@undefineds.co/xpod 0.4.20 → 0.4.27

package/dist/api/chatkit/store.d.ts

@@ -1,3 +1,4 @@
+import type { RunApprovalStore } from '../runs/RunApproval';
 /**
  * ChatKit Store Interface
  *
@@ -21,7 +22,7 @@ export interface ClientToolContinuationClaim {
 /**
  * Abstract Store interface
  */
-export interface ChatKitStore<TContext = StoreContext> extends Partial<RunStore<TContext>> {
+export interface ChatKitStore<TContext = StoreContext> extends Partial<RunStore<TContext>>, RunApprovalStore<TContext> {
     generateThreadId(context: TContext): string;
     generateItemId(itemType: StoreItemType, thread: ThreadMetadata, context: TContext): string;
     loadThread(thread: ThreadRef, context: TContext): Promise<ThreadMetadata>;

package/dist/api/chatkit/store.js

@@ -1,15 +1,10 @@
 "use strict";
-/**
- * ChatKit Store Interface
- *
- * Abstract interface for persisting threads and items.
- * Based on https://github.com/openai/chatkit-python/blob/main/chatkit/store.py
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InMemoryStore = void 0;
 const types_1 = require("./types");
 const store_1 = require("../runs/store");
 const schema_1 = require("../runs/schema");
+const RunStateMerge_1 = require("../runs/RunStateMerge");
 const store_2 = require("../tasks/store");
 const TaskAuthBinding_1 = require("../tasks/TaskAuthBinding");
 /**
@@ -196,6 +191,7 @@ class InMemoryStore {
         const waitingTool = run?.metadata?.waitingTool;
         if (!run
             || run.status !== schema_1.RunStatus.WAITING_INPUT
+            || run.cancelRequestedAt !== undefined
             || (run.leaseOwner && run.leaseExpiresAt && run.leaseExpiresAt > input.now)
             || typeof waitingTool !== 'object'
             || waitingTool.itemId !== item.id) {
@@ -219,7 +215,7 @@ class InMemoryStore {
     async releaseClientToolContinuation(claim, now, context) {
         const key = this.getRunKey(claim.run.id, context);
         const run = this.runs.get(key);
-        if (!run || run.leaseOwner !== claim.claimId) {
+        if (!run || run.cancelRequestedAt !== undefined || run.status === schema_1.RunStatus.CANCELLED || run.leaseOwner !== claim.claimId) {
             return false;
         }
         this.runs.set(key, {
@@ -253,7 +249,10 @@ class InMemoryStore {
     }
     async saveRun(run, context) {
         run.id = (0, store_1.buildRunResourceId)(run.id);
-        this.runs.set(this.getRunKey(run.id, context), { ...run });
+        const key = this.getRunKey(run.id, context);
+        const merged = (0, RunStateMerge_1.mergeRunCancellation)(run, this.runs.get(key));
+        this.runs.set(key, merged);
+        Object.assign(run, merged);
     }
     async loadRun(runId, context) {
         const run = this.runs.get(this.getRunKey(runId, context));

package/dist/api/container/common.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommonServices = registerCommonServices;
+const socket_origin_registry_1 = require("../../runtime/socket-origin-registry");
 const MatrixEventJournal_1 = require("../matrix/MatrixEventJournal");
 /**
  * 共享服务注册
@@ -77,21 +78,42 @@ const EdgeNodeCertificateCapabilityBridge_1 = require("../../edge/EdgeNodeCertif
 function resolveCssServiceBaseUrl() {
     return `http://127.0.0.1:${process.env.CSS_PORT ?? '3000'}/`;
 }
-function resolveHostedPodCssBaseUrl() {
-    return `http://127.0.0.1:${process.env.XPOD_MAIN_PORT ?? '3000'}/`;
+function resolveHostedPodCssBaseUrl(config) {
+    const gatewayPort = process.env.XPOD_MAIN_PORT?.trim();
+    if (gatewayPort) {
+        return `http://127.0.0.1:${gatewayPort}/`;
+    }
+    // Socket transport binds no gateway port. Its canonical origin is the one the runtime maps
+    // onto the owned gateway socket, so internal WebID/JWKS reads resolve through that origin
+    // instead of a foreign loopback port.
+    return config.solidBaseUrl;
 }
-function resolveAiConnectionsBaseUrl(config) {
-    const origin = config.publicUrl
+function resolveAiConnectionsCanonicalOrigin(config) {
+    return config.publicUrl
         ?? process.env.XPOD_PUBLIC_URL
         ?? process.env.CSS_BASE_URL
         ?? `http://${config.host === '0.0.0.0' ? '127.0.0.1' : config.host}:${config.port}`;
+}
+function aiConnectionsV1Url(origin) {
     return new URL('/v1', origin.endsWith('/') ? origin : `${origin}/`).toString().replace(/\/$/u, '');
 }
+/** The canonical identity realm: token audience/issuer and the two authenticators use this. */
+function resolveAiConnectionsBaseUrl(config) {
+    return aiConnectionsV1Url(resolveAiConnectionsCanonicalOrigin(config));
+}
 function credentialVaultForConfig(config) {
     return new PlaintextCredentialVault_1.PlaintextCredentialVault({
         legacyVault: config.secretCellCredentialVaultFactory?.(),
     });
 }
+function resolveAiConnectionsRuntimeBaseUrl(config) {
+    // Runtime inference must reach the Gateway even when the canonical public route is absent.
+    // Socket mode keeps the canonical origin registered on the owned Gateway socket.
+    const internalBaseUrl = resolveHostedPodCssBaseUrl(config);
+    return internalBaseUrl
+        ? new URL('/v1', internalBaseUrl).toString().replace(/\/$/u, '')
+        : resolveAiConnectionsBaseUrl(config);
+}
 function resolveAiConnectionsAudience(config) {
     return new URL(resolveAiConnectionsBaseUrl(config)).origin;
 }
@@ -104,10 +126,27 @@ function resolveGatewayLocatorSecret(config) {
         edition: config.edition,
     });
 }
-function podBaseUrlResolver(cradle) {
+function podBaseUrlResolver(cradle, selection = 'first') {
     return async (webId) => {
-        const pod = await cradle.podLookupRepo?.findByWebId(webId);
-        return pod?.storageUrl ?? pod?.baseUrl;
+        const pods = selection === 'unique'
+            ? await cradle.podLookupRepo?.findAllByWebId(webId) ?? []
+            : [await cradle.podLookupRepo?.findByWebId(webId)];
+        const roots = pods.flatMap(pod => {
+            const root = pod?.storageUrl ?? pod?.baseUrl;
+            return root ? [root] : [];
+        });
+        if (selection === 'first')
+            return roots[0];
+        const normalized = new Set(roots.map(root => {
+            const url = new URL(root);
+            if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+                throw new Error('Invalid Pod storage binding');
+            }
+            return url.href.replace(/\/+$/u, '');
+        }));
+        if (normalized.size > 1)
+            throw new Error('Authoritative Pod storage binding ambiguous');
+        return normalized.values().next().value;
     };
 }
 /**
@@ -229,6 +268,13 @@ function registerCommonServices(container) {
                 deployment: config.edition,
                 baseUrl: resolveAiConnectionsBaseUrl(config),
                 audience: resolveAiConnectionsAudience(config),
+                issuer: resolveAiConnectionsAudience(config),
+                // The task runtime reaches the Gateway through this key, so it must name the owner's
+                // active model; otherwise the runner asks the Gateway for a placeholder it cannot route.
+                resolveModel: async ({ auth }) => {
+                    const models = await cradle.aiGatewayService?.listModels(auth);
+                    return models?.find((model) => typeof model.id === 'string' && model.id.trim().length > 0)?.id;
+                },
             });
         }).singleton(),
         providerConnectService: (0, awilix_1.asFunction)((cradle) => {
@@ -248,6 +294,21 @@ function registerCommonServices(container) {
             });
             const adapterOptions = {
                 attempts, credentialRepository, vault, deployment: config.edition, signingSecret,
+                // Connect owns its official endpoints, form bodies and timeout signal;
+                // the shared transport owns proxy routing, target validation and cleanup.
+                fetch: (input, init) => {
+                    if (typeof input !== 'string' && !(input instanceof URL)) {
+                        throw new TypeError('Connect transport requires an endpoint URL');
+                    }
+                    return cradle.providerHttpTransport.request({
+                        url: input.toString(),
+                        method: init?.method,
+                        headers: init?.headers,
+                        body: init?.body,
+                        signal: init?.signal ?? undefined,
+                        redirect: 'error',
+                    });
+                },
             };
             const callbackReceiver = new LoopbackAuthorizationCallbackReceiver_1.LoopbackAuthorizationCallbackReceiver();
             const adapters = [
@@ -256,9 +317,12 @@ function registerCommonServices(container) {
                     .map((provider) => new connect_1.BrowserAssistedApiKeyConnectAdapter({
                     ...adapterOptions,
                     provider: provider.id,
-                    consoleUrl: registry.requireProduct(provider.id).offerings
-                        .find((offering) => offering.kind === 'api-platform')?.consoleUrl
-                        ?? registry.requireProduct(provider.id).offerings[0].consoleUrl,
+                    consoleUrl: (input) => {
+                        const offerings = registry.requireProduct(provider.id).offerings;
+                        const offeringId = input.offeringId
+                            ?? (offerings.find((offering) => offering.kind === 'api-platform') ?? offerings[0]).id;
+                        return registry.requireOffering(provider.id, offeringId).consoleUrl;
+                    },
                 })),
                 ...(config.edition === 'local' ? (0, ProviderAuthorizationProfiles_1.createBrowserOAuthIntegrations)().map((integration) => new connect_1.AuthorizationCodeConnectAdapter({
                     ...adapterOptions, integration, callbackReceiver,
@@ -511,7 +575,7 @@ function registerCommonServices(container) {
                 publicBaseUrl: config.solidBaseUrl,
                 // Token discovery is a public OIDC concern. WebID/JWKS verification is
                 // an internal service call and must not hairpin through public ingress.
-                internalBaseUrl: resolveHostedPodCssBaseUrl(),
+                internalBaseUrl: resolveHostedPodCssBaseUrl(config),
             });
             const clientCredAuthenticator = new ClientCredentialsAuthenticator_1.ClientCredentialsAuthenticator({
                 sessions: solidSessions,
@@ -562,9 +626,11 @@ function registerCommonServices(container) {
             });
         }).singleton(),
         // ChatKit 存储与服务
-        chatKitStore: (0, awilix_1.asFunction)(({ config, ownerPodAccess, serverGroupReconcilerService }) => {
+        chatKitStore: (0, awilix_1.asFunction)((cradle) => {
+            const { config, ownerPodAccess, serverGroupReconcilerService } = cradle;
             return new chatkit_1.PodChatKitStore({
                 podAccess: ownerPodAccess,
+                podBaseUrlResolver: podBaseUrlResolver(cradle, 'unique'),
                 serverGroupReconcilerService,
                 deployment: config.edition,
                 credentialSecretDecoder: (0, AiCredentialSecretDecoder_1.createAiCredentialSecretDecoder)({
@@ -577,7 +643,7 @@ function registerCommonServices(container) {
                 redisUrl: config.redisUrl,
             });
         }).singleton(),
-        matrixStore: (0, awilix_1.asFunction)(({ config, db, ownerPodAccess, serverGroupReconcilerService }) => {
+        matrixStore: (0, awilix_1.asFunction)(({ db, ownerPodAccess, serverGroupReconcilerService }) => {
             return new matrix_1.PodMatrixStore({
                 serverGroupReconcilerService,
                 podAccess: ownerPodAccess,
@@ -612,8 +678,10 @@ function registerCommonServices(container) {
         rdfEngine: (0, awilix_1.asFunction)(({ config }) => {
             return (0, rdf_1.createApiRdfEngine)(config);
         }).singleton(),
-        runContextRetriever: (0, awilix_1.asFunction)(({ rdfEngine, chatKitStore, embeddingService }) => {
-            return (0, rdf_1.createApiRunContextRetriever)(rdfEngine, { chatKitStore, embeddingService });
+        runContextRetriever: (0, awilix_1.asFunction)((cradle) => {
+            const { rdfEngine, chatKitStore, embeddingService, ownerPodAccess } = cradle;
+            return (0, rdf_1.createApiRunContextRetriever)(rdfEngine, { chatKitStore, embeddingService,
+                podAccess: ownerPodAccess, podBaseUrlResolver: podBaseUrlResolver(cradle) });
         }).singleton(),
         rdfSearchIndexingService: (0, awilix_1.asFunction)(({ rdfEngine, chatKitStore, embeddingService }) => {
             return (0, rdf_1.createApiRdfSearchIndexingService)(rdfEngine, { chatKitStore, embeddingService });
@@ -641,12 +709,18 @@ function registerCommonServices(container) {
                 rdfEngine,
             });
         }).singleton(),
-        runExecutionBackend: (0, awilix_1.asFunction)(({ config, inngestRuntimeConfig, chatKitStore, taskAuthBindingService, runAuthContextRegistry, runContextRetriever, rdfSearchIndexingService, rdfSearchReconciliationRepository, aiConnectionInvocationKeyIssuer }) => {
+        runExecutionBackend: (0, awilix_1.asFunction)(({ config, inngestRuntimeConfig, chatKitStore, taskAuthBindingService, runAuthContextRegistry, runContextRetriever, rdfSearchIndexingService, rdfSearchReconciliationRepository, aiConnectionInvocationKeyIssuer, ownerPodAccess }) => {
             return new InngestRunExecutionBackend_1.InngestRunExecutionBackend({
                 baseUrl: inngestRuntimeConfig?.baseUrl,
                 eventKey: inngestRuntimeConfig?.eventKey,
                 signingKey: inngestRuntimeConfig?.signingKey,
-                isDev: inngestRuntimeConfig?.enabled ? !inngestRuntimeConfig.durableDelivery : true,
+                // Signature protocol follows the executor that actually started
+                // (`EmbeddedInngestRuntimeConfig.mode`): the spawned `inngest dev`
+                // executor never signs its callbacks, a managed Inngest server does.
+                // This is independent of whether delivery is durable; deriving it from
+                // durableDelivery made a durable spawned executor reject every callback
+                // with 401 and stall Task Runs in queued.
+                isDev: inngestRuntimeConfig?.enabled ? inngestRuntimeConfig.mode === 'spawn' : true,
                 durableDelivery: inngestRuntimeConfig?.durableDelivery ?? false,
                 store: chatKitStore,
                 contextRetriever: runContextRetriever,
@@ -660,6 +734,15 @@ function registerCommonServices(container) {
                     return fallback;
                 },
                 runtimeDriver: new PiAgentRuntimeDriver_1.PiAgentRuntimeDriver({
+                    podWorkspaceMapping: config.solidBaseUrl && config.solidRootFilePath
+                        ? { baseUrl: config.solidBaseUrl, rootFilePath: config.solidRootFilePath }
+                        : undefined,
+                    podAccess: ownerPodAccess,
+                    gatewayTransport: {
+                        canonicalBaseUrl: resolveAiConnectionsBaseUrl(config),
+                        baseUrl: resolveAiConnectionsRuntimeBaseUrl(config),
+                        socketPath: (0, socket_origin_registry_1.getSocketPathForOrigin)(resolveAiConnectionsRuntimeBaseUrl(config)),
+                    },
                     agentLoopIsolation: config.edition === 'cloud' ? 'sandboxed-process' : 'in-process',
                     requireSandbox: config.edition === 'cloud',
                     rdfSearchIndexingService,

package/dist/api/container/index.js

@@ -46,6 +46,7 @@ const LocalProvisionState_1 = require("../../provision/LocalProvisionState");
 const TunnelProfiles_1 = require("../../tunnel/TunnelProfiles");
 const secret_cell_1 = require("../../security/secret-cell");
 const SecretCellCredentialVault_1 = require("../ai-gateway/credentials/SecretCellCredentialVault");
+const secret_cell_root_key_1 = require("../../runtime/secret-cell-root-key");
 const OFFICIAL_CLOUD_IDENTITY_ORIGIN = 'https://id.undefineds.co';
 const OFFICIAL_CLOUD_API_ORIGIN = 'https://api.undefineds.co';
 function resolveCssTokenEndpoint() {
@@ -81,6 +82,17 @@ function resolveEdition(value) {
  * 创建 API 容器
  */
 function createApiContainer(config) {
+    // The runtime finalizes databaseUrl after reading ENV. Install the local source
+    // here, and touch its file only when an encrypted-secret consumer needs it.
+    if (!config.secretCellVaultFactory && config.edition === 'local' && (0, secret_cell_root_key_1.secretPathForSecretCellDatabase)(config.databaseUrl)) {
+        const { databaseUrl, edition } = config;
+        const factories = secretCellVaultFactories(() => (0, secret_cell_root_key_1.resolvePersistentSecretCellRootKey)({ databaseUrl, edition }));
+        config = {
+            ...config,
+            ...factories,
+            secretCellCredentialVaultFactory: config.secretCellCredentialVaultFactory ?? factories.secretCellCredentialVaultFactory,
+        };
+    }
     const container = (0, awilix_1.createContainer)({
         injectionMode: awilix_1.InjectionMode.PROXY,
         strict: true,
@@ -154,7 +166,6 @@ function loadConfigFromEnv() {
             credentialConfigured: true,
         }
         : undefined;
-    const secretCellCredentialVaultFactory = loadSecretCellCredentialVaultFactory(process.env);
     const deploymentRootKeys = loadDeploymentRootKeyProvider(process.env);
     const openAiGatewayBaseUrl = normalizeOptionalBaseUrl(process.env.XPOD_AI_GATEWAY_OPENAI_BASE_URL);
     const aiClientConfiguration = edition === 'local'
@@ -174,6 +185,7 @@ function loadConfigFromEnv() {
         corsOrigins: process.env.CORS_ORIGINS?.split(',').map(s => s.trim()) ?? ['*'],
         cssTokenEndpoint: resolveCssTokenEndpoint(),
         solidBaseUrl,
+        solidRootFilePath: path.resolve(rootDir),
         aiConnectionInvocationSecret: process.env.XPOD_AI_CONNECTION_INVOCATION_SECRET,
         aiConnectionInvocationKeyId: process.env.XPOD_AI_CONNECTION_INVOCATION_KEY_ID,
         aiConnectionPreviousInvocationSecrets: parsePreviousInvocationSecrets(process.env.XPOD_AI_CONNECTION_PREVIOUS_INVOCATION_SECRETS),
@@ -182,8 +194,7 @@ function loadConfigFromEnv() {
         gatewayPreviousLocatorSecrets: parsePreviousInvocationSecrets(process.env.XPOD_GATEWAY_PREVIOUS_LOCATOR_SECRETS),
         aiGatewaySessionAffinitySecret: process.env.XPOD_AI_GATEWAY_SESSION_AFFINITY_SECRET,
         gatewayAdminProxyAuthSecret: process.env.XPOD_GATEWAY_ADMIN_PROXY_AUTH_SECRET,
-        secretCellCredentialVaultFactory,
-        secretCellVaultFactory: deploymentRootKeys ? () => new secret_cell_1.SecretCellVault({ rootKeys: deploymentRootKeys }) : undefined,
+        ...(deploymentRootKeys ? secretCellVaultFactories(() => deploymentRootKeys) : {}),
         taskDatabaseUrl: process.env.CSS_TASK_DB_URL,
         aiGatewayConnectSigningSecret: process.env.XPOD_AI_GATEWAY_CONNECT_SIGNING_SECRET,
         aiGatewayKimiOAuthIntegrationId: process.env.XPOD_AI_GATEWAY_KIMI_OAUTH_INTEGRATION_ID,
@@ -209,8 +220,8 @@ function loadConfigFromEnv() {
             baseStorageDomain: process.env.CSS_BASE_STORAGE_DOMAIN,
             cloudflareAccountId: process.env.CLOUDFLARE_ACCOUNT_ID,
             cloudflareApiToken: process.env.CLOUDFLARE_API_TOKEN,
-            tencentDnsSecretId: process.env.TENCENT_DNS_SECRET_ID,
-            tencentDnsSecretKey: process.env.TENCENT_DNS_SECRET_KEY,
+            tencentDnsSecretId: process.env.TENCENT_DNSPOD_ID,
+            tencentDnsSecretKey: process.env.TENCENT_DNSPOD_TOKEN,
         },
         // Local 托管式：连接 Cloud
         cloudApiEndpoint,
@@ -265,9 +276,14 @@ function nonEmptyEnv(value) {
     const trimmed = value?.trim();
     return trimmed || undefined;
 }
-function loadSecretCellCredentialVaultFactory(env) {
-    const rootKeys = loadDeploymentRootKeyProvider(env);
-    return rootKeys ? () => new SecretCellCredentialVault_1.SecretCellCredentialVault({ vault: new secret_cell_1.SecretCellVault({ rootKeys }) }) : undefined;
+function secretCellVaultFactories(rootKeys) {
+    let vault;
+    let credentialVault;
+    const secretCellVaultFactory = () => vault ??= new secret_cell_1.SecretCellVault({ rootKeys: rootKeys() });
+    return {
+        secretCellVaultFactory,
+        secretCellCredentialVaultFactory: () => credentialVault ??= new SecretCellCredentialVault_1.SecretCellCredentialVault({ vault: secretCellVaultFactory() }),
+    };
 }
 /**
  * The deployment's root key material, shared by every component that seals secrets at rest.

package/dist/api/container/local.js

@@ -137,9 +137,12 @@ function registerLocalServices(container) {
     // The settings page lets an operator pick the DNS provider, so the runtime honours that
     // choice instead of always wiring Cloudflare and ignoring a saved "tencent".
     const dnsProviderId = process.env.XPOD_DNS_PROVIDER?.trim().toLowerCase() || 'cloudflare';
-    const tencentDnsToken = process.env.XPOD_TENCENT_DNS_TOKEN?.trim();
-    const tencentDnsTokenId = process.env.XPOD_TENCENT_DNS_TOKEN_ID?.trim();
-    const dnsCredentialReady = dnsProviderId === 'tencent' ? Boolean(tencentDnsToken) : Boolean(apiToken);
+    const tencentDnsToken = process.env.TENCENT_DNSPOD_TOKEN?.trim();
+    const tencentDnsTokenId = process.env.TENCENT_DNSPOD_ID?.trim();
+    // DNSPod 需要 ID 与 Token 同时具备；只看 token 会注册一个实际禁用的 provider（静默失效）。
+    const dnsCredentialReady = dnsProviderId === 'tencent'
+        ? Boolean(tencentDnsToken && tencentDnsTokenId)
+        : Boolean(apiToken);
     if (dnsCredentialReady && baseDomain) {
         console.log(`[Local] Self-hosted DNS mode detected (provider: ${dnsProviderId})`);
         container.register({

package/dist/api/container/rdf.d.ts

@@ -4,8 +4,12 @@ import { type RdfEngineLike } from '../../storage/rdf';
 import type { ApiContainerConfig } from './types';
 import type { PodChatKitStore } from '../chatkit';
 import type { EmbeddingService } from '../../ai/service';
+import type { PodAccessFetchProvider } from '../ai-gateway/pod/OwnerPodAccess';
+import type { PodBaseUrlResolver } from '../ai-gateway/pod/PodBaseUrlResolver';
 import { RdfSearchIndexingService } from '../service/RdfSearchIndexingService';
 export interface ApiRunContextRetrieverDependencies {
+    podAccess?: PodAccessFetchProvider;
+    podBaseUrlResolver?: PodBaseUrlResolver;
     chatKitStore?: Pick<PodChatKitStore, 'getAiConfig'>;
     embeddingService?: Partial<Pick<EmbeddingService, 'embed' | 'embedBatch'>>;
 }

package/dist/api/container/rdf.js

@@ -8,6 +8,7 @@ exports.isSqliteConnectionString = isSqliteConnectionString;
 const RdfRunContextRetriever_1 = require("../runs/RdfRunContextRetriever");
 const rdf_1 = require("../../storage/rdf");
 const AuthContext_1 = require("../auth/AuthContext");
+const PodRdfAccessScopeResolver_1 = require("../runs/PodRdfAccessScopeResolver");
 const RdfSearchIndexingService_1 = require("../service/RdfSearchIndexingService");
 function createApiRdfEngine(config) {
     const connectionString = config.edition === 'local' && config.rdfIndexPath
@@ -53,10 +54,13 @@ function createApiRunContextRetriever(rdfEngine, dependencies = {}) {
     if (!rdfEngine) {
         return undefined;
     }
+    const scopeResolver = dependencies.podAccess ? new PodRdfAccessScopeResolver_1.PodRdfAccessScopeResolver({
+        rdfEngine, podAccess: dependencies.podAccess, podBaseUrlResolver: dependencies.podBaseUrlResolver,
+    }) : undefined;
     return new RdfRunContextRetriever_1.RdfRunContextRetriever({
         rdfEngine,
         embedding: createRunContextEmbeddingProvider(dependencies),
-        accessScope: (input) => contextRdfAccessScope(input.context),
+        accessScope: (input) => scopeResolver ? scopeResolver.resolve(input) : contextRdfAccessScope(input.context),
     });
 }
 function createApiRdfSearchIndexingService(rdfEngine, dependencies = {}) {

package/dist/api/container/routes.js

@@ -26,6 +26,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerRoutes = registerRoutes;
 exports.resolveCloudSignalApiUrl = resolveCloudSignalApiUrl;
 exports.resolveLocalStorageProviderBaseUrl = resolveLocalStorageProviderBaseUrl;
+const PodDeletionGrantHandler_1 = require("../handlers/PodDeletionGrantHandler");
+const PodDeletionOperationRepository_1 = require("../../identity/drizzle/PodDeletionOperationRepository");
+const NodeTokenAuthenticator_1 = require("../auth/NodeTokenAuthenticator");
 const MatrixPodResolver_1 = require("../matrix/MatrixPodResolver");
 const AgentWakeRuntimeService_1 = require("../reconciler/AgentWakeRuntimeService");
 const AgentWakeHandler_1 = require("../handlers/AgentWakeHandler");
@@ -41,6 +44,9 @@ const DdnsHandler_1 = require("../handlers/DdnsHandler");
 const ChatKitHandler_1 = require("../handlers/ChatKitHandler");
 const ChatKitV1Handler_1 = require("../handlers/ChatKitV1Handler");
 const InngestHandler_1 = require("../handlers/InngestHandler");
+const TaskAgentBinding_1 = require("../tasks/TaskAgentBinding");
+const TaskCredentialStore_1 = require("../tasks/TaskCredentialStore");
+const TaskHandler_1 = require("../handlers/TaskHandler");
 const RunHandler_1 = require("../handlers/RunHandler");
 const MatrixHandler_1 = require("../handlers/MatrixHandler");
 const CoordinationHandler_1 = require("../handlers/CoordinationHandler");
@@ -75,14 +81,24 @@ const ProvisionReceiptCodec_1 = require("../../provision/ProvisionReceiptCodec")
 const EdgeNodeCertificateCapabilityBridge_1 = require("../../edge/EdgeNodeCertificateCapabilityBridge");
 const path = __importStar(require("node:path"));
 const runtime_1 = require("../../runtime");
+const ServiceInfoHandler_1 = require("../handlers/ServiceInfoHandler");
 /**
  * 注册所有 API 路由
  */
 function registerRoutes(container) {
     const server = container.resolve('apiServer');
     const config = container.resolve('config');
+    if (config.edition === 'cloud') {
+        (0, PodDeletionGrantHandler_1.registerPodDeletionGrantRoutes)(server, new PodDeletionOperationRepository_1.PodDeletionOperationRepository(config.databaseUrl), new NodeTokenAuthenticator_1.NodeTokenAuthenticator({ repository: container.resolve('nodeRepo') }), { pods: container.resolve('podLookupRepo'), nodes: container.resolve('nodeRepo') });
+    }
     // 公共健康检查端点
     registerHealthRoutes(server);
+    // Local identity is registered by the provisioning-state owner below.
+    if (config.edition === 'cloud') {
+        (0, ServiceInfoHandler_1.registerServiceInfoRoute)(server, () => ({
+            edition: config.edition, managed: false, publicUrl: config.publicUrl ?? config.solidBaseUrl,
+        }));
+    }
     // 共享路由
     registerSharedRoutes(container, server);
     // 根据 edition 注册专属路由
@@ -178,6 +194,13 @@ function registerSharedRoutes(container, server) {
     (0, ChatKitHandler_1.registerChatKitRoutes)(server, { chatKitService });
     (0, ChatKitV1Handler_1.registerChatKitV1Routes)(server, { store: chatKitStore });
     (0, RunHandler_1.registerRunRoutes)(server, { runStore: chatKitStore });
+    const taskCredentialStore = container.resolve('taskCredentialStore', { allowUnregistered: true });
+    const taskIssuer = config.solidBaseUrl ?? config.publicUrl;
+    (0, TaskHandler_1.registerTaskRoutes)(server, {
+        taskService: container.resolve('taskService'), runStore: chatKitStore,
+        ...(taskCredentialStore && taskIssuer ? { resolveAgentBinding: (0, TaskAgentBinding_1.createGrantedTaskAgentResolver)((0, TaskCredentialStore_1.createTaskCredentialSource)({ store: taskCredentialStore, issuer: taskIssuer })) } : {}),
+        resolveExecutionContext: (task, context) => task.authBinding ? container.resolve('taskAuthBindingService').resolveRunContext(task.authBinding.id, context) : Promise.resolve(undefined),
+    });
     const matrixPodResolver = (0, MatrixPodResolver_1.createMatrixPodResolver)(podLookupRepository);
     (0, MatrixHandler_1.registerMatrixRoutes)(server, { store: matrixStore, resolvePodUrl: matrixPodResolver, baseUrl: process.env.CSS_BASE_URL });
     (0, AgentWakeHandler_1.registerAgentWakeRoutes)(server, {
@@ -189,6 +212,7 @@ function registerSharedRoutes(container, server) {
         backend: runExecutionBackend,
         taskScheduler: inngestTaskScheduler,
         runtimeConfig: inngestRuntimeConfig,
+        gatewayAdminProxyAuthSecret: config.gatewayAdminProxyAuthSecret,
     });
     (0, RdfStatsHandler_1.registerRdfStatsRoutes)(server, {
         rdfStorageStatsService,
@@ -287,6 +311,10 @@ function registerSharedRoutes(container, server) {
         store: aiConfigStore,
         lifecycle: aiConfigLifecycle,
         embeddingModelPolicy: container.resolve('embeddingModelPolicy', { allowUnregistered: true }),
+        embeddingModels: () => {
+            const registry = container.resolve('gatewayProviderRegistry');
+            return registry.listProviders().flatMap(provider => registry.listManagedEmbeddingModels(provider.id).map(model => ({ provider: provider.id, model: model.id })));
+        },
         capabilities: () => ({
             textBackends: config.edition === 'cloud' && config.sparqlEndpoint ? ['postgres-fts'] : [],
             vectorBackends: config.edition === 'cloud' && config.sparqlEndpoint ? ['pgvector'] : ['vec'],
@@ -528,6 +556,7 @@ function registerLocalRoutes(container, server) {
                 : undefined;
             (0, PodManagementHandler_1.registerPodManagementRoutes)(server, {
                 rootDir,
+                internalAdminAuthSecret: config.gatewayAdminProxyAuthSecret,
                 verifyServiceToken: async (token) => (token === expectedServiceToken
                     || (0, ServiceAccessTokenCodec_1.verifyServiceAccessToken)(token, { serviceToken: expectedServiceToken }).valid),
                 receiptSigningSecret: (0, ProvisionReceiptCodec_1.deriveProvisionReceiptSecret)(expectedServiceToken),
@@ -555,6 +584,7 @@ function registerLocalRoutes(container, server) {
             nodeToken: config.nodeToken,
             serviceToken: config.serviceToken,
             publicUrl: process.env.XPOD_PUBLIC_URL ?? config.publicUrl ?? process.env.CSS_BASE_URL,
+            publicUrlIsFallback: !(process.env.XPOD_PUBLIC_URL ?? config.publicUrl),
             spDomain: process.env.XPOD_SP_DOMAIN ?? config.spDomain,
             localPort: readPositiveInteger(process.env.XPOD_MAIN_PORT ?? process.env.CSS_PORT ?? process.env.XPOD_PORT ?? process.env.PORT),
             tunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN

package/dist/api/container/types.d.ts

@@ -89,8 +89,8 @@ export interface ApiContainerConfig {
     taskDatabaseUrl?: string;
     /**
      * Deployment root key material for secrets that must be encrypted at rest (task credentials).
-     * Absent means the deployment configured no key, and those features report themselves unconfigured
-     * instead of falling back to plaintext.
+     * Local file-backed SQLite defaults to a persistent private file once the container is created.
+     * Other deployments without a factory report encrypted features unconfigured, never plaintext.
      */
     secretCellVaultFactory?: () => SecretCellVault;
     /** Route SPARQL reads through an installed native SPARQL provider. */
@@ -116,6 +116,8 @@ export interface ApiContainerConfig {
     /** CSS Token 端点 */
     cssTokenEndpoint: string;
     solidBaseUrl?: string;
+    /** Captured CSS filesystem root for this runtime, independent of later process.env changes. */
+    solidRootFilePath?: string;
     /** Stateless AI Connections invocation token signing config. */
     aiConnectionInvocationSecret?: string;
     aiConnectionInvocationKeyId?: string;

package/dist/api/handlers/AdminHandler.d.ts

@@ -15,12 +15,14 @@ export interface SanitizedEnvRead {
     }>;
 }
 export declare const ALLOWED_ADMIN_CONFIG_KEYS: readonly ["XPOD_DEPLOY_MODE", "CSS_ROOT_FILE_PATH", "CSS_BASE_URL", "XPOD_TUNNEL_PROVIDER", "XPOD_TUNNEL_ACTIVE_PROFILE_ID", "XPOD_TUNNEL_PROFILES", "XPOD_TUNNEL_PUBLIC_URL", "XPOD_DNS_DOMAIN", "XPOD_DDNS_ENABLED", "XPOD_DNS_PROVIDER", "XPOD_DNS_RECORD_TTL", "XPOD_DNS_PROVIDER_TOKEN", "CLOUDFLARE_API_TOKEN", "CLOUDFLARE_TUNNEL_URL", "SAKURA_TUNNEL_URL", "CLOUDFLARE_TUNNEL_TOKEN", "SAKURA_TUNNEL_TOKEN", "NGROK_AUTHTOKEN", "NGROK_URL", "FRP_TUNNEL_TOKEN", "FRP_TUNNEL_URL", "XPOD_HTTPS_MODE", "XPOD_HTTPS_CERT_PATH", "XPOD_HTTPS_KEY_PATH", "XPOD_ACME_EMAIL", "XPOD_ACME_DOMAINS", "XPOD_ACME_RENEW_BEFORE_DAYS", "XPOD_P2P_ENABLED", "XPOD_P2P_SIGNAL_SERVICE", "XPOD_P2P_FALLBACK_POLICY", "XPOD_PUBLIC_API_URL", "XPOD_PUBLIC_REGISTRY_URL", "CSS_ALLOWED_HOSTS", "CSS_BASE_STORAGE_DOMAIN", "CSS_CLUSTER_INGRESS_DOMAIN", "XPOD_NODE_ID", "XPOD_SP_DOMAIN", "XPOD_NODE_TOKEN", "XPOD_SERVICE_TOKEN", "CSS_PORT", "CSS_SPARQL_ENDPOINT", "CSS_IDENTITY_DB_URL", "CSS_LOGGING_LEVEL", "CSS_SHOW_STACK_TRACE"];
-export declare function isAdminSecretEnvKey(key: string): boolean;
+export { isSecretEnvKey as isAdminSecretEnvKey } from '../../logging/log-secrets';
 export declare function sanitizeEnvForRead(env: EnvConfig): SanitizedEnvRead;
 export declare function createAllowedAdminConfigPatch(input: EnvConfig): EnvConfig;
-export declare function sanitizeLogMessage(message: string, env: EnvConfig): string;
+export { redactConfiguredLogSecrets as sanitizeLogMessage } from '../../logging/log-secrets';
 export interface AdminAuthorizerOptions {
     internalAdminAuthSecret?: string;
+    /** Require a configured admin credential for callers that must not inherit loopback authority. */
+    allowLoopback?: boolean;
 }
 export declare function isAdminMutationAllowed(req: AuthenticatedRequest, options?: AdminAuthorizerOptions): boolean;
 export declare function createAdminServicesCapabilities(req: AuthenticatedRequest, options?: AdminAuthorizerOptions): {
@@ -72,4 +74,3 @@ export interface AdminRoutesOptions extends AdminAuthorizerOptions {
     ddnsManager?: Pick<DdnsManager, 'getStatus'>;
 }
 export declare function registerAdminRoutes(server: ApiServer, options?: AdminRoutesOptions): void;
-export {};