aws-runtime-bridge 1.0.2 → 1.0.3

package/dist/config.d.ts

@@ -67,7 +67,7 @@ export declare const AUTO_REGISTER_PROJECT_NAME: string;
 export declare const AUTO_REGISTER_ROLE_NAME: string;
 /** 工作空间路径 */
 export declare const AUTO_REGISTER_WORKSPACE_PATH: string;
-/** 虚拟 IP（EasyTier） */
+/** 注册 IP（优先），兼容 EasyTier 虚拟 IP */
 export declare const AUTO_REGISTER_VIRTUAL_IP: string;
 /** 注册重试次数 */
 export declare const AUTO_REGISTER_MAX_RETRIES: number;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,WAAW;AACX,eAAO,MAAM,IAAI,EAAE,MAElB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gBAAgB,EAAE,MACwC,CAAC;AAExE,oBAAoB;AACpB,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,cAAc;AACd,eAAO,MAAM,OAAO,EAAE,MAA8C,CAAC;AAErE,kBAAkB;AAClB,eAAO,MAAM,YAAY,EAAE,MAC+C,CAAC;AAE3E,2BAA2B;AAC3B,eAAO,MAAM,wBAAwB,EAAE,OACiB,CAAC;AAEzD,oCAAoC;AACpC,eAAO,MAAM,oBAAoB,EAAE,OACiB,CAAC;AAErD,8BAA8B;AAC9B,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAMC,CAAC;AAEzC,uBAAuB;AACvB,wBAAgB,uBAAuB,IAAI,IAAI,CAc9C;AAED,eAAe;AACf,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,8CAA8C;AAC9C,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/D;AAED,2BAA2B;AAC3B,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKlE;AAED,0BAA0B;AAC1B,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,yBAAyB;AACzB,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED,sBAAsB;AACtB,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,4BAA4B;AAC5B,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED;;GAEG;AAEH,yBAAyB;AACzB,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB,EACrB,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1C,eAAe;AACf,eAAO,MAAM,mBAAmB,SACiB,CAAC;AAElD,iCAAiC;AACjC,eAAO,MAAM,2BAA2B,QAEvC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF;;GAEG;AAEH,eAAe;AACf,eAAO,MAAM,qBAAqB,SAA2C,CAAC;AAE9E,YAAY;AACZ,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AAEvE,iBAAiB;AACjB,eAAO,MAAM,sBAAsB,QAAiC,CAAC;AAErE,oBAAoB;AACpB,eAAO,MAAM,2BAA2B,QAAsC,CAAC;AAE/E,WAAW;AACX,eAAO,MAAM,0BAA0B,QAAqC,CAAC;AAE7E,WAAW;AACX,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AAEvE,aAAa;AACb,eAAO,MAAM,4BAA4B,QACH,CAAC;AAEvC,sBAAsB;AACtB,eAAO,MAAM,wBAAwB,QAAmC,CAAC;AAEzE,aAAa;AACb,eAAO,MAAM,yBAAyB,QAErC,CAAC;AAEF,iBAAiB;AACjB,eAAO,MAAM,4BAA4B,QAExC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,WAAW;AACX,eAAO,MAAM,IAAI,EAAE,MAElB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gBAAgB,EAAE,MACwC,CAAC;AAExE,oBAAoB;AACpB,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,cAAc;AACd,eAAO,MAAM,OAAO,EAAE,MAA8C,CAAC;AAErE,kBAAkB;AAClB,eAAO,MAAM,YAAY,EAAE,MAC+C,CAAC;AAE3E,2BAA2B;AAC3B,eAAO,MAAM,wBAAwB,EAAE,OACiB,CAAC;AAEzD,oCAAoC;AACpC,eAAO,MAAM,oBAAoB,EAAE,OACiB,CAAC;AAErD,8BAA8B;AAC9B,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAMC,CAAC;AAEzC,uBAAuB;AACvB,wBAAgB,uBAAuB,IAAI,IAAI,CAc9C;AAED,eAAe;AACf,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,8CAA8C;AAC9C,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/D;AAED,2BAA2B;AAC3B,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKlE;AAED,0BAA0B;AAC1B,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,yBAAyB;AACzB,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED,sBAAsB;AACtB,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,4BAA4B;AAC5B,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED;;GAEG;AAEH,yBAAyB;AACzB,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB,EACrB,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1C,eAAe;AACf,eAAO,MAAM,mBAAmB,SACiB,CAAC;AAElD,iCAAiC;AACjC,eAAO,MAAM,2BAA2B,QAEvC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF;;GAEG;AAEH,eAAe;AACf,eAAO,MAAM,qBAAqB,SAA2C,CAAC;AAE9E,YAAY;AACZ,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AAEvE,iBAAiB;AACjB,eAAO,MAAM,sBAAsB,QAAiC,CAAC;AAErE,oBAAoB;AACpB,eAAO,MAAM,2BAA2B,QAAsC,CAAC;AAE/E,WAAW;AACX,eAAO,MAAM,0BAA0B,QAAqC,CAAC;AAE7E,WAAW;AACX,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AAEvE,aAAa;AACb,eAAO,MAAM,4BAA4B,QACH,CAAC;AAEvC,kCAAkC;AAClC,eAAO,MAAM,wBAAwB,QAC4B,CAAC;AAElE,aAAa;AACb,eAAO,MAAM,yBAAyB,QAErC,CAAC;AAEF,iBAAiB;AACjB,eAAO,MAAM,4BAA4B,QAExC,CAAC"}

package/dist/config.js

@@ -104,8 +104,8 @@ export const AUTO_REGISTER_PROJECT_NAME = process.env.AWS_PROJECT_NAME || "";
 export const AUTO_REGISTER_ROLE_NAME = process.env.AWS_ROLE_NAME || "";
 /** 工作空间路径 */
 export const AUTO_REGISTER_WORKSPACE_PATH = process.env.AWS_WORKSPACE_PATH || "";
-/** 虚拟 IP（EasyTier） */
-export const AUTO_REGISTER_VIRTUAL_IP = process.env.AWS_VIRTUAL_IP || "";
+/** 注册 IP（优先），兼容 EasyTier 虚拟 IP */
+export const AUTO_REGISTER_VIRTUAL_IP = process.env.AWS_REGISTER_IP || process.env.AWS_VIRTUAL_IP || "";
 /** 注册重试次数 */
 export const AUTO_REGISTER_MAX_RETRIES = Number(process.env.AWS_REGISTER_MAX_RETRIES || 5);
 /** 注册重试间隔（毫秒） */

package/dist/routes/instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../../src/routes/instance.ts"],"names":[],"mappings":"AAeA,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAE5G;AAED,eAAO,MAAM,cAAc,4CAAW,CAAC"}
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../../src/routes/instance.ts"],"names":[],"mappings":"AAwBA,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAC/D,IAAI,CAEN;AAED,eAAO,MAAM,cAAc,4CAAW,CAAC"}

package/dist/routes/instance.js

@@ -1,12 +1,12 @@
-import { Router } from 'express';
-import axios from 'axios';
-import { validateToken } from '../middleware/auth.js';
-import { schedulerBaseUrl, runtimeToken } from '../config.js';
-import { loadInstanceState, saveInstanceState } from '../services/instance-state.js';
-import { initInstance } from '../services/instance-init-service.js';
-import { detectToolStatuses, ensureToolsInstalled, SUPPORTED_INSTALLABLE_TOOLS } from '../services/tool-installer.js';
-import { createLogger } from '../utils/logger.js';
-const log = createLogger('instance');
+import { Router } from "express";
+import axios from "axios";
+import { validateToken } from "../middleware/auth.js";
+import { schedulerBaseUrl, runtimeToken } from "../config.js";
+import { loadInstanceState, saveInstanceState, } from "../services/instance-state.js";
+import { initInstance } from "../services/instance-init-service.js";
+import { detectToolStatuses, ensureToolsInstalled, SUPPORTED_INSTALLABLE_TOOLS, } from "../services/tool-installer.js";
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("instance");
 // ★★★ 导出 gracefulShutdown 的触发函数
 // 用于 aws-mcp-server 通知 bridge 保留会话状态关闭
 let gracefulShutdownFn = null;
@@ -14,12 +14,18 @@ export function setGracefulShutdownFn(fn) {
     gracefulShutdownFn = fn;
 }
 export const instanceRouter = Router();
-instanceRouter.get('/ping', validateToken, async (_req, res) => {
+instanceRouter.get("/healthz", (_req, res) => {
+    res.json({
+        ok: true,
+        runtimeBridge: "healthy",
+    });
+});
+instanceRouter.get("/ping", validateToken, async (_req, res) => {
     try {
-        const schedulerResponse = await axios.get(`${schedulerBaseUrl}/api/runtime/ping`, { headers: { 'X-Runtime-Token': runtimeToken } });
+        const schedulerResponse = await axios.get(`${schedulerBaseUrl}/api/runtime/ping`, { headers: { "X-Runtime-Token": runtimeToken } });
         res.json({
             ok: true,
-            runtimeBridge: 'healthy',
+            runtimeBridge: "healthy",
             schedulerReachable: schedulerResponse.status >= 200 && schedulerResponse.status < 300,
             schedulerBaseUrl,
         });
@@ -28,15 +34,15 @@ instanceRouter.get('/ping', validateToken, async (_req, res) => {
         const err = error;
         res.status(502).json({
             ok: false,
-            error: err?.message || 'scheduler ping failed',
+            error: err?.message || "scheduler ping failed",
             schedulerBaseUrl,
         });
     }
 });
-instanceRouter.post('/init-instance', validateToken, async (req, res) => {
+instanceRouter.post("/init-instance", validateToken, async (req, res) => {
     const { agentId, workspacePath, skillEnabled, mcpEnabled, ccSwitchEnabledTools, skillPackage, skillPackages, mcpServers, } = req.body || {};
     if (!agentId || !workspacePath) {
-        res.status(400).json({ error: 'agentId and workspacePath are required' });
+        res.status(400).json({ error: "agentId and workspacePath are required" });
         return;
     }
     try {
@@ -53,39 +59,51 @@ instanceRouter.post('/init-instance', validateToken, async (req, res) => {
     catch (error) {
         const err = error;
         res.status(400).json({
-            error: err?.message || 'initialize instance failed',
+            error: err?.message || "initialize instance failed",
         });
     }
 });
-instanceRouter.post('/cc-switch/state', validateToken, async (req, res) => {
+instanceRouter.post("/cc-switch/state", validateToken, async (req, res) => {
     const { agentId } = req.body || {};
     if (!agentId) {
-        res.status(400).json({ error: 'agentId is required' });
+        res.status(400).json({ error: "agentId is required" });
         return;
     }
     try {
         const state = await loadInstanceState(agentId);
         const toolStatus = await detectToolStatuses(state.enabledTools || []);
-        res.json({ ok: true, agentId: String(agentId), state: { ...state, toolStatus } });
+        res.json({
+            ok: true,
+            agentId: String(agentId),
+            state: { ...state, toolStatus },
+        });
     }
     catch (error) {
         const err = error;
-        res.status(400).json({ error: err?.message || 'load state failed' });
+        res.status(400).json({ error: err?.message || "load state failed" });
     }
 });
-instanceRouter.post('/cc-switch/install-tools', validateToken, async (req, res) => {
+instanceRouter.post("/cc-switch/install-tools", validateToken, async (req, res) => {
     const { agentId, tools } = req.body || {};
     if (!agentId) {
-        res.status(400).json({ error: 'agentId is required' });
+        res.status(400).json({ error: "agentId is required" });
         return;
     }
     const requestedTools = Array.isArray(tools)
-        ? tools.map((tool) => String(tool || '').trim().toLowerCase()).filter(Boolean)
+        ? tools
+            .map((tool) => String(tool || "")
+            .trim()
+            .toLowerCase())
+            .filter(Boolean)
         : [];
     const supportedInstallableTools = new Set(SUPPORTED_INSTALLABLE_TOOLS);
     const installableTools = requestedTools.filter((tool) => supportedInstallableTools.has(tool));
     if (installableTools.length === 0) {
-        res.status(400).json({ error: `tools must include ${SUPPORTED_INSTALLABLE_TOOLS.join(', ')}` });
+        res
+            .status(400)
+            .json({
+            error: `tools must include ${SUPPORTED_INSTALLABLE_TOOLS.join(", ")}`,
+        });
         return;
     }
     try {
@@ -111,7 +129,7 @@ instanceRouter.post('/cc-switch/install-tools', validateToken, async (req, res)
     }
     catch (error) {
         const err = error;
-        res.status(400).json({ error: err?.message || 'install tools failed' });
+        res.status(400).json({ error: err?.message || "install tools failed" });
     }
 });
 /**
@@ -126,22 +144,22 @@ instanceRouter.post('/cc-switch/install-tools', validateToken, async (req, res)
  * - preserveSessions: true = 保留会话（aws-mcp-server 重启）
  *                     false = 清理会话（bridge 自己关闭）
  */
-instanceRouter.post('/prepare-restart', validateToken, async (req, res) => {
+instanceRouter.post("/prepare-restart", validateToken, async (req, res) => {
     const { preserveSessions = true } = req.body || {};
     try {
         log.info(`[prepare-restart] 收到准备重启通知，preserveSessions=${preserveSessions}`);
         // 记录重启模式到文件，供下次启动时判断
-        const fs = await import('fs/promises');
-        const path = await import('path');
-        const os = await import('os');
-        const restartFlagFile = path.join(os.tmpdir(), 'agentswork-runtime-bridge', '.preserve-sessions');
+        const fs = await import("fs/promises");
+        const path = await import("path");
+        const os = await import("os");
+        const restartFlagFile = path.join(os.tmpdir(), "agentswork-runtime-bridge", ".preserve-sessions");
         if (preserveSessions) {
             // 创建标记文件，表示 aws-mcp-server 重启，需要保留会话
             await fs.mkdir(path.dirname(restartFlagFile), { recursive: true });
             await fs.writeFile(restartFlagFile, JSON.stringify({
                 preserveSessions: true,
                 timestamp: new Date().toISOString(),
-            }), 'utf-8');
+            }), "utf-8");
             log.info(`[prepare-restart] 已创建保留会话标记文件: ${restartFlagFile}`);
         }
         else {
@@ -158,13 +176,13 @@ instanceRouter.post('/prepare-restart', validateToken, async (req, res) => {
             ok: true,
             preserveSessions,
             message: preserveSessions
-                ? 'Bridge will preserve sessions for aws-mcp-server restart'
-                : 'Bridge will clean up sessions on shutdown',
+                ? "Bridge will preserve sessions for aws-mcp-server restart"
+                : "Bridge will clean up sessions on shutdown",
         });
     }
     catch (error) {
         const err = error;
-        log.error('[prepare-restart] Error:', err);
+        log.error("[prepare-restart] Error:", err);
         res.status(500).json({ error: err.message });
     }
 });

package/dist/routes/runtime-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-binding.d.ts","sourceRoot":"","sources":["../../src/routes/runtime-binding.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,oBAAoB,4CAAW,CAAC;AAkK7C,wBAAgB,6BAA6B,IAAI,IAAI,CAapD"}
+{"version":3,"file":"runtime-binding.d.ts","sourceRoot":"","sources":["../../src/routes/runtime-binding.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,oBAAoB,4CAAW,CAAC;AAkL7C,wBAAgB,6BAA6B,IAAI,IAAI,CAapD"}

package/dist/routes/runtime-binding.js

@@ -24,7 +24,7 @@ runtimeBindingRouter.get("/binding/status", (_req, res) => {
     });
 });
 runtimeBindingRouter.post("/binding/pair", (req, res) => {
-    const { accessToken, instanceId, schedulerBaseUrl, pairingCode } = req.body || {};
+    const { accessToken, instanceId, userId, schedulerBaseUrl, pairingCode } = req.body || {};
     const existingBinding = hasRuntimeBinding();
     const currentRuntimeToken = extractRuntimeToken(req);
     if (existingBinding) {
@@ -48,6 +48,7 @@ runtimeBindingRouter.post("/binding/pair", (req, res) => {
         saveRuntimeBinding({
             accessToken: String(accessToken || ""),
             instanceId: instanceId ? String(instanceId) : undefined,
+            userId: userId ? String(userId) : undefined,
             schedulerBaseUrl: schedulerBaseUrl ? String(schedulerBaseUrl) : undefined,
         });
         log.info(`[runtime-bridge] paired with instanceId=${instanceId || "unknown"}`);
@@ -72,6 +73,16 @@ runtimeBindingRouter.post("/binding/request-token", async (req, res) => {
         res.status(403).json({ ok: false, error: "loopback request required" });
         return;
     }
+    const { userId, serverUrl, schedulerBaseUrl } = req.body || {};
+    const scopedToken = getRuntimeAccessToken(userId, serverUrl || schedulerBaseUrl);
+    if (scopedToken) {
+        res.json({
+            ok: true,
+            runtimeAccessToken: scopedToken,
+            updated: false,
+        });
+        return;
+    }
     const result = await requestRuntimeAccessTokenRefresh();
     if (!result.success || !result.runtimeAccessToken) {
         res.status(400).json({
@@ -94,7 +105,7 @@ runtimeBindingRouter.post("/binding/issue", (req, res) => {
         res.status(401).json({ error: "unauthorized" });
         return;
     }
-    const { accessToken, instanceId, schedulerBaseUrl } = req.body || {};
+    const { accessToken, instanceId, userId, schedulerBaseUrl } = req.body || {};
     const nextToken = String(accessToken || "").trim();
     if (!nextToken) {
         res.status(400).json({ error: "accessToken is required" });
@@ -107,6 +118,7 @@ runtimeBindingRouter.post("/binding/issue", (req, res) => {
             saveRuntimeBinding({
                 accessToken: nextToken,
                 instanceId: instanceId ? String(instanceId) : undefined,
+                userId: userId ? String(userId) : undefined,
                 schedulerBaseUrl: schedulerBaseUrl
                     ? String(schedulerBaseUrl)
                     : undefined,

package/dist/services/auto-register.d.ts

@@ -25,7 +25,9 @@ interface AutoRegisterConfig {
     roleName?: string;
     /** 工作空间路径 */
     workspacePath?: string;
-    /** 虚拟 IP（EasyTier） */
+    /** 注册 IP（优先用于生成 runtimeBridgeBaseUrl） */
+    registerIp?: string;
+    /** 虚拟 IP（EasyTier，兼容旧配置） */
     virtualIp?: string;
     /** 注册重试次数 */
     maxRetries?: number;

package/dist/services/auto-register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-register.d.ts","sourceRoot":"","sources":["../../src/services/auto-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4CH;;GAEG;AACH,UAAU,kBAAkB;IAC1B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAiKD;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,kBAAkB,CAuC/C;AAuLD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,YAAY,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACzC,OAAO,CAAC,OAAO,CAAC,CAmHlB;AAED;;GAEG;AACH,wBAAsB,gCAAgC,IAAI,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAoED;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAuBnD;AAED;;GAEG;AACH,wBAAgB,oBAAoB;gBAxmBtB,OAAO;iBACN,MAAM;kBACL,IAAI;YACV,MAAM;EAumBf;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CA0ED"}
+{"version":3,"file":"auto-register.d.ts","sourceRoot":"","sources":["../../src/services/auto-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6CH;;GAEG;AACH,UAAU,kBAAkB;IAC1B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAsKD;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,kBAAkB,CAwC/C;AAuLD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,YAAY,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACzC,OAAO,CAAC,OAAO,CAAC,CAoHlB;AAED;;GAEG;AACH,wBAAsB,gCAAgC,IAAI,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAoED;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAuBnD;AAED;;GAEG;AACH,wBAAgB,oBAAoB;gBA/mBtB,OAAO;iBACN,MAAM;kBACL,IAAI;YACV,MAAM;EA8mBf;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CA0ED"}

package/dist/services/auto-register.js

@@ -71,7 +71,8 @@ function ensureConfigFile() {
  *   "projectName": "default",     // 可选
  *   "roleName": "Bridge",          // 可选
  *   "workspacePath": "/path/to/workspace",  // 可选
- *   "virtualIp": "10.144.144.1", // 可选
+ *   "registerIp": "192.168.1.25", // 可选，优先作为注册 IP
+ *   "virtualIp": "10.144.144.1", // 可选，兼容 EasyTier 虚拟 IP
  *   "maxRetries": 5,              // 可选
  *   "retryInterval": 5000          // 可选
  * }
@@ -95,6 +96,7 @@ function loadConfigFromFile() {
             projectName: config.projectName,
             roleName: config.roleName,
             workspacePath: config.workspacePath,
+            registerIp: config.registerIp,
             virtualIp: config.virtualIp,
             maxRetries: config.maxRetries,
             retryInterval: config.retryInterval,
@@ -132,6 +134,9 @@ function loadConfigFromEnv() {
     if (process.env.AWS_WORKSPACE_PATH) {
         envConfig.workspacePath = process.env.AWS_WORKSPACE_PATH;
     }
+    if (process.env.AWS_REGISTER_IP) {
+        envConfig.registerIp = process.env.AWS_REGISTER_IP;
+    }
     if (process.env.AWS_VIRTUAL_IP) {
         envConfig.virtualIp = process.env.AWS_VIRTUAL_IP;
     }
@@ -181,6 +186,7 @@ export function loadConfig() {
         projectName: merged.projectName,
         roleName: merged.roleName,
         workspacePath: merged.workspacePath,
+        registerIp: merged.registerIp,
         virtualIp: merged.virtualIp,
         maxRetries: merged.maxRetries,
         retryInterval: merged.retryInterval,
@@ -298,8 +304,8 @@ async function doRegister(config) {
         userKey: config.userKey,
         instanceName,
         hostname: os.hostname(),
-        virtualIp: config.virtualIp,
-        runtimeBridgeBaseUrl: `http://${config.virtualIp || localIp}:${port}`,
+        virtualIp: config.registerIp || config.virtualIp,
+        runtimeBridgeBaseUrl: `http://${config.registerIp || config.virtualIp || localIp}:${port}`,
         workspacePath: config.workspacePath,
         projectName: config.projectName,
         roleName: config.roleName,
@@ -379,6 +385,7 @@ export async function autoRegister(customConfig) {
                         saveRuntimeBinding({
                             accessToken: response.runtimeAccessToken,
                             instanceId: response.instanceId,
+                            userId: response.userId,
                             schedulerBaseUrl: response.serverUrl || schedulerBaseUrl,
                         });
                         logger.info("[AutoRegister] 已保存调度中心下发的 runtime access token");
@@ -441,7 +448,7 @@ export async function requestRuntimeAccessTokenRefresh() {
     const state = getRuntimeBindingPublicState();
     const localIp = getLocalIpAddress();
     const runtimeBridgePort = process.env.AWS_RUNTIME_BRIDGE_PORT || 18081;
-    const runtimeBridgeBaseUrl = `http://${config.virtualIp || localIp}:${runtimeBridgePort}`;
+    const runtimeBridgeBaseUrl = `http://${config.registerIp || config.virtualIp || localIp}:${runtimeBridgePort}`;
     try {
         const response = await axios.post(`${schedulerBaseUrl}/api/instances/runtime-tokens/refresh`, {
             tenantId: config.tenantId,
@@ -465,13 +472,12 @@ export async function requestRuntimeAccessTokenRefresh() {
         }
         const previousToken = getRuntimeAccessToken();
         const updated = previousToken !== response.data.runtimeAccessToken;
-        if (updated) {
-            saveRuntimeBinding({
-                accessToken: response.data.runtimeAccessToken,
-                instanceId: state.instanceId,
-                schedulerBaseUrl,
-            });
-        }
+        saveRuntimeBinding({
+            accessToken: response.data.runtimeAccessToken,
+            instanceId: state.instanceId,
+            userId: response.data.userId || config.userKey,
+            schedulerBaseUrl,
+        });
         return {
             success: true,
             runtimeAccessToken: response.data.runtimeAccessToken,
@@ -552,7 +558,7 @@ export async function bridgeRestartCleanup() {
     if (config.enabled) {
         const localIp = getLocalIpAddress();
         const port = process.env.AWS_RUNTIME_BRIDGE_PORT || 18081;
-        requestBody.runtimeBridgeBaseUrl = `http://${config.virtualIp || localIp}:${port}`;
+        requestBody.runtimeBridgeBaseUrl = `http://${config.registerIp || config.virtualIp || localIp}:${port}`;
     }
     if (!requestBody.instanceId && !requestBody.runtimeBridgeBaseUrl) {
         logger.info("[AutoRegister] Bridge 重启清理：没有 instanceId 或 runtimeBridgeBaseUrl，跳过清理");

package/dist/services/runtime-binding.d.ts

@@ -1,6 +1,7 @@
 export type RuntimeBindingState = {
     status: "unpaired" | "paired";
     instanceId?: string;
+    userId?: string;
     schedulerBaseUrl?: string;
     /**
      * Plain runtime access token issued by the scheduler.
@@ -15,17 +16,26 @@ export type RuntimeBindingState = {
 };
 export declare function getRuntimePairingCode(): string;
 export declare function getRuntimeBindingFilePath(): string;
+export declare function getRuntimeTokenStoreFilePath(): string;
+export declare function buildRuntimeTokenKey(userId: unknown, serverBaseUrl: unknown): string;
+export declare function saveScopedRuntimeAccessToken(input: {
+    userId: string;
+    serverBaseUrl: string;
+    accessToken: string;
+}): string;
+export declare function getScopedRuntimeAccessToken(userId: unknown, serverBaseUrl: unknown): string | undefined;
 export declare function loadRuntimeBinding(): RuntimeBindingState;
 export declare function getRuntimeBindingPublicState(): Omit<RuntimeBindingState, "tokenHash" | "accessToken"> & {
     paired: boolean;
 };
 export declare function hasRuntimeBinding(): boolean;
 export declare function validateRuntimeBindingToken(token: unknown): boolean;
-export declare function getRuntimeAccessToken(): string | undefined;
+export declare function getRuntimeAccessToken(userId?: unknown, serverBaseUrl?: unknown): string | undefined;
 export declare function validateRuntimePairingCode(code: unknown): boolean;
 export declare function saveRuntimeBinding(input: {
     accessToken: string;
     instanceId?: string;
+    userId?: string;
     schedulerBaseUrl?: string;
 }): RuntimeBindingState;
 export declare function clearRuntimeBinding(): void;

package/dist/services/runtime-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-binding.d.ts","sourceRoot":"","sources":["../../src/services/runtime-binding.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAuCF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,wBAAgB,kBAAkB,IAAI,mBAAmB,CAWxD;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAClD,mBAAmB,EACnB,WAAW,GAAG,aAAa,CAC5B,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAWtB;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYnE;AAED,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAM1D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,mBAAmB,CA6BtB;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAkB1C"}
+{"version":3,"file":"runtime-binding.d.ts","sourceRoot":"","sources":["../../src/services/runtime-binding.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAoDF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAoBD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,aAAa,EAAE,OAAO,GACrB,MAAM,CAYR;AAsCD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAWT;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,aAAa,EAAE,OAAO,GACrB,MAAM,GAAG,SAAS,CAUpB;AAcD,wBAAgB,kBAAkB,IAAI,mBAAmB,CAWxD;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAClD,mBAAmB,EACnB,WAAW,GAAG,aAAa,CAC5B,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAWtB;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAcnE;AAED,wBAAgB,qBAAqB,CACnC,MAAM,CAAC,EAAE,OAAO,EAChB,aAAa,CAAC,EAAE,OAAO,GACtB,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,mBAAmB,CAuCtB;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAkB1C"}

package/dist/services/runtime-binding.js

@@ -18,6 +18,9 @@ function bindingDir() {
 function bindingFile() {
     return path.join(bindingDir(), "binding.json");
 }
+function tokenStoreFile() {
+    return path.join(bindingDir(), "runtime-tokens.properties");
+}
 function hashToken(token) {
     return crypto
         .createHash(TOKEN_HASH_ALGORITHM)
@@ -32,6 +35,14 @@ function safeEqual(a, b) {
     }
     return crypto.timingSafeEqual(left, right);
 }
+function safeTextEqual(a, b) {
+    const left = Buffer.from(a, "utf8");
+    const right = Buffer.from(b, "utf8");
+    if (left.length !== right.length) {
+        return false;
+    }
+    return crypto.timingSafeEqual(left, right);
+}
 function normalizeToken(token) {
     return String(token || "").trim();
 }
@@ -41,6 +52,106 @@ export function getRuntimePairingCode() {
 export function getRuntimeBindingFilePath() {
     return bindingFile();
 }
+export function getRuntimeTokenStoreFilePath() {
+    return tokenStoreFile();
+}
+function normalizeServerIp(serverBaseUrl) {
+    const raw = String(serverBaseUrl || "").trim();
+    if (!raw) {
+        return "";
+    }
+    try {
+        return new URL(raw).hostname.toLowerCase();
+    }
+    catch {
+        return raw
+            .replace(/^wss?:\/\//i, "")
+            .replace(/^https?:\/\//i, "")
+            .split("/")[0]
+            .split(":")[0]
+            .toLowerCase();
+    }
+}
+export function buildRuntimeTokenKey(userId, serverBaseUrl) {
+    const normalizedUserId = String(userId || "").trim();
+    const serverIp = normalizeServerIp(serverBaseUrl);
+    if (!normalizedUserId || !serverIp) {
+        throw new Error("userId and serverBaseUrl are required to build runtime token key");
+    }
+    return crypto
+        .createHash("md5")
+        .update(`${normalizedUserId}:${serverIp}`, "utf8")
+        .digest("hex");
+}
+function loadRuntimeTokenStore() {
+    const result = new Map();
+    try {
+        const content = fs.readFileSync(tokenStoreFile(), "utf8");
+        for (const line of content.split(/\r?\n/)) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith("#")) {
+                continue;
+            }
+            const separatorIndex = trimmed.indexOf("=");
+            if (separatorIndex <= 0) {
+                continue;
+            }
+            const key = trimmed.slice(0, separatorIndex).trim();
+            const token = trimmed.slice(separatorIndex + 1).trim();
+            if (key && token) {
+                result.set(key, token);
+            }
+        }
+    }
+    catch {
+        // Missing token store is valid for an unpaired bridge.
+    }
+    return result;
+}
+function saveRuntimeTokenStore(tokens) {
+    fs.mkdirSync(bindingDir(), { recursive: true });
+    const lines = [...tokens.entries()]
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, token]) => `${key}=${token}`);
+    fs.writeFileSync(tokenStoreFile(), `${lines.join("\n")}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+}
+export function saveScopedRuntimeAccessToken(input) {
+    const accessToken = normalizeToken(input.accessToken);
+    if (accessToken.length < 16) {
+        throw new Error("accessToken must be at least 16 characters");
+    }
+    const key = buildRuntimeTokenKey(input.userId, input.serverBaseUrl);
+    const tokens = loadRuntimeTokenStore();
+    tokens.set(key, accessToken);
+    saveRuntimeTokenStore(tokens);
+    return key;
+}
+export function getScopedRuntimeAccessToken(userId, serverBaseUrl) {
+    if (!userId || !serverBaseUrl) {
+        return undefined;
+    }
+    try {
+        const key = buildRuntimeTokenKey(userId, serverBaseUrl);
+        return loadRuntimeTokenStore().get(key);
+    }
+    catch {
+        return undefined;
+    }
+}
+function validateRuntimeTokenStore(token) {
+    if (!token) {
+        return false;
+    }
+    for (const storedToken of loadRuntimeTokenStore().values()) {
+        if (safeTextEqual(token, storedToken)) {
+            return true;
+        }
+    }
+    return false;
+}
 export function loadRuntimeBinding() {
     try {
         const raw = fs.readFileSync(bindingFile(), "utf8");
@@ -72,12 +183,18 @@ export function validateRuntimeBindingToken(token) {
         return false;
     }
     const state = loadRuntimeBinding();
-    if (state.status !== "paired" || !state.tokenHash) {
-        return false;
+    if (state.status === "paired" && state.tokenHash) {
+        if (safeEqual(hashToken(candidate), state.tokenHash)) {
+            return true;
+        }
     }
-    return safeEqual(hashToken(candidate), state.tokenHash);
+    return validateRuntimeTokenStore(candidate);
 }
-export function getRuntimeAccessToken() {
+export function getRuntimeAccessToken(userId, serverBaseUrl) {
+    const scopedToken = getScopedRuntimeAccessToken(userId, serverBaseUrl);
+    if (scopedToken) {
+        return scopedToken;
+    }
     const state = loadRuntimeBinding();
     if (state.status !== "paired") {
         return undefined;
@@ -99,6 +216,7 @@ export function saveRuntimeBinding(input) {
         instanceId: input.instanceId
             ? String(input.instanceId)
             : previous.instanceId,
+        userId: input.userId ? String(input.userId) : previous.userId,
         schedulerBaseUrl: input.schedulerBaseUrl
             ? String(input.schedulerBaseUrl)
             : previous.schedulerBaseUrl,
@@ -112,6 +230,14 @@ export function saveRuntimeBinding(input) {
         encoding: "utf8",
         mode: 0o600,
     });
+    if (next.userId && next.schedulerBaseUrl) {
+        const key = saveScopedRuntimeAccessToken({
+            userId: next.userId,
+            serverBaseUrl: next.schedulerBaseUrl,
+            accessToken,
+        });
+        log.info(`[runtime-bridge] scoped runtime token saved: key=${key}`);
+    }
     log.info(`[runtime-bridge] runtime binding saved: ${bindingFile()}`);
     return next;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-runtime-bridge",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "AgentsWorkStudio runtime bridge service for machine-level agent runtime integration",
   "type": "module",
   "main": "dist/index.js",