管理端全部功能跑通

EdgeAdmin/internal/web/actions/default/httpdns/apps/app.go

@@ -17,6 +17,10 @@ func (this *AppAction) Init() {
 func (this *AppAction) RunGet(params struct {
 	AppId int64
 }) {
-	app := pickApp(params.AppId)
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 	this.RedirectURL("/httpdns/apps/domains?appId=" + strconv.FormatInt(app.GetInt64("id"), 10))
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/appSettings.go

@@ -5,8 +5,9 @@ import (
 
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/httpdnsutils"
-	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/policies"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
 	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/maps"
 )
 
 type AppSettingsAction struct {
@@ -22,33 +23,45 @@ func (this *AppSettingsAction) RunGet(params struct {
 	Section string
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
-	app := pickApp(params.AppId)
 
-	// 顶部 tabbar
-	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), params.AppId, "settings")
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
+	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), app.GetInt64("id"), "settings")
 
-	// 当前选中的 section
 	section := params.Section
 	if len(section) == 0 {
 		section = "basic"
 	}
 	this.Data["activeSection"] = section
-	appIdStr := strconv.FormatInt(params.AppId, 10)
-	this.Data["leftMenuItems"] = []map[string]interface{}{
+
+	appIDStr := strconv.FormatInt(app.GetInt64("id"), 10)
+	this.Data["leftMenuItems"] = []maps.Map{
 		{
 			"name":     "基础配置",
-			"url":      "/httpdns/apps/app/settings?appId=" + appIdStr + "&section=basic",
+			"url":      "/httpdns/apps/app/settings?appId=" + appIDStr + "&section=basic",
 			"isActive": section == "basic",
 		},
 		{
 			"name":     "认证与密钥",
-			"url":      "/httpdns/apps/app/settings?appId=" + appIdStr + "&section=auth",
+			"url":      "/httpdns/apps/app/settings?appId=" + appIDStr + "&section=auth",
 			"isActive": section == "auth",
 		},
 	}
 
-	settings := loadAppSettings(app)
-	this.Data["clusters"] = policies.LoadAvailableDeployClusters()
+	settings := maps.Map{
+		"appId":               app.GetString("appId"),
+		"appStatus":           app.GetBool("isOn"),
+		"primaryClusterId":    app.GetInt64("primaryClusterId"),
+		"backupClusterId":     app.GetInt64("backupClusterId"),
+		"signEnabled":         app.GetBool("signEnabled"),
+		"signSecretPlain":     app.GetString("signSecretPlain"),
+		"signSecretMasked":    app.GetString("signSecretMasked"),
+		"signSecretUpdatedAt": app.GetString("signSecretUpdated"),
+	}
 	this.Data["app"] = app
 	this.Data["settings"] = settings
 	this.Show()
@@ -57,36 +70,37 @@ func (this *AppSettingsAction) RunGet(params struct {
 func (this *AppSettingsAction) RunPost(params struct {
 	AppId int64
 
-	AppStatus        bool
-	PrimaryClusterId int64
-	BackupClusterId  int64
+	AppStatus bool
 
 	Must *actions.Must
 	CSRF *actionutils.CSRF
 }) {
-	params.Must.Field("appId", params.AppId).Gt(0, "please select app")
-	params.Must.Field("primaryClusterId", params.PrimaryClusterId).Gt(0, "please select primary cluster")
-	if params.BackupClusterId > 0 && params.BackupClusterId == params.PrimaryClusterId {
-		this.FailField("backupClusterId", "backup cluster must be different from primary cluster")
+	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
+
+	appResp, err := this.RPC().HTTPDNSAppRPC().FindHTTPDNSApp(this.AdminContext(), &pb.FindHTTPDNSAppRequest{
+		AppDbId: params.AppId,
+	})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	if appResp.GetApp() == nil {
+		this.Fail("找不到对应的应用")
+		return
 	}
 
-	app := pickApp(params.AppId)
-	settings := loadAppSettings(app)
-	settings["appStatus"] = params.AppStatus
-	settings["primaryClusterId"] = params.PrimaryClusterId
-	settings["backupClusterId"] = params.BackupClusterId
+	_, err = this.RPC().HTTPDNSAppRPC().UpdateHTTPDNSApp(this.AdminContext(), &pb.UpdateHTTPDNSAppRequest{
+		AppDbId:          params.AppId,
+		Name:             appResp.GetApp().GetName(),
+		PrimaryClusterId: appResp.GetApp().GetPrimaryClusterId(),
+		BackupClusterId:  appResp.GetApp().GetBackupClusterId(),
+		IsOn:             params.AppStatus,
+		UserId:           appResp.GetApp().GetUserId(),
+	})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 
-	// SNI strategy is fixed to level2 empty.
-	settings["sniPolicy"] = "level2"
-	settings["level2Mode"] = "empty"
-	settings["publicSniDomain"] = ""
-	settings["echFallbackPolicy"] = "level2"
-	settings["ecsMode"] = "off"
-	settings["ecsIPv4Prefix"] = 24
-	settings["ecsIPv6Prefix"] = 56
-	settings["pinningMode"] = "off"
-	settings["sanMode"] = "off"
-
-	saveAppSettings(app.GetInt64("id"), settings)
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/appSettingsResetSignSecret.go

@@ -2,6 +2,7 @@ package apps
 
 import (
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
 	"github.com/iwind/TeaGo/actions"
 )
 
@@ -13,11 +14,16 @@ func (this *AppSettingsResetSignSecretAction) RunPost(params struct {
 	AppId int64
 
 	Must *actions.Must
-	CSRF *actionutils.CSRF
 }) {
 	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
 
-	app := pickApp(params.AppId)
-	resetSignSecret(app)
+	_, err := this.RPC().HTTPDNSAppRPC().ResetHTTPDNSAppSignSecret(this.AdminContext(), &pb.ResetHTTPDNSAppSignSecretRequest{
+		AppDbId: params.AppId,
+	})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/appSettingsToggleSignEnabled.go

@@ -2,6 +2,7 @@ package apps
 
 import (
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
 	"github.com/iwind/TeaGo/actions"
 )
 
@@ -14,14 +15,17 @@ func (this *AppSettingsToggleSignEnabledAction) RunPost(params struct {
 	IsOn  int
 
 	Must *actions.Must
-	CSRF *actionutils.CSRF
 }) {
 	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
 
-	app := pickApp(params.AppId)
-	settings := loadAppSettings(app)
-	settings["signEnabled"] = params.IsOn == 1
-	saveAppSettings(app.GetInt64("id"), settings)
+	_, err := this.RPC().HTTPDNSAppRPC().UpdateHTTPDNSAppSignEnabled(this.AdminContext(), &pb.UpdateHTTPDNSAppSignEnabledRequest{
+		AppDbId:     params.AppId,
+		SignEnabled: params.IsOn == 1,
+	})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/appSettings_store.go

@@ -1,223 +0,0 @@
-package apps
-
-import (
-	"fmt"
-	"sync"
-	"time"
-
-	"github.com/iwind/TeaGo/maps"
-)
-
-var appSettingsStore = struct {
-	sync.RWMutex
-	data map[int64]maps.Map
-}{
-	data: map[int64]maps.Map{},
-}
-
-func defaultAppSettings(app maps.Map) maps.Map {
-	signSecretPlain := randomPlainSecret("ss")
-	return maps.Map{
-		"appId":               app.GetString("appId"),
-		"primaryClusterId":    app.GetInt64("clusterId"),
-		"backupClusterId":     int64(0),
-		"signSecretPlain":     signSecretPlain,
-		"signSecretMasked":    maskSecret(signSecretPlain),
-		"signSecretUpdatedAt": "2026-02-20 12:30:00",
-		"appStatus":           app.GetBool("isOn"),
-		"defaultTTL":          30,
-		"fallbackTimeoutMs":   300,
-		"sniPolicy":           "level2",
-		"level2Mode":          "empty",
-		"publicSniDomain":     "",
-		"echFallbackPolicy":   "level2",
-		"ecsMode":             "off",
-		"ecsIPv4Prefix":       24,
-		"ecsIPv6Prefix":       56,
-		"pinningMode":         "off",
-		"sanMode":             "off",
-		"signEnabled":         true,
-	}
-}
-
-func cloneSettings(settings maps.Map) maps.Map {
-	return maps.Map{
-		"appId":               settings.GetString("appId"),
-		"primaryClusterId":    settings.GetInt64("primaryClusterId"),
-		"backupClusterId":     settings.GetInt64("backupClusterId"),
-		"signSecretPlain":     settings.GetString("signSecretPlain"),
-		"signSecretMasked":    settings.GetString("signSecretMasked"),
-		"signSecretUpdatedAt": settings.GetString("signSecretUpdatedAt"),
-		"appStatus":           settings.GetBool("appStatus"),
-		"defaultTTL":          settings.GetInt("defaultTTL"),
-		"fallbackTimeoutMs":   settings.GetInt("fallbackTimeoutMs"),
-		"sniPolicy":           settings.GetString("sniPolicy"),
-		"level2Mode":          settings.GetString("level2Mode"),
-		"publicSniDomain":     settings.GetString("publicSniDomain"),
-		"echFallbackPolicy":   settings.GetString("echFallbackPolicy"),
-		"ecsMode":             settings.GetString("ecsMode"),
-		"ecsIPv4Prefix":       settings.GetInt("ecsIPv4Prefix"),
-		"ecsIPv6Prefix":       settings.GetInt("ecsIPv6Prefix"),
-		"pinningMode":         settings.GetString("pinningMode"),
-		"sanMode":             settings.GetString("sanMode"),
-		"signEnabled":         settings.GetBool("signEnabled"),
-	}
-}
-
-func loadAppSettings(app maps.Map) maps.Map {
-	appId := app.GetInt64("id")
-	appSettingsStore.RLock()
-	settings, ok := appSettingsStore.data[appId]
-	appSettingsStore.RUnlock()
-	if ok {
-		if ensureSettingsFields(settings) {
-			saveAppSettings(appId, settings)
-		}
-		return cloneSettings(settings)
-	}
-
-	settings = defaultAppSettings(app)
-	saveAppSettings(appId, settings)
-	return cloneSettings(settings)
-}
-
-func saveAppSettings(appId int64, settings maps.Map) {
-	appSettingsStore.Lock()
-	appSettingsStore.data[appId] = cloneSettings(settings)
-	appSettingsStore.Unlock()
-}
-
-func deleteAppSettings(appId int64) {
-	appSettingsStore.Lock()
-	delete(appSettingsStore.data, appId)
-	appSettingsStore.Unlock()
-}
-
-func resetSignSecret(app maps.Map) maps.Map {
-	settings := loadAppSettings(app)
-	signSecretPlain := randomPlainSecret("ss")
-	settings["signSecretPlain"] = signSecretPlain
-	settings["signSecretMasked"] = maskSecret(signSecretPlain)
-	settings["signSecretUpdatedAt"] = nowDateTime()
-	saveAppSettings(app.GetInt64("id"), settings)
-	return settings
-}
-
-func nowDateTime() string {
-	return time.Now().Format("2006-01-02 15:04:05")
-}
-
-func randomPlainSecret(prefix string) string {
-	suffix := time.Now().UnixNano() & 0xffff
-	return fmt.Sprintf("%s_%016x", prefix, suffix)
-}
-
-func maskSecret(secret string) string {
-	if len(secret) < 4 {
-		return "******"
-	}
-
-	prefix := ""
-	for i := 0; i < len(secret); i++ {
-		if secret[i] == '_' {
-			prefix = secret[:i+1]
-			break
-		}
-	}
-	if len(prefix) == 0 {
-		prefix = secret[:2]
-	}
-
-	if len(secret) <= 8 {
-		return prefix + "xxxx"
-	}
-	return prefix + "xxxxxxxx" + secret[len(secret)-4:]
-}
-
-func ensureSettingsFields(settings maps.Map) bool {
-	changed := false
-
-	if settings.GetInt64("primaryClusterId") <= 0 {
-		settings["primaryClusterId"] = int64(1)
-		changed = true
-	}
-	if settings.GetInt64("backupClusterId") < 0 {
-		settings["backupClusterId"] = int64(0)
-		changed = true
-	}
-	if settings.GetInt64("backupClusterId") > 0 && settings.GetInt64("backupClusterId") == settings.GetInt64("primaryClusterId") {
-		settings["backupClusterId"] = int64(0)
-		changed = true
-	}
-
-	signSecretPlain := settings.GetString("signSecretPlain")
-	if len(signSecretPlain) == 0 {
-		signSecretPlain = randomPlainSecret("ss")
-		settings["signSecretPlain"] = signSecretPlain
-		changed = true
-	}
-	if len(settings.GetString("signSecretMasked")) == 0 {
-		settings["signSecretMasked"] = maskSecret(signSecretPlain)
-		changed = true
-	}
-	if len(settings.GetString("signSecretUpdatedAt")) == 0 {
-		settings["signSecretUpdatedAt"] = nowDateTime()
-		changed = true
-	}
-
-	if len(settings.GetString("sniPolicy")) == 0 {
-		settings["sniPolicy"] = "level2"
-		changed = true
-	} else if settings.GetString("sniPolicy") != "level2" {
-		settings["sniPolicy"] = "level2"
-		changed = true
-	}
-	if settings.GetString("level2Mode") != "empty" {
-		settings["level2Mode"] = "empty"
-		changed = true
-	}
-	if len(settings.GetString("publicSniDomain")) > 0 {
-		settings["publicSniDomain"] = ""
-		changed = true
-	}
-	if len(settings.GetString("echFallbackPolicy")) == 0 {
-		settings["echFallbackPolicy"] = "level2"
-		changed = true
-	} else if settings.GetString("echFallbackPolicy") != "level2" {
-		settings["echFallbackPolicy"] = "level2"
-		changed = true
-	}
-	if settings.GetString("ecsMode") != "off" {
-		settings["ecsMode"] = "off"
-		changed = true
-	}
-	if settings.GetInt("ecsIPv4Prefix") <= 0 {
-		settings["ecsIPv4Prefix"] = 24
-		changed = true
-	}
-	if settings.GetInt("ecsIPv6Prefix") <= 0 {
-		settings["ecsIPv6Prefix"] = 56
-		changed = true
-	}
-	if settings.GetString("pinningMode") != "off" {
-		settings["pinningMode"] = "off"
-		changed = true
-	}
-	if settings.GetString("sanMode") != "off" {
-		settings["sanMode"] = "off"
-		changed = true
-	}
-
-	return changed
-}
-
-// LoadAppSettingsByAppID exposes app settings for other httpdns sub-modules
-// such as sandbox mock responses.
-func LoadAppSettingsByAppID(appID string) maps.Map {
-	for _, app := range mockApps() {
-		if app.GetString("appId") == appID {
-			return loadAppSettings(app)
-		}
-	}
-	return nil
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/create.go

@@ -0,0 +1,92 @@
+package apps
+
+import (
+	"strconv"
+	"time"
+
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/maps"
+)
+
+type CreateAction struct {
+	actionutils.ParentAction
+}
+
+func (this *CreateAction) Init() {
+	this.Nav("", "", "create")
+}
+
+func (this *CreateAction) RunGet(params struct{}) {
+	clusterResp, err := this.RPC().HTTPDNSClusterRPC().FindAllHTTPDNSClusters(this.AdminContext(), &pb.FindAllHTTPDNSClustersRequest{})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	clusters := make([]maps.Map, 0, len(clusterResp.GetClusters()))
+	for _, cluster := range clusterResp.GetClusters() {
+		clusters = append(clusters, maps.Map{
+			"id":   cluster.GetId(),
+			"name": cluster.GetName(),
+		})
+	}
+	this.Data["clusters"] = clusters
+
+	defaultPrimaryClusterId := int64(0)
+	for _, cluster := range clusterResp.GetClusters() {
+		if cluster.GetIsDefault() {
+			defaultPrimaryClusterId = cluster.GetId()
+			break
+		}
+	}
+	if defaultPrimaryClusterId <= 0 && len(clusters) > 0 {
+		defaultPrimaryClusterId = clusters[0].GetInt64("id")
+	}
+	this.Data["defaultPrimaryClusterId"] = defaultPrimaryClusterId
+
+	defaultBackupClusterId := int64(0)
+	for _, cluster := range clusters {
+		clusterId := cluster.GetInt64("id")
+		if clusterId > 0 && clusterId != defaultPrimaryClusterId {
+			defaultBackupClusterId = clusterId
+			break
+		}
+	}
+	this.Data["defaultBackupClusterId"] = defaultBackupClusterId
+
+	this.Show()
+}
+
+func (this *CreateAction) RunPost(params struct {
+	Name             string
+	PrimaryClusterId int64
+	BackupClusterId  int64
+	UserId           int64
+
+	Must *actions.Must
+	CSRF *actionutils.CSRF
+}) {
+	params.Must.Field("name", params.Name).Require("请输入应用名称")
+	params.Must.Field("primaryClusterId", params.PrimaryClusterId).Gt(0, "请输入主服务集群")
+	if params.BackupClusterId > 0 && params.BackupClusterId == params.PrimaryClusterId {
+		this.FailField("backupClusterId", "备用服务集群必须和主服务集群不一致")
+	}
+
+	createResp, err := this.RPC().HTTPDNSAppRPC().CreateHTTPDNSApp(this.AdminContext(), &pb.CreateHTTPDNSAppRequest{
+		Name:             params.Name,
+		AppId:            "app" + strconv.FormatInt(time.Now().UnixNano()%1_000_000_000_000, 36),
+		PrimaryClusterId: params.PrimaryClusterId,
+		BackupClusterId:  params.BackupClusterId,
+		IsOn:             true,
+		SignEnabled:      true,
+		UserId:           params.UserId,
+	})
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
+	this.Data["appId"] = createResp.GetAppDbId()
+	this.Success()
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/createPopup.go

@@ -1,63 +0,0 @@
-package apps
-
-import (
-	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
-	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/policies"
-	"github.com/iwind/TeaGo/actions"
-	"github.com/iwind/TeaGo/maps"
-)
-
-type CreatePopupAction struct {
-	actionutils.ParentAction
-}
-
-func (this *CreatePopupAction) Init() {
-	this.Nav("", "", "")
-}
-
-func (this *CreatePopupAction) RunGet(params struct{}) {
-	clusters := policies.LoadAvailableDeployClusters()
-	this.Data["clusters"] = clusters
-
-	defaultPrimaryClusterId := policies.LoadDefaultClusterID()
-	if defaultPrimaryClusterId <= 0 && len(clusters) > 0 {
-		defaultPrimaryClusterId = clusters[0].GetInt64("id")
-	}
-	this.Data["defaultPrimaryClusterId"] = defaultPrimaryClusterId
-
-	defaultBackupClusterId := int64(0)
-	for _, cluster := range clusters {
-		clusterId := cluster.GetInt64("id")
-		if clusterId > 0 && clusterId != defaultPrimaryClusterId {
-			defaultBackupClusterId = clusterId
-			break
-		}
-	}
-	this.Data["defaultBackupClusterId"] = defaultBackupClusterId
-
-	// Mock users for dropdown
-	this.Data["users"] = []maps.Map{
-		{"id": int64(1), "name": "User A", "username": "zhangsan"},
-		{"id": int64(2), "name": "User B", "username": "lisi"},
-		{"id": int64(3), "name": "User C", "username": "wangwu"},
-	}
-
-	this.Show()
-}
-
-func (this *CreatePopupAction) RunPost(params struct {
-	Name             string
-	PrimaryClusterId int64
-	BackupClusterId  int64
-	UserId           int64
-
-	Must *actions.Must
-	CSRF *actionutils.CSRF
-}) {
-	params.Must.Field("name", params.Name).Require("please input app name")
-	params.Must.Field("primaryClusterId", params.PrimaryClusterId).Gt(0, "please select primary cluster")
-	if params.BackupClusterId > 0 && params.BackupClusterId == params.PrimaryClusterId {
-		this.FailField("backupClusterId", "backup cluster must be different from primary cluster")
-	}
-	this.Success()
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/customRecords.go

@@ -20,25 +20,32 @@ func (this *CustomRecordsAction) RunGet(params struct {
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
 
-	app := pickApp(params.AppId)
-	// 自定义解析属于域名管理子页，顶部沿用应用 tabbar（高亮域名列表）
-	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), params.AppId, "domains")
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), app.GetInt64("id"), "domains")
 
-	domains := mockDomains(app.GetInt64("id"))
-	domain := pickDomainFromDomains(domains, params.DomainId)
-	domainName := domain.GetString("name")
+	domains, err := listDomainMaps(this.Parent(), app.GetInt64("id"), "")
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	domain := findDomainMap(domains, params.DomainId)
 
 	records := make([]maps.Map, 0)
-	for _, record := range loadCustomRecords(app.GetInt64("id")) {
-		if len(domainName) > 0 && record.GetString("domain") != domainName {
-			continue
+	if domain.GetInt64("id") > 0 {
+		records, err = listCustomRuleMaps(this.Parent(), domain.GetInt64("id"))
+		if err != nil {
+			this.ErrorPage(err)
+			return
+		}
+		for _, record := range records {
+			record["domain"] = domain.GetString("name")
+			record["lineText"] = buildLineText(record)
+			record["recordValueText"] = buildRecordValueText(record)
 		}
-		records = append(records, record)
-	}
-
-	for _, record := range records {
-		record["lineText"] = buildLineText(record)
-		record["recordValueText"] = buildRecordValueText(record)
 	}
 
 	this.Data["app"] = app
@@ -47,17 +54,3 @@ func (this *CustomRecordsAction) RunGet(params struct {
 	this.Show()
 }
 
-func pickDomainFromDomains(domains []maps.Map, domainID int64) maps.Map {
-	if len(domains) == 0 {
-		return maps.Map{}
-	}
-	if domainID <= 0 {
-		return domains[0]
-	}
-	for _, domain := range domains {
-		if domain.GetInt64("id") == domainID {
-			return domain
-		}
-	}
-	return domains[0]
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/customRecordsCreatePopup.go

@@ -6,6 +6,7 @@ import (
 	"strings"
 
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
 	"github.com/iwind/TeaGo/actions"
 	"github.com/iwind/TeaGo/maps"
 )
@@ -23,11 +24,18 @@ func (this *CustomRecordsCreatePopupAction) RunGet(params struct {
 	DomainId int64
 	RecordId int64
 }) {
-	app := pickApp(params.AppId)
-	this.Data["app"] = app
-	domains := mockDomains(app.GetInt64("id"))
-	domain := pickDomainFromDomains(domains, params.DomainId)
-	this.Data["domain"] = domain
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
+	domains, err := listDomainMaps(this.Parent(), app.GetInt64("id"), "")
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	domain := findDomainMap(domains, params.DomainId)
 
 	record := maps.Map{
 		"id":              int64(0),
@@ -45,77 +53,35 @@ func (this *CustomRecordsCreatePopupAction) RunGet(params struct {
 		"recordItemsJson": `[{"type":"A","value":"","weight":100}]`,
 	}
 
-	if params.RecordId > 0 {
-		existing := findCustomRecord(app.GetInt64("id"), params.RecordId)
-		if len(existing) > 0 {
-			record["id"] = existing.GetInt64("id")
-			if len(record.GetString("domain")) == 0 {
-				record["domain"] = existing.GetString("domain")
+	if params.RecordId > 0 && domain.GetInt64("id") > 0 {
+		rules, err := listCustomRuleMaps(this.Parent(), domain.GetInt64("id"))
+		if err != nil {
+			this.ErrorPage(err)
+			return
+		}
+		for _, rule := range rules {
+			if rule.GetInt64("id") != params.RecordId {
+				continue
 			}
-
-			record["lineScope"] = strings.TrimSpace(existing.GetString("lineScope"))
-			record["lineCarrier"] = strings.TrimSpace(existing.GetString("lineCarrier"))
-			record["lineRegion"] = strings.TrimSpace(existing.GetString("lineRegion"))
-			record["lineProvince"] = strings.TrimSpace(existing.GetString("lineProvince"))
-			record["lineContinent"] = strings.TrimSpace(existing.GetString("lineContinent"))
-			record["lineCountry"] = strings.TrimSpace(existing.GetString("lineCountry"))
-			record["ruleName"] = existing.GetString("ruleName")
-			record["weightEnabled"] = existing.GetBool("weightEnabled")
-			record["ttl"] = existing.GetInt("ttl")
-			record["isOn"] = existing.GetBool("isOn")
-
-			recordItems := make([]maps.Map, 0)
-			recordType := strings.ToUpper(strings.TrimSpace(existing.GetString("recordType")))
-			values, _ := existing["recordValues"].([]maps.Map)
-			for _, item := range values {
-				itemType := strings.ToUpper(strings.TrimSpace(item.GetString("type")))
-				if len(itemType) == 0 {
-					itemType = recordType
-				}
-				if itemType != "A" && itemType != "AAAA" {
-					itemType = "A"
-				}
-
-				recordItems = append(recordItems, maps.Map{
-					"type":   itemType,
-					"value":  strings.TrimSpace(item.GetString("value")),
-					"weight": item.GetInt("weight"),
-				})
-			}
-			if len(recordItems) == 0 {
-				recordItems = append(recordItems, maps.Map{
-					"type":   "A",
-					"value":  "",
-					"weight": 100,
-				})
-			}
-			record["recordItemsJson"] = marshalJSON(recordItems, "[]")
+			record["id"] = rule.GetInt64("id")
+			record["domain"] = domain.GetString("name")
+			record["lineScope"] = rule.GetString("lineScope")
+			record["lineCarrier"] = defaultLineField(rule.GetString("lineCarrier"))
+			record["lineRegion"] = defaultLineField(rule.GetString("lineRegion"))
+			record["lineProvince"] = defaultLineField(rule.GetString("lineProvince"))
+			record["lineContinent"] = defaultLineField(rule.GetString("lineContinent"))
+			record["lineCountry"] = defaultLineField(rule.GetString("lineCountry"))
+			record["ruleName"] = rule.GetString("ruleName")
+			record["weightEnabled"] = rule.GetBool("weightEnabled")
+			record["ttl"] = rule.GetInt("ttl")
+			record["isOn"] = rule.GetBool("isOn")
+			record["recordItemsJson"] = marshalJSON(rule["recordValues"], "[]")
+			break
 		}
 	}
 
-	if record.GetString("lineScope") != "china" && record.GetString("lineScope") != "overseas" {
-		if len(strings.TrimSpace(record.GetString("lineContinent"))) > 0 || len(strings.TrimSpace(record.GetString("lineCountry"))) > 0 {
-			record["lineScope"] = "overseas"
-		} else {
-			record["lineScope"] = "china"
-		}
-	}
-	if len(record.GetString("lineCarrier")) == 0 {
-		record["lineCarrier"] = "默认"
-	}
-	if len(record.GetString("lineRegion")) == 0 {
-		record["lineRegion"] = "默认"
-	}
-	if len(record.GetString("lineProvince")) == 0 {
-		record["lineProvince"] = "默认"
-	}
-	if len(record.GetString("lineContinent")) == 0 {
-		record["lineContinent"] = "默认"
-	}
-	if len(record.GetString("lineCountry")) == 0 {
-		record["lineCountry"] = "默认"
-	}
-
+	this.Data["app"] = app
+	this.Data["domain"] = domain
 	this.Data["record"] = record
 	this.Data["isEditing"] = params.RecordId > 0
 	this.Show()
@@ -138,40 +104,26 @@ func (this *CustomRecordsCreatePopupAction) RunPost(params struct {
 	RuleName        string
 	RecordItemsJSON string
 	WeightEnabled   bool
-	TTL             int
+	Ttl             int
 	IsOn            bool
 
 	Must *actions.Must
 	CSRF *actionutils.CSRF
 }) {
-	params.Must.Field("appId", params.AppId).Gt(0, "please select app")
+	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
+	params.Must.Field("domainId", params.DomainId).Gt(0, "请选择所属域名")
 
-	params.Domain = strings.TrimSpace(params.Domain)
 	params.LineScope = strings.ToLower(strings.TrimSpace(params.LineScope))
-	params.RuleName = strings.TrimSpace(params.RuleName)
-	params.RecordItemsJSON = strings.TrimSpace(params.RecordItemsJSON)
-
-	domain := maps.Map{}
-	if params.DomainId > 0 {
-		domain = pickDomainFromDomains(mockDomains(params.AppId), params.DomainId)
-	}
-	if len(domain) > 0 {
-		params.Domain = strings.TrimSpace(domain.GetString("name"))
-	}
-	if len(params.Domain) == 0 {
-		this.Fail("please select domain")
-		return
-	}
-
 	if params.LineScope != "china" && params.LineScope != "overseas" {
 		params.LineScope = "china"
 	}
+	params.RuleName = strings.TrimSpace(params.RuleName)
 	if len(params.RuleName) == 0 {
-		this.Fail("please input rule name")
+		this.Fail("请输入规则名称")
 		return
 	}
-	if params.TTL <= 0 || params.TTL > 86400 {
-		this.Fail("ttl should be in 1-86400")
+	if params.Ttl <= 0 || params.Ttl > 86400 {
+		this.Fail("TTL值必须在 1-86400 范围内")
 		return
 	}
 
@@ -181,11 +133,11 @@ func (this *CustomRecordsCreatePopupAction) RunPost(params struct {
 		return
 	}
 	if len(recordValues) == 0 {
-		this.Fail("please input record values")
+		this.Fail("请输入解析记录值")
 		return
 	}
 	if len(recordValues) > 10 {
-		this.Fail("record values should be <= 10")
+		this.Fail("单个规则最多只能添加 10 条解析记录")
 		return
 	}
 
@@ -209,7 +161,6 @@ func (this *CustomRecordsCreatePopupAction) RunPost(params struct {
 	if len(lineCountry) == 0 {
 		lineCountry = "默认"
 	}
-
 	if params.LineScope == "overseas" {
 		lineCarrier = ""
 		lineRegion = ""
@@ -219,40 +170,57 @@ func (this *CustomRecordsCreatePopupAction) RunPost(params struct {
 		lineCountry = ""
 	}
 
-	recordType := recordValues[0].GetString("type")
-	if len(recordType) == 0 {
-		recordType = "A"
+	records := make([]*pb.HTTPDNSRuleRecord, 0, len(recordValues))
+	for i, item := range recordValues {
+		records = append(records, &pb.HTTPDNSRuleRecord{
+			Id:          0,
+			RuleId:      0,
+			RecordType:  item.GetString("type"),
+			RecordValue: item.GetString("value"),
+			Weight:      int32(item.GetInt("weight")),
+			Sort:        int32(i + 1),
+		})
 	}
 
-	saveCustomRecord(params.AppId, maps.Map{
-		"id":            params.RecordId,
-		"domain":        params.Domain,
-		"lineScope":     params.LineScope,
-		"lineCarrier":   lineCarrier,
-		"lineRegion":    lineRegion,
-		"lineProvince":  lineProvince,
-		"lineContinent": lineContinent,
-		"lineCountry":   lineCountry,
-		"ruleName":      params.RuleName,
-		"sdnsParams":    []maps.Map{},
-		"recordType":    recordType,
-		"recordValues":  recordValues,
-		"weightEnabled": params.WeightEnabled,
-		"ttl":           params.TTL,
-		"isOn":          params.IsOn,
-	})
+	rule := &pb.HTTPDNSCustomRule{
+		Id:            params.RecordId,
+		AppId:         params.AppId,
+		DomainId:      params.DomainId,
+		RuleName:      params.RuleName,
+		LineScope:     params.LineScope,
+		LineCarrier:   lineCarrier,
+		LineRegion:    lineRegion,
+		LineProvince:  lineProvince,
+		LineContinent: lineContinent,
+		LineCountry:   lineCountry,
+		Ttl:           int32(params.Ttl),
+		IsOn:          params.IsOn,
+		Priority:      100,
+		Records:       records,
+	}
+
+	if params.RecordId > 0 {
+		err = updateCustomRule(this.Parent(), rule)
+	} else {
+		_, err = createCustomRule(this.Parent(), rule)
+	}
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 
 	this.Success()
 }
 
 func parseRecordItemsJSON(raw string, weightEnabled bool) ([]maps.Map, error) {
+	raw = strings.TrimSpace(raw)
 	if len(raw) == 0 {
 		return []maps.Map{}, nil
 	}
 
 	list := []maps.Map{}
 	if err := json.Unmarshal([]byte(raw), &list); err != nil {
-		return nil, fmt.Errorf("record items json is invalid")
+		return nil, fmt.Errorf("解析记录格式不正确")
 	}
 
 	result := make([]maps.Map, 0, len(list))
@@ -263,10 +231,10 @@ func parseRecordItemsJSON(raw string, weightEnabled bool) ([]maps.Map, error) {
 			continue
 		}
 		if recordType != "A" && recordType != "AAAA" {
-			return nil, fmt.Errorf("record type should be A or AAAA")
+			return nil, fmt.Errorf("记录类型只能是 A 或 AAAA")
 		}
 		if len(recordValue) == 0 {
-			return nil, fmt.Errorf("record value should not be empty")
+			return nil, fmt.Errorf("记录值不能为空")
 		}
 
 		weight := item.GetInt("weight")
@@ -274,7 +242,7 @@ func parseRecordItemsJSON(raw string, weightEnabled bool) ([]maps.Map, error) {
 			weight = 100
 		}
 		if weight < 1 || weight > 100 {
-			return nil, fmt.Errorf("weight should be in 1-100")
+			return nil, fmt.Errorf("权重值必须在 1-100 之间")
 		}
 
 		result = append(result, maps.Map{
@@ -283,7 +251,6 @@ func parseRecordItemsJSON(raw string, weightEnabled bool) ([]maps.Map, error) {
 			"weight": weight,
 		})
 	}
-
 	return result, nil
 }
 

EdgeAdmin/internal/web/actions/default/httpdns/apps/customRecordsDelete.go

@@ -10,8 +10,12 @@ func (this *CustomRecordsDeleteAction) RunPost(params struct {
 	AppId    int64
 	RecordId int64
 }) {
-	if params.AppId > 0 && params.RecordId > 0 {
-		deleteCustomRecord(params.AppId, params.RecordId)
+	if params.RecordId > 0 {
+		err := deleteCustomRule(this.Parent(), params.RecordId)
+		if err != nil {
+			this.ErrorPage(err)
+			return
+		}
 	}
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/customRecordsToggle.go

@@ -11,8 +11,12 @@ func (this *CustomRecordsToggleAction) RunPost(params struct {
 	RecordId int64
 	IsOn     bool
 }) {
-	if params.AppId > 0 && params.RecordId > 0 {
-		toggleCustomRecord(params.AppId, params.RecordId, params.IsOn)
+	if params.RecordId > 0 {
+		err := toggleCustomRule(this.Parent(), params.RecordId, params.IsOn)
+		if err != nil {
+			this.ErrorPage(err)
+			return
+		}
 	}
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/custom_records_store.go

@@ -1,244 +0,0 @@
-package apps
-
-import (
-	"strconv"
-	"strings"
-	"sync"
-	"time"
-
-	"github.com/iwind/TeaGo/maps"
-)
-
-var customRecordStore = struct {
-	sync.RWMutex
-	nextID int64
-	data   map[int64][]maps.Map
-}{
-	nextID: 1000,
-	data: map[int64][]maps.Map{
-		1: {
-			{
-				"id":            int64(1001),
-				"domain":        "api.business.com",
-				"lineScope":     "china",
-				"lineCarrier":   "电信",
-				"lineRegion":    "华东",
-				"lineProvince":  "上海",
-				"ruleName":      "上海电信灰度-v2",
-				"sdnsParams":    []maps.Map{},
-				"recordType":    "A",
-				"recordValues":  []maps.Map{{"type": "A", "value": "1.1.1.10", "weight": 100}},
-				"weightEnabled": false,
-				"ttl":           30,
-				"isOn":          true,
-				"updatedAt":     "2026-02-23 10:20:00",
-			},
-		},
-	},
-}
-
-func loadCustomRecords(appID int64) []maps.Map {
-	customRecordStore.RLock()
-	defer customRecordStore.RUnlock()
-
-	records := customRecordStore.data[appID]
-	result := make([]maps.Map, 0, len(records))
-	for _, record := range records {
-		result = append(result, cloneCustomRecord(record))
-	}
-	return result
-}
-
-func countCustomRecordsByDomain(appID int64, domain string) int {
-	domain = strings.ToLower(strings.TrimSpace(domain))
-	if len(domain) == 0 {
-		return 0
-	}
-
-	customRecordStore.RLock()
-	defer customRecordStore.RUnlock()
-
-	count := 0
-	for _, record := range customRecordStore.data[appID] {
-		if strings.ToLower(strings.TrimSpace(record.GetString("domain"))) == domain {
-			count++
-		}
-	}
-	return count
-}
-
-func findCustomRecord(appID int64, recordID int64) maps.Map {
-	for _, record := range loadCustomRecords(appID) {
-		if record.GetInt64("id") == recordID {
-			return record
-		}
-	}
-	return maps.Map{}
-}
-
-func saveCustomRecord(appID int64, record maps.Map) maps.Map {
-	customRecordStore.Lock()
-	defer customRecordStore.Unlock()
-
-	if appID <= 0 {
-		return maps.Map{}
-	}
-
-	record = cloneCustomRecord(record)
-	recordID := record.GetInt64("id")
-	if recordID <= 0 {
-		customRecordStore.nextID++
-		recordID = customRecordStore.nextID
-		record["id"] = recordID
-	}
-	record["updatedAt"] = nowCustomRecordTime()
-
-	records := customRecordStore.data[appID]
-	found := false
-	for i, oldRecord := range records {
-		if oldRecord.GetInt64("id") == recordID {
-			records[i] = cloneCustomRecord(record)
-			found = true
-			break
-		}
-	}
-	if !found {
-		records = append(records, cloneCustomRecord(record))
-	}
-	customRecordStore.data[appID] = records
-
-	return cloneCustomRecord(record)
-}
-
-func deleteCustomRecord(appID int64, recordID int64) {
-	customRecordStore.Lock()
-	defer customRecordStore.Unlock()
-
-	records := customRecordStore.data[appID]
-	if len(records) == 0 {
-		return
-	}
-
-	filtered := make([]maps.Map, 0, len(records))
-	for _, record := range records {
-		if record.GetInt64("id") == recordID {
-			continue
-		}
-		filtered = append(filtered, record)
-	}
-	customRecordStore.data[appID] = filtered
-}
-
-func deleteCustomRecordsByApp(appID int64) {
-	customRecordStore.Lock()
-	defer customRecordStore.Unlock()
-	delete(customRecordStore.data, appID)
-}
-
-func toggleCustomRecord(appID int64, recordID int64, isOn bool) {
-	customRecordStore.Lock()
-	defer customRecordStore.Unlock()
-
-	records := customRecordStore.data[appID]
-	for i, record := range records {
-		if record.GetInt64("id") == recordID {
-			record["isOn"] = isOn
-			record["updatedAt"] = nowCustomRecordTime()
-			records[i] = record
-			break
-		}
-	}
-	customRecordStore.data[appID] = records
-}
-
-func cloneCustomRecord(src maps.Map) maps.Map {
-	dst := maps.Map{}
-	for k, v := range src {
-		switch k {
-		case "sdnsParams", "recordValues":
-			if list, ok := v.([]maps.Map); ok {
-				cloned := make([]maps.Map, 0, len(list))
-				for _, item := range list {
-					m := maps.Map{}
-					for k2, v2 := range item {
-						m[k2] = v2
-					}
-					cloned = append(cloned, m)
-				}
-				dst[k] = cloned
-			} else {
-				dst[k] = []maps.Map{}
-			}
-		default:
-			dst[k] = v
-		}
-	}
-	return dst
-}
-
-func nowCustomRecordTime() string {
-	return time.Now().Format("2006-01-02 15:04:05")
-}
-
-func buildLineText(record maps.Map) string {
-	parts := []string{}
-	if strings.TrimSpace(record.GetString("lineScope")) == "overseas" {
-		parts = append(parts,
-			strings.TrimSpace(record.GetString("lineContinent")),
-			strings.TrimSpace(record.GetString("lineCountry")),
-		)
-	} else {
-		parts = append(parts,
-			strings.TrimSpace(record.GetString("lineCarrier")),
-			strings.TrimSpace(record.GetString("lineRegion")),
-			strings.TrimSpace(record.GetString("lineProvince")),
-		)
-	}
-
-	finalParts := make([]string, 0, len(parts))
-	for _, part := range parts {
-		if len(part) == 0 || part == "默认" {
-			continue
-		}
-		finalParts = append(finalParts, part)
-	}
-	if len(finalParts) == 0 {
-		return "默认"
-	}
-	return strings.Join(finalParts, " / ")
-}
-
-func buildRecordValueText(record maps.Map) string {
-	values, ok := record["recordValues"].([]maps.Map)
-	if !ok || len(values) == 0 {
-		return "-"
-	}
-
-	weightEnabled := record.GetBool("weightEnabled")
-	defaultType := strings.ToUpper(strings.TrimSpace(record.GetString("recordType")))
-	parts := make([]string, 0, len(values))
-	for _, item := range values {
-		value := strings.TrimSpace(item.GetString("value"))
-		if len(value) == 0 {
-			continue
-		}
-		recordType := strings.ToUpper(strings.TrimSpace(item.GetString("type")))
-		if len(recordType) == 0 {
-			recordType = defaultType
-		}
-		if recordType != "A" && recordType != "AAAA" {
-			recordType = "A"
-		}
-		part := recordType + " " + value
-		if weightEnabled {
-			part += "(" + strconv.Itoa(item.GetInt("weight")) + ")"
-		} else {
-			// no extra suffix
-		}
-		parts = append(parts, part)
-	}
-	if len(parts) == 0 {
-		return "-"
-	}
-	return strings.Join(parts, ", ")
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/delete.go

@@ -17,10 +17,19 @@ func (this *DeleteAction) RunGet(params struct {
 	AppId int64
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
-	app := pickApp(params.AppId)
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), app.GetInt64("id"), "delete")
 	this.Data["app"] = app
-	this.Data["domainCount"] = len(mockDomains(app.GetInt64("id")))
+	domains, err := listDomainMaps(this.Parent(), app.GetInt64("id"), "")
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	this.Data["domainCount"] = len(domains)
 	this.Show()
 }
 
@@ -28,9 +37,10 @@ func (this *DeleteAction) RunPost(params struct {
 	AppId int64
 }) {
 	if params.AppId > 0 {
-		if deleteApp(params.AppId) {
-			deleteAppSettings(params.AppId)
-			deleteCustomRecordsByApp(params.AppId)
+		err := deleteAppByID(this.Parent(), params.AppId)
+		if err != nil {
+			this.ErrorPage(err)
+			return
 		}
 	}
 

EdgeAdmin/internal/web/actions/default/httpdns/apps/domains.go

@@ -17,15 +17,19 @@ func (this *DomainsAction) RunGet(params struct {
 	AppId int64
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
-	app := pickApp(params.AppId)
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 
 	// 构建顶部 tabbar
 	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), params.AppId, "domains")
 
-	domains := mockDomains(app.GetInt64("id"))
-	for _, domain := range domains {
-		domainName := domain.GetString("name")
-		domain["customRecordCount"] = countCustomRecordsByDomain(app.GetInt64("id"), domainName)
+	domains, err := listDomainMaps(this.Parent(), app.GetInt64("id"), "")
+	if err != nil {
+		this.ErrorPage(err)
+		return
 	}
 
 	this.Data["app"] = app

EdgeAdmin/internal/web/actions/default/httpdns/apps/domainsCreatePopup.go

@@ -16,7 +16,12 @@ func (this *DomainsCreatePopupAction) Init() {
 func (this *DomainsCreatePopupAction) RunGet(params struct {
 	AppId int64
 }) {
-	this.Data["app"] = pickApp(params.AppId)
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	this.Data["app"] = app
 	this.Show()
 }
 
@@ -27,6 +32,13 @@ func (this *DomainsCreatePopupAction) RunPost(params struct {
 	Must *actions.Must
 	CSRF *actionutils.CSRF
 }) {
-	params.Must.Field("domain", params.Domain).Require("please input domain")
+	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
+	params.Must.Field("domain", params.Domain).Require("请输入域名")
+
+	err := createDomain(this.Parent(), params.AppId, params.Domain)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/domainsDelete.go

@@ -9,6 +9,12 @@ type DomainsDeleteAction struct {
 func (this *DomainsDeleteAction) RunPost(params struct {
 	DomainId int64
 }) {
-	_ = params.DomainId
+	if params.DomainId > 0 {
+		err := deleteDomain(this.Parent(), params.DomainId)
+		if err != nil {
+			this.ErrorPage(err)
+			return
+		}
+	}
 	this.Success()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/formatters.go

@@ -0,0 +1,92 @@
+package apps
+
+import (
+	"strconv"
+	"strings"
+
+	"github.com/iwind/TeaGo/maps"
+)
+
+func maskSecret(secret string) string {
+	secret = strings.TrimSpace(secret)
+	if len(secret) < 4 {
+		return "******"
+	}
+
+	prefix := ""
+	for i := 0; i < len(secret); i++ {
+		if secret[i] == '_' {
+			prefix = secret[:i+1]
+			break
+		}
+	}
+	if len(prefix) == 0 {
+		prefix = secret[:2]
+	}
+
+	if len(secret) <= 8 {
+		return prefix + "xxxx"
+	}
+	return prefix + "xxxxxxxx" + secret[len(secret)-4:]
+}
+
+func buildLineText(record maps.Map) string {
+	parts := []string{}
+	if strings.TrimSpace(record.GetString("lineScope")) == "overseas" {
+		parts = append(parts,
+			strings.TrimSpace(record.GetString("lineContinent")),
+			strings.TrimSpace(record.GetString("lineCountry")),
+		)
+	} else {
+		parts = append(parts,
+			strings.TrimSpace(record.GetString("lineCarrier")),
+			strings.TrimSpace(record.GetString("lineRegion")),
+			strings.TrimSpace(record.GetString("lineProvince")),
+		)
+	}
+
+	finalParts := make([]string, 0, len(parts))
+	for _, part := range parts {
+		if len(part) == 0 || part == "默认" {
+			continue
+		}
+		finalParts = append(finalParts, part)
+	}
+	if len(finalParts) == 0 {
+		return "默认"
+	}
+	return strings.Join(finalParts, " / ")
+}
+
+func buildRecordValueText(record maps.Map) string {
+	values, ok := record["recordValues"].([]maps.Map)
+	if !ok || len(values) == 0 {
+		return "-"
+	}
+
+	weightEnabled := record.GetBool("weightEnabled")
+	defaultType := strings.ToUpper(strings.TrimSpace(record.GetString("recordType")))
+	parts := make([]string, 0, len(values))
+	for _, item := range values {
+		value := strings.TrimSpace(item.GetString("value"))
+		if len(value) == 0 {
+			continue
+		}
+		recordType := strings.ToUpper(strings.TrimSpace(item.GetString("type")))
+		if len(recordType) == 0 {
+			recordType = defaultType
+		}
+		if recordType != "A" && recordType != "AAAA" {
+			recordType = "A"
+		}
+		part := recordType + " " + value
+		if weightEnabled {
+			part += "(" + strconv.Itoa(item.GetInt("weight")) + ")"
+		}
+		parts = append(parts, part)
+	}
+	if len(parts) == 0 {
+		return "-"
+	}
+	return strings.Join(parts, ", ")
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/index.go

@@ -18,6 +18,11 @@ func (this *IndexAction) RunGet(params struct {
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
 	this.Data["keyword"] = params.Keyword
-	this.Data["apps"] = filterApps(params.Keyword, "", "", "")
+	apps, err := listAppMaps(this.Parent(), params.Keyword)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	this.Data["apps"] = apps
 	this.Show()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/init.go

@@ -15,13 +15,17 @@ func init() {
 			Prefix("/httpdns/apps").
 			Get("", new(IndexAction)).
 			Get("/app", new(AppAction)).
-			Get("/sdk", new(SDKAction)).
+			Get("/sdk", new(SdkAction)).
+			GetPost("/sdk/upload", new(SdkUploadAction)).
+			Post("/sdk/upload/delete", new(SdkUploadDeleteAction)).
+			Get("/sdk/download", new(SdkDownloadAction)).
+			Get("/sdk/doc", new(SdkDocAction)).
 			GetPost("/app/settings", new(AppSettingsAction)).
 			Post("/app/settings/toggleSignEnabled", new(AppSettingsToggleSignEnabledAction)).
 			Post("/app/settings/resetSignSecret", new(AppSettingsResetSignSecretAction)).
 			Get("/domains", new(DomainsAction)).
 			Get("/customRecords", new(CustomRecordsAction)).
-			GetPost("/createPopup", new(CreatePopupAction)).
+			GetPost("/create", new(CreateAction)).
 			GetPost("/delete", new(DeleteAction)).
 			GetPost("/domains/createPopup", new(DomainsCreatePopupAction)).
 			Post("/domains/delete", new(DomainsDeleteAction)).

EdgeAdmin/internal/web/actions/default/httpdns/apps/mock.go

@@ -1,190 +0,0 @@
-package apps
-
-import (
-	"strings"
-	"sync"
-
-	"github.com/iwind/TeaGo/maps"
-)
-
-var appStore = struct {
-	sync.RWMutex
-	data []maps.Map
-}{
-	data: defaultMockApps(),
-}
-
-func defaultMockApps() []maps.Map {
-	return []maps.Map{
-		{
-			"id":            int64(1),
-			"name":          "\u4e3b\u7ad9\u79fb\u52a8\u4e1a\u52a1",
-			"appId":         "ab12xc34s2",
-			"clusterId":     int64(1),
-			"domainCount":   3,
-			"isOn":          true,
-			"authStatus":    "enabled",
-			"ecsMode":       "auto",
-			"pinningMode":   "report",
-			"sanMode":       "strict",
-			"riskLevel":     "medium",
-			"riskSummary":   "Pinning \u5904\u4e8e\u89c2\u5bdf\u6a21\u5f0f",
-			"secretVersion": "v2026.02.20",
-		},
-		{
-			"id":            int64(2),
-			"name":          "\u89c6\u9891\u7f51\u5173\u4e1a\u52a1",
-			"appId":         "vd8992ksm1",
-			"clusterId":     int64(2),
-			"domainCount":   1,
-			"isOn":          true,
-			"authStatus":    "enabled",
-			"ecsMode":       "custom",
-			"pinningMode":   "enforce",
-			"sanMode":       "strict",
-			"riskLevel":     "low",
-			"riskSummary":   "\u5df2\u542f\u7528\u5f3a\u6821\u9a8c",
-			"secretVersion": "v2026.02.18",
-		},
-		{
-			"id":            int64(3),
-			"name":          "\u6d77\u5916\u7070\u5ea6\u6d4b\u8bd5",
-			"appId":         "ov7711hkq9",
-			"clusterId":     int64(1),
-			"domainCount":   2,
-			"isOn":          false,
-			"authStatus":    "disabled",
-			"ecsMode":       "off",
-			"pinningMode":   "off",
-			"sanMode":       "report",
-			"riskLevel":     "high",
-			"riskSummary":   "\u5e94\u7528\u5173\u95ed\u4e14\u8bc1\u4e66\u7b56\u7565\u504f\u5f31",
-			"secretVersion": "v2026.01.30",
-		},
-	}
-}
-
-func cloneMap(src maps.Map) maps.Map {
-	dst := maps.Map{}
-	for k, v := range src {
-		dst[k] = v
-	}
-	return dst
-}
-
-func cloneApps(apps []maps.Map) []maps.Map {
-	result := make([]maps.Map, 0, len(apps))
-	for _, app := range apps {
-		result = append(result, cloneMap(app))
-	}
-	return result
-}
-
-func mockApps() []maps.Map {
-	appStore.RLock()
-	defer appStore.RUnlock()
-	return cloneApps(appStore.data)
-}
-
-func deleteApp(appID int64) bool {
-	if appID <= 0 {
-		return false
-	}
-
-	appStore.Lock()
-	defer appStore.Unlock()
-
-	found := false
-	filtered := make([]maps.Map, 0, len(appStore.data))
-	for _, app := range appStore.data {
-		if app.GetInt64("id") == appID {
-			found = true
-			continue
-		}
-		filtered = append(filtered, app)
-	}
-	if found {
-		appStore.data = filtered
-	}
-	return found
-}
-
-func filterApps(keyword string, riskLevel string, ecsMode string, pinningMode string) []maps.Map {
-	all := mockApps()
-	if len(keyword) == 0 && len(riskLevel) == 0 && len(ecsMode) == 0 && len(pinningMode) == 0 {
-		return all
-	}
-
-	keyword = strings.ToLower(strings.TrimSpace(keyword))
-	result := make([]maps.Map, 0)
-	for _, app := range all {
-		if len(keyword) > 0 {
-			name := strings.ToLower(app.GetString("name"))
-			appID := strings.ToLower(app.GetString("appId"))
-			if !strings.Contains(name, keyword) && !strings.Contains(appID, keyword) {
-				continue
-			}
-		}
-		if len(riskLevel) > 0 && app.GetString("riskLevel") != riskLevel {
-			continue
-		}
-		if len(ecsMode) > 0 && app.GetString("ecsMode") != ecsMode {
-			continue
-		}
-		if len(pinningMode) > 0 && app.GetString("pinningMode") != pinningMode {
-			continue
-		}
-		result = append(result, app)
-	}
-
-	return result
-}
-
-func pickApp(appID int64) maps.Map {
-	apps := mockApps()
-	if len(apps) == 0 {
-		return maps.Map{
-			"id":        int64(0),
-			"name":      "",
-			"appId":     "",
-			"clusterId": int64(0),
-		}
-	}
-
-	if appID <= 0 {
-		return apps[0]
-	}
-	for _, app := range apps {
-		if app.GetInt64("id") == appID {
-			return app
-		}
-	}
-	return apps[0]
-}
-
-func mockDomains(appID int64) []maps.Map {
-	_ = appID
-	return []maps.Map{
-		{
-			"id":   int64(101),
-			"name": "api.business.com",
-		},
-		{
-			"id":   int64(102),
-			"name": "payment.business.com",
-		},
-	}
-}
-
-func pickDomain(domainID int64) maps.Map {
-	domains := mockDomains(0)
-	if domainID <= 0 {
-		return domains[0]
-	}
-	for _, domain := range domains {
-		if domain.GetInt64("id") == domainID {
-			return domain
-		}
-	}
-	return domains[0]
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/policies.go

@@ -1,85 +0,0 @@
-package apps
-
-import (
-	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
-	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/httpdnsutils"
-	"github.com/iwind/TeaGo/actions"
-	"github.com/iwind/TeaGo/maps"
-)
-
-type PoliciesAction struct {
-	actionutils.ParentAction
-}
-
-func (this *PoliciesAction) Init() {
-	this.Nav("httpdns", "app", "")
-}
-
-func (this *PoliciesAction) RunGet(params struct{}) {
-	httpdnsutils.AddLeftMenu(this.Parent())
-	this.Data["policies"] = loadGlobalPolicies()
-	this.Show()
-}
-
-func (this *PoliciesAction) RunPost(params struct {
-	DefaultTTL        int
-	DefaultSniPolicy  string
-	DefaultFallbackMs int
-	ECSMode           string
-	ECSIPv4Prefix     int
-	ECSIPv6Prefix     int
-	PinningMode       string
-	SANMode           string
-
-	Must *actions.Must
-	CSRF *actionutils.CSRF
-}) {
-	params.Must.Field("defaultTTL", params.DefaultTTL).Gt(0, "默认 TTL 需要大于 0")
-	params.Must.Field("defaultFallbackMs", params.DefaultFallbackMs).Gt(0, "默认超时需要大于 0")
-
-	if params.DefaultTTL > 86400 {
-		this.Fail("默认 TTL 不能超过 86400 秒")
-		return
-	}
-	if params.DefaultFallbackMs > 10000 {
-		this.Fail("默认超时不能超过 10000 毫秒")
-		return
-	}
-	if params.DefaultSniPolicy != "level1" && params.DefaultSniPolicy != "level2" && params.DefaultSniPolicy != "level3" {
-		this.Fail("默认 SNI 等级不正确")
-		return
-	}
-	if params.ECSMode != "off" && params.ECSMode != "auto" && params.ECSMode != "custom" {
-		this.Fail("ECS 模式不正确")
-		return
-	}
-	if params.ECSIPv4Prefix < 0 || params.ECSIPv4Prefix > 32 {
-		this.Fail("IPv4 掩码范围是 0-32")
-		return
-	}
-	if params.ECSIPv6Prefix < 0 || params.ECSIPv6Prefix > 128 {
-		this.Fail("IPv6 掩码范围是 0-128")
-		return
-	}
-	if params.PinningMode != "off" && params.PinningMode != "report" && params.PinningMode != "enforce" {
-		this.Fail("Pinning 策略不正确")
-		return
-	}
-	if params.SANMode != "off" && params.SANMode != "report" && params.SANMode != "strict" {
-		this.Fail("SAN 策略不正确")
-		return
-	}
-
-	saveGlobalPolicies(maps.Map{
-		"defaultTTL":        params.DefaultTTL,
-		"defaultSniPolicy":  params.DefaultSniPolicy,
-		"defaultFallbackMs": params.DefaultFallbackMs,
-		"ecsMode":           params.ECSMode,
-		"ecsIPv4Prefix":     params.ECSIPv4Prefix,
-		"ecsIPv6Prefix":     params.ECSIPv6Prefix,
-		"pinningMode":       params.PinningMode,
-		"sanMode":           params.SANMode,
-	})
-
-	this.Success()
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/policies_store.go

@@ -1,54 +0,0 @@
-package apps
-
-import (
-	"sync"
-
-	"github.com/iwind/TeaGo/maps"
-)
-
-var globalPoliciesStore = struct {
-	sync.RWMutex
-	data maps.Map
-}{
-	data: maps.Map{
-		"defaultTTL":        30,
-		"defaultSniPolicy":  "level2",
-		"defaultFallbackMs": 300,
-		"ecsMode":           "auto",
-		"ecsIPv4Prefix":     24,
-		"ecsIPv6Prefix":     56,
-		"pinningMode":       "report",
-		"sanMode":           "strict",
-	},
-}
-
-func loadGlobalPolicies() maps.Map {
-	globalPoliciesStore.RLock()
-	defer globalPoliciesStore.RUnlock()
-
-	return maps.Map{
-		"defaultTTL":        globalPoliciesStore.data.GetInt("defaultTTL"),
-		"defaultSniPolicy":  globalPoliciesStore.data.GetString("defaultSniPolicy"),
-		"defaultFallbackMs": globalPoliciesStore.data.GetInt("defaultFallbackMs"),
-		"ecsMode":           globalPoliciesStore.data.GetString("ecsMode"),
-		"ecsIPv4Prefix":     globalPoliciesStore.data.GetInt("ecsIPv4Prefix"),
-		"ecsIPv6Prefix":     globalPoliciesStore.data.GetInt("ecsIPv6Prefix"),
-		"pinningMode":       globalPoliciesStore.data.GetString("pinningMode"),
-		"sanMode":           globalPoliciesStore.data.GetString("sanMode"),
-	}
-}
-
-func saveGlobalPolicies(policies maps.Map) {
-	globalPoliciesStore.Lock()
-	globalPoliciesStore.data = maps.Map{
-		"defaultTTL":        policies.GetInt("defaultTTL"),
-		"defaultSniPolicy":  policies.GetString("defaultSniPolicy"),
-		"defaultFallbackMs": policies.GetInt("defaultFallbackMs"),
-		"ecsMode":           policies.GetString("ecsMode"),
-		"ecsIPv4Prefix":     policies.GetInt("ecsIPv4Prefix"),
-		"ecsIPv6Prefix":     policies.GetInt("ecsIPv6Prefix"),
-		"pinningMode":       policies.GetString("pinningMode"),
-		"sanMode":           policies.GetString("sanMode"),
-	}
-	globalPoliciesStore.Unlock()
-}

EdgeAdmin/internal/web/actions/default/httpdns/apps/rpc_helpers.go

@@ -0,0 +1,295 @@
+package apps
+
+import (
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
+	timeutil "github.com/iwind/TeaGo/utils/time"
+	"github.com/iwind/TeaGo/maps"
+)
+
+func listAppMaps(parent *actionutils.ParentAction, keyword string) ([]maps.Map, error) {
+	resp, err := parent.RPC().HTTPDNSAppRPC().ListHTTPDNSApps(parent.AdminContext(), &pb.ListHTTPDNSAppsRequest{
+		Offset:  0,
+		Size:    10_000,
+		Keyword: strings.TrimSpace(keyword),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]maps.Map, 0, len(resp.GetApps()))
+	for _, app := range resp.GetApps() {
+		domainResp, err := parent.RPC().HTTPDNSDomainRPC().ListHTTPDNSDomainsWithAppId(parent.AdminContext(), &pb.ListHTTPDNSDomainsWithAppIdRequest{
+			AppDbId: app.GetId(),
+		})
+		if err != nil {
+			return nil, err
+		}
+
+		result = append(result, appPBToMap(app, int64(len(domainResp.GetDomains()))))
+	}
+
+	return result, nil
+}
+
+func findAppMap(parent *actionutils.ParentAction, appDbId int64) (maps.Map, error) {
+	if appDbId > 0 {
+		resp, err := parent.RPC().HTTPDNSAppRPC().FindHTTPDNSApp(parent.AdminContext(), &pb.FindHTTPDNSAppRequest{
+			AppDbId: appDbId,
+		})
+		if err != nil {
+			return nil, err
+		}
+		if resp.GetApp() != nil {
+			domainResp, err := parent.RPC().HTTPDNSDomainRPC().ListHTTPDNSDomainsWithAppId(parent.AdminContext(), &pb.ListHTTPDNSDomainsWithAppIdRequest{
+				AppDbId: appDbId,
+			})
+			if err != nil {
+				return nil, err
+			}
+			return appPBToMap(resp.GetApp(), int64(len(domainResp.GetDomains()))), nil
+		}
+	}
+
+	apps, err := listAppMaps(parent, "")
+	if err != nil {
+		return nil, err
+	}
+	if len(apps) == 0 {
+		return maps.Map{
+			"id":    int64(0),
+			"name":  "",
+			"appId": "",
+		}, nil
+	}
+	return apps[0], nil
+}
+
+func createApp(parent *actionutils.ParentAction, name string, primaryClusterId int64, backupClusterId int64) (int64, error) {
+	newAppId := "app" + strconv.FormatInt(time.Now().UnixNano()%1_000_000_000_000, 36)
+	resp, err := parent.RPC().HTTPDNSAppRPC().CreateHTTPDNSApp(parent.AdminContext(), &pb.CreateHTTPDNSAppRequest{
+		Name:             strings.TrimSpace(name),
+		AppId:            newAppId,
+		PrimaryClusterId: primaryClusterId,
+		BackupClusterId:  backupClusterId,
+		IsOn:             true,
+		SignEnabled:      true,
+	})
+	if err != nil {
+		return 0, err
+	}
+	return resp.GetAppDbId(), nil
+}
+
+func deleteAppByID(parent *actionutils.ParentAction, appDbId int64) error {
+	_, err := parent.RPC().HTTPDNSAppRPC().DeleteHTTPDNSApp(parent.AdminContext(), &pb.DeleteHTTPDNSAppRequest{
+		AppDbId: appDbId,
+	})
+	return err
+}
+
+func updateAppSettings(parent *actionutils.ParentAction, appDbId int64, name string, primaryClusterId int64, backupClusterId int64, isOn bool, userId int64) error {
+	_, err := parent.RPC().HTTPDNSAppRPC().UpdateHTTPDNSApp(parent.AdminContext(), &pb.UpdateHTTPDNSAppRequest{
+		AppDbId:          appDbId,
+		Name:             strings.TrimSpace(name),
+		PrimaryClusterId: primaryClusterId,
+		BackupClusterId:  backupClusterId,
+		IsOn:             isOn,
+		UserId:           userId,
+	})
+	return err
+}
+
+func updateAppSignEnabled(parent *actionutils.ParentAction, appDbId int64, signEnabled bool) error {
+	_, err := parent.RPC().HTTPDNSAppRPC().UpdateHTTPDNSAppSignEnabled(parent.AdminContext(), &pb.UpdateHTTPDNSAppSignEnabledRequest{
+		AppDbId:     appDbId,
+		SignEnabled: signEnabled,
+	})
+	return err
+}
+
+func resetAppSignSecret(parent *actionutils.ParentAction, appDbId int64) (*pb.ResetHTTPDNSAppSignSecretResponse, error) {
+	return parent.RPC().HTTPDNSAppRPC().ResetHTTPDNSAppSignSecret(parent.AdminContext(), &pb.ResetHTTPDNSAppSignSecretRequest{
+		AppDbId: appDbId,
+	})
+}
+
+func listDomainMaps(parent *actionutils.ParentAction, appDbId int64, keyword string) ([]maps.Map, error) {
+	resp, err := parent.RPC().HTTPDNSDomainRPC().ListHTTPDNSDomainsWithAppId(parent.AdminContext(), &pb.ListHTTPDNSDomainsWithAppIdRequest{
+		AppDbId: appDbId,
+		Keyword: strings.TrimSpace(keyword),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]maps.Map, 0, len(resp.GetDomains()))
+	for _, domain := range resp.GetDomains() {
+		result = append(result, maps.Map{
+			"id":                domain.GetId(),
+			"name":              domain.GetDomain(),
+			"isOn":              domain.GetIsOn(),
+			"customRecordCount": domain.GetRuleCount(),
+		})
+	}
+	return result, nil
+}
+
+func createDomain(parent *actionutils.ParentAction, appDbId int64, domain string) error {
+	_, err := parent.RPC().HTTPDNSDomainRPC().CreateHTTPDNSDomain(parent.AdminContext(), &pb.CreateHTTPDNSDomainRequest{
+		AppDbId: appDbId,
+		Domain:  strings.TrimSpace(domain),
+		IsOn:    true,
+	})
+	return err
+}
+
+func deleteDomain(parent *actionutils.ParentAction, domainId int64) error {
+	_, err := parent.RPC().HTTPDNSDomainRPC().DeleteHTTPDNSDomain(parent.AdminContext(), &pb.DeleteHTTPDNSDomainRequest{
+		DomainId: domainId,
+	})
+	return err
+}
+
+func findDomainMap(domains []maps.Map, domainID int64) maps.Map {
+	if len(domains) == 0 {
+		return maps.Map{}
+	}
+	if domainID <= 0 {
+		return domains[0]
+	}
+	for _, domain := range domains {
+		if domain.GetInt64("id") == domainID {
+			return domain
+		}
+	}
+	return domains[0]
+}
+
+func listCustomRuleMaps(parent *actionutils.ParentAction, domainId int64) ([]maps.Map, error) {
+	resp, err := parent.RPC().HTTPDNSRuleRPC().ListHTTPDNSCustomRulesWithDomainId(parent.AdminContext(), &pb.ListHTTPDNSCustomRulesWithDomainIdRequest{
+		DomainId: domainId,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]maps.Map, 0, len(resp.GetRules()))
+	for _, rule := range resp.GetRules() {
+		recordValues := make([]maps.Map, 0, len(rule.GetRecords()))
+		recordType := "A"
+		weightEnabled := false
+		for _, record := range rule.GetRecords() {
+			if len(recordType) == 0 {
+				recordType = strings.ToUpper(strings.TrimSpace(record.GetRecordType()))
+			}
+			if record.GetWeight() > 0 && record.GetWeight() != 100 {
+				weightEnabled = true
+			}
+			recordValues = append(recordValues, maps.Map{
+				"type":   strings.ToUpper(strings.TrimSpace(record.GetRecordType())),
+				"value":  record.GetRecordValue(),
+				"weight": record.GetWeight(),
+			})
+		}
+		if len(recordValues) == 0 {
+			recordValues = append(recordValues, maps.Map{
+				"type":   "A",
+				"value":  "",
+				"weight": 100,
+			})
+		}
+
+		item := maps.Map{
+			"id":            rule.GetId(),
+			"lineScope":     rule.GetLineScope(),
+			"lineCarrier":   defaultLineField(rule.GetLineCarrier()),
+			"lineRegion":    defaultLineField(rule.GetLineRegion()),
+			"lineProvince":  defaultLineField(rule.GetLineProvince()),
+			"lineContinent": defaultLineField(rule.GetLineContinent()),
+			"lineCountry":   defaultLineField(rule.GetLineCountry()),
+			"ruleName":      rule.GetRuleName(),
+			"recordType":    recordType,
+			"recordValues":  recordValues,
+			"weightEnabled": weightEnabled,
+			"ttl":           rule.GetTtl(),
+			"isOn":          rule.GetIsOn(),
+			"updatedAt":     formatDateTime(rule.GetUpdatedAt()),
+		}
+		item["lineText"] = buildLineText(item)
+		item["recordValueText"] = buildRecordValueText(item)
+		result = append(result, item)
+	}
+	return result, nil
+}
+
+func createCustomRule(parent *actionutils.ParentAction, rule *pb.HTTPDNSCustomRule) (int64, error) {
+	resp, err := parent.RPC().HTTPDNSRuleRPC().CreateHTTPDNSCustomRule(parent.AdminContext(), &pb.CreateHTTPDNSCustomRuleRequest{
+		Rule: rule,
+	})
+	if err != nil {
+		return 0, err
+	}
+	return resp.GetRuleId(), nil
+}
+
+func updateCustomRule(parent *actionutils.ParentAction, rule *pb.HTTPDNSCustomRule) error {
+	_, err := parent.RPC().HTTPDNSRuleRPC().UpdateHTTPDNSCustomRule(parent.AdminContext(), &pb.UpdateHTTPDNSCustomRuleRequest{
+		Rule: rule,
+	})
+	return err
+}
+
+func deleteCustomRule(parent *actionutils.ParentAction, ruleId int64) error {
+	_, err := parent.RPC().HTTPDNSRuleRPC().DeleteHTTPDNSCustomRule(parent.AdminContext(), &pb.DeleteHTTPDNSCustomRuleRequest{
+		RuleId: ruleId,
+	})
+	return err
+}
+
+func toggleCustomRule(parent *actionutils.ParentAction, ruleId int64, isOn bool) error {
+	_, err := parent.RPC().HTTPDNSRuleRPC().UpdateHTTPDNSCustomRuleStatus(parent.AdminContext(), &pb.UpdateHTTPDNSCustomRuleStatusRequest{
+		RuleId: ruleId,
+		IsOn:   isOn,
+	})
+	return err
+}
+
+func appPBToMap(app *pb.HTTPDNSApp, domainCount int64) maps.Map {
+	signSecret := app.GetSignSecret()
+	return maps.Map{
+		"id":                app.GetId(),
+		"name":              app.GetName(),
+		"appId":             app.GetAppId(),
+		"clusterId":         app.GetPrimaryClusterId(),
+		"primaryClusterId":  app.GetPrimaryClusterId(),
+		"backupClusterId":   app.GetBackupClusterId(),
+		"userId":            app.GetUserId(),
+		"isOn":              app.GetIsOn(),
+		"domainCount":       domainCount,
+		"sniPolicyText":     "隐匿 SNI",
+		"signEnabled":       app.GetSignEnabled(),
+		"signSecretPlain":   signSecret,
+		"signSecretMasked":  maskSecret(signSecret),
+		"signSecretUpdated": formatDateTime(app.GetSignUpdatedAt()),
+	}
+}
+
+func defaultLineField(value string) string {
+	value = strings.TrimSpace(value)
+	if len(value) == 0 {
+		return "默认"
+	}
+	return value
+}
+
+func formatDateTime(ts int64) string {
+	if ts <= 0 {
+		return ""
+	}
+	return timeutil.FormatTime("Y-m-d H:i:s", ts)
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk.go

@@ -5,23 +5,26 @@ import (
 	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/httpdnsutils"
 )
 
-type SDKAction struct {
+type SdkAction struct {
 	actionutils.ParentAction
 }
 
-func (this *SDKAction) Init() {
+func (this *SdkAction) Init() {
 	this.Nav("httpdns", "app", "sdk")
 }
 
-func (this *SDKAction) RunGet(params struct {
+func (this *SdkAction) RunGet(params struct {
 	AppId int64
 }) {
 	httpdnsutils.AddLeftMenu(this.Parent())
-	app := pickApp(params.AppId)
 
-	// 构建顶部 tabbar
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
 	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), params.AppId, "sdk")
-
 	this.Data["app"] = app
 	this.Show()
 }

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk_doc.go

@@ -0,0 +1,54 @@
+package apps
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+type SdkDocAction struct {
+	actionutils.ParentAction
+}
+
+func (this *SdkDocAction) Init() {
+	this.Nav("", "", "")
+}
+
+func (this *SdkDocAction) RunGet(params struct {
+	Platform string
+}) {
+	platform, _, readmeRelativePath, _, err := resolveSDKPlatform(params.Platform)
+	if err != nil {
+		this.Fail(err.Error())
+		return
+	}
+
+	var data []byte
+	uploadedDocPath := findUploadedSDKDocPath(platform)
+	if len(uploadedDocPath) > 0 {
+		data, err = os.ReadFile(uploadedDocPath)
+	}
+
+	sdkRoot, sdkRootErr := findSDKRoot()
+	if len(data) == 0 && sdkRootErr == nil {
+		readmePath := filepath.Join(sdkRoot, readmeRelativePath)
+		data, err = os.ReadFile(readmePath)
+	}
+
+	if len(data) == 0 {
+		localDocPath := findLocalSDKDocPath(platform)
+		if len(localDocPath) > 0 {
+			data, err = os.ReadFile(localDocPath)
+		}
+	}
+
+	if len(data) == 0 || err != nil {
+		this.Fail("当前服务器未找到 SDK 集成文档，请先在“SDK 集成”页面上传对应平台文档")
+		return
+	}
+
+	this.AddHeader("Content-Type", "text/markdown; charset=utf-8")
+	this.AddHeader("Content-Disposition", "attachment; filename=\"httpdns-sdk-"+strings.ToLower(platform)+"-README.md\";")
+	_, _ = this.ResponseWriter.Write(data)
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk_download.go

@@ -0,0 +1,45 @@
+package apps
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"io"
+	"os"
+)
+
+type SdkDownloadAction struct {
+	actionutils.ParentAction
+}
+
+func (this *SdkDownloadAction) Init() {
+	this.Nav("", "", "")
+}
+
+func (this *SdkDownloadAction) RunGet(params struct {
+	Platform string
+}) {
+	_, _, _, filename, err := resolveSDKPlatform(params.Platform)
+	if err != nil {
+		this.Fail(err.Error())
+		return
+	}
+
+	archivePath := findSDKArchivePath(filename)
+	if len(archivePath) == 0 {
+		this.Fail("当前服务器未找到 SDK 包，请先在“SDK 集成”页面上传对应平台包: " + filename)
+		return
+	}
+
+	fp, err := os.Open(archivePath)
+	if err != nil {
+		this.Fail("打开 SDK 包失败: " + err.Error())
+		return
+	}
+	defer func() {
+		_ = fp.Close()
+	}()
+
+	this.AddHeader("Content-Type", "application/zip")
+	this.AddHeader("Content-Disposition", "attachment; filename=\""+filename+"\";")
+	this.AddHeader("X-Accel-Buffering", "no")
+	_, _ = io.Copy(this.ResponseWriter, fp)
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk_helpers.go

@@ -0,0 +1,149 @@
+package apps
+
+import (
+	"errors"
+	"github.com/iwind/TeaGo/Tea"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+	"time"
+)
+
+func sdkUploadDir() string {
+	return filepath.Clean(Tea.Root + "/data/httpdns/sdk")
+}
+
+func findFirstExistingDir(paths []string) string {
+	for _, path := range paths {
+		stat, err := os.Stat(path)
+		if err == nil && stat.IsDir() {
+			return path
+		}
+	}
+	return ""
+}
+
+func findFirstExistingFile(paths []string) string {
+	for _, path := range paths {
+		stat, err := os.Stat(path)
+		if err == nil && !stat.IsDir() {
+			return path
+		}
+	}
+	return ""
+}
+
+func findNewestExistingFile(paths []string) string {
+	type fileInfo struct {
+		path    string
+		modTime time.Time
+	}
+	result := fileInfo{}
+	for _, path := range paths {
+		stat, err := os.Stat(path)
+		if err != nil || stat.IsDir() {
+			continue
+		}
+		if len(result.path) == 0 || stat.ModTime().After(result.modTime) || (stat.ModTime().Equal(result.modTime) && path > result.path) {
+			result.path = path
+			result.modTime = stat.ModTime()
+		}
+	}
+	return result.path
+}
+
+func findSDKRoot() (string, error) {
+	candidates := []string{
+		filepath.Clean(Tea.Root + "/EdgeHttpDNS/sdk"),
+		filepath.Clean(Tea.Root + "/edge-httpdns/sdk"),
+		filepath.Clean(Tea.Root + "/edge-httpdns/edge-httpdns/sdk"),
+		filepath.Clean(Tea.Root + "/../EdgeHttpDNS/sdk"),
+		filepath.Clean(Tea.Root + "/../../EdgeHttpDNS/sdk"),
+		filepath.Clean(Tea.Root + "/../edge-httpdns/sdk"),
+		filepath.Clean(Tea.Root + "/../../edge-httpdns/sdk"),
+	}
+
+	dir := findFirstExistingDir(candidates)
+	if len(dir) > 0 {
+		return dir, nil
+	}
+
+	return "", errors.New("SDK files are not found on current server")
+}
+
+func resolveSDKPlatform(platform string) (key string, relativeDir string, readmeRelativePath string, downloadFilename string, err error) {
+	switch strings.ToLower(strings.TrimSpace(platform)) {
+	case "android":
+		return "android", "android", "android/README.md", "httpdns-sdk-android.zip", nil
+	case "ios":
+		return "ios", "ios", "ios/README.md", "httpdns-sdk-ios.zip", nil
+	case "flutter":
+		return "flutter", "flutter/aliyun_httpdns", "flutter/aliyun_httpdns/README.md", "httpdns-sdk-flutter.zip", nil
+	default:
+		return "", "", "", "", errors.New("invalid platform, expected one of: android, ios, flutter")
+	}
+}
+
+func findSDKArchivePath(downloadFilename string) string {
+	searchDirs := []string{sdkUploadDir()}
+
+	// 1) Exact filename first.
+	exactFiles := []string{}
+	for _, dir := range searchDirs {
+		exactFiles = append(exactFiles, filepath.Join(dir, downloadFilename))
+	}
+	path := findFirstExistingFile(exactFiles)
+	if len(path) > 0 {
+		return path
+	}
+
+	// 2) Version-suffixed archives, e.g. httpdns-sdk-android-v1.4.8.zip
+	base := strings.TrimSuffix(downloadFilename, ".zip")
+	patternName := base + "-*.zip"
+	matches := []string{}
+	for _, dir := range searchDirs {
+		found, _ := filepath.Glob(filepath.Join(dir, patternName))
+		for _, file := range found {
+			stat, err := os.Stat(file)
+			if err == nil && !stat.IsDir() {
+				matches = append(matches, file)
+			}
+		}
+	}
+	if len(matches) > 0 {
+		return findNewestExistingFile(matches)
+	}
+
+	return ""
+}
+
+func findUploadedSDKDocPath(platform string) string {
+	platform = strings.ToLower(strings.TrimSpace(platform))
+	if len(platform) == 0 {
+		return ""
+	}
+
+	searchDir := sdkUploadDir()
+	exact := filepath.Join(searchDir, "httpdns-sdk-"+platform+".md")
+	if file := findFirstExistingFile([]string{exact}); len(file) > 0 {
+		return file
+	}
+
+	pattern := filepath.Join(searchDir, "httpdns-sdk-"+platform+"-*.md")
+	matches, _ := filepath.Glob(pattern)
+	if len(matches) == 0 {
+		return ""
+	}
+	sort.Strings(matches)
+	return findNewestExistingFile(matches)
+}
+
+func findLocalSDKDocPath(platform string) string {
+	filename := strings.ToLower(strings.TrimSpace(platform)) + ".md"
+	candidates := []string{
+		filepath.Clean(Tea.Root + "/edge-admin/web/views/@default/httpdns/apps/docs/" + filename),
+		filepath.Clean(Tea.Root + "/EdgeAdmin/web/views/@default/httpdns/apps/docs/" + filename),
+	}
+	return findFirstExistingFile(candidates)
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk_upload.go

@@ -0,0 +1,264 @@
+package apps
+
+import (
+	"errors"
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/httpdns/httpdnsutils"
+	"github.com/iwind/TeaGo/actions"
+	"os"
+	"path/filepath"
+	"sort"
+	"strconv"
+	"strings"
+	"time"
+)
+
+type SdkUploadAction struct {
+	actionutils.ParentAction
+}
+
+func (this *SdkUploadAction) Init() {
+	this.Nav("httpdns", "app", "sdk")
+}
+
+func (this *SdkUploadAction) RunGet(params struct {
+	AppId int64
+}) {
+	httpdnsutils.AddLeftMenu(this.Parent())
+
+	app, err := findAppMap(this.Parent(), params.AppId)
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+
+	httpdnsutils.AddAppTabbar(this.Parent(), app.GetString("name"), params.AppId, "sdk")
+
+	this.Data["app"] = app
+	this.Data["defaultVersion"] = "1.0.0"
+	this.Data["uploadedFiles"] = listUploadedSDKFiles()
+	this.Show()
+}
+
+func (this *SdkUploadAction) RunPost(params struct {
+	AppId    int64
+	Platform string
+	Version  string
+	SDKFile  *actions.File
+	DocFile  *actions.File
+
+	Must *actions.Must
+}) {
+	params.Must.Field("appId", params.AppId).Gt(0, "请选择应用")
+
+	platform, _, _, downloadFilename, err := resolveSDKPlatform(params.Platform)
+	if err != nil {
+		this.Fail(err.Error())
+		return
+	}
+
+	version, err := normalizeSDKVersion(params.Version)
+	if err != nil {
+		this.Fail(err.Error())
+		return
+	}
+
+	if params.SDKFile == nil && params.DocFile == nil {
+		this.Fail("请至少上传一个文件")
+		return
+	}
+
+	uploadDir := sdkUploadDir()
+	err = os.MkdirAll(uploadDir, 0755)
+	if err != nil {
+		this.Fail("创建上传目录失败: " + err.Error())
+		return
+	}
+
+	if params.SDKFile != nil {
+		filename := strings.ToLower(strings.TrimSpace(params.SDKFile.Filename))
+		if !strings.HasSuffix(filename, ".zip") {
+			this.Fail("SDK 包仅支持 .zip 文件")
+			return
+		}
+
+		sdkData, readErr := params.SDKFile.Read()
+		if readErr != nil {
+			this.Fail("读取 SDK 包失败: " + readErr.Error())
+			return
+		}
+
+		baseName := strings.TrimSuffix(downloadFilename, ".zip")
+		err = saveSDKUploadFile(uploadDir, downloadFilename, sdkData)
+		if err == nil {
+			err = saveSDKUploadFile(uploadDir, baseName+"-v"+version+".zip", sdkData)
+		}
+		if err != nil {
+			this.Fail("保存 SDK 包失败: " + err.Error())
+			return
+		}
+	}
+
+	if params.DocFile != nil {
+		docName := strings.ToLower(strings.TrimSpace(params.DocFile.Filename))
+		if !strings.HasSuffix(docName, ".md") {
+			this.Fail("集成文档仅支持 .md 文件")
+			return
+		}
+
+		docData, readErr := params.DocFile.Read()
+		if readErr != nil {
+			this.Fail("读取集成文档失败: " + readErr.Error())
+			return
+		}
+
+		filename := "httpdns-sdk-" + platform + ".md"
+		err = saveSDKUploadFile(uploadDir, filename, docData)
+		if err == nil {
+			err = saveSDKUploadFile(uploadDir, "httpdns-sdk-"+platform+"-v"+version+".md", docData)
+		}
+		if err != nil {
+			this.Fail("保存集成文档失败: " + err.Error())
+			return
+		}
+	}
+
+	this.Success()
+}
+
+func normalizeSDKVersion(version string) (string, error) {
+	version = strings.TrimSpace(version)
+	if len(version) == 0 {
+		version = "1.0.0"
+	}
+	for _, c := range version {
+		if (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || (c >= '0' && c <= '9') || c == '.' || c == '_' || c == '-' {
+			continue
+		}
+		return "", errors.New("版本号格式不正确")
+	}
+	return version, nil
+}
+
+func saveSDKUploadFile(baseDir string, filename string, data []byte) error {
+	targetPath := filepath.Join(baseDir, filename)
+	tmpPath := targetPath + ".tmp"
+	err := os.WriteFile(tmpPath, data, 0644)
+	if err != nil {
+		return err
+	}
+	return os.Rename(tmpPath, targetPath)
+}
+
+func listUploadedSDKFiles() []map[string]interface{} {
+	dir := sdkUploadDir()
+	entries, err := os.ReadDir(dir)
+	if err != nil {
+		return []map[string]interface{}{}
+	}
+
+	type item struct {
+		Name      string
+		Platform  string
+		FileType  string
+		Version   string
+		SizeBytes int64
+		UpdatedAt int64
+	}
+
+	items := make([]item, 0)
+	for _, entry := range entries {
+		if entry.IsDir() {
+			continue
+		}
+		name := entry.Name()
+		platform, version, fileType, ok := parseSDKUploadFilename(name)
+		if !ok {
+			continue
+		}
+
+		info, statErr := entry.Info()
+		if statErr != nil {
+			continue
+		}
+
+		items = append(items, item{
+			Name:      name,
+			Platform:  platform,
+			FileType:  fileType,
+			Version:   version,
+			SizeBytes: info.Size(),
+			UpdatedAt: info.ModTime().Unix(),
+		})
+	}
+
+	sort.Slice(items, func(i, j int) bool {
+		if items[i].UpdatedAt == items[j].UpdatedAt {
+			return items[i].Name > items[j].Name
+		}
+		return items[i].UpdatedAt > items[j].UpdatedAt
+	})
+
+	result := make([]map[string]interface{}, 0, len(items))
+	for _, item := range items {
+		result = append(result, map[string]interface{}{
+			"name":      item.Name,
+			"platform":  item.Platform,
+			"fileType":  item.FileType,
+			"version":   item.Version,
+			"sizeText":  formatSDKFileSize(item.SizeBytes),
+			"updatedAt": time.Unix(item.UpdatedAt, 0).Format("2006-01-02 15:04:05"),
+		})
+	}
+	return result
+}
+
+func parseSDKUploadFilename(filename string) (platform string, version string, fileType string, ok bool) {
+	if !strings.HasPrefix(filename, "httpdns-sdk-") {
+		return "", "", "", false
+	}
+
+	ext := ""
+	switch {
+	case strings.HasSuffix(filename, ".zip"):
+		ext = ".zip"
+		fileType = "SDK包"
+	case strings.HasSuffix(filename, ".md"):
+		ext = ".md"
+		fileType = "集成文档"
+	default:
+		return "", "", "", false
+	}
+
+	main := strings.TrimSuffix(strings.TrimPrefix(filename, "httpdns-sdk-"), ext)
+	version = "latest"
+	if idx := strings.Index(main, "-v"); idx > 0 && idx+2 < len(main) {
+		version = main[idx+2:]
+		main = main[:idx]
+	}
+
+	main = strings.ToLower(strings.TrimSpace(main))
+	switch main {
+	case "android", "ios", "flutter":
+		platform = main
+		return platform, version, fileType, true
+	default:
+		return "", "", "", false
+	}
+}
+
+func formatSDKFileSize(size int64) string {
+	if size < 1024 {
+		return strconv.FormatInt(size, 10) + " B"
+	}
+	sizeKB := float64(size) / 1024
+	if sizeKB < 1024 {
+		return strconv.FormatFloat(sizeKB, 'f', 1, 64) + " KB"
+	}
+	sizeMB := sizeKB / 1024
+	if sizeMB < 1024 {
+		return strconv.FormatFloat(sizeMB, 'f', 1, 64) + " MB"
+	}
+	sizeGB := sizeMB / 1024
+	return strconv.FormatFloat(sizeGB, 'f', 1, 64) + " GB"
+}

EdgeAdmin/internal/web/actions/default/httpdns/apps/sdk_upload_delete.go

@@ -0,0 +1,57 @@
+package apps
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+type SdkUploadDeleteAction struct {
+	actionutils.ParentAction
+}
+
+func (this *SdkUploadDeleteAction) Init() {
+	this.Nav("httpdns", "app", "sdk")
+}
+
+func (this *SdkUploadDeleteAction) RunPost(params struct {
+	AppId    int64
+	Filename string
+}) {
+	if params.AppId <= 0 {
+		this.Fail("请选择应用")
+		return
+	}
+
+	filename := strings.TrimSpace(params.Filename)
+	if len(filename) == 0 {
+		this.Fail("文件名不能为空")
+		return
+	}
+	if strings.Contains(filename, "/") || strings.Contains(filename, "\\") || strings.Contains(filename, "..") {
+		this.Fail("文件名不合法")
+		return
+	}
+	if !strings.HasPrefix(filename, "httpdns-sdk-") {
+		this.Fail("不允许删除该文件")
+		return
+	}
+	if !(strings.HasSuffix(filename, ".zip") || strings.HasSuffix(filename, ".md")) {
+		this.Fail("不允许删除该文件")
+		return
+	}
+
+	fullPath := filepath.Join(sdkUploadDir(), filename)
+	_, err := os.Stat(fullPath)
+	if err != nil {
+		this.Success()
+		return
+	}
+	if err = os.Remove(fullPath); err != nil {
+		this.Fail("删除失败: " + err.Error())
+		return
+	}
+
+	this.Success()
+}