llm-simple-router 0.9.19 → 0.9.21

package/config/recommended-retry-rules.json

@@ -7,5 +7,6 @@
   { "name": "ZAI 速率限制 (HTTP 200, code 1302)", "status_code": 200, "body_pattern": "\"error\".*\"code\"\\s*:\\s*\"1302\"", "retry_strategy": "exponential", "retry_delay_ms": 5000, "max_retries": 10, "max_delay_ms": 60000, "providers": ["智谱"] },
   { "name": "ZAI SSE 错误 (HTTP 200, code 500)", "status_code": 200, "body_pattern": "\"error\".*\"code\"\\s*:\\s*\"500\"", "retry_strategy": "exponential", "retry_delay_ms": 5000, "max_retries": 10, "max_delay_ms": 60000, "providers": ["智谱"] },
   { "name": "ZAI SSE 错误 (HTTP 200, code 1234)", "status_code": 200, "body_pattern": "\"error\".*\"code\"\\s*:\\s*\"1234\"", "retry_strategy": "exponential", "retry_delay_ms": 5000, "max_retries": 10, "max_delay_ms": 60000, "providers": ["智谱"] },
+  { "name": "ZAI 模型过载 (HTTP 200, code 1305)", "status_code": 200, "body_pattern": "\"error\".*\"code\"\\s*:\\s*\"1305\"", "retry_strategy": "exponential", "retry_delay_ms": 5000, "max_retries": 10, "max_delay_ms": 60000, "providers": ["智谱"] },
   { "name": "KIMI 401 认证错误", "status_code": 401, "body_pattern": ".*authentication_error.*", "retry_strategy": "exponential", "retry_delay_ms": 5000, "max_retries": 3, "max_delay_ms": 60000, "providers": ["月之暗面"] }
 ]

package/dist/admin/providers.js

@@ -58,10 +58,24 @@ function cascadeProviderDisable(db, providerId) {
     return result;
 }
 function extractModelOverrides(models) {
-    const entries = models.map(m => typeof m === "string"
-        ? { name: m, patches: [] }
-        : { name: m.name, context_window: m.context_window, patches: m.patches ?? [] });
-    const overrides = models.filter((m) => typeof m !== "string" && m.context_window != null);
+    const entries = [];
+    const overrides = [];
+    for (const m of models) {
+        if (typeof m === "string") {
+            entries.push({ name: m, patches: [] });
+            continue;
+        }
+        const name = m.name ?? m.id;
+        if (!name)
+            continue;
+        const entry = { name, patches: m.patches ?? [] };
+        if (m.stream_timeout_ms != null)
+            entry.stream_timeout_ms = m.stream_timeout_ms;
+        entries.push(entry);
+        if (m.name != null && m.context_window != null) {
+            overrides.push({ name: m.name, context_window: m.context_window });
+        }
+    }
     return { entries, overrides };
 }
 const API_KEY_PREVIEW_PREFIX_LEN = 4;
@@ -74,7 +88,8 @@ const CreateProviderSchema = Type.Object({
     api_key: Type.String({ minLength: 1 }),
     models: Type.Optional(Type.Array(Type.Union([
         Type.String(),
-        Type.Object({ name: Type.String(), context_window: Type.Optional(Type.Number()), patches: Type.Optional(Type.Array(Type.String())) })
+        Type.Object({ name: Type.String(), context_window: Type.Optional(Type.Number()), patches: Type.Optional(Type.Array(Type.String())), stream_timeout_ms: Type.Optional(Type.Number({ minimum: 0, maximum: 86_400_000 })) }),
+        Type.Object({ id: Type.String(), stream_timeout_ms: Type.Optional(Type.Number({ minimum: 0, maximum: 86_400_000 })) })
     ]))),
     is_active: Type.Optional(Type.Number()),
     max_concurrency: Type.Optional(Type.Integer({ minimum: 0 })),
@@ -90,7 +105,8 @@ const UpdateProviderSchema = Type.Object({
     api_key: Type.Optional(Type.String({ minLength: 1 })),
     models: Type.Optional(Type.Array(Type.Union([
         Type.String(),
-        Type.Object({ name: Type.String(), context_window: Type.Optional(Type.Number()), patches: Type.Optional(Type.Array(Type.String())) })
+        Type.Object({ name: Type.String(), context_window: Type.Optional(Type.Number()), patches: Type.Optional(Type.Array(Type.String())), stream_timeout_ms: Type.Optional(Type.Number({ minimum: 0, maximum: 86_400_000 })) }),
+        Type.Object({ id: Type.String(), stream_timeout_ms: Type.Optional(Type.Number({ minimum: 0, maximum: 86_400_000 })) })
     ]))),
     is_active: Type.Optional(Type.Number()),
     max_concurrency: Type.Optional(Type.Integer({ minimum: 0 })),

package/dist/admin/setup.js

@@ -2,6 +2,7 @@ import { randomBytes } from "node:crypto";
 import jwt from "jsonwebtoken";
 import { getSetting, setSetting, isInitialized } from "../db/settings.js";
 import { hashPassword } from "../utils/password.js";
+import { isForwardedProtoHttps } from "../utils/cookie-secure.js";
 import { HTTP_BAD_REQUEST, HTTP_CONFLICT } from "./constants.js";
 import { API_CODE, apiError } from "./api-response.js";
 const CRYPTO_BYTES_LENGTH = 32;
@@ -38,7 +39,7 @@ export const adminSetupRoutes = (app, options, done) => {
         reply.setCookie("admin_token", token, {
             path: "/admin",
             httpOnly: true,
-            secure: process.env.NODE_ENV === "production",
+            secure: request.protocol === "https" || isForwardedProtoHttps(request),
             sameSite: "lax",
             maxAge: TOKEN_EXPIRY_SECONDS,
         });

package/dist/config/model-context.d.ts

@@ -2,11 +2,13 @@ export interface ModelInfo {
     name: string;
     context_window: number | null;
     patches: string[];
+    stream_timeout_ms?: number;
 }
 export interface ModelEntry {
     name: string;
     context_window?: number;
     patches?: string[];
+    stream_timeout_ms?: number;
 }
 export declare const MODEL_CONTEXT_WINDOWS: Record<string, number>;
 export declare const DEFAULT_CONTEXT_WINDOW = 200000;

package/dist/config/model-context.js

@@ -102,10 +102,13 @@ export function parseModels(raw) {
             const obj = item;
             if (!obj || !obj.name)
                 return null;
-            return {
+            const result = {
                 name: obj.name,
                 patches: (obj.patches ?? []).map(normalizePatchName),
             };
+            if (obj.stream_timeout_ms != null)
+                result.stream_timeout_ms = obj.stream_timeout_ms;
+            return result;
         }).filter((e) => e !== null);
     }
     catch {
@@ -113,9 +116,14 @@ export function parseModels(raw) {
     }
 }
 export function buildModelInfoList(modelEntries, overrides) {
-    return modelEntries.map(entry => ({
-        name: entry.name,
-        context_window: overrides.get(entry.name) ?? lookupContextWindow(entry.name),
-        patches: entry.patches ?? [],
-    }));
+    return modelEntries.map(entry => {
+        const info = {
+            name: entry.name,
+            context_window: overrides.get(entry.name) ?? lookupContextWindow(entry.name),
+            patches: entry.patches ?? [],
+        };
+        if (entry.stream_timeout_ms != null)
+            info.stream_timeout_ms = entry.stream_timeout_ms;
+        return info;
+    });
 }

package/dist/core/types.d.ts

@@ -71,6 +71,11 @@ export type TransportResult = {
     metrics?: MetricsResult;
     upstreamResponseHeaders?: Record<string, string>;
     sentHeaders: Record<string, string>;
+    timeoutContext?: {
+        modelId: string;
+        providerId: string;
+    };
+    timeoutMs?: number;
 } | {
     kind: "error";
     statusCode: number;

package/dist/db/index.js

@@ -84,8 +84,53 @@ export function initDatabase(dbPath) {
             throw err;
         }
     }
+    // 应用层迁移：SQL 无法安全处理的转换
+    runApplicationMigrations(db);
     return db;
 }
+/**
+ * 应用层迁移：需要 Node.js 逻辑处理的 DB 转换。
+ * 在 SQL migration 执行完毕后运行。
+ */
+function runApplicationMigrations(db) {
+    // 040: providers.models 从字符串数组转为对象数组
+    // ["glm-5.1"] → [{"id":"glm-5.1"}]
+    // 已有对象数组（{name, patches}）→ 补充 id 字段
+    const markerKey = "app_migration_040_models_object_format";
+    const done = db.prepare("SELECT value FROM settings WHERE key = ?").get(markerKey);
+    if (done)
+        return;
+    const providers = db.prepare("SELECT id, models FROM providers").all();
+    const update = db.prepare("UPDATE providers SET models = ? WHERE id = ?");
+    db.transaction(() => {
+        for (const p of providers) {
+            try {
+                const raw = JSON.parse(p.models);
+                if (!Array.isArray(raw) || raw.length === 0)
+                    continue;
+                // 已是对象数组且每个元素都有 id → 无需转换
+                if (raw.every((m) => typeof m === "object" && m !== null && "id" in m))
+                    continue;
+                const converted = raw.map((m) => {
+                    if (typeof m === "string")
+                        return { id: m };
+                    const obj = m;
+                    if (typeof obj !== "object" || obj === null)
+                        return null;
+                    // 已有 id → 保留；有 name 无 id → 用 name 作 id
+                    if ("id" in obj)
+                        return obj;
+                    if ("name" in obj)
+                        return { id: obj.name, ...obj };
+                    return obj;
+                }).filter((m) => m !== null);
+                update.run(JSON.stringify(converted), p.id);
+            }
+            catch { /* JSON parse failed — skip this provider's models conversion */ } // eslint-disable-line taste/no-silent-catch
+        }
+        db.prepare("INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)").run(markerKey, "done");
+    })();
+}
 // --- Re-export from per-table modules ---
 export { getActiveProviders, getAllProviders, getProviderById, getActiveProviderByName, getActiveProvidersWithModels, createProvider, updateProvider, deleteProvider, PROVIDER_CONCURRENCY_DEFAULTS, } from "./providers.js";
 export { getMappingGroup, getMappingGroupById, getAllMappingGroups, createMappingGroup, updateMappingGroup, deleteMappingGroup, getActiveProviderModels, resolveByProviderModel, } from "./mappings.js";

package/dist/db/migrations/040_models_object_format.sql

@@ -0,0 +1,4 @@
+-- 040_models_object_format.sql
+-- No-op: string[] → object[] conversion is handled in application code (initDatabase)
+-- See: router/src/db/index.ts runApplicationMigrations()
+SELECT 1;

package/dist/db/providers.d.ts

@@ -16,6 +16,10 @@ export interface Provider {
     created_at: string;
     updated_at: string;
 }
+/** 默认流式超时 10 分钟 */
+export declare const DEFAULT_STREAM_TIMEOUT_MS = 600000;
+/** 从 provider 的 models JSON 中查找指定模型的超时值 */
+export declare function getModelStreamTimeout(provider: Provider, backendModel: string): number;
 export declare const PROVIDER_CONCURRENCY_DEFAULTS: {
     readonly max_concurrency: 0;
     readonly queue_timeout_ms: 0;

package/dist/db/providers.js

@@ -1,5 +1,36 @@
 import { randomUUID } from "crypto";
 import { buildUpdateQuery, deleteById } from "./helpers.js";
+/** 默认流式超时 10 分钟 */
+export const DEFAULT_STREAM_TIMEOUT_MS = 600_000;
+/** 从 provider 的 models JSON 中查找指定模型的超时值 */
+export function getModelStreamTimeout(provider, backendModel) {
+    try {
+        const raw = JSON.parse(provider.models);
+        if (!Array.isArray(raw))
+            return DEFAULT_STREAM_TIMEOUT_MS;
+        for (const m of raw) {
+            if (typeof m === "string") {
+                if (m === backendModel)
+                    return DEFAULT_STREAM_TIMEOUT_MS;
+                continue;
+            }
+            const obj = m;
+            if (!obj || typeof obj !== "object")
+                continue;
+            const modelId = (obj.name ?? obj.id);
+            if (modelId === backendModel) {
+                const timeout = obj.stream_timeout_ms;
+                // stream_timeout_ms: 0 表示禁用超时，返回 Infinity；
+                // undefined/null/未设置 表示使用默认值
+                if (timeout === 0)
+                    return Number.POSITIVE_INFINITY;
+                return timeout ?? DEFAULT_STREAM_TIMEOUT_MS;
+            }
+        }
+    }
+    catch { /* ignore parse errors — models field may be empty or invalid */ } // eslint-disable-line taste/no-silent-catch
+    return DEFAULT_STREAM_TIMEOUT_MS;
+}
 export const PROVIDER_CONCURRENCY_DEFAULTS = {
     max_concurrency: 0,
     queue_timeout_ms: 0,

package/dist/middleware/admin-auth.js

@@ -3,6 +3,7 @@ import cookie from "@fastify/cookie";
 import jwt from "jsonwebtoken";
 import { isInitialized, getSetting } from "../db/settings.js";
 import { verifyPassword } from "../utils/password.js";
+import { isForwardedProtoHttps } from "../utils/cookie-secure.js";
 import { API_CODE, apiError } from "../admin/api-response.js";
 const HTTP_UNAUTHORIZED = 401;
 const adminAuthRaw = (app, options, done) => {
@@ -61,7 +62,7 @@ export const adminLoginRoutes = (app, options, done) => {
         reply.setCookie("admin_token", token, {
             path: "/admin",
             httpOnly: true,
-            secure: process.env.NODE_ENV === "production",
+            secure: request.protocol === "https" || isForwardedProtoHttps(request),
             sameSite: "lax",
             maxAge: TOKEN_EXPIRY_SECONDS,
         });

package/dist/proxy/handler/proxy-handler.js

@@ -3,6 +3,7 @@ import { HTTP_UNPROCESSABLE_ENTITY } from "../../core/constants.js";
 import { getProviderById, insertRequestLog, updateLogStreamContent, updateLogClientStatus } from "../../db/index.js";
 import { decrypt } from "../../utils/crypto.js";
 import { getSetting } from "../../db/settings.js";
+import { getModelStreamTimeout } from "../../db/providers.js";
 import { resolveMapping } from "../routing/mapping-resolver.js";
 import { SemaphoreQueueFullError, SemaphoreTimeoutError } from "@llm-router/core";
 import { logResilienceResult, collectTransportMetrics, sanitizeHeadersForLog, } from "../proxy-logging.js";
@@ -279,8 +280,9 @@ async function executeFailoverLoop(ctx) {
         const transportFn = buildTransportFn({
             provider, apiKey, body: patchedBody, cliHdrs, reply, upstreamPath: effectiveUpstreamPath, apiType: effectiveApiType,
             isStream, startTime, logId, effectiveModel,
-            streamTimeoutMs: config.STREAM_TIMEOUT_MS, tracker, matcher, request,
+            streamTimeoutMs: getModelStreamTimeout(provider, resolved.backend_model), tracker, matcher, request,
             streamLoopEnabled, formatTransform, responseTransform, injectedHeaders,
+            timeoutContext: { modelId: resolved.backend_model, providerId: provider.id },
         });
         const pipelineSnapshot = iterationSnapshot.toJSON();
         try {
@@ -293,6 +295,22 @@ async function executeFailoverLoop(ctx) {
                 matcher, logFileWriter,
             }, resilienceResult.attempts, resilienceResult.result, startTime);
             collectTransportMetrics(deps.db, apiType, resilienceResult.result, isStream, lastLogId, provider.id, resolved.backend_model, request, routerKeyId, getTransportStatusCode(resilienceResult.result));
+            // Stream timeout: send 408 error with API-specific body to client
+            if (resilienceResult.result.kind === "stream_abort" && resilienceResult.result.timeoutContext) {
+                const { modelId, providerId } = resilienceResult.result.timeoutContext;
+                const msg = `Stream timeout: no data received for ${resilienceResult.result.timeoutMs}ms (model: ${modelId}, provider: ${providerId})`;
+                const errBody = apiType === "anthropic"
+                    ? { type: "error", error: { type: "api_error", message: msg } }
+                    : { error: { message: msg, type: "server_error", code: "stream_timeout" } };
+                try {
+                    reply.raw.write(`data: ${JSON.stringify(errBody)}\n\n`);
+                }
+                catch { /* client disconnected */ } // eslint-disable-line taste/no-silent-catch
+                try {
+                    reply.raw.end();
+                }
+                catch { /* client disconnected */ } // eslint-disable-line taste/no-silent-catch
+            }
             const tr = resilienceResult.result;
             const succeeded = tr.kind === "success" || tr.kind === "stream_success" || tr.kind === "stream_abort";
             if (succeeded)

package/dist/proxy/transport/stream.d.ts

@@ -5,4 +5,7 @@ import type { StreamLoopGuard } from "@llm-router/core/loop-prevention";
 import { type BuildHeadersFn } from "./http.js";
 export declare function callStream(backend: {
     base_url: string;
-}, apiKey: string, body: Record<string, unknown>, clientHeaders: RawHeaders, reply: FastifyReply, timeoutMs: number, upstreamPath: string, buildHeaders: BuildHeadersFn, metricsTransform?: SSEMetricsTransform, checkEarlyError?: (bufferedData: string) => boolean, compatResolve?: (result: TransportResult) => void, loopGuard?: StreamLoopGuard, formatTransform?: import("stream").Transform): Promise<TransportResult>;
+}, apiKey: string, body: Record<string, unknown>, clientHeaders: RawHeaders, reply: FastifyReply, timeoutMs: number, upstreamPath: string, buildHeaders: BuildHeadersFn, metricsTransform?: SSEMetricsTransform, checkEarlyError?: (bufferedData: string) => boolean, compatResolve?: (result: TransportResult) => void, loopGuard?: StreamLoopGuard, formatTransform?: import("stream").Transform, timeoutContext?: {
+    modelId: string;
+    providerId: string;
+}, onTimeoutAbort?: () => void): Promise<TransportResult>;

package/dist/proxy/transport/stream.js

@@ -12,6 +12,8 @@ class StreamProxy {
     checkEarlyError;
     timeoutMs;
     loopGuard;
+    timeoutContext;
+    onTimeoutAbort;
     state = "BUFFERING";
     resolved = false;
     resolveFn = null;
@@ -28,7 +30,7 @@ class StreamProxy {
     // 流式阶段 SSE error 扫描缓冲（跨 chunk 边界匹配）
     sseScanBuffer = "";
     static SSE_SCAN_MAX = 8 * 1024; // eslint-disable-line no-magic-numbers -- 8KB scan buffer
-    constructor(statusCode, rawUpstreamHeaders, sentUpstreamHeaders, reply, metricsTransform, checkEarlyError, timeoutMs, loopGuard, formatTransform) {
+    constructor(statusCode, rawUpstreamHeaders, sentUpstreamHeaders, reply, metricsTransform, checkEarlyError, timeoutMs, loopGuard, formatTransform, timeoutContext, onTimeoutAbort) {
         this.statusCode = statusCode;
         this.sentUpstreamHeaders = sentUpstreamHeaders;
         this.reply = reply;
@@ -36,6 +38,8 @@ class StreamProxy {
         this.checkEarlyError = checkEarlyError;
         this.timeoutMs = timeoutMs;
         this.loopGuard = loopGuard;
+        this.timeoutContext = timeoutContext;
+        this.onTimeoutAbort = onTimeoutAbort;
         this.formatTransform = formatTransform;
         this.sseHeaders = filterHeaders(rawUpstreamHeaders);
         this.sseHeaders["Content-Type"] = "text/event-stream";
@@ -79,7 +83,7 @@ class StreamProxy {
                 result = { kind: "stream_error", ...base, body: extra.body, headers: this.sseHeaders, headersSent: this.headersSent || undefined };
                 break;
             case "stream_abort":
-                result = { kind: "stream_abort", ...base, metrics: extra.metrics };
+                result = { kind: "stream_abort", ...base, metrics: extra.metrics, timeoutContext: extra.timeoutContext, timeoutMs: extra.timeoutMs };
                 break;
         }
         // deferred 模式：先 resolve 让 handler 链路（日志写入等）在 microtask 中执行，
@@ -94,7 +98,8 @@ class StreamProxy {
         }
         else {
             // stream_abort 且 headers 已发送时，必须 end reply 避免客户端挂起
-            if (kind === "stream_abort" && this.headersSent) {
+            // 但如果有 timeoutContext，让 handler 层负责写入错误 SSE 后再 end
+            if (kind === "stream_abort" && this.headersSent && !extra.timeoutContext) {
                 // eslint-disable-next-line taste/no-silent-catch -- reply may already be destroyed, warn is sufficient
                 try {
                     this.reply.raw.end();
@@ -132,10 +137,20 @@ class StreamProxy {
     resetIdleTimer() {
         if (this.idleTimer)
             clearTimeout(this.idleTimer);
+        if (!isFinite(this.timeoutMs) || this.timeoutMs <= 0)
+            return; // 0 或 Infinity 表示禁用超时
         this.idleTimer = setTimeout(() => {
             if (this.resolved)
                 return;
-            this.terminal("stream_abort", { metrics: this.collectMetrics(false) });
+            // 在 terminal() 调用 reply.raw.end() 之前，同步写入超时错误 SSE
+            // 必须同步执行，确保 inject() 能正确收集响应体
+            if (this.onTimeoutAbort) {
+                try {
+                    this.onTimeoutAbort();
+                }
+                catch { /* reply may be destroyed */ } // eslint-disable-line taste/no-silent-catch
+            }
+            this.terminal("stream_abort", { metrics: this.collectMetrics(false), timeoutContext: this.timeoutContext, timeoutMs: this.timeoutMs });
         }, this.timeoutMs);
     }
     startStreaming() {
@@ -292,7 +307,7 @@ class StreamProxy {
     }
 }
 // ---------- callStream ----------
-export function callStream(backend, apiKey, body, clientHeaders, reply, timeoutMs, upstreamPath, buildHeaders, metricsTransform, checkEarlyError, compatResolve, loopGuard, formatTransform) {
+export function callStream(backend, apiKey, body, clientHeaders, reply, timeoutMs, upstreamPath, buildHeaders, metricsTransform, checkEarlyError, compatResolve, loopGuard, formatTransform, timeoutContext, onTimeoutAbort) {
     return new Promise((resolve) => {
         const effectiveResolve = compatResolve ?? resolve;
         const url = new URL(buildUpstreamUrl(backend.base_url, upstreamPath));
@@ -316,7 +331,7 @@ export function callStream(backend, apiKey, body, clientHeaders, reply, timeoutM
                 });
                 return;
             }
-            const proxy = new StreamProxy(statusCode, upstreamRes.headers, upstreamHeaders, reply, metricsTransform, checkEarlyError, timeoutMs, loopGuard, formatTransform);
+            const proxy = new StreamProxy(statusCode, upstreamRes.headers, upstreamHeaders, reply, metricsTransform, checkEarlyError, timeoutMs, loopGuard, formatTransform, timeoutContext, onTimeoutAbort);
             proxy.bindResolve(effectiveResolve);
             proxy.registerCloseHandler();
             // 无 early error checker 时直接开始流式传输

package/dist/proxy/transport/transport-fn.d.ts

@@ -24,5 +24,9 @@ export interface TransportFnParams {
     formatTransform?: import("stream").Transform;
     responseTransform?: (body: string) => string;
     injectedHeaders?: Record<string, string>;
+    timeoutContext?: {
+        modelId: string;
+        providerId: string;
+    };
 }
 export declare function buildTransportFn(p: TransportFnParams): (target: Target) => Promise<TransportResult>;

package/dist/proxy/transport/transport-fn.js

@@ -52,7 +52,7 @@ export function buildTransportFn(p) {
                 onContentDelta: streamLoopGuard ? (text) => streamLoopGuard.feed(text) : undefined,
             });
             const checkEarlyError = p.matcher ? (data) => p.matcher.test(UPSTREAM_SUCCESS, data) : undefined;
-            const streamResult = await callStream(p.provider, p.apiKey, p.body, p.cliHdrs, p.reply, p.streamTimeoutMs, p.upstreamPath, buildHeaders, metricsTransform, checkEarlyError, undefined, streamLoopGuard, p.formatTransform);
+            const streamResult = await callStream(p.provider, p.apiKey, p.body, p.cliHdrs, p.reply, p.streamTimeoutMs, p.upstreamPath, buildHeaders, metricsTransform, checkEarlyError, undefined, streamLoopGuard, p.formatTransform, p.timeoutContext);
             const m = (streamResult.kind === "stream_success" || streamResult.kind === "stream_abort")
                 ? streamResult.metrics : undefined;
             if (m)

package/dist/utils/cookie-secure.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyRequest } from "fastify";
+/** 判断请求是否经过 HTTPS（直连或反向代理） */
+export declare function isForwardedProtoHttps(request: FastifyRequest): boolean;

package/dist/utils/cookie-secure.js

@@ -0,0 +1,8 @@
+/** 判断请求是否经过 HTTPS（直连或反向代理） */
+export function isForwardedProtoHttps(request) {
+    if (request.protocol === "https")
+        return true;
+    const forwarded = request.headers["x-forwarded-proto"];
+    const value = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+    return value === "https";
+}

package/frontend-dist/assets/CardContent-DmBQARma.js

@@ -0,0 +1 @@
+import{$ as e,Vt as t,X as n,dt as r,mt as i,r as a,zt as o}from"./button-DRFSckEU.js";var s=[`data-size`],c=e({__name:`Card`,props:{class:{type:[Boolean,null,String,Object,Array]},size:{default:`default`}},setup(e){let c=e;return(l,u)=>(r(),n(`div`,{"data-slot":`card`,"data-size":e.size,class:t(o(a)(`ring-foreground/10 bg-card text-card-foreground gap-4 overflow-hidden rounded-lg py-4 text-sm ring-1 has-data-[slot=card-footer]:pb-0 has-[>img:first-child]:pt-0 data-[size=sm]:gap-3 data-[size=sm]:py-3 data-[size=sm]:has-data-[slot=card-footer]:pb-0 *:[img:first-child]:rounded-t-lg *:[img:last-child]:rounded-b-lg group/card flex flex-col`,c.class))},[i(l.$slots,`default`)],10,s))}}),l=e({__name:`CardContent`,props:{class:{type:[Boolean,null,String,Object,Array]}},setup(e){let s=e;return(e,c)=>(r(),n(`div`,{"data-slot":`card-content`,class:t(o(a)(`px-4 group-data-[size=sm]/card:px-3`,s.class))},[i(e.$slots,`default`)],2))}});export{c as n,l as t};

package/frontend-dist/assets/CardTitle-DgwtSVqy.js

@@ -0,0 +1 @@
+import{$ as e,Vt as t,X as n,dt as r,mt as i,r as a,zt as o}from"./button-DRFSckEU.js";var s=e({__name:`CardHeader`,props:{class:{type:[Boolean,null,String,Object,Array]}},setup(e){let s=e;return(e,c)=>(r(),n(`div`,{"data-slot":`card-header`,class:t(o(a)(`gap-1 rounded-t-xl px-4 group-data-[size=sm]/card:px-3 [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3 group/card-header @container/card-header grid auto-rows-min items-start has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto]`,s.class))},[i(e.$slots,`default`)],2))}}),c=e({__name:`CardTitle`,props:{class:{type:[Boolean,null,String,Object,Array]}},setup(e){let s=e;return(e,c)=>(r(),n(`div`,{"data-slot":`card-title`,class:t(o(a)(`text-base leading-snug font-medium group-data-[size=sm]/card:text-sm cn-font-heading`,s.class))},[i(e.$slots,`default`)],2))}});export{s as n,c as t};

package/frontend-dist/assets/Checkbox-DgWzyASL.js

@@ -0,0 +1 @@
+import{$ as e,H as t,Ht as n,J as r,K as i,Q as a,U as o,Y as s,dt as c,gt as l,i as u,m as d,mt as f,o as p,ot as m,r as h,tt as g,wt as _,x as v,zt as y}from"./button-DRFSckEU.js";import{t as b}from"./VisuallyHiddenInput-BPy71v35.js";import{t as x}from"./RovingFocusItem-BnqO1JTY.js";import{B as S,G as C,H as w,L as T,Y as E,nt as D,q as O}from"./index-Dr-BkaVu.js";function k(e,t){return C(e)?!1:Array.isArray(e)?e.some(e=>E(e,t)):E(e,t)}var[A,j]=O(`CheckboxGroupRoot`);function M(e){return e===`indeterminate`}function N(e){return M(e)?`indeterminate`:e?`checked`:`unchecked`}var[P,F]=O(`CheckboxRoot`),I=e({inheritAttrs:!1,__name:`CheckboxRoot`,props:{defaultValue:{type:null,required:!1},modelValue:{type:null,required:!1,default:void 0},disabled:{type:Boolean,required:!1},value:{type:null,required:!1,default:`on`},id:{type:String,required:!1},trueValue:{type:null,required:!1,default:()=>!0},falseValue:{type:null,required:!1,default:()=>!1},asChild:{type:Boolean,required:!1},as:{type:null,required:!1,default:`button`},name:{type:String,required:!1},required:{type:Boolean,required:!1}},emits:[`update:modelValue`],setup(e,{emit:n}){let a=e,h=n,{forwardRef:g,currentElement:v}=p(),S=A(null),T=d(a,`modelValue`,h,{defaultValue:a.defaultValue??a.falseValue,passive:a.modelValue===void 0}),D=i(()=>S?.disabled.value||a.disabled),O=i(()=>E(T.value,a.trueValue)),j=i(()=>C(S?.modelValue.value)?T.value===`indeterminate`?`indeterminate`:O.value:k(S.modelValue.value,a.value));function P(){if(C(S?.modelValue.value))T.value===`indeterminate`?T.value=a.trueValue:T.value=O.value?a.falseValue:a.trueValue;else{let e=[...S.modelValue.value||[]];if(k(e,a.value)){let t=e.findIndex(e=>E(e,a.value));e.splice(t,1)}else e.push(a.value);S.modelValue.value=e}}let I=w(v),L=i(()=>a.id&&v.value?document.querySelector(`[for="${a.id}"]`)?.innerText:void 0);return F({disabled:D,state:j}),(e,n)=>(c(),r(l(y(S)?.rovingFocus.value?y(x):y(u)),m(e.$attrs,{id:e.id,ref:y(g),role:`checkbox`,"as-child":e.asChild,as:e.as,type:e.as===`button`?`button`:void 0,"aria-checked":y(M)(j.value)?`mixed`:j.value,"aria-required":e.required,"aria-label":e.$attrs[`aria-label`]||L.value,"data-state":y(N)(j.value),"data-disabled":D.value?``:void 0,disabled:D.value,focusable:y(S)?.rovingFocus.value?!D.value:void 0,onKeydown:t(o(()=>{},[`prevent`]),[`enter`]),onClick:P}),{default:_(()=>[f(e.$slots,`default`,{modelValue:y(T),state:j.value}),y(I)&&e.name&&!y(S)?(c(),r(y(b),{key:0,type:`checkbox`,checked:!!j.value,name:e.name,value:e.value,disabled:D.value,required:e.required},null,8,[`checked`,`name`,`value`,`disabled`,`required`])):s(`v-if`,!0)]),_:3},16,[`id`,`as-child`,`as`,`type`,`aria-checked`,`aria-required`,`aria-label`,`data-state`,`data-disabled`,`disabled`,`focusable`,`onKeydown`]))}}),L=e({__name:`CheckboxIndicator`,props:{forceMount:{type:Boolean,required:!1},asChild:{type:Boolean,required:!1},as:{type:null,required:!1,default:`span`}},setup(e){let{forwardRef:t}=p(),n=P();return(e,i)=>(c(),r(y(T),{present:e.forceMount||y(M)(y(n).state.value)||y(n).state.value===!0},{default:_(()=>[a(y(u),m({ref:y(t),"data-state":y(N)(y(n).state.value),"data-disabled":y(n).disabled.value?``:void 0,style:{pointerEvents:`none`},"as-child":e.asChild,as:e.as},e.$attrs),{default:_(()=>[f(e.$slots,`default`)]),_:3},16,[`data-state`,`data-disabled`,`as-child`,`as`])]),_:3},8,[`present`]))}}),R=e({__name:`Checkbox`,props:{defaultValue:{},modelValue:{},disabled:{type:Boolean},value:{},id:{},trueValue:{},falseValue:{},asChild:{type:Boolean},as:{},name:{},required:{type:Boolean},class:{type:[Boolean,null,String,Object,Array]}},emits:[`update:modelValue`],setup(e,{emit:t}){let i=e,o=t,s=S(v(i,`class`),o);return(e,t)=>(c(),r(y(I),m({"data-slot":`checkbox`},y(s),{class:y(h)(`border-input dark:bg-input/30 data-[state=checked]:bg-primary data-[state=checked]:text-primary-foreground dark:data-[state=checked]:bg-primary data-[state=checked]:border-primary aria-invalid:aria-checked:border-primary aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 flex size-4 items-center justify-center rounded-md border transition-colors group-has-disabled/field:opacity-50 focus-visible:ring-3 aria-invalid:ring-3 peer relative shrink-0 outline-none after:absolute after:-inset-x-3 after:-inset-y-2 disabled:cursor-not-allowed disabled:opacity-50`,i.class)}),{default:_(t=>[a(y(L),{"data-slot":`checkbox-indicator`,class:`[&>svg]:size-3.5 grid place-content-center text-current transition-none`},{default:_(()=>[f(e.$slots,`default`,n(g(t)),()=>[a(y(D))])]),_:2},1024)]),_:3},16,[`class`]))}});export{R as t};

package/frontend-dist/assets/CollapsibleContent-BjJrE5cf.js

@@ -0,0 +1 @@
+import{$ as e,Ht as t,J as n,K as r,Lt as i,Mt as a,Q as o,Y as s,d as c,dt as l,i as u,lt as d,m as f,mt as p,o as m,ot as h,st as g,tt as _,wt as v,xt as y,zt as b}from"./button-DRFSckEU.js";import{B as x,L as S,q as C,z as w}from"./index-Dr-BkaVu.js";var[T,E]=C(`CollapsibleRoot`),D=e({__name:`CollapsibleRoot`,props:{defaultOpen:{type:Boolean,required:!1,default:!1},open:{type:Boolean,required:!1,default:void 0},disabled:{type:Boolean,required:!1},unmountOnHide:{type:Boolean,required:!1,default:!0},asChild:{type:Boolean,required:!1},as:{type:null,required:!1}},emits:[`update:open`],setup(e,{expose:t,emit:r}){let a=e,o=f(a,`open`,r,{defaultValue:a.defaultOpen,passive:a.open===void 0}),{disabled:s,unmountOnHide:c}=i(a);return E({contentId:``,disabled:s,open:o,unmountOnHide:c,onOpenToggle:()=>{s.value||(o.value=!o.value)}}),t({open:o}),m(),(e,t)=>(l(),n(b(u),{as:e.as,"as-child":a.asChild,"data-state":b(o)?`open`:`closed`,"data-disabled":b(s)?``:void 0},{default:v(()=>[p(e.$slots,`default`,{open:b(o)})]),_:3},8,[`as`,`as-child`,`data-state`,`data-disabled`]))}}),O=e({inheritAttrs:!1,__name:`CollapsibleContent`,props:{forceMount:{type:Boolean,required:!1},asChild:{type:Boolean,required:!1},as:{type:null,required:!1}},emits:[`contentFound`],setup(e,{emit:t}){let i=e,f=t,_=T();_.contentId||=w(void 0,`reka-collapsible-content`);let x=a(),{forwardRef:C,currentElement:E}=m(),D=a(0),O=a(0),k=r(()=>_.open.value),A=a(k.value),j=a();y(()=>[k.value,x.value?.present],async()=>{await g();let e=E.value;if(!e)return;j.value=j.value||{transitionDuration:e.style.transitionDuration,animationName:e.style.animationName},e.style.transitionDuration=`0s`,e.style.animationName=`none`;let t=e.getBoundingClientRect();O.value=t.height,D.value=t.width,A.value||(e.style.transitionDuration=j.value.transitionDuration,e.style.animationName=j.value.animationName)},{immediate:!0});let M=r(()=>A.value&&_.open.value);return d(()=>{requestAnimationFrame(()=>{A.value=!1})}),c(E,`beforematch`,e=>{requestAnimationFrame(()=>{_.onOpenToggle(),f(`contentFound`)})}),(e,t)=>(l(),n(b(S),{ref_key:`presentRef`,ref:x,present:e.forceMount||b(_).open.value,"force-mount":!0},{default:v(({present:t})=>[o(b(u),h(e.$attrs,{id:b(_).contentId,ref:b(C),"as-child":i.asChild,as:e.as,hidden:t?void 0:b(_).unmountOnHide.value?``:`until-found`,"data-state":M.value?void 0:b(_).open.value?`open`:`closed`,"data-disabled":b(_).disabled?.value?``:void 0,style:{"--reka-collapsible-content-height":`${O.value}px`,"--reka-collapsible-content-width":`${D.value}px`}}),{default:v(()=>[!b(_).unmountOnHide.value||t?p(e.$slots,`default`,{key:0}):s(`v-if`,!0)]),_:2},1040,[`id`,`as-child`,`as`,`hidden`,`data-state`,`data-disabled`,`style`])]),_:3},8,[`present`]))}}),k=e({__name:`Collapsible`,props:{defaultOpen:{type:Boolean},open:{type:Boolean},disabled:{type:Boolean},unmountOnHide:{type:Boolean},asChild:{type:Boolean},as:{}},emits:[`update:open`],setup(e,{emit:r}){let i=x(e,r);return(e,r)=>(l(),n(b(D),h({"data-slot":`collapsible`},b(i)),{default:v(n=>[p(e.$slots,`default`,t(_(n)))]),_:3},16))}}),A=e({__name:`CollapsibleContent`,props:{forceMount:{type:Boolean},asChild:{type:Boolean},as:{}},setup(e){let t=e;return(e,r)=>(l(),n(b(O),h({"data-slot":`collapsible-content`},t),{default:v(()=>[p(e.$slots,`default`)]),_:3},16))}});export{k as n,T as r,A as t};

package/frontend-dist/assets/CollapsibleTrigger-C73cozLg.js

@@ -0,0 +1 @@
+import{$ as e,J as t,dt as n,i as r,mt as i,o as a,ot as o,wt as s,zt as c}from"./button-DRFSckEU.js";import{r as l}from"./CollapsibleContent-BjJrE5cf.js";var u=e({__name:`CollapsibleTrigger`,props:{asChild:{type:Boolean,required:!1},as:{type:null,required:!1,default:`button`}},setup(e){let o=e;a();let u=l();return(e,a)=>(n(),t(c(r),{type:e.as===`button`?`button`:void 0,as:e.as,"as-child":o.asChild,"aria-controls":c(u).contentId,"aria-expanded":c(u).open.value,"data-state":c(u).open.value?`open`:`closed`,"data-disabled":c(u).disabled?.value?``:void 0,disabled:c(u).disabled?.value,onClick:c(u).onOpenToggle},{default:s(()=>[i(e.$slots,`default`)]),_:3},8,[`type`,`as`,`as-child`,`aria-controls`,`aria-expanded`,`data-state`,`data-disabled`,`disabled`,`onClick`]))}}),d=e({__name:`CollapsibleTrigger`,props:{asChild:{type:Boolean},as:{}},setup(e){let r=e;return(e,a)=>(n(),t(c(u),o({"data-slot":`collapsible-trigger`},r),{default:s(()=>[i(e.$slots,`default`)]),_:3},16))}});export{d as t};