{"repo": "canwhite/krebs", "files": {"server/index.ts": {"31959c65fbcff64269b9d89f7bb900b39c6c2bb4": {"t": 1785745560.6046867, "n": 11482, "h": "2e2ae255a0ca17bc", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  lruSessionManager,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\nconst corsHeaders = {\n  \"Access-Control-Allow-Origin\": \"*\",\n  \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n  \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3333\", 10) : 3333;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: lruSessionManager.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = lruSessionManager.getSession(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                lruSessionManager.removeSession(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 retry timer，防止 zombie retry\n      const retryState = (ws as any).data?.retryState;\n      if (retryState?.timer) {\n        clearTimeout(retryState.timer);\n        console.log(`[WebSocket] 已清理 retry timer: ${sessionId}`);\n      }\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "6be8f40a68d4b41a6b69b9f0eafa490d7fabac5f": {"t": 1785754227.791595, "n": 11482, "h": "2e2ae255a0ca17bc", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  lruSessionManager,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\nconst corsHeaders = {\n  \"Access-Control-Allow-Origin\": \"*\",\n  \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n  \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3333\", 10) : 3333;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: lruSessionManager.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = lruSessionManager.getSession(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                lruSessionManager.removeSession(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 retry timer，防止 zombie retry\n      const retryState = (ws as any).data?.retryState;\n      if (retryState?.timer) {\n        clearTimeout(retryState.timer);\n        console.log(`[WebSocket] 已清理 retry timer: ${sessionId}`);\n      }\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "a8a60ab17556ac7892fb0ef0d518aa626ad55c97": {"t": 1785754229.2014751, "n": 11432, "h": "faff97bf5224d9e5", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\nconst corsHeaders = {\n  \"Access-Control-Allow-Origin\": \"*\",\n  \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n  \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3333\", 10) : 3333;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 retry timer，防止 zombie retry\n      const retryState = (ws as any).data?.retryState;\n      if (retryState?.timer) {\n        clearTimeout(retryState.timer);\n        console.log(`[WebSocket] 已清理 retry timer: ${sessionId}`);\n      }\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "ebfd14dfe830f26b683b13ee244e197786aa8faa": {"t": 1785754232.4628396, "n": 11191, "h": "75e7ce303bff831f", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\nconst corsHeaders = {\n  \"Access-Control-Allow-Origin\": \"*\",\n  \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n  \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3333\", 10) : 3333;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "8bc20ed65905e71eb8a25d9506362a57ea4e165b": {"t": 1785754233.6754313, "n": 11196, "h": "5503789aa2b16075", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { corsHeaders } from \"./routes/index.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createAuthHandler,\n  createStopHandler,\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3333\", 10) : 3333;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        authHandler: createAuthHandler(),\n        stopHandler: createStopHandler(),\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "59644dde2f1071678750eeb93ebd9efc1b8ae856": {"t": 1785754235.2250237, "n": 11196, "h": "6d42c881f531b7a8", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { corsHeaders } from \"./routes/index.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createAuthHandler,\n  createStopHandler,\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3000\", 10) : 3000;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        authHandler: createAuthHandler(),\n        stopHandler: createStopHandler(),\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId, undefined, true)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "9e60303c4170ff3c4c96883a0120cccea11891e7": {"t": 1785754236.400973, "n": 11179, "h": "417f46cb00155396", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { corsHeaders } from \"./routes/index.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport { luaRuntime } from \"../tools/lua-runtime.js\";\nimport { loadLuaToolDefinitions } from \"../tools/lua-tools-registry.js\";\nimport { registerTool } from \"../tools/index.js\";\nimport { join } from \"node:path\";\nimport {\n  createAuthHandler,\n  createStopHandler,\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Lua Tools Init ====================\nconst luaToolsPath = join(process.cwd(), \"lua-tools\");\n\nasync function initLuaTools() {\n  try {\n    await luaRuntime.initialize();\n    const definitions = await loadLuaToolDefinitions(luaToolsPath);\n    for (const def of definitions) {\n      registerTool(def);\n    }\n    console.log(`[Lua] 已加载 ${definitions.length} 个工具`);\n  } catch (error: any) {\n    console.warn(`[Lua] 初始化失败: ${error.message}`);\n  }\n}\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3000\", 10) : 3000;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\n(async () => {\n  // 等待 Lua 工具初始化完成\n  await initLuaTools();\n\n  const server = Bun.serve({\n    port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        authHandler: createAuthHandler(),\n        stopHandler: createStopHandler(),\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n})();\n"}, "5bf4551dfbae356fe96729f74403846bdba7b2f5": {"t": 1785754237.6283906, "n": 10432, "h": "08bffec5b7c42c01", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { corsHeaders } from \"./routes/index.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\nimport { createWsRouter, type WsRouter } from \"./ws-router.js\";\nimport {\n  createAuthHandler,\n  createStopHandler,\n  createSwitchSessionHandler,\n  createPromptHandler,\n} from \"./handlers/index.js\";\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3000\", 10) : 3000;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\nconst server = Bun.serve({\n  port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n\n      // 创建路由器（每个连接一个实例）\n      const router: WsRouter = createWsRouter({\n        authHandler: createAuthHandler(),\n        stopHandler: createStopHandler(),\n        switchSessionHandler: createSwitchSessionHandler(),\n        promptHandler: createPromptHandler(),\n      });\n\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n        router,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    message(ws: any, message: any) {\n      const router: WsRouter = (ws as any).data?.router;\n      if (!router) {\n        ws.send(JSON.stringify({ type: \"error\", message: \"Router 未初始化\" }));\n        return;\n      }\n\n      // 认证检查（auth 消息在路由器内部处理）\n      const data = JSON.parse(message.toString()) as { type?: string };\n      if (data.type !== \"auth\") {\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        // 检查 session 是否存在\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n      }\n\n      // 路由消息\n      router.handleMessage(ws, message);\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n"}, "e8bd8fec1e42b0996007b2903dba15ed4cefe374": {"t": 1785754238.9209096, "n": 15991, "h": "22dd16cc8ece2a65", "c": "/// <reference types=\"bun-types\" />\nimport { MonitorLogger } from \"../lib/logger.js\";\nimport { extractFromSessionText } from \"../lib/session-content-extractor.js\";\nimport {\n  saveSessionMeta,\n  getAllSessions,\n  getSessionById,\n} from \"../db/index.js\";\nimport {\n  createRuntime,\n  getSession,\n  deleteSession,\n  generateSessionId,\n  sessions,\n  MODEL_CONFIG,\n} from \"./session-service.js\";\nimport { subscribeToSessionEvents } from \"./event-subscription.js\";\nimport { cleanupThinkParserState } from \"./think-parser.js\";\nimport { extractToken, isValidToken, initToken } from \"./auth.js\";\nimport { corsHeaders } from \"./routes/index.js\";\nimport { handleApiMessage } from \"./routes/messages.js\";\nimport {\n  handleCreateSession,\n  handleDeleteSession,\n  getSessionMessages,\n} from \"./routes/sessions.js\";\nimport { handleInternalAuth, handleExternalAuth } from \"./routes/auth.js\";\n\n// ==================== Init ====================\nif (!MODEL_CONFIG.apiKey) {\n  console.error(\"错误：未设置 API Key 环境变量\");\n  console.error(\"请设置以下之一：\");\n  console.error(\"  API_KEY=your_key_here           # 推荐，通用配置\");\n  console.error(\"  DEEPSEEK_API_KEY=your_key_here  # 兼容旧配置\");\n  console.error(\"  ANTHROPIC_API_KEY=your_key_here # 使用 Claude\");\n  process.exit(1);\n}\n\ninitToken();\n\n// ==================== Constants ====================\nconst PORT = process.env.PORT ? parseInt(process.env.PORT ?? \"3000\", 10) : 3000;\n\nfunction getContentType(filePath: string): string {\n  const ext = filePath.split(\".\").pop();\n  const types: Record<string, string> = {\n    js: \"application/javascript; charset=utf-8\",\n    ts: \"application/javascript; charset=utf-8\",\n    tsx: \"application/javascript; charset=utf-8\",\n    jsx: \"application/javascript; charset=utf-8\",\n    css: \"text/css; charset=utf-8\",\n    html: \"text/html; charset=utf-8\",\n    json: \"application/json; charset=utf-8\",\n    svg: \"image/svg+xml\",\n    png: \"image/png\",\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    gif: \"image/gif\",\n    ico: \"image/x-icon\",\n  };\n  return types[ext || \"\"] || \"application/octet-stream\";\n}\n\n// ==================== Server ====================\nconst server = Bun.serve({\n  port: PORT,\n  async fetch(req: Request) {\n    const url = new URL(req.url);\n\n    if (req.method === \"OPTIONS\") {\n      return new Response(null, { headers: corsHeaders });\n    }\n\n    // 内部认证接口（本地前端自动认证）\n    if (url.pathname === \"/api/auth/internal\") {\n      return handleInternalAuth();\n    }\n\n    // 外部认证接口（需要手动传递 token）\n    if (url.pathname === \"/api/auth\" && req.method === \"POST\") {\n      return handleExternalAuth(req);\n    }\n\n    if (url.pathname === \"/ws\") {\n      const upgraded = server.upgrade(req);\n      if (upgraded) {\n        return undefined;\n      }\n      return new Response(\"WebSocket upgrade failed\", { status: 400 });\n    }\n\n    // API 接口需要 Token 验证（除了认证接口）\n    if (\n      url.pathname.startsWith(\"/api/\") &&\n      !url.pathname.startsWith(\"/api/auth\")\n    ) {\n      const token = extractToken(req);\n      if (!isValidToken(token)) {\n        return Response.json(\n          {\n            error: \"未授权，请先认证\",\n            hint: \"使用 POST /api/auth 并提供 token，或使用 Authorization: Bearer <token> header\",\n          },\n          { status: 401, headers: corsHeaders },\n        );\n      }\n    }\n\n    if (url.pathname === \"/api/messages\" && req.method === \"POST\") {\n      return handleApiMessage(req);\n    }\n\n    if (url.pathname === \"/api/sessions\" && req.method === \"POST\") {\n      return handleCreateSession();\n    }\n\n    if (url.pathname === \"/api/sessions/list\" && req.method === \"GET\") {\n      const allSessions = getAllSessions();\n      return Response.json({ sessions: allSessions }, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"GET\") {\n      const id = url.pathname.split(\"/\").pop()!;\n      const sessionMessages = await getSessionMessages(id);\n      if (!sessionMessages) {\n        return Response.json(\n          { error: \"Session 不存在\" },\n          { status: 404, headers: corsHeaders },\n        );\n      }\n      return Response.json(sessionMessages, { headers: corsHeaders });\n    }\n\n    if (url.pathname.startsWith(\"/api/sessions/\") && req.method === \"DELETE\") {\n      const sessionId = url.pathname.split(\"/\").pop()!;\n      return handleDeleteSession(sessionId);\n    }\n\n    if (url.pathname === \"/health\" && req.method === \"GET\") {\n      return Response.json(\n        { status: \"ok\", sessions: sessions.size },\n        { headers: corsHeaders },\n      );\n    }\n\n    // Serve chat UI\n    if (url.pathname === \"/\" && req.method === \"GET\") {\n      return new Response(Bun.file(\"./frontend/chat.html\"), {\n        headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n      });\n    }\n\n    // Serve frontend static files with Bun's transpiler\n    if (url.pathname.startsWith(\"/frontend/\")) {\n      const filePath = \".\" + url.pathname;\n      const file = Bun.file(filePath);\n\n      if (await file.exists()) {\n        // For TSX/JSX files, transpile on the fly\n        if (filePath.endsWith(\".tsx\") || filePath.endsWith(\".jsx\")) {\n          const transpiled = await Bun.build({\n            entrypoints: [filePath],\n            target: \"browser\",\n            minify: false,\n            jsx: {\n              runtime: \"automatic\",\n              importSource: \"react\",\n            },\n          });\n\n          return new Response(transpiled.outputs[0], {\n            headers: {\n              \"Content-Type\": \"application/javascript; charset=utf-8\",\n              \"Access-Control-Allow-Origin\": \"*\",\n            },\n          });\n        }\n\n        return new Response(file, {\n          headers: {\n            \"Content-Type\": getContentType(filePath),\n            \"Access-Control-Allow-Origin\": \"*\",\n          },\n        });\n      }\n    }\n\n    return new Response(\"Not Found\", { status: 404, headers: corsHeaders });\n  },\n  websocket: {\n    open(ws: any) {\n      console.log(\"[WebSocket] 新连接已建立\");\n      const sessionId = generateSessionId();\n\n      // Create logger instance\n      const logger = MonitorLogger.createInstance();\n      (ws as any).data = {\n        sessionId,\n        logger,\n        authenticated: false,\n      };\n\n      logger.log(`[SESSION] Session ${sessionId} started, WebSocket opened`);\n\n      createRuntime(sessionId)\n        .then((result) => {\n          const runtime = result.runtime;\n          const session = runtime.session;\n          (ws as any).data.runtime = runtime;\n          (ws as any).data.session = session;\n          (ws as any).data.firstMessageSaved = false;\n          ws.send(\n            JSON.stringify({\n              type: \"connected\",\n              sessionId,\n              message: \"WebSocket 连接已建立\",\n            }),\n          );\n\n          logger.log(`[SESSION] Session created successfully`);\n\n          // 使用共享的事件订阅工厂\n          const unsubscribe = subscribeToSessionEvents(ws, session, logger);\n          (ws as any).data.unsubscribe = unsubscribe;\n        })\n        .catch((error) => {\n          console.error(`[WebSocket] Session 创建失败: ${error.message}`);\n          logger.log(`[ERROR] Session 创建失败: ${error.message}`);\n\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 创建失败，请重试\",\n            }),\n          );\n\n          const tempSessionId = (ws as any).data?.sessionId;\n          if (tempSessionId) {\n            const tempRuntime = sessions.get(tempSessionId);\n            if (tempRuntime) {\n              try {\n                tempRuntime.dispose();\n                sessions.delete(tempSessionId);\n                console.log(\n                  `[WebSocket] 已清理失败的 runtime: ${tempSessionId}`,\n                );\n              } catch (e) {\n                console.error(`[WebSocket] 清理失败 runtime 时出错:`, e);\n              }\n            }\n          }\n\n          ws.close(1011, \"Session creation failed\");\n        });\n    },\n    async message(ws: any, message: any) {\n      try {\n        const data = JSON.parse(message.toString()) as {\n          type?: string;\n          message?: string;\n          sessionId?: string;\n          token?: string;\n        };\n\n        // 认证消息处理（本地前端直接信任）\n        if (data.type === \"auth\") {\n          (ws as any).data.authenticated = true;\n          console.log(\"[WebSocket] 认证成功（本地前端）\");\n          ws.send(JSON.stringify({ type: \"auth_success\" }));\n          return;\n        }\n\n        // 其他消息需要先认证\n        if (!(ws as any).data?.authenticated) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"未认证，请先发送 auth 消息\",\n            }),\n          );\n          ws.close(1008, \"Unauthorized\");\n          return;\n        }\n\n        const sessionId = (ws as any).data?.sessionId;\n        const runtime = getSession(sessionId!);\n\n        if (!runtime) {\n          ws.send(\n            JSON.stringify({\n              type: \"error\",\n              message: \"Session 不存在\",\n            }),\n          );\n          return;\n        }\n\n        const session = runtime.session;\n\n        if (data.type === \"stop\") {\n          console.log(`[WebSocket] 收到停止请求`);\n          if (session.isStreaming) {\n            await session.abort();\n            console.log(`[WebSocket] 已停止 AI 回复`);\n          }\n          return;\n        }\n\n        if (data.type === \"switch_session\" && data.sessionId) {\n          if ((ws as any).data.isSwitchingSession) {\n            ws.send(\n              JSON.stringify({\n                type: \"error\",\n                message: \"Session 切换中，请稍后\",\n              }),\n            );\n            return;\n          }\n\n          console.log(`[WebSocket] 切换 session 到: ${data.sessionId}`);\n\n          const sessionMeta = getSessionById(data.sessionId);\n          if (!sessionMeta || !sessionMeta.file_path) {\n            ws.send(\n              JSON.stringify({\n                type: \"error\",\n                message: \"Session 不存在或文件路径无效\",\n              }),\n            );\n            return;\n          }\n\n          (ws as any).data.isSwitchingSession = true;\n\n          try {\n            const runtime = (ws as any).data.runtime as any;\n            if (!runtime) {\n              throw new Error(\"Runtime 不存在\");\n            }\n\n            // 取消旧的事件订阅\n            const oldUnsubscribe = (ws as any).data.unsubscribe;\n            if (oldUnsubscribe) {\n              try {\n                oldUnsubscribe();\n                console.log(`[WebSocket] 已取消旧 session 的事件订阅`);\n              } catch (e) {\n                console.error(`[WebSocket] 取消旧订阅失败:`, e);\n              }\n            }\n\n            const result = await runtime.switchSession(sessionMeta.file_path);\n            if (!result.cancelled) {\n              // 更新 session 引用\n              const newSession = runtime.session;\n\n              // 使用共享的事件订阅工厂\n              const unsubscribe = subscribeToSessionEvents(\n                ws,\n                newSession,\n                (ws as any).data.logger,\n              );\n              (ws as any).data.unsubscribe = unsubscribe;\n\n              // P1-1 修复: 检查目标 sessionId 是否已存在，清理旧 runtime\n              const existingRuntime = sessions.get(data.sessionId);\n              if (existingRuntime && existingRuntime !== runtime) {\n                try {\n                  existingRuntime.dispose();\n                  console.log(\n                    `[WebSocket] 已清理被覆盖的 runtime: ${data.sessionId}`,\n                  );\n                } catch (e) {\n                  console.error(`[WebSocket] 清理旧 runtime 失败:`, e);\n                }\n              }\n\n              // Update sessions Map mapping\n              sessions.set(data.sessionId, runtime);\n\n              // Remove old sessionId mapping if different\n              if (sessionId && sessionId !== data.sessionId) {\n                sessions.delete(sessionId);\n              }\n\n              // Update the sessionId in ws.data\n              (ws as any).data.sessionId = data.sessionId;\n              (ws as any).data.firstMessageSaved = true;\n              (ws as any).data.session = newSession;\n\n              ws.send(\n                JSON.stringify({\n                  type: \"session_switched\",\n                  sessionId: data.sessionId,\n                }),\n              );\n              console.log(`[WebSocket] Session 切换成功: ${data.sessionId}`);\n            } else {\n              ws.send(\n                JSON.stringify({\n                  type: \"error\",\n                  message: \"切换 session 被取消\",\n                }),\n              );\n            }\n          } catch (error: any) {\n            console.error(`[WebSocket] 切换 session 出错:`, error);\n            ws.send(\n              JSON.stringify({\n                type: \"error\",\n                message: \"切换 session 出错，请重试\",\n              }),\n            );\n          } finally {\n            (ws as any).data.isSwitchingSession = false;\n          }\n        } else if (data.type === \"prompt\" && typeof data.message === \"string\") {\n          console.log(`[WebSocket] 收到消息: ${data.message}`);\n\n          const firstMessageSaved = (ws as any).data?.firstMessageSaved;\n          if (!firstMessageSaved) {\n            const filePath = session.sessionFile;\n\n            if (filePath) {\n              saveSessionMeta(sessionId!, data.message, filePath);\n              (ws as any).data.firstMessageSaved = true;\n            }\n          }\n\n          if (session.isStreaming) {\n            console.log(`[WebSocket] 会话正在响应中，将新消息加入队列`);\n\n            ws.send(\n              JSON.stringify({\n                type: \"question_queued\",\n                question: data.message,\n              }),\n            );\n\n            session.followUp(data.message).catch((error) => {\n              const errorMessage = error?.message || \"未知错误\";\n              const wsLogger = (ws as any).data?.logger;\n              if (wsLogger) {\n                wsLogger.log(`[ERROR] followUp 失败: ${errorMessage}`);\n              }\n              console.error(`[WebSocket] followUp 失败:`, error);\n\n              ws.send(\n                JSON.stringify({\n                  type: \"error\",\n                  message: \"消息处理失败，请重试\",\n                }),\n              );\n            });\n          } else {\n            session.prompt(data.message).catch((error) => {\n              const errorMessage = error?.message || \"未知错误\";\n              const wsLogger = (ws as any).data?.logger;\n              if (wsLogger) {\n                wsLogger.log(`[ERROR] prompt 失败: ${errorMessage}`);\n              }\n              console.error(`[WebSocket] prompt 失败:`, error);\n\n              ws.send(\n                JSON.stringify({\n                  type: \"error\",\n                  message: \"消息处理失败，请重试\",\n                }),\n              );\n            });\n          }\n        }\n      } catch (error: any) {\n        ws.send(\n          JSON.stringify({\n            type: \"error\",\n            message: `解析消息失败: ${error.message}`,\n          }),\n        );\n      }\n    },\n    close(ws: any) {\n      const sessionId = (ws as any).data?.sessionId;\n      const logger = (ws as any).data?.logger;\n      console.log(`[WebSocket] 连接已关闭: ${sessionId}`);\n\n      // 清理 think 解析器状态\n      cleanupThinkParserState(ws);\n\n      // 清理事件订阅，防止内存泄漏\n      const unsubscribe = (ws as any).data?.unsubscribe;\n      if (unsubscribe) {\n        try {\n          unsubscribe();\n          console.log(`[WebSocket] 已清理事件订阅: ${sessionId}`);\n        } catch (error) {\n          console.error(`[WebSocket] 清理订阅失败: ${error}`);\n        }\n      }\n\n      if (logger) {\n        try {\n          logger.log(`[SESSION] Session ${sessionId} WebSocket closed`);\n          logger.close();\n        } catch (error) {\n          console.error(`[WebSocket] Logger 关闭失败:`, error);\n        }\n      }\n\n      // 清理 runtime (P0 修复)\n      if (sessionId) {\n        deleteSession(sessionId);\n      }\n\n      // 清理 ws.data 引用\n      (ws as any).data = null;\n    },\n  },\n});\n\nconsole.log(\"=\".repeat(60));\nconsole.log(\"🚀 Krebs Gateway 已启动！\");\nconsole.log(\"=\".repeat(60));\nconsole.log(`📡 HTTP: http://localhost:${server.port}`);\nconsole.log(`🔌 WebSocket: ws://localhost:${server.port}/ws`);\nconsole.log(\"=\".repeat(60));\n"}}}}