@undefineds.co/xpod 0.4.9 → 0.4.11

package/dist/identity/drizzle/PodLookupRepository.js

@@ -8,6 +8,12 @@ const db_1 = require("./db");
  *
  * Reads Pod facts from the canonical identity_store table and from CSS
  * WrappedIndexedStorage rows when that storage backend is active.
+ *
+ * 点查（findById / findAllByWebId / findByWebIds / listByAccountId）走字段下推
+ * 快路径，避免每请求全扫 identity_store；KV 历史账户记录独立读取，
+ * 同 ID 的 canonical 记录整条优先，包括无法解析的记录，不能恢复旧身份。
+ * findByResourceIdentifier / listAllPods 本质上需要
+ * 候选全集，仍保留全量读取（identity_store 侧用反向前缀 LIKE 下推预筛）。
  */
 class PodLookupRepository {
     constructor(db, kvTableName) {
@@ -17,9 +23,13 @@ class PodLookupRepository {
     }
     /**
      * Find Pod by resource path (matches longest canonical storage/base URL prefix).
+     *
+     * kv 账户行无法按 URL 下推，保持全量解析（cloud 部署 kv 为空，local 规模有限）。
      */
     async findByResourceIdentifier(resourcePath) {
-        const pods = await this.getAllPods();
+        const kvRows = await this.getAccountRowsFromKv();
+        const nodeAssignments = await this.getNodeAssignments();
+        const pods = await this.mergeCanonicalPods(this.extractKvPods(kvRows, nodeAssignments), await this.findIndexedStorePodsByResource(resourcePath, nodeAssignments), nodeAssignments);
         let bestMatch;
         let bestLength = 0;
         for (const pod of pods) {
@@ -33,15 +43,19 @@ class PodLookupRepository {
     }
     /**
      * Get Pod by ID.
+     *
+     * 快路径按主键直查 identity_store 的 pod 行并补齐 owner/node 关联；
+     * 独立读取 KV 历史记录，并按原始 ID 检查 canonical 遮蔽。
      */
     async findById(podId) {
-        const pods = await this.getAllPods();
-        return pods.find((p) => p.podId === podId);
+        const fast = await this.getIndexedStorePodsByIds([podId]);
+        const legacy = (await this.getLegacyPods()).filter((pod) => pod.podId === podId);
+        return (await this.mergeCanonicalPods(legacy, fast)).find((pod) => pod.podId === podId);
     }
     /**
-     * Find Pod by a linked WebID URL.
+     * Find Pod by an explicit owner or pod.webId URL.
      *
-     * CSS account data stores WebID links separately from Pod base URLs. This is
+     * Pod ownership stores WebIDs separately from Pod base URLs. This is
      * the precise lookup for IdP/SP split deployments where the WebID path does
      * not have to match the storage base URL.
      */
@@ -49,82 +63,39 @@ class PodLookupRepository {
         return (await this.findAllByWebId(webId))[0];
     }
     /**
-     * Find all Pods linked to a WebID.
+     * Find all Pods explicitly owned by a WebID.
      *
      * A Cloud WebID can legitimately back both a Cloud Pod and a Local SP Pod.
      * Callers that are scoped to a storage provider must inspect all candidates
      * instead of accepting the first account record returned by CSS storage.
      */
     async findAllByWebId(webId) {
-        const exact = exactWebId(webId);
-        if (!exact) {
-            return [];
-        }
-        const results = [];
-        const pods = await this.getAllPods();
-        for (const pod of pods) {
-            const matchedWebId = getPodWebIds(pod).find((candidate) => exactWebId(candidate) === exact);
-            if (matchedWebId) {
-                results.push({
-                    ...pod,
-                    webId: matchedWebId,
-                });
-            }
-        }
-        if (results.length > 0) {
-            return results;
-        }
-        const indexed = await this.findByWebIdIndex(exact);
-        if (!indexed) {
-            return [];
-        }
-        return [{
-                ...indexed,
-            }];
+        return this.findByWebIds([webId]);
     }
     /**
-     * Find Pods by linked WebID URLs in one scan.
+     * Find Pods by explicit WebID bindings with batched canonical queries.
      */
     async findByWebIds(webIds) {
         const exactTargets = new Set(webIds.map(exactWebId).filter((value) => Boolean(value)));
         if (exactTargets.size === 0) {
             return [];
         }
-        const results = [];
-        const pods = await this.getAllPods();
-        for (const pod of pods) {
-            const matchedWebId = getPodWebIds(pod).find((candidate) => {
-                const exact = exactWebId(candidate);
-                return exact ? exactTargets.has(exact) : false;
-            });
-            if (!matchedWebId) {
-                continue;
-            }
-            results.push({
-                ...pod,
-                webId: matchedWebId,
-            });
-        }
-        if (results.length < exactTargets.size) {
-            const seen = new Set(results.map((result) => exactWebId(result.webId)).filter(Boolean));
-            for (const exact of exactTargets) {
-                if (seen.has(exact)) {
-                    continue;
-                }
-                const indexed = await this.findByWebIdIndex(exact);
-                if (indexed) {
-                    results.push(indexed);
-                }
-            }
-        }
-        return results;
+        const legacy = await this.getLegacyPods();
+        const candidates = await this.findIndexedStorePodsByWebIds([...exactTargets]);
+        return this.filterPodsByWebIds(await this.mergeCanonicalPods(legacy, candidates), exactTargets);
     }
     /**
      * List Pods for a specific account.
+     *
+     * 定向查询与全扫描等价：kv 按账户键直取，identity_store 按 accountId 下推，
+     * canonical 整条优先与 getAllPods 一致，KV 扫描补齐 .json 等历史键。
      */
     async listByAccountId(accountId) {
-        const pods = await this.getAllPods();
-        return pods.filter((pod) => pod.accountId === accountId);
+        const nodeAssignments = await this.getNodeAssignments();
+        const storePods = await this.getIndexedStorePodsByAccountId(accountId, nodeAssignments);
+        const legacy = (await this.getLegacyPods(nodeAssignments)).filter((pod) => pod.accountId === accountId);
+        return (await this.mergeCanonicalPods(legacy, storePods, nodeAssignments))
+            .filter((pod) => pod.accountId === accountId);
     }
     /**
      * List all pods.
@@ -138,8 +109,18 @@ class PodLookupRepository {
     async getAllPods() {
         const result = await this.getAccountRowsFromKv();
         const nodeAssignments = await this.getNodeAssignments();
+        return this.mergeCanonicalPods(this.extractKvPods(result, nodeAssignments), await this.getPodsFromIndexedStore(nodeAssignments), nodeAssignments);
+    }
+    // Legacy KV rows need independent discovery: an indexed match says nothing
+    // about other unindexed Pods or overlapping records. Keep identity_store
+    // queries targeted while applying canonical precedence to overlapping IDs.
+    async getLegacyPods(nodeAssignments) {
+        const rows = await this.getAccountRowsFromKv();
+        return this.extractKvPods(rows, nodeAssignments ?? await this.getNodeAssignments());
+    }
+    extractKvPods(rows, nodeAssignments) {
         const pods = [];
-        for (const row of result) {
+        for (const row of rows) {
             if (!row.key || row.value === undefined) {
                 continue;
             }
@@ -149,34 +130,13 @@ class PodLookupRepository {
                     continue;
                 }
                 const data = unwrapStoredValue(typeof row.value === 'string' ? JSON.parse(row.value) : row.value);
-                const podMap = data['**pod**'] || data.pod || {};
-                const webIds = extractAccountWebIds(data);
-                for (const [podId, podData] of Object.entries(podMap)) {
-                    const pod = podData;
-                    if (pod.baseUrl && typeof pod.baseUrl === 'string') {
-                        const storageUrl = stringValue(pod.storageUrl) ?? stringValue(pod.storage);
-                        const podWebIds = resolvePodWebIds(pod, webIds);
-                        pods.push({
-                            podId,
-                            accountId,
-                            baseUrl: pod.baseUrl,
-                            storageUrl,
-                            webId: dedupeStrings(podWebIds)[0],
-                            ...webIdsProperty(podWebIds),
-                            nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : findNodeIdForPod(nodeAssignments, [storageUrl, pod.baseUrl]),
-                            edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,
-                        });
-                    }
-                }
+                pods.push(...this.extractPodsFromAccountData(accountId, data, nodeAssignments));
             }
             catch {
                 // Skip malformed entries.
             }
         }
-        return mergePodLookupResults([
-            ...pods,
-            ...await this.getPodsFromIndexedStore(nodeAssignments),
-        ]);
+        return pods;
     }
     async getAccountRowsFromKv() {
         const kvTableId = drizzle_orm_1.sql.identifier(this.kvTableName);
@@ -213,76 +173,29 @@ class PodLookupRepository {
             return [];
         }
     }
-    /**
-     * Fast path for CSS WrappedIndexedStorage. WebID indexes point to the root
-     * account id, so a single indexed key plus account data row can resolve the
-     * profile without scanning all account records.
-     */
-    async findByWebIdIndex(webId) {
-        const accountIds = await this.readStringArrayFromKv(`accounts/index/webIdLink/webId/${encodeURIComponent(webId)}`);
-        for (const accountId of accountIds) {
-            const account = await this.readAccountData(accountId);
-            if (!account) {
-                continue;
-            }
-            const pods = this.extractPodsFromAccountData(accountId, account);
-            const match = pods.find((pod) => getPodWebIds(pod).some((candidate) => exactWebId(candidate) === webId));
-            if (match) {
-                return {
-                    ...match,
-                    webId,
-                };
-            }
-            if (pods.length === 1 && !hasExplicitPodWebIds(account, pods[0].podId)) {
-                return {
-                    ...pods[0],
-                    webId,
-                    ...webIdsProperty([webId, ...getPodWebIds(pods[0])]),
-                };
-            }
-        }
-        return undefined;
-    }
-    async readAccountData(accountId) {
-        for (const key of [`accounts/data/${accountId}`, `/.internal/accounts/data/${accountId}`]) {
-            const value = await this.readKvValue(key);
-            const record = parsePayloadRecord(value);
-            if (record) {
-                return record;
-            }
-        }
-        return undefined;
-    }
-    async readStringArrayFromKv(key) {
-        const value = await this.readKvValue(key);
-        return Array.isArray(value) ? value.filter((entry) => typeof entry === 'string') : [];
-    }
-    async readKvValue(key) {
-        const tableId = drizzle_orm_1.sql.identifier(this.kvTableName);
-        try {
-            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
-        SELECT value FROM ${tableId}
-        WHERE key = ${key}
-        LIMIT 1
-      `);
-            if (result.rows.length === 0) {
-                return undefined;
-            }
-            return parseStoredValue(result.rows[0].value);
-        }
-        catch {
-            return undefined;
-        }
+    // Predicate pushdown can omit a canonical replacement with a different owner,
+    // account or URL. Check legacy IDs separately, registering existence before
+    // parsing so a malformed canonical record also suppresses the old Pod.
+    async mergeCanonicalPods(legacy, candidates, nodeAssignments) {
+        const ids = dedupeStrings(legacy.map((pod) => pod.podId));
+        const rows = ids.length > 0
+            ? await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(ids)}`)
+            : [];
+        const canonicalIds = new Set(rows.map((row) => row.id));
+        const replacements = rows.length > 0
+            ? await this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments ?? await this.getNodeAssignments())
+            : [];
+        const all = [...legacy.filter((pod) => !canonicalIds.has(pod.podId)), ...candidates, ...replacements];
+        return [...new Map(all.map((pod) => [pod.podId, pod])).values()];
     }
-    extractPodsFromAccountData(accountId, data) {
+    extractPodsFromAccountData(accountId, data, nodeAssignments = []) {
         const podMap = data['**pod**'] || data.pod || {};
-        const webIds = extractAccountWebIds(data);
         const pods = [];
         for (const [podId, podData] of Object.entries(podMap)) {
             const pod = podData;
             if (pod.baseUrl && typeof pod.baseUrl === 'string') {
                 const storageUrl = stringValue(pod.storageUrl) ?? stringValue(pod.storage);
-                const podWebIds = resolvePodWebIds(pod, webIds);
+                const podWebIds = dedupeStrings(explicitPodWebIds(pod));
                 pods.push({
                     podId,
                     accountId,
@@ -290,58 +203,166 @@ class PodLookupRepository {
                     storageUrl,
                     webId: dedupeStrings(podWebIds)[0],
                     ...webIdsProperty(podWebIds),
-                    nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,
+                    nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : findNodeIdForPod(nodeAssignments, [storageUrl, pod.baseUrl]),
                     edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,
                 });
             }
         }
         return pods;
     }
+    /**
+     * 与全扫描一致的 WebID 匹配过滤：按 Pod 解析后的 WebID 列表按原字符串比较，
+     * 命中时附加该 Pod 自身存储的 WebID。
+     */
+    filterPodsByWebIds(pods, exactTargets) {
+        const results = [];
+        for (const pod of pods) {
+            const matchedWebId = getPodWebIds(pod).find((candidate) => {
+                const exact = exactWebId(candidate);
+                return exact ? exactTargets.has(exact) : false;
+            });
+            if (matchedWebId) {
+                results.push({
+                    ...pod,
+                    webId: matchedWebId,
+                });
+            }
+        }
+        return results;
+    }
     /**
      * DrizzleIndexedStorage stores CSS identity facts as typed rows in
      * identity_store; this is the canonical clustered identity source.
      */
     async getPodsFromIndexedStore(nodeAssignments = []) {
         const storeTableId = drizzle_orm_1.sql.identifier(this.indexedStoreTableName);
-        let result;
+        let rows = [];
         try {
-            result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
         SELECT container, id, payload FROM ${storeTableId}
-        WHERE container IN ('pod', 'owner', 'webIdLink')
+        WHERE container IN ('pod', 'owner')
       `);
+            rows = result.rows;
         }
-        catch {
-            return [];
+        catch (error) {
+            if (isMissingIdentityStore(error))
+                return [];
+            throw error;
         }
         const podPayloads = new Map();
-        const ownerWebIdsByPodId = new Map();
-        const webIdsByAccountId = new Map();
-        for (const row of result?.rows ?? []) {
+        const ownerRows = [];
+        for (const row of rows) {
             if (!row.id || !row.container) {
                 continue;
             }
-            const payload = parsePayloadRecord(row.payload);
-            if (!payload) {
-                continue;
-            }
             if (row.container === 'pod') {
-                podPayloads.set(row.id, payload);
-                continue;
-            }
-            if (row.container === 'owner') {
-                const podId = stringValue(payload.podId);
-                const webId = stringValue(payload.webId);
-                if (podId && webId) {
-                    appendMapValue(ownerWebIdsByPodId, podId, webId);
+                const payload = parsePayloadRecord(row.payload);
+                if (payload) {
+                    podPayloads.set(row.id, payload);
                 }
-                continue;
             }
-            if (row.container === 'webIdLink') {
-                const accountId = stringValue(payload.accountId);
-                const webId = stringValue(payload.webId);
-                if (accountId && webId) {
-                    appendMapValue(webIdsByAccountId, accountId, webId);
-                }
+            else if (row.container === 'owner') {
+                ownerRows.push(row);
+            }
+        }
+        return this.buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments);
+    }
+    /**
+     * 按主键直查 identity_store pod 行并补齐关联。
+     */
+    async getIndexedStorePodsByIds(podIds) {
+        if (podIds.length === 0) {
+            return [];
+        }
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(podIds)}`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), await this.getNodeAssignments());
+    }
+    /**
+     * 按 payload.accountId 下推查询 identity_store pod 行并补齐关联。
+     */
+    async getIndexedStorePodsByAccountId(accountId, nodeAssignments) {
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, db_1.jsonFieldEquals)(this.db, 'accountId', accountId));
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments);
+    }
+    /**
+     * 反向前缀 LIKE 预筛候选 pod 行（baseUrl/storageUrl/storage 任一前缀），
+     * JS 侧 startsWith 复核由调用方（findByResourceIdentifier）执行。
+     */
+    async findIndexedStorePodsByResource(resourcePath, nodeAssignments) {
+        const conditions = ['baseUrl', 'storageUrl', 'storage']
+            .map((field) => (0, db_1.jsonFieldIsPrefixOf)(this.db, field, resourcePath));
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, drizzle_orm_1.sql) `(${drizzle_orm_1.sql.join(conditions, (0, drizzle_orm_1.sql) ` OR `)})`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments);
+    }
+    /**
+     * WebID → Pod 的下推解析：owner 按 webId 命中拿 podId，pod.webId
+     * 直查；Account webIdLink 不建立 Pod ownership。
+     * webIdForms 只携带完整原字符串；URL 等价不代表相同身份。
+     */
+    async findIndexedStorePodsByWebIds(webIdForms) {
+        const forms = dedupeStrings(webIdForms);
+        if (forms.length === 0) {
+            return [];
+        }
+        const [ownerMatchRows, directPodRows] = await Promise.all([
+            this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'owner'`, (0, db_1.jsonFieldIn)(this.db, 'webId', forms)),
+            this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, db_1.jsonFieldIn)(this.db, 'webId', forms)),
+        ]);
+        const podIds = dedupeStrings([
+            ...ownerMatchRows.map((row) => stringValue(parsePayloadRecord(row.payload)?.podId)),
+            ...directPodRows.map((row) => row.id),
+        ].filter((value) => Boolean(value)));
+        if (podIds.length === 0) {
+            return [];
+        }
+        const podRows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(podIds)}`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(podRows), await this.getNodeAssignments());
+    }
+    /**
+     * 为候选 pod 行补齐 owner 关联与 nodeAssignments，组装最终结果。
+     * 与全扫描共用 buildIndexedStorePods，保证返回形状一致。
+     */
+    async enrichIndexedStorePods(podPayloads, nodeAssignments) {
+        if (podPayloads.size === 0) {
+            return [];
+        }
+        const podIds = [...podPayloads.keys()];
+        const ownerRows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'owner'`, (0, db_1.jsonFieldIn)(this.db, 'podId', podIds));
+        return this.buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments);
+    }
+    async queryIndexedStoreRows(condition, jsonCondition) {
+        const storeTableId = drizzle_orm_1.sql.identifier(this.indexedStoreTableName);
+        // Keep indexed columns outside CASE; only JSON evaluation needs protection.
+        // Raw ID queries must still see malformed rows for canonical shadowing.
+        const safeJsonCondition = jsonCondition && (0, db_1.isDatabaseSqlite)(this.db)
+            ? (0, drizzle_orm_1.sql) `CASE WHEN json_valid(payload) THEN ${jsonCondition} ELSE 0 END`
+            : jsonCondition;
+        const safeCondition = safeJsonCondition ? (0, drizzle_orm_1.sql) `${condition} AND (${safeJsonCondition})` : condition;
+        try {
+            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+        SELECT id, payload FROM ${storeTableId}
+        WHERE ${safeCondition}
+      `);
+            return result.rows;
+        }
+        catch (error) {
+            if (isMissingIdentityStore(error))
+                return [];
+            throw error;
+        }
+    }
+    /**
+     * 组装 identity_store Pod 视图：pod 行为主体，owner 行补充 WebID，
+     * nodeAssignments 兜底 nodeId。全扫描与下推快路径共用，保证返回形状一致。
+     */
+    buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments) {
+        const ownerWebIdsByPodId = new Map();
+        for (const row of ownerRows) {
+            const payload = parsePayloadRecord(row.payload);
+            const podId = payload ? stringValue(payload.podId) : undefined;
+            const webId = payload ? stringValue(payload.webId) : undefined;
+            if (podId && webId) {
+                appendMapValue(ownerWebIdsByPodId, podId, webId);
             }
         }
         const pods = [];
@@ -355,9 +376,7 @@ class PodLookupRepository {
                 stringValue(pod.webId),
                 ...(ownerWebIdsByPodId.get(podId) ?? []),
             ].filter((value) => typeof value === 'string');
-            const podWebIds = dedupeStrings(explicitPodWebIds.length > 0
-                ? explicitPodWebIds
-                : webIdsByAccountId.get(accountId) ?? []);
+            const podWebIds = dedupeStrings(explicitPodWebIds);
             const storageUrl = stringValue(pod.storageUrl) ?? stringValue(pod.storage);
             pods.push({
                 podId,
@@ -383,25 +402,6 @@ function extractAccountIdFromAccountDataKey(key) {
     const accountId = key.slice(index + marker.length).replace(/\.json$/u, '');
     return accountId || undefined;
 }
-function extractAccountWebIds(data) {
-    if (!data || typeof data !== 'object') {
-        return [];
-    }
-    const record = data;
-    const linkMap = record['**webIdLink**'] || record.webIdLink || {};
-    if (!linkMap || typeof linkMap !== 'object') {
-        return [];
-    }
-    return Object.values(linkMap)
-        .map((value) => {
-        if (!value || typeof value !== 'object') {
-            return undefined;
-        }
-        const webId = value.webId;
-        return typeof webId === 'string' ? webId : undefined;
-    })
-        .filter((value) => typeof value === 'string');
-}
 function extractPodOwnerWebIds(pod) {
     const ownerMap = pod['**owner**'] || pod.owner || {};
     if (!ownerMap || typeof ownerMap !== 'object') {
@@ -423,17 +423,6 @@ function explicitPodWebIds(pod) {
         ...extractPodOwnerWebIds(pod),
     ].filter((value) => typeof value === 'string');
 }
-function hasExplicitPodWebIds(account, podId) {
-    const podMap = account['**pod**'] ?? account.pod;
-    if (!podMap || typeof podMap !== 'object')
-        return false;
-    const pod = podMap[podId];
-    return Boolean(pod && typeof pod === 'object' && explicitPodWebIds(pod).length > 0);
-}
-function resolvePodWebIds(pod, accountWebIds) {
-    const explicit = explicitPodWebIds(pod);
-    return dedupeStrings(explicit.length > 0 ? explicit : accountWebIds);
-}
 function exactWebId(webId) {
     // WebID identity is the complete original string, not URL equivalence.
     return webId && webId === webId.trim() && !/[\r\n\t]/u.test(webId) ? webId : undefined;
@@ -466,30 +455,21 @@ function webIdsProperty(values) {
     const webIds = dedupeStrings(values);
     return webIds.length > 1 ? { webIds } : {};
 }
-function mergePodLookupResults(values) {
-    const byPodId = new Map();
-    for (const value of values) {
-        const existing = byPodId.get(value.podId);
-        if (!existing) {
-            byPodId.set(value.podId, value);
+function idIn(ids) {
+    return (0, drizzle_orm_1.sql) `id IN (${drizzle_orm_1.sql.join(ids.map((id) => (0, drizzle_orm_1.sql) `${id}`), (0, drizzle_orm_1.sql) `, `)})`;
+}
+function rowsToPodPayloadMap(rows) {
+    const map = new Map();
+    for (const row of rows) {
+        if (!row.id) {
             continue;
         }
-        const webIds = dedupeStrings([
-            ...getPodWebIds(existing),
-            ...getPodWebIds(value),
-        ]);
-        byPodId.set(value.podId, {
-            ...existing,
-            baseUrl: existing.baseUrl || value.baseUrl,
-            storageUrl: existing.storageUrl ?? value.storageUrl,
-            accountId: existing.accountId || value.accountId,
-            webId: webIds[0],
-            ...webIdsProperty(webIds),
-            nodeId: existing.nodeId ?? value.nodeId,
-            edgeNodeId: existing.edgeNodeId ?? value.edgeNodeId,
-        });
-    }
-    return [...byPodId.values()];
+        const payload = parsePayloadRecord(row.payload);
+        if (payload) {
+            map.set(row.id, payload);
+        }
+    }
+    return map;
 }
 function parsePayloadRecord(value) {
     if (!value) {
@@ -508,17 +488,6 @@ function parsePayloadRecord(value) {
     const unwrapped = unwrapStoredValue(value);
     return typeof unwrapped === 'object' ? unwrapped : undefined;
 }
-function parseStoredValue(value) {
-    if (typeof value === 'string') {
-        try {
-            return unwrapStoredValue(JSON.parse(value));
-        }
-        catch {
-            return undefined;
-        }
-    }
-    return unwrapStoredValue(value);
-}
 function unwrapStoredValue(value) {
     if (value && typeof value === 'object' && 'key' in value && 'payload' in value) {
         return value.payload;
@@ -575,4 +544,17 @@ function findNodeIdForPod(assignments, urls) {
     }
     return bestMatch?.nodeId;
 }
+function isMissingIdentityStore(error) {
+    const visited = new Set();
+    while (error && typeof error === 'object' && !visited.has(error)) {
+        visited.add(error);
+        const failure = error;
+        if (failure.message === 'no such table: identity_store'
+            || (failure.code === '42P01' && failure.message === 'relation "identity_store" does not exist')) {
+            return true;
+        }
+        error = failure.cause;
+    }
+    return false;
+}
 //# sourceMappingURL=PodLookupRepository.js.map

package/dist/identity/drizzle/db.d.ts

@@ -69,3 +69,22 @@ export declare function toDbTimestamp(db: IdentityDatabase, date: Date): number
  * Handles both Unix timestamps (SQLite) and Date objects (PostgreSQL).
  */
 export declare function fromDbTimestamp(value: unknown): Date | undefined;
+/**
+ * `payload` JSON 字段提取表达式，按方言生成（SQLite json_extract / PG ->>）。
+ * alias 用于 join 场景下限定来源表。
+ */
+export declare function jsonFieldExtract(db: IdentityDatabase, field: string, alias?: string): SQL;
+/**
+ * `payload` 字段等于标量值的方言条件。
+ */
+export declare function jsonFieldEquals(db: IdentityDatabase, field: string, value: string, alias?: string): SQL;
+/**
+ * `payload` 字段落在值集合内的方言条件。values 为空时调用方应跳过查询。
+ */
+export declare function jsonFieldIn(db: IdentityDatabase, field: string, values: string[], alias?: string): SQL;
+/**
+ * 反向前缀匹配：`value LIKE payload->field || '%'`。
+ * 用于"资源 URL 以存储的 baseUrl 为前缀"的下推预筛；存储值中的 LIKE 元字符只会多匹配，
+ * 调用方需在 JS 侧用 startsWith 复核，不会漏匹配。
+ */
+export declare function jsonFieldIsPrefixOf(db: IdentityDatabase, field: string, value: string, alias?: string): SQL;