunnelProfile?.publicUrl,\n      ],\n      ddnsManager,\n      tunnelProvider,\n    }),\n    dnsStatusReader: createDnsStatusReader({ ddnsManager, dnsProvider, dnsCoordinator }),\n    tunnelStatusReader: createTunnelStatusReader(tunnelProvider),\n    tlsStatusReader: certificateCapability?.tlsStatusReader,\n    certificateRenewer: certificateCapability?.certificateRenewer,\n    authorizer: createDeploymentNetworkSettingsAuthorizer({\n      deployment: config.edition,\n      accountRoleRepository,\n    }),\n  });\n\n  // Quota & Usage API (Business 对接)\n  try {\n    const quotaService = new DrizzleQuotaService({ identityDbUrl: config.databaseUrl });\n    const usageRepo = new UsageRepository(container.resolve('db'));\n    registerQuotaRoutes(server, { quotaService, usageRepo });\n    registerUsageRoutes(server, { usageRepo });\n    console.log('[Shared] Quota & Usage routes registered');\n  } catch (error) {\n    console.log(`[Shared] Quota & Usage routes not registered: ${error}`);\n  }\n}\n\nfunction resolveAiClientConfigurationService(\n  container: AwilixContainer<ApiContainerCradle>,\n  config: ApiContainerConfig,\n): AiClientConfigurationService | undefined {\n  const injected = container.resolve('aiClientConfigurationService', { allowUnregistered: true });\n  if (injected) return injected;\n  const capability = config.aiClientConfiguration;\n  if (!capability?.enabled || capability.authority !== 'local-filesystem') {\n    return undefined;\n  }\n  return new AiClientConfigurationService({\n    homeDir: capability.homeDir,\n    backupRoot: capability.backupRoot,\n  });\n}\n\nfunction createDynamicEdgeCertificateBridge(config: ApiContainerConfig): unknown {\n  const bridgeId = resolveEdgeNodeCertificateCapabilityBridgeId({\n    nodeId: config.nodeId,\n    baseUrl: config.solidBaseUrl ?? config.publicUrl,\n  });\n  if (!bridgeId) {\n    return undefined;\n  }\n  return {\n    readCertificateStatus: async () => {\n      return await findEdgeNodeCertificateCapabilityBridge(bridgeId)?.readCertificateStatus()\n        ?? { supported: false, status: 'unsupported' };\n    },\n    renewCertificate: async () => {\n      const bridge = findEdgeNodeCertificateCapabilityBridge(bridgeId);\n      if (!bridge) {\n        throw Object.assign(new Error('Certificate runtime is not available.'), {\n          statusCode: 503,\n          code: 'certificate_renewal_unavailable',\n        });\n      }\n      return await bridge.renewCertificate();\n    },\n    isAvailable: async () => {\n      return Boolean(await findEdgeNodeCertificateCapabilityBridge(bridgeId)?.isAvailable());\n    },\n  };\n}\n\n/**\n * Cloud 模式专属路由\n */\nfunction registerCloudRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  // 子域名管理 API (需要 SubdomainService)\n  try {\n    const subdomainService = container.resolve('subdomainService') as ApiContainerCradle['subdomainService'];\n    if (subdomainService) {\n      registerSubdomainRoutes(server, { subdomainService });\n      console.log('[Cloud] Subdomain routes registered');\n    }\n  } catch {\n    console.log('[Cloud] Subdomain routes not registered (service not available)');\n  }\n\n  // DDNS 服务\n  try {\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true });\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const config = container.resolve('config') as ApiContainerConfig;\n\n    if (ddnsRepo) {\n      const baseStorageDomain = config.subdomain?.baseStorageDomain;\n      if (baseStorageDomain) {\n        registerDdnsRoutes(server, {\n          ddnsRepo: ddnsRepo as any,\n          dnsProvider: dnsProvider as any,\n          defaultDomain: baseStorageDomain,\n        });\n        console.log(`[Cloud] DDNS routes registered (domain: ${baseStorageDomain})`);\n      } else {\n        console.log('[Cloud] DDNS routes not registered (no CSS_BASE_STORAGE_DOMAIN)');\n      }\n    }\n  } catch {\n    console.log('[Cloud] DDNS routes not registered (repo not available)');\n  }\n\n  // SP Provision API (SP 注册)\n  try {\n    const nodeRepo = container.resolve('nodeRepo') as EdgeNodeRepository;\n    const config = container.resolve('config') as ApiContainerConfig;\n    const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n    const baseStorageDomain = config.subdomain?.baseStorageDomain;\n    const ddnsRepo = container.resolve('ddnsRepo', { allowUnregistered: true }) as any;\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true }) as any;\n    const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true }) as any;\n    registerProvisionRoutes(server, {\n      repository: nodeRepo,\n      ddnsRepo,\n      dnsProvider,\n      tunnelProvider,\n      baseUrl,\n      baseStorageDomain,\n    });\n    console.log(`[Cloud] Provision routes registered${baseStorageDomain ? ` (baseStorageDomain: ${baseStorageDomain})` : ''}`);\n  } catch {\n    console.log('[Cloud] Provision routes not registered (dependencies not available)');\n  }\n}\n\n/**\n * Local 模式专属路由\n */\nfunction registerLocalRoutes(\n  container: AwilixContainer<ApiContainerCradle>,\n  server: ApiServer,\n): void {\n  const config = container.resolve('config') as ApiContainerConfig;\n  registerLinxCapabilitiesRoutes(server);\n\n  // Admin API (配置管理、重启)\n  registerAdminRoutes(server, {\n    internalAdminAuthSecret: config.gatewayAdminProxyAuthSecret,\n  });\n  // DDNS status (托管式 Local 模式)\n  try {\n    const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true }) as any;\n    registerAdminDdnsRoutes(server, { ddnsManager });\n  } catch {\n    // ignore\n  }\n\n  // 子域名客户端 API (通过 SubdomainClient 调用 Cloud)\n  try {\n    const subdomainClient = container.resolve('subdomainClient') as ApiContainerCradle['subdomainClient'];\n    if (subdomainClient) {\n      registerSubdomainClientRoutes(server, { subdomainClient });\n      console.log('[Local] Subdomain client routes registered');\n    }\n  } catch {\n    console.log('[Local] Subdomain client routes not registered (client not available)');\n  }\n\n  // Pod Provision API (SP 端，供 Cloud 回调创建 Pod)\n  try {\n    const config = container.resolve('config') as ApiContainerConfig;\n    // rootDir: CSS 数据目录，默认 ./data\n    const rootDir = process.env.CSS_ROOT_FILE_PATH || './data';\n    // serviceToken 验证：从 SP 配置中读取\n    const expectedServiceToken = config.serviceToken;\n\n    if (expectedServiceToken) {\n      const baseUrl = process.env.CSS_BASE_URL || 'http://localhost:3000/';\n      const sparqlEndpoint = process.env.CSS_SPARQL_ENDPOINT || process.env.SPARQL_ENDPOINT;\n      const identityDbUrl = process.env.CSS_IDENTITY_DB_URL || process.env.DATABASE_URL;\n      const provisioningService = sparqlEndpoint && identityDbUrl\n        ? new LocalPodProvisioningService({\n          baseUrl,\n          rootDir,\n          sparqlEndpoint,\n          identityDbUrl,\n          rdfIndexPath: config.rdfIndexPath,\n          oidcIssuer: process.env.oidcIssuer ?? config.oidcIssuer,\n          authMode: config.authMode,\n        })\n        : undefined;\n\n      registerPodManagementRoutes(server, {\n        rootDir,\n        verifyServiceToken: async (token: string) => (\n          token === expectedServiceToken\n          || verifyServiceAccessToken(token, { serviceToken: expectedServiceToken }).valid\n        ),\n        provisioningService,\n        podLookupRepository: container.resolve('podLookupRepo', { allowUnregistered: true }),\n        storageProviderBaseUrl: baseUrl,\n      });\n      console.log(`[Local] Pod provision routes registered (/provision/pods, /provision/webids, ${provisioningService ? 'css-compatible' : 'directory-only'})`);\n    } else {\n      console.log('[Local] Pod provision routes not registered (serviceToken not configured)');\n    }\n  } catch (error) {\n    console.log(`[Local] Pod provision routes not registered: ${error}`);\n  }\n\n  // SP 状态查询 (供 Linx 查询 SP 配置状态)\n  try {\n    const config = container.resolve('config') as ApiContainerConfig;\n    registerProvisionStatusRoute(server, {\n      cloudUrl: config.cloudApiEndpoint,\n      nodeId: config.nodeId,\n      nodeToken: config.nodeToken,\n      serviceToken: config.serviceToken,\n      publicUrl: process.env.XPOD_PUBLIC_URL ?? config.publicUrl ?? process.env.CSS_BASE_URL,\n      spDomain: process.env.XPOD_SP_DOMAIN ?? config.spDomain,\n      localPort: readPositiveInteger(process.env.CSS_PORT ?? process.env.XPOD_PORT ?? process.env.PORT),\n      tunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN ?? process.env.SAKURA_TUNNEL_TOKEN ?? process.env.SAKURA_TOKEN,\n      cloudBaseUrl: config.oidcIssuer || config.cloudApiEndpoint,\n      provisionCode: process.env.XPOD_PROVISION_CODE ?? config.provisionCode,\n      persistState: createLocalSetupProvisionStateWriter(\n        config.localSetupPath,\n        config.localSetupProviderId,\n      ),\n    });\n    console.log('[Local] Provision status route registered (/provision/status)');\n  } catch (error) {\n    console.log(`[Local] Provision status route not registered: ${error}`);\n  }\n}\n\nfunction readPositiveInteger(value: string | undefined): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n\n  const parsed = Number.parseInt(value, 10);\n  return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;\n}\n\nfunction resolveNetworkEndpoint(config: ApiContainerConfig): string {\n  const configured = config.publicUrl\n    ?? config.activeTunnelProfile?.publicUrl\n    ?? config.solidBaseUrl\n    ?? `http://${config.host === '0.0.0.0' ? '127.0.0.1' : config.host}:${config.port}/`;\n  try {\n    return new URL(configured).toString().replace(/\\/+$/u, '') + '/';\n  } catch {\n    return `http://127.0.0.1:${config.port}/`;\n  }\n}\n"]}