aws-runtime-bridge 1.9.79 → 1.9.80

package/dist/services/auto-register.js

@@ -1,1053 +1,2 @@
-/**
- * Bridge 实例自动注册服务
- *
- * 实现 Bridge 实例启动后自动向调度中心注册的功能
- *
- * 配置来源（优先级从高到低）：
- * 1. 环境变量
- * 2. 用户目录下的 .aws-bridge/config.json 文件
- */
-import { v4 as uuidv4 } from "uuid";
-import axios from "axios";
-import os from "node:os";
-import path from "node:path";
-import fs from "node:fs";
-import { logger } from "../utils/logger.js";
-import { schedulerBaseUrl } from "../config.js";
-import { clearRuntimeBinding, clearScopedRuntimeAccessToken, getRuntimeAccessToken, getRuntimeBindingPublicState, getScopedRuntimeAccessToken, loadRuntimeBinding, normalizeSchedulerBaseUrl, saveRuntimeBinding, saveScopedRuntimeAccessToken, } from "./runtime-binding.js";
-const DEFAULT_CONFIG = {
-    enabled: false,
-    serverUrl: schedulerBaseUrl,
-    preferSameLanIp: true,
-    maxRetries: 3,
-    retryInterval: 2000,
-};
-let registrationState = {
-    registered: false,
-    registrations: {},
-};
-let cachedConfiguredConnectionKeys = [];
-export function getConfiguredConnectionKeys() {
-    return [...cachedConfiguredConnectionKeys];
-}
-/** 注册失败后的后台重试默认间隔（毫秒），可用 AWS_REGISTER_BACKGROUND_RETRY_INTERVAL 覆盖 */
-const DEFAULT_BACKGROUND_RETRY_INTERVAL_MS = 30_000;
-function getBackgroundRetryIntervalMs() {
-    const raw = Number(process.env.AWS_REGISTER_BACKGROUND_RETRY_INTERVAL);
-    return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_BACKGROUND_RETRY_INTERVAL_MS;
-}
-/** 后台重试定时器：key = 归一化 serverUrl，保证同一 target 只有一个重试循环 */
-const backgroundRetryTimers = new Map();
-/**
- * 调度后台注册重试。
- * bridge 先于 server 启动（或 server 临时不可用）时，前台重试耗尽后转入后台
- * 持续重试，直到与调度中心建立连接为止。
- */
-function scheduleBackgroundRegisterRetry(config) {
-    const rawServerUrl = config.serverUrl || schedulerBaseUrl;
-    const key = normalizeSchedulerBaseUrl(rawServerUrl) || rawServerUrl;
-    if (backgroundRetryTimers.has(key)) {
-        return;
-    }
-    const timer = setTimeout(() => {
-        backgroundRetryTimers.delete(key);
-        void retryRegisterInBackground(config, key);
-    }, getBackgroundRetryIntervalMs());
-    // unref：后台重试不应阻止进程退出（优雅关闭/测试进程）
-    timer.unref?.();
-    backgroundRetryTimers.set(key, timer);
-}
-/**
- * 后台重试注册：每次触发时重新从 config.json 读取该 target 的最新配置
- *（运行期间修改配置可生效）。失败由 autoRegisterSingle 末尾自动调度下一次；
- * 配置被禁用/删除（enabled=false 或无 userKey）时自然终止重试循环。
- */
-async function retryRegisterInBackground(config, key) {
-    try {
-        const fresh = loadConfigs().find((item) => (normalizeSchedulerBaseUrl(item.serverUrl || schedulerBaseUrl) ||
-            (item.serverUrl || schedulerBaseUrl)) === key) || config;
-        await autoRegisterSingle(fresh, { backgroundRetry: true });
-    }
-    catch (error) {
-        logger.warn(`[AutoRegister] 后台重试注册异常: ${error.message}`);
-        scheduleBackgroundRegisterRetry(config);
-    }
-}
-/** 停止所有后台注册重试（优雅关闭/测试清理用） */
-export function cancelBackgroundRegisterRetries() {
-    for (const timer of backgroundRetryTimers.values()) {
-        clearTimeout(timer);
-    }
-    backgroundRetryTimers.clear();
-}
-function normalizeOptionalString(value) {
-    if (value == null) {
-        return undefined;
-    }
-    const normalized = String(value).trim();
-    return normalized || undefined;
-}
-function normalizeSchedulerHttpBaseUrl(value) {
-    return normalizeSchedulerBaseUrl(value);
-}
-function normalizeOptionalBoolean(value) {
-    if (typeof value === "boolean") {
-        return value;
-    }
-    if (typeof value === "string") {
-        const normalized = value.trim().toLowerCase();
-        if (["true", "1", "yes", "y"].includes(normalized)) {
-            return true;
-        }
-        if (["false", "0", "no", "n"].includes(normalized)) {
-            return false;
-        }
-    }
-    return undefined;
-}
-function normalizeOptionalNumber(value) {
-    if (value == null || value === "") {
-        return undefined;
-    }
-    const parsed = Number(value);
-    return Number.isFinite(parsed) ? parsed : undefined;
-}
-function normalizeTargetConfig(source) {
-    const serverUrl = normalizeOptionalString(source.serverUrl) ||
-        normalizeOptionalString(source.schedulerBaseUrl);
-    const connectionKey = normalizeOptionalString(source.connectionKey) ||
-        normalizeOptionalString(source.password);
-    return {
-        enabled: normalizeOptionalBoolean(source.enabled),
-        serverUrl,
-        tenantId: normalizeOptionalString(source.tenantId),
-        userKey: normalizeOptionalString(source.userKey),
-        connectionKey,
-        instanceName: normalizeOptionalString(source.instanceName),
-        instanceId: normalizeOptionalString(source.instanceId),
-        projectName: normalizeOptionalString(source.projectName),
-        roleName: normalizeOptionalString(source.roleName),
-        workspacePath: normalizeOptionalString(source.workspacePath),
-        registerAddr: normalizeOptionalString(source.registerAddr),
-        registerIp: normalizeOptionalString(source.registerIp),
-        virtualIp: normalizeOptionalString(source.virtualIp),
-        tunnel: normalizeOptionalBoolean(source.tunnel),
-        preferSameLanIp: normalizeOptionalBoolean(source.preferSameLanIp),
-        maxRetries: normalizeOptionalNumber(source.maxRetries),
-        retryInterval: normalizeOptionalNumber(source.retryInterval),
-    };
-}
-/**
- * 配置文件路径
- */
-export function getAutoRegisterConfigFilePath() {
-    const homeDir = os.homedir();
-    return path.join(homeDir, ".aws-bridge", "config.json");
-}
-/**
- * 从配置文件加载配置
- *
- * 配置文件位置：~/.aws-bridge/config.json
- *
- * 配置文件格式：
- * {
- *   "connectionKey": "bridge-password", // 可选，server/面板连接该 bridge 的密钥
- *   "autoRegisterTargets": [
- *     {
- *       "serverUrl": "http://scheduler-host:7380", // 必填，要主动注册的 server 地址
- *       "userKey": "aws_live_xxx",                 // 必填，用户 API Key
- *       "instanceName": "my-bridge",               // 必填/可选，默认主机名
- *       "registerAddr": "192.168.1.25:18081",      // 可选，注册地址（推荐，支持 host:port / 纯 host / 完整 URL）
- *       "connectionKey": "bridge-password"          // 可选，不填则使用顶层 connectionKey
- *     }
- *   ],
- *
- *   // 兼容旧版单目标配置：
- *   "userKey": "aws_live_xxx",     // 必填，用户 API Key
- *   "tenantId": "xxx",             // 可选，租户 ID（不填则自动推导）
- *   "instanceName": "my-bridge",   // 可选，默认使用主机名
- *   "projectName": "default",     // 可选
- *   "roleName": "Bridge",          // 可选
- *   "workspacePath": "/path/to/workspace",  // 可选
- *   "registerAddr": "192.168.1.25:18081", // 可选，注册地址（推荐）
- *   "registerIp": "192.168.1.25", // 可选，已废弃（仅纯 IP，端口由 AWS_RUNTIME_BRIDGE_PORT 决定）
- *   "virtualIp": "10.144.144.1", // 可选，兼容 EasyTier 虚拟 IP
- *   "maxRetries": 5,              // 可选
- *   "retryInterval": 5000          // 可选
- * }
- */
-function loadConfigFromFile() {
-    const configPath = getAutoRegisterConfigFilePath();
-    try {
-        if (!fs.existsSync(configPath)) {
-            logger.debug(`[AutoRegister] 配置文件不存在: ${configPath}`);
-            return null;
-        }
-        const content = fs.readFileSync(configPath, "utf-8");
-        const config = JSON.parse(content);
-        logger.info(`[AutoRegister] 从配置文件加载配置: ${configPath}`);
-        return normalizeTargetConfig(config);
-    }
-    catch (error) {
-        const err = error;
-        logger.warn(`[AutoRegister] 读取配置文件失败: ${configPath}, error: ${err.message}`);
-        return null;
-    }
-}
-function loadTargetsFromFile() {
-    const configPath = getAutoRegisterConfigFilePath();
-    try {
-        if (!fs.existsSync(configPath)) {
-            return [];
-        }
-        const content = fs.readFileSync(configPath, "utf-8");
-        const config = JSON.parse(content);
-        const topLevel = normalizeTargetConfig(config);
-        const rawTargets = Array.isArray(config.autoRegisterTargets)
-            ? config.autoRegisterTargets
-            : [];
-        if (rawTargets.length === 0) {
-            return topLevel.userKey ? [topLevel] : [];
-        }
-        return rawTargets
-            .filter((item) => Boolean(item && typeof item === "object" && !Array.isArray(item)))
-            .map((item) => {
-            const target = normalizeTargetConfig(item);
-            return {
-                ...topLevel,
-                ...target,
-                connectionKey: target.connectionKey || topLevel.connectionKey,
-            };
-        });
-    }
-    catch (error) {
-        const err = error;
-        logger.warn(`[AutoRegister] 读取自动注册目标失败: ${configPath}, error: ${err.message}`);
-        return [];
-    }
-}
-/**
- * 从环境变量加载配置
- */
-function loadConfigFromEnv() {
-    const envConfig = {};
-    if (process.env.AWS_AUTO_REGISTER === "true") {
-        envConfig.enabled = true;
-    }
-    if (process.env.AWS_RUNTIME_SCHEDULER_BASE_URL) {
-        envConfig.serverUrl = process.env.AWS_RUNTIME_SCHEDULER_BASE_URL;
-    }
-    if (process.env.AWS_TENANT_ID) {
-        envConfig.tenantId = process.env.AWS_TENANT_ID;
-    }
-    if (process.env.AWS_USER_KEY) {
-        envConfig.userKey = process.env.AWS_USER_KEY;
-    }
-    if (process.env.AWS_BRIDGE_CONNECTION_KEY) {
-        envConfig.connectionKey = process.env.AWS_BRIDGE_CONNECTION_KEY;
-    }
-    if (process.env.AWS_INSTANCE_NAME) {
-        envConfig.instanceName = process.env.AWS_INSTANCE_NAME;
-    }
-    if (process.env.AWS_PROJECT_NAME) {
-        envConfig.projectName = process.env.AWS_PROJECT_NAME;
-    }
-    if (process.env.AWS_ROLE_NAME) {
-        envConfig.roleName = process.env.AWS_ROLE_NAME;
-    }
-    if (process.env.AWS_WORKSPACE_PATH) {
-        envConfig.workspacePath = process.env.AWS_WORKSPACE_PATH;
-    }
-    if (process.env.AWS_REGISTER_ADDR) {
-        envConfig.registerAddr = process.env.AWS_REGISTER_ADDR;
-    }
-    if (process.env.AWS_REGISTER_IP) {
-        envConfig.registerIp = process.env.AWS_REGISTER_IP;
-    }
-    if (process.env.AWS_VIRTUAL_IP) {
-        envConfig.virtualIp = process.env.AWS_VIRTUAL_IP;
-    }
-    if (process.env.AWS_PREFER_SAME_LAN_IP) {
-        envConfig.preferSameLanIp =
-            normalizeOptionalBoolean(process.env.AWS_PREFER_SAME_LAN_IP) ?? true;
-    }
-    if (process.env.AWS_REGISTER_MAX_RETRIES) {
-        envConfig.maxRetries = parseInt(process.env.AWS_REGISTER_MAX_RETRIES, 10);
-    }
-    if (process.env.AWS_REGISTER_RETRY_INTERVAL) {
-        envConfig.retryInterval = parseInt(process.env.AWS_REGISTER_RETRY_INTERVAL, 10);
-    }
-    return envConfig;
-}
-/**
- * 加载自动注册配置
- *
- * 优先级：环境变量 > 配置文件 > 默认值
- *
- * 如果没有配置文件且没有环境变量，则不启用自动注册
- */
-export function loadConfig() {
-    // 1. 尝试从配置文件加载
-    const fileConfig = loadConfigFromFile();
-    // 2. 从环境变量加载（可覆盖配置文件）
-    const envConfig = loadConfigFromEnv();
-    // 3. 合并配置：环境变量优先级最高
-    const merged = {
-        ...DEFAULT_CONFIG,
-        ...(fileConfig || {}),
-        ...envConfig,
-    };
-    // 4. 设置默认实例名（如果未配置）
-    const instanceName = merged.instanceName || os.hostname();
-    // 5. 判断是否启用
-    // 如果环境变量明确设置了 AWS_AUTO_REGISTER，使用环境变量的值
-    // 否则，如果配置文件存在（无论是否有内容），则启用自动注册
-    let enabled = false;
-    if (process.env.AWS_AUTO_REGISTER !== undefined) {
-        enabled = process.env.AWS_AUTO_REGISTER === "true";
-    }
-    else if (fileConfig) {
-        enabled = true;
-    }
-    return {
-        enabled,
-        serverUrl: merged.serverUrl || schedulerBaseUrl,
-        tenantId: merged.tenantId || "", // 保持为空字符串，后续会通过userKey自动推导
-        userKey: merged.userKey || "",
-        connectionKey: merged.connectionKey,
-        instanceName,
-        instanceId: merged.instanceId,
-        projectName: merged.projectName,
-        roleName: merged.roleName,
-        workspacePath: merged.workspacePath,
-        registerAddr: merged.registerAddr,
-        registerIp: merged.registerIp,
-        virtualIp: merged.virtualIp,
-        // 保留三态（true/false/undefined）：isTunnelConfig 依赖 undefined 走向后兼容判定
-        tunnel: typeof merged.tunnel === "boolean" ? merged.tunnel : undefined,
-        preferSameLanIp: merged.preferSameLanIp !== false,
-        maxRetries: merged.maxRetries,
-        retryInterval: merged.retryInterval,
-    };
-}
-export function loadConfigs() {
-    const fileTargets = loadTargetsFromFile();
-    const envConfig = loadConfigFromEnv();
-    const targets = fileTargets.length > 0 ? fileTargets : [loadConfigFromFile() || {}];
-    const configs = targets.map((target) => {
-        const merged = {
-            ...DEFAULT_CONFIG,
-            ...target,
-            ...envConfig,
-        };
-        let enabled = false;
-        if (process.env.AWS_AUTO_REGISTER !== undefined) {
-            enabled = process.env.AWS_AUTO_REGISTER === "true";
-        }
-        else {
-            enabled = fileTargets.length > 0 || Boolean(merged.userKey);
-        }
-        return {
-            enabled,
-            serverUrl: merged.serverUrl || schedulerBaseUrl,
-            tenantId: merged.tenantId || "",
-            userKey: merged.userKey || "",
-            connectionKey: merged.connectionKey,
-            instanceName: merged.instanceName || os.hostname(),
-            instanceId: merged.instanceId,
-            projectName: merged.projectName,
-            roleName: merged.roleName,
-            workspacePath: merged.workspacePath,
-            registerAddr: merged.registerAddr,
-            registerIp: merged.registerIp,
-            virtualIp: merged.virtualIp,
-            // 保留三态（true/false/undefined）：isTunnelConfig 依赖 undefined 走向后兼容判定
-            tunnel: typeof merged.tunnel === "boolean" ? merged.tunnel : undefined,
-            preferSameLanIp: merged.preferSameLanIp !== false,
-            maxRetries: merged.maxRetries,
-            retryInterval: merged.retryInterval,
-        };
-    });
-    cachedConfiguredConnectionKeys = configs
-        .map((config) => config.connectionKey)
-        .filter((key) => Boolean(key && key.trim()));
-    return configs;
-}
-/**
- * 获取本机所有非内部 IPv4 地址
- */
-function getAllLocalIpAddresses() {
-    const interfaces = os.networkInterfaces();
-    const addresses = [];
-    for (const name of Object.keys(interfaces)) {
-        const nets = interfaces[name];
-        if (!nets)
-            continue;
-        for (const net of nets) {
-            // 跳过内部和非 IPv4 地址
-            if (net.family === "IPv4" && !net.internal) {
-                addresses.push({
-                    address: net.address,
-                    netmask: net.netmask,
-                    name: name,
-                });
-            }
-        }
-    }
-    return addresses;
-}
-/**
- * 将 IP 地址转换为整数
- */
-function ipToInt(ip) {
-    const parts = ip.split(".").map(Number);
-    return (parts[0] << 24) + (parts[1] << 16) + (parts[2] << 8) + parts[3];
-}
-/**
- * 判断两个 IP 是否在同一子网
- */
-function isSameSubnet(ip1, ip2, netmask) {
-    const ip1Int = ipToInt(ip1);
-    const ip2Int = ipToInt(ip2);
-    const maskInt = ipToInt(netmask);
-    return (ip1Int & maskInt) === (ip2Int & maskInt);
-}
-/**
- * 从 URL 中提取 IP 地址
- */
-function extractIpFromUrl(url) {
-    try {
-        const urlObj = new URL(url);
-        // 如果是主机名，尝试解析
-        if (urlObj.hostname === "localhost" || urlObj.hostname === "127.0.0.1") {
-            return "127.0.0.1";
-        }
-        // 检查是否是有效的 IP 地址
-        const ipPattern = /^(\d{1,3}\.){3}\d{1,3}$/;
-        if (ipPattern.test(urlObj.hostname)) {
-            return urlObj.hostname;
-        }
-        // 对于主机名，返回 null（无法直接判断子网）
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * 判断调度中心地址是否指向本机回环地址。
- */
-function isLoopbackIp(ip) {
-    return ip === "127.0.0.1";
-}
-/**
- * 获取与调度中心同局域网的本机 IP 地址
- *
- * 策略：
- * 1. 解析调度中心 URL 获取其 IP
- * 2. 遍历本机网卡，找到与调度中心同子网的 IP
- * 3. 如果找不到同子网 IP，返回 127.0.0.1
- */
-function getPreferredIpAddress(schedulerUrl) {
-    const allIps = getAllLocalIpAddresses();
-    if (allIps.length === 0) {
-        logger.warn("[AutoRegister] 未找到任何非内部 IP 地址，使用 127.0.0.1");
-        return "127.0.0.1";
-    }
-    // 尝试从调度中心 URL 提取 IP
-    const schedulerIp = extractIpFromUrl(schedulerUrl);
-    if (schedulerIp) {
-        if (isLoopbackIp(schedulerIp)) {
-            return "127.0.0.1";
-        }
-        // 查找与调度中心同子网的 IP
-        for (const ipInfo of allIps) {
-            if (isSameSubnet(ipInfo.address, schedulerIp, ipInfo.netmask)) {
-                logger.info(`[AutoRegister] 找到与调度中心同子网的 IP: ${ipInfo.address} (网卡: ${ipInfo.name}, 子网掩码: ${ipInfo.netmask})`);
-                return ipInfo.address;
-            }
-        }
-        logger.warn(`[AutoRegister] 未找到与调度中心 (${schedulerIp}) 同子网的本机 IP，使用 127.0.0.1`);
-    }
-    else {
-        logger.warn("[AutoRegister] 无法解析调度中心 IP，使用 127.0.0.1");
-    }
-    return "127.0.0.1";
-}
-/**
- * 获取本机 IP 地址（兼容旧接口）
- */
-function getLocalIpAddress(targetServerUrl = schedulerBaseUrl) {
-    return getPreferredIpAddress(targetServerUrl);
-}
-export function isTunnelConfig(config) {
-    const check = config || loadConfig();
-    if (!check.enabled || !check.userKey) {
-        return false;
-    }
-    // 显式 tunnel=true → 隧道模式
-    if (check.tunnel === true) {
-        return true;
-    }
-    // 显式 tunnel=false → 直连模式（用于 loopback 等不需要隧道的场景）
-    if (check.tunnel === false) {
-        return false;
-    }
-    // 未显式设置 tunnel：保持向后兼容——无 registerAddr/registerIp/virtualIp 即为隧道模式。
-    // 隧道模式下 bridge 位于 NAT/内网，没有可直接访问的地址，由 server 反向代理。
-    return !check.registerAddr && !check.registerIp && !check.virtualIp;
-}
-function resolveRuntimeBridgeBaseUrl(config) {
-    const port = process.env.AWS_RUNTIME_BRIDGE_PORT || 18081;
-    // 隧道模式：bridge 位于 NAT/内网，通过 WebSocket 反向连出到 server，
-    // server 经 /tunnel/<instanceId>/ 虚拟路径反向调用 bridge。
-    // 触发条件见 isTunnelConfig()：显式 tunnel=true，或未填地址且未显式 tunnel=false。
-    // 此时 config.instanceId 必须已由 autoRegisterSingle 预声明（见 callers）。
-    if (isTunnelConfig(config)) {
-        const targetServerUrl = config.serverUrl || schedulerBaseUrl;
-        try {
-            const url = new URL(targetServerUrl);
-            // 隧道模式下 instanceId 必须已设，否则视为配置错误，降级到 localIp
-            if (!config.instanceId) {
-                logger.warn("[AutoRegister] 隧道模式但缺少 instanceId，降级为直连模式");
-            }
-            else {
-                return `${url.protocol}//${url.host}/tunnel/${config.instanceId}`;
-            }
-        }
-        catch {
-            logger.warn("[AutoRegister] serverUrl 解析失败，降级为直连模式");
-        }
-    }
-    const localIp = config.preferSameLanIp === false
-        ? "127.0.0.1"
-        : getLocalIpAddress(config.serverUrl || schedulerBaseUrl);
-    // 优先级：registerAddr（推荐） > registerIp（已废弃，仅纯 host） > virtualIp > localIp
-    const raw = config.registerAddr || config.registerIp || config.virtualIp || localIp;
-    if (!raw) {
-        return `http://127.0.0.1:${port}`;
-    }
-    // 已带协议前缀（http:// / https://）→ 原样使用，支持反代/TLS/自定义端口场景
-    if (/^https?:\/\//i.test(raw)) {
-        return raw;
-    }
-    // 未带协议：统一补 http://；末尾无 :port 时补默认端口
-    const hasTrailingPort = /:[0-9]+$/.test(raw);
-    return hasTrailingPort ? `http://${raw}` : `http://${raw}:${port}`;
-}
-export function loadPrimaryLifecycleConfig() {
-    return loadConfigs()[0] || loadConfig();
-}
-/**
- * 通过入站 runtime token 反查其所属调度中心地址。
- *
- * 场景：调度中心发起 /runtime/start 时，请求头 X-Runtime-Token 携带的是该 server
- * 签发给本 bridge 的实例 token（RuntimeBridgeService.resolveRuntimeBridgeAuthToken）。
- * bridge 本地 scoped token store（runtime-tokens.properties）按 serverUrl 存储这些
- * 实例 token，因此匹配命中即可确定来源 server，避免多 autoRegisterTargets 时回退到
- * DEFAULT_SCHEDULER_BASE_URL（localhost:8080）导致回调打错服务器。
- *
- * 候选来源：所有 autoRegisterTargets 的 serverUrl + binding.json 的 schedulerBaseUrl。
- * 仅在 launch body 未显式携带 schedulerBaseUrl 时作为兜底使用。
- */
-export function resolveSchedulerBaseUrlFromToken(token) {
-    const candidate = String(token || "").trim();
-    if (!candidate) {
-        return undefined;
-    }
-    const urls = [];
-    for (const config of loadConfigs()) {
-        if (config?.serverUrl) {
-            urls.push(config.serverUrl);
-        }
-    }
-    const binding = loadRuntimeBinding();
-    if (binding.schedulerBaseUrl) {
-        urls.push(binding.schedulerBaseUrl);
-    }
-    for (const url of urls) {
-        const scoped = getScopedRuntimeAccessToken(url);
-        if (scoped && scoped === candidate) {
-            return normalizeSchedulerBaseUrl(url);
-        }
-    }
-    return undefined;
-}
-function resolveRegisteredSchedulerBaseUrl(instanceId) {
-    if (!instanceId) {
-        return undefined;
-    }
-    const registration = Object.entries(registrationState.registrations).find(([, registeredInstanceId]) => registeredInstanceId === instanceId);
-    return registration?.[0];
-}
-function resolveLifecycleSchedulerBaseUrl(config, instanceId) {
-    const registeredServerUrl = resolveRegisteredSchedulerBaseUrl(instanceId);
-    if (registeredServerUrl) {
-        return registeredServerUrl;
-    }
-    const configuredServerUrl = normalizeOptionalString(config.serverUrl);
-    if (configuredServerUrl &&
-        (configuredServerUrl !== schedulerBaseUrl ||
-            Boolean(process.env.AWS_RUNTIME_SCHEDULER_BASE_URL))) {
-        return configuredServerUrl;
-    }
-    const binding = loadRuntimeBinding();
-    const pairedSchedulerBaseUrl = normalizeOptionalString(binding.schedulerBaseUrl);
-    if (binding.status === "paired" && pairedSchedulerBaseUrl) {
-        return pairedSchedulerBaseUrl;
-    }
-    return configuredServerUrl || schedulerBaseUrl;
-}
-/**
- * 执行注册请求
- */
-async function doRegister(config) {
-    const instanceName = config.instanceName || os.hostname();
-    const targetServerUrl = config.serverUrl || schedulerBaseUrl;
-    const request = {
-        tenantId: config.tenantId,
-        userKey: config.userKey,
-        instanceId: config.instanceId,
-        instanceName,
-        hostname: os.hostname(),
-        virtualIp: config.registerAddr || config.registerIp || config.virtualIp,
-        runtimeBridgeBaseUrl: resolveRuntimeBridgeBaseUrl(config),
-        connectionKey: config.connectionKey,
-        workspacePath: config.workspacePath,
-        projectName: config.projectName,
-        roleName: config.roleName,
-    };
-    logger.info(`[AutoRegister] 正在注册实例: ${instanceName}`);
-    logger.info(`[AutoRegister] 调度中心: ${targetServerUrl}`);
-    logger.info(`[AutoRegister] 用户 Key: ${config.userKey ? "****" + config.userKey.slice(-4) : "(未设置)"}`);
-    logger.info(`[AutoRegister] 租户 ID: ${config.tenantId || "(自动推导)"}`);
-    const response = await axios.post(`${targetServerUrl}/api/instances/register`, request, {
-        headers: {
-            "Content-Type": "application/json",
-        },
-        timeout: 10000,
-    });
-    return response.data;
-}
-/** 串行化 config.json 回写，避免并行注册时并发写入冲突 */
-let configWriteBackChain = Promise.resolve();
-/**
- * 将 server 返回的 instanceId 回写到 config.json 对应 target。
- * 回写策略：读 → 找到 serverUrl 匹配的 target → 更新 instanceId → 写回。
- * 仅在值变化时写入，避免不必要的文件 I/O。多 target 并行注册时通过 Promise 链串行化。
- */
-function writeBackInstanceInfoToConfig(targetServerUrl, instanceId) {
-    const task = configWriteBackChain.then(() => {
-        const configPath = getAutoRegisterConfigFilePath();
-        if (!fs.existsSync(configPath)) {
-            return;
-        }
-        const raw = fs.readFileSync(configPath, "utf-8");
-        const config = JSON.parse(raw);
-        const normalizedTargetUrl = normalizeSchedulerBaseUrl(targetServerUrl);
-        if (!normalizedTargetUrl) {
-            return;
-        }
-        let changed = false;
-        const updateTarget = (target) => {
-            const url = normalizeSchedulerBaseUrl(String(target.serverUrl || target.schedulerBaseUrl || ""));
-            if (url !== normalizedTargetUrl) {
-                return;
-            }
-            if (instanceId && target.instanceId !== instanceId) {
-                target.instanceId = instanceId;
-                changed = true;
-            }
-        };
-        if (Array.isArray(config.autoRegisterTargets)) {
-            for (const target of config.autoRegisterTargets) {
-                if (target && typeof target === "object" && !Array.isArray(target)) {
-                    updateTarget(target);
-                }
-            }
-        }
-        else {
-            updateTarget(config);
-        }
-        if (changed) {
-            fs.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
-            logger.info(`[AutoRegister] 已回写 instanceId 到 config.json (serverUrl=${targetServerUrl})`);
-        }
-    });
-    configWriteBackChain = task.catch(() => { });
-    return task;
-}
-/**
- * 执行注销请求
- */
-async function doUnregister(instanceId) {
-    const targetServerUrl = resolveLifecycleSchedulerBaseUrl(loadPrimaryLifecycleConfig(), instanceId);
-    const binding = loadRuntimeBinding();
-    const runtimeAccessToken = getRuntimeAccessToken(targetServerUrl);
-    if (!runtimeAccessToken) {
-        throw new Error("runtimeAccessToken is required to unregister bridge instance");
-    }
-    const response = await axios.post(`${targetServerUrl}/api/instances/unregister`, { instanceId }, {
-        headers: {
-            "Content-Type": "application/json",
-            "X-Runtime-Token": runtimeAccessToken,
-        },
-        timeout: 10000,
-    });
-    return response.data;
-}
-/**
- * 自动注册主函数
- *
- * 带重试机制的注册逻辑
- *
- * 配置来源（优先级从高到低）：
- * 1. 传入的 customConfig
- * 2. 环境变量
- * 3. ~/.aws-bridge/config.json 配置文件
- * 4. 默认值
- */
-export async function autoRegister(customConfig) {
-    const configs = customConfig
-        ? [{ ...loadConfig(), ...customConfig }]
-        : loadConfigs();
-    if (configs.length > 1) {
-        const results = await Promise.all(configs.map((config) => autoRegisterSingle(config)));
-        return results.every(Boolean);
-    }
-    return autoRegisterSingle(configs[0] || loadConfig());
-}
-async function autoRegisterSingle(config, options) {
-    // 检查是否启用
-    if (!config.enabled) {
-        logger.info("[AutoRegister] 自动注册未启用");
-        logger.info("[AutoRegister] 要启用自动注册，请创建配置文件 ~/.aws-bridge/config.json 或设置环境变量 AWS_AUTO_REGISTER=true");
-        return false;
-    }
-    // 验证必填字段（userKey 为必填，tenantId 现在可选）
-    if (!config.userKey) {
-        logger.error("[AutoRegister] 缺少用户 Key（在配置文件中设置 userKey 或设置环境变量 AWS_USER_KEY）");
-        return false;
-    }
-    // ★ 隧道模式：在注册前预声明 instanceId，确保 URL 与注册 request 中的 instanceId 一致
-    const isTunnel = isTunnelConfig(config);
-    if (isTunnel && !config.instanceId) {
-        // 用 uuid 前 12 位确保唯一可读
-        config = { ...config, instanceId: `bridge-${uuidv4().replace(/-/g, "").slice(0, 12)}` };
-        logger.info(`[AutoRegister] 隧道模式：已预声明 instanceId=${config.instanceId}`);
-    }
-    // tenantId 现在是可选的，如果没有提供，后端会根据 userKey 自动推导
-    // 后台重试每轮只尝试 1 次，避免每个间隔内刷出一串重试日志
-    const maxRetries = options?.backgroundRetry ? 1 : (config.maxRetries ?? 3);
-    const retryInterval = config.retryInterval ?? 2000;
-    // 重试循环
-    for (let attempt = 1; attempt <= maxRetries; attempt++) {
-        try {
-            registrationState.lastAttempt = new Date();
-            const response = await doRegister(config);
-            if (response.success) {
-                registrationState.registered = true;
-                registrationState.instanceId = response.instanceId;
-                if (response.instanceId) {
-                    registrationState.registrations[config.serverUrl || schedulerBaseUrl] =
-                        response.instanceId;
-                }
-                registrationState.error = undefined;
-                logger.info(`[AutoRegister] ✓ 注册成功！`);
-                logger.info(`[AutoRegister]   实例 ID: ${response.instanceId}`);
-                logger.info(`[AutoRegister]   消息: ${response.message}`);
-                logger.info(`[AutoRegister]   更新: ${response.isUpdate ? "是" : "否"}`);
-                if (response.runtimeAccessToken) {
-                    try {
-                        saveRuntimeBinding({
-                            accessToken: response.runtimeAccessToken,
-                            instanceId: response.instanceId,
-                            userId: response.userId,
-                            schedulerBaseUrl: response.serverUrl || config.serverUrl || schedulerBaseUrl,
-                        });
-                        logger.info("[AutoRegister] 已保存调度中心下发的 runtime access token");
-                        // 回写 instanceId 到 config.json，供后续 instanceId 匹配使用
-                        if (response.instanceId) {
-                            writeBackInstanceInfoToConfig(config.serverUrl || schedulerBaseUrl, response.instanceId).catch((error) => {
-                                logger.warn(`[AutoRegister] 回写 instanceId 到 config.json 失败: ${error.message}`);
-                            });
-                        }
-                    }
-                    catch (error) {
-                        const err = error;
-                        logger.error(`[AutoRegister] 保存 runtime access token 失败: ${err.message}`);
-                        registrationState.error = err.message;
-                        return false;
-                    }
-                }
-                else {
-                    logger.warn("[AutoRegister] 注册响应未包含 runtime access token，MCP 将无法访问调度中心，请检查 server 的 bridge 实例 token 颁发逻辑");
-                }
-                // ★ 隧道模式：注册成功且拿到 runtimeAccessToken 后，使用 server 返回的真实 instanceId 启动隧道客户端。
-                //   没有 runtimeAccessToken 时隧道鉴权必然失败，跳过启动以免反复重连刷日志。
-                //   多 target 场景：传入本次注册的 serverUrl，隧道客户端按 server 维度多实例并存。
-                if (isTunnel && response.instanceId && response.runtimeAccessToken) {
-                    const { startTunnelClient } = await import("./tunnel-client.js");
-                    const tunnelServerUrl = config.serverUrl || schedulerBaseUrl;
-                    startTunnelClient(tunnelServerUrl, response.instanceId);
-                    logger.info(`[AutoRegister] 隧道客户端已启动: server=${tunnelServerUrl}, instanceId=${response.instanceId}`);
-                }
-                return true;
-            }
-            else {
-                logger.warn(`[AutoRegister] 注册失败: ${response.message}`);
-                registrationState.error = response.message;
-            }
-        }
-        catch (error) {
-            const err = error;
-            const message = err.response?.data
-                ? JSON.stringify(err.response.data)
-                : err.message;
-            logger.error(`[AutoRegister] 注册请求失败 (尝试 ${attempt}/${maxRetries}): ${message}`);
-            registrationState.error = message;
-        }
-        // 如果不是最后一次尝试，等待后重试
-        if (attempt < maxRetries) {
-            logger.info(`[AutoRegister] ${retryInterval / 1000} 秒后重试...`);
-            await new Promise((resolve) => setTimeout(resolve, retryInterval));
-        }
-    }
-    if (options?.backgroundRetry) {
-        // 后台重试轮：单行日志，避免每个间隔刷一大段错误块
-        logger.warn(`[AutoRegister] 后台重试注册仍未成功 (server=${config.serverUrl || schedulerBaseUrl}): ${registrationState.error || "未知"}`);
-    }
-    else {
-        logger.error(`[AutoRegister] ✗ 注册失败，已达最大重试次数`);
-        logger.error(`[AutoRegister] ========================================`);
-        logger.error(`[AutoRegister] 自动注册已启用但注册失败，实例暂时无法正常工作`);
-        logger.error(`[AutoRegister] 请检查以下配置：`);
-        logger.error(`[AutoRegister]   - 用户 Key (userKey): ${config.userKey ? "****" + config.userKey.slice(-4) : "(未设置)"}`);
-        logger.error(`[AutoRegister]   - 租户 ID (tenantId): ${config.tenantId || "(可选，将自动推导)"}`);
-        logger.error(`[AutoRegister]   - 实例名 (instanceName): ${config.instanceName || "(使用主机名)"}`);
-        logger.error(`[AutoRegister]   - 调度中心地址: ${config.serverUrl || schedulerBaseUrl}`);
-        logger.error(`[AutoRegister]   - 最后错误: ${registrationState.error || "未知"}`);
-        logger.error(`[AutoRegister] ========================================`);
-        logger.error(`[AutoRegister] 配置来源：~/.aws-bridge/config.json 或环境变量`);
-        logger.warn(`[AutoRegister] 将在后台持续重试注册（每 ${Math.round(getBackgroundRetryIntervalMs() / 1000)} 秒），直到与调度中心建立连接`);
-    }
-    // 未与 server 建立连接前持续后台重试；成功/配置失效（禁用、缺 userKey）时自动停止
-    scheduleBackgroundRegisterRetry(config);
-    return false;
-}
-/**
- * 注销实例
- */
-export async function requestRuntimeAccessTokenRefresh() {
-    const config = loadPrimaryLifecycleConfig();
-    if (!config.userKey) {
-        return {
-            success: false,
-            error: "userKey is required for runtime token refresh",
-        };
-    }
-    const state = getRuntimeBindingPublicState();
-    const targetServerUrl = resolveLifecycleSchedulerBaseUrl(config);
-    const runtimeBridgeBaseUrl = resolveRuntimeBridgeBaseUrl(config);
-    try {
-        const response = await axios.post(`${targetServerUrl}/api/instances/runtime-tokens/refresh`, {
-            tenantId: config.tenantId,
-            userKey: config.userKey,
-            instanceId: state.instanceId,
-            instanceName: config.instanceName,
-            runtimeBridgeBaseUrl,
-        }, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-            timeout: 10000,
-        });
-        if (!response.data.success || !response.data.runtimeAccessToken) {
-            return {
-                success: false,
-                error: response.data.message ||
-                    "scheduler did not return runtimeAccessToken",
-            };
-        }
-        const previousToken = getRuntimeAccessToken();
-        const updated = previousToken !== response.data.runtimeAccessToken;
-        saveRuntimeBinding({
-            accessToken: response.data.runtimeAccessToken,
-            instanceId: state.instanceId,
-            userId: response.data.userId || config.userKey,
-            schedulerBaseUrl: targetServerUrl,
-        });
-        return {
-            success: true,
-            runtimeAccessToken: response.data.runtimeAccessToken,
-            updated,
-        };
-    }
-    catch (error) {
-        const err = error;
-        const message = err.response?.data
-            ? JSON.stringify(err.response.data)
-            : err.message;
-        return { success: false, error: message };
-    }
-}
-export async function requestRuntimeAccessTokenRefreshForServer(serverBaseUrl) {
-    const targetServerUrl = normalizeSchedulerHttpBaseUrl(serverBaseUrl);
-    if (!targetServerUrl) {
-        return { success: false, error: "serverUrl is required for runtime token refresh" };
-    }
-    const config = loadConfigs().find((item) => normalizeSchedulerHttpBaseUrl(item.serverUrl) === targetServerUrl) || loadPrimaryLifecycleConfig();
-    if (!config.userKey) {
-        return {
-            success: false,
-            error: "userKey is required for runtime token refresh",
-        };
-    }
-    const state = getRuntimeBindingPublicState();
-    const runtimeBridgeBaseUrl = resolveRuntimeBridgeBaseUrl(config);
-    try {
-        const response = await axios.post(`${targetServerUrl}/api/instances/runtime-tokens/refresh`, {
-            tenantId: config.tenantId,
-            userKey: config.userKey,
-            instanceId: state.instanceId,
-            instanceName: config.instanceName,
-            runtimeBridgeBaseUrl,
-        }, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-            timeout: 10000,
-        });
-        if (!response.data.success || !response.data.runtimeAccessToken) {
-            return {
-                success: false,
-                error: response.data.message ||
-                    "scheduler did not return runtimeAccessToken",
-            };
-        }
-        const previousToken = getRuntimeAccessToken(targetServerUrl);
-        const updated = previousToken !== response.data.runtimeAccessToken;
-        saveScopedRuntimeAccessToken({
-            serverBaseUrl: targetServerUrl,
-            accessToken: response.data.runtimeAccessToken,
-        });
-        return {
-            success: true,
-            runtimeAccessToken: response.data.runtimeAccessToken,
-            updated,
-        };
-    }
-    catch (error) {
-        const err = error;
-        const message = err.response?.data
-            ? JSON.stringify(err.response.data)
-            : err.message;
-        return { success: false, error: message };
-    }
-}
-export async function unregister() {
-    if (!registrationState.registered || !registrationState.instanceId) {
-        logger.info("[AutoRegister] 实例未注册，无需注销");
-        return true;
-    }
-    try {
-        const response = await doUnregister(registrationState.instanceId);
-        if (response.success) {
-            logger.info(`[AutoRegister] ✓ 注销成功: ${registrationState.instanceId}`);
-            const targetServerUrl = resolveLifecycleSchedulerBaseUrl(loadPrimaryLifecycleConfig(), registrationState.instanceId);
-            const binding = loadRuntimeBinding();
-            if (binding.schedulerBaseUrl) {
-                clearScopedRuntimeAccessToken(targetServerUrl);
-            }
-            clearRuntimeBinding();
-            registrationState.registered = false;
-            registrationState.instanceId = undefined;
-            return true;
-        }
-        else {
-            logger.warn(`[AutoRegister] 注销失败: ${response.message}`);
-            return false;
-        }
-    }
-    catch (error) {
-        const err = error;
-        logger.error(`[AutoRegister] 注销请求失败: ${err.message}`);
-        return false;
-    }
-}
-/**
- * 获取注册状态
- */
-export function getRegistrationState() {
-    return { ...registrationState };
-}
-/**
- * 检查是否已注册
- */
-export function isRegistered() {
-    return registrationState.registered;
-}
-/**
- * 获取实例 ID
- */
-export function getInstanceId() {
-    return registrationState.instanceId;
-}
-/**
- * ★★★ Bridge 重启清理
- *
- * 当 aws-runtime-bridge 重启时调用，通知调度中心将该 bridge 关联的所有 Agent 设置为离线。
- *
- * 清理逻辑：
- * 1. 调用调度中心的 /api/instances/bridge-restart-cleanup 接口
- * 2. 传入 instanceId 或 runtimeBridgeBaseUrl
- * 3. 调度中心会将关联的 Agent 设置为 is_online=false, runtime_status='stopped'
- *
- * @returns 清理结果
- */
-export async function bridgeRestartCleanup() {
-    const config = loadPrimaryLifecycleConfig();
-    const instanceId = registrationState.instanceId;
-    const targetServerUrl = resolveLifecycleSchedulerBaseUrl(config, instanceId);
-    // 构建清理请求
-    const requestBody = {};
-    if (instanceId) {
-        requestBody.instanceId = instanceId;
-    }
-    // 如果有配置，也传入 runtimeBridgeBaseUrl
-    if (config.enabled) {
-        requestBody.runtimeBridgeBaseUrl = resolveRuntimeBridgeBaseUrl(config);
-    }
-    if (!requestBody.instanceId && !requestBody.runtimeBridgeBaseUrl) {
-        logger.info("[AutoRegister] Bridge 重启清理：没有 instanceId 或 runtimeBridgeBaseUrl，跳过清理");
-        return { success: true, agentCount: 0 };
-    }
-    try {
-        logger.info(`[AutoRegister] Bridge 重启清理：正在通知调度中心...`);
-        logger.info(`[AutoRegister]   instanceId: ${requestBody.instanceId || "(无)"}`);
-        logger.info(`[AutoRegister]   runtimeBridgeBaseUrl: ${requestBody.runtimeBridgeBaseUrl || "(无)"}`);
-        const response = await axios.post(`${targetServerUrl}/api/instances/bridge-restart-cleanup`, requestBody, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-            timeout: 10000,
-        });
-        if (response.data.success) {
-            logger.info(`[AutoRegister] ✓ Bridge 重启清理成功：${response.data.message}`);
-            logger.info(`[AutoRegister]   清理了 ${response.data.agentCount || 0} 个 Agent`);
-            return { success: true, agentCount: response.data.agentCount || 0 };
-        }
-        else {
-            logger.warn(`[AutoRegister] Bridge 重启清理失败：${response.data.message}`);
-            return { success: false, error: response.data.message };
-        }
-    }
-    catch (error) {
-        const err = error;
-        const message = err.response?.data
-            ? JSON.stringify(err.response.data)
-            : err.message;
-        logger.warn(`[AutoRegister] Bridge 重启清理请求失败：${message}`);
-        return { success: false, error: message };
-    }
-}
+import{v4 as F}from"uuid";import R from"axios";import m from"node:os";import M from"node:path";import g from"node:fs";import{logger as i}from"../utils/logger.js";import{schedulerBaseUrl as u}from"../config.js";import{clearRuntimeBinding as z,clearScopedRuntimeAccessToken as J,getRuntimeAccessToken as E,getRuntimeBindingPublicState as w,getScopedRuntimeAccessToken as Y,loadRuntimeBinding as v,normalizeSchedulerBaseUrl as A,saveRuntimeBinding as K,saveScopedRuntimeAccessToken as q}from"./runtime-binding.js";const C={enabled:!1,serverUrl:u,preferSameLanIp:!0,maxRetries:3,retryInterval:2e3};let c={registered:!1,registrations:{}},b=[];function Re(){return[...b]}const H=3e4;function P(){const e=Number(process.env.AWS_REGISTER_BACKGROUND_RETRY_INTERVAL);return Number.isFinite(e)&&e>0?e:H}const I=new Map;function W(e){const r=e.serverUrl||u,t=A(r)||r;if(I.has(t))return;const n=setTimeout(()=>{I.delete(t),V(e,t)},P());n.unref?.(),I.set(t,n)}async function V(e,r){try{const t=S().find(n=>(A(n.serverUrl||u)||n.serverUrl||u)===r)||e;await $(t,{backgroundRetry:!0})}catch(t){i.warn(`[AutoRegister] \u540E\u53F0\u91CD\u8BD5\u6CE8\u518C\u5F02\u5E38: ${t.message}`),W(e)}}function Ie(){for(const e of I.values())clearTimeout(e);I.clear()}function d(e){return e==null?void 0:String(e).trim()||void 0}function L(e){return A(e)}function T(e){if(typeof e=="boolean")return e;if(typeof e=="string"){const r=e.trim().toLowerCase();if(["true","1","yes","y"].includes(r))return!0;if(["false","0","no","n"].includes(r))return!1}}function O(e){if(e==null||e==="")return;const r=Number(e);return Number.isFinite(r)?r:void 0}function N(e){const r=d(e.serverUrl)||d(e.schedulerBaseUrl),t=d(e.connectionKey)||d(e.password);return{enabled:T(e.enabled),serverUrl:r,tenantId:d(e.tenantId),userKey:d(e.userKey),connectionKey:t,instanceName:d(e.instanceName),instanceId:d(e.instanceId),projectName:d(e.projectName),roleName:d(e.roleName),workspacePath:d(e.workspacePath),registerAddr:d(e.registerAddr),registerIp:d(e.registerIp),virtualIp:d(e.virtualIp),tunnel:T(e.tunnel),preferSameLanIp:T(e.preferSameLanIp),maxRetries:O(e.maxRetries),retryInterval:O(e.retryInterval)}}function k(){const e=m.homedir();return M.join(e,".aws-bridge","config.json")}function x(){const e=k();try{if(!g.existsSync(e))return i.debug(`[AutoRegister] \u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728: ${e}`),null;const r=g.readFileSync(e,"utf-8"),t=JSON.parse(r);return i.info(`[AutoRegister] \u4ECE\u914D\u7F6E\u6587\u4EF6\u52A0\u8F7D\u914D\u7F6E: ${e}`),N(t)}catch(r){const t=r;return i.warn(`[AutoRegister] \u8BFB\u53D6\u914D\u7F6E\u6587\u4EF6\u5931\u8D25: ${e}, error: ${t.message}`),null}}function X(){const e=k();try{if(!g.existsSync(e))return[];const r=g.readFileSync(e,"utf-8"),t=JSON.parse(r),n=N(t),o=Array.isArray(t.autoRegisterTargets)?t.autoRegisterTargets:[];return o.length===0?n.userKey?[n]:[]:o.filter(s=>!!(s&&typeof s=="object"&&!Array.isArray(s))).map(s=>{const a=N(s);return{...n,...a,connectionKey:a.connectionKey||n.connectionKey}})}catch(r){const t=r;return i.warn(`[AutoRegister] \u8BFB\u53D6\u81EA\u52A8\u6CE8\u518C\u76EE\u6807\u5931\u8D25: ${e}, error: ${t.message}`),[]}}function j(){const e={};return process.env.AWS_AUTO_REGISTER==="true"&&(e.enabled=!0),process.env.AWS_RUNTIME_SCHEDULER_BASE_URL&&(e.serverUrl=process.env.AWS_RUNTIME_SCHEDULER_BASE_URL),process.env.AWS_TENANT_ID&&(e.tenantId=process.env.AWS_TENANT_ID),process.env.AWS_USER_KEY&&(e.userKey=process.env.AWS_USER_KEY),process.env.AWS_BRIDGE_CONNECTION_KEY&&(e.connectionKey=process.env.AWS_BRIDGE_CONNECTION_KEY),process.env.AWS_INSTANCE_NAME&&(e.instanceName=process.env.AWS_INSTANCE_NAME),process.env.AWS_PROJECT_NAME&&(e.projectName=process.env.AWS_PROJECT_NAME),process.env.AWS_ROLE_NAME&&(e.roleName=process.env.AWS_ROLE_NAME),process.env.AWS_WORKSPACE_PATH&&(e.workspacePath=process.env.AWS_WORKSPACE_PATH),process.env.AWS_REGISTER_ADDR&&(e.registerAddr=process.env.AWS_REGISTER_ADDR),process.env.AWS_REGISTER_IP&&(e.registerIp=process.env.AWS_REGISTER_IP),process.env.AWS_VIRTUAL_IP&&(e.virtualIp=process.env.AWS_VIRTUAL_IP),process.env.AWS_PREFER_SAME_LAN_IP&&(e.preferSameLanIp=T(process.env.AWS_PREFER_SAME_LAN_IP)??!0),process.env.AWS_REGISTER_MAX_RETRIES&&(e.maxRetries=parseInt(process.env.AWS_REGISTER_MAX_RETRIES,10)),process.env.AWS_REGISTER_RETRY_INTERVAL&&(e.retryInterval=parseInt(process.env.AWS_REGISTER_RETRY_INTERVAL,10)),e}function _(){const e=x(),r=j(),t={...C,...e||{},...r},n=t.instanceName||m.hostname();let o=!1;return process.env.AWS_AUTO_REGISTER!==void 0?o=process.env.AWS_AUTO_REGISTER==="true":e&&(o=!0),{enabled:o,serverUrl:t.serverUrl||u,tenantId:t.tenantId||"",userKey:t.userKey||"",connectionKey:t.connectionKey,instanceName:n,instanceId:t.instanceId,projectName:t.projectName,roleName:t.roleName,workspacePath:t.workspacePath,registerAddr:t.registerAddr,registerIp:t.registerIp,virtualIp:t.virtualIp,tunnel:typeof t.tunnel=="boolean"?t.tunnel:void 0,preferSameLanIp:t.preferSameLanIp!==!1,maxRetries:t.maxRetries,retryInterval:t.retryInterval}}function S(){const e=X(),r=j(),n=(e.length>0?e:[x()||{}]).map(o=>{const s={...C,...o,...r};let a=!1;return process.env.AWS_AUTO_REGISTER!==void 0?a=process.env.AWS_AUTO_REGISTER==="true":a=e.length>0||!!s.userKey,{enabled:a,serverUrl:s.serverUrl||u,tenantId:s.tenantId||"",userKey:s.userKey||"",connectionKey:s.connectionKey,instanceName:s.instanceName||m.hostname(),instanceId:s.instanceId,projectName:s.projectName,roleName:s.roleName,workspacePath:s.workspacePath,registerAddr:s.registerAddr,registerIp:s.registerIp,virtualIp:s.virtualIp,tunnel:typeof s.tunnel=="boolean"?s.tunnel:void 0,preferSameLanIp:s.preferSameLanIp!==!1,maxRetries:s.maxRetries,retryInterval:s.retryInterval}});return b=n.map(o=>o.connectionKey).filter(o=>!!(o&&o.trim())),n}function Q(){const e=m.networkInterfaces(),r=[];for(const t of Object.keys(e)){const n=e[t];if(n)for(const o of n)o.family==="IPv4"&&!o.internal&&r.push({address:o.address,netmask:o.netmask,name:t})}return r}function B(e){const r=e.split(".").map(Number);return(r[0]<<24)+(r[1]<<16)+(r[2]<<8)+r[3]}function Z(e,r,t){const n=B(e),o=B(r),s=B(t);return(n&s)===(o&s)}function ee(e){try{const r=new URL(e);return r.hostname==="localhost"||r.hostname==="127.0.0.1"?"127.0.0.1":/^(\d{1,3}\.){3}\d{1,3}$/.test(r.hostname)?r.hostname:null}catch{return null}}function re(e){return e==="127.0.0.1"}function te(e){const r=Q();if(r.length===0)return i.warn("[AutoRegister] \u672A\u627E\u5230\u4EFB\u4F55\u975E\u5185\u90E8 IP \u5730\u5740\uFF0C\u4F7F\u7528 127.0.0.1"),"127.0.0.1";const t=ee(e);if(t){if(re(t))return"127.0.0.1";for(const n of r)if(Z(n.address,t,n.netmask))return i.info(`[AutoRegister] \u627E\u5230\u4E0E\u8C03\u5EA6\u4E2D\u5FC3\u540C\u5B50\u7F51\u7684 IP: ${n.address} (\u7F51\u5361: ${n.name}, \u5B50\u7F51\u63A9\u7801: ${n.netmask})`),n.address;i.warn(`[AutoRegister] \u672A\u627E\u5230\u4E0E\u8C03\u5EA6\u4E2D\u5FC3 (${t}) \u540C\u5B50\u7F51\u7684\u672C\u673A IP\uFF0C\u4F7F\u7528 127.0.0.1`)}else i.warn("[AutoRegister] \u65E0\u6CD5\u89E3\u6790\u8C03\u5EA6\u4E2D\u5FC3 IP\uFF0C\u4F7F\u7528 127.0.0.1");return"127.0.0.1"}function ne(e=u){return te(e)}function D(e){const r=e||_();return!r.enabled||!r.userKey?!1:r.tunnel===!0?!0:r.tunnel===!1?!1:!r.registerAddr&&!r.registerIp&&!r.virtualIp}function U(e){const r=process.env.AWS_RUNTIME_BRIDGE_PORT||18081;if(D(e)){const s=e.serverUrl||u;try{const a=new URL(s);if(!e.instanceId)i.warn("[AutoRegister] \u96A7\u9053\u6A21\u5F0F\u4F46\u7F3A\u5C11 instanceId\uFF0C\u964D\u7EA7\u4E3A\u76F4\u8FDE\u6A21\u5F0F");else return`${a.protocol}//${a.host}/tunnel/${e.instanceId}`}catch{i.warn("[AutoRegister] serverUrl \u89E3\u6790\u5931\u8D25\uFF0C\u964D\u7EA7\u4E3A\u76F4\u8FDE\u6A21\u5F0F")}}const t=e.preferSameLanIp===!1?"127.0.0.1":ne(e.serverUrl||u),n=e.registerAddr||e.registerIp||e.virtualIp||t;return n?/^https?:\/\//i.test(n)?n:/:[0-9]+$/.test(n)?`http://${n}`:`http://${n}:${r}`:`http://127.0.0.1:${r}`}function y(){return S()[0]||_()}function Se(e){const r=String(e||"").trim();if(!r)return;const t=[];for(const o of S())o?.serverUrl&&t.push(o.serverUrl);const n=v();n.schedulerBaseUrl&&t.push(n.schedulerBaseUrl);for(const o of t){const s=Y(o);if(s&&s===r)return A(o)}}function se(e){return e?Object.entries(c.registrations).find(([,t])=>t===e)?.[0]:void 0}function h(e,r){const t=se(r);if(t)return t;const n=d(e.serverUrl);if(n&&(n!==u||process.env.AWS_RUNTIME_SCHEDULER_BASE_URL))return n;const o=v(),s=d(o.schedulerBaseUrl);return o.status==="paired"&&s?s:n||u}async function oe(e){const r=e.instanceName||m.hostname(),t=e.serverUrl||u,n={tenantId:e.tenantId,userKey:e.userKey,instanceId:e.instanceId,instanceName:r,hostname:m.hostname(),virtualIp:e.registerAddr||e.registerIp||e.virtualIp,runtimeBridgeBaseUrl:U(e),connectionKey:e.connectionKey,workspacePath:e.workspacePath,projectName:e.projectName,roleName:e.roleName};return i.info(`[AutoRegister] \u6B63\u5728\u6CE8\u518C\u5B9E\u4F8B: ${r}`),i.info(`[AutoRegister] \u8C03\u5EA6\u4E2D\u5FC3: ${t}`),i.info(`[AutoRegister] \u7528\u6237 Key: ${e.userKey?"****"+e.userKey.slice(-4):"(\u672A\u8BBE\u7F6E)"}`),i.info(`[AutoRegister] \u79DF\u6237 ID: ${e.tenantId||"(\u81EA\u52A8\u63A8\u5BFC)"}`),(await R.post(`${t}/api/instances/register`,n,{headers:{"Content-Type":"application/json"},timeout:1e4})).data}let G=Promise.resolve();function ie(e,r){const t=G.then(()=>{const n=k();if(!g.existsSync(n))return;const o=g.readFileSync(n,"utf-8"),s=JSON.parse(o),a=A(e);if(!a)return;let l=!1;const f=p=>{A(String(p.serverUrl||p.schedulerBaseUrl||""))===a&&r&&p.instanceId!==r&&(p.instanceId=r,l=!0)};if(Array.isArray(s.autoRegisterTargets))for(const p of s.autoRegisterTargets)p&&typeof p=="object"&&!Array.isArray(p)&&f(p);else f(s);l&&(g.writeFileSync(n,JSON.stringify(s,null,2),"utf-8"),i.info(`[AutoRegister] \u5DF2\u56DE\u5199 instanceId \u5230 config.json (serverUrl=${e})`))});return G=t.catch(()=>{}),t}async function ae(e){const r=h(y(),e),t=v(),n=E(r);if(!n)throw new Error("runtimeAccessToken is required to unregister bridge instance");return(await R.post(`${r}/api/instances/unregister`,{instanceId:e},{headers:{"Content-Type":"application/json","X-Runtime-Token":n},timeout:1e4})).data}async function ye(e){const r=e?[{..._(),...e}]:S();return r.length>1?(await Promise.all(r.map(n=>$(n)))).every(Boolean):$(r[0]||_())}async function $(e,r){if(!e.enabled)return i.info("[AutoRegister] \u81EA\u52A8\u6CE8\u518C\u672A\u542F\u7528"),i.info("[AutoRegister] \u8981\u542F\u7528\u81EA\u52A8\u6CE8\u518C\uFF0C\u8BF7\u521B\u5EFA\u914D\u7F6E\u6587\u4EF6 ~/.aws-bridge/config.json \u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF AWS_AUTO_REGISTER=true"),!1;if(!e.userKey)return i.error("[AutoRegister] \u7F3A\u5C11\u7528\u6237 Key\uFF08\u5728\u914D\u7F6E\u6587\u4EF6\u4E2D\u8BBE\u7F6E userKey \u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF AWS_USER_KEY\uFF09"),!1;const t=D(e);t&&!e.instanceId&&(e={...e,instanceId:`bridge-${F().replace(/-/g,"").slice(0,12)}`},i.info(`[AutoRegister] \u96A7\u9053\u6A21\u5F0F\uFF1A\u5DF2\u9884\u58F0\u660E instanceId=${e.instanceId}`));const n=r?.backgroundRetry?1:e.maxRetries??3,o=e.retryInterval??2e3;for(let s=1;s<=n;s++){try{c.lastAttempt=new Date;const a=await oe(e);if(a.success){if(c.registered=!0,c.instanceId=a.instanceId,a.instanceId&&(c.registrations[e.serverUrl||u]=a.instanceId),c.error=void 0,i.info("[AutoRegister] \u2713 \u6CE8\u518C\u6210\u529F\uFF01"),i.info(`[AutoRegister]   \u5B9E\u4F8B ID: ${a.instanceId}`),i.info(`[AutoRegister]   \u6D88\u606F: ${a.message}`),i.info(`[AutoRegister]   \u66F4\u65B0: ${a.isUpdate?"\u662F":"\u5426"}`),a.runtimeAccessToken)try{K({accessToken:a.runtimeAccessToken,instanceId:a.instanceId,userId:a.userId,schedulerBaseUrl:a.serverUrl||e.serverUrl||u}),i.info("[AutoRegister] \u5DF2\u4FDD\u5B58\u8C03\u5EA6\u4E2D\u5FC3\u4E0B\u53D1\u7684 runtime access token"),a.instanceId&&ie(e.serverUrl||u,a.instanceId).catch(l=>{i.warn(`[AutoRegister] \u56DE\u5199 instanceId \u5230 config.json \u5931\u8D25: ${l.message}`)})}catch(l){const f=l;return i.error(`[AutoRegister] \u4FDD\u5B58 runtime access token \u5931\u8D25: ${f.message}`),c.error=f.message,!1}else i.warn("[AutoRegister] \u6CE8\u518C\u54CD\u5E94\u672A\u5305\u542B runtime access token\uFF0CMCP \u5C06\u65E0\u6CD5\u8BBF\u95EE\u8C03\u5EA6\u4E2D\u5FC3\uFF0C\u8BF7\u68C0\u67E5 server \u7684 bridge \u5B9E\u4F8B token \u9881\u53D1\u903B\u8F91");if(t&&a.instanceId&&a.runtimeAccessToken){const{startTunnelClient:l}=await import("./tunnel-client.js"),f=e.serverUrl||u;l(f,a.instanceId),i.info(`[AutoRegister] \u96A7\u9053\u5BA2\u6237\u7AEF\u5DF2\u542F\u52A8: server=${f}, instanceId=${a.instanceId}`)}return!0}else i.warn(`[AutoRegister] \u6CE8\u518C\u5931\u8D25: ${a.message}`),c.error=a.message}catch(a){const l=a,f=l.response?.data?JSON.stringify(l.response.data):l.message;i.error(`[AutoRegister] \u6CE8\u518C\u8BF7\u6C42\u5931\u8D25 (\u5C1D\u8BD5 ${s}/${n}): ${f}`),c.error=f}s<n&&(i.info(`[AutoRegister] ${o/1e3} \u79D2\u540E\u91CD\u8BD5...`),await new Promise(a=>setTimeout(a,o)))}return r?.backgroundRetry?i.warn(`[AutoRegister] \u540E\u53F0\u91CD\u8BD5\u6CE8\u518C\u4ECD\u672A\u6210\u529F (server=${e.serverUrl||u}): ${c.error||"\u672A\u77E5"}`):(i.error("[AutoRegister] \u2717 \u6CE8\u518C\u5931\u8D25\uFF0C\u5DF2\u8FBE\u6700\u5927\u91CD\u8BD5\u6B21\u6570"),i.error("[AutoRegister] ========================================"),i.error("[AutoRegister] \u81EA\u52A8\u6CE8\u518C\u5DF2\u542F\u7528\u4F46\u6CE8\u518C\u5931\u8D25\uFF0C\u5B9E\u4F8B\u6682\u65F6\u65E0\u6CD5\u6B63\u5E38\u5DE5\u4F5C"),i.error("[AutoRegister] \u8BF7\u68C0\u67E5\u4EE5\u4E0B\u914D\u7F6E\uFF1A"),i.error(`[AutoRegister]   - \u7528\u6237 Key (userKey): ${e.userKey?"****"+e.userKey.slice(-4):"(\u672A\u8BBE\u7F6E)"}`),i.error(`[AutoRegister]   - \u79DF\u6237 ID (tenantId): ${e.tenantId||"(\u53EF\u9009\uFF0C\u5C06\u81EA\u52A8\u63A8\u5BFC)"}`),i.error(`[AutoRegister]   - \u5B9E\u4F8B\u540D (instanceName): ${e.instanceName||"(\u4F7F\u7528\u4E3B\u673A\u540D)"}`),i.error(`[AutoRegister]   - \u8C03\u5EA6\u4E2D\u5FC3\u5730\u5740: ${e.serverUrl||u}`),i.error(`[AutoRegister]   - \u6700\u540E\u9519\u8BEF: ${c.error||"\u672A\u77E5"}`),i.error("[AutoRegister] ========================================"),i.error("[AutoRegister] \u914D\u7F6E\u6765\u6E90\uFF1A~/.aws-bridge/config.json \u6216\u73AF\u5883\u53D8\u91CF"),i.warn(`[AutoRegister] \u5C06\u5728\u540E\u53F0\u6301\u7EED\u91CD\u8BD5\u6CE8\u518C\uFF08\u6BCF ${Math.round(P()/1e3)} \u79D2\uFF09\uFF0C\u76F4\u5230\u4E0E\u8C03\u5EA6\u4E2D\u5FC3\u5EFA\u7ACB\u8FDE\u63A5`)),W(e),!1}async function ve(){const e=y();if(!e.userKey)return{success:!1,error:"userKey is required for runtime token refresh"};const r=w(),t=h(e),n=U(e);try{const o=await R.post(`${t}/api/instances/runtime-tokens/refresh`,{tenantId:e.tenantId,userKey:e.userKey,instanceId:r.instanceId,instanceName:e.instanceName,runtimeBridgeBaseUrl:n},{headers:{"Content-Type":"application/json"},timeout:1e4});if(!o.data.success||!o.data.runtimeAccessToken)return{success:!1,error:o.data.message||"scheduler did not return runtimeAccessToken"};const a=E()!==o.data.runtimeAccessToken;return K({accessToken:o.data.runtimeAccessToken,instanceId:r.instanceId,userId:o.data.userId||e.userKey,schedulerBaseUrl:t}),{success:!0,runtimeAccessToken:o.data.runtimeAccessToken,updated:a}}catch(o){const s=o;return{success:!1,error:s.response?.data?JSON.stringify(s.response.data):s.message}}}async function Te(e){const r=L(e);if(!r)return{success:!1,error:"serverUrl is required for runtime token refresh"};const t=S().find(s=>L(s.serverUrl)===r)||y();if(!t.userKey)return{success:!1,error:"userKey is required for runtime token refresh"};const n=w(),o=U(t);try{const s=await R.post(`${r}/api/instances/runtime-tokens/refresh`,{tenantId:t.tenantId,userKey:t.userKey,instanceId:n.instanceId,instanceName:t.instanceName,runtimeBridgeBaseUrl:o},{headers:{"Content-Type":"application/json"},timeout:1e4});if(!s.data.success||!s.data.runtimeAccessToken)return{success:!1,error:s.data.message||"scheduler did not return runtimeAccessToken"};const l=E(r)!==s.data.runtimeAccessToken;return q({serverBaseUrl:r,accessToken:s.data.runtimeAccessToken}),{success:!0,runtimeAccessToken:s.data.runtimeAccessToken,updated:l}}catch(s){const a=s;return{success:!1,error:a.response?.data?JSON.stringify(a.response.data):a.message}}}async function _e(){if(!c.registered||!c.instanceId)return i.info("[AutoRegister] \u5B9E\u4F8B\u672A\u6CE8\u518C\uFF0C\u65E0\u9700\u6CE8\u9500"),!0;try{const e=await ae(c.instanceId);if(e.success){i.info(`[AutoRegister] \u2713 \u6CE8\u9500\u6210\u529F: ${c.instanceId}`);const r=h(y(),c.instanceId);return v().schedulerBaseUrl&&J(r),z(),c.registered=!1,c.instanceId=void 0,!0}else return i.warn(`[AutoRegister] \u6CE8\u9500\u5931\u8D25: ${e.message}`),!1}catch(e){const r=e;return i.error(`[AutoRegister] \u6CE8\u9500\u8BF7\u6C42\u5931\u8D25: ${r.message}`),!1}}function Ue(){return{...c}}function he(){return c.registered}function Ee(){return c.instanceId}async function Ne(){const e=y(),r=c.instanceId,t=h(e,r),n={};if(r&&(n.instanceId=r),e.enabled&&(n.runtimeBridgeBaseUrl=U(e)),!n.instanceId&&!n.runtimeBridgeBaseUrl)return i.info("[AutoRegister] Bridge \u91CD\u542F\u6E05\u7406\uFF1A\u6CA1\u6709 instanceId \u6216 runtimeBridgeBaseUrl\uFF0C\u8DF3\u8FC7\u6E05\u7406"),{success:!0,agentCount:0};try{i.info("[AutoRegister] Bridge \u91CD\u542F\u6E05\u7406\uFF1A\u6B63\u5728\u901A\u77E5\u8C03\u5EA6\u4E2D\u5FC3..."),i.info(`[AutoRegister]   instanceId: ${n.instanceId||"(\u65E0)"}`),i.info(`[AutoRegister]   runtimeBridgeBaseUrl: ${n.runtimeBridgeBaseUrl||"(\u65E0)"}`);const o=await R.post(`${t}/api/instances/bridge-restart-cleanup`,n,{headers:{"Content-Type":"application/json"},timeout:1e4});return o.data.success?(i.info(`[AutoRegister] \u2713 Bridge \u91CD\u542F\u6E05\u7406\u6210\u529F\uFF1A${o.data.message}`),i.info(`[AutoRegister]   \u6E05\u7406\u4E86 ${o.data.agentCount||0} \u4E2A Agent`),{success:!0,agentCount:o.data.agentCount||0}):(i.warn(`[AutoRegister] Bridge \u91CD\u542F\u6E05\u7406\u5931\u8D25\uFF1A${o.data.message}`),{success:!1,error:o.data.message})}catch(o){const s=o,a=s.response?.data?JSON.stringify(s.response.data):s.message;return i.warn(`[AutoRegister] Bridge \u91CD\u542F\u6E05\u7406\u8BF7\u6C42\u5931\u8D25\uFF1A${a}`),{success:!1,error:a}}}export{ye as autoRegister,Ne as bridgeRestartCleanup,Ie as cancelBackgroundRegisterRetries,k as getAutoRegisterConfigFilePath,Re as getConfiguredConnectionKeys,Ee as getInstanceId,Ue as getRegistrationState,he as isRegistered,D as isTunnelConfig,_ as loadConfig,S as loadConfigs,y as loadPrimaryLifecycleConfig,ve as requestRuntimeAccessTokenRefresh,Te as requestRuntimeAccessTokenRefreshForServer,Se as resolveSchedulerBaseUrlFromToken,_e as unregister};
+