@undefineds.co/xpod 0.3.29 → 0.3.32

package/dist/http/quota/QuotaAdminHttpHandler.js

@@ -50,11 +50,11 @@ class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
     }
     async handleGet(target, response) {
         if (target.type === 'account') {
-            const quota = await this.quotaService.getAccountLimit(target.id);
+            const quota = await this.quotaService.getAccountQuota(target.id);
             this.writeJson(response, 200, {
                 type: 'account',
                 accountId: target.id,
-                quotaLimit: quota ?? null,
+                quota,
             });
             return;
         }
@@ -62,13 +62,13 @@ class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
         if (!podInfo) {
             throw new community_server_2.BadRequestHttpError('Unknown pod identifier.');
         }
-        const quota = await this.quotaService.getPodLimit(target.id);
+        const quota = await this.quotaService.getPodQuota(target.id);
         this.writeJson(response, 200, {
             type: 'pod',
             podId: target.id,
             accountId: podInfo.accountId,
             baseUrl: podInfo.baseUrl ?? null,
-            quotaLimit: quota ?? null,
+            quota,
         });
     }
     async handlePut(target, request, response) {
@@ -85,23 +85,23 @@ class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
             }
         }
         if (target.type === 'account') {
-            await this.quotaService.setAccountLimit(target.id, quota);
-            const latest = await this.quotaService.getAccountLimit(target.id);
+            await this.quotaService.setAccountQuota(target.id, quota);
+            const latest = await this.quotaService.getAccountQuota(target.id);
             this.writeJson(response, 200, {
                 status: 'updated',
                 targetType: target.type,
                 targetId: target.id,
-                quotaLimit: latest ?? null,
+                quota: latest,
             });
             return;
         }
-        await this.quotaService.setPodLimit(target.id, quota);
-        const latest = await this.quotaService.getPodLimit(target.id);
+        await this.quotaService.setPodQuota(target.id, quota);
+        const latest = await this.quotaService.getPodQuota(target.id);
         this.writeJson(response, 200, {
             status: 'updated',
             targetType: target.type,
             targetId: target.id,
-            quotaLimit: latest ?? null,
+            quota: latest,
         });
     }
     async handleDelete(target, response) {
@@ -112,10 +112,10 @@ class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
             }
         }
         if (target.type === 'account') {
-            await this.quotaService.setAccountLimit(target.id, null);
+            await this.quotaService.clearAccountQuota(target.id);
         }
         else {
-            await this.quotaService.setPodLimit(target.id, null);
+            await this.quotaService.clearPodQuota(target.id);
         }
         this.writeJson(response, 200, {
             status: 'cleared',
@@ -175,17 +175,23 @@ class QuotaAdminHttpHandler extends community_server_1.HttpHandler {
         }
     }
     extractQuota(body) {
-        if (!Object.prototype.hasOwnProperty.call(body, 'quotaLimit')) {
-            throw new community_server_2.BadRequestHttpError('Body must include quotaLimit.');
-        }
-        const quotaValue = body.quotaLimit;
-        if (quotaValue === null) {
-            return null;
+        const quota = {};
+        let hasQuotaField = false;
+        for (const field of ['storageLimitBytes', 'bandwidthLimitBps', 'computeLimitSeconds', 'tokenLimitMonthly']) {
+            if (!Object.prototype.hasOwnProperty.call(body, field)) {
+                continue;
+            }
+            const value = body[field];
+            if (value !== null && (typeof value !== 'number' || !Number.isFinite(value) || value < 0)) {
+                throw new community_server_2.BadRequestHttpError(`${field} must be a non-negative number or null.`);
+            }
+            quota[field] = value;
+            hasQuotaField = true;
         }
-        if (typeof quotaValue !== 'number' || !Number.isFinite(quotaValue) || quotaValue < 0) {
-            throw new community_server_2.BadRequestHttpError('quotaLimit must be a non-negative number or null.');
+        if (!hasQuotaField) {
+            throw new community_server_2.BadRequestHttpError('Body must include at least one quota field.');
         }
-        return quotaValue;
+        return quota;
     }
     writeOptions(response) {
         response.statusCode = 204;

package/dist/http/quota/QuotaAdminHttpHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"QuotaAdminHttpHandler.js","sourceRoot":"","sources":["../../../src/http/quota/QuotaAdminHttpHandler.ts"],"names":[],"mappings":";;;AAAA,wEAAwE;AACxE,iEAAqD;AACrD,8DAAsD;AAEtD,8DAOiC;AACjC,kDAAgE;AAChE,gFAA6E;AAC7E,wFAAqF;AAcrF,MAAa,qBAAsB,SAAQ,8BAAW;IAQpD,YAAmB,OAAqC;QACtD,KAAK,EAAE,CAAC;QARS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAC9B,WAAM,GAAG,IAAA,gDAAwB,GAAE,CAAC;QAQnD,MAAM,EAAE,GAAG,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,IAAI,qCAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,6CAAqB,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,0CAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,4CAAyB,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE/D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,QAAsB;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,UAAU,EAAE,KAAK,IAAI,IAAI;aAC1B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,UAAU,EAAE,KAAK,IAAI,IAAI;SAC1B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,OAAoB,EAAE,QAAsB;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,sCAAmB,CAAC,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,IAAI,IAAI;aAC3B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,IAAI,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAmB,EAAE,QAAsB;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,wCAAqB,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAuC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,wCAAqB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wCAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,qCAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,sCAAmB,CAAC,qDAAqD,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAE,KAAK,EAAE,UAAU,CAAE,GAAG,QAAQ,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,sCAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,sCAAmB,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,sCAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAqB,CAAC;QAC9C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,sCAAmB,CAAC,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,QAAsB;QACzC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,QAAsB,EAAE,MAAc,EAAE,OAAgB;QACxE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACtE,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,OAAoB;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAClC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,YAAY,CAAC,OAAgC;QACnD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAsB,EAAE;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA9PD,sDA8PC","sourcesContent":["import { createSolidTokenVerifier } from '@solid/access-token-verifier';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpRequest, HttpResponse } from '@solid/community-server';\nimport {\n  \n  BadRequestHttpError,\n  ForbiddenHttpError,\n  MethodNotAllowedHttpError,\n  NotImplementedHttpError,\n  UnauthorizedHttpError,\n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { AccountRepository } from '../../identity/drizzle/AccountRepository';\nimport { AccountRoleRepository } from '../../identity/drizzle/AccountRoleRepository';\nimport type { QuotaService } from '../../quota/QuotaService';\n\ninterface QuotaAdminHttpHandlerOptions {\n  identityDbUrl: string;\n  basePath?: string;\n  roleRepository?: AccountRoleRepository;\n  quotaService: QuotaService;\n}\n\ntype QuotaTarget =\n  | { type: 'account'; id: string }\n  | { type: 'pod'; id: string };\n\nexport class QuotaAdminHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly verify = createSolidTokenVerifier();\n  private readonly accountRepo: AccountRepository;\n  private readonly roleRepo: AccountRoleRepository;\n  private readonly quotaService: QuotaService;\n  private readonly basePath: string;\n\n  public constructor(options: QuotaAdminHttpHandlerOptions) {\n    super();\n    const db = getIdentityDatabase(options.identityDbUrl);\n    this.accountRepo = new AccountRepository(db);\n    this.roleRepo = options.roleRepository ?? new AccountRoleRepository(db);\n    this.basePath = options.basePath ?? '/api/quota/';\n    this.quotaService = options.quotaService;\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    const path = this.getUrl(request).pathname;\n    if (!path.startsWith(this.basePath)) {\n      throw new NotImplementedHttpError('Not a quota admin request.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n\n    if (![ 'GET', 'PUT', 'DELETE' ].includes(method)) {\n      throw new MethodNotAllowedHttpError([ 'GET', 'PUT', 'DELETE', 'OPTIONS' ]);\n    }\n\n    await this.authenticateAdmin(request);\n\n    const target = this.parseTarget(this.getUrl(request).pathname);\n\n    switch (method) {\n      case 'GET':\n        await this.handleGet(target, response);\n        break;\n      case 'PUT':\n        await this.handlePut(target, request, response);\n        break;\n      case 'DELETE':\n        await this.handleDelete(target, response);\n        break;\n    }\n  }\n\n  private async handleGet(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'account') {\n      const quota = await this.quotaService.getAccountLimit(target.id);\n      this.writeJson(response, 200, {\n        type: 'account',\n        accountId: target.id,\n        quotaLimit: quota ?? null,\n      });\n      return;\n    }\n\n    const podInfo = await this.accountRepo.getPodInfo(target.id);\n    if (!podInfo) {\n      throw new BadRequestHttpError('Unknown pod identifier.');\n    }\n    const quota = await this.quotaService.getPodLimit(target.id);\n    this.writeJson(response, 200, {\n      type: 'pod',\n      podId: target.id,\n      accountId: podInfo.accountId,\n      baseUrl: podInfo.baseUrl ?? null,\n      quotaLimit: quota ?? null,\n    });\n  }\n\n  private async handlePut(target: QuotaTarget, request: HttpRequest, response: HttpResponse): Promise<void> {\n    const body = await this.readJson(request);\n    if (body == null || typeof body !== 'object') {\n      throw new BadRequestHttpError('Request body must be an object.');\n    }\n    const payload = body as Record<string, unknown>;\n    const quota = this.extractQuota(payload);\n\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.setAccountLimit(target.id, quota);\n      const latest = await this.quotaService.getAccountLimit(target.id);\n      this.writeJson(response, 200, {\n        status: 'updated',\n        targetType: target.type,\n        targetId: target.id,\n        quotaLimit: latest ?? null,\n      });\n      return;\n    }\n\n    await this.quotaService.setPodLimit(target.id, quota);\n    const latest = await this.quotaService.getPodLimit(target.id);\n\n    this.writeJson(response, 200, {\n      status: 'updated',\n      targetType: target.type,\n      targetId: target.id,\n      quotaLimit: latest ?? null,\n    });\n  }\n\n  private async handleDelete(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.setAccountLimit(target.id, null);\n    } else {\n      await this.quotaService.setPodLimit(target.id, null);\n    }\n    this.writeJson(response, 200, {\n      status: 'cleared',\n      targetType: target.type,\n      targetId: target.id,\n    });\n  }\n\n  private async authenticateAdmin(request: HttpRequest): Promise<void> {\n    const authorization = request.headers.authorization;\n    if (!authorization || !authorization.startsWith('Bearer ')) {\n      throw new UnauthorizedHttpError('Quota管理接口需要携带 Bearer Token。');\n    }\n    let payload: Record<string, unknown>;\n    try {\n      payload = await this.verify(authorization) as unknown as Record<string, unknown>;\n    } catch (error: unknown) {\n      throw new UnauthorizedHttpError('无法验证访问令牌。', { cause: error });\n    }\n    const webId = this.extractWebId(payload);\n    if (!webId) {\n      throw new UnauthorizedHttpError('访问令牌缺少 webid。');\n    }\n    const context = await this.roleRepo.findByWebId(webId);\n    if (!context || !context.roles.includes('admin')) {\n      throw new ForbiddenHttpError('仅限管理员修改配额。');\n    }\n  }\n\n  private parseTarget(pathname: string): QuotaTarget {\n    const relative = pathname.slice(this.basePath.length);\n    const segments = relative.split('/').filter(Boolean);\n    if (segments.length !== 2) {\n      throw new BadRequestHttpError('Quota path must match /accounts/{id} or /pods/{id}.');\n    }\n    const [ scope, identifier ] = segments;\n    if (!identifier) {\n      throw new BadRequestHttpError('Missing identifier.');\n    }\n    if (scope === 'accounts') {\n      return { type: 'account', id: decodeURIComponent(identifier) };\n    }\n    if (scope === 'pods') {\n      return { type: 'pod', id: decodeURIComponent(identifier) };\n    }\n    throw new BadRequestHttpError('Unknown quota scope.');\n  }\n\n  private async readJson(request: HttpRequest): Promise<unknown> {\n    const body = await this.readBody(request);\n    if (!body) {\n      return undefined;\n    }\n    try {\n      return JSON.parse(body);\n    } catch (error: unknown) {\n      throw new BadRequestHttpError('Body must contain valid JSON.', { cause: error });\n    }\n  }\n\n  private extractQuota(body: Record<string, unknown>): number | null {\n    if (!Object.prototype.hasOwnProperty.call(body, 'quotaLimit')) {\n      throw new BadRequestHttpError('Body must include quotaLimit.');\n    }\n    const quotaValue = body.quotaLimit as unknown;\n    if (quotaValue === null) {\n      return null;\n    }\n    if (typeof quotaValue !== 'number' || !Number.isFinite(quotaValue) || quotaValue < 0) {\n      throw new BadRequestHttpError('quotaLimit must be a non-negative number or null.');\n    }\n    return quotaValue;\n  }\n\n  private writeOptions(response: HttpResponse): void {\n    response.statusCode = 204;\n    response.setHeader('Allow', 'GET,PUT,DELETE,OPTIONS');\n    response.end();\n  }\n\n  private writeJson(response: HttpResponse, status: number, payload: unknown): void {\n    response.statusCode = status;\n    response.setHeader('Content-Type', 'application/json; charset=utf-8');\n    response.setHeader('Cache-Control', 'no-store');\n    response.end(JSON.stringify(payload));\n  }\n\n  private async readBody(request: HttpRequest): Promise<string> {\n    return await new Promise<string>((resolve, reject) => {\n      let data = '';\n      request.setEncoding('utf8');\n      request.on('data', (chunk: string) => {\n        data += chunk;\n      });\n      request.on('end', () => resolve(data));\n      request.on('error', reject);\n    });\n  }\n\n  private getUrl(request: HttpRequest): URL {\n    const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';\n    const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];\n    const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;\n    const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';\n    const rawUrl = request.url ?? '/';\n    return new URL(rawUrl, `${scheme}://${hostHeader}`);\n  }\n\n  private extractWebId(payload: Record<string, unknown>): string | undefined {\n    const getString = (key: string): string | undefined => {\n      const value = payload[key];\n      if (typeof value !== 'string') {\n        return undefined;\n      }\n      const trimmed = value.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    };\n    const direct = getString('webid') ?? getString('webId') ?? getString('sub');\n    if (direct) {\n      return direct;\n    }\n    const clientId = getString('client_id');\n    if (clientId && clientId.startsWith('https://')) {\n      return clientId;\n    }\n    return undefined;\n  }\n}\n"]}
+{"version":3,"file":"QuotaAdminHttpHandler.js","sourceRoot":"","sources":["../../../src/http/quota/QuotaAdminHttpHandler.ts"],"names":[],"mappings":";;;AAAA,wEAAwE;AACxE,iEAAqD;AACrD,8DAAsD;AAEtD,8DAMiC;AACjC,kDAAgE;AAChE,gFAA6E;AAC7E,wFAAqF;AAcrF,MAAa,qBAAsB,SAAQ,8BAAW;IAQpD,YAAmB,OAAqC;QACtD,KAAK,EAAE,CAAC;QARS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAC9B,WAAM,GAAG,IAAA,gDAAwB,GAAE,CAAC;QAQnD,MAAM,EAAE,GAAG,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,IAAI,qCAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,6CAAqB,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,0CAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,4CAAyB,CAAC,CAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE/D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,QAAsB;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,OAAoB,EAAE,QAAsB;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,sCAAmB,CAAC,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAmB,EAAE,QAAsB;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,sCAAmB,CAAC,yBAAyB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,wCAAqB,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAuC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,wCAAqB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wCAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,qCAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,sCAAmB,CAAC,qDAAqD,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAE,KAAK,EAAE,UAAU,CAAE,GAAG,QAAQ,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,sCAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,sCAAmB,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,CAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAW,EAAE,CAAC;YACtH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,sCAAmB,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;YACnF,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACrB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,sCAAmB,CAAC,6CAA6C,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,QAAsB;QACzC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,QAAsB,EAAE,MAAc,EAAE,OAAgB;QACxE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACtE,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,OAAoB;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAClC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,YAAY,CAAC,OAAgC;QACnD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAsB,EAAE;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AApQD,sDAoQC","sourcesContent":["import { createSolidTokenVerifier } from '@solid/access-token-verifier';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpRequest, HttpResponse } from '@solid/community-server';\nimport {\n  BadRequestHttpError,\n  ForbiddenHttpError,\n  MethodNotAllowedHttpError,\n  NotImplementedHttpError,\n  UnauthorizedHttpError,\n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { AccountRepository } from '../../identity/drizzle/AccountRepository';\nimport { AccountRoleRepository } from '../../identity/drizzle/AccountRoleRepository';\nimport type { AccountQuota, QuotaService } from '../../quota/QuotaService';\n\ninterface QuotaAdminHttpHandlerOptions {\n  identityDbUrl: string;\n  basePath?: string;\n  roleRepository?: AccountRoleRepository;\n  quotaService: QuotaService;\n}\n\ntype QuotaTarget =\n  | { type: 'account'; id: string }\n  | { type: 'pod'; id: string };\n\nexport class QuotaAdminHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly verify = createSolidTokenVerifier();\n  private readonly accountRepo: AccountRepository;\n  private readonly roleRepo: AccountRoleRepository;\n  private readonly quotaService: QuotaService;\n  private readonly basePath: string;\n\n  public constructor(options: QuotaAdminHttpHandlerOptions) {\n    super();\n    const db = getIdentityDatabase(options.identityDbUrl);\n    this.accountRepo = new AccountRepository(db);\n    this.roleRepo = options.roleRepository ?? new AccountRoleRepository(db);\n    this.basePath = options.basePath ?? '/api/quota/';\n    this.quotaService = options.quotaService;\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    const path = this.getUrl(request).pathname;\n    if (!path.startsWith(this.basePath)) {\n      throw new NotImplementedHttpError('Not a quota admin request.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const method = (request.method ?? 'GET').toUpperCase();\n    if (method === 'OPTIONS') {\n      this.writeOptions(response);\n      return;\n    }\n\n    if (![ 'GET', 'PUT', 'DELETE' ].includes(method)) {\n      throw new MethodNotAllowedHttpError([ 'GET', 'PUT', 'DELETE', 'OPTIONS' ]);\n    }\n\n    await this.authenticateAdmin(request);\n\n    const target = this.parseTarget(this.getUrl(request).pathname);\n\n    switch (method) {\n      case 'GET':\n        await this.handleGet(target, response);\n        break;\n      case 'PUT':\n        await this.handlePut(target, request, response);\n        break;\n      case 'DELETE':\n        await this.handleDelete(target, response);\n        break;\n    }\n  }\n\n  private async handleGet(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'account') {\n      const quota = await this.quotaService.getAccountQuota(target.id);\n      this.writeJson(response, 200, {\n        type: 'account',\n        accountId: target.id,\n        quota,\n      });\n      return;\n    }\n\n    const podInfo = await this.accountRepo.getPodInfo(target.id);\n    if (!podInfo) {\n      throw new BadRequestHttpError('Unknown pod identifier.');\n    }\n    const quota = await this.quotaService.getPodQuota(target.id);\n    this.writeJson(response, 200, {\n      type: 'pod',\n      podId: target.id,\n      accountId: podInfo.accountId,\n      baseUrl: podInfo.baseUrl ?? null,\n      quota,\n    });\n  }\n\n  private async handlePut(target: QuotaTarget, request: HttpRequest, response: HttpResponse): Promise<void> {\n    const body = await this.readJson(request);\n    if (body == null || typeof body !== 'object') {\n      throw new BadRequestHttpError('Request body must be an object.');\n    }\n    const payload = body as Record<string, unknown>;\n    const quota = this.extractQuota(payload);\n\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.setAccountQuota(target.id, quota);\n      const latest = await this.quotaService.getAccountQuota(target.id);\n      this.writeJson(response, 200, {\n        status: 'updated',\n        targetType: target.type,\n        targetId: target.id,\n        quota: latest,\n      });\n      return;\n    }\n\n    await this.quotaService.setPodQuota(target.id, quota);\n    const latest = await this.quotaService.getPodQuota(target.id);\n\n    this.writeJson(response, 200, {\n      status: 'updated',\n      targetType: target.type,\n      targetId: target.id,\n      quota: latest,\n    });\n  }\n\n  private async handleDelete(target: QuotaTarget, response: HttpResponse): Promise<void> {\n    if (target.type === 'pod') {\n      const podInfo = await this.accountRepo.getPodInfo(target.id);\n      if (!podInfo) {\n        throw new BadRequestHttpError('Unknown pod identifier.');\n      }\n    }\n\n    if (target.type === 'account') {\n      await this.quotaService.clearAccountQuota(target.id);\n    } else {\n      await this.quotaService.clearPodQuota(target.id);\n    }\n    this.writeJson(response, 200, {\n      status: 'cleared',\n      targetType: target.type,\n      targetId: target.id,\n    });\n  }\n\n  private async authenticateAdmin(request: HttpRequest): Promise<void> {\n    const authorization = request.headers.authorization;\n    if (!authorization || !authorization.startsWith('Bearer ')) {\n      throw new UnauthorizedHttpError('Quota管理接口需要携带 Bearer Token。');\n    }\n    let payload: Record<string, unknown>;\n    try {\n      payload = await this.verify(authorization) as unknown as Record<string, unknown>;\n    } catch (error: unknown) {\n      throw new UnauthorizedHttpError('无法验证访问令牌。', { cause: error });\n    }\n    const webId = this.extractWebId(payload);\n    if (!webId) {\n      throw new UnauthorizedHttpError('访问令牌缺少 webid。');\n    }\n    const context = await this.roleRepo.findByWebId(webId);\n    if (!context || !context.roles.includes('admin')) {\n      throw new ForbiddenHttpError('仅限管理员修改配额。');\n    }\n  }\n\n  private parseTarget(pathname: string): QuotaTarget {\n    const relative = pathname.slice(this.basePath.length);\n    const segments = relative.split('/').filter(Boolean);\n    if (segments.length !== 2) {\n      throw new BadRequestHttpError('Quota path must match /accounts/{id} or /pods/{id}.');\n    }\n    const [ scope, identifier ] = segments;\n    if (!identifier) {\n      throw new BadRequestHttpError('Missing identifier.');\n    }\n    if (scope === 'accounts') {\n      return { type: 'account', id: decodeURIComponent(identifier) };\n    }\n    if (scope === 'pods') {\n      return { type: 'pod', id: decodeURIComponent(identifier) };\n    }\n    throw new BadRequestHttpError('Unknown quota scope.');\n  }\n\n  private async readJson(request: HttpRequest): Promise<unknown> {\n    const body = await this.readBody(request);\n    if (!body) {\n      return undefined;\n    }\n    try {\n      return JSON.parse(body);\n    } catch (error: unknown) {\n      throw new BadRequestHttpError('Body must contain valid JSON.', { cause: error });\n    }\n  }\n\n  private extractQuota(body: Record<string, unknown>): Partial<AccountQuota> {\n    const quota: Partial<AccountQuota> = {};\n    let hasQuotaField = false;\n    for (const field of [ 'storageLimitBytes', 'bandwidthLimitBps', 'computeLimitSeconds', 'tokenLimitMonthly' ] as const) {\n      if (!Object.prototype.hasOwnProperty.call(body, field)) {\n        continue;\n      }\n      const value = body[field];\n      if (value !== null && (typeof value !== 'number' || !Number.isFinite(value) || value < 0)) {\n        throw new BadRequestHttpError(`${field} must be a non-negative number or null.`);\n      }\n      quota[field] = value;\n      hasQuotaField = true;\n    }\n    if (!hasQuotaField) {\n      throw new BadRequestHttpError('Body must include at least one quota field.');\n    }\n    return quota;\n  }\n\n  private writeOptions(response: HttpResponse): void {\n    response.statusCode = 204;\n    response.setHeader('Allow', 'GET,PUT,DELETE,OPTIONS');\n    response.end();\n  }\n\n  private writeJson(response: HttpResponse, status: number, payload: unknown): void {\n    response.statusCode = status;\n    response.setHeader('Content-Type', 'application/json; charset=utf-8');\n    response.setHeader('Cache-Control', 'no-store');\n    response.end(JSON.stringify(payload));\n  }\n\n  private async readBody(request: HttpRequest): Promise<string> {\n    return await new Promise<string>((resolve, reject) => {\n      let data = '';\n      request.setEncoding('utf8');\n      request.on('data', (chunk: string) => {\n        data += chunk;\n      });\n      request.on('end', () => resolve(data));\n      request.on('error', reject);\n    });\n  }\n\n  private getUrl(request: HttpRequest): URL {\n    const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';\n    const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];\n    const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;\n    const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';\n    const rawUrl = request.url ?? '/';\n    return new URL(rawUrl, `${scheme}://${hostHeader}`);\n  }\n\n  private extractWebId(payload: Record<string, unknown>): string | undefined {\n    const getString = (key: string): string | undefined => {\n      const value = payload[key];\n      if (typeof value !== 'string') {\n        return undefined;\n      }\n      const trimmed = value.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    };\n    const direct = getString('webid') ?? getString('webId') ?? getString('sub');\n    if (direct) {\n      return direct;\n    }\n    const clientId = getString('client_id');\n    if (clientId && clientId.startsWith('https://')) {\n      return clientId;\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/identity/drizzle/AccountRepository.d.ts

@@ -1,31 +1,13 @@
-import { type IdentityDatabase } from './db';
-export interface PodQuotaContext {
-    accountId: string;
-    podId: string;
-    baseUrl?: string;
-    podQuota?: number;
-    accountQuota?: number;
-}
+import type { IdentityDatabase } from './db';
 /**
- * Repository for account and pod quota operations.
- *
- * Reads account/pod data from CSS's internal_kv table.
- * Quota limits are stored in identity_account_usage / identity_pod_usage tables.
+ * Reads account/pod ownership data from the CSS identity facts.
+ * Quota values live in identity_usage and are managed by UsageRepository.
  */
 export declare class AccountRepository {
-    private readonly db;
-    private readonly kvTableName;
-    private readonly accountUsageTable;
-    private readonly podUsageTable;
+    private readonly podLookupRepo;
     constructor(db: IdentityDatabase, kvTableName?: string);
-    getAccountQuota(accountId: string): Promise<number | undefined>;
     getPodInfo(podId: string): Promise<{
         accountId: string;
-        podQuota?: number;
         baseUrl?: string;
     } | undefined>;
-    private getPodQuota;
-    getQuotaContext(accountId: string, podId: string): Promise<PodQuotaContext | undefined>;
-    setAccountQuota(accountId: string, quota?: number): Promise<void>;
-    setPodQuota(podId: string, quota?: number): Promise<void>;
 }

package/dist/identity/drizzle/AccountRepository.js

@@ -1,130 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AccountRepository = void 0;
-const drizzle_orm_1 = require("drizzle-orm");
-const db_1 = require("./db");
+const PodLookupRepository_1 = require("./PodLookupRepository");
 /**
- * Repository for account and pod quota operations.
- *
- * Reads account/pod data from CSS's internal_kv table.
- * Quota limits are stored in identity_account_usage / identity_pod_usage tables.
+ * Reads account/pod ownership data from the CSS identity facts.
+ * Quota values live in identity_usage and are managed by UsageRepository.
  */
 class AccountRepository {
     constructor(db, kvTableName) {
-        this.db = db;
-        this.kvTableName = kvTableName ?? 'internal_kv';
-        this.accountUsageTable = 'identity_account_usage';
-        this.podUsageTable = 'identity_pod_usage';
-    }
-    async getAccountQuota(accountId) {
-        try {
-            const tableId = drizzle_orm_1.sql.identifier([this.accountUsageTable]);
-            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT storage_limit_bytes FROM ${tableId} WHERE account_id = ${accountId} LIMIT 1`);
-            if (result.rows.length === 0) {
-                return undefined;
-            }
-            const limit = result.rows[0].storage_limit_bytes;
-            return limit != null ? limit : undefined;
-        }
-        catch {
-            // Table might not exist
-            return undefined;
-        }
+        this.podLookupRepo = new PodLookupRepository_1.PodLookupRepository(db, kvTableName);
     }
     async getPodInfo(podId) {
-        // Get pod info from CSS's internal_kv
-        const kvTableId = drizzle_orm_1.sql.identifier([this.kvTableName]);
-        const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-      SELECT key, value FROM ${kvTableId}
-      WHERE key LIKE 'accounts/data/%'
-    `);
-        for (const row of result.rows) {
-            try {
-                const accountId = row.key.replace('accounts/data/', '');
-                const data = typeof row.value === 'string' ? JSON.parse(row.value) : row.value;
-                const podMap = data['**pod**'] || data.pod || {};
-                if (podMap[podId]) {
-                    const pod = podMap[podId];
-                    const podQuota = await this.getPodQuota(podId);
-                    return {
-                        accountId,
-                        baseUrl: typeof pod.baseUrl === 'string' ? pod.baseUrl : undefined,
-                        podQuota,
-                    };
-                }
-            }
-            catch {
-                // Skip malformed entries
-            }
-        }
-        return undefined;
-    }
-    async getPodQuota(podId) {
-        try {
-            const tableId = drizzle_orm_1.sql.identifier([this.podUsageTable]);
-            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `SELECT storage_limit_bytes FROM ${tableId} WHERE pod_id = ${podId} LIMIT 1`);
-            if (result.rows.length === 0) {
-                return undefined;
-            }
-            const limit = result.rows[0].storage_limit_bytes;
-            return limit != null ? limit : undefined;
-        }
-        catch {
-            // Table might not exist
-            return undefined;
-        }
-    }
-    async getQuotaContext(accountId, podId) {
-        const podInfo = await this.getPodInfo(podId);
-        if (!podInfo) {
-            return undefined;
-        }
-        if (podInfo.accountId !== accountId) {
+        const pod = await this.podLookupRepo.findById(podId)
+            ?? await this.podLookupRepo.findByResourceIdentifier(podId);
+        if (!pod) {
             return undefined;
         }
-        const accountQuota = await this.getAccountQuota(accountId);
         return {
-            accountId,
-            podId,
-            baseUrl: podInfo.baseUrl,
-            podQuota: podInfo.podQuota,
-            accountQuota,
+            accountId: pod.accountId,
+            baseUrl: pod.baseUrl,
         };
     }
-    async setAccountQuota(accountId, quota) {
-        const tableId = drizzle_orm_1.sql.identifier([this.accountUsageTable]);
-        if ((0, db_1.isDatabaseSqlite)(this.db)) {
-            await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-        INSERT INTO ${tableId} (account_id, storage_limit_bytes)
-        VALUES (${accountId}, ${quota ?? null})
-        ON CONFLICT (account_id) DO UPDATE SET storage_limit_bytes = ${quota ?? null}
-      `);
-        }
-        else {
-            await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-        INSERT INTO ${tableId} (account_id, storage_limit_bytes)
-        VALUES (${accountId}, ${quota ?? null})
-        ON CONFLICT (account_id) DO UPDATE SET storage_limit_bytes = EXCLUDED.storage_limit_bytes
-      `);
-        }
-    }
-    async setPodQuota(podId, quota) {
-        const tableId = drizzle_orm_1.sql.identifier([this.podUsageTable]);
-        if ((0, db_1.isDatabaseSqlite)(this.db)) {
-            await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-        INSERT INTO ${tableId} (pod_id, account_id, storage_limit_bytes)
-        VALUES (${podId}, '', ${quota ?? null})
-        ON CONFLICT (pod_id) DO UPDATE SET storage_limit_bytes = ${quota ?? null}
-      `);
-        }
-        else {
-            await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-        INSERT INTO ${tableId} (pod_id, account_id, storage_limit_bytes)
-        VALUES (${podId}, '', ${quota ?? null})
-        ON CONFLICT (pod_id) DO UPDATE SET storage_limit_bytes = EXCLUDED.storage_limit_bytes
-      `);
-        }
-    }
 }
 exports.AccountRepository = AccountRepository;
 //# sourceMappingURL=AccountRepository.js.map

package/dist/identity/drizzle/AccountRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"AccountRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/AccountRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAkC;AAClC,6BAA6E;AAe7E;;;;;GAKG;AACH,MAAa,iBAAiB;IAK5B,YACmB,EAAoB,EACrC,WAAoB;QADH,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,iBAAiB,GAAG,wBAAwB,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,oBAAoB,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAC/B,IAAI,CAAC,EAAE,EACP,IAAA,iBAAG,EAAA,mCAAmC,OAAO,uBAAuB,SAAS,UAAU,CACxF,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACjD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa;QACnC,sCAAsC;QACtC,MAAM,SAAS,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAgB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;+BAClC,SAAS;;KAEnC,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;gBAEjD,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAA4B,CAAC;oBACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC/C,OAAO;wBACL,SAAS;wBACT,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;wBAClE,QAAQ;qBACT,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAC/B,IAAI,CAAC,EAAE,EACP,IAAA,iBAAG,EAAA,mCAAmC,OAAO,mBAAmB,KAAK,UAAU,CAChF,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACjD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,KAAa;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO;YACL,SAAS;YACT,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY;SACb,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,KAAc;QAC5D,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzD,IAAI,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;sBACf,OAAO;kBACX,SAAS,KAAK,KAAK,IAAI,IAAI;uEAC0B,KAAK,IAAI,IAAI;OAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;sBACf,OAAO;kBACX,SAAS,KAAK,KAAK,IAAI,IAAI;;OAEtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAc;QACpD,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,IAAI,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;sBACf,OAAO;kBACX,KAAK,SAAS,KAAK,IAAI,IAAI;mEACsB,KAAK,IAAI,IAAI;OACzE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;sBACf,OAAO;kBACX,KAAK,SAAS,KAAK,IAAI,IAAI;;OAEtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AApID,8CAoIC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport { type IdentityDatabase, executeQuery, isDatabaseSqlite } from './db';\n\nexport interface PodQuotaContext {\n  accountId: string;\n  podId: string;\n  baseUrl?: string;\n  podQuota?: number;\n  accountQuota?: number;\n}\n\ninterface InternalKvRow {\n  key: string;\n  value: string;\n}\n\n/**\n * Repository for account and pod quota operations.\n *\n * Reads account/pod data from CSS's internal_kv table.\n * Quota limits are stored in identity_account_usage / identity_pod_usage tables.\n */\nexport class AccountRepository {\n  private readonly kvTableName: string;\n  private readonly accountUsageTable: string;\n  private readonly podUsageTable: string;\n\n  public constructor(\n    private readonly db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.kvTableName = kvTableName ?? 'internal_kv';\n    this.accountUsageTable = 'identity_account_usage';\n    this.podUsageTable = 'identity_pod_usage';\n  }\n\n  public async getAccountQuota(accountId: string): Promise<number | undefined> {\n    try {\n      const tableId = sql.identifier([this.accountUsageTable]);\n      const result = await executeQuery<{ storage_limit_bytes: number | null }>(\n        this.db,\n        sql`SELECT storage_limit_bytes FROM ${tableId} WHERE account_id = ${accountId} LIMIT 1`,\n      );\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const limit = result.rows[0].storage_limit_bytes;\n      return limit != null ? limit : undefined;\n    } catch {\n      // Table might not exist\n      return undefined;\n    }\n  }\n\n  public async getPodInfo(podId: string): Promise<{ accountId: string; podQuota?: number; baseUrl?: string } | undefined> {\n    // Get pod info from CSS's internal_kv\n    const kvTableId = sql.identifier([this.kvTableName]);\n    const result = await executeQuery<InternalKvRow>(this.db, sql`\n      SELECT key, value FROM ${kvTableId}\n      WHERE key LIKE 'accounts/data/%'\n    `);\n\n    for (const row of result.rows) {\n      try {\n        const accountId = row.key.replace('accounts/data/', '');\n        const data = typeof row.value === 'string' ? JSON.parse(row.value) : row.value;\n        const podMap = data['**pod**'] || data.pod || {};\n\n        if (podMap[podId]) {\n          const pod = podMap[podId] as Record<string, unknown>;\n          const podQuota = await this.getPodQuota(podId);\n          return {\n            accountId,\n            baseUrl: typeof pod.baseUrl === 'string' ? pod.baseUrl : undefined,\n            podQuota,\n          };\n        }\n      } catch {\n        // Skip malformed entries\n      }\n    }\n\n    return undefined;\n  }\n\n  private async getPodQuota(podId: string): Promise<number | undefined> {\n    try {\n      const tableId = sql.identifier([this.podUsageTable]);\n      const result = await executeQuery<{ storage_limit_bytes: number | null }>(\n        this.db,\n        sql`SELECT storage_limit_bytes FROM ${tableId} WHERE pod_id = ${podId} LIMIT 1`,\n      );\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const limit = result.rows[0].storage_limit_bytes;\n      return limit != null ? limit : undefined;\n    } catch {\n      // Table might not exist\n      return undefined;\n    }\n  }\n\n  public async getQuotaContext(accountId: string, podId: string): Promise<PodQuotaContext | undefined> {\n    const podInfo = await this.getPodInfo(podId);\n    if (!podInfo) {\n      return undefined;\n    }\n    if (podInfo.accountId !== accountId) {\n      return undefined;\n    }\n    const accountQuota = await this.getAccountQuota(accountId);\n    return {\n      accountId,\n      podId,\n      baseUrl: podInfo.baseUrl,\n      podQuota: podInfo.podQuota,\n      accountQuota,\n    };\n  }\n\n  public async setAccountQuota(accountId: string, quota?: number): Promise<void> {\n    const tableId = sql.identifier([this.accountUsageTable]);\n    if (isDatabaseSqlite(this.db)) {\n      await executeQuery(this.db, sql`\n        INSERT INTO ${tableId} (account_id, storage_limit_bytes)\n        VALUES (${accountId}, ${quota ?? null})\n        ON CONFLICT (account_id) DO UPDATE SET storage_limit_bytes = ${quota ?? null}\n      `);\n    } else {\n      await executeQuery(this.db, sql`\n        INSERT INTO ${tableId} (account_id, storage_limit_bytes)\n        VALUES (${accountId}, ${quota ?? null})\n        ON CONFLICT (account_id) DO UPDATE SET storage_limit_bytes = EXCLUDED.storage_limit_bytes\n      `);\n    }\n  }\n\n  public async setPodQuota(podId: string, quota?: number): Promise<void> {\n    const tableId = sql.identifier([this.podUsageTable]);\n    if (isDatabaseSqlite(this.db)) {\n      await executeQuery(this.db, sql`\n        INSERT INTO ${tableId} (pod_id, account_id, storage_limit_bytes)\n        VALUES (${podId}, '', ${quota ?? null})\n        ON CONFLICT (pod_id) DO UPDATE SET storage_limit_bytes = ${quota ?? null}\n      `);\n    } else {\n      await executeQuery(this.db, sql`\n        INSERT INTO ${tableId} (pod_id, account_id, storage_limit_bytes)\n        VALUES (${podId}, '', ${quota ?? null})\n        ON CONFLICT (pod_id) DO UPDATE SET storage_limit_bytes = EXCLUDED.storage_limit_bytes\n      `);\n    }\n  }\n}\n"]}
+{"version":3,"file":"AccountRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/AccountRepository.ts"],"names":[],"mappings":";;;AACA,+DAA4D;AAE5D;;;GAGG;AACH,MAAa,iBAAiB;IAG5B,YACE,EAAoB,EACpB,WAAoB;QAEpB,IAAI,CAAC,aAAa,GAAG,IAAI,yCAAmB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;eAC/C,MAAM,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;CACF;AArBD,8CAqBC","sourcesContent":["import type { IdentityDatabase } from './db';\nimport { PodLookupRepository } from './PodLookupRepository';\n\n/**\n * Reads account/pod ownership data from the CSS identity facts.\n * Quota values live in identity_usage and are managed by UsageRepository.\n */\nexport class AccountRepository {\n  private readonly podLookupRepo: PodLookupRepository;\n\n  public constructor(\n    db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.podLookupRepo = new PodLookupRepository(db, kvTableName);\n  }\n\n  public async getPodInfo(podId: string): Promise<{ accountId: string; baseUrl?: string } | undefined> {\n    const pod = await this.podLookupRepo.findById(podId)\n      ?? await this.podLookupRepo.findByResourceIdentifier(podId);\n    if (!pod) {\n      return undefined;\n    }\n    return {\n      accountId: pod.accountId,\n      baseUrl: pod.baseUrl,\n    };\n  }\n}\n"]}

package/dist/identity/drizzle/AccountRoleRepository.d.ts

@@ -6,18 +6,18 @@ export interface AccountRoleContext {
 }
 export declare class AccountRoleRepository {
     private readonly db;
-    private readonly ready;
     private readonly logger;
     constructor(db: IdentityDatabase);
     findByAccountId(accountId: string): Promise<AccountRoleContext | undefined>;
     findByWebId(webId: string): Promise<AccountRoleContext | undefined>;
     findByWebIdLoose(webId: string): Promise<AccountRoleContext | undefined>;
     addRoles(accountId: string, roles: string[]): Promise<void>;
-    private ensureSchema;
-    private fetchRoles;
-    private getAccountPayloadById;
+    private getAccountById;
     private loadAllAccounts;
+    private loadIdentityStoreAccounts;
+    private loadInternalKvAccounts;
     private loadFileAccountMap;
+    private updateAccountRecord;
+    private toJsonSql;
     private isTableMissing;
-    private isDuplicateDefinitionError;
 }