@undefineds.co/xpod 0.3.58 → 0.3.62

package/dist/api/handlers/ChatHandler.js

@@ -1,229 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerChatRoutes = registerChatRoutes;
-const global_logger_factory_1 = require("global-logger-factory");
-const AuthContext_1 = require("../auth/AuthContext");
+const AiGatewayHandler_1 = require("./AiGatewayHandler");
 /**
- * Handler for chat completions API (OpenAI-compatible)
+ * Register public AI-compatible routes.
  *
- * POST /v1/chat/completions - Create a chat completion
- * POST /v1/responses - Create a response (OpenAI Responses API)
- * POST /v1/messages - Create a message (Anthropic/OpenAI Threads compatible)
- * GET  /v1/models - List available models
- *
- * Supports both Solid Token (frontend) and CSS client credentials (third-party)
+ * The four `/v1/*` client-facing routes are owned by AiGatewayHandler. Legacy
+ * provider branching remains in VercelChatService until Task11, but it is no
+ * longer installed as a public route implementation here.
  */
 function registerChatRoutes(server, options) {
-    const logger = (0, global_logger_factory_1.getLoggerFor)('ChatHandler');
-    const chatService = options.chatService;
-    // POST /api/chat/completions
-    server.post('/v1/chat/completions', async (request, response, _params) => {
-        const auth = request.auth;
-        const body = await readJsonBody(request);
-        if (!body || typeof body !== 'object') {
-            sendJson(response, 400, {
-                error: {
-                    message: 'Request body must be a JSON object',
-                    type: 'invalid_request_error',
-                    code: 'invalid_body',
-                },
-            });
-            return;
-        }
-        const payload = body;
-        // Validate required fields
-        if (!payload.model || typeof payload.model !== 'string') {
-            sendJson(response, 400, {
-                error: {
-                    message: 'model is required',
-                    type: 'invalid_request_error',
-                    code: 'missing_model',
-                },
-            });
-            return;
-        }
-        if (!Array.isArray(payload.messages) || payload.messages.length === 0) {
-            sendJson(response, 400, {
-                error: {
-                    message: 'messages array is required and must not be empty',
-                    type: 'invalid_request_error',
-                    code: 'missing_messages',
-                },
-            });
-            return;
-        }
-        // Get user identifier for rate limiting / logging
-        const userId = (0, AuthContext_1.getWebId)(auth) ?? (0, AuthContext_1.getAccountId)(auth) ?? 'anonymous';
-        const displayName = (0, AuthContext_1.getDisplayName)(auth) || userId;
-        const accountId = (0, AuthContext_1.getAccountId)(auth);
-        // Check if service is available
-        if (!chatService) {
-            sendJson(response, 503, {
-                error: {
-                    message: 'Chat service is not configured',
-                    type: 'service_unavailable',
-                    code: 'service_not_configured',
-                },
-            });
-            return;
-        }
-        try {
-            const messages = payload.messages;
-            const completionRequest = {
-                ...payload,
-                model: payload.model,
-                messages,
-            };
-            // Handle streaming
-            if (completionRequest.stream === true) {
-                const streamResult = await chatService.stream(completionRequest, auth);
-                // Vercel AI SDK v6 uses toTextStreamResponse (not toDataStreamResponse)
-                const webResponse = streamResult.toTextStreamResponse();
-                // Copy headers (Content-Type: text/plain; charset=utf-8, X-Vercel-AI-Data-Stream: v1)
-                webResponse.headers.forEach((value, key) => {
-                    response.setHeader(key, value);
-                });
-                response.statusCode = webResponse.status;
-                // Pipe Web Stream to Node Response
-                if (webResponse.body) {
-                    const reader = webResponse.body.getReader();
-                    const pump = async () => {
-                        try {
-                            while (true) {
-                                const { done, value } = await reader.read();
-                                if (done) {
-                                    break;
-                                }
-                                response.write(value);
-                            }
-                        }
-                        catch (e) {
-                            logger.error(`Stream write error: ${e}`);
-                        }
-                        finally {
-                            response.end();
-                        }
-                    };
-                    pump();
-                }
-                else {
-                    response.end();
-                }
-                return;
-            }
-            logger.info(`Chat completion request from ${displayName} (acc: ${accountId}), model: ${completionRequest.model}`);
-            const result = await chatService.complete(completionRequest, auth);
-            sendJson(response, 200, result);
-        }
-        catch (error) {
-            if (error?.code === 'model_not_configured') {
-                sendJson(response, 400, {
-                    error: {
-                        message: error.message || 'Model is not configured',
-                        type: 'invalid_request_error',
-                        code: 'model_not_configured',
-                    },
-                });
-                return;
-            }
-            logger.error(`Chat completion error: ${error}`);
-            sendJson(response, 500, {
-                error: {
-                    message: error.message || 'Internal server error',
-                    stack: error.stack,
-                    type: 'internal_error',
-                    code: 'internal_error',
-                },
-            });
-        }
-    });
-    // POST /v1/responses - Create a response
-    server.post('/v1/responses', async (request, response, _params) => {
-        const auth = request.auth;
-        const body = await readJsonBody(request);
-        const userId = (0, AuthContext_1.getWebId)(auth) ?? (0, AuthContext_1.getAccountId)(auth) ?? 'anonymous';
-        const displayName = (0, AuthContext_1.getDisplayName)(auth) || userId;
-        const accountId = (0, AuthContext_1.getAccountId)(auth);
-        if (!chatService || !chatService.responses) {
-            sendJson(response, 501, { error: 'Responses API not implemented or configured' });
-            return;
-        }
-        try {
-            logger.info(`Responses API request from ${displayName} (acc: ${accountId})`);
-            const result = await chatService.responses(body, auth);
-            sendJson(response, 200, result);
-        }
-        catch (error) {
-            logger.error(`Responses API error: ${error}`);
-            sendJson(response, 500, { error: error.message || 'Internal server error' });
-        }
-    });
-    // POST /v1/messages - Create a message
-    server.post('/v1/messages', async (request, response, _params) => {
-        const auth = request.auth;
-        const body = await readJsonBody(request);
-        const userId = (0, AuthContext_1.getWebId)(auth) ?? (0, AuthContext_1.getAccountId)(auth) ?? 'anonymous';
-        const displayName = (0, AuthContext_1.getDisplayName)(auth) || userId;
-        const accountId = (0, AuthContext_1.getAccountId)(auth);
-        if (!chatService || !chatService.messages) {
-            sendJson(response, 501, { error: 'Messages API not implemented or configured' });
-            return;
-        }
-        try {
-            logger.info(`Messages API request from ${displayName} (acc: ${accountId})`);
-            const result = await chatService.messages(body, auth);
-            sendJson(response, 200, result);
-        }
-        catch (error) {
-            logger.error(`Messages API error: ${error}`);
-            sendJson(response, 500, { error: error.message || 'Internal server error' });
-        }
-    });
-    // GET /v1/models - List available models (OpenAI-compatible)
-    server.get('/v1/models', async (request, response, _params) => {
-        if (!chatService) {
-            sendJson(response, 503, { error: 'Chat service not configured' });
-            return;
-        }
-        try {
-            const auth = request.auth;
-            const models = await chatService.listModels(auth);
-            sendJson(response, 200, {
-                object: 'list',
-                data: models,
-            });
-        }
-        catch (error) {
-            logger.error(`Failed to list models: ${error}`);
-            sendJson(response, 500, { error: 'Failed to list models' });
-        }
+    if (!options.aiGatewayService) {
+        throw new Error('AiGatewayService is required to register public v1 AI routes');
+    }
+    (0, AiGatewayHandler_1.registerAiGatewayRoutes)(server, {
+        service: options.aiGatewayService,
+        jsonBodyLimitBytes: options.aiGatewayJsonBodyLimitBytes,
+        acceptanceEndpointsEnabled: options.acceptanceEndpointsEnabled,
     });
 }
-async function readJsonBody(request) {
-    return new Promise((resolve, reject) => {
-        let data = '';
-        request.setEncoding('utf8');
-        request.on('data', (chunk) => {
-            data += chunk;
-        });
-        request.on('end', () => {
-            if (!data) {
-                resolve(undefined);
-                return;
-            }
-            try {
-                resolve(JSON.parse(data));
-            }
-            catch {
-                resolve(undefined);
-            }
-        });
-        request.on('error', reject);
-    });
-}
-function sendJson(response, status, data) {
-    response.statusCode = status;
-    response.setHeader('Content-Type', 'application/json');
-    response.end(JSON.stringify(data));
-}
 //# sourceMappingURL=ChatHandler.js.map

package/dist/api/handlers/ChatHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"ChatHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/ChatHandler.ts"],"names":[],"mappings":";;AA2EA,gDAwMC;AAlRD,iEAAqD;AAIrD,qDAA6E;AA4D7E;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAAC,MAAiB,EAAE,OAA2B;IAC/E,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,6BAA6B;IAC7B,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,oCAAoC;oBAC7C,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,cAAc;iBACrB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAEhD,2BAA2B;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,mBAAmB;oBAC5B,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,eAAe;iBACtB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,IAAI,IAAA,0BAAY,EAAC,IAAI,CAAC,IAAI,WAAW,CAAC;QACnE,MAAM,WAAW,GAAG,IAAA,4BAAc,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QACnD,MAAM,SAAS,GAAG,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC;QAGrC,gCAAgC;QAChC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE,wBAAwB;iBAC/B;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA6C,CAAC;YACvE,MAAM,iBAAiB,GAA0B;gBAC/C,GAAG,OAAO;gBACV,KAAK,EAAE,OAAO,CAAC,KAAe;gBAC9B,QAAQ;aACT,CAAC;YAEF,mBAAmB;YACnB,IAAI,iBAAiB,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACtC,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACvE,wEAAwE;gBACxE,MAAM,WAAW,GAAG,YAAY,CAAC,oBAAoB,EAAE,CAAC;gBAExD,sFAAsF;gBACtF,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE;oBACzD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC;gBAEzC,mCAAmC;gBACnC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;oBACrB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC5C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;wBACtB,IAAI,CAAC;4BACH,OAAO,IAAI,EAAE,CAAC;gCACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gCAC5C,IAAI,IAAI,EAAE,CAAC;oCACT,MAAM;gCACR,CAAC;gCACD,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACxB,CAAC;wBACH,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;wBAC3C,CAAC;gCAAS,CAAC;4BACT,QAAQ,CAAC,GAAG,EAAE,CAAC;wBACjB,CAAC;oBACH,CAAC,CAAC;oBACF,IAAI,EAAE,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACjB,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,gCAAgC,WAAW,UAAU,SAAS,aAAa,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;YAElH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YACnE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACtB,KAAK,EAAE;wBACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,yBAAyB;wBACnD,IAAI,EAAE,uBAAuB;wBAC7B,IAAI,EAAE,sBAAsB;qBAC7B;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;oBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,gBAAgB;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,IAAI,IAAA,0BAAY,EAAC,IAAI,CAAC,IAAI,WAAW,CAAC;QACnE,MAAM,WAAW,GAAG,IAAA,4BAAc,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QACnD,MAAM,SAAS,GAAG,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC;QAErC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YAC3C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,8BAA8B,WAAW,UAAU,SAAS,GAAG,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;YAC9C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,IAAI,IAAA,0BAAY,EAAC,IAAI,CAAC,IAAI,WAAW,CAAC;QACnE,MAAM,WAAW,GAAG,IAAA,4BAAc,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QACnD,MAAM,SAAS,GAAG,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC;QAErC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,6BAA6B,WAAW,UAAU,SAAS,GAAG,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAGD,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthContext } from '../auth/AuthContext';\nimport { getWebId, getAccountId, getDisplayName } from '../auth/AuthContext';\n\n/**\n * Chat completion request (OpenAI-compatible)\n */\nexport interface ChatCompletionRequest {\n  model: string;\n  messages: Array<Record<string, unknown> & {\n    role: string;\n    content?: unknown;\n  }>;\n  temperature?: number;\n  max_tokens?: number;\n  stream?: boolean;\n  tools?: unknown[];\n  tool_choice?: unknown;\n  [key: string]: unknown;\n}\n\n/**\n * Chat completion response (OpenAI-compatible)\n */\nexport interface ChatCompletionResponse {\n  id: string;\n  object: 'chat.completion';\n  created: number;\n  model: string;\n  choices: Array<{\n    index: number;\n    message: {\n      role: 'assistant';\n      content: string | null;\n      tool_calls?: unknown[];\n    };\n    finish_reason: 'stop' | 'length' | 'content_filter' | 'tool_calls' | null;\n  }>;\n  usage: {\n    prompt_tokens: number;\n    completion_tokens: number;\n    total_tokens: number;\n  };\n}\n\nexport interface ChatHandlerOptions {\n  /**\n   * Backend chat service to delegate to (e.g., OpenAI, local model)\n   */\n  chatService?: {\n    complete(request: ChatCompletionRequest, auth: AuthContext): Promise<ChatCompletionResponse>;\n    stream(request: ChatCompletionRequest, auth: AuthContext): Promise<any>;\n    responses?(body: any, auth: AuthContext): Promise<any>;\n    messages?(body: any, auth: AuthContext): Promise<any>;\n    listModels(auth?: AuthContext): Promise<any[]>;\n  };\n  /**\n   * Pod base URL for storage\n   */\n  podBaseUrl?: string;\n}\n\n/**\n * Handler for chat completions API (OpenAI-compatible)\n * \n * POST /v1/chat/completions - Create a chat completion\n * POST /v1/responses - Create a response (OpenAI Responses API)\n * POST /v1/messages - Create a message (Anthropic/OpenAI Threads compatible)\n * GET  /v1/models - List available models\n * \n * Supports both Solid Token (frontend) and CSS client credentials (third-party)\n */\nexport function registerChatRoutes(server: ApiServer, options: ChatHandlerOptions): void {\n  const logger = getLoggerFor('ChatHandler');\n  const chatService = options.chatService;\n\n  // POST /api/chat/completions\n  server.post('/v1/chat/completions', async (request, response, _params) => {\n    const auth = request.auth!;\n    const body = await readJsonBody(request);\n\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, {\n        error: {\n          message: 'Request body must be a JSON object',\n          type: 'invalid_request_error',\n          code: 'invalid_body',\n        },\n      });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n\n    // Validate required fields\n    if (!payload.model || typeof payload.model !== 'string') {\n      sendJson(response, 400, {\n        error: {\n          message: 'model is required',\n          type: 'invalid_request_error',\n          code: 'missing_model',\n        },\n      });\n      return;\n    }\n\n    if (!Array.isArray(payload.messages) || payload.messages.length === 0) {\n      sendJson(response, 400, {\n        error: {\n          message: 'messages array is required and must not be empty',\n          type: 'invalid_request_error',\n          code: 'missing_messages',\n        },\n      });\n      return;\n    }\n\n    // Get user identifier for rate limiting / logging\n    const userId = getWebId(auth) ?? getAccountId(auth) ?? 'anonymous';\n    const displayName = getDisplayName(auth) || userId;\n    const accountId = getAccountId(auth);\n\n\n    // Check if service is available\n    if (!chatService) {\n      sendJson(response, 503, {\n        error: {\n          message: 'Chat service is not configured',\n          type: 'service_unavailable',\n          code: 'service_not_configured',\n        },\n      });\n      return;\n    }\n\n    try {\n      const messages = payload.messages as ChatCompletionRequest['messages'];\n      const completionRequest: ChatCompletionRequest = {\n        ...payload,\n        model: payload.model as string,\n        messages,\n      };\n\n      // Handle streaming\n      if (completionRequest.stream === true) {\n        const streamResult = await chatService.stream(completionRequest, auth);\n        // Vercel AI SDK v6 uses toTextStreamResponse (not toDataStreamResponse)\n        const webResponse = streamResult.toTextStreamResponse();\n\n        // Copy headers (Content-Type: text/plain; charset=utf-8, X-Vercel-AI-Data-Stream: v1)\n        webResponse.headers.forEach((value: string, key: string) => {\n          response.setHeader(key, value);\n        });\n        response.statusCode = webResponse.status;\n\n        // Pipe Web Stream to Node Response\n        if (webResponse.body) {\n          const reader = webResponse.body.getReader();\n          const pump = async () => {\n            try {\n              while (true) {\n                const { done, value } = await reader.read();\n                if (done) {\n                  break;\n                }\n                response.write(value);\n              }\n            } catch (e) {\n              logger.error(`Stream write error: ${e}`);\n            } finally {\n              response.end();\n            }\n          };\n          pump();\n        } else {\n          response.end();\n        }\n        return;\n      }\n\n      logger.info(`Chat completion request from ${displayName} (acc: ${accountId}), model: ${completionRequest.model}`);\n\n      const result = await chatService.complete(completionRequest, auth);\n      sendJson(response, 200, result);\n    } catch (error: any) {\n      if (error?.code === 'model_not_configured') {\n        sendJson(response, 400, {\n          error: {\n            message: error.message || 'Model is not configured',\n            type: 'invalid_request_error',\n            code: 'model_not_configured',\n          },\n        });\n        return;\n      }\n      logger.error(`Chat completion error: ${error}`);\n      sendJson(response, 500, {\n        error: {\n          message: error.message || 'Internal server error',\n          stack: error.stack,\n          type: 'internal_error',\n          code: 'internal_error',\n        },\n      });\n    }\n  });\n\n  // POST /v1/responses - Create a response\n  server.post('/v1/responses', async (request, response, _params) => {\n    const auth = request.auth!;\n    const body = await readJsonBody(request);\n    const userId = getWebId(auth) ?? getAccountId(auth) ?? 'anonymous';\n    const displayName = getDisplayName(auth) || userId;\n    const accountId = getAccountId(auth);\n\n    if (!chatService || !chatService.responses) {\n      sendJson(response, 501, { error: 'Responses API not implemented or configured' });\n      return;\n    }\n\n    try {\n      logger.info(`Responses API request from ${displayName} (acc: ${accountId})`);\n      const result = await chatService.responses(body, auth);\n      sendJson(response, 200, result);\n    } catch (error: any) {\n      logger.error(`Responses API error: ${error}`);\n      sendJson(response, 500, { error: error.message || 'Internal server error' });\n    }\n  });\n\n  // POST /v1/messages - Create a message\n  server.post('/v1/messages', async (request, response, _params) => {\n    const auth = request.auth!;\n    const body = await readJsonBody(request);\n    const userId = getWebId(auth) ?? getAccountId(auth) ?? 'anonymous';\n    const displayName = getDisplayName(auth) || userId;\n    const accountId = getAccountId(auth);\n\n    if (!chatService || !chatService.messages) {\n      sendJson(response, 501, { error: 'Messages API not implemented or configured' });\n      return;\n    }\n\n    try {\n      logger.info(`Messages API request from ${displayName} (acc: ${accountId})`);\n      const result = await chatService.messages(body, auth);\n      sendJson(response, 200, result);\n    } catch (error: any) {\n      logger.error(`Messages API error: ${error}`);\n      sendJson(response, 500, { error: error.message || 'Internal server error' });\n    }\n  });\n\n  // GET /v1/models - List available models (OpenAI-compatible)\n  server.get('/v1/models', async (request, response, _params) => {\n    if (!chatService) {\n      sendJson(response, 503, { error: 'Chat service not configured' });\n      return;\n    }\n\n    try {\n      const auth = request.auth;\n      const models = await chatService.listModels(auth);\n      sendJson(response, 200, {\n        object: 'list',\n        data: models,\n      });\n    } catch (error) {\n      logger.error(`Failed to list models: ${error}`);\n      sendJson(response, 500, { error: 'Failed to list models' });\n    }\n  });\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}
+{"version":3,"file":"ChatHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/ChatHandler.ts"],"names":[],"mappings":";;AAuEA,gDASC;AA7ED,yDAA6D;AA6D7D;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,MAAiB,EAAE,OAA2B;IAC/E,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAA,0CAAuB,EAAC,MAAM,EAAE;QAC9B,OAAO,EAAE,OAAO,CAAC,gBAAgB;QACjC,kBAAkB,EAAE,OAAO,CAAC,2BAA2B;QACvD,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { ApiServer } from '../ApiServer';\nimport type { AuthContext } from '../auth/AuthContext';\nimport type { AiGatewayService } from '../ai-gateway/AiGatewayService';\nimport { registerAiGatewayRoutes } from './AiGatewayHandler';\n\n/**\n * Chat completion request (OpenAI-compatible)\n */\nexport interface ChatCompletionRequest {\n  model: string;\n  messages: Array<Record<string, unknown> & {\n    role: string;\n    content?: unknown;\n  }>;\n  temperature?: number;\n  max_tokens?: number;\n  stream?: boolean;\n  tools?: unknown[];\n  tool_choice?: unknown;\n  [key: string]: unknown;\n}\n\n/**\n * Chat completion response (OpenAI-compatible)\n */\nexport interface ChatCompletionResponse {\n  id: string;\n  object: 'chat.completion';\n  created: number;\n  model: string;\n  choices: Array<{\n    index: number;\n    message: {\n      role: 'assistant';\n      content: string | null;\n      tool_calls?: unknown[];\n    };\n    finish_reason: 'stop' | 'length' | 'content_filter' | 'tool_calls' | string | null;\n  }>;\n  usage: {\n    prompt_tokens: number;\n    completion_tokens: number;\n    total_tokens: number;\n  };\n}\n\nexport interface ChatHandlerOptions {\n  aiGatewayService?: AiGatewayService;\n  aiGatewayJsonBodyLimitBytes?: number;\n  acceptanceEndpointsEnabled?: boolean;\n  /**\n   * Legacy service type retained only so Task11 can migrate existing internal\n   * callers without forcing unrelated imports to change in this task.\n   */\n  chatService?: {\n    complete(request: ChatCompletionRequest, auth: AuthContext): Promise<ChatCompletionResponse>;\n    stream(request: ChatCompletionRequest, auth: AuthContext): Promise<any>;\n    responses?(body: any, auth: AuthContext): Promise<any>;\n    messages?(body: any, auth: AuthContext): Promise<any>;\n    listModels(auth?: AuthContext): Promise<any[]>;\n  };\n  podBaseUrl?: string;\n}\n\n/**\n * Register public AI-compatible routes.\n *\n * The four `/v1/*` client-facing routes are owned by AiGatewayHandler. Legacy\n * provider branching remains in VercelChatService until Task11, but it is no\n * longer installed as a public route implementation here.\n */\nexport function registerChatRoutes(server: ApiServer, options: ChatHandlerOptions): void {\n  if (!options.aiGatewayService) {\n    throw new Error('AiGatewayService is required to register public v1 AI routes');\n  }\n  registerAiGatewayRoutes(server, {\n    service: options.aiGatewayService,\n    jsonBodyLimitBytes: options.aiGatewayJsonBodyLimitBytes,\n    acceptanceEndpointsEnabled: options.acceptanceEndpointsEnabled,\n  });\n}\n"]}

package/dist/api/handlers/DashboardHandler.js

@@ -4,128 +4,34 @@
  *
  * Serve /dashboard/ 路径下的运维 UI 静态资源
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerDashboardRoutes = registerDashboardRoutes;
-const fs = __importStar(require("node:fs"));
-const path = __importStar(require("node:path"));
-const MIME_TYPES = {
-    '.html': 'text/html',
-    '.js': 'application/javascript',
-    '.css': 'text/css',
-    '.json': 'application/json',
-    '.png': 'image/png',
-    '.jpg': 'image/jpeg',
-    '.jpeg': 'image/jpeg',
-    '.gif': 'image/gif',
-    '.svg': 'image/svg+xml',
-    '.ico': 'image/x-icon',
-    '.woff': 'font/woff',
-    '.woff2': 'font/woff2',
-    '.ttf': 'font/ttf',
-    '.eot': 'application/vnd.ms-fontobject',
-};
+const StaticSpaHandler_1 = require("./StaticSpaHandler");
 /**
  * 注册 Dashboard 路由
  */
 function registerDashboardRoutes(server, options) {
-    const { staticDir } = options;
-    // 检查目录是否存在
-    if (!fs.existsSync(staticDir)) {
-        console.warn(`[Dashboard] Static directory not found: ${staticDir}`);
-        console.warn('[Dashboard] Run "cd ui && bun run build" to build the dashboard UI');
-        return;
-    }
-    console.log(`[Dashboard] Serving from: ${staticDir}`);
-    // 处理 /dashboard 和 /dashboard/ 重定向
-    const redirectHandler = async (_req, res) => {
-        res.statusCode = 302;
-        res.setHeader('Location', '/dashboard/');
-        res.end();
+    const movedRoutes = {
+        '/dashboard/models': '/settings/models',
+        '/dashboard/pod': '/settings/pod',
+        '/dashboard/services': '/settings/services',
+        '/dashboard/settings': '/settings/services',
     };
-    // 静态资源处理器
-    const staticHandler = async (req, res, params) => {
-        let filePath = params.path || 'index.html';
-        // 安全检查：防止路径遍历
-        if (filePath.includes('..')) {
-            res.statusCode = 403;
-            res.end('Forbidden');
-            return;
-        }
-        let fullPath = path.join(staticDir, filePath);
-        // 优先兼容 dashboard.html，其次回退到 index.html。
-        // 这样能兼容当前产物（dashboard.html）和旧构建（index.html）。
-        if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {
-            const dashboardEntry = path.join(fullPath, 'dashboard.html');
-            const indexEntry = path.join(fullPath, 'index.html');
-            fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;
-        }
-        // SPA fallback
-        if (!fs.existsSync(fullPath)) {
-            const dashboardEntry = path.join(staticDir, 'dashboard.html');
-            const indexEntry = path.join(staticDir, 'index.html');
-            fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;
-        }
-        // 再次检查文件是否存在
-        if (!fs.existsSync(fullPath)) {
-            res.statusCode = 404;
-            res.setHeader('Content-Type', 'application/json');
-            res.end(JSON.stringify({ error: 'Not Found' }));
-            return;
-        }
-        // 获取 MIME 类型
-        const ext = path.extname(fullPath).toLowerCase();
-        const mimeType = MIME_TYPES[ext] || 'application/octet-stream';
-        // 读取并返回文件
-        try {
-            const content = fs.readFileSync(fullPath);
-            res.statusCode = 200;
-            res.setHeader('Content-Type', mimeType);
-            res.setHeader('Cache-Control', ext === '.html' ? 'no-cache' : 'public, max-age=31536000');
-            // For HEAD requests, only return headers.
-            if ((req.method ?? 'GET').toUpperCase() == 'HEAD') {
-                res.end();
-                return;
-            }
-            res.end(content);
-        }
-        catch (error) {
-            console.error(`[Dashboard] Error reading file: ${fullPath}`, error);
-            res.statusCode = 500;
-            res.setHeader('Content-Type', 'application/json');
-            res.end(JSON.stringify({ error: 'Internal Server Error' }));
-        }
-    };
-    // 注册路由 - 都是 public 的，不需要认证
-    // 使用通配符 *path 匹配所有子路径（包括 assets/xxx.js）
-    server.get('/dashboard', redirectHandler, { public: true });
-    server.get('/dashboard/', staticHandler, { public: true });
-    server.get('/dashboard/*path', staticHandler, { public: true });
-    // HEAD support for tooling (e.g. curl -I) and legacy health checks.
-    server.route('HEAD', '/dashboard', redirectHandler, { public: true });
-    server.route('HEAD', '/dashboard/', staticHandler, { public: true });
-    server.route('HEAD', '/dashboard/*path', staticHandler, { public: true });
+    for (const [from, to] of Object.entries(movedRoutes)) {
+        const redirect = async (req, res) => {
+            const source = new URL(req.url ?? from, 'http://localhost');
+            res.statusCode = 302;
+            res.setHeader('Location', `${to}${source.search}`);
+            res.end();
+        };
+        server.get(from, redirect, { public: true });
+        server.route('HEAD', from, redirect, { public: true });
+    }
+    (0, StaticSpaHandler_1.registerStaticSpaRoutes)(server, {
+        prefix: '/dashboard',
+        staticDir: options.staticDir,
+        entryFiles: ['dashboard.html', 'index.html'],
+        label: 'Dashboard',
+    });
 }
 //# sourceMappingURL=DashboardHandler.js.map

package/dist/api/handlers/DashboardHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"DashboardHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DashboardHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;AAiCH,0DAqGC;AApID,4CAA8B;AAC9B,gDAAkC;AAKlC,MAAM,UAAU,GAA2B;IACzC,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;CACxC,CAAC;AAOF;;GAEG;AACH,SAAgB,uBAAuB,CACrC,MAAiB,EACjB,OAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE9B,WAAW;IACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;IAEtD,kCAAkC;IAClC,MAAM,eAAe,GAAiB,KAAK,EACzC,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,UAAU;IACV,MAAM,aAAa,GAAiB,KAAK,EACvC,GAAyB,EACzB,GAAmB,EACnB,MAA8B,EAC9B,EAAE;QACF,IAAI,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;QAE3C,cAAc;QACd,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE9C,wCAAwC;QACxC,6CAA6C;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,eAAe;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtD,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,aAAa;QACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;QAE/D,UAAU;QACV,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;YAE1F,0CAA0C;YAC1C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;gBAClD,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;YACpE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,2BAA2B;IAC3B,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,oEAAoE;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC","sourcesContent":["/**\n * Dashboard 静态资源处理器\n *\n * Serve /dashboard/ 路径下的运维 UI 静态资源\n */\n\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport type { ServerResponse } from 'node:http';\nimport type { ApiServer, RouteHandler } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\n\nconst MIME_TYPES: Record<string, string> = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.eot': 'application/vnd.ms-fontobject',\n};\n\nexport interface DashboardHandlerOptions {\n  /** 静态资源目录路径 */\n  staticDir: string;\n}\n\n/**\n * 注册 Dashboard 路由\n */\nexport function registerDashboardRoutes(\n  server: ApiServer,\n  options: DashboardHandlerOptions,\n): void {\n  const { staticDir } = options;\n\n  // 检查目录是否存在\n  if (!fs.existsSync(staticDir)) {\n    console.warn(`[Dashboard] Static directory not found: ${staticDir}`);\n    console.warn('[Dashboard] Run \"cd ui && bun run build\" to build the dashboard UI');\n    return;\n  }\n\n  console.log(`[Dashboard] Serving from: ${staticDir}`);\n\n  // 处理 /dashboard 和 /dashboard/ 重定向\n  const redirectHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    res.statusCode = 302;\n    res.setHeader('Location', '/dashboard/');\n    res.end();\n  };\n\n  // 静态资源处理器\n  const staticHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n    params: Record<string, string>,\n  ) => {\n    let filePath = params.path || 'index.html';\n\n    // 安全检查：防止路径遍历\n    if (filePath.includes('..')) {\n      res.statusCode = 403;\n      res.end('Forbidden');\n      return;\n    }\n\n    let fullPath = path.join(staticDir, filePath);\n\n    // 优先兼容 dashboard.html，其次回退到 index.html。\n    // 这样能兼容当前产物（dashboard.html）和旧构建（index.html）。\n    if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {\n      const dashboardEntry = path.join(fullPath, 'dashboard.html');\n      const indexEntry = path.join(fullPath, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // SPA fallback\n    if (!fs.existsSync(fullPath)) {\n      const dashboardEntry = path.join(staticDir, 'dashboard.html');\n      const indexEntry = path.join(staticDir, 'index.html');\n      fullPath = fs.existsSync(dashboardEntry) ? dashboardEntry : indexEntry;\n    }\n\n    // 再次检查文件是否存在\n    if (!fs.existsSync(fullPath)) {\n      res.statusCode = 404;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Not Found' }));\n      return;\n    }\n\n    // 获取 MIME 类型\n    const ext = path.extname(fullPath).toLowerCase();\n    const mimeType = MIME_TYPES[ext] || 'application/octet-stream';\n\n    // 读取并返回文件\n    try {\n      const content = fs.readFileSync(fullPath);\n      res.statusCode = 200;\n      res.setHeader('Content-Type', mimeType);\n      res.setHeader('Cache-Control', ext === '.html' ? 'no-cache' : 'public, max-age=31536000');\n\n      // For HEAD requests, only return headers.\n      if ((req.method ?? 'GET').toUpperCase() == 'HEAD') {\n        res.end();\n        return;\n      }\n\n      res.end(content);\n    } catch (error) {\n      console.error(`[Dashboard] Error reading file: ${fullPath}`, error);\n      res.statusCode = 500;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ error: 'Internal Server Error' }));\n    }\n  };\n\n  // 注册路由 - 都是 public 的，不需要认证\n  // 使用通配符 *path 匹配所有子路径（包括 assets/xxx.js）\n  server.get('/dashboard', redirectHandler, { public: true });\n  server.get('/dashboard/', staticHandler, { public: true });\n  server.get('/dashboard/*path', staticHandler, { public: true });\n\n  // HEAD support for tooling (e.g. curl -I) and legacy health checks.\n  server.route('HEAD', '/dashboard', redirectHandler, { public: true });\n  server.route('HEAD', '/dashboard/', staticHandler, { public: true });\n  server.route('HEAD', '/dashboard/*path', staticHandler, { public: true });\n}\n"]}
+{"version":3,"file":"DashboardHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DashboardHandler.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAcH,0DA0BC;AArCD,yDAA6D;AAQ7D;;GAEG;AACH,SAAgB,uBAAuB,CACrC,MAAiB,EACjB,OAAgC;IAEhC,MAAM,WAAW,GAAG;QAClB,mBAAmB,EAAE,kBAAkB;QACvC,gBAAgB,EAAE,eAAe;QACjC,qBAAqB,EAAE,oBAAoB;QAC3C,qBAAqB,EAAE,oBAAoB;KACnC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC5D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAA,0CAAuB,EAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC;QAC5C,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Dashboard 静态资源处理器\n *\n * Serve /dashboard/ 路径下的运维 UI 静态资源\n */\n\nimport type { ApiServer } from '../ApiServer';\nimport { registerStaticSpaRoutes } from './StaticSpaHandler';\nimport type { RouteHandler } from '../ApiServer';\n\nexport interface DashboardHandlerOptions {\n  /** 静态资源目录路径 */\n  staticDir: string;\n}\n\n/**\n * 注册 Dashboard 路由\n */\nexport function registerDashboardRoutes(\n  server: ApiServer,\n  options: DashboardHandlerOptions,\n): void {\n  const movedRoutes = {\n    '/dashboard/models': '/settings/models',\n    '/dashboard/pod': '/settings/pod',\n    '/dashboard/services': '/settings/services',\n    '/dashboard/settings': '/settings/services',\n  } as const;\n  for (const [from, to] of Object.entries(movedRoutes)) {\n    const redirect: RouteHandler = async (req, res) => {\n      const source = new URL(req.url ?? from, 'http://localhost');\n      res.statusCode = 302;\n      res.setHeader('Location', `${to}${source.search}`);\n      res.end();\n    };\n    server.get(from, redirect, { public: true });\n    server.route('HEAD', from, redirect, { public: true });\n  }\n  registerStaticSpaRoutes(server, {\n    prefix: '/dashboard',\n    staticDir: options.staticDir,\n    entryFiles: ['dashboard.html', 'index.html'],\n    label: 'Dashboard',\n  });\n}\n"]}

package/dist/api/handlers/NetworkSettingsHandler.d.ts

@@ -0,0 +1,97 @@
+import { getLoggerFor } from 'global-logger-factory';
+import type { ApiServer } from '../ApiServer';
+import type { AuthContext } from '../auth/AuthContext';
+export interface NetworkSettingsStatus {
+    endpoint: string;
+    addresses: {
+        local: string[];
+        lan: string[];
+        public: string[];
+    };
+    tls: CapabilityStatus & {
+        expiresAt?: string;
+    };
+    dns: CapabilityStatus;
+    tunnel: CapabilityStatus;
+    actions: {
+        diagnose: true;
+        renewCertificate: boolean;
+    };
+}
+export interface CapabilityStatus {
+    supported: boolean;
+    status: string;
+}
+export type DiagnosticStatus = 'ok' | 'warning' | 'error' | 'unsupported';
+export interface NetworkDiagnosticCheckResult {
+    id: string;
+    label: string;
+    status: DiagnosticStatus;
+    detail?: string;
+}
+export interface NetworkDiagnosticCheck {
+    id: string;
+    label: string;
+    run(): Promise<Omit<NetworkDiagnosticCheckResult, 'id' | 'label'> | DiagnosticStatus>;
+}
+export interface NetworkCapabilityReader<T extends CapabilityStatus = CapabilityStatus> {
+    read(): Promise<T>;
+}
+export interface CertificateRenewer {
+    renew(): Promise<CertificateRenewalResult | void>;
+    isAvailable?(): boolean | Promise<boolean>;
+}
+export interface CertificateRenewalResult {
+    status: 'renewed' | 'unchanged';
+}
+export interface NetworkSettingsAuthorizer {
+    canRead(auth: AuthContext): boolean | Promise<boolean>;
+    canWrite(auth: AuthContext): boolean | Promise<boolean>;
+}
+export interface NetworkSettingsIdentityAuthorizerOptions {
+    deployment: 'cloud' | 'local';
+    accountRoleRepository?: {
+        findByWebId(webId: string): Promise<{
+            roles?: string[];
+        } | undefined>;
+    };
+}
+export interface CertificateCapability {
+    tlsStatusReader?: NetworkCapabilityReader<NetworkSettingsStatus['tls']>;
+    certificateRenewer?: CertificateRenewer;
+}
+export interface NetworkPublicAddressReaderOptions {
+    configuredUrls?: Array<string | undefined>;
+    ddnsManager?: unknown;
+    tunnelProvider?: unknown;
+}
+export interface NetworkSettingsHandlerOptions {
+    endpoint: string | (() => string | undefined);
+    localAddresses?: () => string[];
+    lanAddresses?: () => string[];
+    publicAddresses?: () => string[];
+    tlsStatusReader?: NetworkCapabilityReader<NetworkSettingsStatus['tls']>;
+    dnsStatusReader?: NetworkCapabilityReader;
+    tunnelStatusReader?: NetworkCapabilityReader;
+    certificateRenewer?: CertificateRenewer;
+    diagnostics?: NetworkDiagnosticCheck[];
+    authorizer?: NetworkSettingsAuthorizer;
+    logger?: Pick<ReturnType<typeof getLoggerFor>, 'warn' | 'error'>;
+}
+export declare function registerNetworkSettingsRoutes(server: ApiServer, options: NetworkSettingsHandlerOptions): void;
+export declare function createDeploymentNetworkSettingsAuthorizer(options?: NetworkSettingsIdentityAuthorizerOptions): NetworkSettingsAuthorizer;
+export declare function createAddressReaders(input: {
+    endpoint: string | (() => string | undefined);
+    port?: number;
+    publicUrls?: Array<string | undefined>;
+}): Pick<NetworkSettingsHandlerOptions, 'localAddresses' | 'lanAddresses' | 'publicAddresses'>;
+export declare function createDdnsStatusReader(ddnsManager: unknown): NetworkCapabilityReader | undefined;
+export declare function createDnsStatusReader(input: {
+    ddnsManager?: unknown;
+    dnsProvider?: unknown;
+    dnsCoordinator?: unknown;
+}): NetworkCapabilityReader | undefined;
+export declare function createTunnelStatusReader(tunnelProvider: unknown): NetworkCapabilityReader | undefined;
+export declare function createPublicAddressReader(options: NetworkPublicAddressReaderOptions): () => string[];
+export declare function createCertificateCapability(...candidates: unknown[]): CertificateCapability | undefined;
+export declare function redactSecretText(value: unknown): string;