@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/identity/drizzle/db.js

@@ -0,0 +1,269 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSqliteUrl = isSqliteUrl;
+exports.getIdentityDatabase = getIdentityDatabase;
+exports.getIdentitySchema = getIdentitySchema;
+exports.tryGetIdentityDatabase = tryGetIdentityDatabase;
+exports.closeAllIdentityConnections = closeAllIdentityConnections;
+exports.isDatabaseSqlite = isDatabaseSqlite;
+exports.executeQuery = executeQuery;
+exports.executeStatement = executeStatement;
+exports.toDbTimestamp = toDbTimestamp;
+exports.fromDbTimestamp = fromDbTimestamp;
+const pg_1 = require("pg");
+const node_postgres_1 = require("drizzle-orm/node-postgres");
+const better_sqlite3_1 = require("drizzle-orm/better-sqlite3");
+const better_sqlite3_2 = __importDefault(require("better-sqlite3"));
+const pgSchema = __importStar(require("./schema.pg"));
+const sqliteSchema = __importStar(require("./schema.sqlite"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const PostgresPoolManager_1 = require("../../storage/database/PostgresPoolManager");
+const dbCache = new Map();
+const JSON_OIDS = [114, 3802];
+for (const oid of JSON_OIDS) {
+    // Explicitly return raw string to avoid "Type Conflict" with CSS
+    // and to satisfy PgQuintStore's parseVector expecting a string.
+    pg_1.types.setTypeParser(oid, (value) => value);
+}
+/**
+ * Returns true if the connection string is a SQLite URL.
+ */
+function isSqliteUrl(connectionString) {
+    return connectionString.startsWith('sqlite:');
+}
+/**
+ * Get or create a Drizzle database connection with the appropriate schema.
+ * Supports both PostgreSQL and SQLite.
+ */
+function getIdentityDatabase(connectionString) {
+    const cached = dbCache.get(connectionString);
+    if (cached) {
+        return cached.db;
+    }
+    if (isSqliteUrl(connectionString)) {
+        const filename = connectionString.replace('sqlite:', '');
+        const isMemory = filename === ':memory:' || filename.startsWith(':memory:');
+        if (!isMemory) {
+            const directory = node_path_1.default.dirname(filename);
+            if (directory && !node_fs_1.default.existsSync(directory)) {
+                node_fs_1.default.mkdirSync(directory, { recursive: true });
+            }
+        }
+        const sqlite = new better_sqlite3_2.default(isMemory ? ':memory:' : filename);
+        // Apply pragmas for better concurrency (prevents SQLITE_BUSY errors)
+        // WAL mode allows concurrent reads during writes
+        // busy_timeout waits up to 5 seconds before throwing SQLITE_BUSY
+        if (!isMemory) {
+            sqlite.pragma('journal_mode = WAL');
+            sqlite.pragma('busy_timeout = 5000');
+            sqlite.pragma('synchronous = NORMAL');
+        }
+        const db = (0, better_sqlite3_1.drizzle)(sqlite);
+        // Create tables if they don't exist
+        ensureSqliteTables(sqlite);
+        dbCache.set(connectionString, {
+            db,
+            schema: sqliteSchema,
+            isSqlite: true,
+            close: async () => { sqlite.close(); },
+        });
+        return db;
+    }
+    // PostgreSQL: use shared pool to avoid connection exhaustion and deadlocks
+    const pool = (0, PostgresPoolManager_1.getSharedPool)({ connectionString });
+    const db = (0, node_postgres_1.drizzle)(pool);
+    dbCache.set(connectionString, {
+        db,
+        schema: pgSchema,
+        isSqlite: false,
+        close: async () => {
+            // Release reference to shared pool instead of ending it
+            (0, PostgresPoolManager_1.releaseSharedPool)({ connectionString });
+        },
+    });
+    return db;
+}
+/**
+ * Get the schema for a given connection string.
+ */
+function getIdentitySchema(connectionString) {
+    const cached = dbCache.get(connectionString);
+    if (cached) {
+        return cached.schema;
+    }
+    // Initialize connection to populate cache
+    getIdentityDatabase(connectionString);
+    return dbCache.get(connectionString).schema;
+}
+/**
+ * Safely get a Drizzle database connection, returning undefined on error.
+ * Use this when the identity database is optional (e.g., for usage tracking).
+ */
+function tryGetIdentityDatabase(connectionString) {
+    try {
+        return getIdentityDatabase(connectionString);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function closeAllIdentityConnections() {
+    await Promise.all([...dbCache.values()].map(({ close }) => close()));
+    dbCache.clear();
+}
+/**
+ * Check if a database connection is SQLite.
+ * SQLite drizzle has `all()` method but no `execute()` method.
+ * PostgreSQL drizzle has `execute()` method but no `all()` method.
+ */
+function isDatabaseSqlite(db) {
+    // SQLite drizzle has `all` method, PostgreSQL drizzle has `execute` method
+    return typeof db.all === 'function' && typeof db.execute !== 'function';
+}
+/**
+ * Execute a SQL query uniformly across PostgreSQL and SQLite.
+ * Returns a standardized result with rows array.
+ *
+ * @example
+ * const result = await executeQuery(db, sql`SELECT * FROM users WHERE id = ${userId}`);
+ * if (result.rows.length > 0) { ... }
+ */
+async function executeQuery(db, query) {
+    if (isDatabaseSqlite(db)) {
+        // SQLite: db.all() returns array directly
+        const rows = db.all(query);
+        return { rows };
+    }
+    // PostgreSQL: db.execute() returns { rows: [...] }
+    return db.execute(query);
+}
+/**
+ * Execute a SQL statement that doesn't return rows (INSERT, UPDATE, DELETE).
+ * Works uniformly across PostgreSQL and SQLite.
+ */
+async function executeStatement(db, query) {
+    if (isDatabaseSqlite(db)) {
+        // SQLite: db.run() for statements
+        db.run(query);
+        return;
+    }
+    // PostgreSQL: db.execute() works for statements too
+    await db.execute(query);
+}
+/**
+ * Convert a Date to a value suitable for the database.
+ * SQLite uses Unix timestamps (seconds), PostgreSQL uses Date objects.
+ */
+function toDbTimestamp(db, date) {
+    return isDatabaseSqlite(db) ? Math.floor(date.getTime() / 1000) : date;
+}
+/**
+ * Parse a timestamp value from database result to Date.
+ * Handles both Unix timestamps (SQLite) and Date objects (PostgreSQL).
+ */
+function fromDbTimestamp(value) {
+    if (value === null || value === undefined) {
+        return undefined;
+    }
+    if (value instanceof Date) {
+        return value;
+    }
+    if (typeof value === 'number') {
+        return new Date(value * 1000);
+    }
+    if (typeof value === 'string') {
+        return new Date(value);
+    }
+    return undefined;
+}
+/**
+ * Ensure SQLite tables exist (simple DDL for local/dev mode).
+ */
+function ensureSqliteTables(sqlite) {
+    sqlite.exec(`
+    CREATE TABLE IF NOT EXISTS identity_account_usage (
+      account_id TEXT PRIMARY KEY,
+      storage_bytes INTEGER NOT NULL DEFAULT 0,
+      ingress_bytes INTEGER NOT NULL DEFAULT 0,
+      egress_bytes INTEGER NOT NULL DEFAULT 0,
+      storage_limit_bytes INTEGER,
+      bandwidth_limit_bps INTEGER,
+      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+    );
+
+    CREATE TABLE IF NOT EXISTS identity_pod_usage (
+      pod_id TEXT PRIMARY KEY,
+      account_id TEXT NOT NULL,
+      storage_bytes INTEGER NOT NULL DEFAULT 0,
+      ingress_bytes INTEGER NOT NULL DEFAULT 0,
+      egress_bytes INTEGER NOT NULL DEFAULT 0,
+      storage_limit_bytes INTEGER,
+      bandwidth_limit_bps INTEGER,
+      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+    );
+
+    CREATE TABLE IF NOT EXISTS identity_edge_node (
+      id TEXT PRIMARY KEY,
+      display_name TEXT,
+      owner_account_id TEXT,
+      token_hash TEXT NOT NULL,
+      account_id TEXT,
+      node_type TEXT DEFAULT 'edge',
+      subdomain TEXT UNIQUE,
+      access_mode TEXT,
+      public_ip TEXT,
+      public_port INTEGER,
+      internal_ip TEXT,
+      internal_port INTEGER,
+      capabilities TEXT,
+      metadata TEXT,
+      connectivity_status TEXT DEFAULT 'unknown',
+      last_connectivity_check INTEGER,
+      created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),
+      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),
+      last_seen INTEGER
+    );
+
+    CREATE TABLE IF NOT EXISTS identity_edge_node_pod (
+      node_id TEXT NOT NULL REFERENCES identity_edge_node(id) ON DELETE CASCADE,
+      base_url TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS api_client_credentials (
+      client_id TEXT PRIMARY KEY,
+      client_secret_encrypted TEXT NOT NULL,
+      web_id TEXT NOT NULL,
+      account_id TEXT NOT NULL,
+      display_name TEXT,
+      created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+    );
+  `);
+}
+//# sourceMappingURL=db.js.map

package/dist/identity/drizzle/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/identity/drizzle/db.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,kCAEC;AAMD,kDAqDC;AAKD,8CAQC;AAMD,wDAMC;AAED,kEAGC;AAOD,4CAGC;AAUD,oCAWC;AAMD,4CAWC;AAMD,sCAEC;AAMD,0CAcC;AAnND,2BAAiC;AACjC,6DAAiE;AACjE,+DAA6F;AAG7F,oEAAsC;AACtC,sDAAwC;AACxC,8DAAgD;AAChD,0DAA6B;AAC7B,sDAAyB;AACzB,oFAA8F;AAqB9F,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEpD,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAE9B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,iEAAiE;IACjE,gEAAgE;IAChE,UAAK,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,gBAAwB;IAClD,OAAO,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,gBAAwB;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,SAAS,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,wBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE9D,qEAAqE;QACrE,iDAAiD;QACjD,iEAAiE;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC;QAEjC,oCAAoC;QACpC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE;YAC5B,EAAE;YACF,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAA,mCAAa,EAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,IAAA,uBAAS,EAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE;QAC5B,EAAE;QACF,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,wDAAwD;YACxD,IAAA,uCAAiB,EAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,gBAAwB;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,0CAA0C;IAC1C,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAE,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,gBAAwB;IAC7D,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,2BAA2B;IAC/C,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,EAAoB;IACnD,2EAA2E;IAC3E,OAAO,OAAO,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAChC,EAAoB,EACpB,KAAU;IAEV,IAAI,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,0CAA0C;QAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAQ,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,mDAAmD;IACnD,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAA4B,CAAC;AACtD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,EAAoB,EACpB,KAAU;IAEV,IAAI,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,kCAAkC;QAClC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,oDAAoD;IACpD,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,EAAoB,EAAE,IAAU;IAC5D,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAyB;IACnD,MAAM,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDX,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { Pool, types } from 'pg';\nimport { drizzle as drizzlePg } from 'drizzle-orm/node-postgres';\nimport { drizzle as drizzleSqlite, BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';\nimport { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport type { SQL } from 'drizzle-orm/sql';\nimport Database from 'better-sqlite3';\nimport * as pgSchema from './schema.pg';\nimport * as sqliteSchema from './schema.sqlite';\nimport path from 'node:path';\nimport fs from 'node:fs';\nimport { getSharedPool, releaseSharedPool } from '../../storage/database/PostgresPoolManager';\n\n// Use 'any' to allow both PostgreSQL and SQLite database instances\n// The actual type depends on the connection string at runtime\nexport type IdentityDatabase = any;\nexport type IdentitySchema = typeof pgSchema | typeof sqliteSchema;\n\n/**\n * Standardized query result format across databases.\n */\nexport interface QueryResult<T = Record<string, unknown>> {\n  rows: T[];\n}\n\ninterface CachedConnection {\n  db: IdentityDatabase;\n  schema: IdentitySchema;\n  isSqlite: boolean;\n  close: () => Promise<void>;\n}\n\nconst dbCache = new Map<string, CachedConnection>();\n\nconst JSON_OIDS = [114, 3802];\n\nfor (const oid of JSON_OIDS) {\n  // Explicitly return raw string to avoid \"Type Conflict\" with CSS\n  // and to satisfy PgQuintStore's parseVector expecting a string.\n  types.setTypeParser(oid, (value) => value);\n}\n\n/**\n * Returns true if the connection string is a SQLite URL.\n */\nexport function isSqliteUrl(connectionString: string): boolean {\n  return connectionString.startsWith('sqlite:');\n}\n\n/**\n * Get or create a Drizzle database connection with the appropriate schema.\n * Supports both PostgreSQL and SQLite.\n */\nexport function getIdentityDatabase(connectionString: string): IdentityDatabase {\n  const cached = dbCache.get(connectionString);\n  if (cached) {\n    return cached.db;\n  }\n\n  if (isSqliteUrl(connectionString)) {\n    const filename = connectionString.replace('sqlite:', '');\n    const isMemory = filename === ':memory:' || filename.startsWith(':memory:');\n    if (!isMemory) {\n      const directory = path.dirname(filename);\n      if (directory && !fs.existsSync(directory)) {\n        fs.mkdirSync(directory, { recursive: true });\n      }\n    }\n    const sqlite = new Database(isMemory ? ':memory:' : filename);\n\n    // Apply pragmas for better concurrency (prevents SQLITE_BUSY errors)\n    // WAL mode allows concurrent reads during writes\n    // busy_timeout waits up to 5 seconds before throwing SQLITE_BUSY\n    if (!isMemory) {\n      sqlite.pragma('journal_mode = WAL');\n      sqlite.pragma('busy_timeout = 5000');\n      sqlite.pragma('synchronous = NORMAL');\n    }\n\n    const db = drizzleSqlite(sqlite);\n\n    // Create tables if they don't exist\n    ensureSqliteTables(sqlite);\n\n    dbCache.set(connectionString, {\n      db,\n      schema: sqliteSchema,\n      isSqlite: true,\n      close: async () => { sqlite.close(); },\n    });\n    return db;\n  }\n\n  // PostgreSQL: use shared pool to avoid connection exhaustion and deadlocks\n  const pool = getSharedPool({ connectionString });\n  const db = drizzlePg(pool);\n  dbCache.set(connectionString, {\n    db,\n    schema: pgSchema,\n    isSqlite: false,\n    close: async () => { \n      // Release reference to shared pool instead of ending it\n      releaseSharedPool({ connectionString }); \n    },\n  });\n  return db;\n}\n\n/**\n * Get the schema for a given connection string.\n */\nexport function getIdentitySchema(connectionString: string): IdentitySchema {\n  const cached = dbCache.get(connectionString);\n  if (cached) {\n    return cached.schema;\n  }\n  // Initialize connection to populate cache\n  getIdentityDatabase(connectionString);\n  return dbCache.get(connectionString)!.schema;\n}\n\n/**\n * Safely get a Drizzle database connection, returning undefined on error.\n * Use this when the identity database is optional (e.g., for usage tracking).\n */\nexport function tryGetIdentityDatabase(connectionString: string): IdentityDatabase | undefined {\n  try {\n    return getIdentityDatabase(connectionString);\n  } catch {\n    return undefined;\n  }\n}\n\nexport async function closeAllIdentityConnections(): Promise<void> {\n  await Promise.all([...dbCache.values()].map(({ close }) => close()));\n  dbCache.clear();\n}\n\n/**\n * Check if a database connection is SQLite.\n * SQLite drizzle has `all()` method but no `execute()` method.\n * PostgreSQL drizzle has `execute()` method but no `all()` method.\n */\nexport function isDatabaseSqlite(db: IdentityDatabase): boolean {\n  // SQLite drizzle has `all` method, PostgreSQL drizzle has `execute` method\n  return typeof db.all === 'function' && typeof db.execute !== 'function';\n}\n\n/**\n * Execute a SQL query uniformly across PostgreSQL and SQLite.\n * Returns a standardized result with rows array.\n *\n * @example\n * const result = await executeQuery(db, sql`SELECT * FROM users WHERE id = ${userId}`);\n * if (result.rows.length > 0) { ... }\n */\nexport async function executeQuery<T = Record<string, unknown>>(\n  db: IdentityDatabase,\n  query: SQL,\n): Promise<QueryResult<T>> {\n  if (isDatabaseSqlite(db)) {\n    // SQLite: db.all() returns array directly\n    const rows = db.all(query) as T[];\n    return { rows };\n  }\n  // PostgreSQL: db.execute() returns { rows: [...] }\n  return db.execute(query) as Promise<QueryResult<T>>;\n}\n\n/**\n * Execute a SQL statement that doesn't return rows (INSERT, UPDATE, DELETE).\n * Works uniformly across PostgreSQL and SQLite.\n */\nexport async function executeStatement(\n  db: IdentityDatabase,\n  query: SQL,\n): Promise<void> {\n  if (isDatabaseSqlite(db)) {\n    // SQLite: db.run() for statements\n    db.run(query);\n    return;\n  }\n  // PostgreSQL: db.execute() works for statements too\n  await db.execute(query);\n}\n\n/**\n * Convert a Date to a value suitable for the database.\n * SQLite uses Unix timestamps (seconds), PostgreSQL uses Date objects.\n */\nexport function toDbTimestamp(db: IdentityDatabase, date: Date): number | Date {\n  return isDatabaseSqlite(db) ? Math.floor(date.getTime() / 1000) : date;\n}\n\n/**\n * Parse a timestamp value from database result to Date.\n * Handles both Unix timestamps (SQLite) and Date objects (PostgreSQL).\n */\nexport function fromDbTimestamp(value: unknown): Date | undefined {\n  if (value === null || value === undefined) {\n    return undefined;\n  }\n  if (value instanceof Date) {\n    return value;\n  }\n  if (typeof value === 'number') {\n    return new Date(value * 1000);\n  }\n  if (typeof value === 'string') {\n    return new Date(value);\n  }\n  return undefined;\n}\n\n/**\n * Ensure SQLite tables exist (simple DDL for local/dev mode).\n */\nfunction ensureSqliteTables(sqlite: Database.Database): void {\n  sqlite.exec(`\n    CREATE TABLE IF NOT EXISTS identity_account_usage (\n      account_id TEXT PRIMARY KEY,\n      storage_bytes INTEGER NOT NULL DEFAULT 0,\n      ingress_bytes INTEGER NOT NULL DEFAULT 0,\n      egress_bytes INTEGER NOT NULL DEFAULT 0,\n      storage_limit_bytes INTEGER,\n      bandwidth_limit_bps INTEGER,\n      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))\n    );\n\n    CREATE TABLE IF NOT EXISTS identity_pod_usage (\n      pod_id TEXT PRIMARY KEY,\n      account_id TEXT NOT NULL,\n      storage_bytes INTEGER NOT NULL DEFAULT 0,\n      ingress_bytes INTEGER NOT NULL DEFAULT 0,\n      egress_bytes INTEGER NOT NULL DEFAULT 0,\n      storage_limit_bytes INTEGER,\n      bandwidth_limit_bps INTEGER,\n      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))\n    );\n\n    CREATE TABLE IF NOT EXISTS identity_edge_node (\n      id TEXT PRIMARY KEY,\n      display_name TEXT,\n      owner_account_id TEXT,\n      token_hash TEXT NOT NULL,\n      account_id TEXT,\n      node_type TEXT DEFAULT 'edge',\n      subdomain TEXT UNIQUE,\n      access_mode TEXT,\n      public_ip TEXT,\n      public_port INTEGER,\n      internal_ip TEXT,\n      internal_port INTEGER,\n      capabilities TEXT,\n      metadata TEXT,\n      connectivity_status TEXT DEFAULT 'unknown',\n      last_connectivity_check INTEGER,\n      created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),\n      updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),\n      last_seen INTEGER\n    );\n\n    CREATE TABLE IF NOT EXISTS identity_edge_node_pod (\n      node_id TEXT NOT NULL REFERENCES identity_edge_node(id) ON DELETE CASCADE,\n      base_url TEXT NOT NULL\n    );\n\n    CREATE TABLE IF NOT EXISTS api_client_credentials (\n      client_id TEXT PRIMARY KEY,\n      client_secret_encrypted TEXT NOT NULL,\n      web_id TEXT NOT NULL,\n      account_id TEXT NOT NULL,\n      display_name TEXT,\n      created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))\n    );\n  `);\n}\n"]}

package/dist/identity/drizzle/schema.d.ts

@@ -0,0 +1 @@
+export * from './schema.pg';

package/dist/identity/drizzle/schema.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Re-export from PostgreSQL schema for backwards compatibility
+// Use getIdentityDatabase() to get the appropriate schema for your database type
+__exportStar(require("./schema.pg"), exports);
+//# sourceMappingURL=schema.js.map

package/dist/identity/drizzle/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/identity/drizzle/schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+DAA+D;AAC/D,iFAAiF;AACjF,8CAA4B","sourcesContent":["// Re-export from PostgreSQL schema for backwards compatibility\n// Use getIdentityDatabase() to get the appropriate schema for your database type\nexport * from './schema.pg';\n"]}

package/dist/identity/drizzle/schema.pg.d.ts

@@ -0,0 +1,20 @@
+export declare const accountUsage: any;
+export declare const podUsage: any;
+/**
+ * WebID Profile 托管表
+ * 用于身份与存储分离架构，Cloud 托管用户的 WebID Profile
+ */
+export declare const webidProfiles: any;
+/**
+ * DDNS 域名池表
+ * 管理可用的 DDNS 域名
+ */
+export declare const ddnsDomains: any;
+/**
+ * DDNS 记录表
+ * 已分配的子域名记录
+ */
+export declare const ddnsRecords: any;
+export declare const edgeNodes: any;
+export declare const edgeNodePods: any;
+export declare const apiClientCredentials: any;

package/dist/identity/drizzle/schema.pg.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiClientCredentials = exports.edgeNodePods = exports.edgeNodes = exports.ddnsRecords = exports.ddnsDomains = exports.webidProfiles = exports.podUsage = exports.accountUsage = void 0;
+const pg_core_1 = require("drizzle-orm/pg-core");
+const jsonb_1 = require("drizzle-orm/pg-core/columns/jsonb");
+const bigint_1 = require("drizzle-orm/pg-core/columns/bigint");
+const integer_1 = require("drizzle-orm/pg-core/columns/integer");
+exports.accountUsage = (0, pg_core_1.pgTable)('identity_account_usage', {
+    accountId: (0, pg_core_1.text)('account_id').primaryKey(),
+    storageBytes: (0, bigint_1.bigint)('storage_bytes', { mode: 'number' }).notNull().default(0),
+    ingressBytes: (0, bigint_1.bigint)('ingress_bytes', { mode: 'number' }).notNull().default(0),
+    egressBytes: (0, bigint_1.bigint)('egress_bytes', { mode: 'number' }).notNull().default(0),
+    storageLimitBytes: (0, bigint_1.bigint)('storage_limit_bytes', { mode: 'number' }),
+    bandwidthLimitBps: (0, bigint_1.bigint)('bandwidth_limit_bps', { mode: 'number' }),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+exports.podUsage = (0, pg_core_1.pgTable)('identity_pod_usage', {
+    podId: (0, pg_core_1.text)('pod_id').primaryKey(),
+    accountId: (0, pg_core_1.text)('account_id').notNull(),
+    storageBytes: (0, bigint_1.bigint)('storage_bytes', { mode: 'number' }).notNull().default(0),
+    ingressBytes: (0, bigint_1.bigint)('ingress_bytes', { mode: 'number' }).notNull().default(0),
+    egressBytes: (0, bigint_1.bigint)('egress_bytes', { mode: 'number' }).notNull().default(0),
+    storageLimitBytes: (0, bigint_1.bigint)('storage_limit_bytes', { mode: 'number' }),
+    bandwidthLimitBps: (0, bigint_1.bigint)('bandwidth_limit_bps', { mode: 'number' }),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+/**
+ * WebID Profile 托管表
+ * 用于身份与存储分离架构，Cloud 托管用户的 WebID Profile
+ */
+exports.webidProfiles = (0, pg_core_1.pgTable)('identity_webid_profile', {
+    username: (0, pg_core_1.text)('username').primaryKey(),
+    webidUrl: (0, pg_core_1.text)('webid_url').notNull(), // https://id.undefineds.co/alice/profile/card#me
+    storageUrl: (0, pg_core_1.text)('storage_url'), // https://alice.undefineds.xyz/ 或 https://pods.undefineds.co/alice/
+    storageMode: (0, pg_core_1.text)('storage_mode').default('cloud'), // 'cloud' | 'local' | 'custom'
+    oidcIssuer: (0, pg_core_1.text)('oidc_issuer'), // https://id.undefineds.co/
+    profileData: (0, jsonb_1.jsonb)('profile_data'), // WebID Profile 的 JSON-LD 表示
+    accountId: (0, pg_core_1.text)('account_id'), // 关联的 CSS 账户 ID
+    createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+/**
+ * DDNS 域名池表
+ * 管理可用的 DDNS 域名
+ */
+exports.ddnsDomains = (0, pg_core_1.pgTable)('identity_ddns_domain', {
+    domain: (0, pg_core_1.text)('domain').primaryKey(), // undefineds.xyz
+    status: (0, pg_core_1.text)('status').default('active'), // 'active' | 'suspended'
+    provider: (0, pg_core_1.text)('provider'), // 'cloudflare' | 'tencent'
+    zoneId: (0, pg_core_1.text)('zone_id'), // DNS Zone ID
+    createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true }).notNull().defaultNow(),
+});
+/**
+ * DDNS 记录表
+ * 已分配的子域名记录
+ */
+exports.ddnsRecords = (0, pg_core_1.pgTable)('identity_ddns_record', {
+    subdomain: (0, pg_core_1.text)('subdomain').primaryKey(), // alice
+    domain: (0, pg_core_1.text)('domain').notNull(), // undefineds.xyz
+    ipAddress: (0, pg_core_1.text)('ip_address'),
+    ipv6Address: (0, pg_core_1.text)('ipv6_address'),
+    recordType: (0, pg_core_1.text)('record_type').default('A'), // 'A' | 'AAAA'
+    nodeId: (0, pg_core_1.text)('node_id'), // 关联的节点 ID
+    username: (0, pg_core_1.text)('username'), // 关联的用户名
+    status: (0, pg_core_1.text)('status').default('active'), // 'active' | 'banned'
+    bannedReason: (0, pg_core_1.text)('banned_reason'),
+    ttl: (0, integer_1.integer)('ttl').default(60),
+    createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+exports.edgeNodes = (0, pg_core_1.pgTable)('identity_edge_node', {
+    id: (0, pg_core_1.text)('id').primaryKey(),
+    ownerAccountId: (0, pg_core_1.text)('owner_account_id'), // Owner of the node
+    displayName: (0, pg_core_1.text)('display_name'),
+    tokenHash: (0, pg_core_1.text)('token_hash').notNull(),
+    nodeType: (0, pg_core_1.text)('node_type').default('edge'), // 'center' | 'edge'
+    subdomain: (0, pg_core_1.text)('subdomain').unique(),
+    accessMode: (0, pg_core_1.text)('access_mode'),
+    publicIp: (0, pg_core_1.text)('public_ip'),
+    publicPort: (0, bigint_1.bigint)('public_port', { mode: 'number' }),
+    internalIp: (0, pg_core_1.text)('internal_ip'), // Internal network IP
+    internalPort: (0, bigint_1.bigint)('internal_port', { mode: 'number' }),
+    capabilities: (0, jsonb_1.jsonb)('capabilities'),
+    metadata: (0, jsonb_1.jsonb)('metadata'),
+    connectivityStatus: (0, pg_core_1.text)('connectivity_status').default('unknown'),
+    lastConnectivityCheck: (0, pg_core_1.timestamp)('last_connectivity_check', { withTimezone: true }),
+    createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at', { withTimezone: true }).notNull().defaultNow(),
+    lastSeen: (0, pg_core_1.timestamp)('last_seen', { withTimezone: true }),
+});
+exports.edgeNodePods = (0, pg_core_1.pgTable)('identity_edge_node_pod', {
+    nodeId: (0, pg_core_1.text)('node_id').notNull().references(() => exports.edgeNodes.id, { onDelete: 'cascade' }),
+    baseUrl: (0, pg_core_1.text)('base_url').notNull(),
+});
+exports.apiClientCredentials = (0, pg_core_1.pgTable)('identity_api_client_credentials', {
+    clientId: (0, pg_core_1.text)('client_id').primaryKey(),
+    clientSecretEncrypted: (0, pg_core_1.text)('client_secret_encrypted').notNull(),
+    webId: (0, pg_core_1.text)('web_id').notNull(),
+    accountId: (0, pg_core_1.text)('account_id').notNull(),
+    displayName: (0, pg_core_1.text)('display_name'),
+    createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true }).notNull().defaultNow(),
+});
+//# sourceMappingURL=schema.pg.js.map

package/dist/identity/drizzle/schema.pg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.pg.js","sourceRoot":"","sources":["../../../src/identity/drizzle/schema.pg.ts"],"names":[],"mappings":";;;AAAA,iDAA+D;AAC/D,6DAA0D;AAC1D,+DAAwE;AACxE,iEAA8D;AAEjD,QAAA,YAAY,GAAG,IAAA,iBAAO,EAAC,wBAAwB,EAAE;IAC5D,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,UAAU,EAAE;IAC1C,YAAY,EAAE,IAAA,eAAQ,EAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,YAAY,EAAE,IAAA,eAAQ,EAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,WAAW,EAAE,IAAA,eAAQ,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,iBAAiB,EAAE,IAAA,eAAQ,EAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtE,iBAAiB,EAAE,IAAA,eAAQ,EAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtE,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEU,QAAA,QAAQ,GAAG,IAAA,iBAAO,EAAC,oBAAoB,EAAE;IACpD,KAAK,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE;IAClC,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,IAAA,eAAQ,EAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,YAAY,EAAE,IAAA,eAAQ,EAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,WAAW,EAAE,IAAA,eAAQ,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,iBAAiB,EAAE,IAAA,eAAQ,EAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtE,iBAAiB,EAAE,IAAA,eAAQ,EAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtE,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,aAAa,GAAG,IAAA,iBAAO,EAAC,wBAAwB,EAAE;IAC7D,QAAQ,EAAE,IAAA,cAAI,EAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACvC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE,EAAe,iDAAiD;IACrG,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,EAAqB,oEAAoE;IACxH,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,+BAA+B;IACnF,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,EAAqB,4BAA4B;IAChF,WAAW,EAAE,IAAA,aAAK,EAAC,cAAc,CAAC,EAAkB,6BAA6B;IACjF,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,EAAuB,gBAAgB;IACpE,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,iBAAO,EAAC,sBAAsB,EAAE;IACzD,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,EAAiB,iBAAiB;IACrE,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,yBAAyB;IAC7E,QAAQ,EAAE,IAAA,cAAI,EAAC,UAAU,CAAC,EAA0B,2BAA2B;IAC/E,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,EAA6B,cAAc;IAClE,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAA,iBAAO,EAAC,sBAAsB,EAAE;IACzD,SAAS,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE,EAAW,QAAQ;IAC5D,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAoB,iBAAiB;IACrE,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC;IACjC,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAQ,eAAe;IACnE,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,EAA6B,WAAW;IAC/D,QAAQ,EAAE,IAAA,cAAI,EAAC,UAAU,CAAC,EAA0B,SAAS;IAC7D,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAY,sBAAsB;IAC1E,YAAY,EAAE,IAAA,cAAI,EAAC,eAAe,CAAC;IACnC,GAAG,EAAE,IAAA,iBAAO,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEU,QAAA,SAAS,GAAG,IAAA,iBAAO,EAAC,oBAAoB,EAAE;IACrD,EAAE,EAAE,IAAA,cAAI,EAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,cAAc,EAAE,IAAA,cAAI,EAAC,kBAAkB,CAAC,EAAM,oBAAoB;IAClE,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAG,oBAAoB;IAClE,SAAS,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;IAC/B,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;IAC3B,UAAU,EAAE,IAAA,eAAQ,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvD,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,EAAe,sBAAsB;IACpE,YAAY,EAAE,IAAA,eAAQ,EAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3D,YAAY,EAAE,IAAA,aAAK,EAAC,cAAc,CAAC;IACnC,QAAQ,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC;IAC3B,kBAAkB,EAAE,IAAA,cAAI,EAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClE,qBAAqB,EAAE,IAAA,mBAAS,EAAC,yBAAyB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnF,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,QAAQ,EAAE,IAAA,mBAAS,EAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CACzD,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,IAAA,iBAAO,EAAC,wBAAwB,EAAE;IAC5D,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACzF,OAAO,EAAE,IAAA,cAAI,EAAC,UAAU,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,IAAA,iBAAO,EAAC,iCAAiC,EAAE;IAC7E,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,UAAU,EAAE;IACxC,qBAAqB,EAAE,IAAA,cAAI,EAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,KAAK,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC","sourcesContent":["import { pgTable, text, timestamp } from 'drizzle-orm/pg-core';\nimport { jsonb } from 'drizzle-orm/pg-core/columns/jsonb';\nimport { bigint as pgBigint } from 'drizzle-orm/pg-core/columns/bigint';\nimport { integer } from 'drizzle-orm/pg-core/columns/integer';\n\nexport const accountUsage = pgTable('identity_account_usage', {\n  accountId: text('account_id').primaryKey(),\n  storageBytes: pgBigint('storage_bytes', { mode: 'number' }).notNull().default(0),\n  ingressBytes: pgBigint('ingress_bytes', { mode: 'number' }).notNull().default(0),\n  egressBytes: pgBigint('egress_bytes', { mode: 'number' }).notNull().default(0),\n  storageLimitBytes: pgBigint('storage_limit_bytes', { mode: 'number' }),\n  bandwidthLimitBps: pgBigint('bandwidth_limit_bps', { mode: 'number' }),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\nexport const podUsage = pgTable('identity_pod_usage', {\n  podId: text('pod_id').primaryKey(),\n  accountId: text('account_id').notNull(),\n  storageBytes: pgBigint('storage_bytes', { mode: 'number' }).notNull().default(0),\n  ingressBytes: pgBigint('ingress_bytes', { mode: 'number' }).notNull().default(0),\n  egressBytes: pgBigint('egress_bytes', { mode: 'number' }).notNull().default(0),\n  storageLimitBytes: pgBigint('storage_limit_bytes', { mode: 'number' }),\n  bandwidthLimitBps: pgBigint('bandwidth_limit_bps', { mode: 'number' }),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\n/**\n * WebID Profile 托管表\n * 用于身份与存储分离架构，Cloud 托管用户的 WebID Profile\n */\nexport const webidProfiles = pgTable('identity_webid_profile', {\n  username: text('username').primaryKey(),\n  webidUrl: text('webid_url').notNull(),              // https://id.undefineds.co/alice/profile/card#me\n  storageUrl: text('storage_url'),                    // https://alice.undefineds.xyz/ 或 https://pods.undefineds.co/alice/\n  storageMode: text('storage_mode').default('cloud'), // 'cloud' | 'local' | 'custom'\n  oidcIssuer: text('oidc_issuer'),                    // https://id.undefineds.co/\n  profileData: jsonb('profile_data'),                 // WebID Profile 的 JSON-LD 表示\n  accountId: text('account_id'),                      // 关联的 CSS 账户 ID\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\n/**\n * DDNS 域名池表\n * 管理可用的 DDNS 域名\n */\nexport const ddnsDomains = pgTable('identity_ddns_domain', {\n  domain: text('domain').primaryKey(),                // undefineds.xyz\n  status: text('status').default('active'),           // 'active' | 'suspended'\n  provider: text('provider'),                         // 'cloudflare' | 'tencent'\n  zoneId: text('zone_id'),                            // DNS Zone ID\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\n/**\n * DDNS 记录表\n * 已分配的子域名记录\n */\nexport const ddnsRecords = pgTable('identity_ddns_record', {\n  subdomain: text('subdomain').primaryKey(),          // alice\n  domain: text('domain').notNull(),                   // undefineds.xyz\n  ipAddress: text('ip_address'),\n  ipv6Address: text('ipv6_address'),\n  recordType: text('record_type').default('A'),       // 'A' | 'AAAA'\n  nodeId: text('node_id'),                            // 关联的节点 ID\n  username: text('username'),                         // 关联的用户名\n  status: text('status').default('active'),           // 'active' | 'banned'\n  bannedReason: text('banned_reason'),\n  ttl: integer('ttl').default(60),\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\nexport const edgeNodes = pgTable('identity_edge_node', {\n  id: text('id').primaryKey(),\n  ownerAccountId: text('owner_account_id'),     // Owner of the node\n  displayName: text('display_name'),\n  tokenHash: text('token_hash').notNull(),\n  nodeType: text('node_type').default('edge'),  // 'center' | 'edge'\n  subdomain: text('subdomain').unique(),\n  accessMode: text('access_mode'),\n  publicIp: text('public_ip'),\n  publicPort: pgBigint('public_port', { mode: 'number' }),\n  internalIp: text('internal_ip'),              // Internal network IP\n  internalPort: pgBigint('internal_port', { mode: 'number' }),\n  capabilities: jsonb('capabilities'),\n  metadata: jsonb('metadata'),\n  connectivityStatus: text('connectivity_status').default('unknown'),\n  lastConnectivityCheck: timestamp('last_connectivity_check', { withTimezone: true }),\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  lastSeen: timestamp('last_seen', { withTimezone: true }),\n});\n\nexport const edgeNodePods = pgTable('identity_edge_node_pod', {\n  nodeId: text('node_id').notNull().references(() => edgeNodes.id, { onDelete: 'cascade' }),\n  baseUrl: text('base_url').notNull(),\n});\n\nexport const apiClientCredentials = pgTable('identity_api_client_credentials', {\n  clientId: text('client_id').primaryKey(),\n  clientSecretEncrypted: text('client_secret_encrypted').notNull(),\n  webId: text('web_id').notNull(),\n  accountId: text('account_id').notNull(),\n  displayName: text('display_name'),\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n});\n"]}