Function buildApp

packages/server/src/app.ts:22–131

()

import { tunnelAuthHook } from './middleware/tunnel-auth.js';
import { accessAuthHook } from './middleware/access-auth.js';
import { writeErrorLog } from './utils/error-log.js';
import { initializeDatabaseRuntime } from './utils/index.js';
import { runStartupDataMigrations } from './services/database-maintenance.service.js';

let hibernationScheduler: HibernationScheduler | null = null;
let memberHeartbeatScheduler: MemberHeartbeatScheduler | null = null;

const __dirname = path.dirname(fileURLToPath(import.meta.url));

export async function buildApp() {
  await initializeDatabaseRuntime();
  await runStartupDataMigrations();

  const app = Fastify({
    logger: {
      level: process.env.LOG_LEVEL || 'info',
    },
    bodyLimit: 10 * 1024 * 1024,
  });

  app.addHook('onError', async (request, _reply, error) => {
    writeErrorLog({
      level: 'error',
      source: 'server.fastify.onError',
      message: error.message,
      error,
      metadata: {
        method: request.method,
        url: request.url,
      },
    });
  });

  // 注册插件
  await app.register(cors, {
    origin: true,
  });

  await app.register(fastifyCookie);

  await app.register(multipart, {
    limits: { fileSize: 50 * 1024 * 1024 }, // 50MB
  });

  // 隧道 token 认证钩子（仅拦截经 Cloudflare 隧道的请求）
  app.addHook('onRequest', tunnelAuthHook);

  // 访问密码认证钩子（启用后保护浏览器业务入口）
  app.addHook('onRequest', accessAuthHook);

  // 注册路由
  await registerRoutes(app);

  // 显式指定前端构建目录时，托管静态文件
  if (process.env.AGENT_TOWER_WEB_DIR) {
    const webDistPath = path.resolve(
      __dirname,
      process.env.AGENT_TOWER_WEB_DIR,