feat: establish NekoNest Cloud control and relay

2026-08-12 23:25:43 +08:00
commit f27606b709
222 changed files with 71456 additions and 0 deletions
@@ -0,0 +1,45 @@
+import { authenticateRelayNode } from "@/db/relay-control-plane";
+import { claimDevice, DomainError } from "@/db/repository";
+import { apiError, readJsonMutation } from "../../../respond";
+
+export async function POST(request: Request) {
+  try {
+    await authenticateRelayNode(request);
+    const payload = await readJsonMutation<{
+      bootstrap_token?: string;
+      source_hash?: string;
+      os?: string;
+      ed25519_public?: string;
+      x25519_public?: string;
+      identity_fingerprint?: string;
+      transport_mode?: string;
+      registration_proof?: string;
+      daemon_version?: string;
+      registration_retry_key?: string;
+    }>(request);
+    const sourceHash = payload.source_hash?.trim().toLowerCase() ?? "";
+    if (!/^[0-9a-f]{64}$/u.test(sourceHash)) {
+      throw new DomainError("registration_rate_limited", "注册来源摘要无效", 429, true, 60);
+    }
+    const result = await claimDevice({
+      bootstrapToken: payload.bootstrap_token ?? "",
+      trustedSourceHash: sourceHash,
+      os: payload.os ?? "",
+      ed25519Public: payload.ed25519_public ?? "",
+      x25519Public: payload.x25519_public ?? "",
+      identityFingerprint: payload.identity_fingerprint ?? "",
+      transportMode: payload.transport_mode ?? "",
+      registrationProof: payload.registration_proof ?? "",
+      daemonVersion: payload.daemon_version ?? "",
+      registrationRetryKey: payload.registration_retry_key ?? "",
+    });
+    return Response.json(result, {
+      status: 200,
+      headers: { "cache-control": "no-store" },
+    });
+  } catch (error) {
+    const response = apiError(error);
+    response.headers.set("cache-control", "no-store");
+    return response;
+  }
+}