feat(api): unify policy handling with default action updates

- Updated `evofw-firewall.sh` and related scripts to replace `policy_mode` with `default_action`, enhancing clarity and consistency in policy management.
- Adjusted agent routes and evaluation logic to accommodate the new default action structure, ensuring backward compatibility with legacy modes.
- Enhanced tests to validate the new default action behavior and its integration within the agent policy framework.
- Refactored related components in the web interface to align with the updated policy handling, improving user experience and reducing confusion around policy modes.

apps/api/src/services/lists/refresh.ts

@@ -57,8 +57,7 @@ async function fetchEvobgpCommunity(
   communityId: string,
 ): Promise<string[]> {
   const base = apiUrl.replace(/\/$/, '')
-  // Prefer published revision prefixes filtered by community when available.
-  const url = `${base}/v1/directories/communities/${encodeURIComponent(communityId)}/prefixes`
+  const url = `${base}/v1/communities/${encodeURIComponent(communityId)}/prefixes?limit=5000`
   const res = await fetch(url, {
     headers: {
       Authorization: `Bearer ${token}`,
@@ -66,27 +65,20 @@ async function fetchEvobgpCommunity(
     },
     signal: AbortSignal.timeout(45_000),
   })
-  if (res.ok) {
-    const data = (await res.json()) as { items?: { prefix?: string }[]; prefixes?: string[] }
-    if (Array.isArray(data.prefixes)) return uniq(data.prefixes)
-    if (Array.isArray(data.items)) {
-      return uniq(data.items.map((i) => i.prefix ?? '').filter(Boolean))
-    }
+  if (!res.ok) {
+    throw new Error(`EvoBGP community prefixes HTTP ${res.status}`)
   }
-  // Fallback: modules lookup / openapi-compatible list
-  const alt = `${base}/v1/lookup?q=${encodeURIComponent(communityId)}`
-  const res2 = await fetch(alt, {
-    headers: {
-      Authorization: `Bearer ${token}`,
-      Accept: 'application/json',
-    },
-    signal: AbortSignal.timeout(45_000),
-  })
-  if (!res2.ok) {
-    throw new Error(`EvoBGP community fetch failed: ${res.status}/${res2.status}`)
+  const data = (await res.json()) as {
+    items?: { prefix?: string }[]
+    prefixes?: string[]
   }
-  const data2 = (await res2.json()) as { prefixes?: string[] }
-  return uniq(data2.prefixes ?? [])
+  if (Array.isArray(data.prefixes) && data.prefixes.length > 0) {
+    return uniq(data.prefixes)
+  }
+  if (Array.isArray(data.items)) {
+    return uniq(data.items.map((i) => i.prefix ?? '').filter(Boolean))
+  }
+  return []
 }
 
 export async function refreshIpList(db: Db, listId: string): Promise<void> {