@undefineds.co/xpod 0.3.58 → 0.3.62

package/dist/edge/EdgeNodeAgentInitializer.jsonld

@@ -235,6 +235,168 @@
               }
             ]
           }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_certificateBridgeId",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeMode",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              {
+                "@type": "ParameterRangeLiteral",
+                "parameterRangeValueLiteral": "local"
+              },
+              {
+                "@type": "ParameterRangeLiteral",
+                "parameterRangeValueLiteral": "cluster"
+              },
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeEmail",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeDomains",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeArray",
+                "parameterRangeValue": "xsd:string"
+              },
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeDirectoryUrl",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeAccountKeyPath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeCertificateKeyPath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeCertificatePath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeFullChainPath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeRenewBeforeDays",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:number",
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmePropagationDelayMs",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:number",
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmePostDeployCommand",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeArray",
+                "parameterRangeValue": "xsd:string"
+              },
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
         }
       ],
       "memberFields": [
@@ -257,6 +419,10 @@
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_enabled",
           "memberFieldName": "enabled"
         },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_certificateBridge",
+          "memberFieldName": "certificateBridge"
+        },
         {
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_constructor",
           "memberFieldName": "constructor"
@@ -265,6 +431,10 @@
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_handle",
           "memberFieldName": "handle"
         },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_stop",
+          "memberFieldName": "stop"
+        },
         {
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_validateOptions",
           "memberFieldName": "validateOptions"
@@ -273,6 +443,14 @@
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_buildAgentOptions",
           "memberFieldName": "buildAgentOptions"
         },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_buildAcmeOptions",
+          "memberFieldName": "buildAcmeOptions"
+        },
+        {
+          "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_normalizeStringList",
+          "memberFieldName": "normalizeStringList"
+        },
         {
           "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer__member_normalizeBoolean",
           "memberFieldName": "normalizeBoolean"
@@ -400,6 +578,78 @@
               "value": {
                 "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_p2pWinnerSelectionWindowMs"
               }
+            },
+            {
+              "keyRaw": "certificateBridgeId",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_certificateBridgeId"
+              }
+            },
+            {
+              "keyRaw": "acmeMode",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeMode"
+              }
+            },
+            {
+              "keyRaw": "acmeEmail",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeEmail"
+              }
+            },
+            {
+              "keyRaw": "acmeDomains",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeDomains"
+              }
+            },
+            {
+              "keyRaw": "acmeDirectoryUrl",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeDirectoryUrl"
+              }
+            },
+            {
+              "keyRaw": "acmeAccountKeyPath",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeAccountKeyPath"
+              }
+            },
+            {
+              "keyRaw": "acmeCertificateKeyPath",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeCertificateKeyPath"
+              }
+            },
+            {
+              "keyRaw": "acmeCertificatePath",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeCertificatePath"
+              }
+            },
+            {
+              "keyRaw": "acmeFullChainPath",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeFullChainPath"
+              }
+            },
+            {
+              "keyRaw": "acmeRenewBeforeDays",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmeRenewBeforeDays"
+              }
+            },
+            {
+              "keyRaw": "acmePropagationDelayMs",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmePropagationDelayMs"
+              }
+            },
+            {
+              "keyRaw": "acmePostDeployCommand",
+              "value": {
+                "@id": "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld#EdgeNodeAgentInitializer_options_acmePostDeployCommand"
+              }
             }
           ]
         }

package/dist/edge/EdgeNodeCertificateCapabilityBridge.d.ts

@@ -0,0 +1,34 @@
+export interface EdgeNodeCertificateRuntime {
+    readCertificateStatus(): Promise<unknown>;
+    renewCertificate(): Promise<unknown>;
+    isAvailable?(): boolean | Promise<boolean>;
+}
+export interface EdgeNodeCertificateBridgeStatus {
+    supported: boolean;
+    status: string;
+    expiresAt?: string;
+}
+type CertificateRuntimeSupplier = () => EdgeNodeCertificateRuntime | undefined;
+type BridgeDisposer = () => void;
+export declare class EdgeNodeCertificateCapabilityBridge {
+    private readonly id;
+    private supplier?;
+    private sourceLease?;
+    private consumerCount;
+    constructor(id: string);
+    retain(): BridgeDisposer;
+    setSource(supplier: CertificateRuntimeSupplier): BridgeDisposer;
+    clearSource(): void;
+    isAvailable(): Promise<boolean>;
+    readCertificateStatus(): Promise<EdgeNodeCertificateBridgeStatus | unknown>;
+    renewCertificate(): Promise<unknown>;
+    private deleteIfIdle;
+}
+export declare function getEdgeNodeCertificateCapabilityBridge(id: string): EdgeNodeCertificateCapabilityBridge;
+export declare function findEdgeNodeCertificateCapabilityBridge(id: string): EdgeNodeCertificateCapabilityBridge | undefined;
+export declare function hasEdgeNodeCertificateCapabilityBridge(id: string): boolean;
+export declare function resolveEdgeNodeCertificateCapabilityBridgeId(input: {
+    nodeId?: string;
+    baseUrl?: string;
+}): string | undefined;
+export {};

package/dist/edge/EdgeNodeCertificateCapabilityBridge.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EdgeNodeCertificateCapabilityBridge = void 0;
+exports.getEdgeNodeCertificateCapabilityBridge = getEdgeNodeCertificateCapabilityBridge;
+exports.findEdgeNodeCertificateCapabilityBridge = findEdgeNodeCertificateCapabilityBridge;
+exports.hasEdgeNodeCertificateCapabilityBridge = hasEdgeNodeCertificateCapabilityBridge;
+exports.resolveEdgeNodeCertificateCapabilityBridgeId = resolveEdgeNodeCertificateCapabilityBridgeId;
+class EdgeNodeCertificateCapabilityBridge {
+    constructor(id) {
+        this.consumerCount = 0;
+        this.id = id;
+    }
+    retain() {
+        this.consumerCount += 1;
+        let released = false;
+        return () => {
+            if (released) {
+                return;
+            }
+            released = true;
+            this.consumerCount = Math.max(0, this.consumerCount - 1);
+            this.deleteIfIdle();
+        };
+    }
+    setSource(supplier) {
+        const lease = Symbol(this.id);
+        this.supplier = supplier;
+        this.sourceLease = lease;
+        return () => {
+            if (this.sourceLease !== lease) {
+                return;
+            }
+            this.clearSource();
+        };
+    }
+    clearSource() {
+        this.supplier = undefined;
+        this.sourceLease = undefined;
+        this.deleteIfIdle();
+    }
+    async isAvailable() {
+        const runtime = this.supplier?.();
+        if (!runtime) {
+            return false;
+        }
+        if (typeof runtime.isAvailable === 'function') {
+            return Boolean(await runtime.isAvailable());
+        }
+        return true;
+    }
+    async readCertificateStatus() {
+        const runtime = this.supplier?.();
+        if (!runtime) {
+            return { supported: false, status: 'unsupported' };
+        }
+        const status = await runtime.readCertificateStatus();
+        if (!status || typeof status !== 'object' || Array.isArray(status) || 'supported' in status) {
+            return status;
+        }
+        return {
+            supported: true,
+            ...status,
+        };
+    }
+    async renewCertificate() {
+        const runtime = this.supplier?.();
+        if (!runtime) {
+            throw Object.assign(new Error('Certificate runtime is not available.'), {
+                statusCode: 503,
+                code: 'certificate_renewal_unavailable',
+            });
+        }
+        return await runtime.renewCertificate();
+    }
+    deleteIfIdle() {
+        if (!this.supplier && this.consumerCount === 0) {
+            bridges.delete(this.id);
+        }
+    }
+}
+exports.EdgeNodeCertificateCapabilityBridge = EdgeNodeCertificateCapabilityBridge;
+const bridges = new Map();
+function getEdgeNodeCertificateCapabilityBridge(id) {
+    let bridge = bridges.get(id);
+    if (!bridge) {
+        bridge = new EdgeNodeCertificateCapabilityBridge(id);
+        bridges.set(id, bridge);
+    }
+    return bridge;
+}
+function findEdgeNodeCertificateCapabilityBridge(id) {
+    return bridges.get(id);
+}
+function hasEdgeNodeCertificateCapabilityBridge(id) {
+    return bridges.has(id);
+}
+function resolveEdgeNodeCertificateCapabilityBridgeId(input) {
+    if (input.nodeId?.trim()) {
+        return `node:${input.nodeId.trim()}`;
+    }
+    if (input.baseUrl?.trim()) {
+        try {
+            return `base:${new URL(input.baseUrl).origin}`;
+        }
+        catch {
+            return `base:${input.baseUrl.trim()}`;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=EdgeNodeCertificateCapabilityBridge.js.map

package/dist/edge/EdgeNodeCertificateCapabilityBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeCertificateCapabilityBridge.js","sourceRoot":"","sources":["../../src/edge/EdgeNodeCertificateCapabilityBridge.ts"],"names":[],"mappings":";;;AAsGA,wFAOC;AAED,0FAEC;AAED,wFAEC;AAED,oGAeC;AAvHD,MAAa,mCAAmC;IAM9C,YAAmB,EAAU;QAFrB,kBAAa,GAAG,CAAC,CAAC;QAGxB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,MAAM;QACX,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC;IACJ,CAAC;IAEM,SAAS,CAAC,QAAoC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC;IACJ,CAAC;IAEM,WAAW;QAChB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC9C,OAAO,OAAO,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,qBAAqB;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;YAC5F,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,GAAG,MAAiC;SACrC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAAE;gBACtE,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,iCAAiC;aACxC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF;AAnFD,kFAmFC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;AAEvE,SAAgB,sCAAsC,CAAC,EAAU;IAC/D,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAI,mCAAmC,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,uCAAuC,CAAC,EAAU;IAChE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,sCAAsC,CAAC,EAAU;IAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,4CAA4C,CAAC,KAG5D;IACC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACzB,OAAO,QAAQ,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["export interface EdgeNodeCertificateRuntime {\n  readCertificateStatus(): Promise<unknown>;\n  renewCertificate(): Promise<unknown>;\n  isAvailable?(): boolean | Promise<boolean>;\n}\n\nexport interface EdgeNodeCertificateBridgeStatus {\n  supported: boolean;\n  status: string;\n  expiresAt?: string;\n}\n\ntype CertificateRuntimeSupplier = () => EdgeNodeCertificateRuntime | undefined;\ntype BridgeDisposer = () => void;\n\nexport class EdgeNodeCertificateCapabilityBridge {\n  private readonly id: string;\n  private supplier?: CertificateRuntimeSupplier;\n  private sourceLease?: symbol;\n  private consumerCount = 0;\n\n  public constructor(id: string) {\n    this.id = id;\n  }\n\n  public retain(): BridgeDisposer {\n    this.consumerCount += 1;\n    let released = false;\n    return () => {\n      if (released) {\n        return;\n      }\n      released = true;\n      this.consumerCount = Math.max(0, this.consumerCount - 1);\n      this.deleteIfIdle();\n    };\n  }\n\n  public setSource(supplier: CertificateRuntimeSupplier): BridgeDisposer {\n    const lease = Symbol(this.id);\n    this.supplier = supplier;\n    this.sourceLease = lease;\n    return () => {\n      if (this.sourceLease !== lease) {\n        return;\n      }\n      this.clearSource();\n    };\n  }\n\n  public clearSource(): void {\n    this.supplier = undefined;\n    this.sourceLease = undefined;\n    this.deleteIfIdle();\n  }\n\n  public async isAvailable(): Promise<boolean> {\n    const runtime = this.supplier?.();\n    if (!runtime) {\n      return false;\n    }\n    if (typeof runtime.isAvailable === 'function') {\n      return Boolean(await runtime.isAvailable());\n    }\n    return true;\n  }\n\n  public async readCertificateStatus(): Promise<EdgeNodeCertificateBridgeStatus | unknown> {\n    const runtime = this.supplier?.();\n    if (!runtime) {\n      return { supported: false, status: 'unsupported' };\n    }\n    const status = await runtime.readCertificateStatus();\n    if (!status || typeof status !== 'object' || Array.isArray(status) || 'supported' in status) {\n      return status;\n    }\n    return {\n      supported: true,\n      ...status as Record<string, unknown>,\n    };\n  }\n\n  public async renewCertificate(): Promise<unknown> {\n    const runtime = this.supplier?.();\n    if (!runtime) {\n      throw Object.assign(new Error('Certificate runtime is not available.'), {\n        statusCode: 503,\n        code: 'certificate_renewal_unavailable',\n      });\n    }\n    return await runtime.renewCertificate();\n  }\n\n  private deleteIfIdle(): void {\n    if (!this.supplier && this.consumerCount === 0) {\n      bridges.delete(this.id);\n    }\n  }\n}\n\nconst bridges = new Map<string, EdgeNodeCertificateCapabilityBridge>();\n\nexport function getEdgeNodeCertificateCapabilityBridge(id: string): EdgeNodeCertificateCapabilityBridge {\n  let bridge = bridges.get(id);\n  if (!bridge) {\n    bridge = new EdgeNodeCertificateCapabilityBridge(id);\n    bridges.set(id, bridge);\n  }\n  return bridge;\n}\n\nexport function findEdgeNodeCertificateCapabilityBridge(id: string): EdgeNodeCertificateCapabilityBridge | undefined {\n  return bridges.get(id);\n}\n\nexport function hasEdgeNodeCertificateCapabilityBridge(id: string): boolean {\n  return bridges.has(id);\n}\n\nexport function resolveEdgeNodeCertificateCapabilityBridgeId(input: {\n  nodeId?: string;\n  baseUrl?: string;\n}): string | undefined {\n  if (input.nodeId?.trim()) {\n    return `node:${input.nodeId.trim()}`;\n  }\n  if (input.baseUrl?.trim()) {\n    try {\n      return `base:${new URL(input.baseUrl).origin}`;\n    } catch {\n      return `base:${input.baseUrl.trim()}`;\n    }\n  }\n  return undefined;\n}\n"]}

package/dist/edge/acme/AcmeCertificateManager.d.ts

@@ -38,6 +38,14 @@ export interface AcmeCertificateManagerOptions {
     renewBeforeDays?: number;
     propagationDelayMs?: number;
 }
+export interface RuntimeCertificateStatus {
+    status: 'valid' | 'renewal_due' | 'missing' | 'invalid';
+    expiresAt?: string;
+    domains?: string[];
+}
+export interface RuntimeCertificateRenewalResult {
+    status: 'renewed';
+}
 export declare class AcmeCertificateManager {
     private readonly logger;
     private readonly dnsHandler;
@@ -51,9 +59,14 @@ export declare class AcmeCertificateManager {
     private readonly fullChainPath?;
     private readonly renewBeforeDays;
     private readonly propagationDelayMs;
+    private issuing;
     constructor(options: AcmeCertificateManagerOptions);
     ensureCertificate(): Promise<boolean>;
-    private isCertificateValid;
+    readCertificateStatus(): Promise<RuntimeCertificateStatus>;
+    isAvailable(): boolean;
+    renewCertificate(): Promise<RuntimeCertificateRenewalResult>;
+    private extractDomainsFromCertificate;
+    private issueCertificateWithLock;
     private issueCertificate;
     private issueCertificateFromCA;
     private ensureAccount;

package/dist/edge/acme/AcmeCertificateManager.js

@@ -59,6 +59,7 @@ const DEFAULT_FALLBACK_URLS = [
 class AcmeCertificateManager {
     constructor(options) {
         this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.issuing = false;
         // 确定 DNS 验证处理器
         if (options.dnsChallengeHandler) {
             // 用户提供自定义处理器
@@ -91,28 +92,84 @@ class AcmeCertificateManager {
         this.propagationDelayMs = options.propagationDelayMs ?? 15_000;
     }
     async ensureCertificate() {
-        if (await this.isCertificateValid()) {
+        if (!this.isAvailable()) {
+            this.logger.debug('ACME 证书运行时未配置有效域名，跳过申请。');
+            return false;
+        }
+        const status = await this.readCertificateStatus();
+        if (status.status === 'valid') {
             this.logger.debug('现有证书仍在有效期内，跳过 ACME 申请。');
             return false;
         }
-        await this.issueCertificate();
+        await this.issueCertificateWithLock();
         return true;
     }
-    async isCertificateValid() {
+    async readCertificateStatus() {
         try {
             const certPem = await node_fs_1.promises.readFile(this.certificatePath, 'utf8');
             const cert = new node_crypto_1.X509Certificate(certPem);
             const expiresAt = cert.validTo ? new Date(cert.validTo).getTime() : NaN;
             if (!Number.isFinite(expiresAt)) {
-                return false;
+                return { status: 'invalid' };
             }
             const remainingMs = expiresAt - Date.now();
             const thresholdMs = this.renewBeforeDays * 24 * 60 * 60 * 1000;
-            const containsAllDomains = this.domains.every((domain) => cert.subjectAltName?.includes(domain));
-            return remainingMs > thresholdMs && containsAllDomains;
+            const domains = this.extractDomainsFromCertificate(cert);
+            const containsAllDomains = this.domains.every((domain) => domains.includes(domain.toLowerCase()));
+            return {
+                status: remainingMs > thresholdMs && containsAllDomains ? 'valid' : 'renewal_due',
+                expiresAt: new Date(expiresAt).toISOString(),
+                domains,
+            };
         }
         catch {
-            return false;
+            return { status: 'missing' };
+        }
+    }
+    isAvailable() {
+        return this.domains.some((domain) => domain.trim().length > 0)
+            && this.email.trim().length > 0
+            && this.accountKeyPath.trim().length > 0
+            && this.certificateKeyPath.trim().length > 0
+            && this.certificatePath.trim().length > 0;
+    }
+    async renewCertificate() {
+        if (!this.isAvailable()) {
+            throw createCertificateRenewalError(503, 'certificate_renewal_unavailable', 'Certificate renewal is unavailable before ACME domains are configured');
+        }
+        await this.issueCertificateWithLock();
+        return { status: 'renewed' };
+    }
+    extractDomainsFromCertificate(cert) {
+        const result = new Set();
+        const subject = cert.subject;
+        if (subject) {
+            const match = /CN=([^,]+)/u.exec(subject);
+            if (match?.[1]) {
+                result.add(match[1].trim().toLowerCase());
+            }
+        }
+        const altNames = cert.subjectAltName?.split(',');
+        if (altNames) {
+            for (const entry of altNames) {
+                const trimmed = entry.trim();
+                if (trimmed.toLowerCase().startsWith('dns:')) {
+                    result.add(trimmed.slice(4).trim().toLowerCase());
+                }
+            }
+        }
+        return Array.from(result);
+    }
+    async issueCertificateWithLock() {
+        if (this.issuing) {
+            throw createCertificateRenewalError(409, 'certificate_renewal_conflict', 'Certificate renewal is already running');
+        }
+        this.issuing = true;
+        try {
+            await this.issueCertificate();
+        }
+        finally {
+            this.issuing = false;
         }
     }
     async issueCertificate() {
@@ -230,4 +287,7 @@ class AcmeCertificateManager {
     }
 }
 exports.AcmeCertificateManager = AcmeCertificateManager;
+function createCertificateRenewalError(statusCode, code, message) {
+    return Object.assign(new Error(message), { statusCode, code });
+}
 //# sourceMappingURL=AcmeCertificateManager.js.map