@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/identity/drizzle/DdnsRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DdnsRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/DdnsRepository.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,6CAAiC;AAEjC,iEAAqD;AACrD,sDAAwC;AAExC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,gBAAgB,CAAC,CAAC;AAuC9C,MAAa,cAAc;IACzB,YAA6B,EAAoB;QAApB,OAAE,GAAF,EAAE,CAAkB;IAAG,CAAC;IAErD,wDAAwD;IAExD;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,MAAc,EACd,QAAiB,EACjB,MAAe;QAEf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAChD,MAAM;YACN,MAAM,EAAE,QAAQ;YAChB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;QAE/C,OAAO;YACL,MAAM;YACN,MAAM,EAAE,QAAQ;YAChB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAsB,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAgC;YAC5C,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;YACnC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;aAC5B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAElD,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,yDAAyD;IAEzD;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAA4B;QAClD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAE9E,UAAU;QACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAE9C,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAChD,SAAS;YACT,MAAM;YACN,SAAS;YACT,WAAW;YACX,UAAU;YACV,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;QAE3D,OAAO;YACL,SAAS;YACT,MAAM;YACN,SAAS;YACT,WAAW;YACX,UAAU;YACV,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACpD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,UAAU,EAAG,GAAG,CAAC,UAA2B,IAAI,GAAG;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;YACnC,MAAM,EAAG,GAAG,CAAC,MAA8B,IAAI,QAAQ;YACvD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YAC3C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,SAAiB,EACjB,KAA4B;QAE5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,eAAe,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAE5D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACpC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC5B,GAAG,CAAC,OAAO,CAAC;aACZ,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,IAAI,CAAC,wBAAwB,SAAS,OAAO,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAE5F,OAAO;YACL,GAAG,QAAQ;YACX,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACtD,UAAU,EAAG,OAAO,CAAC,UAA2B,IAAI,QAAQ,CAAC,UAAU;YACvE,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,MAAc;QAClD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC5B,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,IAAI,CAAC,qBAAqB,SAAS,aAAa,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC5B,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC5B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAsB,EAAE,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,UAAU,EAAG,GAAG,CAAC,UAA2B,IAAI,GAAG;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;YACnC,MAAM,EAAG,GAAG,CAAC,MAA8B,IAAI,QAAQ;YACvD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YAC3C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,IAAA,gBAAE,EAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,UAAU,EAAG,GAAG,CAAC,UAA2B,IAAI,GAAG;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;YACnC,MAAM,EAAG,GAAG,CAAC,MAA8B,IAAI,QAAQ;YACvD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YAC3C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;CACF;AAhSD,wCAgSC","sourcesContent":["/**\n * DDNS Repository\n *\n * 管理 DDNS 域名池和记录\n */\n\nimport { eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { getLoggerFor } from 'global-logger-factory';\nimport * as pgSchema from './schema.pg';\n\nconst logger = getLoggerFor('DdnsRepository');\n\nexport interface DdnsDomain {\n  domain: string;\n  status: 'active' | 'suspended';\n  provider?: string;\n  zoneId?: string;\n  createdAt: Date;\n}\n\nexport interface DdnsRecord {\n  subdomain: string;\n  domain: string;\n  ipAddress?: string;\n  ipv6Address?: string;\n  recordType: 'A' | 'AAAA';\n  nodeId?: string;\n  username?: string;\n  status: 'active' | 'banned';\n  bannedReason?: string;\n  ttl: number;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateDdnsRecordInput {\n  subdomain: string;\n  domain: string;\n  ipAddress?: string;\n  ipv6Address?: string;\n  nodeId?: string;\n  username?: string;\n}\n\nexport interface UpdateDdnsRecordInput {\n  ipAddress?: string;\n  ipv6Address?: string;\n}\n\nexport class DdnsRepository {\n  constructor(private readonly db: IdentityDatabase) {}\n\n  // ==================== Domain Pool ====================\n\n  /**\n   * 添加域名到池中\n   */\n  async addDomain(\n    domain: string,\n    provider?: string,\n    zoneId?: string,\n  ): Promise<DdnsDomain> {\n    const now = new Date();\n\n    await this.db.insert(pgSchema.ddnsDomains).values({\n      domain,\n      status: 'active',\n      provider,\n      zoneId,\n      createdAt: now,\n    });\n\n    logger.info(`Added domain to pool: ${domain}`);\n\n    return {\n      domain,\n      status: 'active',\n      provider,\n      zoneId,\n      createdAt: now,\n    };\n  }\n\n  /**\n   * 获取所有活跃的域名\n   */\n  async getActiveDomains(): Promise<DdnsDomain[]> {\n    const results = await this.db\n      .select()\n      .from(pgSchema.ddnsDomains)\n      .where(eq(pgSchema.ddnsDomains.status, 'active'));\n\n    return results.map((row: typeof results[0]) => ({\n      domain: row.domain,\n      status: row.status as 'active' | 'suspended',\n      provider: row.provider ?? undefined,\n      zoneId: row.zoneId ?? undefined,\n      createdAt: row.createdAt,\n    }));\n  }\n\n  /**\n   * 暂停域名\n   */\n  async suspendDomain(domain: string): Promise<void> {\n    await this.db\n      .update(pgSchema.ddnsDomains)\n      .set({ status: 'suspended' })\n      .where(eq(pgSchema.ddnsDomains.domain, domain));\n\n    logger.info(`Suspended domain: ${domain}`);\n  }\n\n  // ==================== DDNS Records ====================\n\n  /**\n   * 分配子域名\n   */\n  async allocateSubdomain(input: CreateDdnsRecordInput): Promise<DdnsRecord> {\n    const { subdomain, domain, ipAddress, ipv6Address, nodeId, username } = input;\n\n    // 检查是否已存在\n    const existing = await this.getRecord(subdomain);\n    if (existing) {\n      throw new Error(`Subdomain ${subdomain} already allocated`);\n    }\n\n    const now = new Date();\n    const recordType = ipv6Address ? 'AAAA' : 'A';\n\n    await this.db.insert(pgSchema.ddnsRecords).values({\n      subdomain,\n      domain,\n      ipAddress,\n      ipv6Address,\n      recordType,\n      nodeId,\n      username,\n      status: 'active',\n      ttl: 60,\n      createdAt: now,\n      updatedAt: now,\n    });\n\n    logger.info(`Allocated subdomain: ${subdomain}.${domain}`);\n\n    return {\n      subdomain,\n      domain,\n      ipAddress,\n      ipv6Address,\n      recordType,\n      nodeId,\n      username,\n      status: 'active',\n      ttl: 60,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 获取 DDNS 记录\n   */\n  async getRecord(subdomain: string): Promise<DdnsRecord | null> {\n    const results = await this.db\n      .select()\n      .from(pgSchema.ddnsRecords)\n      .where(eq(pgSchema.ddnsRecords.subdomain, subdomain))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      subdomain: row.subdomain,\n      domain: row.domain,\n      ipAddress: row.ipAddress ?? undefined,\n      ipv6Address: row.ipv6Address ?? undefined,\n      recordType: (row.recordType as 'A' | 'AAAA') ?? 'A',\n      nodeId: row.nodeId ?? undefined,\n      username: row.username ?? undefined,\n      status: (row.status as 'active' | 'banned') ?? 'active',\n      bannedReason: row.bannedReason ?? undefined,\n      ttl: row.ttl ?? 60,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n\n  /**\n   * 更新 DDNS 记录的 IP 地址\n   */\n  async updateRecordIp(\n    subdomain: string,\n    input: UpdateDdnsRecordInput,\n  ): Promise<DdnsRecord | null> {\n    const existing = await this.getRecord(subdomain);\n    if (!existing) {\n      return null;\n    }\n\n    if (existing.status === 'banned') {\n      throw new Error(`Subdomain ${subdomain} is banned: ${existing.bannedReason}`);\n    }\n\n    const now = new Date();\n    const updates: Record<string, unknown> = { updatedAt: now };\n\n    if (input.ipAddress !== undefined) {\n      updates.ipAddress = input.ipAddress;\n      updates.recordType = 'A';\n    }\n    if (input.ipv6Address !== undefined) {\n      updates.ipv6Address = input.ipv6Address;\n      if (!input.ipAddress) {\n        updates.recordType = 'AAAA';\n      }\n    }\n\n    await this.db\n      .update(pgSchema.ddnsRecords)\n      .set(updates)\n      .where(eq(pgSchema.ddnsRecords.subdomain, subdomain));\n\n    logger.info(`Updated DDNS record: ${subdomain} -> ${input.ipAddress ?? input.ipv6Address}`);\n\n    return {\n      ...existing,\n      ipAddress: input.ipAddress ?? existing.ipAddress,\n      ipv6Address: input.ipv6Address ?? existing.ipv6Address,\n      recordType: (updates.recordType as 'A' | 'AAAA') ?? existing.recordType,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 封禁子域名\n   */\n  async banSubdomain(subdomain: string, reason: string): Promise<void> {\n    await this.db\n      .update(pgSchema.ddnsRecords)\n      .set({\n        status: 'banned',\n        bannedReason: reason,\n        updatedAt: new Date(),\n      })\n      .where(eq(pgSchema.ddnsRecords.subdomain, subdomain));\n\n    logger.warn(`Banned subdomain: ${subdomain}, reason: ${reason}`);\n  }\n\n  /**\n   * 解封子域名\n   */\n  async unbanSubdomain(subdomain: string): Promise<void> {\n    await this.db\n      .update(pgSchema.ddnsRecords)\n      .set({\n        status: 'active',\n        bannedReason: null,\n        updatedAt: new Date(),\n      })\n      .where(eq(pgSchema.ddnsRecords.subdomain, subdomain));\n\n    logger.info(`Unbanned subdomain: ${subdomain}`);\n  }\n\n  /**\n   * 释放子域名\n   */\n  async releaseSubdomain(subdomain: string): Promise<boolean> {\n    await this.db\n      .delete(pgSchema.ddnsRecords)\n      .where(eq(pgSchema.ddnsRecords.subdomain, subdomain));\n\n    logger.info(`Released subdomain: ${subdomain}`);\n    return true;\n  }\n\n  /**\n   * 获取用户的所有子域名\n   */\n  async getRecordsByUsername(username: string): Promise<DdnsRecord[]> {\n    const results = await this.db\n      .select()\n      .from(pgSchema.ddnsRecords)\n      .where(eq(pgSchema.ddnsRecords.username, username));\n\n    return results.map((row: typeof results[0]) => ({\n      subdomain: row.subdomain,\n      domain: row.domain,\n      ipAddress: row.ipAddress ?? undefined,\n      ipv6Address: row.ipv6Address ?? undefined,\n      recordType: (row.recordType as 'A' | 'AAAA') ?? 'A',\n      nodeId: row.nodeId ?? undefined,\n      username: row.username ?? undefined,\n      status: (row.status as 'active' | 'banned') ?? 'active',\n      bannedReason: row.bannedReason ?? undefined,\n      ttl: row.ttl ?? 60,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    }));\n  }\n\n  /**\n   * 获取节点的子域名\n   */\n  async getRecordByNodeId(nodeId: string): Promise<DdnsRecord | null> {\n    const results = await this.db\n      .select()\n      .from(pgSchema.ddnsRecords)\n      .where(eq(pgSchema.ddnsRecords.nodeId, nodeId))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      subdomain: row.subdomain,\n      domain: row.domain,\n      ipAddress: row.ipAddress ?? undefined,\n      ipv6Address: row.ipv6Address ?? undefined,\n      recordType: (row.recordType as 'A' | 'AAAA') ?? 'A',\n      nodeId: row.nodeId ?? undefined,\n      username: row.username ?? undefined,\n      status: (row.status as 'active' | 'banned') ?? 'active',\n      bannedReason: row.bannedReason ?? undefined,\n      ttl: row.ttl ?? 60,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n}\n"]}

package/dist/identity/drizzle/DrizzleIndexedStorage.d.ts

@@ -0,0 +1,26 @@
+import type { IndexedStorage } from '@solid/community-server';
+/**
+ * A generic Key-Value storage backed by a single SQL table.
+ * Maps `type` (container) and `id` (key) to rows in the table.
+ */
+export declare class DrizzleIndexedStorage implements IndexedStorage<any> {
+    private readonly db;
+    private readonly tableName;
+    private readonly definitions;
+    private ready;
+    constructor(connectionString: string, tablePrefix?: string);
+    private toJsonSql;
+    private ensureTable;
+    defineType(type: string, description: any): Promise<void>;
+    createIndex(): Promise<void>;
+    create(type: string, value: any): Promise<any>;
+    has(type: string, id: string): Promise<boolean>;
+    get(type: string, id: string): Promise<any | undefined>;
+    find(type: string, query: any): Promise<any[]>;
+    findIds(type: string, query: any): Promise<string[]>;
+    set(type: string, value: any): Promise<void>;
+    setField(type: string, id: string, key: string, value: any): Promise<void>;
+    delete(type: string, id: string): Promise<void>;
+    entries(type: string): AsyncIterableIterator<any>;
+    private matchesQuery;
+}

package/dist/identity/drizzle/DrizzleIndexedStorage.js

@@ -0,0 +1,159 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DrizzleIndexedStorage = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const db_1 = require("./db");
+function serializePayload(value) {
+    return JSON.stringify(value ?? {});
+}
+function parsePayload(value) {
+    if (value == null) {
+        return {};
+    }
+    if (typeof value === 'string') {
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            return {};
+        }
+    }
+    return value;
+}
+/**
+ * A generic Key-Value storage backed by a single SQL table.
+ * Maps `type` (container) and `id` (key) to rows in the table.
+ */
+class DrizzleIndexedStorage {
+    constructor(connectionString, tablePrefix = 'identity_') {
+        this.definitions = new Map();
+        this.ready = false;
+        this.db = (0, db_1.getIdentityDatabase)(connectionString);
+        this.tableName = `${tablePrefix}store`;
+    }
+    toJsonSql(payload) {
+        return (0, db_1.isDatabaseSqlite)(this.db) ? (0, drizzle_orm_1.sql) `${payload}` : (0, drizzle_orm_1.sql) `${payload}::jsonb`;
+    }
+    async ensureTable() {
+        if (this.ready)
+            return;
+        const jsonType = (0, db_1.isDatabaseSqlite)(this.db) ? drizzle_orm_1.sql.raw('TEXT') : drizzle_orm_1.sql.raw('JSONB');
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      CREATE TABLE IF NOT EXISTS ${tableNameId} (
+        container TEXT NOT NULL,
+        id TEXT NOT NULL,
+        payload ${jsonType} NOT NULL,
+        PRIMARY KEY (container, id)
+      )
+    `);
+        this.ready = true;
+    }
+    async defineType(type, description) {
+        this.definitions.set(type, description);
+        await this.ensureTable();
+    }
+    async createIndex() {
+        // Indexes are not required for the current usage.
+    }
+    async create(type, value) {
+        await this.ensureTable();
+        const id = node_crypto_1.default.randomUUID();
+        const payload = serializePayload(value);
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      INSERT INTO ${tableNameId} (container, id, payload)
+      VALUES (${type}, ${id}, ${this.toJsonSql(payload)})
+    `);
+        return { id, ...value };
+    }
+    async has(type, id) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT 1 FROM ${tableNameId} WHERE container = ${type} AND id = ${id} LIMIT 1`);
+        return result.rows.length > 0;
+    }
+    async get(type, id) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT payload FROM ${tableNameId} WHERE container = ${type} AND id = ${id} LIMIT 1`);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const payload = parsePayload(result.rows[0].payload);
+        return { id, ...payload };
+    }
+    async find(type, query) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        // Note: This fetches all rows for the container and filters in memory. 
+        // For high volume types, this should be optimized with JSON path queries if possible.
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT id, payload FROM ${tableNameId} WHERE container = ${type}`);
+        const matches = [];
+        for (const row of result.rows) {
+            const payload = {
+                id: row.id,
+                ...parsePayload(row.payload),
+            };
+            if (this.matchesQuery(type, payload, query)) {
+                matches.push(payload);
+            }
+        }
+        return matches;
+    }
+    async findIds(type, query) {
+        const rows = await this.find(type, query);
+        return rows.map((row) => row.id);
+    }
+    async set(type, value) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        const { id, ...rest } = value;
+        const payload = serializePayload(rest);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE ${tableNameId}
+      SET payload = ${this.toJsonSql(payload)}
+      WHERE container = ${type} AND id = ${id}
+    `);
+    }
+    async setField(type, id, key, value) {
+        const current = await this.get(type, id);
+        if (!current) {
+            return;
+        }
+        const updated = { ...current, [key]: value };
+        await this.set(type, updated);
+    }
+    async delete(type, id) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `DELETE FROM ${tableNameId} WHERE container = ${type} AND id = ${id}`);
+    }
+    async *entries(type) {
+        await this.ensureTable();
+        const tableNameId = drizzle_orm_1.sql.identifier([this.tableName]);
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT id, payload FROM ${tableNameId} WHERE container = ${type}`);
+        for (const row of result.rows) {
+            yield {
+                id: row.id,
+                ...parsePayload(row.payload),
+            };
+        }
+    }
+    matchesQuery(type, payload, query) {
+        // Basic in-memory implementation of query matching
+        // This mirrors MemoryIndexedStorage behavior for compatibility
+        for (const key of Object.keys(query)) {
+            if (payload[key] !== query[key]) {
+                return false;
+            }
+        }
+        return true;
+    }
+}
+exports.DrizzleIndexedStorage = DrizzleIndexedStorage;
+//# sourceMappingURL=DrizzleIndexedStorage.js.map

package/dist/identity/drizzle/DrizzleIndexedStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DrizzleIndexedStorage.js","sourceRoot":"","sources":["../../../src/identity/drizzle/DrizzleIndexedStorage.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAkC;AAClC,8DAAiC;AAUjC,6BAMc;AAEd,SAAS,gBAAgB,CAAC,KAA8B;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAI,KAAc;IACrC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,EAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAa,qBAAqB;IAMhC,YAAmB,gBAAwB,EAAE,WAAW,GAAG,WAAW;QAHrD,gBAAW,GAA8D,IAAI,GAAG,EAAE,CAAC;QAC5F,UAAK,GAAY,KAAK,CAAC;QAG7B,IAAI,CAAC,EAAE,GAAG,IAAA,wBAAmB,EAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,GAAG,WAAW,OAAO,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,OAAe;QAC/B,OAAO,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAG,EAAA,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAG,EAAA,GAAG,OAAO,SAAS,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAErD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;mCACJ,WAAW;;;kBAG5B,QAAQ;;;KAGrB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,WAAgB;QACpD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,WAA2D,CAAC,CAAC;QACxF,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,kDAAkD;IACpD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAAU;QAC1C,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,qBAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAgC,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAErD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,WAAW;gBACf,IAAI,KAAK,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAClD,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,GAAI,KAAiC,EAAE,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,EAAU;QACvC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA,iBAAiB,WAAW,sBAAsB,IAAI,aAAa,EAAE,UAAU,CAAC,CAAC;QAC/H,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,EAAU;QACvC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA,uBAAuB,WAAW,sBAAsB,IAAI,aAAa,EAAE,UAAU,CAAC,CAAC;QACrI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAA0B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAU;QACxC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,wEAAwE;QACxE,sFAAsF;QACtF,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA,2BAA2B,WAAW,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAClH,MAAM,OAAO,GAAU,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,GAAG,CAAC,EAAY;gBACpB,GAAG,YAAY,CAA0B,GAAG,CAAC,OAAO,CAAC;aACtD,CAAC;YACF,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,KAAgC,CAAC,EAAE,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAU;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAY,CAAC,CAAC;IAC7C,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAU;QACvC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAgC,CAAC;QACzD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;eACxB,WAAW;sBACJ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;0BACnB,IAAI,aAAa,EAAE;KACxC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,EAAU,EAAE,GAAW,EAAE,KAAU;QACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,EAAU;QAC1C,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA,eAAe,WAAW,sBAAsB,IAAI,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IAEM,KAAK,CAAC,CAAC,OAAO,CAAC,IAAY;QAChC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA,2BAA2B,WAAW,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAClH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM;gBACJ,EAAE,EAAE,GAAG,CAAC,EAAY;gBACpB,GAAG,YAAY,CAA0B,GAAG,CAAC,OAAO,CAAC;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,OAAY,EAAE,KAAU;QACzD,mDAAmD;QACnD,+DAA+D;QAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAlJD,sDAkJC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport crypto from 'node:crypto';\nimport type {\n  CreateTypeObject,\n  IndexedQuery,\n  IndexedStorage,\n  IndexTypeCollection,\n  StringKey,\n  TypeObject,\n  ValueTypeDescription,\n} from '@solid/community-server';\nimport { \n  getIdentityDatabase, \n  IdentityDatabase, \n  executeQuery, \n  executeStatement,\n  isDatabaseSqlite \n} from './db';\n\nfunction serializePayload(value: Record<string, unknown>): string {\n  return JSON.stringify(value ?? {});\n}\n\nfunction parsePayload<T>(value: unknown): T {\n  if (value == null) {\n    return {} as T;\n  }\n  if (typeof value === 'string') {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return {} as T;\n    }\n  }\n  return value as T;\n}\n\n/**\n * A generic Key-Value storage backed by a single SQL table.\n * Maps `type` (container) and `id` (key) to rows in the table.\n */\nexport class DrizzleIndexedStorage implements IndexedStorage<any> {\n  private readonly db: IdentityDatabase;\n  private readonly tableName: string;\n  private readonly definitions: Map<string, Record<string, ValueTypeDescription<string>>> = new Map();\n  private ready: boolean = false;\n\n  public constructor(connectionString: string, tablePrefix = 'identity_') {\n    this.db = getIdentityDatabase(connectionString);\n    this.tableName = `${tablePrefix}store`;\n  }\n\n  private toJsonSql(payload: string): any {\n    return isDatabaseSqlite(this.db) ? sql`${payload}` : sql`${payload}::jsonb`;\n  }\n\n  private async ensureTable(): Promise<void> {\n    if (this.ready) return;\n    \n    const jsonType = isDatabaseSqlite(this.db) ? sql.raw('TEXT') : sql.raw('JSONB');\n    const tableNameId = sql.identifier([this.tableName]);\n    \n    await executeStatement(this.db, sql`\n      CREATE TABLE IF NOT EXISTS ${tableNameId} (\n        container TEXT NOT NULL,\n        id TEXT NOT NULL,\n        payload ${jsonType} NOT NULL,\n        PRIMARY KEY (container, id)\n      )\n    `);\n    this.ready = true;\n  }\n\n  public async defineType(type: string, description: any): Promise<void> {\n    this.definitions.set(type, description as Record<string, ValueTypeDescription<string>>);\n    await this.ensureTable();\n  }\n\n  public async createIndex(): Promise<void> {\n    // Indexes are not required for the current usage.\n  }\n\n  public async create(type: string, value: any): Promise<any> {\n    await this.ensureTable();\n    const id = crypto.randomUUID();\n    const payload = serializePayload(value as Record<string, unknown>);\n    const tableNameId = sql.identifier([this.tableName]);\n\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableNameId} (container, id, payload)\n      VALUES (${type}, ${id}, ${this.toJsonSql(payload)})\n    `);\n    return { id, ...(value as Record<string, unknown>) };\n  }\n\n  public async has(type: string, id: string): Promise<boolean> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    const result = await executeQuery(this.db, sql`SELECT 1 FROM ${tableNameId} WHERE container = ${type} AND id = ${id} LIMIT 1`);\n    return result.rows.length > 0;\n  }\n\n  public async get(type: string, id: string): Promise<any | undefined> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    const result = await executeQuery(this.db, sql`SELECT payload FROM ${tableNameId} WHERE container = ${type} AND id = ${id} LIMIT 1`);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const payload = parsePayload<Record<string, unknown>>(result.rows[0].payload);\n    return { id, ...payload };\n  }\n\n  public async find(type: string, query: any): Promise<any[]> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    // Note: This fetches all rows for the container and filters in memory. \n    // For high volume types, this should be optimized with JSON path queries if possible.\n    const result = await executeQuery(this.db, sql`SELECT id, payload FROM ${tableNameId} WHERE container = ${type}`);\n    const matches: any[] = [];\n    for (const row of result.rows) {\n      const payload = {\n        id: row.id as string,\n        ...parsePayload<Record<string, unknown>>(row.payload),\n      };\n      if (this.matchesQuery(type, payload, query as Record<string, unknown>)) {\n        matches.push(payload);\n      }\n    }\n    return matches;\n  }\n\n  public async findIds(type: string, query: any): Promise<string[]> {\n    const rows = await this.find(type, query);\n    return rows.map((row) => row.id as string);\n  }\n\n  public async set(type: string, value: any): Promise<void> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    const { id, ...rest } = value as Record<string, unknown>;\n    const payload = serializePayload(rest);\n    \n    await executeStatement(this.db, sql`\n      UPDATE ${tableNameId}\n      SET payload = ${this.toJsonSql(payload)}\n      WHERE container = ${type} AND id = ${id}\n    `);\n  }\n\n  public async setField(type: string, id: string, key: string, value: any): Promise<void> {\n    const current = await this.get(type, id);\n    if (!current) {\n      return;\n    }\n    const updated = { ...current, [key]: value };\n    await this.set(type, updated);\n  }\n\n  public async delete(type: string, id: string): Promise<void> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    await executeStatement(this.db, sql`DELETE FROM ${tableNameId} WHERE container = ${type} AND id = ${id}`);\n  }\n\n  public async *entries(type: string): AsyncIterableIterator<any> {\n    await this.ensureTable();\n    const tableNameId = sql.identifier([this.tableName]);\n    const result = await executeQuery(this.db, sql`SELECT id, payload FROM ${tableNameId} WHERE container = ${type}`);\n    for (const row of result.rows) {\n      yield {\n        id: row.id as string,\n        ...parsePayload<Record<string, unknown>>(row.payload),\n      };\n    }\n  }\n\n  private matchesQuery(type: string, payload: any, query: any): boolean {\n    // Basic in-memory implementation of query matching\n    // This mirrors MemoryIndexedStorage behavior for compatibility\n    for (const key of Object.keys(query)) {\n      if (payload[key] !== query[key]) {\n        return false;\n      }\n    }\n    return true;\n  }\n}\n"]}

package/dist/identity/drizzle/DrizzleIndexedStorage.jsonld

@@ -0,0 +1,130 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage",
+      "@type": "Class",
+      "requireElement": "DrizzleIndexedStorage",
+      "extends": [
+        {
+          "@type": "GenericComponentExtension",
+          "component": "css:dist/storage/keyvalue/IndexedStorage.jsonld#IndexedStorage",
+          "genericTypeInstances": [
+            {
+              "@type": "ParameterRangeWildcard"
+            }
+          ]
+        }
+      ],
+      "comment": "A generic Key-Value storage backed by a single SQL table. Maps `type` (container) and `id` (key) to rows in the table.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage_connectionString",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage_tablePrefix",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_db",
+          "memberFieldName": "db"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_tableName",
+          "memberFieldName": "tableName"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_definitions",
+          "memberFieldName": "definitions"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_ready",
+          "memberFieldName": "ready"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_toJsonSql",
+          "memberFieldName": "toJsonSql"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_ensureTable",
+          "memberFieldName": "ensureTable"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_defineType",
+          "memberFieldName": "defineType"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_createIndex",
+          "memberFieldName": "createIndex"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_create",
+          "memberFieldName": "create"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_has",
+          "memberFieldName": "has"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_get",
+          "memberFieldName": "get"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_find",
+          "memberFieldName": "find"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_findIds",
+          "memberFieldName": "findIds"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_set",
+          "memberFieldName": "set"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_setField",
+          "memberFieldName": "setField"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_delete",
+          "memberFieldName": "delete"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_entries",
+          "memberFieldName": "entries"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage__member_matchesQuery",
+          "memberFieldName": "matchesQuery"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage_connectionString"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld#DrizzleIndexedStorage_tablePrefix"
+        }
+      ]
+    }
+  ]
+}

package/dist/identity/drizzle/EdgeNodeRepository.d.ts

@@ -0,0 +1,155 @@
+import type { IdentityDatabase } from './db';
+export interface EdgeNodeSummary {
+    nodeId: string;
+    displayName?: string;
+    nodeType: 'center' | 'edge';
+    podCount: number;
+    createdAt?: string;
+    updatedAt?: string;
+    lastSeen?: string;
+    metadata?: Record<string, unknown> | null;
+}
+export interface CreateEdgeNodeResult {
+    nodeId: string;
+    token: string;
+    createdAt: string;
+}
+export interface EdgeNodeSecret {
+    nodeId: string;
+    displayName?: string;
+    tokenHash: string;
+    nodeType: 'center' | 'edge';
+    metadata?: Record<string, unknown> | null;
+}
+export interface CenterNodeInfo {
+    nodeId: string;
+    displayName?: string;
+    internalIp: string;
+    internalPort: number;
+    connectivityStatus: 'unknown' | 'reachable' | 'unreachable';
+    lastSeen?: Date;
+}
+export declare class EdgeNodeRepository {
+    private readonly db;
+    constructor(db: IdentityDatabase);
+    listNodes(): Promise<EdgeNodeSummary[]>;
+    createNode(displayName?: string, accountId?: string): Promise<CreateEdgeNodeResult>;
+    /**
+     * Get the owner account ID of a node.
+     */
+    getNodeOwner(nodeId: string): Promise<string | undefined>;
+    getNodeSecret(nodeId: string): Promise<EdgeNodeSecret | undefined>;
+    updateNodeHeartbeat(nodeId: string, metadata: Record<string, unknown> | null, timestamp: Date): Promise<void>;
+    updateNodeMode(nodeId: string, options: {
+        accessMode: 'direct' | 'proxy';
+        publicIp?: string;
+        publicPort?: number;
+        subdomain?: string;
+        connectivityStatus?: 'unknown' | 'reachable' | 'unreachable';
+        capabilities?: Record<string, unknown>;
+    }): Promise<void>;
+    getNodeConnectivityInfo(nodeId: string): Promise<{
+        nodeId: string;
+        accessMode?: string;
+        publicIp?: string;
+        publicPort?: number;
+        subdomain?: string;
+        connectivityStatus?: string;
+        lastConnectivityCheck?: Date;
+    } | undefined>;
+    mergeNodeMetadata(nodeId: string, patch: Record<string, unknown>): Promise<void>;
+    getNodeMetadata(nodeId: string): Promise<{
+        nodeId: string;
+        metadata: Record<string, unknown> | null;
+        lastSeen?: Date;
+    } | undefined>;
+    replaceNodePods(nodeId: string, pods: string[]): Promise<void>;
+    findNodeByResourcePath(path: string): Promise<{
+        nodeId: string;
+        baseUrl: string;
+        accessMode?: string;
+        metadata?: Record<string, unknown> | null;
+    } | undefined>;
+    findNodeBySubdomain(hostname: string): Promise<{
+        nodeId: string;
+        accessMode?: string;
+        metadata?: Record<string, unknown> | null;
+        subdomain?: string;
+    } | undefined>;
+    matchesToken(tokenHash: string, token: string): boolean;
+    /**
+     * Get node capabilities and related information for admin queries
+     */
+    getNodeCapabilities(nodeId: string): Promise<{
+        nodeId: string;
+        capabilities: Record<string, unknown> | null;
+        stringCapabilities: string[] | null;
+        accessMode: string | null;
+        lastSeen: Date | null;
+        connectivityStatus: string | null;
+    } | undefined>;
+    /**
+     * List all nodes with their capability information
+     */
+    listNodeCapabilities(): Promise<Array<{
+        nodeId: string;
+        capabilities: Record<string, unknown> | null;
+        stringCapabilities: string[] | null;
+        accessMode: string | null;
+        lastSeen: Date | null;
+        connectivityStatus: string | null;
+    }>>;
+    /**
+     * Register or update a center node in the cluster.
+     * Center nodes use the same table as edge nodes but with nodeType='center'.
+     */
+    registerCenterNode(options: {
+        nodeId: string;
+        displayName?: string;
+        internalIp: string;
+        internalPort: number;
+    }): Promise<{
+        nodeId: string;
+        token: string;
+    }>;
+    /**
+     * Update center node heartbeat with internal endpoint info.
+     */
+    updateCenterNodeHeartbeat(nodeId: string, internalIp: string, internalPort: number, timestamp: Date): Promise<void>;
+    /**
+     * List all center nodes in the cluster.
+     */
+    listCenterNodes(): Promise<CenterNodeInfo[]>;
+    /**
+     * Get a specific center node by ID.
+     */
+    getCenterNode(nodeId: string): Promise<CenterNodeInfo | undefined>;
+    /**
+     * Find a center node by its internal endpoint (for routing).
+     */
+    findCenterNodeByEndpoint(internalIp: string, internalPort: number): Promise<CenterNodeInfo | undefined>;
+    /**
+     * Mark a center node as unreachable (for health checks).
+     */
+    markCenterNodeUnreachable(nodeId: string): Promise<void>;
+    /**
+     * Remove a center node from the cluster.
+     */
+    removeCenterNode(nodeId: string): Promise<boolean>;
+    /**
+     * List nodes owned by a specific account
+     */
+    listNodesByAccount(accountId: string): Promise<Array<{
+        nodeId: string;
+        displayName?: string;
+        capabilities: Record<string, unknown> | null;
+        stringCapabilities: string[] | null;
+        accessMode: string | null;
+        lastSeen: Date | null;
+        connectivityStatus: string | null;
+    }>>;
+    /**
+     * Delete a node
+     */
+    deleteNode(nodeId: string): Promise<boolean>;
+}