@zlooks.cn/gateway-server 1.0.7 → 1.0.8

package/.next/server/chunks/379.js

@@ -1 +0,0 @@
-exports.id=379,exports.ids=[379],exports.modules={814:(a,b,c)=>{"use strict";c.d(b,{A:()=>h});var d=c(37922),e=c(93487),f=c(55733),g=c(99449);let h=(0,d.Pt)("zlooks.gateway.global-config-snapshot",async a=>{let[b,c]=await Promise.all([(0,d.oV)(f.A),(0,d.oV)(g.A)]),h=new e.P(b,{onError:a=>c.warn({err:a,event:"global-config.snapshot.rejected"},"Rejected global configuration snapshot")});return await h.start(),a(()=>h.close()),h})},15474:()=>{},32450:a=>{function b(a){return Promise.resolve().then(()=>{var b=Error("Cannot find module '"+a+"'");throw b.code="MODULE_NOT_FOUND",b})}b.keys=()=>[],b.resolve=b,b.id=32450,a.exports=b},37714:(a,b,c)=>{"use strict";c.d(b,{WA:()=>D,bE:()=>B,hT:()=>j,qM:()=>C,qe:()=>k,t1:()=>i});var d=c(73136),e=c(70349),f=c(62710),g=c(29951);let h="cn.zlooks.global.config.server",i=`${h}:site-presentation`,j=`${h}:site-profile`,k="__zlooks_global_config",l=f.Yj().regex(/^[a-z][a-z0-9._-]{0,127}$/),m=f.Yj().trim().min(1).max(160),n=f.Yj().min(1).max(2048).regex(/^\/(?!\/)[^\s]*$/),o=f.OZ().max(2048).refine(a=>{let b=new d.URL(a).protocol;return"http:"===b||"https:"===b}),p=f.gM("external",[f.re({id:l,label:m,href:n,external:f.eu(!1)}),f.re({id:l,label:m,href:o,external:f.eu(!0)})]),q=f.KC([n,o]).optional(),r=f.KC([n,o]).nullable().optional(),s=f.KC([n,o]).optional(),t=a=>new Set(a.map(a=>a.id)).size===a.length,u=f.re({identity:f.re({name:m,homeHref:n,backgroundVideoUrl:r,logoUrl:q,faviconUrl:q,description:f.Yj().trim().min(1).max(500).optional()}),linkGroups:f.YO(f.re({id:l,label:m,links:f.YO(p).max(32)})).max(16),legal:f.re({copyright:f.Yj().trim().min(1).max(320).optional(),registrations:f.YO(f.re({id:l,kind:f.k5(["icp","public-security","other"]),number:f.Yj().trim().min(1).max(320),verificationUrl:s,iconUrl:q})).max(8).refine(t,{message:"Registration IDs must be unique"})})}),v=f.re({schemaVersion:f.eu(2),revision:f.ai().int().min(0).max(Number.MAX_SAFE_INTEGER),value:u,updatedAt:g.w$({offset:!0}),updatedBy:f.Yj().trim().min(1).max(256)}),w=f.re({expectedRevision:f.ai().int().min(0).max(Number.MAX_SAFE_INTEGER),value:u});f.re({changeRequest:f.Yj().trim().min(1).max(2e3)});let x=f.re({profile:f.re({displayName:m,avatarUrl:q,headline:f.Yj().trim().min(1).max(240),biography:f.Yj().trim().min(1).max(2e3)}),topics:f.YO(f.re({id:l,name:m,summary:f.Yj().trim().min(1).max(500),href:s})).max(32).refine(t,{message:"Topic IDs must be unique"}),featuredLinks:f.YO(p).max(16).refine(t,{message:"Featured link IDs must be unique"})}),y=f.re({schemaVersion:f.eu(1),revision:f.ai().int().min(0).max(Number.MAX_SAFE_INTEGER),value:x,updatedAt:g.w$({offset:!0}),updatedBy:f.Yj().trim().min(1).max(256)}),z=f.re({expectedRevision:f.ai().int().min(0).max(Number.MAX_SAFE_INTEGER),value:x}),A=f.Yj().trim().min(1).max(256);function B(a){return(0,e.ol)(v.parse(a))}function C(a){return(0,e.ol)(y.parse(a))}function D(a){return JSON.stringify(B(a))}w.extend({actor:A}),z.extend({actor:A}),f.re({})},43290:a=>{function b(a){return Promise.resolve().then(()=>{var b=Error("Cannot find module '"+a+"'");throw b.code="MODULE_NOT_FOUND",b})}b.keys=()=>[],b.resolve=b,b.id=43290,a.exports=b},43811:()=>{},50781:(a,b,c)=>{"use strict";c.d(b,{E6:()=>g,Ih:()=>f,RW:()=>p,Sz:()=>v,lu:()=>w,vH:()=>s});var d=c(62710),e=c(29951);let f="zlooks.browser.cookies",g="zlooks.browser.client",h=d.Yj().regex(/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9]*)+$/),i=d.Yj().min(1).max(2048).regex(/^\/(?!\/)[^?#\s]*$/),j=e.w$({offset:!0}),k=d.Yj().regex(/^[A-Za-z][A-Za-z0-9_-]{0,127}$/),l=d.k5(["GET","POST","PUT","PATCH","DELETE"]),m=d.Yj().max(8192),n=d.re({code:d.eu(0),data:d.L5().refine(a=>void 0!==a)}).readonly(),o=d.re({code:d.ai().int().safe().refine(a=>0!==a),error:d.Yj().trim().min(1).max(500)}).readonly(),p=d.KC([n,o]);d.re({accept:m.optional(),"accept-language":m.optional(),"content-type":m.optional(),"if-modified-since":m.optional(),"if-none-match":m.optional(),origin:d.Yj().max(2048).optional(),range:m.optional(),referer:m.optional()}).readonly();let q=d.KC([d.Yj().max(512),d.YO(d.Yj().max(512)).max(20).readonly()]),r=d.g1(d.Yj().regex(/^[a-z][a-zA-Z0-9_-]{0,63}$/),q).refine(a=>Object.keys(a).length<=20,{message:"Browser API query has too many fields"}).readonly();d.g1(k,d.Yj().min(1).max(4096)).refine(a=>Object.keys(a).length<=8,{message:"Browser API context has too many cookies"}).readonly();let s=d.re({ipAddress:d.KC([d.uX(),d.ug()]),userAgent:d.Yj().trim().min(1).max(1024).nullable()}).readonly();d.re({method:l,path:i,origin:d.Yj().max(2048).optional(),clientKey:d.Yj().regex(/^[a-f0-9]{64}$/),query:r.optional(),body:d.L5().optional()}).readonly();let t=d.gM("action",[d.re({action:d.eu("set"),name:k,value:d.Yj().min(1).max(4096),expiresAt:j}),d.re({action:d.eu("clear"),name:k})]).readonly(),u=d.YO(t).max(8).refine(a=>new Set(a.map(a=>a.name)).size===a.length,"Cookie effects must target unique names").readonly();function v(a,b){return`/-/${h.parse(a)}${i.parse(b)}`}function w(a){return 0!==a.code}d.re({status:d.ai().int().min(200).max(599).refine(a=>a<300||a>=400),body:p,cookieEffects:u.optional()}).superRefine((a,b)=>{let c=a.status>=200&&a.status<300;!w(a.body)!==c&&b.addIssue({code:"custom",message:"HTTP status and browser API response code disagree",path:["body","code"]})}).readonly()},52124:()=>{},55733:(a,b,c)=>{"use strict";c.d(b,{A:()=>h});var d=c(37922),e=c(58188),f=c(69856),g=c(14571);let h=(0,d.Pt)("zlooks.gateway.application",async a=>{let b=(0,f.pj)({REGISTRY_HOST:process.env.REGISTRY_HOST,REGISTRY_PORT:process.env.REGISTRY_PORT}),c=(0,f.PE)(process.env.HILE_ADVERTISE_HOST),d=new e.lg({namespace:"cn.zlooks.gateway.server",registry:b,...c?{advertiseHost:c}:{}}),h=await (0,g.o0)();return a(await d.listen(h)),d})},58513:(a,b,c)=>{"use strict";c.d(b,{A:()=>h});var d=c(37922),e=c(93487),f=c(55733),g=c(99449);let h=(0,d.Pt)("zlooks.gateway.global-profile-snapshot",async a=>{let[b,c]=await Promise.all([(0,d.oV)(f.A),(0,d.oV)(g.A)]),h=new e.G(b,{onError:a=>c.warn({err:a,event:"global-profile.snapshot.rejected"},"Rejected global profile snapshot")});return await h.start(),a(()=>h.close()),h})},69856:(a,b,c)=>{"use strict";c.d(b,{PE:()=>h,pj:()=>i,fG:()=>j,ud:()=>m});var d=c(62710),e=c(35789);let f=d.Ik({REGISTRY_HOST:d.Yj().trim().min(1),REGISTRY_PORT:e.ai().int().min(1).max(65535)}),g=d.Yj().trim().min(1).optional();function h(a){return g.parse(a)}function i(a){let b=f.parse(a);return Object.freeze({host:b.REGISTRY_HOST,port:b.REGISTRY_PORT})}function j(a){let b=a.trim();if(!b||b.includes("/"))throw Error("Registry configuration key must be one non-empty path segment");return`registry:zlooks.cn/${b}`}var k=c(51142),l=c(48350);async function m(a,b){let c,d,e,f=Object.keys(b.sources);if(0===f.length)throw Error("At least one Registry configuration source is required");let g=Object.fromEntries(f.map(a=>[a,b.sources[a].topic])),h=await (0,k.wb)(a,{topics:g,required:f,onError:a=>n(b.onError,a)}),i=(0,l.IJ)(),j=!0,m=new Promise((a,b)=>{d=a,e=b}),o=setTimeout(()=>{e(Error("Registry configuration was not ready before the initial timeout"))},b.initialTimeoutMs??1e4),p=(0,k.f)(h.current,a=>{if(void 0!==a)try{let c=Object.fromEntries(f.map(c=>[c,b.sources[c].parse(a[c])]));i.value=b.compose(c),d()}catch(a){n(b.onError,a),void 0===i.value&&e(a)}},{immediate:!0}),q=()=>{if(c)return c;j&&(j=!1,p());let a=h.stop().catch(a=>{throw c=void 0,a});return c=a,a};try{await m}catch(a){throw await q().catch(()=>void 0),a}finally{clearTimeout(o)}return{current:i,snapshot(){let a=i.value;if(void 0===a)throw Error("Registry configuration is not ready");return a},close:q}}function n(a,b){try{Promise.resolve(a?.(b)).catch(()=>void 0)}catch{}}},70349:(a,b,c)=>{"use strict";c.d(b,{CY:()=>d,ol:()=>function a(b){if(null!==b&&"object"==typeof b&&!Object.isFrozen(b))for(let c of(Object.freeze(b),Object.values(b)))a(c);return b}});let d="zlooks_session"},86845:(a,b,c)=>{"use strict";c.d(b,{gV:()=>h,rL:()=>g});var d=c(18509),e=c(50781);let f="x-zlooks-internal-rsc-client-ip";function g(a){a.use(async(a,b)=>{a.request.headers[f]=a.ip,await b()})}function h(a){let b=a.get(f)?.trim(),c=a.get("user-agent")?.trim().slice(0,1024)||null;if(!b)return(0,d.eC)({});let g=e.vH.parse({ipAddress:b,userAgent:c});return(0,d.eC)({[e.E6]:g})}},93487:(a,b,c)=>{"use strict";c.d(b,{G:()=>g,P:()=>f});var d=c(37714);class e{#a;#b;#c;#d;#e;constructor(a,b,c,d,e={}){this.application=a,this.topic=b,this.parse=c,this.description=d,this.#a=e.initialTimeoutMs??1e4,this.#b=e.onError??(()=>void 0)}async start(){let a,b;if(this.#d)throw Error(`${this.description} snapshot source is already started`);let c=new Promise((c,d)=>{a=c,b=d}),d=setTimeout(()=>{b(Error(`${this.description} snapshot was not ready before the initial timeout`))},this.#a);try{this.#d=await this.application.subscribe(this.topic,c=>{try{this.#c=this.parse(c),a()}catch(a){this.#f(a),this.#c||b(a)}}),await c}catch(a){throw await this.close().catch(()=>void 0),a}finally{clearTimeout(d)}}snapshot(){let a=this.#c;if(!a)throw Error(`${this.description} snapshot is not ready`);return a}close(){let a=this.#e;if(a)return a;let b=this.#d;if(!b)return Promise.resolve();let c=Promise.resolve(b()).then(()=>{this.#d===b&&(this.#d=void 0)}).catch(a=>{throw this.#e=void 0,a});return this.#e=c,c}#f(a){try{Promise.resolve(this.#b(a)).catch(()=>void 0)}catch{}}}class f extends e{constructor(a,b={}){super(a,d.t1,d.bE,"Global configuration",b)}}class g extends e{constructor(a,b={}){super(a,d.hT,d.qM,"Global profile",b)}}},93980:()=>{},97242:(a,b,c)=>{"use strict";c.d(b,{A:()=>au});var d=c(37922),e=c(51142),f=c(50179),g=c(22291);async function h(a,b="One or more cleanup actions failed"){let c=[];for(let b of a)if(b)try{await b()}catch(a){c.push(a)}if(c.length>0)throw AggregateError(c,b)}var i=c(57975);function j(a){let b=a.rsc.discovery;return{pollIntervalMs:b.pollIntervalMs,missingReconciliations:b.missingReconciliations,snapshotConcurrency:b.snapshotConcurrency}}var k=c(68333),l=c(7088),m=c(57278),n=c(77598),o=c(99079);class p{constructor(a,b){this.token=a,this.clientId=b}authenticate(a){var b,c;let d,e,f=a.headers.get("authorization"),g=`Bearer ${this.token}`;return f&&(b=f,c=g,d=Buffer.from(b),e=Buffer.from(c),d.length===e.length&&(0,n.timingSafeEqual)(d,e))?{token:this.token,clientId:this.clientId,scopes:[o.SS]}:new Response("Unauthorized",{status:401,headers:{"www-authenticate":"Bearer"}})}}var q=c(18509);class r{#g;#h;constructor(a,b,c){this.application=a,this.config=b,this.logger=c}get middleware(){let a=this.#h;if(!a)throw Error("MCP gateway is not ready");return a.middleware}inspect(){let a=this.#g;if(!a)throw Error("MCP gateway is not ready");return a.inspect()}async start(){if(this.#g)throw Error("MCP gateway is already mounted");try{let a=(0,m.H_)(this.application,{pollIntervalMs:this.config.pollIntervalMs,onError:a=>this.logger.error({err:a,event:"mcp.provider-discovery.failed"},"MCP provider discovery failed")}),b=await (0,k.r)({source:a,executionContext:a=>(0,q.eC)({requestId:(0,n.randomUUID)(),...a.authInfo?.clientId?{clientId:a.authInfo.clientId}:{}}),info:{name:"@zlooks.cn/gateway-server",version:"0.0.0"},instructions:"Capabilities are dynamically discovered from their owning internal Hile microservices. Before acting, inspect the current tool, resource, and prompt catalogs and their schemas; never invent a capability. Client-side search such as ToolSearch returns a filtered, possibly truncated subset, not the complete MCP tool catalog; never conclude that a tool does not exist solely because it is missing from a search result. If search results reach the requested limit or indicate truncation, increase the search limit within client-supported bounds or narrow the query to the exact provider-qualified tool name. Even fewer results do not prove completeness when the query is filtered. When a complete inventory is needed, enumerate tools/list and pass each returned nextCursor as cursor on the next request until nextCursor is absent. A client-side search limit is not a tools/list parameter. Stop and report incomplete discovery if a request fails or a cursor repeats. For clients with deferred tools, confirm that the required tool is activated and callable in the current run before invoking it; activation in a previous run does not guarantee availability in the current run. Use the exact callable name returned by the client, not a guessed alias. On Tool not found, first refresh the relevant catalog and rediscover or reactivate the exact tool in the current run before diagnosing server registration. If you cannot verify the complete authorized catalog, report that uncertainty rather than claiming the server does not expose the tool; do not bypass authentication or blindly retry a write whose outcome is unknown. For a multi-step workflow, prefer the owning provider's Prompt when one is available. A Prompt is guidance, not evidence that any action succeeded. Read current state before a write, obtain explicit user confirmation whenever the workflow requires it, invoke the Tool, and read the resulting state again before reporting success. An event-catalog Resource represents only the events owned by its currently discovered Provider; a Provider that is absent from the current MCP catalog contributes no available events. When creating or modifying a service, enumerate the complete Resource catalog and read every currently discovered event catalog before selecting event contracts or Consumer helpers. Refresh the event catalog before finalizing generated service code; if a required catalog disappeared or conflicts, stop and report the unavailable contract. Never infer an available event from an installed package, source-tree inventory, prior run, or conversation history.",startup:"allow-empty",invocationSecurity:{mode:"trusted-internal"},onError:a=>this.logger.error({err:a,event:"mcp.gateway.failed"},"MCP gateway failed")});this.#g=b;let c=new p(this.config.bearerToken,this.config.clientId);this.#h=(0,l.u)(b,{path:this.config.path,security:{allowedHostnames:this.config.allowedHostnames,allowedOriginHostnames:this.config.allowedOriginHostnames,authentication:{mode:"required",authenticate:a=>c.authenticate(a)}},legacy:"reject",onError:a=>this.logger.error({err:a,event:"mcp.http-transport.failed"},"MCP HTTP transport failed")})}catch(a){throw await this.close().catch(a=>{this.logger.error({err:a,event:"mcp.gateway.rollback-failed"},"MCP gateway rollback failed")}),a}}async close(){let a=this.#h,b=this.#g;await h([a?async()=>{await a.close(),this.#h===a&&(this.#h=void 0)}:void 0,b?async()=>{await b.close(),this.#g===b&&(this.#g=void 0)}:void 0],"MCP gateway cleanup failed")}}class s{#i;#j;#e;#k;constructor(a,b){this.config=a,this.mcp=b,this.#i=0,this.#j=!1}async use(a){if(this.#j)throw Error("Gateway runtime state is closing");this.#i+=1;try{return await a()}finally{this.#i-=1,0===this.#i&&this.#k?.()}}close(a){return this.#j=!0,this.#e??=this.#l(a).catch(a=>{throw this.#e=void 0,a}),this.#e}async #l(a){this.#i>0&&await this.#m(a),await this.mcp.close()}async #m(a){a?.aborted||await new Promise(b=>{let c=()=>{a?.removeEventListener("abort",c),this.#k=void 0,b()};this.#k=c,a?.addEventListener("abort",c,{once:!0})})}}class t{constructor(a){this.deployments=a}canDiscover(a){return this.#n(a)}canRender(a){return this.#n(a)}canInvoke(a){return this.#n(a)}#n(a){let b=this.deployments.getActive(a.pluginId);return b?.buildId===a.buildId}}var u=c(78243),v=c(32193),w=c(83671),x=c(24557);let y=new Map;class z{#o;#p;#q;constructor(a,b,c){this.readConfig=b,this.artifacts=new v.ui,this.deployments=new v.hv,this.#q=!0;const d=b().rsc;this.locator=(0,v.d5)(this.deployments,async b=>(0,w.$C)(a,b.namespace)),this.#o=new x.nR({context:(0,q.eC)({}),application:a,artifacts:this.artifacts,deployments:this.deployments,runtime:u.fr,pollIntervalMs:d.discovery.pollIntervalMs,missingReconciliations:d.discovery.missingReconciliations,snapshotConcurrency:d.discovery.snapshotConcurrency,generationHighWater:y,maxManifestBytes:d.transfer.maxManifestBytes,maxFileBytes:d.transfer.maxFileBytes,maxTotalBytes:d.transfer.maxTotalBytes,maxArtifactFiles:d.transfer.maxArtifactFiles,maxPathBytes:d.transfer.maxPathBytes,maxPathDepth:d.transfer.maxPathDepth,operationTimeoutMs:d.transfer.operationTimeoutMs,authorize:(0,x.iw)(),onRejected:(a,b)=>c.warn({err:b,event:"rsc.discovery.rejected",topic:a},"Rejected RSC discovery topic"),onError:a=>c.error({err:a,event:"rsc.discovery.failed"},"RSC discovery failed")}),this.#p=(0,v.Vh)((0,v.AG)(this.artifacts,(0,v.V9)(d.assetMountPath)))}async start(){await this.#o.start()}async close(){await h([()=>this.#o.close(),this.#q?()=>{this.#p(),this.#q=!1}:void 0],"RSC discovery cleanup failed")}}function A(a,b,c,d){let e=(0,v._U)({expectedOrigin:()=>d().public.origin,readToken:a=>{let b=a.headers?.["x-rsc-csrf-token"];return Array.isArray(b)?b[0]:b},verifyToken:a=>a===d().rsc.csrfToken}),f=(0,v.W4)({gateway:new v.ku({locator:b.locator,authorize:(a,b)=>c.canInvoke(a)&&e({pluginId:a.pluginId,buildId:a.buildId,actionId:a.referenceId,input:{}},b)})});(0,v.Kq)(a,{asset:(0,v.XH)({catalog:b.artifacts,mountPath:d().rsc.assetMountPath}),serverFunction:async(a,b)=>(a.requestContext={headers:a.headers},f(a,b))})}var B=c(86845),C=c(62710),D=c(29951);let E=C.Yj().regex(/^[a-z][a-z0-9.-]{0,127}$/),F=C.Yj().regex(/^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+$/).max(256),G=C.Yj().min(1).max(512),H=C.Yj().min(1).max(256),I=C.Yj().min(1).max(1024).superRefine((a,b)=>{if(!a.startsWith("/")||a.startsWith("//")||a.includes("?")||a.includes("#"))return void b.addIssue({code:"custom",message:"Sitemap path must be one same-origin absolute path"});for(let c of a.split("/"))try{let a=decodeURIComponent(c);if("."===a||".."===a||/[\\/\x00-\x1f\x7f%]/.test(a))return void b.addIssue({code:"custom",message:"Sitemap path is ambiguous"})}catch{b.addIssue({code:"custom",message:"Sitemap path contains malformed escaping"});return}}),J=C.re({key:H,path:I,lastModified:D.w$({offset:!0}).nullable()}).readonly();C.re({cursor:G.optional()}).readonly(),C.re({}).readonly(),C.re({items:C.YO(J).max(1e3).readonly(),nextCursor:G.nullable()}).superRefine(({items:a},b)=>{new Set(a.map(({key:a})=>a)).size!==a.length&&b.addIssue({code:"custom",message:"Sitemap entry keys must be unique"}),new Set(a.map(({path:a})=>a)).size!==a.length&&b.addIssue({code:"custom",message:"Sitemap entry paths must be unique"})}).readonly(),C.re({protocol:C.eu("zlooks.sitemap-provider"),providerId:E,instanceId:C.uR(),namespace:F,operation:C.eu("/sitemap/entries"),scopePrefix:I.refine(a=>"/"===a||!a.endsWith("/"),"Sitemap Provider scope must not end with a slash"),issuedAt:C.ai().int().nonnegative(),expiresAt:C.ai().int().nonnegative()}).readonly();let K=C.re({xml:C.Yj().min(1).max(0x3200000),etag:C.Yj().regex(/^"[a-f0-9]{64}"$/),lastModified:D.w$({offset:!0}).nullable(),entryCount:C.ai().int().min(1).max(5e4)}).readonly();function L(a){return a.req.aborted||a.res.destroyed||a.res.writableEnded}let M=C.Yj().min(1).max(1024).regex(/^\/(?:[A-Za-z0-9._~!$&'()*+,;=:@%-]+\/?)*$/).refine(a=>a.split("/").every(a=>{try{let b=decodeURIComponent(a);return"."!==b&&".."!==b&&!/[\\/\x00-\x1f\x7f%]/.test(b)}catch{return!1}}),"Ambiguous URI path"),N=C.Yj().max(2048).regex(/^[\x20-\x7e\x80-\xff]*$/),O=C.re({accept:N.optional(),"accept-language":N.optional(),range:N.optional(),"if-range":N.optional(),"if-none-match":N.optional(),"if-match":N.optional(),"if-modified-since":N.optional(),"if-unmodified-since":N.optional(),origin:N.optional()}),P=Object.freeze(Object.keys(O.shape)),Q=C.Yj().max(2048).regex(/^[\x20-\x7e\x80-\xff]*$/),R=C.Yj().regex(/^(?:0|[1-9][0-9]*)$/).refine(a=>Number.isSafeInteger(Number(a))),S=C.re({status:C.ai().int().min(200).max(599),headers:C.re({"content-type":Q.optional(),"content-length":R.optional(),"content-disposition":Q.optional(),"x-content-type-options":C.eu("nosniff").optional(),location:Q.optional(),"cache-control":Q.optional(),etag:Q.regex(/^(?:W\/)?"[\x21\x23-\x7e\x80-\xff]*"$/).optional(),"last-modified":Q.optional(),expires:Q.optional(),"content-range":Q.optional(),"accept-ranges":Q.optional(),vary:Q.optional(),"access-control-allow-origin":Q.optional(),"access-control-expose-headers":Q.optional(),"cross-origin-resource-policy":Q.optional()}).refine(a=>16384>=Object.entries(a).reduce((a,[b,c])=>a+b.length+(c?.length??0),0))}).superRefine(({status:a,headers:b},c)=>{204===a&&void 0!==b["content-length"]&&c.addIssue({code:"custom",message:"204 must not contain Content-Length"}),205===a&&void 0!==b["content-length"]&&"0"!==b["content-length"]&&c.addIssue({code:"custom",message:"205 cannot contain a response body"})}),T="registry:zlooks.cn/public-assets/providers/",U=C.Yj().regex(/^[a-z][a-z0-9.-]{0,127}$/),V=C.re({protocol:C.eu("zlooks.public-asset"),providerId:U,instanceId:C.uR(),namespace:C.Yj().regex(/^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+$/).max(256),operation:C.eu("/public-asset/read"),prefix:M.refine(a=>"/"!==a&&a.endsWith("/"),"A non-root directory prefix is required"),methods:C.YO(C.k5(["GET","HEAD"])).min(1).max(2).refine(a=>new Set(a).size===a.length),issuedAt:C.ai().int().nonnegative(),expiresAt:C.ai().int().nonnegative()}),W=C.re({method:C.k5(["GET","HEAD"]),path:M,headers:O.default({}),query:C.Yj().max(2048).optional()});class X{#r;#s;reconcile(a,b){let c=[...this.#r,...a];this.#s=c.filter(({announcement:a})=>b.has(a.providerId)).map(({announcement:a})=>a.prefix),this.#r=[...new Map([...a,...this.#r.filter(({announcement:a})=>b.has(a.providerId))].map(a=>[`${a.announcement.providerId}/${a.announcement.instanceId}`,a])).values()].slice(0,256)}resolve(a,b,c="GET"){if(this.#s.some(b=>a.startsWith(b)))return{status:"unavailable"};let d=this.#r.filter(({announcement:b})=>a.startsWith(b.prefix));if(!d.length)return{status:"none"};let e=d.filter(({announcement:a})=>a.expiresAt>b);return 1!==e.length?{status:"unavailable"}:e[0].announcement.methods.some(a=>a===c)?{status:"matched",peer:e[0]}:{status:"method-not-allowed",methods:e[0].announcement.methods}}constructor(){this.#r=[],this.#s=[]}}let Y=C.re({host:C.Yj().min(1).max(253),port:C.ai().int().min(1).max(65535)});class Z{#t;#u;#v;#w;#x;#i;constructor(a,b={}){this.application=a,this.options=b,this.#t=new X,this.#v=new AbortController,this.#w=-1/0,this.#u=b.clock??Date.now}async start(){await this.refresh(),this.#v.signal.throwIfAborted(),this.#x||(this.#x=setInterval(()=>{this.refresh().catch(a=>this.options.onError?.(a))},1e3),this.#x.unref())}refresh(){if(this.#i)return this.#i;let a=this.poll();return this.#i=a,a.finally(()=>{this.#i=void 0}).catch(()=>void 0),a}resolve(a,b="GET"){let c=this.#t.resolve(a,this.#u(),b);return"none"===c.status?c:this.#v.signal.aborted||this.#u()-this.#w>3e4?{status:"unavailable"}:c}async close(){this.#v.abort(),this.#x&&clearInterval(this.#x),this.#x=void 0,await this.#i?.catch(()=>void 0)}async poll(){this.#v.signal.throwIfAborted();let a=await this.application.listRegistryTopicSnapshots(T,{signal:AbortSignal.any([this.#v.signal,AbortSignal.timeout(5e3)])});if(this.#v.signal.throwIfAborted(),a.length>256)throw Error("Public asset catalog limit exceeded");let b=this.#u(),c=[],d=new Set;for(let e of a)try{let a=V.parse(e.payload);if(!e.hasData||e.retained||1!==e.publisherCount||1!==e.publishers.length||e.topic!==`${T}${a.providerId}/${a.instanceId}`||a.issuedAt>b+1e3||a.expiresAt<=a.issuedAt||a.expiresAt-a.issuedAt>3e4)throw Error("Invalid live public asset announcement");c.push({announcement:a,address:Y.parse(e.publishers[0])})}catch(b){let a=e.topic.slice(T.length).split("/")[0];e.topic.startsWith(T)&&a&&d.add(a),this.options.onRejected?.(e.topic,b)}this.#t.reconcile(c,d),this.#w=b}}var $=c(57075),_=c(46466);async function*aa(a,b){let c=0,d=0;for(;;){let e=await a.next();if(e.done)break;if(!Buffer.isBuffer(e.value)||!e.value.length||e.value.length>65536)throw Error("Invalid binary frame");if(++d>16384)throw Error("Transfer frame limit exceeded");if((c+=e.value.length)>0x4000000||void 0!==b&&c>b)throw Error("Transfer length exceeded");if(void 0!==b&&c===b){if(!(await a.next()).done)throw Error("Trailing response frame");yield e.value;return}yield e.value}if(void 0!==b&&c!==b)throw Error("Truncated binary transfer")}function ab(a,b){a.respond=!1,a.res.writeHead(b,{"content-length":"0","cache-control":"no-store"}),a.res.end()}function ac(){}class ad{#y;#z;#A;#B;#C;#D;#E;#F;#G;#H;constructor(a,b,c,d){this.#y=a,this.#A=b,this.#B=d.logger;const e=d.createHost??((a,b)=>new f.Ay({port:a,cwd:b})),h=d.createRsc??((a,b)=>new z(a,b,d.logger)),k=d.createMcp??((a,b)=>new r(a,b,d.logger)),l=d.mountRsc??A;this.#z=e(b.public.port,c),this.rsc=h(a,()=>this.config),this.#C=d.createPublicAssets?.(a)??new Z(a,{onError:a=>this.#B.error({err:a,event:"public-asset.discovery.failed"},"Public transfer discovery failed"),onRejected:(a,b)=>this.#B.warn({err:b,topic:a,event:"public-asset.discovery.rejected"},"Public transfer announcement rejected")}),this.rscAccessPolicy=d.createRscAccessPolicy?.(this.rsc)??new t(this.rsc.deployments),this.#E=(0,g.Z)({debounceMs:d.debounceMs??100,create:async c=>{if(c.public.port!==b.public.port)throw Error("gateway.public.port requires a process restart");if(c.rsc.assetMountPath!==b.rsc.assetMountPath)throw Error("gateway.rsc.assetMountPath requires a process restart");if(!(0,i.isDeepStrictEqual)(c.rsc.transfer,b.rsc.transfer))throw Error("gateway.rsc.transfer requires a process restart");if(!(0,i.isDeepStrictEqual)(j(c),j(b)))throw Error("gateway.rsc.discovery runtime settings require a process restart");let d=k(a,c.mcp);return await d.start(),new s(c,d)},dispose:(a,b)=>a.close(b.signal),onError:(a,b)=>{this.#B.error({err:a,event:"gateway.runtime.reload-failed",stage:b.stage},"Gateway runtime reload failed")}}),(d.mountRscBrowserContext??B.rL)(this.#z),l(this.#z,this.rsc,this.rscAccessPolicy,()=>this.config),this.#z.use((a,b)=>this.#I(c=>c.mcp.middleware(a,b))),function(a,b,c){a.use(async(a,d)=>{var e,f;let g,h;if("/sitemap.xml"!==a.path)return d();if("GET"!==a.method&&"HEAD"!==a.method){a.set("Allow","GET, HEAD"),a.set("Cache-Control","no-store"),a.body=null,a.status=405;return}if(L(a))return;let i=(e=a,g=new AbortController,h=()=>{g.signal.aborted||g.abort(Error("Public Sitemap request disconnected"))},e.req.once("aborted",h),e.res.once("close",h),L(e)&&h(),{controller:g,unbind:()=>{e.req.off("aborted",h),e.res.off("close",h)}});try{i.controller.signal.throwIfAborted();let c=(f=await b.call("cn.zlooks.sitemap","/sitemap/read",{},{context:(0,q.eC)({source:"cn.zlooks.gateway"}),timeout:2e3,retries:0,signal:i.controller.signal}),K.parse(f));if(L(a))return;!function(a,b){var c,d;if(a.set("Cache-Control","public, max-age=300, stale-while-revalidate=3600"),a.set("Content-Type","application/xml; charset=utf-8"),a.set("X-Content-Type-Options","nosniff"),a.set("ETag",b.etag),b.lastModified&&a.set("Last-Modified",new Date(b.lastModified).toUTCString()),c=a.get("if-none-match"),d=b.etag,c.split(",").some(a=>{let b=a.trim();return"*"===b||b===d||b===`W/${d}`})){a.body=null,a.status=304;return}a.body="HEAD"===a.method?null:b.xml,a.status=200}(a,c)}catch(b){if(i.controller.signal.aborted||L(a))return;c.error({err:b,event:"sitemap.http.failed"},"Sitemap HTTP projection failed"),a.set("Cache-Control","no-store"),a.set("Content-Type","text/plain; charset=utf-8"),a.set("Retry-After","60"),a.body="HEAD"===a.method?null:"Sitemap temporarily unavailable\n",a.status=503}finally{i.unbind()}})}(this.#z,a,this.#B),this.#D=function(a,b,c,d){let e=new Set,f=!1;return a.use(async(a,g)=>{let h,i=c.resolve(a.path,a.method);if("none"===i.status)return g();if(f||e.size>=256||"unavailable"===i.status)return ab(a,503);if("method-not-allowed"===i.status)return a.set("Allow",i.methods.join(", ")),ab(a,405);let j=W.safeParse({method:a.method,path:a.path,query:a.querystring,headers:Object.fromEntries(P.flatMap(b=>{let c=a.get(b);return c?[[b,c]]:[]}))});if(!j.success)return ab(a,400);if(a.req.aborted||a.res.destroyed)return;let k=new AbortController,l=()=>k.abort(Error("Public transfer disconnected")),m=setTimeout(()=>k.abort(Error("Public transfer deadline exceeded")),6e4);m.unref(),e.add(k),a.req.once("aborted",l),a.res.once("close",l);try{var n,o;let c;(h=await b.streamPeer(i.peer.address,i.peer.announcement.operation,j.data,{context:(0,q.eC)({}),signal:k.signal,timeout:6e4,idleTimeout:1e4,window:1})).on("error",ac);let d=h[Symbol.asyncIterator](),e=await d.next();if(e.done)throw Error("Missing response head");let f=S.parse(e.value),g=(c=f.headers["content-length"],void 0===c?void 0:Number(c)),l=(n=j.data.method,o=f.status,"HEAD"!==n&&204!==o&&205!==o&&304!==o);if(l&&void 0!==g&&g>0x4000000)throw Error("Transfer size limit exceeded");if(!l||0===g){if(!(await d.next()).done)throw Error("Unexpected body for an empty response");k.signal.throwIfAborted(),a.respond=!1,a.res.writeHead(f.status,f.headers),a.res.end();return}k.signal.throwIfAborted(),a.respond=!1,a.res.writeHead(f.status,f.headers);let m=$.Readable.from(aa(d,g),{objectMode:!1,highWaterMark:65536});await (0,_.pipeline)(m,a.res,{signal:k.signal})}catch(b){a.req.aborted||a.res.destroyed||(d.error({err:b,event:"public-asset.transfer.failed",providerId:i.peer.announcement.providerId},"Public binary transfer failed"),a.res.headersSent?a.res.destroy():ab(a,502))}finally{clearTimeout(m),a.req.off("aborted",l),a.res.off("close",l),k.abort(),h?.destroy(),e.delete(k)}}),{close(){for(let a of(f=!0,e))a.abort(Error("Public transfer shutdown"))}}}(this.#z,a,{resolve:(a,b)=>["/api","/_next","/_hile","/-","/sitemap.xml",this.config.mcp.path,this.config.rsc.assetMountPath].some(b=>a===b||a.startsWith(`${b.replace(/\/$/,"")}/`))?{status:"none"}:this.#C.resolve(a,b)},this.#B)}get config(){return this.#E?.current()?.config??this.#A}async start(){try{await this.#J().update(this.#A),await this.#C.start(),await this.rsc.start()}catch(a){throw await this.close().catch(a=>{this.#B.error({err:a,event:"gateway.runtime.rollback-failed"},"Gateway runtime rollback failed")}),a}}async startHost(){if(!this.#J().current())throw Error("Gateway runtime is not ready");if(this.#F||this.#H)throw Error("Gateway public Host is already started or starting");let a=(async()=>{this.#H=await this.#z.start()})();this.#F=a;try{await a}finally{this.#F===a&&(this.#F=void 0)}}stopHost(){let a=this.#G;if(a)return a;let b=this.#K();return this.#G=b,b.finally(()=>{this.#G===b&&(this.#G=void 0)}).catch(()=>void 0),b}async #K(){this.#D.close(),await this.#F;let a=this.#H;a&&(await a(),this.#H===a&&(this.#H=void 0))}async update(a){await this.#J().update(a)}async withCurrent(a){return this.#I(b=>a({application:this.#y,config:b.config,logger:this.#B,rsc:this.rsc,rscAccessPolicy:this.rscAccessPolicy}))}async close(){await h([()=>this.stopHost(),()=>this.#J().stop(),()=>this.#C.close(),()=>this.rsc.close()],"Gateway runtime cleanup failed")}async #I(a){let b=this.#J().current();if(!b)throw Error("Gateway runtime is not ready");return b.use(()=>a(b))}#J(){let a=this.#E;if(!a)throw Error("Gateway runtime reloader is not initialized");return a}}var ae=c(55733),af=c(73136);let ag=C.re({origin:C.OZ().refine(a=>{let b=new af.URL(a);return["http:","https:"].includes(b.protocol)&&!b.username&&!b.password&&"/"===b.pathname&&!b.search&&!b.hash},"Public Host origin must be one canonical HTTP(S) origin")}).readonly();function ah(a){return ag.parse(a)}var ai=c(69856),aj=c(70349);let ak=C.Yj().regex(/^[a-z][a-z0-9._-]{0,127}$/),al=C.re({port:C.ai().int().min(1).max(65535),mcpBearerToken:C.Yj().min(16),mcpBearerClientId:ak.default("zlooks-admin-client")}),am=C.ai().int().positive().max(0x7fffffff),an=C.re({public:C.re({port:C.ai().int().min(1).max(65535),origin:C.OZ()}),rsc:C.re({assetMountPath:C.eu("/_hile/rsc/assets"),csrfToken:C.Yj().min(16),render:C.re({timeoutMs:am,idleTimeoutMs:am,window:C.ai().int().positive()}),transfer:C.re({maxManifestBytes:C.ai().int().positive(),maxFileBytes:C.ai().int().positive(),maxTotalBytes:C.ai().int().positive(),maxArtifactFiles:C.ai().int().positive(),maxPathBytes:C.ai().int().positive(),maxPathDepth:C.ai().int().positive(),operationTimeoutMs:am}),discovery:C.re({pollIntervalMs:am,missingReconciliations:C.ai().int().positive(),snapshotConcurrency:C.ai().int().positive()})}),mcp:C.re({path:C.eu("/mcp"),pollIntervalMs:am,bearerToken:C.Yj().min(16),clientId:ak,scopes:C.PV([C.eu(o.SS)]),allowedHostnames:C.YO(C.Yj().trim().min(1)).min(1),allowedOriginHostnames:C.YO(C.Yj().trim().min(1)).min(1)})}),ao=a=>(0,aj.ol)(al.parse(a));function ap(a){let b=al.parse(a.gateway),c=ah(a.publicHost),d=new URL(c.origin).hostname;return(0,aj.ol)(an.parse({public:{port:b.port,origin:c.origin},rsc:{assetMountPath:"/_hile/rsc/assets",csrfToken:(0,n.createHmac)("sha256",b.mcpBearerToken).update("zlooks:gateway-rsc-csrf:v1").digest("base64url"),render:{timeoutMs:3e4,idleTimeoutMs:1e4,window:8},transfer:{maxManifestBytes:1048576,maxFileBytes:0x4000000,maxTotalBytes:0x10000000,maxArtifactFiles:4096,maxPathBytes:1024,maxPathDepth:32,operationTimeoutMs:3e4},discovery:{pollIntervalMs:500,missingReconciliations:3,snapshotConcurrency:16}},mcp:{path:"/mcp",pollIntervalMs:2e3,bearerToken:b.mcpBearerToken,clientId:b.mcpBearerClientId,scopes:[o.SS],allowedHostnames:[d],allowedOriginHostnames:[d]}}))}let aq=(0,d.Pt)("zlooks.gateway.config",async a=>{let b=await (0,d.oV)(ae.A),c=await (0,ai.ud)(b,{sources:{gateway:{topic:(0,ai.fG)("gateway"),parse:ao},publicHost:{topic:(0,ai.fG)("public-host"),parse:ah}},compose:ap});return a(()=>c.close()),c});var ar=c(814),as=c(58513),at=c(99449);let au=(0,d.Pt)("zlooks.gateway.runtime",async a=>{let[b,c,,,f]=await Promise.all([(0,d.oV)(ae.A),(0,d.oV)(aq),(0,d.oV)(ar.A),(0,d.oV)(as.A),(0,d.oV)(at.A)]),g=new ad(b,c.snapshot(),process.cwd(),{logger:f});await g.start();let h=(0,e.f)(c.current,async a=>{a&&await g.update(a)},{onError:a=>f.error({err:a,event:"gateway.config-update.failed"},"Gateway configuration update failed")});return a(async()=>{h(),await g.close()}),g})},99449:(a,b,c)=>{"use strict";c.d(b,{A:()=>f});var d=c(37922),e=c(2080);let f=(0,d.Pt)("zlooks.gateway.logger",async a=>{let{logger:b,teardown:c}=(0,e.h)({level:"info",pretty:!1});return a(c),b})}};