@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/identity/drizzle/EdgeNodeRepository.js

@@ -0,0 +1,555 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EdgeNodeRepository = void 0;
+const node_crypto_1 = require("node:crypto");
+const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = require("./db");
+const schema_1 = require("./schema");
+class EdgeNodeRepository {
+    constructor(db) {
+        this.db = db;
+    }
+    async listNodes() {
+        // Use different COUNT syntax for SQLite vs PostgreSQL
+        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
+        const result = isSqlite
+            ? await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+          SELECT en.id,
+                 en.display_name,
+                 en.node_type,
+                 en.created_at,
+                 en.updated_at,
+                 en.last_seen,
+                 en.metadata,
+                 COALESCE(pods.count, 0) AS pod_count
+          FROM identity_edge_node en
+          LEFT JOIN (
+            SELECT node_id, COUNT(*) AS count
+            FROM identity_edge_node_pod
+            GROUP BY node_id
+          ) pods ON pods.node_id = en.id
+          ORDER BY en.created_at ASC
+        `)
+            : await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+          SELECT en.id,
+                 en.display_name,
+                 en.node_type,
+                 en.created_at,
+                 en.updated_at,
+                 en.last_seen,
+                 en.metadata,
+                 COALESCE(pods.count, 0) AS pod_count
+          FROM identity_edge_node en
+          LEFT JOIN (
+            SELECT node_id, COUNT(*)::integer AS count
+            FROM identity_edge_node_pod
+            GROUP BY node_id
+          ) pods ON pods.node_id = en.id
+          ORDER BY en.created_at ASC
+        `);
+        return result.rows.map((row) => {
+            const createdAt = (0, db_1.fromDbTimestamp)(row.created_at);
+            const updatedAt = (0, db_1.fromDbTimestamp)(row.updated_at);
+            const lastSeen = (0, db_1.fromDbTimestamp)(row.last_seen);
+            return {
+                nodeId: String(row.id),
+                displayName: row.display_name == null ? undefined : String(row.display_name),
+                nodeType: (row.node_type === 'center' ? 'center' : 'edge'),
+                podCount: Number(row.pod_count ?? 0),
+                createdAt: createdAt?.toISOString(),
+                updatedAt: updatedAt?.toISOString(),
+                lastSeen: lastSeen?.toISOString(),
+                metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),
+            };
+        });
+    }
+    async createNode(displayName, accountId) {
+        const nodeId = (0, node_crypto_1.randomUUID)();
+        const token = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const tokenHash = (0, node_crypto_1.createHash)('sha256').update(token).digest('hex');
+        const now = new Date();
+        const ts = (0, db_1.toDbTimestamp)(this.db, now);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      INSERT INTO identity_edge_node (id, display_name, owner_account_id, token_hash, created_at, updated_at)
+      VALUES (${nodeId}, ${displayName ?? null}, ${accountId ?? null}, ${tokenHash}, ${ts}, ${ts})
+    `);
+        return {
+            nodeId,
+            token,
+            createdAt: now.toISOString(),
+        };
+    }
+    /**
+     * Get the owner account ID of a node.
+     */
+    async getNodeOwner(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT owner_account_id
+      FROM identity_edge_node
+      WHERE id = ${nodeId}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        return result.rows[0].owner_account_id ? String(result.rows[0].owner_account_id) : undefined;
+    }
+    async getNodeSecret(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, token_hash, node_type, metadata
+      FROM identity_edge_node
+      WHERE id = ${nodeId}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            displayName: row.display_name == null ? undefined : String(row.display_name),
+            tokenHash: String(row.token_hash ?? ''),
+            nodeType: (row.node_type === 'center' ? 'center' : 'edge'),
+            metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),
+        };
+    }
+    async updateNodeHeartbeat(nodeId, metadata, timestamp) {
+        const payload = metadata == null ? null : JSON.stringify(metadata);
+        const ts = (0, db_1.toDbTimestamp)(this.db, timestamp);
+        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
+        if (isSqlite) {
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET metadata = ${payload},
+            last_seen = ${ts},
+            updated_at = ${ts}
+        WHERE id = ${nodeId}
+      `);
+        }
+        else {
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET metadata = ${payload}::jsonb,
+            last_seen = ${ts},
+            updated_at = ${ts}
+        WHERE id = ${nodeId}
+      `);
+        }
+    }
+    async updateNodeMode(nodeId, options) {
+        const capabilitiesPayload = options.capabilities ? JSON.stringify(options.capabilities) : null;
+        const now = new Date();
+        const ts = (0, db_1.toDbTimestamp)(this.db, now);
+        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
+        if (isSqlite) {
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET access_mode = ${options.accessMode},
+            public_ip = ${options.publicIp ?? null},
+            public_port = ${options.publicPort ?? null},
+            subdomain = ${options.subdomain ?? null},
+            connectivity_status = ${options.connectivityStatus ?? 'unknown'},
+            capabilities = ${capabilitiesPayload},
+            last_connectivity_check = ${ts},
+            updated_at = ${ts}
+        WHERE id = ${nodeId}
+      `);
+        }
+        else {
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET access_mode = ${options.accessMode},
+            public_ip = ${options.publicIp ?? null},
+            public_port = ${options.publicPort ?? null},
+            subdomain = ${options.subdomain ?? null},
+            connectivity_status = ${options.connectivityStatus ?? 'unknown'},
+            capabilities = ${capabilitiesPayload}::jsonb,
+            last_connectivity_check = ${ts},
+            updated_at = ${ts}
+        WHERE id = ${nodeId}
+      `);
+        }
+    }
+    async getNodeConnectivityInfo(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, access_mode, public_ip, public_port, subdomain, 
+             connectivity_status, last_connectivity_check
+      FROM identity_edge_node
+      WHERE id = ${nodeId}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            accessMode: row.access_mode ? String(row.access_mode) : undefined,
+            publicIp: row.public_ip ? String(row.public_ip) : undefined,
+            publicPort: row.public_port ? Number(row.public_port) : undefined,
+            subdomain: row.subdomain ? String(row.subdomain) : undefined,
+            connectivityStatus: row.connectivity_status ? String(row.connectivity_status) : undefined,
+            lastConnectivityCheck: (0, db_1.fromDbTimestamp)(row.last_connectivity_check),
+        };
+    }
+    async mergeNodeMetadata(nodeId, patch) {
+        const payload = JSON.stringify(patch);
+        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
+        const ts = (0, db_1.toDbTimestamp)(this.db, new Date());
+        if (isSqlite) {
+            // SQLite: use json_patch or simple replace
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET metadata = json_patch(COALESCE(metadata, '{}'), ${payload}),
+            updated_at = ${ts}
+        WHERE id = ${nodeId}
+      `);
+        }
+        else {
+            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+        UPDATE identity_edge_node
+        SET metadata = COALESCE(metadata, '{}'::jsonb) || ${payload}::jsonb,
+            updated_at = now()
+        WHERE id = ${nodeId}
+      `);
+        }
+    }
+    async getNodeMetadata(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, metadata, last_seen
+      FROM identity_edge_node
+      WHERE id = ${nodeId}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),
+            lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen),
+        };
+    }
+    async replaceNodePods(nodeId, pods) {
+        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
+        if (isSqlite) {
+            // SQLite: use synchronous transaction via db.run
+            this.db.run((0, drizzle_orm_1.sql) `DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);
+            if (pods.length > 0) {
+                const values = pods.map((baseUrl) => (0, drizzle_orm_1.sql) `(${nodeId}, ${baseUrl})`);
+                this.db.run((0, drizzle_orm_1.sql) `
+          INSERT INTO identity_edge_node_pod (node_id, base_url)
+          VALUES ${drizzle_orm_1.sql.join(values, (0, drizzle_orm_1.sql) `, `)}
+          ON CONFLICT DO NOTHING
+        `);
+            }
+        }
+        else {
+            // PostgreSQL: use async transaction
+            await this.db.transaction(async (tx) => {
+                await tx.execute((0, drizzle_orm_1.sql) `DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);
+                if (pods.length > 0) {
+                    const values = pods.map((baseUrl) => (0, drizzle_orm_1.sql) `(${nodeId}, ${baseUrl})`);
+                    await tx.execute((0, drizzle_orm_1.sql) `
+            INSERT INTO identity_edge_node_pod (node_id, base_url)
+            VALUES ${drizzle_orm_1.sql.join(values, (0, drizzle_orm_1.sql) `, `)}
+            ON CONFLICT DO NOTHING
+          `);
+                }
+            });
+        }
+    }
+    async findNodeByResourcePath(path) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT en.id,
+             en.access_mode,
+             en.metadata,
+             pods.base_url
+      FROM identity_edge_node_pod pods
+      JOIN identity_edge_node en ON en.id = pods.node_id
+      WHERE ${path} LIKE pods.base_url || '%'
+      ORDER BY length(pods.base_url) DESC
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            baseUrl: String(row.base_url),
+            accessMode: row.access_mode ? String(row.access_mode) : undefined,
+            metadata: row.metadata ?? null,
+        };
+    }
+    async findNodeBySubdomain(hostname) {
+        const normalized = hostname.trim().toLowerCase();
+        if (normalized.length === 0) {
+            return undefined;
+        }
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, access_mode, metadata, subdomain
+      FROM identity_edge_node
+      WHERE subdomain = ${normalized}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            accessMode: row.access_mode ? String(row.access_mode) : undefined,
+            metadata: row.metadata ?? null,
+            subdomain: row.subdomain ? String(row.subdomain) : undefined,
+        };
+    }
+    matchesToken(tokenHash, token) {
+        if (!tokenHash || typeof tokenHash !== 'string') {
+            return false;
+        }
+        try {
+            const expected = Buffer.from(tokenHash, 'hex');
+            const actual = (0, node_crypto_1.createHash)('sha256').update(token).digest();
+            if (expected.length !== actual.length) {
+                return false;
+            }
+            return (0, node_crypto_1.timingSafeEqual)(expected, actual);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get node capabilities and related information for admin queries
+     */
+    async getNodeCapabilities(nodeId) {
+        const row = await this.db
+            .select({
+            id: schema_1.edgeNodes.id,
+            capabilities: schema_1.edgeNodes.capabilities,
+            metadata: schema_1.edgeNodes.metadata,
+            accessMode: schema_1.edgeNodes.accessMode,
+            lastSeen: schema_1.edgeNodes.lastSeen,
+            connectivityStatus: schema_1.edgeNodes.connectivityStatus,
+        })
+            .from(schema_1.edgeNodes)
+            .where((0, drizzle_orm_1.eq)(schema_1.edgeNodes.id, nodeId))
+            .limit(1);
+        if (row.length === 0) {
+            return undefined;
+        }
+        const node = row[0];
+        const metadata = node.metadata;
+        return {
+            nodeId: node.id,
+            capabilities: node.capabilities,
+            stringCapabilities: metadata?.capabilities ?? null,
+            accessMode: node.accessMode,
+            lastSeen: node.lastSeen,
+            connectivityStatus: node.connectivityStatus,
+        };
+    }
+    /**
+     * List all nodes with their capability information
+     */
+    async listNodeCapabilities() {
+        const rows = await this.db
+            .select({
+            id: schema_1.edgeNodes.id,
+            capabilities: schema_1.edgeNodes.capabilities,
+            metadata: schema_1.edgeNodes.metadata,
+            accessMode: schema_1.edgeNodes.accessMode,
+            lastSeen: schema_1.edgeNodes.lastSeen,
+            connectivityStatus: schema_1.edgeNodes.connectivityStatus,
+        })
+            .from(schema_1.edgeNodes)
+            .orderBy(schema_1.edgeNodes.lastSeen);
+        return rows.map((row) => {
+            const metadata = row.metadata;
+            return {
+                nodeId: row.id,
+                capabilities: row.capabilities,
+                stringCapabilities: metadata?.capabilities ?? null,
+                accessMode: row.accessMode,
+                lastSeen: row.lastSeen,
+                connectivityStatus: row.connectivityStatus,
+            };
+        });
+    }
+    // ============ Center Node Methods ============
+    /**
+     * Register or update a center node in the cluster.
+     * Center nodes use the same table as edge nodes but with nodeType='center'.
+     */
+    async registerCenterNode(options) {
+        const token = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const tokenHash = (0, node_crypto_1.createHash)('sha256').update(token).digest('hex');
+        const now = Math.floor(Date.now() / 1000); // Unix timestamp for SQLite compatibility
+        // Use upsert pattern: INSERT ... ON CONFLICT UPDATE
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      INSERT INTO identity_edge_node (
+        id, display_name, token_hash, node_type, internal_ip, internal_port,
+        connectivity_status, created_at, updated_at, last_seen
+      )
+      VALUES (
+        ${options.nodeId}, ${options.displayName ?? null}, ${tokenHash}, 'center',
+        ${options.internalIp}, ${options.internalPort}, 'unknown', ${now}, ${now}, ${now}
+      )
+      ON CONFLICT (id) DO UPDATE SET
+        display_name = EXCLUDED.display_name,
+        internal_ip = EXCLUDED.internal_ip,
+        internal_port = EXCLUDED.internal_port,
+        updated_at = EXCLUDED.updated_at,
+        last_seen = EXCLUDED.last_seen
+    `);
+        return { nodeId: options.nodeId, token };
+    }
+    /**
+     * Update center node heartbeat with internal endpoint info.
+     */
+    async updateCenterNodeHeartbeat(nodeId, internalIp, internalPort, timestamp) {
+        const ts = Math.floor(timestamp.getTime() / 1000); // Unix timestamp for SQLite compatibility
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE identity_edge_node
+      SET internal_ip = ${internalIp},
+          internal_port = ${internalPort},
+          last_seen = ${ts},
+          updated_at = ${ts},
+          connectivity_status = 'reachable'
+      WHERE id = ${nodeId} AND node_type = 'center'
+    `);
+    }
+    /**
+     * List all center nodes in the cluster.
+     */
+    async listCenterNodes() {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen
+      FROM identity_edge_node
+      WHERE node_type = 'center'
+      ORDER BY created_at ASC
+    `);
+        return result.rows.map((row) => ({
+            nodeId: String(row.id),
+            displayName: row.display_name == null ? undefined : String(row.display_name),
+            internalIp: String(row.internal_ip ?? ''),
+            internalPort: Number(row.internal_port ?? 0),
+            connectivityStatus: (row.connectivity_status ?? 'unknown'),
+            lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen),
+        }));
+    }
+    /**
+     * Get a specific center node by ID.
+     */
+    async getCenterNode(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen
+      FROM identity_edge_node
+      WHERE id = ${nodeId} AND node_type = 'center'
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            displayName: row.display_name == null ? undefined : String(row.display_name),
+            internalIp: String(row.internal_ip ?? ''),
+            internalPort: Number(row.internal_port ?? 0),
+            connectivityStatus: (row.connectivity_status ?? 'unknown'),
+            lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen),
+        };
+    }
+    /**
+     * Find a center node by its internal endpoint (for routing).
+     */
+    async findCenterNodeByEndpoint(internalIp, internalPort) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen
+      FROM identity_edge_node
+      WHERE node_type = 'center' AND internal_ip = ${internalIp} AND internal_port = ${internalPort}
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            displayName: row.display_name == null ? undefined : String(row.display_name),
+            internalIp: String(row.internal_ip ?? ''),
+            internalPort: Number(row.internal_port ?? 0),
+            connectivityStatus: (row.connectivity_status ?? 'unknown'),
+            lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen),
+        };
+    }
+    /**
+     * Mark a center node as unreachable (for health checks).
+     */
+    async markCenterNodeUnreachable(nodeId) {
+        const ts = (0, db_1.toDbTimestamp)(this.db, new Date());
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE identity_edge_node
+      SET connectivity_status = 'unreachable',
+          updated_at = ${ts}
+      WHERE id = ${nodeId} AND node_type = 'center'
+    `);
+    }
+    /**
+     * Remove a center node from the cluster.
+     */
+    async removeCenterNode(nodeId) {
+        // Note: For SQLite, we can't easily get affected row count, so just execute and return true
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      DELETE FROM identity_edge_node
+      WHERE id = ${nodeId} AND node_type = 'center'
+    `);
+        return true;
+    }
+    // ============ Account-based Node Methods ============
+    /**
+     * List nodes owned by a specific account
+     */
+    async listNodesByAccount(accountId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, capabilities, metadata, access_mode, last_seen, connectivity_status
+      FROM identity_edge_node
+      WHERE owner_account_id = ${accountId} AND node_type = 'edge'
+      ORDER BY created_at DESC
+    `);
+        return result.rows.map((row) => {
+            const metadata = typeof row.metadata === 'string' ? JSON.parse(row.metadata) : row.metadata;
+            const capabilities = typeof row.capabilities === 'string' ? JSON.parse(row.capabilities) : row.capabilities;
+            return {
+                nodeId: String(row.id),
+                displayName: row.display_name ?? undefined,
+                capabilities: capabilities ?? null,
+                stringCapabilities: metadata?.capabilities ?? null,
+                accessMode: row.access_mode ?? null,
+                lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen) ?? null,
+                connectivityStatus: row.connectivity_status ?? null,
+            };
+        });
+    }
+    /**
+     * Delete a node
+     */
+    async deleteNode(nodeId) {
+        // First delete associated pods
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}
+    `);
+        // Then delete the node
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      DELETE FROM identity_edge_node
+      WHERE id = ${nodeId}
+      RETURNING id
+    `);
+        return result.rows.length > 0;
+    }
+}
+exports.EdgeNodeRepository = EdgeNodeRepository;
+//# sourceMappingURL=EdgeNodeRepository.js.map

package/dist/identity/drizzle/EdgeNodeRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/EdgeNodeRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAmF;AACnF,6CAAsC;AAEtC,6BAAwG;AACxG,qCAAqC;AAoCrC,MAAa,kBAAkB;IAC7B,YAAoC,EAAoB;QAApB,OAAE,GAAF,EAAE,CAAkB;IAAG,CAAC;IAErD,KAAK,CAAC,SAAS;QACpB,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;SAgB9B,CAAC;YACJ,CAAC,CAAC,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;SAgB9B,CAAC,CAAC;QAEP,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAmB,EAAE;YACnD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC5E,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAsB;gBAC/E,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACjC,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;aAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,WAAoB,EAAE,SAAkB;QAC9D,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;gBAEvB,MAAM,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,EAAE,KAAK,EAAE;KAC3F,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,KAAK;YACL,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACvC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAsB;YAC/E,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;SAC/F,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,QAAwC,EAAE,SAAe;QACxG,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;yBAEhB,OAAO;0BACN,EAAE;2BACD,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;yBAEhB,OAAO;0BACN,EAAE;2BACD,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,OAO3C;QACC,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4BAEb,OAAO,CAAC,UAAU;0BACpB,OAAO,CAAC,QAAQ,IAAI,IAAI;4BACtB,OAAO,CAAC,UAAU,IAAI,IAAI;0BAC5B,OAAO,CAAC,SAAS,IAAI,IAAI;oCACf,OAAO,CAAC,kBAAkB,IAAI,SAAS;6BAC9C,mBAAmB;wCACR,EAAE;2BACf,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4BAEb,OAAO,CAAC,UAAU;0BACpB,OAAO,CAAC,QAAQ,IAAI,IAAI;4BACtB,OAAO,CAAC,UAAU,IAAI,IAAI;0BAC5B,OAAO,CAAC,SAAS,IAAI,IAAI;oCACf,OAAO,CAAC,kBAAkB,IAAI,SAAS;6BAC9C,mBAAmB;wCACR,EAAE;2BACf,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,MAAc;QASjD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;mBAI/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;YACzF,qBAAqB,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,uBAAuB,CAAC;SACpE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,KAA8B;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE9C,IAAI,QAAQ,EAAE,CAAC;YACb,2CAA2C;YAC3C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;8DAEqB,OAAO;2BAC1C,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4DAEmB,OAAO;;qBAE9C,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc;QACzC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC9F,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAc;QACzD,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,iDAAiD;YACjD,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,iBAAG,EAAA,sDAAsD,MAAM,EAAE,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,iBAAG,EAAA,IAAI,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC;gBACnE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,iBAAG,EAAA;;mBAEJ,iBAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,iBAAG,EAAA,IAAI,CAAC;;SAEnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;gBACvD,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,sDAAsD,MAAM,EAAE,CAAC,CAAC;gBACpF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,iBAAG,EAAA,IAAI,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC;oBACnE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA;;qBAET,iBAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,iBAAG,EAAA,IAAI,CAAC;;WAEnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;cAOpC,IAAI;;;KAGb,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;0BAGxB,UAAU;;KAE/B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,SAAiB,EAAE,KAAa;QAClD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAA,6BAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAQ7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,KAAK,CAAC,IAAA,gBAAE,EAAC,kBAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA0C,CAAC;QAEjE,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,YAAY,EAAE,IAAI,CAAC,YAA8C;YACjE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;YAC9D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,oBAAoB;QAQ/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,OAAO,CAAC,kBAAS,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmB,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAA0C,CAAC;YAEhE,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,YAAY,EAAE,GAAG,CAAC,YAA8C;gBAChE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;gBAC9D,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAEhD;;;OAGG;IACI,KAAK,CAAC,kBAAkB,CAAC,OAK/B;QACC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAErF,oDAAoD;QACpD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;UAM7B,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,KAAK,SAAS;UAC5D,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG;;;;;;;;KAQnF,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CACpC,MAAc,EACd,UAAkB,EAClB,YAAoB,EACpB,SAAe;QAEf,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAC7F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;0BAEb,UAAU;4BACR,YAAY;wBAChB,EAAE;yBACD,EAAE;;mBAER,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;KAK7C,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAkB,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,UAAkB,EAAE,YAAoB;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;qDAGG,UAAU,wBAAwB,YAAY;;KAE9F,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACnD,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;yBAGd,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC1C,4FAA4F;QAC5F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAEpB,MAAM;KACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IAEvD;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAS/C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;iCAGjB,SAAS;;KAErC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAA2C,CAAC;YAChI,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,YAA+C,CAAC;YAChJ,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;gBAC1C,YAAY,EAAE,YAAY,IAAI,IAAI;gBAClC,kBAAkB,EAAG,QAAQ,EAAE,YAAqC,IAAI,IAAI;gBAC5E,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACnC,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;gBAChD,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI;aACpD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,MAAc;QACpC,+BAA+B;QAC/B,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;2DACoB,MAAM;KAC5D,CAAC,CAAC;QAEH,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAE/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;CACF;AA7nBD,gDA6nBC","sourcesContent":["import { randomBytes, randomUUID, createHash, timingSafeEqual } from 'node:crypto';\nimport { sql, eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { executeStatement, executeQuery, isDatabaseSqlite, toDbTimestamp, fromDbTimestamp } from './db';\nimport { edgeNodes } from './schema';\n\nexport interface EdgeNodeSummary {\n  nodeId: string;\n  displayName?: string;\n  nodeType: 'center' | 'edge';\n  podCount: number;\n  createdAt?: string;\n  updatedAt?: string;\n  lastSeen?: string;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CreateEdgeNodeResult {\n  nodeId: string;\n  token: string;\n  createdAt: string;\n}\n\nexport interface EdgeNodeSecret {\n  nodeId: string;\n  displayName?: string;\n  tokenHash: string;\n  nodeType: 'center' | 'edge';\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CenterNodeInfo {\n  nodeId: string;\n  displayName?: string;\n  internalIp: string;\n  internalPort: number;\n  connectivityStatus: 'unknown' | 'reachable' | 'unreachable';\n  lastSeen?: Date;\n}\n\nexport class EdgeNodeRepository {\n  public constructor(private readonly db: IdentityDatabase) {}\n\n  public async listNodes(): Promise<EdgeNodeSummary[]> {\n    // Use different COUNT syntax for SQLite vs PostgreSQL\n    const isSqlite = isDatabaseSqlite(this.db);\n    const result = isSqlite\n      ? await executeQuery(this.db, sql`\n          SELECT en.id,\n                 en.display_name,\n                 en.node_type,\n                 en.created_at,\n                 en.updated_at,\n                 en.last_seen,\n                 en.metadata,\n                 COALESCE(pods.count, 0) AS pod_count\n          FROM identity_edge_node en\n          LEFT JOIN (\n            SELECT node_id, COUNT(*) AS count\n            FROM identity_edge_node_pod\n            GROUP BY node_id\n          ) pods ON pods.node_id = en.id\n          ORDER BY en.created_at ASC\n        `)\n      : await executeQuery(this.db, sql`\n          SELECT en.id,\n                 en.display_name,\n                 en.node_type,\n                 en.created_at,\n                 en.updated_at,\n                 en.last_seen,\n                 en.metadata,\n                 COALESCE(pods.count, 0) AS pod_count\n          FROM identity_edge_node en\n          LEFT JOIN (\n            SELECT node_id, COUNT(*)::integer AS count\n            FROM identity_edge_node_pod\n            GROUP BY node_id\n          ) pods ON pods.node_id = en.id\n          ORDER BY en.created_at ASC\n        `);\n\n    return result.rows.map((row: any): EdgeNodeSummary => {\n      const createdAt = fromDbTimestamp(row.created_at);\n      const updatedAt = fromDbTimestamp(row.updated_at);\n      const lastSeen = fromDbTimestamp(row.last_seen);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name == null ? undefined : String(row.display_name),\n        nodeType: (row.node_type === 'center' ? 'center' : 'edge') as 'center' | 'edge',\n        podCount: Number(row.pod_count ?? 0),\n        createdAt: createdAt?.toISOString(),\n        updatedAt: updatedAt?.toISOString(),\n        lastSeen: lastSeen?.toISOString(),\n        metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      };\n    });\n  }\n\n  public async createNode(displayName?: string, accountId?: string): Promise<CreateEdgeNodeResult> {\n    const nodeId = randomUUID();\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (id, display_name, owner_account_id, token_hash, created_at, updated_at)\n      VALUES (${nodeId}, ${displayName ?? null}, ${accountId ?? null}, ${tokenHash}, ${ts}, ${ts})\n    `);\n\n    return {\n      nodeId,\n      token,\n      createdAt: now.toISOString(),\n    };\n  }\n\n  /**\n   * Get the owner account ID of a node.\n   */\n  public async getNodeOwner(nodeId: string): Promise<string | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT owner_account_id\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    \n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    \n    return result.rows[0].owner_account_id ? String(result.rows[0].owner_account_id) : undefined;\n  }\n\n  public async getNodeSecret(nodeId: string): Promise<EdgeNodeSecret | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, token_hash, node_type, metadata\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      tokenHash: String(row.token_hash ?? ''),\n      nodeType: (row.node_type === 'center' ? 'center' : 'edge') as 'center' | 'edge',\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n    };\n  }\n\n  public async updateNodeHeartbeat(nodeId: string, metadata: Record<string, unknown> | null, timestamp: Date): Promise<void> {\n    const payload = metadata == null ? null : JSON.stringify(metadata);\n    const ts = toDbTimestamp(this.db, timestamp);\n    const isSqlite = isDatabaseSqlite(this.db);\n\n    if (isSqlite) {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = ${payload},\n            last_seen = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = ${payload}::jsonb,\n            last_seen = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async updateNodeMode(nodeId: string, options: {\n    accessMode: 'direct' | 'proxy';\n    publicIp?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: 'unknown' | 'reachable' | 'unreachable';\n    capabilities?: Record<string, unknown>;\n  }): Promise<void> {\n    const capabilitiesPayload = options.capabilities ? JSON.stringify(options.capabilities) : null;\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n    const isSqlite = isDatabaseSqlite(this.db);\n\n    if (isSqlite) {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET access_mode = ${options.accessMode},\n            public_ip = ${options.publicIp ?? null},\n            public_port = ${options.publicPort ?? null},\n            subdomain = ${options.subdomain ?? null},\n            connectivity_status = ${options.connectivityStatus ?? 'unknown'},\n            capabilities = ${capabilitiesPayload},\n            last_connectivity_check = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET access_mode = ${options.accessMode},\n            public_ip = ${options.publicIp ?? null},\n            public_port = ${options.publicPort ?? null},\n            subdomain = ${options.subdomain ?? null},\n            connectivity_status = ${options.connectivityStatus ?? 'unknown'},\n            capabilities = ${capabilitiesPayload}::jsonb,\n            last_connectivity_check = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async getNodeConnectivityInfo(nodeId: string): Promise<{\n    nodeId: string;\n    accessMode?: string;\n    publicIp?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: string;\n    lastConnectivityCheck?: Date;\n  } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, public_ip, public_port, subdomain, \n             connectivity_status, last_connectivity_check\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    \n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    \n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      publicIp: row.public_ip ? String(row.public_ip) : undefined,\n      publicPort: row.public_port ? Number(row.public_port) : undefined,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n      connectivityStatus: row.connectivity_status ? String(row.connectivity_status) : undefined,\n      lastConnectivityCheck: fromDbTimestamp(row.last_connectivity_check),\n    };\n  }\n\n  public async mergeNodeMetadata(nodeId: string, patch: Record<string, unknown>): Promise<void> {\n    const payload = JSON.stringify(patch);\n    const isSqlite = isDatabaseSqlite(this.db);\n    const ts = toDbTimestamp(this.db, new Date());\n\n    if (isSqlite) {\n      // SQLite: use json_patch or simple replace\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = json_patch(COALESCE(metadata, '{}'), ${payload}),\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = COALESCE(metadata, '{}'::jsonb) || ${payload}::jsonb,\n            updated_at = now()\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async getNodeMetadata(nodeId: string): Promise<{ nodeId: string; metadata: Record<string, unknown> | null; lastSeen?: Date } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, metadata, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  public async replaceNodePods(nodeId: string, pods: string[]): Promise<void> {\n    const isSqlite = isDatabaseSqlite(this.db);\n    \n    if (isSqlite) {\n      // SQLite: use synchronous transaction via db.run\n      this.db.run(sql`DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);\n      if (pods.length > 0) {\n        const values = pods.map((baseUrl) => sql`(${nodeId}, ${baseUrl})`);\n        this.db.run(sql`\n          INSERT INTO identity_edge_node_pod (node_id, base_url)\n          VALUES ${sql.join(values, sql`, `)}\n          ON CONFLICT DO NOTHING\n        `);\n      }\n    } else {\n      // PostgreSQL: use async transaction\n      await this.db.transaction(async (tx: IdentityDatabase) => {\n        await tx.execute(sql`DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);\n        if (pods.length > 0) {\n          const values = pods.map((baseUrl) => sql`(${nodeId}, ${baseUrl})`);\n          await tx.execute(sql`\n            INSERT INTO identity_edge_node_pod (node_id, base_url)\n            VALUES ${sql.join(values, sql`, `)}\n            ON CONFLICT DO NOTHING\n          `);\n        }\n      });\n    }\n  }\n\n  public async findNodeByResourcePath(path: string): Promise<{ nodeId: string; baseUrl: string; accessMode?: string; metadata?: Record<string, unknown> | null } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT en.id,\n             en.access_mode,\n             en.metadata,\n             pods.base_url\n      FROM identity_edge_node_pod pods\n      JOIN identity_edge_node en ON en.id = pods.node_id\n      WHERE ${path} LIKE pods.base_url || '%'\n      ORDER BY length(pods.base_url) DESC\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      baseUrl: String(row.base_url),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n    };\n  }\n\n  public async findNodeBySubdomain(hostname: string): Promise<{ nodeId: string; accessMode?: string; metadata?: Record<string, unknown> | null; subdomain?: string } | undefined> {\n    const normalized = hostname.trim().toLowerCase();\n    if (normalized.length === 0) {\n      return undefined;\n    }\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, metadata, subdomain\n      FROM identity_edge_node\n      WHERE subdomain = ${normalized}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n    };\n  }\n\n  public matchesToken(tokenHash: string, token: string): boolean {\n    if (!tokenHash || typeof tokenHash !== 'string') {\n      return false;\n    }\n    try {\n      const expected = Buffer.from(tokenHash, 'hex');\n      const actual = createHash('sha256').update(token).digest();\n      if (expected.length !== actual.length) {\n        return false;\n      }\n      return timingSafeEqual(expected, actual);\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * Get node capabilities and related information for admin queries\n   */\n  public async getNodeCapabilities(nodeId: string): Promise<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  } | undefined> {\n    const row = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .where(eq(edgeNodes.id, nodeId))\n      .limit(1);\n\n    if (row.length === 0) {\n      return undefined;\n    }\n\n    const node = row[0];\n    const metadata = node.metadata as Record<string, unknown> | null;\n    \n    return {\n      nodeId: node.id,\n      capabilities: node.capabilities as Record<string, unknown> | null,\n      stringCapabilities: metadata?.capabilities as string[] ?? null,\n      accessMode: node.accessMode,\n      lastSeen: node.lastSeen,\n      connectivityStatus: node.connectivityStatus,\n    };\n  }\n\n  /**\n   * List all nodes with their capability information\n   */\n  public async listNodeCapabilities(): Promise<Array<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const rows = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .orderBy(edgeNodes.lastSeen);\n\n    return rows.map((row: typeof rows[0]) => {\n      const metadata = row.metadata as Record<string, unknown> | null;\n      \n      return {\n        nodeId: row.id,\n        capabilities: row.capabilities as Record<string, unknown> | null,\n        stringCapabilities: metadata?.capabilities as string[] ?? null,\n        accessMode: row.accessMode,\n        lastSeen: row.lastSeen,\n        connectivityStatus: row.connectivityStatus,\n      };\n    });\n  }\n\n  // ============ Center Node Methods ============\n\n  /**\n   * Register or update a center node in the cluster.\n   * Center nodes use the same table as edge nodes but with nodeType='center'.\n   */\n  public async registerCenterNode(options: {\n    nodeId: string;\n    displayName?: string;\n    internalIp: string;\n    internalPort: number;\n  }): Promise<{ nodeId: string; token: string }> {\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = Math.floor(Date.now() / 1000); // Unix timestamp for SQLite compatibility\n\n    // Use upsert pattern: INSERT ... ON CONFLICT UPDATE\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (\n        id, display_name, token_hash, node_type, internal_ip, internal_port,\n        connectivity_status, created_at, updated_at, last_seen\n      )\n      VALUES (\n        ${options.nodeId}, ${options.displayName ?? null}, ${tokenHash}, 'center',\n        ${options.internalIp}, ${options.internalPort}, 'unknown', ${now}, ${now}, ${now}\n      )\n      ON CONFLICT (id) DO UPDATE SET\n        display_name = EXCLUDED.display_name,\n        internal_ip = EXCLUDED.internal_ip,\n        internal_port = EXCLUDED.internal_port,\n        updated_at = EXCLUDED.updated_at,\n        last_seen = EXCLUDED.last_seen\n    `);\n\n    return { nodeId: options.nodeId, token };\n  }\n\n  /**\n   * Update center node heartbeat with internal endpoint info.\n   */\n  public async updateCenterNodeHeartbeat(\n    nodeId: string,\n    internalIp: string,\n    internalPort: number,\n    timestamp: Date,\n  ): Promise<void> {\n    const ts = Math.floor(timestamp.getTime() / 1000); // Unix timestamp for SQLite compatibility\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET internal_ip = ${internalIp},\n          internal_port = ${internalPort},\n          last_seen = ${ts},\n          updated_at = ${ts},\n          connectivity_status = 'reachable'\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * List all center nodes in the cluster.\n   */\n  public async listCenterNodes(): Promise<CenterNodeInfo[]> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center'\n      ORDER BY created_at ASC\n    `);\n\n    return result.rows.map((row: any): CenterNodeInfo => ({\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    }));\n  }\n\n  /**\n   * Get a specific center node by ID.\n   */\n  public async getCenterNode(nodeId: string): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Find a center node by its internal endpoint (for routing).\n   */\n  public async findCenterNodeByEndpoint(internalIp: string, internalPort: number): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center' AND internal_ip = ${internalIp} AND internal_port = ${internalPort}\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Mark a center node as unreachable (for health checks).\n   */\n  public async markCenterNodeUnreachable(nodeId: string): Promise<void> {\n    const ts = toDbTimestamp(this.db, new Date());\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET connectivity_status = 'unreachable',\n          updated_at = ${ts}\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * Remove a center node from the cluster.\n   */\n  public async removeCenterNode(nodeId: string): Promise<boolean> {\n    // Note: For SQLite, we can't easily get affected row count, so just execute and return true\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n    return true;\n  }\n\n  // ============ Account-based Node Methods ============\n\n  /**\n   * List nodes owned by a specific account\n   */\n  public async listNodesByAccount(accountId: string): Promise<Array<{\n    nodeId: string;\n    displayName?: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, capabilities, metadata, access_mode, last_seen, connectivity_status\n      FROM identity_edge_node\n      WHERE owner_account_id = ${accountId} AND node_type = 'edge'\n      ORDER BY created_at DESC\n    `);\n\n    return result.rows.map((row: any) => {\n      const metadata = typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata as Record<string, unknown> | null);\n      const capabilities = typeof row.capabilities === 'string' ? JSON.parse(row.capabilities) : (row.capabilities as Record<string, unknown> | null);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name ?? undefined,\n        capabilities: capabilities ?? null,\n        stringCapabilities: (metadata?.capabilities as string[] | undefined) ?? null,\n        accessMode: row.access_mode ?? null,\n        lastSeen: fromDbTimestamp(row.last_seen) ?? null,\n        connectivityStatus: row.connectivity_status ?? null,\n      };\n    });\n  }\n\n  /**\n   * Delete a node\n   */\n  public async deleteNode(nodeId: string): Promise<boolean> {\n    // First delete associated pods\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}\n    `);\n\n    // Then delete the node\n    const result = await executeQuery(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId}\n      RETURNING id\n    `);\n\n    return result.rows.length > 0;\n  }\n}\n"]}