Method handleRequest

src/main/core/httpServer.ts:125–167

(req: IncomingMessage, res: ServerResponse)

  }

  private async handleRequest(req: IncomingMessage, res: ServerResponse): Promise<void> {
    if (req.method === 'OPTIONS') {
      res.writeHead(204, {
        'Access-Control-Allow-Origin': '*',
        'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
        'Access-Control-Allow-Headers': 'Content-Type, Authorization'
      })
      res.end()
      return
    }

    const url = req.url || '/'

    // GET / 无需认证，返回欢迎信息
    if (req.method === 'GET' && url === '/') {
      this.sendJson(res, 200, { code: 0, message: 'Hello ZTools' })
      return
    }

    if (req.method !== 'POST') {
      this.sendJson(res, 405, { code: 405, message: '仅支持 POST 请求' })
      return
    }

    const authHeader = req.headers['authorization']
    const token = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null
    if (!token || token !== this.config.apiKey) {
      this.sendJson(res, 401, { code: 401, message: 'API 密钥无效' })
      return
    }

    try {
      const body = await this.readBody(req)
      const result = await this.routeRequest(url, body)
      this.sendJson(res, 200, result)
    } catch (error) {
      console.error('[HttpServer] 请求处理失败:', error)
      this.sendJson(res, 500, {
        code: 500,
        message: error instanceof Error ? error.message : '内部服务器错误'
      })
    }
  }

  private readBody(req: IncomingMessage): Promise<Record<string, unknown>> {
    return new Promise((resolve, reject) => {