@undefineds.co/xpod 0.1.7 → 0.2.0

package/dist/identity/drizzle/EdgeNodeRepository.js

@@ -10,43 +10,23 @@ class EdgeNodeRepository {
         this.db = db;
     }
     async listNodes() {
-        // Use different COUNT syntax for SQLite vs PostgreSQL
-        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
-        const result = isSqlite
-            ? await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-          SELECT en.id,
-                 en.display_name,
-                 en.node_type,
-                 en.created_at,
-                 en.updated_at,
-                 en.last_seen,
-                 en.metadata,
-                 COALESCE(pods.count, 0) AS pod_count
-          FROM identity_edge_node en
-          LEFT JOIN (
-            SELECT node_id, COUNT(*) AS count
-            FROM identity_edge_node_pod
-            GROUP BY node_id
-          ) pods ON pods.node_id = en.id
-          ORDER BY en.created_at ASC
-        `)
-            : await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-          SELECT en.id,
-                 en.display_name,
-                 en.node_type,
-                 en.created_at,
-                 en.updated_at,
-                 en.last_seen,
-                 en.metadata,
-                 COALESCE(pods.count, 0) AS pod_count
-          FROM identity_edge_node en
-          LEFT JOIN (
-            SELECT node_id, COUNT(*)::integer AS count
-            FROM identity_edge_node_pod
-            GROUP BY node_id
-          ) pods ON pods.node_id = en.id
-          ORDER BY en.created_at ASC
-        `);
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT en.id,
+             en.display_name,
+             en.node_type,
+             en.created_at,
+             en.updated_at,
+             en.last_seen,
+             en.metadata,
+             COALESCE(pods.count, 0) AS pod_count
+      FROM identity_edge_node en
+      LEFT JOIN (
+        SELECT node_id, COUNT(*) AS count
+        FROM identity_edge_node_pod
+        GROUP BY node_id
+      ) pods ON pods.node_id = en.id
+      ORDER BY en.created_at ASC
+    `);
         return result.rows.map((row) => {
             const createdAt = (0, db_1.fromDbTimestamp)(row.created_at);
             const updatedAt = (0, db_1.fromDbTimestamp)(row.updated_at);
@@ -54,7 +34,7 @@ class EdgeNodeRepository {
             return {
                 nodeId: String(row.id),
                 displayName: row.display_name == null ? undefined : String(row.display_name),
-                nodeType: (row.node_type === 'center' ? 'center' : 'edge'),
+                nodeType: (['center', 'edge', 'sp'].includes(row.node_type) ? row.node_type : 'edge'),
                 podCount: Number(row.pod_count ?? 0),
                 createdAt: createdAt?.toISOString(),
                 updatedAt: updatedAt?.toISOString(),
@@ -109,70 +89,41 @@ class EdgeNodeRepository {
             nodeId: String(row.id),
             displayName: row.display_name == null ? undefined : String(row.display_name),
             tokenHash: String(row.token_hash ?? ''),
-            nodeType: (row.node_type === 'center' ? 'center' : 'edge'),
+            nodeType: (['center', 'edge', 'sp'].includes(row.node_type) ? row.node_type : 'edge'),
             metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),
         };
     }
     async updateNodeHeartbeat(nodeId, metadata, timestamp) {
         const payload = metadata == null ? null : JSON.stringify(metadata);
         const ts = (0, db_1.toDbTimestamp)(this.db, timestamp);
-        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
-        if (isSqlite) {
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET metadata = ${payload},
-            last_seen = ${ts},
-            updated_at = ${ts}
-        WHERE id = ${nodeId}
-      `);
-        }
-        else {
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET metadata = ${payload}::jsonb,
-            last_seen = ${ts},
-            updated_at = ${ts}
-        WHERE id = ${nodeId}
-      `);
-        }
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE identity_edge_node
+      SET metadata = ${payload},
+          last_seen = ${ts},
+          updated_at = ${ts}
+      WHERE id = ${nodeId}
+    `);
     }
     async updateNodeMode(nodeId, options) {
         const capabilitiesPayload = options.capabilities ? JSON.stringify(options.capabilities) : null;
         const now = new Date();
         const ts = (0, db_1.toDbTimestamp)(this.db, now);
-        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
-        if (isSqlite) {
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET access_mode = ${options.accessMode},
-            public_ip = ${options.publicIp ?? null},
-            public_port = ${options.publicPort ?? null},
-            subdomain = ${options.subdomain ?? null},
-            connectivity_status = ${options.connectivityStatus ?? 'unknown'},
-            capabilities = ${capabilitiesPayload},
-            last_connectivity_check = ${ts},
-            updated_at = ${ts}
-        WHERE id = ${nodeId}
-      `);
-        }
-        else {
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET access_mode = ${options.accessMode},
-            public_ip = ${options.publicIp ?? null},
-            public_port = ${options.publicPort ?? null},
-            subdomain = ${options.subdomain ?? null},
-            connectivity_status = ${options.connectivityStatus ?? 'unknown'},
-            capabilities = ${capabilitiesPayload}::jsonb,
-            last_connectivity_check = ${ts},
-            updated_at = ${ts}
-        WHERE id = ${nodeId}
-      `);
-        }
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE identity_edge_node
+      SET access_mode = ${options.accessMode},
+          ipv4 = ${options.ipv4 ?? null},
+          public_port = ${options.publicPort ?? null},
+          subdomain = ${options.subdomain ?? null},
+          connectivity_status = ${options.connectivityStatus ?? 'unknown'},
+          capabilities = ${capabilitiesPayload},
+          last_connectivity_check = ${ts},
+          updated_at = ${ts}
+      WHERE id = ${nodeId}
+    `);
     }
     async getNodeConnectivityInfo(nodeId) {
         const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-      SELECT id, access_mode, public_ip, public_port, subdomain, 
+      SELECT id, access_mode, ipv4, public_port, subdomain,
              connectivity_status, last_connectivity_check
       FROM identity_edge_node
       WHERE id = ${nodeId}
@@ -185,7 +136,7 @@ class EdgeNodeRepository {
         return {
             nodeId: String(row.id),
             accessMode: row.access_mode ? String(row.access_mode) : undefined,
-            publicIp: row.public_ip ? String(row.public_ip) : undefined,
+            ipv4: row.ipv4 ? String(row.ipv4) : undefined,
             publicPort: row.public_port ? Number(row.public_port) : undefined,
             subdomain: row.subdomain ? String(row.subdomain) : undefined,
             connectivityStatus: row.connectivity_status ? String(row.connectivity_status) : undefined,
@@ -193,26 +144,21 @@ class EdgeNodeRepository {
         };
     }
     async mergeNodeMetadata(nodeId, patch) {
-        const payload = JSON.stringify(patch);
-        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
-        const ts = (0, db_1.toDbTimestamp)(this.db, new Date());
-        if (isSqlite) {
-            // SQLite: use json_patch or simple replace
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET metadata = json_patch(COALESCE(metadata, '{}'), ${payload}),
-            updated_at = ${ts}
-        WHERE id = ${nodeId}
-      `);
-        }
-        else {
-            await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
-        UPDATE identity_edge_node
-        SET metadata = COALESCE(metadata, '{}'::jsonb) || ${payload}::jsonb,
-            updated_at = now()
-        WHERE id = ${nodeId}
-      `);
+        // Read current metadata
+        const current = await this.getNodeMetadata(nodeId);
+        if (!current) {
+            throw new Error(`Node ${nodeId} not found`);
         }
+        // Merge in application layer
+        const merged = { ...(current.metadata ?? {}), ...patch };
+        const payload = JSON.stringify(merged);
+        const ts = (0, db_1.toDbTimestamp)(this.db, new Date());
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      UPDATE identity_edge_node
+      SET metadata = ${payload},
+          updated_at = ${ts}
+      WHERE id = ${nodeId}
+    `);
     }
     async getNodeMetadata(nodeId) {
         const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
@@ -232,33 +178,17 @@ class EdgeNodeRepository {
         };
     }
     async replaceNodePods(nodeId, pods) {
-        const isSqlite = (0, db_1.isDatabaseSqlite)(this.db);
-        if (isSqlite) {
-            // SQLite: use synchronous transaction via db.run
-            this.db.run((0, drizzle_orm_1.sql) `DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);
+        await this.db.transaction(async (tx) => {
+            await tx.execute((0, drizzle_orm_1.sql) `DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);
             if (pods.length > 0) {
                 const values = pods.map((baseUrl) => (0, drizzle_orm_1.sql) `(${nodeId}, ${baseUrl})`);
-                this.db.run((0, drizzle_orm_1.sql) `
+                await tx.execute((0, drizzle_orm_1.sql) `
           INSERT INTO identity_edge_node_pod (node_id, base_url)
           VALUES ${drizzle_orm_1.sql.join(values, (0, drizzle_orm_1.sql) `, `)}
           ON CONFLICT DO NOTHING
         `);
             }
-        }
-        else {
-            // PostgreSQL: use async transaction
-            await this.db.transaction(async (tx) => {
-                await tx.execute((0, drizzle_orm_1.sql) `DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);
-                if (pods.length > 0) {
-                    const values = pods.map((baseUrl) => (0, drizzle_orm_1.sql) `(${nodeId}, ${baseUrl})`);
-                    await tx.execute((0, drizzle_orm_1.sql) `
-            INSERT INTO identity_edge_node_pod (node_id, base_url)
-            VALUES ${drizzle_orm_1.sql.join(values, (0, drizzle_orm_1.sql) `, `)}
-            ON CONFLICT DO NOTHING
-          `);
-                }
-            });
-        }
+        });
     }
     async findNodeByResourcePath(path) {
         const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
@@ -550,6 +480,68 @@ class EdgeNodeRepository {
     `);
         return result.rows.length > 0;
     }
+    // ============ SP (Storage Provider) Node Methods ============
+    /**
+     * Register or update an SP node (UPSERT by nodeId).
+     *
+     * SP 本地生成 deviceId 作为 nodeId，注册时带上来。
+     * 同一 nodeId 重复注册时更新 publicUrl、token 等，保留原记录。
+     * 不传 nodeId 则 Cloud 随机分配。
+     */
+    async registerSpNode(options) {
+        const nodeId = options.nodeId || (0, node_crypto_1.randomUUID)();
+        const nodeToken = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const nodeTokenHash = (0, node_crypto_1.createHash)('sha256').update(nodeToken).digest('hex');
+        const serviceToken = options.serviceToken || (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const now = new Date();
+        const ts = (0, db_1.toDbTimestamp)(this.db, now);
+        await (0, db_1.executeStatement)(this.db, (0, drizzle_orm_1.sql) `
+      INSERT INTO identity_edge_node (
+        id, display_name, owner_account_id, token_hash, service_token_hash,
+        node_type, public_url,
+        connectivity_status, created_at, updated_at
+      )
+      VALUES (
+        ${nodeId}, ${options.displayName ?? null}, ${options.ownerAccountId ?? null},
+        ${nodeTokenHash}, ${serviceToken},
+        'sp', ${options.publicUrl}, 'unknown', ${ts}, ${ts}
+      )
+      ON CONFLICT (id) DO UPDATE SET
+        display_name = EXCLUDED.display_name,
+        token_hash = EXCLUDED.token_hash,
+        service_token_hash = EXCLUDED.service_token_hash,
+        public_url = EXCLUDED.public_url,
+        updated_at = EXCLUDED.updated_at
+    `);
+        return {
+            nodeId,
+            nodeToken,
+            serviceToken,
+            createdAt: now.toISOString(),
+        };
+    }
+    /**
+     * Get SP node info by nodeId.
+     */
+    async getSpNode(nodeId) {
+        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+      SELECT id, display_name, public_url, service_token_hash, last_seen
+      FROM identity_edge_node
+      WHERE id = ${nodeId} AND node_type = 'sp'
+      LIMIT 1
+    `);
+        if (result.rows.length === 0) {
+            return undefined;
+        }
+        const row = result.rows[0];
+        return {
+            nodeId: String(row.id),
+            displayName: row.display_name == null ? undefined : String(row.display_name),
+            publicUrl: String(row.public_url ?? ''),
+            serviceTokenHash: String(row.service_token_hash ?? ''),
+            lastSeen: (0, db_1.fromDbTimestamp)(row.last_seen),
+        };
+    }
 }
 exports.EdgeNodeRepository = EdgeNodeRepository;
 //# sourceMappingURL=EdgeNodeRepository.js.map

package/dist/identity/drizzle/EdgeNodeRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"EdgeNodeRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/EdgeNodeRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAmF;AACnF,6CAAsC;AAEtC,6BAAwG;AACxG,qCAAqC;AAoCrC,MAAa,kBAAkB;IAC7B,YAAoC,EAAoB;QAApB,OAAE,GAAF,EAAE,CAAkB;IAAG,CAAC;IAErD,KAAK,CAAC,SAAS;QACpB,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;SAgB9B,CAAC;YACJ,CAAC,CAAC,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;SAgB9B,CAAC,CAAC;QAEP,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAmB,EAAE;YACnD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC5E,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAsB;gBAC/E,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACjC,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;aAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,WAAoB,EAAE,SAAkB;QAC9D,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;gBAEvB,MAAM,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,EAAE,KAAK,EAAE;KAC3F,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,KAAK;YACL,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACvC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAsB;YAC/E,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;SAC/F,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,QAAwC,EAAE,SAAe;QACxG,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;yBAEhB,OAAO;0BACN,EAAE;2BACD,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;yBAEhB,OAAO;0BACN,EAAE;2BACD,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,OAO3C;QACC,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4BAEb,OAAO,CAAC,UAAU;0BACpB,OAAO,CAAC,QAAQ,IAAI,IAAI;4BACtB,OAAO,CAAC,UAAU,IAAI,IAAI;0BAC5B,OAAO,CAAC,SAAS,IAAI,IAAI;oCACf,OAAO,CAAC,kBAAkB,IAAI,SAAS;6BAC9C,mBAAmB;wCACR,EAAE;2BACf,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4BAEb,OAAO,CAAC,UAAU;0BACpB,OAAO,CAAC,QAAQ,IAAI,IAAI;4BACtB,OAAO,CAAC,UAAU,IAAI,IAAI;0BAC5B,OAAO,CAAC,SAAS,IAAI,IAAI;oCACf,OAAO,CAAC,kBAAkB,IAAI,SAAS;6BAC9C,mBAAmB;wCACR,EAAE;2BACf,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,MAAc;QASjD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;mBAI/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;YACzF,qBAAqB,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,uBAAuB,CAAC;SACpE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,KAA8B;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE9C,IAAI,QAAQ,EAAE,CAAC;YACb,2CAA2C;YAC3C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;8DAEqB,OAAO;2BAC1C,EAAE;qBACR,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;4DAEmB,OAAO;;qBAE9C,MAAM;OACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc;QACzC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC9F,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAc;QACzD,MAAM,QAAQ,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,iDAAiD;YACjD,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,iBAAG,EAAA,sDAAsD,MAAM,EAAE,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,iBAAG,EAAA,IAAI,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC;gBACnE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,iBAAG,EAAA;;mBAEJ,iBAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,iBAAG,EAAA,IAAI,CAAC;;SAEnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;gBACvD,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,sDAAsD,MAAM,EAAE,CAAC,CAAC;gBACpF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,iBAAG,EAAA,IAAI,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC;oBACnE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA;;qBAET,iBAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,iBAAG,EAAA,IAAI,CAAC;;WAEnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;cAOpC,IAAI;;;KAGb,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;0BAGxB,UAAU;;KAE/B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,SAAiB,EAAE,KAAa;QAClD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAA,6BAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAQ7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,KAAK,CAAC,IAAA,gBAAE,EAAC,kBAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA0C,CAAC;QAEjE,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,YAAY,EAAE,IAAI,CAAC,YAA8C;YACjE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;YAC9D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,oBAAoB;QAQ/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,OAAO,CAAC,kBAAS,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmB,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAA0C,CAAC;YAEhE,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,YAAY,EAAE,GAAG,CAAC,YAA8C;gBAChE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;gBAC9D,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAEhD;;;OAGG;IACI,KAAK,CAAC,kBAAkB,CAAC,OAK/B;QACC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAErF,oDAAoD;QACpD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;UAM7B,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,KAAK,SAAS;UAC5D,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG;;;;;;;;KAQnF,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CACpC,MAAc,EACd,UAAkB,EAClB,YAAoB,EACpB,SAAe;QAEf,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAC7F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;0BAEb,UAAU;4BACR,YAAY;wBAChB,EAAE;yBACD,EAAE;;mBAER,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;KAK7C,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAkB,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,UAAkB,EAAE,YAAoB;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;qDAGG,UAAU,wBAAwB,YAAY;;KAE9F,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACnD,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;yBAGd,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC1C,4FAA4F;QAC5F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAEpB,MAAM;KACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IAEvD;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAS/C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;iCAGjB,SAAS;;KAErC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAA2C,CAAC;YAChI,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,YAA+C,CAAC;YAChJ,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;gBAC1C,YAAY,EAAE,YAAY,IAAI,IAAI;gBAClC,kBAAkB,EAAG,QAAQ,EAAE,YAAqC,IAAI,IAAI;gBAC5E,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACnC,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;gBAChD,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI;aACpD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,MAAc;QACpC,+BAA+B;QAC/B,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;2DACoB,MAAM;KAC5D,CAAC,CAAC;QAEH,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAE/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;CACF;AA7nBD,gDA6nBC","sourcesContent":["import { randomBytes, randomUUID, createHash, timingSafeEqual } from 'node:crypto';\nimport { sql, eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { executeStatement, executeQuery, isDatabaseSqlite, toDbTimestamp, fromDbTimestamp } from './db';\nimport { edgeNodes } from './schema';\n\nexport interface EdgeNodeSummary {\n  nodeId: string;\n  displayName?: string;\n  nodeType: 'center' | 'edge';\n  podCount: number;\n  createdAt?: string;\n  updatedAt?: string;\n  lastSeen?: string;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CreateEdgeNodeResult {\n  nodeId: string;\n  token: string;\n  createdAt: string;\n}\n\nexport interface EdgeNodeSecret {\n  nodeId: string;\n  displayName?: string;\n  tokenHash: string;\n  nodeType: 'center' | 'edge';\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CenterNodeInfo {\n  nodeId: string;\n  displayName?: string;\n  internalIp: string;\n  internalPort: number;\n  connectivityStatus: 'unknown' | 'reachable' | 'unreachable';\n  lastSeen?: Date;\n}\n\nexport class EdgeNodeRepository {\n  public constructor(private readonly db: IdentityDatabase) {}\n\n  public async listNodes(): Promise<EdgeNodeSummary[]> {\n    // Use different COUNT syntax for SQLite vs PostgreSQL\n    const isSqlite = isDatabaseSqlite(this.db);\n    const result = isSqlite\n      ? await executeQuery(this.db, sql`\n          SELECT en.id,\n                 en.display_name,\n                 en.node_type,\n                 en.created_at,\n                 en.updated_at,\n                 en.last_seen,\n                 en.metadata,\n                 COALESCE(pods.count, 0) AS pod_count\n          FROM identity_edge_node en\n          LEFT JOIN (\n            SELECT node_id, COUNT(*) AS count\n            FROM identity_edge_node_pod\n            GROUP BY node_id\n          ) pods ON pods.node_id = en.id\n          ORDER BY en.created_at ASC\n        `)\n      : await executeQuery(this.db, sql`\n          SELECT en.id,\n                 en.display_name,\n                 en.node_type,\n                 en.created_at,\n                 en.updated_at,\n                 en.last_seen,\n                 en.metadata,\n                 COALESCE(pods.count, 0) AS pod_count\n          FROM identity_edge_node en\n          LEFT JOIN (\n            SELECT node_id, COUNT(*)::integer AS count\n            FROM identity_edge_node_pod\n            GROUP BY node_id\n          ) pods ON pods.node_id = en.id\n          ORDER BY en.created_at ASC\n        `);\n\n    return result.rows.map((row: any): EdgeNodeSummary => {\n      const createdAt = fromDbTimestamp(row.created_at);\n      const updatedAt = fromDbTimestamp(row.updated_at);\n      const lastSeen = fromDbTimestamp(row.last_seen);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name == null ? undefined : String(row.display_name),\n        nodeType: (row.node_type === 'center' ? 'center' : 'edge') as 'center' | 'edge',\n        podCount: Number(row.pod_count ?? 0),\n        createdAt: createdAt?.toISOString(),\n        updatedAt: updatedAt?.toISOString(),\n        lastSeen: lastSeen?.toISOString(),\n        metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      };\n    });\n  }\n\n  public async createNode(displayName?: string, accountId?: string): Promise<CreateEdgeNodeResult> {\n    const nodeId = randomUUID();\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (id, display_name, owner_account_id, token_hash, created_at, updated_at)\n      VALUES (${nodeId}, ${displayName ?? null}, ${accountId ?? null}, ${tokenHash}, ${ts}, ${ts})\n    `);\n\n    return {\n      nodeId,\n      token,\n      createdAt: now.toISOString(),\n    };\n  }\n\n  /**\n   * Get the owner account ID of a node.\n   */\n  public async getNodeOwner(nodeId: string): Promise<string | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT owner_account_id\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    \n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    \n    return result.rows[0].owner_account_id ? String(result.rows[0].owner_account_id) : undefined;\n  }\n\n  public async getNodeSecret(nodeId: string): Promise<EdgeNodeSecret | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, token_hash, node_type, metadata\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      tokenHash: String(row.token_hash ?? ''),\n      nodeType: (row.node_type === 'center' ? 'center' : 'edge') as 'center' | 'edge',\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n    };\n  }\n\n  public async updateNodeHeartbeat(nodeId: string, metadata: Record<string, unknown> | null, timestamp: Date): Promise<void> {\n    const payload = metadata == null ? null : JSON.stringify(metadata);\n    const ts = toDbTimestamp(this.db, timestamp);\n    const isSqlite = isDatabaseSqlite(this.db);\n\n    if (isSqlite) {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = ${payload},\n            last_seen = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = ${payload}::jsonb,\n            last_seen = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async updateNodeMode(nodeId: string, options: {\n    accessMode: 'direct' | 'proxy';\n    publicIp?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: 'unknown' | 'reachable' | 'unreachable';\n    capabilities?: Record<string, unknown>;\n  }): Promise<void> {\n    const capabilitiesPayload = options.capabilities ? JSON.stringify(options.capabilities) : null;\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n    const isSqlite = isDatabaseSqlite(this.db);\n\n    if (isSqlite) {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET access_mode = ${options.accessMode},\n            public_ip = ${options.publicIp ?? null},\n            public_port = ${options.publicPort ?? null},\n            subdomain = ${options.subdomain ?? null},\n            connectivity_status = ${options.connectivityStatus ?? 'unknown'},\n            capabilities = ${capabilitiesPayload},\n            last_connectivity_check = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET access_mode = ${options.accessMode},\n            public_ip = ${options.publicIp ?? null},\n            public_port = ${options.publicPort ?? null},\n            subdomain = ${options.subdomain ?? null},\n            connectivity_status = ${options.connectivityStatus ?? 'unknown'},\n            capabilities = ${capabilitiesPayload}::jsonb,\n            last_connectivity_check = ${ts},\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async getNodeConnectivityInfo(nodeId: string): Promise<{\n    nodeId: string;\n    accessMode?: string;\n    publicIp?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: string;\n    lastConnectivityCheck?: Date;\n  } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, public_ip, public_port, subdomain, \n             connectivity_status, last_connectivity_check\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    \n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    \n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      publicIp: row.public_ip ? String(row.public_ip) : undefined,\n      publicPort: row.public_port ? Number(row.public_port) : undefined,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n      connectivityStatus: row.connectivity_status ? String(row.connectivity_status) : undefined,\n      lastConnectivityCheck: fromDbTimestamp(row.last_connectivity_check),\n    };\n  }\n\n  public async mergeNodeMetadata(nodeId: string, patch: Record<string, unknown>): Promise<void> {\n    const payload = JSON.stringify(patch);\n    const isSqlite = isDatabaseSqlite(this.db);\n    const ts = toDbTimestamp(this.db, new Date());\n\n    if (isSqlite) {\n      // SQLite: use json_patch or simple replace\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = json_patch(COALESCE(metadata, '{}'), ${payload}),\n            updated_at = ${ts}\n        WHERE id = ${nodeId}\n      `);\n    } else {\n      await executeStatement(this.db, sql`\n        UPDATE identity_edge_node\n        SET metadata = COALESCE(metadata, '{}'::jsonb) || ${payload}::jsonb,\n            updated_at = now()\n        WHERE id = ${nodeId}\n      `);\n    }\n  }\n\n  public async getNodeMetadata(nodeId: string): Promise<{ nodeId: string; metadata: Record<string, unknown> | null; lastSeen?: Date } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, metadata, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  public async replaceNodePods(nodeId: string, pods: string[]): Promise<void> {\n    const isSqlite = isDatabaseSqlite(this.db);\n    \n    if (isSqlite) {\n      // SQLite: use synchronous transaction via db.run\n      this.db.run(sql`DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);\n      if (pods.length > 0) {\n        const values = pods.map((baseUrl) => sql`(${nodeId}, ${baseUrl})`);\n        this.db.run(sql`\n          INSERT INTO identity_edge_node_pod (node_id, base_url)\n          VALUES ${sql.join(values, sql`, `)}\n          ON CONFLICT DO NOTHING\n        `);\n      }\n    } else {\n      // PostgreSQL: use async transaction\n      await this.db.transaction(async (tx: IdentityDatabase) => {\n        await tx.execute(sql`DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);\n        if (pods.length > 0) {\n          const values = pods.map((baseUrl) => sql`(${nodeId}, ${baseUrl})`);\n          await tx.execute(sql`\n            INSERT INTO identity_edge_node_pod (node_id, base_url)\n            VALUES ${sql.join(values, sql`, `)}\n            ON CONFLICT DO NOTHING\n          `);\n        }\n      });\n    }\n  }\n\n  public async findNodeByResourcePath(path: string): Promise<{ nodeId: string; baseUrl: string; accessMode?: string; metadata?: Record<string, unknown> | null } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT en.id,\n             en.access_mode,\n             en.metadata,\n             pods.base_url\n      FROM identity_edge_node_pod pods\n      JOIN identity_edge_node en ON en.id = pods.node_id\n      WHERE ${path} LIKE pods.base_url || '%'\n      ORDER BY length(pods.base_url) DESC\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      baseUrl: String(row.base_url),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n    };\n  }\n\n  public async findNodeBySubdomain(hostname: string): Promise<{ nodeId: string; accessMode?: string; metadata?: Record<string, unknown> | null; subdomain?: string } | undefined> {\n    const normalized = hostname.trim().toLowerCase();\n    if (normalized.length === 0) {\n      return undefined;\n    }\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, metadata, subdomain\n      FROM identity_edge_node\n      WHERE subdomain = ${normalized}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n    };\n  }\n\n  public matchesToken(tokenHash: string, token: string): boolean {\n    if (!tokenHash || typeof tokenHash !== 'string') {\n      return false;\n    }\n    try {\n      const expected = Buffer.from(tokenHash, 'hex');\n      const actual = createHash('sha256').update(token).digest();\n      if (expected.length !== actual.length) {\n        return false;\n      }\n      return timingSafeEqual(expected, actual);\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * Get node capabilities and related information for admin queries\n   */\n  public async getNodeCapabilities(nodeId: string): Promise<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  } | undefined> {\n    const row = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .where(eq(edgeNodes.id, nodeId))\n      .limit(1);\n\n    if (row.length === 0) {\n      return undefined;\n    }\n\n    const node = row[0];\n    const metadata = node.metadata as Record<string, unknown> | null;\n    \n    return {\n      nodeId: node.id,\n      capabilities: node.capabilities as Record<string, unknown> | null,\n      stringCapabilities: metadata?.capabilities as string[] ?? null,\n      accessMode: node.accessMode,\n      lastSeen: node.lastSeen,\n      connectivityStatus: node.connectivityStatus,\n    };\n  }\n\n  /**\n   * List all nodes with their capability information\n   */\n  public async listNodeCapabilities(): Promise<Array<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const rows = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .orderBy(edgeNodes.lastSeen);\n\n    return rows.map((row: typeof rows[0]) => {\n      const metadata = row.metadata as Record<string, unknown> | null;\n      \n      return {\n        nodeId: row.id,\n        capabilities: row.capabilities as Record<string, unknown> | null,\n        stringCapabilities: metadata?.capabilities as string[] ?? null,\n        accessMode: row.accessMode,\n        lastSeen: row.lastSeen,\n        connectivityStatus: row.connectivityStatus,\n      };\n    });\n  }\n\n  // ============ Center Node Methods ============\n\n  /**\n   * Register or update a center node in the cluster.\n   * Center nodes use the same table as edge nodes but with nodeType='center'.\n   */\n  public async registerCenterNode(options: {\n    nodeId: string;\n    displayName?: string;\n    internalIp: string;\n    internalPort: number;\n  }): Promise<{ nodeId: string; token: string }> {\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = Math.floor(Date.now() / 1000); // Unix timestamp for SQLite compatibility\n\n    // Use upsert pattern: INSERT ... ON CONFLICT UPDATE\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (\n        id, display_name, token_hash, node_type, internal_ip, internal_port,\n        connectivity_status, created_at, updated_at, last_seen\n      )\n      VALUES (\n        ${options.nodeId}, ${options.displayName ?? null}, ${tokenHash}, 'center',\n        ${options.internalIp}, ${options.internalPort}, 'unknown', ${now}, ${now}, ${now}\n      )\n      ON CONFLICT (id) DO UPDATE SET\n        display_name = EXCLUDED.display_name,\n        internal_ip = EXCLUDED.internal_ip,\n        internal_port = EXCLUDED.internal_port,\n        updated_at = EXCLUDED.updated_at,\n        last_seen = EXCLUDED.last_seen\n    `);\n\n    return { nodeId: options.nodeId, token };\n  }\n\n  /**\n   * Update center node heartbeat with internal endpoint info.\n   */\n  public async updateCenterNodeHeartbeat(\n    nodeId: string,\n    internalIp: string,\n    internalPort: number,\n    timestamp: Date,\n  ): Promise<void> {\n    const ts = Math.floor(timestamp.getTime() / 1000); // Unix timestamp for SQLite compatibility\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET internal_ip = ${internalIp},\n          internal_port = ${internalPort},\n          last_seen = ${ts},\n          updated_at = ${ts},\n          connectivity_status = 'reachable'\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * List all center nodes in the cluster.\n   */\n  public async listCenterNodes(): Promise<CenterNodeInfo[]> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center'\n      ORDER BY created_at ASC\n    `);\n\n    return result.rows.map((row: any): CenterNodeInfo => ({\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    }));\n  }\n\n  /**\n   * Get a specific center node by ID.\n   */\n  public async getCenterNode(nodeId: string): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Find a center node by its internal endpoint (for routing).\n   */\n  public async findCenterNodeByEndpoint(internalIp: string, internalPort: number): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center' AND internal_ip = ${internalIp} AND internal_port = ${internalPort}\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Mark a center node as unreachable (for health checks).\n   */\n  public async markCenterNodeUnreachable(nodeId: string): Promise<void> {\n    const ts = toDbTimestamp(this.db, new Date());\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET connectivity_status = 'unreachable',\n          updated_at = ${ts}\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * Remove a center node from the cluster.\n   */\n  public async removeCenterNode(nodeId: string): Promise<boolean> {\n    // Note: For SQLite, we can't easily get affected row count, so just execute and return true\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n    return true;\n  }\n\n  // ============ Account-based Node Methods ============\n\n  /**\n   * List nodes owned by a specific account\n   */\n  public async listNodesByAccount(accountId: string): Promise<Array<{\n    nodeId: string;\n    displayName?: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, capabilities, metadata, access_mode, last_seen, connectivity_status\n      FROM identity_edge_node\n      WHERE owner_account_id = ${accountId} AND node_type = 'edge'\n      ORDER BY created_at DESC\n    `);\n\n    return result.rows.map((row: any) => {\n      const metadata = typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata as Record<string, unknown> | null);\n      const capabilities = typeof row.capabilities === 'string' ? JSON.parse(row.capabilities) : (row.capabilities as Record<string, unknown> | null);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name ?? undefined,\n        capabilities: capabilities ?? null,\n        stringCapabilities: (metadata?.capabilities as string[] | undefined) ?? null,\n        accessMode: row.access_mode ?? null,\n        lastSeen: fromDbTimestamp(row.last_seen) ?? null,\n        connectivityStatus: row.connectivity_status ?? null,\n      };\n    });\n  }\n\n  /**\n   * Delete a node\n   */\n  public async deleteNode(nodeId: string): Promise<boolean> {\n    // First delete associated pods\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}\n    `);\n\n    // Then delete the node\n    const result = await executeQuery(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId}\n      RETURNING id\n    `);\n\n    return result.rows.length > 0;\n  }\n}\n"]}
+{"version":3,"file":"EdgeNodeRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/EdgeNodeRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAmF;AACnF,6CAAsC;AAEtC,6BAAsF;AACtF,qCAAqC;AAmDrC,MAAa,kBAAkB;IAC7B,YAAoC,EAAoB;QAApB,OAAE,GAAF,EAAE,CAAkB;IAAG,CAAC;IAErD,KAAK,CAAC,SAAS;QACpB,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;KAgB7C,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAmB,EAAE;YACnD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC5E,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAA6B;gBACjH,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;gBACnC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACjC,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;aAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,WAAoB,EAAE,SAAkB;QAC9D,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;gBAEvB,MAAM,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,EAAE,KAAK,EAAE;KAC3F,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,KAAK;YACL,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACvC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAA6B;YACjH,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;SAC/F,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,QAAwC,EAAE,SAAe;QACxG,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAE7C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;uBAEhB,OAAO;wBACN,EAAE;yBACD,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,OAO3C;QACC,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;0BAEb,OAAO,CAAC,UAAU;mBACzB,OAAO,CAAC,IAAI,IAAI,IAAI;0BACb,OAAO,CAAC,UAAU,IAAI,IAAI;wBAC5B,OAAO,CAAC,SAAS,IAAI,IAAI;kCACf,OAAO,CAAC,kBAAkB,IAAI,SAAS;2BAC9C,mBAAmB;sCACR,EAAE;yBACf,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,MAAc;QASjD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;mBAI/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7C,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;YACzF,qBAAqB,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,uBAAuB,CAAC;SACpE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,KAA8B;QAC3E,wBAAwB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAC9C,CAAC;QAED,6BAA6B;QAC7B,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;uBAEhB,OAAO;yBACL,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc;QACzC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC9F,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAc;QACzD,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;YACvD,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,sDAAsD,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,iBAAG,EAAA,IAAI,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC;gBACnE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA;;mBAET,iBAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,iBAAG,EAAA,IAAI,CAAC;;SAEnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;cAOpC,IAAI;;;KAGb,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;0BAGxB,UAAU;;KAE/B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,SAAiB,EAAE,KAAa;QAClD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAA,6BAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAQ7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,KAAK,CAAC,IAAA,gBAAE,EAAC,kBAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA0C,CAAC;QAEjE,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,YAAY,EAAE,IAAI,CAAC,YAA8C;YACjE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;YAC9D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,oBAAoB;QAQ/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,EAAE,EAAE,kBAAS,CAAC,EAAE;YAChB,YAAY,EAAE,kBAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,kBAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,kBAAS,CAAC,QAAQ;YAC5B,kBAAkB,EAAE,kBAAS,CAAC,kBAAkB;SACjD,CAAC;aACD,IAAI,CAAC,kBAAS,CAAC;aACf,OAAO,CAAC,kBAAS,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmB,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAA0C,CAAC;YAEhE,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,YAAY,EAAE,GAAG,CAAC,YAA8C;gBAChE,kBAAkB,EAAE,QAAQ,EAAE,YAAwB,IAAI,IAAI;gBAC9D,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAEhD;;;OAGG;IACI,KAAK,CAAC,kBAAkB,CAAC,OAK/B;QACC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAErF,oDAAoD;QACpD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;UAM7B,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,KAAK,SAAS;UAC5D,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG;;;;;;;;KAQnF,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CACpC,MAAc,EACd,UAAkB,EAClB,YAAoB,EACpB,SAAe;QAEf,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,0CAA0C;QAC7F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;0BAEb,UAAU;4BACR,YAAY;wBAChB,EAAE;yBACD,EAAE;;mBAER,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;KAK7C,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAkB,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,UAAkB,EAAE,YAAoB;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;qDAGG,UAAU,wBAAwB,YAAY;;KAE9F,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,kBAAkB,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAA4C;YACrG,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACnD,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;yBAGd,EAAE;mBACR,MAAM;KACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC1C,4FAA4F;QAC5F,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAEpB,MAAM;KACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IAEvD;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAS/C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;iCAGjB,SAAS;;KAErC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAA2C,CAAC;YAChI,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,YAA+C,CAAC;YAChJ,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;gBAC1C,YAAY,EAAE,YAAY,IAAI,IAAI;gBAClC,kBAAkB,EAAG,QAAQ,EAAE,YAAqC,IAAI,IAAI;gBAC5E,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACnC,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;gBAChD,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI;aACpD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,MAAc;QACpC,+BAA+B;QAC/B,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;2DACoB,MAAM;KAC5D,CAAC,CAAC;QAEH,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;mBAE/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,+DAA+D;IAE/D;;;;;;OAMG;IACI,KAAK,CAAC,cAAc,CAAC,OAQ3B;QACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAA,kBAAa,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;;;;;UAO7B,MAAM,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,KAAK,OAAO,CAAC,cAAc,IAAI,IAAI;UACzE,aAAa,KAAK,YAAY;gBACxB,OAAO,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE;;;;;;;;KAQrD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,SAAS;YACT,YAAY;YACZ,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,MAAc;QACnC,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;;mBAG/B,MAAM;;KAEpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACvC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;YACtD,QAAQ,EAAE,IAAA,oBAAe,EAAC,GAAG,CAAC,SAAS,CAAC;SACzC,CAAC;IACJ,CAAC;CACF;AAxoBD,gDAwoBC","sourcesContent":["import { randomBytes, randomUUID, createHash, timingSafeEqual } from 'node:crypto';\nimport { sql, eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { executeStatement, executeQuery, toDbTimestamp, fromDbTimestamp } from './db';\nimport { edgeNodes } from './schema';\n\nexport interface EdgeNodeSummary {\n  nodeId: string;\n  displayName?: string;\n  nodeType: 'center' | 'edge' | 'sp';\n  podCount: number;\n  createdAt?: string;\n  updatedAt?: string;\n  lastSeen?: string;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CreateEdgeNodeResult {\n  nodeId: string;\n  token: string;\n  createdAt: string;\n}\n\nexport interface EdgeNodeSecret {\n  nodeId: string;\n  displayName?: string;\n  tokenHash: string;\n  nodeType: 'center' | 'edge' | 'sp';\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface CenterNodeInfo {\n  nodeId: string;\n  displayName?: string;\n  internalIp: string;\n  internalPort: number;\n  connectivityStatus: 'unknown' | 'reachable' | 'unreachable';\n  lastSeen?: Date;\n}\n\nexport interface CreateSpNodeResult {\n  nodeId: string;\n  nodeToken: string;\n  serviceToken: string;\n  createdAt: string;\n}\n\nexport interface SpNodeInfo {\n  nodeId: string;\n  displayName?: string;\n  publicUrl: string;\n  serviceTokenHash: string;\n  lastSeen?: Date;\n}\n\nexport class EdgeNodeRepository {\n  public constructor(private readonly db: IdentityDatabase) {}\n\n  public async listNodes(): Promise<EdgeNodeSummary[]> {\n    const result = await executeQuery(this.db, sql`\n      SELECT en.id,\n             en.display_name,\n             en.node_type,\n             en.created_at,\n             en.updated_at,\n             en.last_seen,\n             en.metadata,\n             COALESCE(pods.count, 0) AS pod_count\n      FROM identity_edge_node en\n      LEFT JOIN (\n        SELECT node_id, COUNT(*) AS count\n        FROM identity_edge_node_pod\n        GROUP BY node_id\n      ) pods ON pods.node_id = en.id\n      ORDER BY en.created_at ASC\n    `);\n\n    return result.rows.map((row: any): EdgeNodeSummary => {\n      const createdAt = fromDbTimestamp(row.created_at);\n      const updatedAt = fromDbTimestamp(row.updated_at);\n      const lastSeen = fromDbTimestamp(row.last_seen);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name == null ? undefined : String(row.display_name),\n        nodeType: (['center', 'edge', 'sp'].includes(row.node_type) ? row.node_type : 'edge') as 'center' | 'edge' | 'sp',\n        podCount: Number(row.pod_count ?? 0),\n        createdAt: createdAt?.toISOString(),\n        updatedAt: updatedAt?.toISOString(),\n        lastSeen: lastSeen?.toISOString(),\n        metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      };\n    });\n  }\n\n  public async createNode(displayName?: string, accountId?: string): Promise<CreateEdgeNodeResult> {\n    const nodeId = randomUUID();\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (id, display_name, owner_account_id, token_hash, created_at, updated_at)\n      VALUES (${nodeId}, ${displayName ?? null}, ${accountId ?? null}, ${tokenHash}, ${ts}, ${ts})\n    `);\n\n    return {\n      nodeId,\n      token,\n      createdAt: now.toISOString(),\n    };\n  }\n\n  /**\n   * Get the owner account ID of a node.\n   */\n  public async getNodeOwner(nodeId: string): Promise<string | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT owner_account_id\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    \n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    \n    return result.rows[0].owner_account_id ? String(result.rows[0].owner_account_id) : undefined;\n  }\n\n  public async getNodeSecret(nodeId: string): Promise<EdgeNodeSecret | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, token_hash, node_type, metadata\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      tokenHash: String(row.token_hash ?? ''),\n      nodeType: (['center', 'edge', 'sp'].includes(row.node_type) ? row.node_type : 'edge') as 'center' | 'edge' | 'sp',\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n    };\n  }\n\n  public async updateNodeHeartbeat(nodeId: string, metadata: Record<string, unknown> | null, timestamp: Date): Promise<void> {\n    const payload = metadata == null ? null : JSON.stringify(metadata);\n    const ts = toDbTimestamp(this.db, timestamp);\n\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET metadata = ${payload},\n          last_seen = ${ts},\n          updated_at = ${ts}\n      WHERE id = ${nodeId}\n    `);\n  }\n\n  public async updateNodeMode(nodeId: string, options: {\n    accessMode: 'direct' | 'proxy';\n    ipv4?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: 'unknown' | 'reachable' | 'unreachable';\n    capabilities?: Record<string, unknown>;\n  }): Promise<void> {\n    const capabilitiesPayload = options.capabilities ? JSON.stringify(options.capabilities) : null;\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET access_mode = ${options.accessMode},\n          ipv4 = ${options.ipv4 ?? null},\n          public_port = ${options.publicPort ?? null},\n          subdomain = ${options.subdomain ?? null},\n          connectivity_status = ${options.connectivityStatus ?? 'unknown'},\n          capabilities = ${capabilitiesPayload},\n          last_connectivity_check = ${ts},\n          updated_at = ${ts}\n      WHERE id = ${nodeId}\n    `);\n  }\n\n  public async getNodeConnectivityInfo(nodeId: string): Promise<{\n    nodeId: string;\n    accessMode?: string;\n    ipv4?: string;\n    publicPort?: number;\n    subdomain?: string;\n    connectivityStatus?: string;\n    lastConnectivityCheck?: Date;\n  } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, ipv4, public_port, subdomain,\n             connectivity_status, last_connectivity_check\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      ipv4: row.ipv4 ? String(row.ipv4) : undefined,\n      publicPort: row.public_port ? Number(row.public_port) : undefined,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n      connectivityStatus: row.connectivity_status ? String(row.connectivity_status) : undefined,\n      lastConnectivityCheck: fromDbTimestamp(row.last_connectivity_check),\n    };\n  }\n\n  public async mergeNodeMetadata(nodeId: string, patch: Record<string, unknown>): Promise<void> {\n    // Read current metadata\n    const current = await this.getNodeMetadata(nodeId);\n    if (!current) {\n      throw new Error(`Node ${nodeId} not found`);\n    }\n\n    // Merge in application layer\n    const merged = { ...(current.metadata ?? {}), ...patch };\n    const payload = JSON.stringify(merged);\n    const ts = toDbTimestamp(this.db, new Date());\n\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET metadata = ${payload},\n          updated_at = ${ts}\n      WHERE id = ${nodeId}\n    `);\n  }\n\n  public async getNodeMetadata(nodeId: string): Promise<{ nodeId: string; metadata: Record<string, unknown> | null; lastSeen?: Date } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, metadata, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      metadata: typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata ?? null),\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  public async replaceNodePods(nodeId: string, pods: string[]): Promise<void> {\n    await this.db.transaction(async (tx: IdentityDatabase) => {\n      await tx.execute(sql`DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}`);\n      if (pods.length > 0) {\n        const values = pods.map((baseUrl) => sql`(${nodeId}, ${baseUrl})`);\n        await tx.execute(sql`\n          INSERT INTO identity_edge_node_pod (node_id, base_url)\n          VALUES ${sql.join(values, sql`, `)}\n          ON CONFLICT DO NOTHING\n        `);\n      }\n    });\n  }\n\n  public async findNodeByResourcePath(path: string): Promise<{ nodeId: string; baseUrl: string; accessMode?: string; metadata?: Record<string, unknown> | null } | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT en.id,\n             en.access_mode,\n             en.metadata,\n             pods.base_url\n      FROM identity_edge_node_pod pods\n      JOIN identity_edge_node en ON en.id = pods.node_id\n      WHERE ${path} LIKE pods.base_url || '%'\n      ORDER BY length(pods.base_url) DESC\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      baseUrl: String(row.base_url),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n    };\n  }\n\n  public async findNodeBySubdomain(hostname: string): Promise<{ nodeId: string; accessMode?: string; metadata?: Record<string, unknown> | null; subdomain?: string } | undefined> {\n    const normalized = hostname.trim().toLowerCase();\n    if (normalized.length === 0) {\n      return undefined;\n    }\n    const result = await executeQuery(this.db, sql`\n      SELECT id, access_mode, metadata, subdomain\n      FROM identity_edge_node\n      WHERE subdomain = ${normalized}\n      LIMIT 1\n    `);\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      accessMode: row.access_mode ? String(row.access_mode) : undefined,\n      metadata: row.metadata ?? null,\n      subdomain: row.subdomain ? String(row.subdomain) : undefined,\n    };\n  }\n\n  public matchesToken(tokenHash: string, token: string): boolean {\n    if (!tokenHash || typeof tokenHash !== 'string') {\n      return false;\n    }\n    try {\n      const expected = Buffer.from(tokenHash, 'hex');\n      const actual = createHash('sha256').update(token).digest();\n      if (expected.length !== actual.length) {\n        return false;\n      }\n      return timingSafeEqual(expected, actual);\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * Get node capabilities and related information for admin queries\n   */\n  public async getNodeCapabilities(nodeId: string): Promise<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  } | undefined> {\n    const row = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .where(eq(edgeNodes.id, nodeId))\n      .limit(1);\n\n    if (row.length === 0) {\n      return undefined;\n    }\n\n    const node = row[0];\n    const metadata = node.metadata as Record<string, unknown> | null;\n    \n    return {\n      nodeId: node.id,\n      capabilities: node.capabilities as Record<string, unknown> | null,\n      stringCapabilities: metadata?.capabilities as string[] ?? null,\n      accessMode: node.accessMode,\n      lastSeen: node.lastSeen,\n      connectivityStatus: node.connectivityStatus,\n    };\n  }\n\n  /**\n   * List all nodes with their capability information\n   */\n  public async listNodeCapabilities(): Promise<Array<{\n    nodeId: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const rows = await this.db\n      .select({\n        id: edgeNodes.id,\n        capabilities: edgeNodes.capabilities,\n        metadata: edgeNodes.metadata,\n        accessMode: edgeNodes.accessMode,\n        lastSeen: edgeNodes.lastSeen,\n        connectivityStatus: edgeNodes.connectivityStatus,\n      })\n      .from(edgeNodes)\n      .orderBy(edgeNodes.lastSeen);\n\n    return rows.map((row: typeof rows[0]) => {\n      const metadata = row.metadata as Record<string, unknown> | null;\n      \n      return {\n        nodeId: row.id,\n        capabilities: row.capabilities as Record<string, unknown> | null,\n        stringCapabilities: metadata?.capabilities as string[] ?? null,\n        accessMode: row.accessMode,\n        lastSeen: row.lastSeen,\n        connectivityStatus: row.connectivityStatus,\n      };\n    });\n  }\n\n  // ============ Center Node Methods ============\n\n  /**\n   * Register or update a center node in the cluster.\n   * Center nodes use the same table as edge nodes but with nodeType='center'.\n   */\n  public async registerCenterNode(options: {\n    nodeId: string;\n    displayName?: string;\n    internalIp: string;\n    internalPort: number;\n  }): Promise<{ nodeId: string; token: string }> {\n    const token = randomBytes(32).toString('base64url');\n    const tokenHash = createHash('sha256').update(token).digest('hex');\n    const now = Math.floor(Date.now() / 1000); // Unix timestamp for SQLite compatibility\n\n    // Use upsert pattern: INSERT ... ON CONFLICT UPDATE\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (\n        id, display_name, token_hash, node_type, internal_ip, internal_port,\n        connectivity_status, created_at, updated_at, last_seen\n      )\n      VALUES (\n        ${options.nodeId}, ${options.displayName ?? null}, ${tokenHash}, 'center',\n        ${options.internalIp}, ${options.internalPort}, 'unknown', ${now}, ${now}, ${now}\n      )\n      ON CONFLICT (id) DO UPDATE SET\n        display_name = EXCLUDED.display_name,\n        internal_ip = EXCLUDED.internal_ip,\n        internal_port = EXCLUDED.internal_port,\n        updated_at = EXCLUDED.updated_at,\n        last_seen = EXCLUDED.last_seen\n    `);\n\n    return { nodeId: options.nodeId, token };\n  }\n\n  /**\n   * Update center node heartbeat with internal endpoint info.\n   */\n  public async updateCenterNodeHeartbeat(\n    nodeId: string,\n    internalIp: string,\n    internalPort: number,\n    timestamp: Date,\n  ): Promise<void> {\n    const ts = Math.floor(timestamp.getTime() / 1000); // Unix timestamp for SQLite compatibility\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET internal_ip = ${internalIp},\n          internal_port = ${internalPort},\n          last_seen = ${ts},\n          updated_at = ${ts},\n          connectivity_status = 'reachable'\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * List all center nodes in the cluster.\n   */\n  public async listCenterNodes(): Promise<CenterNodeInfo[]> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center'\n      ORDER BY created_at ASC\n    `);\n\n    return result.rows.map((row: any): CenterNodeInfo => ({\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    }));\n  }\n\n  /**\n   * Get a specific center node by ID.\n   */\n  public async getCenterNode(nodeId: string): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Find a center node by its internal endpoint (for routing).\n   */\n  public async findCenterNodeByEndpoint(internalIp: string, internalPort: number): Promise<CenterNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, internal_ip, internal_port, connectivity_status, last_seen\n      FROM identity_edge_node\n      WHERE node_type = 'center' AND internal_ip = ${internalIp} AND internal_port = ${internalPort}\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      internalIp: String(row.internal_ip ?? ''),\n      internalPort: Number(row.internal_port ?? 0),\n      connectivityStatus: (row.connectivity_status ?? 'unknown') as 'unknown' | 'reachable' | 'unreachable',\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n\n  /**\n   * Mark a center node as unreachable (for health checks).\n   */\n  public async markCenterNodeUnreachable(nodeId: string): Promise<void> {\n    const ts = toDbTimestamp(this.db, new Date());\n    await executeStatement(this.db, sql`\n      UPDATE identity_edge_node\n      SET connectivity_status = 'unreachable',\n          updated_at = ${ts}\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n  }\n\n  /**\n   * Remove a center node from the cluster.\n   */\n  public async removeCenterNode(nodeId: string): Promise<boolean> {\n    // Note: For SQLite, we can't easily get affected row count, so just execute and return true\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'center'\n    `);\n    return true;\n  }\n\n  // ============ Account-based Node Methods ============\n\n  /**\n   * List nodes owned by a specific account\n   */\n  public async listNodesByAccount(accountId: string): Promise<Array<{\n    nodeId: string;\n    displayName?: string;\n    capabilities: Record<string, unknown> | null;\n    stringCapabilities: string[] | null;\n    accessMode: string | null;\n    lastSeen: Date | null;\n    connectivityStatus: string | null;\n  }>> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, capabilities, metadata, access_mode, last_seen, connectivity_status\n      FROM identity_edge_node\n      WHERE owner_account_id = ${accountId} AND node_type = 'edge'\n      ORDER BY created_at DESC\n    `);\n\n    return result.rows.map((row: any) => {\n      const metadata = typeof row.metadata === 'string' ? JSON.parse(row.metadata) : (row.metadata as Record<string, unknown> | null);\n      const capabilities = typeof row.capabilities === 'string' ? JSON.parse(row.capabilities) : (row.capabilities as Record<string, unknown> | null);\n      return {\n        nodeId: String(row.id),\n        displayName: row.display_name ?? undefined,\n        capabilities: capabilities ?? null,\n        stringCapabilities: (metadata?.capabilities as string[] | undefined) ?? null,\n        accessMode: row.access_mode ?? null,\n        lastSeen: fromDbTimestamp(row.last_seen) ?? null,\n        connectivityStatus: row.connectivity_status ?? null,\n      };\n    });\n  }\n\n  /**\n   * Delete a node\n   */\n  public async deleteNode(nodeId: string): Promise<boolean> {\n    // First delete associated pods\n    await executeStatement(this.db, sql`\n      DELETE FROM identity_edge_node_pod WHERE node_id = ${nodeId}\n    `);\n\n    // Then delete the node\n    const result = await executeQuery(this.db, sql`\n      DELETE FROM identity_edge_node\n      WHERE id = ${nodeId}\n      RETURNING id\n    `);\n\n    return result.rows.length > 0;\n  }\n\n  // ============ SP (Storage Provider) Node Methods ============\n\n  /**\n   * Register or update an SP node (UPSERT by nodeId).\n   *\n   * SP 本地生成 deviceId 作为 nodeId，注册时带上来。\n   * 同一 nodeId 重复注册时更新 publicUrl、token 等，保留原记录。\n   * 不传 nodeId 则 Cloud 随机分配。\n   */\n  public async registerSpNode(options: {\n    publicUrl: string;\n    displayName?: string;\n    ownerAccountId?: string;\n    /** SP 提供的设备 ID，作为 nodeId（不传则随机生成） */\n    nodeId?: string;\n    /** SP 提供的 serviceToken，不传则随机生成 */\n    serviceToken?: string;\n  }): Promise<CreateSpNodeResult> {\n    const nodeId = options.nodeId || randomUUID();\n    const nodeToken = randomBytes(32).toString('base64url');\n    const nodeTokenHash = createHash('sha256').update(nodeToken).digest('hex');\n    const serviceToken = options.serviceToken || randomBytes(32).toString('base64url');\n    const now = new Date();\n    const ts = toDbTimestamp(this.db, now);\n\n    await executeStatement(this.db, sql`\n      INSERT INTO identity_edge_node (\n        id, display_name, owner_account_id, token_hash, service_token_hash,\n        node_type, public_url,\n        connectivity_status, created_at, updated_at\n      )\n      VALUES (\n        ${nodeId}, ${options.displayName ?? null}, ${options.ownerAccountId ?? null},\n        ${nodeTokenHash}, ${serviceToken},\n        'sp', ${options.publicUrl}, 'unknown', ${ts}, ${ts}\n      )\n      ON CONFLICT (id) DO UPDATE SET\n        display_name = EXCLUDED.display_name,\n        token_hash = EXCLUDED.token_hash,\n        service_token_hash = EXCLUDED.service_token_hash,\n        public_url = EXCLUDED.public_url,\n        updated_at = EXCLUDED.updated_at\n    `);\n\n    return {\n      nodeId,\n      nodeToken,\n      serviceToken,\n      createdAt: now.toISOString(),\n    };\n  }\n\n  /**\n   * Get SP node info by nodeId.\n   */\n  public async getSpNode(nodeId: string): Promise<SpNodeInfo | undefined> {\n    const result = await executeQuery(this.db, sql`\n      SELECT id, display_name, public_url, service_token_hash, last_seen\n      FROM identity_edge_node\n      WHERE id = ${nodeId} AND node_type = 'sp'\n      LIMIT 1\n    `);\n\n    if (result.rows.length === 0) {\n      return undefined;\n    }\n\n    const row = result.rows[0] as any;\n    return {\n      nodeId: String(row.id),\n      displayName: row.display_name == null ? undefined : String(row.display_name),\n      publicUrl: String(row.public_url ?? ''),\n      serviceTokenHash: String(row.service_token_hash ?? ''),\n      lastSeen: fromDbTimestamp(row.last_seen),\n    };\n  }\n}\n"]}

package/dist/identity/drizzle/ServiceTokenRepository.d.ts

@@ -0,0 +1,52 @@
+import type { IdentityDatabase } from './db';
+export type ServiceType = 'local' | 'business' | 'cloud' | 'compute';
+export interface ServiceTokenRecord {
+    id: string;
+    serviceType: ServiceType;
+    serviceId: string;
+    scopes: string[];
+    createdAt: Date;
+    expiresAt: Date | null;
+}
+export interface CreateServiceTokenOptions {
+    serviceType: ServiceType;
+    serviceId: string;
+    scopes: string[];
+    expiresAt?: Date | null;
+}
+export declare class ServiceTokenRepository {
+    private readonly db;
+    private readonly logger;
+    private readonly schema;
+    constructor(db: IdentityDatabase);
+    /**
+     * Create a new service token. Returns the plaintext token (only available at creation time).
+     */
+    createToken(options: CreateServiceTokenOptions): Promise<{
+        id: string;
+        token: string;
+    }>;
+    /**
+     * Register a token from a known plaintext value (e.g. XPOD_BUSINESS_TOKEN env var).
+     * Upserts by serviceType + serviceId to avoid duplicates.
+     */
+    registerToken(token: string, options: CreateServiceTokenOptions): Promise<string>;
+    /**
+     * Verify a plaintext token and return the matching record if valid.
+     */
+    verifyToken(token: string): Promise<ServiceTokenRecord | undefined>;
+    /**
+     * Find a token record by service type and service ID.
+     */
+    findByService(serviceType: ServiceType, serviceId: string): Promise<ServiceTokenRecord | undefined>;
+    /**
+     * Delete a service token by ID.
+     */
+    deleteToken(id: string): Promise<void>;
+    /**
+     * List all service tokens (without hashes).
+     */
+    listTokens(): Promise<ServiceTokenRecord[]>;
+    private hashToken;
+    private toRecord;
+}