harperdb 4.5.23 → 4.5.24

package/bin/lite.js

@@ -17,10 +17,10 @@ Caused by:`));else if(typeof u=="object")try{n+=JSON.stringify(u)}catch{n+="Obje
 `),key:"-----BEGIN RSA PRIVATE KEY-----\rMIIEowIBAAKCAQEArBFJQRfFiJku/KwhV1Ssp7cX61vvuKmd4Rp6A9jB2QLgx8nj\r/+Xhp2hPRkISnOA8BuAxr4dMD9syGJwX4kNy9mbZ5Q0fWZCiEGBpVcU1J+k+N5K4\rSuZ2SqgxeN2IN2RLzt3GyQY4imcdHgNv7aHoXUrEwBx0MeYEw3IIDXtrYKCR2D8I\rvWBfwMUgWa24G8lpWILWA5hd9srRz9NxlAiHSjhbgT7B0xruEpHRCHSyKjvaIJVt\rWBR+amejYsAKVrD/hgrqjsA1123Y6++YqvU6vwg64xhS2kz5r3dkNKhvwbWgpZdI\rIaRvsiB77f4kLGo0vi8RFgJ1ZRjGg3RRK2w1LQIDAQABAoIBAQCEOmh78EOpnGZC\rYBjjHrvrysVD5gvLcfVUtl8Ls7gMB60re1eOIF+PoZZCHKZnDd6zPfiQtj1adg0C\rYnnsM/8VoaZS4gm0b3RLd3ubIQifWhuo40RissY2yxfxlPSH9LhZCY8ojnJG0cTL\resK579E8WCfopjUY33XLqEbN7Ylv39J+DSqInjqV3efJZUa+HqUJ98VxxzodcKMD\rP3bwUU4gHoSSp4pAsOFH5sQhaIWH1IcNjrAwpee2cJQuh4G157RRIuuUpagtaEG/\rXJIiAyBguJyu3JQFnIBQF01N5+omJgXYJ1L0m54543/iIRThmF3zDCDgCyUzmOk+\rH6As9fv1AoGBANOpOtOZLSAScjGsgJamT3ceJ2wCa86g2j8Oxu8lJUmUp5s3tA0v\rBFW5O3S4KR1EXwkLMBUMrfFM8YvzHWxsXBI6XV8azGLvyqPHxr65OhmpGYkGZMXu\rn9okgjkqlewnY2I073gvyK7ppX51UL5y9fF1vlsk+UlW+Rgx/vMHbdcjAoGBANAc\rxRUsxs4QJpbS4zD3JOkHjr24a97TrS3kCybAHUMpR2NrEHPZw9zex0/aphOJUHfL\rIMkOZdpfDqMfxWy4FAEmqBEMkO2SB+h0Wp4P+qp81ax4vGFiB0cD3wtixr11U1tt\rlZ/ZTdv4VDpDFNK1KaplhTDeyuCjeYfS3/GJia9vAoGAcOsAgjBevZR5rXx84WH6\rVO8WUu37u7FenXNxt9VWTinrPMh72uixZFY8nOk+rely1e1NCn3IMko9Ns9NbDFm\r8SaH95vhXArXTYbfxZIlp9jp0YtCqcHDL+p4Oq04bFMbFyJseu7rHj1x18QYfnHw\rOY/6LL/N6k1m+Hx7qgXVmIcCgYB/w0nTCBw84XlvWqSTqQaF8VfWbWP79mP5KmkW\rLxdH5g2noVEGbohqDnK6OXd/wusdwByukiJBf94Skyy25AOT+VFwthA7aU1ljhkb\rtJ+lDuJ28eBkwLPLCzthWBC+u0qjdJFJAzVjd/7tjcU43nNn4s90AzL12iaAFhvZ\rwyA+DQKBgGc/4cdyGJ3YkcA8150gQBawgJZ7q8V1JND87ggWA8wnK3cHn7rMZQl2\r3emDp9HEFXFex5dbGDDqZFAoesZCDxjknIn9oNfW4PvaWS8q7b6ZKLZG1p03Pu7/\rtYaD0kPbo0kysfFT/co+NgHbdykvIyboomfGdNLTUjYuy6lpwpvs\r-----END RSA PRIVATE KEY-----\r".replace(/\r/g,`\r
 `)},q9="certificate.pem",$9="privateKey.pem",V9="caCertificate.pem",K9="natsCertificate.pem",Y9="natsCaCertificate.pem",Rt={DEFAULT:"default","DEFAULT-CA":"default-ca",SERVER:"server",CA:"ca","OPERATIONS-API":"operations-api","OPERATIONS-CA":"operations-ca"},W9={tls_certificate:Rt.SERVER,tls_certificateAuthority:Rt.CA,customFunctions_tls_certificate:Rt.SERVER,customFunctions_tls_certificateAuthority:Rt.CA,operationsApi_tls_certificate:Rt["OPERATIONS-API"],operationsApi_tls_certificateAuthority:Rt["OPERATIONS-CA"]},z9={[Rt.SERVER]:2,[Rt.DEFAULT]:1},j9={[Rt["OPERATIONS-API"]]:3,[Rt.SERVER]:2,[Rt.DEFAULT]:1},Q9={[Rt["OPERATIONS-API"]]:3,[Rt.SERVER]:2,[Rt.DEFAULT]:1},J9={[Rt["OPERATIONS-CA"]]:3,[Rt.CA]:2,[Rt["DEFAULT-CA"]]:1},X9={[Rt["OPERATIONS-CA"]]:3,[Rt.CA]:2,[Rt["DEFAULT-CA"]]:1},Z9={[Rt.CA]:2,[Rt["DEFAULT-CA"]]:1};Object.assign(sx,{CERTIFICATE_PEM_NAME:q9,PRIVATEKEY_PEM_NAME:$9,CA_PEM_NAME:V9,CERT_NAME:Rt,CERT_CONFIG_NAME_MAP:W9,CERT_PREFERENCE_APP:z9,CERT_PREFERENCE_OPS:j9,CERT_PREFERENCE_REP:Q9,CA_CERT_PREFERENCE_REP:J9,CA_CERT_PREFERENCE_OPS:X9,CA_CERT_PREFERENCE_APP:Z9,CERTIFICATE_VALUES:G9,NATS_CERTIFICATE_PEM_NAME:K9,NATS_CA_PEM_NAME:Y9})});var ib=P((_Ne,ux)=>{"use strict";var cx=require("fs-extra"),Ee=require("joi"),e7=require("os"),{boolean:Ge,string:ht,number:tr,array:_a}=Ee.types(),{totalmem:ix}=require("os"),$c=require("path"),t7=X(),sb=oe(),fNe=nb(),ox=(G(),D($)),r7=it(),ax="log",n7="components",s7="Invalid logging.rotation.maxSize unit. Available units are G, M or K",i7="Invalid logging.rotation.interval unit. Available units are D, H or M (minutes)",o7="Invalid logging.rotation.maxSize value. Value should be a number followed by unit e.g. '10M'",a7="Invalid logging.rotation.interval value. Value should be a number followed by unit e.g. '10D'",c7="rootPath config parameter is undefined",Tn=Ee.alternatives([tr.min(0),ht]).optional().empty(null),hE=Ee.alternatives([_a.items(ht,{host:ht.required(),port:Tn},{hostname:ht.required(),port:Tn}).empty(null),_a.items(ht)]),Oi,lx=!1;ux.exports={configValidator:l7,routesValidator:p7,route_constraints:hE};function l7(e,t=!1){if(lx=t,Oi=e.rootPath,sb.isEmpty(Oi))throw c7;let r=Ge.optional(),n=tr.min(0).max(1e3).empty(null).default(h7),s=ht.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path").empty(null).default(u_),i=ht.optional().empty(null),o=ht.pattern(/^[^\s.,*>]+$/).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >"}).empty(null).required(),c=Ee.string().empty(null).default(u_),l=Ee.custom(d7).empty(null).default(u_),u=e.clustering?.enabled,f=Ee.object({certificate:i,certificateAuthority:i,privateKey:i}),d;return u===!0?d=Ee.object({enabled:r,hubServer:Ee.object({cluster:Ee.object({name:Ee.required().empty(null),network:Ee.object({port:Tn,routes:hE}).required()}).required(),leafNodes:Ee.object({network:Ee.object({port:Tn}).required()}).required(),network:Ee.object({port:Tn}).required()}).required(),leafServer:Ee.object({network:Ee.object({port:Tn,routes:hE}).required(),streams:Ee.object({maxAge:tr.min(120).allow(null).optional(),maxBytes:tr.min(1).allow(null).optional(),maxMsgs:tr.min(1).allow(null).optional(),path:c}).required()}).required(),logLevel:Ee.valid("error","warn","info","debug","trace"),nodeName:o,republishMessages:Ge.optional(),databaseLevel:Ge.optional(),tls:Ee.object({certificate:i,certificateAuthority:i,privateKey:i,insecure:Ge.required(),verify:Ge.optional()}),user:ht.optional().empty(null)}).optional():d=Ee.object({enabled:r,tls:Ee.object({certificate:i,certificateAuthority:i,privateKey:i,insecure:Ge.optional()})}).optional(),Ee.object({authentication:Ee.alternatives(Ee.object({authorizeLocal:Ge,cacheTTL:tr.required(),cookie:Ee.object({domains:_a.items(ht).optional(),expires:ht.optional()}),enableSessions:Ge,hashFunction:ht.valid("md5","sha256","argon2id").optional().empty(null)}),Ge).optional(),analytics:Ee.object({aggregatePeriod:tr}),replication:Ee.object({hostname:Ee.alternatives(ht,tr).optional().empty(null),url:ht.optional().empty(null),port:Tn,securePort:Tn,routes:_a.optional().empty(null),databases:Ee.alternatives(ht,_a),enableRootCAs:Ge.optional(),copyTablesToCatchUp:Ge.optional()}).optional(),componentsRoot:s.optional(),clustering:d,localStudio:Ee.object({enabled:r}).required(),logging:Ee.object({auditAuthEvents:Ee.object({logFailed:Ge,logSuccessful:Ge}),file:Ge.required(),level:Ee.valid("notify","fatal","error","warn","info","debug","trace"),rotation:Ee.object({enabled:Ge.optional(),compress:Ge.optional(),interval:ht.custom(_7).optional().empty(null),maxSize:ht.custom(f7).optional().empty(null),path:ht.optional().empty(null).default(u_)}).required(),root:s,stdStreams:Ge.required(),auditLog:Ge.required()}).required(),operationsApi:Ee.object({network:Ee.object({cors:Ge.optional(),corsAccessList:_a.optional(),headersTimeout:tr.min(1).optional(),keepAliveTimeout:tr.min(1).optional(),port:Tn,domainSocket:Ee.optional().empty("hdb/operations-server").default(u_),securePort:Tn,timeout:tr.min(1).optional()}).optional(),tls:Ee.alternatives([Ee.array().items(f),f])}).required(),rootPath:ht.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path").required(),mqtt:Ee.object({network:Ee.object({port:Tn,securePort:Tn,mtls:Ee.alternatives([Ge.optional(),Ee.object({user:ht.optional(),certificateAuthority:i,required:Ge.optional()})])}).required(),webSocket:Ge.optional(),requireAuthentication:Ge.optional()}),http:Ee.object({compressionThreshold:tr.optional(),cors:Ge.optional(),corsAccessList:_a.optional(),headersTimeout:tr.min(1).optional(),port:Tn,securePort:Tn,maxHeaderSize:tr.optional(),mtls:Ee.alternatives([Ge.optional(),Ee.object({user:ht.optional(),certificateAuthority:i,required:Ge.optional()})]),threadRange:Ee.alternatives([_a.optional(),ht.optional()])}).required(),threads:Ee.alternatives(n.optional(),Ee.object({count:n.optional(),debug:Ee.alternatives(Ge.optional(),Ee.object({startingPort:tr.min(1).optional(),host:ht.optional(),waitForDebugger:Ge.optional()})),maxHeapMemory:tr.min(0).optional()})),storage:Ee.object({writeAsync:Ge.required(),overlappingSync:Ge.optional(),caching:Ge.optional(),compression:Ee.alternatives([Ge.optional(),Ee.object({dictionary:ht.optional(),threshold:tr.optional()})]),compactOnStart:Ge.optional(),compactOnStartKeepBackup:Ge.optional(),noReadAhead:Ge.optional(),path:l,prefetchWrites:Ge.optional(),maxFreeSpaceToLoad:tr.optional(),maxFreeSpaceToRetain:tr.optional()}).required(),ignoreScripts:Ge.optional(),tls:Ee.alternatives([Ee.array().items(f),f])}).validate(e,{allowUnknown:!0,abortEarly:!1,errors:{wrap:{label:"'"}}})}a(l7,"configValidator");function u7(e){return lx||cx.existsSync(e)?null:`Specified path ${e} does not exist.`}a(u7,"doesPathExist");function d7(e,t){Ee.assert(e,ht.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path"));let r=u7(e);if(r)return t.message(r)}a(d7,"validatePath");function f7(e,t){let r=e.slice(-1);if(r!=="G"&&r!=="M"&&r!=="K")return t.message(s7);let n=e.slice(0,-1);return isNaN(parseInt(n))?t.message(o7):e}a(f7,"validateRotationMaxSize");function _7(e,t){let r=e.slice(-1);if(r!=="D"&&r!=="H"&&r!=="M")return t.message(i7);let n=e.slice(0,-1);return isNaN(parseInt(n))?t.message(a7):e}a(_7,"validateRotationInterval");function h7(e,t){let r=t.state.path.join("."),n=e7.cpus().length,s=n-1;s<=2&&(s=2);let i=process.constrainedMemory?.()||ix();return i=Math.round(Math.min(i,ix())/1e6),s=Math.max(Math.min(s,Math.round((i-750)/300)),1),t7.info(`Detected ${n} cores and ${i}MB on this machine, defaulting ${r} to ${s}`),s}a(h7,"setDefaultThreads");function u_(e,t){let r=t.state.path.join(".");if(!sb.isEmpty(t.original)&&r!=="operationsApi.network.domainSocket")return t.original;if(sb.isEmpty(Oi))throw new Error(`Error setting default root for: ${r}. HDB root is not defined`);switch(r){case"componentsRoot":return $c.join(Oi,n7);case"logging.root":return $c.join(Oi,ax);case"clustering.leafServer.streams.path":return $c.join(Oi,"clustering","leaf");case"storage.path":let n=$c.join(Oi,ox.LEGACY_DATABASES_DIR_NAME);return cx.existsSync(n)?n:$c.join(Oi,ox.DATABASES_DIR_NAME);case"logging.rotation.path":return $c.join(Oi,ax);case"operationsApi.network.domainSocket":return r==null?null:$c.join(Oi,"operations-server");default:throw new Error(`Error setting default root for config parameter: ${r}. Unrecognized config parameter`)}}a(u_,"setDefaultRoot");function p7(e){let t=Ee.object({routes:hE});return r7.validateBySchema({routes:e},t)}a(p7,"routesValidator")});var Dt=P(Ax=>{"use strict";var ms=(G(),D($)),mr=oe(),rr=X(),{configValidator:m7,routesValidator:dx}=ib(),Yr=require("fs-extra"),_x=require("yaml"),$n=require("path"),E7=require("is-number"),hx=require("properties-reader"),g7=require("lodash"),{handleHDBError:S7}=he(),{HTTP_STATUS_CODES:T7,HDB_ERROR_MSGS:hu}=Ln(),{server:A7}=(Pr(),D(Gl)),{PACKAGE_ROOT:px}=Et(),{DATABASES_PARAM_CONFIG:d_,CONFIG_PARAMS:qn,CONFIG_PARAM_MAP:Ys}=ms,R7="Unable to get config value because config is uninitialized",y7="Config successfully initialized",b7="Error backing up config file",O7="Empty parameter sent to getConfigValue",mx=$n.join(px,"config","yaml",ms.HDB_DEFAULT_CONFIG_FILE),N7=$n.join(px,"config","yaml","defaultNatsConfig.yaml"),w7="Configuration successfully set. You must restart HarperDB for new config settings to take effect.",fx={logging_rotation_retain:"logging.rotation.retain",logging_rotation_rotate:"logging.rotation.rotate",logging_rotation_rotateinterval:"logging.rotation.rotateInterval",logging_rotation_rotatemodule:"logging.rotation.rotateModule",logging_rotation_timezone:"logging.rotation.timezone",logging_rotation_workerinterval:"logging.rotation.workerInterval"},pE,Pt,mE;Object.assign(Ax,{createConfigFile:I7,getDefaultConfig:C7,getConfigValue:gx,initConfig:EE,flattenConfig:pu,updateConfigValue:Sx,updateConfigObject:D7,getConfiguration:v7,setConfiguration:U7,readConfigFile:lb,getClusteringRoutes:x7,initOldConfig:Tx,getConfigFromFile:B7,getConfigFilePath:Vc,addConfig:H7,deleteConfigFromFile:k7,getConfigObj:F7,resolvePath:ob,getFlatConfigObj:G7});function ob(e){if(e?.startsWith("~/"))return $n.join(mr.getHomeDir(),e.slice(1));let t=ce();try{return $n.resolve(t.getHdbBasePath(),e)}catch(r){return console.error("Unable to resolve path",e,r),e}}a(ob,"resolvePath");function I7(e,t=!1){let r=ha(mx);if(e.clustering_enabled||e.CLUSTERING_ENABLED||e.clustering){let c=_x.parseDocument(Yr.readFileSync(N7,"utf8"),{simpleKeys:!0});r.addIn(["clustering"],c.toJSON().clustering)}pE=pu(r.toJSON());let n;for(let c in e){let l=Ys[c.toLowerCase()];if(l===qn.DATABASES){Array.isArray(e[c])?n=e[c]:n=Object.keys(e[c]).map(u=>({[u]:e[c][u]}));continue}if(!l&&(c.endsWith("_package")||c.endsWith("_port"))&&(l=c),l!==void 0){let u=l.split("_"),f=ab(l,e[c]);l==="rootPath"&&f?.endsWith("/")&&(f=f.slice(0,-1));try{r.setIn([...u],f)}catch(d){rr.error(d)}}}n&&Ex(r,n),cb(r,t);let s=r.toJSON();Pt=pu(s);let i=r.getIn(["rootPath"]),o=$n.join(i,ms.HDB_CONFIG_FILE);if(Yr.createFileSync(o),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);Yr.writeFileSync(o,String(r)),rr.trace(`Config file written to ${o}`)}a(I7,"createConfigFile");function Ex(e,t){let r;try{try{r=JSON.parse(t)}catch(n){if(!mr.isObject(t))throw n;r=t}for(let n of r){let s=Object.keys(n)[0];if(n[s].hasOwnProperty(d_.TABLES))for(let i in n[s][d_.TABLES])for(let o in n[s][d_.TABLES][i]){let c=n[s][d_.TABLES][i][o],l=[qn.DATABASES,s,d_.TABLES,i,o];e.hasIn(l)?e.setIn(l,c):e.addIn(l,c)}else for(let i in n[s]){let o=n[s][i],c=[qn.DATABASES,s,i];e.hasIn(c)?e.setIn(c,o):e.addIn(c,o)}}}catch(n){rr.error("Error parsing schemas CLI/env config arguments",n)}}a(Ex,"setSchemasConfig");function C7(e){if(pE===void 0){let r=ha(mx);pE=pu(r.toJSON())}let t=Ys[e.toLowerCase()];if(t!==void 0)return pE[t.toLowerCase()]}a(C7,"getDefaultConfig");function gx(e){if(e==null){rr.info(O7);return}if(Pt===void 0){rr.trace(R7);return}let t=Ys[e.toLowerCase()];if(t!==void 0)return Pt[t.toLowerCase()]}a(gx,"getConfigValue");function Vc(e=mr.getPropsFilePath()){let t=mr.getEnvCliRootPath();if(t)return ob($n.join(t,ms.HDB_CONFIG_FILE));let r=hx(e);return ob(r.get(ms.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY))}a(Vc,"getConfigFilePath");function EE(e=!1){if(Pt===void 0||e){let t;if(!mr.noBootFile()){t=mr.getPropsFilePath();try{Yr.accessSync(t,Yr.constants.F_OK|Yr.constants.R_OK)}catch(i){throw rr.error(i),new Error(`HarperDB properties file at path ${t} does not exist`)}}let r=Vc(t),n;if(r.includes("config/settings.js"))try{Tx(r);return}catch(i){if(i.code!==ms.NODE_ERROR_CODES.ENOENT)throw i}try{n=ha(r)}catch(i){if(i.code===ms.NODE_ERROR_CODES.ENOENT){rr.trace(`HarperDB config file not found at ${r}. 
 				This can occur during early stages of install where the config file has not yet been created`);return}else throw rr.error(i),new Error(`Error reading HarperDB config file at ${r}`)}P7(n,r),cb(n);let s=n.toJSON();if(A7.config=s,Pt=pu(s),Pt.logging_rotation_rotate)for(let i in fx)Pt[i]&&rr.error(`Config ${fx[i]} has been deprecated. Please check https://docs.harperdb.io/docs/ for further details.`);rr.trace(y7)}}a(EE,"initConfig");function P7(e,t){let r=e.getIn(["rootPath"]),n=!1;if(e.hasIn(["storage","path"])||(e.setIn(["storage","path"],$n.join(r,"database")),n=!0),e.hasIn(["logging","rotation","path"])||(e.setIn(["logging","rotation","path"],$n.join(r,"log")),n=!0),e.hasIn(["authentication"])||(e.addIn(["authentication"],{cacheTTL:3e4,enableSessions:!0,operationTokenTimeout:e.getIn(["operationsApi","authentication","operationTokenTimeout"])??"1d",refreshTokenTimeout:e.getIn(["operationsApi","authentication","refreshTokenTimeout"])??"30d"}),n=!0),e.hasIn(["analytics"])||(e.addIn(["analytics"],{aggregatePeriod:60}),n=!0),n){if(rr.trace("Updating config file with missing config params"),e.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${e.errors}`);Yr.writeFileSync(t,String(e))}}a(P7,"checkForUpdatedConfig");function cb(e,t=!1){let r=e.toJSON();if(r.componentsRoot=r.componentsRoot??r?.customFunctions?.root,r?.http?.threads&&(r.threads=r?.http?.threads),r.http?.port&&r.http?.port===r.http?.securePort)throw hu.CONFIG_VALIDATION("http.port and http.securePort cannot be the same value");if(r.operationsApi?.network?.port&&r.operationsApi?.network?.port===r.operationsApi?.network?.securePort)throw hu.CONFIG_VALIDATION("operationsApi.network.port and operationsApi.network.securePort cannot be the same value");let n=m7(r,t);if(n.error)throw hu.CONFIG_VALIDATION(n.error.message);typeof n.value.threads=="object"?e.setIn(["threads","count"],n.value.threads.count):e.setIn(["threads"],n.value.threads),e.setIn(["componentsRoot"],n.value.componentsRoot),e.setIn(["logging","root"],n.value.logging.root),e.setIn(["storage","path"],n.value.storage.path),e.setIn(["logging","rotation","path"],n.value.logging.rotation.path),e.setIn(["operationsApi","network","domainSocket"],n.value?.operationsApi?.network?.domainSocket),r?.clustering?.enabled&&e.setIn(["clustering","leafServer","streams","path"],n.value.clustering.leafServer.streams?.path)}a(cb,"validateConfig");function D7(e,t){Pt===void 0&&(Pt={});let r=Ys[e.toLowerCase()];if(r===void 0){rr.trace(`Unable to update config object because config param '${e}' does not exist`);return}Pt[r.toLowerCase()]=t}a(D7,"updateConfigObject");function Sx(e,t,r=void 0,n=!1,s=!1,i=!1){Pt===void 0&&EE();let o=gx(Ys.hdb_root),c=$n.join(o,ms.HDB_CONFIG_FILE),l=ha(c),u;if(r&&Pt){let h=!1;for(let _ in r)if(r[_]!=Pt[_.toLowerCase()]){h=!0;break}if(!h){rr.trace("No changes detected in config parameters, skipping update");return}}if(r===void 0&&e.toLowerCase()===qn.DATABASES)u=t;else if(r===void 0){let h;if(i)h=e;else if(h=Ys[e.toLowerCase()],h===void 0)throw new Error(`Unable to update config, unrecognized config parameter: ${e}`);let _=h.split("_"),p=ab(h,t);l.setIn([..._],p)}else for(let h in r){let _=Ys[h.toLowerCase()];if(_===qn.HTTP_SECUREPORT&&r[h]===Pt[qn.HTTP_PORT]?.toString()&&l.setIn(["http","port"],null),_===qn.OPERATIONSAPI_NETWORK_SECUREPORT&&r[h]===Pt[qn.OPERATIONSAPI_NETWORK_PORT.toLowerCase()]?.toString()&&l.setIn(["operationsApi","network","port"],null),_===qn.DATABASES){u=r[h];continue}if(_?.startsWith("threads_")){let p=l.getIn(["threads"]);p>=0&&(l.deleteIn(["threads"]),l.setIn(["threads","count"],p))}if(!_&&(h.endsWith("_package")||h.endsWith("_port"))&&(_=h),_!==void 0){let p=_.split("_"),S=ms.LEGACY_CONFIG_PARAMS[h.toUpperCase()];S&&S.startsWith("customFunctions")&&l.hasIn(S.split("_"))&&(_=S,p=S.split("_"));let g=ab(_,r[h]);_==="rootPath"&&g?.endsWith("/")&&(g=g.slice(0,-1));try{p.length>1&&typeof l.getIn(p.slice(0,-1))=="boolean"&&l.deleteIn(p.slice(0,-1)),l.setIn([...p],g)}catch(R){rr.error(R)}}}u&&Ex(l,u),cb(l);let f=l.getIn(["rootPath"]),d=$n.join(f,ms.HDB_CONFIG_FILE);if(n===!0&&L7(c,f),l.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${l.errors}`);Yr.writeFileSync(d,String(l)),s&&(Pt=pu(l.toJSON())),rr.trace(`Config parameter: ${e} updated with value: ${t}`)}a(Sx,"updateConfigValue");function L7(e,t){try{let r=$n.join(t,"backup",`${new Date(Date.now()).toISOString().replaceAll(":","-")}-${ms.HDB_CONFIG_FILE}.bak`);Yr.copySync(e,r),rr.trace(`Config file: ${e} backed up to: ${r}`)}catch(r){rr.error(b7),rr.error(r)}}a(L7,"backupConfigFile");var M7=["databases"];function pu(e){return e.http&&Object.assign(e.http,e?.customFunctions?.network),e?.operationsApi?.network&&(e.operationsApi.network={...e.http,...e.operationsApi.network}),e?.operationsApi&&(e.operationsApi.tls={...e.tls,...e.operationsApi.tls}),mE=e,r(e);function r(n){let s={};for(let i in n)if(n.hasOwnProperty(i)){if(typeof n[i]=="object"&&n[i]!==null&&!Array.isArray(n[i])&&!M7.includes(i)){let o=r(n[i]);for(let c in o){if(!o.hasOwnProperty(c))continue;c!=="package"&&(i=i.toLowerCase());let l=i+"_"+c;!qn[l.toUpperCase()]&&Ys[l]&&(s[Ys[l].toLowerCase()]=o[c]),s[l]=o[c]}}n[i]!==void 0&&(s[i.toLowerCase()]=n[i])}return s}a(r,"squashObj")}a(pu,"flattenConfig");function ab(e,t){if(e===qn.CLUSTERING_NODENAME||e===qn.CLUSTERING_USER){if(t==null)return t;if(!isNaN(t))return t.toString();if(typeof t=="string"&&t.toLowerCase()==="true"||typeof t=="string"&&t.toLowerCase()==="false")return t}else{if(E7(t))return parseFloat(t);if(t===!0||t===!1||Array.isArray(t)||mr.isObject(t)||t===null)return t;if(typeof t=="string"&&t.toLowerCase()==="true")return!0;if(typeof t=="string"&&t.toLowerCase()==="false")return!1}if(t===void 0||t.toLowerCase()==="undefined")return null;if(typeof t=="string"&&(t.startsWith("{")&&t.endsWith("}")||t.startsWith("[")&&t.endsWith("]")))try{return JSON.parse(t)}catch{}return mr.autoCast(t)}a(ab,"castConfigValue");function v7(){let e=mr.getPropsFilePath(),t=Vc(e);return ha(t).toJSON()}a(v7,"getConfiguration");async function U7(e){let{operation:t,hdb_user:r,hdb_auth_header:n,...s}=e;try{return Sx(void 0,void 0,s,!0),w7}catch(i){throw typeof i=="string"||i instanceof String?S7(i,i,T7.BAD_REQUEST,void 0,void 0,!0):i}}a(U7,"setConfiguration");function lb(){let e=mr.getPropsFilePath();try{Yr.accessSync(e,Yr.constants.F_OK|Yr.constants.R_OK)}catch(n){if(!mr.noBootFile())throw rr.error(n),new Error(`HarperDB properties file at path ${e} does not exist`)}let t=Vc(e);return ha(t).toJSON()}a(lb,"readConfigFile");function ha(e){return _x.parseDocument(Yr.readFileSync(e,"utf8"),{simpleKeys:!0})}a(ha,"parseYamlDoc");function x7(){let e=lb(),t=e?.clustering?.hubServer?.cluster?.network?.routes;t=mr.isEmptyOrZeroLength(t)?[]:t;let r=dx(t);if(r)throw hu.CONFIG_VALIDATION(r.message);let n=e?.clustering?.leafServer?.network?.routes;n=mr.isEmptyOrZeroLength(n)?[]:n;let s=dx(n);if(s)throw hu.CONFIG_VALIDATION(s.message);if(!mr.isEmptyOrZeroLength(n)&&!mr.isEmptyOrZeroLength(t)){let i=t.filter(o=>n.some(c=>c.host===o.host&&c.port===o.port));if(!mr.isEmptyOrZeroLength(i)){let o=`Duplicate hub and leaf routes found ${JSON.stringify(i)}`;throw hu.CONFIG_VALIDATION(o)}}return{hub_routes:t,leaf_routes:n}}a(x7,"getClusteringRoutes");function Tx(e){let t=hx(e);Pt={};for(let r in Ys){let n=t.get(r.toUpperCase());if(mr.isEmpty(n)||typeof n=="string"&&n.trim().length===0)continue;let s=Ys[r].toLowerCase();s===qn.LOGGING_ROOT?Pt[s]=$n.dirname(n):Pt[s]=n}return Pt}a(Tx,"initOldConfig");function B7(e){let t=lb();return g7.get(t,e.replaceAll("_","."))}a(B7,"getConfigFromFile");async function H7(e,t){let r=ha(Vc());if(r.hasIn([e])?r.setIn([e],t):r.addIn([e],t),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);await Yr.writeFile(Vc(),String(r))}a(H7,"addConfig");function k7(e){let t=Vc(mr.getPropsFilePath()),r=ha(t);r.deleteIn(e);let n=r.getIn(["rootPath"]),s=$n.join(n,ms.HDB_CONFIG_FILE);Yr.writeFileSync(s,String(r))}a(k7,"deleteConfigFromFile");function F7(){return mE||(EE(),mE)}a(F7,"getConfigObj");function G7(){return Pt||EE(),Pt}a(G7,"getFlatConfigObj")});var Vn=P((ENe,yr)=>{"use strict";var bx="username is required",Ox="nothing to update, must supply active, role or password to update",Nx="password cannot be an empty string",wx="If role is specified, it cannot be empty.",Ix="active must be true or false";yr.exports.addUser=Q7;yr.exports.alterUser=J7;yr.exports.dropUser=Z7;yr.exports.getSuperUser=see;yr.exports.userInfo=eee;yr.exports.listUsers=SE;yr.exports.listUsersExternal=tee;yr.exports.setUsersWithRolesCache=Kc;yr.exports.findAndValidateUser=gb;yr.exports.getClusterUser=iee;yr.exports.getUsersWithRolesCache=nee;yr.exports.USERNAME_REQUIRED=bx;yr.exports.ALTERUSER_NOTHING_TO_UPDATE=Ox;yr.exports.EMPTY_PASSWORD=Nx;yr.exports.EMPTY_ROLE=wx;yr.exports.ACTIVE_BOOLEAN=Ix;var Cx=Sn(),q7=qc(),f_=(_E(),D(fE)),Px=tx(),__=Vr(),hb=ao(),Ni=oe(),Dx=require("validate.js"),pb=X(),{promisify:$7}=require("util"),mb=fo(),db=(G(),D($)),Rx=Ct(),V7=Dt(),K7=ce(),Y7=so(),{hdb_errors:W7,ClientError:Ws}=he(),{HTTP_STATUS_CODES:ho,AUTHENTICATION_ERROR_MSGS:ub,HDB_ERROR_MSGS:mu}=W7,{UserEventMsg:Eb}=Gs(),fb=require("lodash"),{server:gE}=(Pr(),D(Gl)),z7=X();gE.getUser=(e,t)=>gb(e,t,t!=null);gE.authenticateUser=(e,t)=>gb(e,t);var Lx={username:!0,active:!0,role:!0,password:!0},yx=new Map,j7=$7(q7.delete),_b=K7.get(db.CONFIG_PARAMS.AUTHENTICATION_HASHFUNCTION)??f_.HASH_FUNCTION.SHA256,wi;async function Q7(e){let t=Dx.cleanAttributes(e,Lx),r=Px.addUserValidation(t);if(r)throw new Ws(r.message);let n=await __.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["id","permission","role"]});if(!n||n.length<1)throw new Ws(mu.ROLE_NAME_NOT_FOUND(t.role),ho.NOT_FOUND);if(n.length>1)throw new Ws(mu.DUP_ROLES_FOUND(t.role),ho.CONFLICT);n[0].permission.cluster_user===!0&&(t.hash=mb.encrypt(t.password)),t.password=await f_.hash(t.password,_b),t.hash_function=_b,t.role=n[0].id;let s=await Cx.insert({operation:"insert",schema:"system",table:"hdb_user",records:[t]});if(pb.debug(s),await Kc(),s.skipped_hashes.length===1)throw new Ws(mu.USER_ALREADY_EXISTS(t.username),ho.CONFLICT);return hb.signalUserChange(new Eb(process.pid)),`${t.username} successfully added`}a(Q7,"addUser");async function J7(e){let t=Dx.cleanAttributes(e,Lx);if(Ni.isEmptyOrZeroLength(t.username))throw new Error(bx);if(Ni.isEmptyOrZeroLength(t.password)&&Ni.isEmptyOrZeroLength(t.role)&&Ni.isEmptyOrZeroLength(t.active))throw new Error(Ox);if(!Ni.isEmpty(t.password)&&Ni.isEmptyOrZeroLength(t.password.trim()))throw new Error(Nx);if(!Ni.isEmpty(t.active)&&!Ni.isBoolean(t.active))throw new Error(Ix);if(!Ni.isEmpty(t.password)&&!Ni.isEmptyOrZeroLength(t.password.trim())&&(X7(t.username)&&(t.hash=mb.encrypt(t.password)),t.password=await f_.hash(t.password,_b)),t.role==="")throw new Error(wx);if(t.role){let n=await __.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["*"]});if(!n||n.length===0)throw new Ws(mu.ALTER_USER_ROLE_NOT_FOUND(t.role),ho.NOT_FOUND);if(n.length>1)throw new Ws(mu.DUP_ROLES_FOUND(t.role),ho.CONFLICT);t.role=n[0].id}let r=await Cx.update({operation:"update",schema:"system",table:"hdb_user",records:[t]});return await Kc(),hb.signalUserChange(new Eb(process.pid)),r}a(J7,"alterUser");function X7(e){let t=!1,r=wi.get(e);return r&&r.role.permission.cluster_user===!0&&(t=!0),t}a(X7,"isClusterUser");async function Z7(e){let t=Px.dropUserValidation(e);if(t)throw new Ws(t.message);if(wi.get(e.username)===void 0)throw new Ws(mu.USER_NOT_EXIST(e.username),ho.NOT_FOUND);let r=await j7({table:"hdb_user",schema:"system",hash_values:[e.username]});return pb.debug(r),await Kc(),hb.signalUserChange(new Eb(process.pid)),`${e.username} successfully deleted`}a(Z7,"dropUser");async function eee(e){let t={};if(!e||!e.hdb_user)return"There was no user info in the body";t=fb.cloneDeep(e.hdb_user);let r=await __.searchByHash({schema:"system",table:"hdb_role",hash_values:[t.role.id],get_attributes:["*"]});return t.role=r[0],delete t.password,delete t.refresh_token,delete t.hash,delete t.hash_function,t}a(eee,"userInfo");async function tee(){let e=await SE();return e.forEach(t=>{delete t.password,delete t.hash,delete t.refresh_token,delete t.hash_function}),[...e.values()]}a(tee,"listUsersExternal");async function SE(){let e=await __.searchByValue({schema:"system",table:"hdb_role",search_value:"*",search_attribute:"role",get_attributes:["*"]}),t={};for(let s of e)t[s.id]=fb.cloneDeep(s);if(Object.keys(t).length===0)return null;let r=await __.searchByValue({schema:"system",table:"hdb_user",search_value:"*",search_attribute:"username",get_attributes:["*"]}),n=new Map;for(let s of r)s=fb.cloneDeep(s),s.role=t[s.role],ree(s.role),n.set(s.username,s);return n}a(SE,"listUsers");function ree(e){if(!e){pb.error("invalid user role found.");return}e.permission.system||(e.permission.system={}),e.permission.system.tables||(e.permission.system.tables={});for(let t of Object.keys(Y7)){let r={read:!!e.permission.super_user,insert:!1,update:!1,delete:!1,attribute_permissions:[]};e.permission.system.tables[t]=r}}a(ree,"appendSystemTablesToRole");async function Kc(e=void 0){e?wi=e:wi=await SE()}a(Kc,"setUsersWithRolesCache");async function nee(){return wi||await Kc(),wi}a(nee,"getUsersWithRolesCache");async function gb(e,t,r=!0){wi||await Kc();let n=wi.get(e);if(!n){if(!r)return{username:e};throw new Ws(ub.GENERIC_AUTH_FAIL,ho.UNAUTHORIZED)}if(n&&!n.active)throw new Ws(ub.USER_INACTIVE,ho.UNAUTHORIZED);let s={active:n.active,username:n.username};if(n.refresh_token&&(s.refresh_token=n.refresh_token),n.role&&(s.role=n.role),r===!0){if(yx.get(t)===n.password)return s;{let i=f_.validate(n.password,t,n.hash_function||f_.HASH_FUNCTION.MD5);if(i?.then&&(i=await i),i===!0)yx.set(t,n.password);else throw new Ws(ub.GENERIC_AUTH_FAIL,ho.UNAUTHORIZED)}}return s}a(gb,"findAndValidateUser");async function see(){wi||await Kc();for(let[,e]of wi)if(e.role.role==="super_user")return e}a(see,"getSuperUser");async function iee(){let e=await SE(),t=V7.getConfigFromFile(db.CONFIG_PARAMS.CLUSTERING_USER),r=e.get(t);if(!(r==null||r?.role?.role!==db.ROLE_TYPES_ENUM.CLUSTER_USER))return r.decrypt_hash=mb.decrypt(r.hash),r.uri_encoded_d_hash=encodeURIComponent(r.decrypt_hash),r.uri_encoded_name=encodeURIComponent(r.username),r.sys_name=r.username+Rx.SERVER_SUFFIX.ADMIN,r.sys_name_encoded=r.uri_encoded_name+Rx.SERVER_SUFFIX.ADMIN,r}a(iee,"getClusterUser");var Mx=[];gE.invalidateUser=function(e){for(let t of Mx)try{t(e)}catch(r){z7.error("Error invalidating user",r)}};gE.onInvalidatedUser=function(e){Mx.push(e)}});var p_=P((ANe,Bx)=>{"use strict";var Yc=X(),Kn=(G(),D($)),oee=rM(),SNe=Ks(),TNe=_o(),aee=Vn(),{validateEvent:vx}=Gs(),h_=Fn(),cee=require("process"),{resetDatabases:lee}=(Ue(),D(ct)),uee={[Kn.ITC_EVENT_TYPES.SCHEMA]:dee,[Kn.ITC_EVENT_TYPES.USER]:xx};async function dee(e){let t=vx(e);if(t){Yc.error(t);return}Yc.trace("ITC schemaHandler received schema event:",e),await oee(e.message),await fee(e.message)}a(dee,"schemaHandler");async function fee(e){try{h_.resetReadTxn(Kn.SYSTEM_SCHEMA_NAME,Kn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME),h_.resetReadTxn(Kn.SYSTEM_SCHEMA_NAME,Kn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME),h_.resetReadTxn(Kn.SYSTEM_SCHEMA_NAME,Kn.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME);let t=lee();e.table&&e.database&&await t[e.database][e.table].put(Symbol.for("write-verify"),null)}catch(t){Yc.error(t)}}a(fee,"syncSchemaMetadata");var Ux=[];async function xx(e){try{try{h_.resetReadTxn(Kn.SYSTEM_SCHEMA_NAME,Kn.SYSTEM_TABLE_NAMES.USER_TABLE_NAME),h_.resetReadTxn(Kn.SYSTEM_SCHEMA_NAME,Kn.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME)}catch(r){Yc.warn(r)}let t=vx(e);if(t){Yc.error(t);return}Yc.trace(`ITC userHandler ${Kn.HDB_ITC_CLIENT_PREFIX}${cee.pid} received user event:`,e),await aee.setUsersWithRolesCache();for(let r of Ux)r()}catch(t){Yc.error(t)}}a(xx,"userHandler");xx.addListener=function(e){Ux.push(e)};Bx.exports=uee});var Gs=P((wNe,kx)=>{"use strict";var yNe=X(),Sb=oe(),_ee=(G(),D($)),{ITC_ERRORS:m_}=Ln(),{parentPort:bNe,threadId:hee,isMainThread:pee,workerData:ONe}=require("worker_threads"),{onMessageFromWorkers:mee,broadcast:NNe,broadcastWithAcknowledgement:Eee}=st();kx.exports={sendItcEvent:gee,validateEvent:Hx,SchemaEventMsg:See,UserEventMsg:Tee};var TE;mee(async(e,t)=>{TE=TE||p_(),Hx(e),TE[e.type]&&await TE[e.type](e),e.requestId&&t&&t.postMessage({type:"ack",id:e.requestId})});function gee(e){return!pee&&e.message&&(e.message.originator=hee),Eee(e)}a(gee,"sendItcEvent");function Hx(e){if(typeof e!="object")return m_.INVALID_ITC_DATA_TYPE;if(!e.hasOwnProperty("type")||Sb.isEmpty(e.type))return m_.MISSING_TYPE;if(!e.hasOwnProperty("message")||Sb.isEmpty(e.message))return m_.MISSING_MSG;if(!e.message.hasOwnProperty("originator")||Sb.isEmpty(e.message.originator))return m_.MISSING_ORIGIN;if(_ee.ITC_EVENT_TYPES[e.type.toUpperCase()]===void 0)return m_.INVALID_EVENT(e.type)}a(Hx,"validateEvent");function See(e,t,r,n=void 0,s=void 0){this.originator=e,this.operation=t,this.schema=r,this.table=n,this.attribute=s}a(See,"SchemaEventMsg");function Tee(e){this.originator=e}a(Tee,"UserEventMsg")});var ao=P((PNe,$x)=>{"use strict";var Fx=(G(),D($)),CNe=oe(),AE=X(),Gx=HL(),Eu,{sendItcEvent:qx}=Gs();function Aee(e){try{AE.info("signalSchemaChange called with message:",e),Eu=Eu||p_();let t=new Gx(Fx.ITC_EVENT_TYPES.SCHEMA,e);return Eu.schema(t),qx(t)}catch(t){AE.error(t)}}a(Aee,"signalSchemaChange");function Ree(e){try{AE.trace("signalUserChange called with message:",e),Eu=Eu||p_();let t=new Gx(Fx.ITC_EVENT_TYPES.USER,e);return Eu.user(t),qx(t)}catch(t){AE.error(t)}}a(Ree,"signalUserChange");$x.exports={signalSchemaChange:Aee,signalUserChange:Ree}});var R_={};Be(R_,{addAnalyticsListener:()=>A_,calculateCPUUtilization:()=>cB,diffResourceUsage:()=>lB,recordAction:()=>Lt,recordActionBinary:()=>Yn,setAnalyticsEnabled:()=>yee});function yee(e){nB=e}function bee(e,t){if(typeof e=="number"){let r=t.values,n=r.index++;if(n>=r.length){let s=r;t.values=r=new Float32Array(n*2),r.set(s),r.index=n+1}r[n]=e,t.total+=e}else if(typeof e=="boolean")e&&t.total++,t.count++;else if(typeof e=="function")t.count++;else throw new TypeError("Invalid metric value type "+typeof e)}function Oee(e,t,r,n,s,i){let o={};if(typeof t=="number")o.total=t,o.values=new Float32Array(4),o.values.index=1,o.values[0]=t,o.total=t;else if(typeof t=="boolean")o.total=t?1:0,o.count=1;else if(typeof t=="function")o.count=1,o.callback=t;else throw new TypeError("Invalid metric value type "+typeof t);o.description={metric:r,path:n,method:s,type:i},yE.set(e,o)}function Lt(e,t,r,n,s){if(!nB)return;let i=t+(r?"-"+r:"");n!==void 0&&(i+="-"+n),s!==void 0&&(i+="-"+s);let o=yE.get(i);o?bee(e,o):Oee(i,e,t,r,n,s),RE||Nee()}function Yn(e,t,r,n,s){Lt(!!e,t,r,n,s)}function A_(e){oB.push(e)}function Nee(){RE=performance.now(),setTimeout(async()=>{let e=performance.now()-RE;RE=0;let t=[],r={time:Date.now(),period:e,threadId:Wc.threadId,metrics:t};for(let[s,i]of yE){if(i.values){let o=i.values.subarray(0,i.values.index);o.sort();let c=o.length,l=0,u=[],f;for(let d of aB){let h=Math.floor(c*d),_=o[h-1];if(h>l){let p=h-l;if(_===f){let S=u[u.length-1];typeof S=="number"?u[u.length-1]={value:S,count:1+p}:S.count+=p}else u.push(p>1?{value:_,count:p}:_),f=_;l=h}}t.push(Object.assign(i.description,{mean:i.total/c,distribution:u,count:c}))}else i.callback?t.push(Object.assign(i.description,i.callback(i))):t.push(Object.assign(i.description,{total:i.total,count:i.count}));await uB()}let n=process.memoryUsage();t.push({metric:"memory",threadId:Wc.threadId,byThread:!0,...n});for(let s of oB)s(t);yE=new Map,Wc.parentPort?Wc.parentPort.postMessage({type:iB,report:r}):_B({report:r})},sB).unref()}function bE(e,t,r){let n={id:(0,S_.getNextMonotonicTime)(),metric:t,...r};e.primaryStore.put(n.id,n,{append:!0}).then(s=>{s||e.primaryStore.put(n.id,n)})}function cB(e,t){let r=e.userCPUTime+e.systemCPUTime;return Math.round(r/t*100)/100}function lB(e,t){return{userCPUTime:t.userCPUTime/1e3-(e?.userCPUTime??0),systemCPUTime:t.systemCPUTime/1e3-(e?.systemCPUTime??0),minorPageFault:t.minorPageFault-(e?.minorPageFault??0),majorPageFault:t.majorPageFault-(e?.majorPageFault??0),fsRead:t.fsRead-(e?.fsRead??0),fsWrite:t.fsWrite-(e?.fsWrite??0),voluntaryContextSwitches:t.voluntaryContextSwitches-(e?.voluntaryContextSwitches??0),involuntaryContextSwitches:t.involuntaryContextSwitches-(e?.involuntaryContextSwitches??0)}}function wee(e,t,r){let n=0;for(let[s,i]of Object.entries(r)){let o=`${t}.${s}`,c=i.getSize(),l={database:t,table:s,size:c};bE(e,"table-size",l),zc.trace?.(`table ${o} size metric: ${JSON.stringify(l)}`),n+=c}return n}function Vx(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getAuditSize();if(!i)return;let o=rB.default.statSync(s.primaryStore.env.path).size,c=wee(e,r,n),l=o-c,u={database:r,size:o,used:c,free:l,audit:i};bE(e,"database-size",u),zc.trace?.(`database ${r} size metric: ${JSON.stringify(u)}`)}catch(s){zc.warn?.("Error getting DB size metrics",s)}}function Kx(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getStorageStats();if(!i)return;let o={database:r,...i};bE(e,"storage-volume",o),zc.trace?.(`db ${r} storage volume metrics: ${JSON.stringify(o)}`)}catch(s){zc.warn?.("Error getting DB volume metrics",s)}}async function Iee(e,t=6e4){let r=Ab(),n=dB(),s=new Promise(E=>{let T=performance.now();setImmediate(()=>{let O=performance.now();O-T>5e3&&zc.warn?.("Unusually high event queue latency on the main thread of "+Math.round(O-T)+"ms"),T=performance.now()}),n.primaryStore.prefetch([1],()=>{let O=performance.now();O-T>5e3&&zc.warn?.("Unusually high task queue latency on the main thread of "+Math.round(O-T)+"ms"),E(O-T)})}),i;for(let E of n.primaryStore.getRange({start:1/0,end:!1,reverse:!0}))if(E.value?.time){i=E.value.time;break}if(Date.now()-t<i)return;let o,c=new Map,l=new Map,u=[],f;for(let{key:E,value:T}of r.primaryStore.getRange({start:i||!1,exclusiveStart:!0,end:1/0})){if(!T)continue;if(o){if(E>o+t)break}else o=E;f=E;let{metrics:O,threadId:v}=T;for(let F of O||[]){let{path:q,method:j,type:te,metric:se,count:z,total:ne,distribution:le,threads:ie,...Re}=F;z||(z=1);let pe=se+(q?"-"+q:"");j!==void 0&&(pe+="-"+j),te!==void 0&&(pe+="-"+te);let Ae=c.get(pe);if(Ae){if(Ae.threads){let dt=Ae.threads[v];if(dt)Ae=dt;else{Ae.threads[v]={...Re};continue}}Ae.count||(Ae.count=1);let Bt=Ae.count;for(let dt in Re){let Cn=Re[dt];typeof Cn=="number"&&(Ae[dt]=(Ae[dt]*Bt+Cn*z)/(Bt+z))}Ae.count+=z,ne>=0&&(Ae.total+=ne,Ae.ratio=Ae.total/Ae.count)}else Ae={period:t,...F},delete Ae.distribution,c.set(pe,Ae),Ae.byThread&&(Ae.threads=[],Ae.threads[v]={...Re},u.push(Ae));if(le){le=le.map(dt=>typeof dt=="number"?{value:dt,count:1}:dt);let Bt=l.get(pe);Bt?Bt.push(...le):l.set(pe,le)}}await uB()}for(let E of u){let{path:T,method:O,type:v,metric:F,count:q,total:j,distribution:te,threads:se,...z}=E;se=se.filter(ne=>ne);for(let ne in z){if(typeof E[ne]!="number")continue;let le=0;for(let ie of se){let Re=ie[ne];typeof Re=="number"&&(le+=Re)}E[ne]=le}E.count=se.length,delete E.threads,delete E.byThread}for(let[E,T]of l){let O=c.get(E);T.sort((dt,Cn)=>dt.value>Cn.value?1:-1);let v=O.count-1,F=[],q=0,j=0,te;for(let dt of aB){let Cn=v*dt;for(;q<Cn;)te=T[j++],q+=te.count,j===1&&q--;let nn=T[j>1?j-2:0];te||(te=T[0]),F.push(te.value-(te.value-nn.value)*(q-Cn)/te.count)}let[se,z,ne,le,ie,Re,pe,Ae,Bt]=F;Object.assign(O,{p1:se,p10:z,p25:ne,median:le,p75:ie,p90:Re,p95:pe,p99:Ae,p999:Bt})}let d;for(let[E,T]of c)T.id=(0,S_.getNextMonotonicTime)(),T.time=f,n.primaryStore.put(T.id,T,{append:!0}).then(O=>{O||n.primaryStore.put(T.id,T)}),d=!0;let h=Date.now(),{idle:_,active:p}=performance.eventLoopUtilization();if(d||p*10>_){let E=(0,S_.getNextMonotonicTime)(),T={id:E,metric:"main-thread-utilization",idle:_-Yx,active:p-Wx,taskQueueLatency:await s,time:h,...process.memoryUsage()};n.primaryStore.put(E,T,{append:!0}).then(O=>{O||n.primaryStore.put(E,T)})}Yx=_,Wx=p;let S=process.resourceUsage(),g=lB(E_,S);g.time=h,g.period=E_.time?h-E_.time:t,g.cpuUtilization=cB(E_,g.period),bE(n,"resource-usage",g),E_=g;let R=Xe();Vx(n,R),Vx(n,{system:R.system}),Kx(n,R),Kx(n,{system:R.system})}async function zx(e,t){let r=Date.now()-t;for(let n of e.primaryStore.getKeys({start:!1,end:r}))e.primaryStore.remove(n)}function Ab(){return jx||(jx=_t({table:"hdb_raw_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"action"},{name:"metrics"}]}))}function dB(){return Qx||(Qx=_t({table:"hdb_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"metric"},{name:"path"},{name:"method"},{name:"type"}]}))}function Dee(){fB=!0;let e=(0,T_.get)(B.ANALYTICS_AGGREGATEPERIOD)*1e3;e&&setInterval(async()=>{await Iee(sB,e),await zx(Ab(),Cee),await zx(dB(),Pee)},Math.min(e/2,2147483647)).unref()}function _B(e,t){let r=e.report;r.threadId=t?.threadId||Wc.threadId;for(let n of r.metrics)n.metric==="bytes-sent"&&(Jx+=n.mean*n.count);r.totalBytesProcessed=Jx,t&&(r.metrics.push({metric:"utilization",...t.performance.eventLoopUtilization(Xx.get(t))}),Xx.set(t,t.performance.eventLoopUtilization())),r.id=(0,S_.getNextMonotonicTime)(),Ab().primaryStore.put(r.id,r),fB||Dee(),Lee&&(hB=vee(r))}async function vee(e){if(await hB,!pa){let r=(0,g_.dirname)((0,eB.getLogFilePath)());try{pa=await(0,Tb.open)((0,g_.join)(r,"analytics.log"),"r+")}catch{pa=await(0,Tb.open)((0,g_.join)(r,"analytics.log"),"w+")}}let t=(await pa.stat()).size;if(t>Mee){let r=Buffer.alloc(t);await pa.read(r,{position:0}),r=r.subarray(r.indexOf(10,r.length/2)+1),await pa.write(r,{position:0}),await pa.truncate(r.length),t=r.length}await pa.write(JSON.stringify(e)+`
-`,t)}var Wc,Zx,eB,tB,g_,Tb,S_,T_,rB,zc,yE,nB,RE,sB,iB,oB,aB,Yx,Wx,E_,uB,Cee,Pee,jx,Qx,fB,Jx,Xx,Lee,hB,pa,Mee,Ii=be(()=>{Wc=require("worker_threads"),Zx=M(st());Ue();eB=M(X()),tB=M(pi()),g_=require("path"),Tb=require("fs/promises"),S_=M(an()),T_=M(ce());G();Pr();rB=M(require("node:fs")),zc=(0,tB.loggerWithTag)("analytics");(0,T_.initSync)();yE=new Map,nB=(0,T_.get)(B.ANALYTICS_AGGREGATEPERIOD)>-1;a(yee,"setAnalyticsEnabled");a(bee,"recordExistingAction");a(Oee,"recordNewAction");a(Lt,"recordAction");Ke.recordAnalytics=Lt;a(Yn,"recordActionBinary");RE=0,sB=1e3,iB="analytics-report",oB=[];a(A_,"addAnalyticsListener");aB=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];a(Nee,"sendAnalytics");a(bE,"storeMetric");a(cB,"calculateCPUUtilization");a(lB,"diffResourceUsage");a(wee,"storeTableSizeMetrics");a(Vx,"storeDBSizeMetrics");a(Kx,"storeVolumeMetrics");a(Iee,"aggregation");Yx=0,Wx=0,E_={},uB=a(()=>new Promise(setImmediate),"rest");a(zx,"cleanup");Cee=36e5,Pee=31536e6;a(Ab,"getRawAnalyticsTable");a(dB,"getAnalyticsTable");(0,Zx.setChildListenerByType)(iB,_B);a(Dee,"startScheduledTasks");Jx=0,Xx=new Map,Lee=!1;a(_B,"recordAnalytics");Mee=1e6;a(vee,"logAnalytics")});var pB={};Be(pB,{Headers:()=>po,appendHeader:()=>OE,mergeHeaders:()=>Rb});function OE(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function Rb(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new po(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var po,y_=be(()=>{po=class extends Map{static{a(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let o=i[1];if(n)r=(typeof o=="string"?o:o.join(", "))+", "+r;else if(typeof o=="string")r=[o,r];else{o.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};a(OE,"appendHeader");a(Rb,"mergeHeaders")});var Ob={};Be(Ob,{EVICTED:()=>ta,INVALIDATED:()=>un,coerceType:()=>IE,makeTable:()=>PE,setServerUtilities:()=>qee});function PE(e){let{primaryKey:t,indices:r,tableId:n,tableName:s,primaryStore:i,databasePath:o,databaseName:c,auditStore:l,schemaDefined:u,dbisDB:f,sealed:d,splitSegments:h,replicate:_}=e,{expirationMS:p,evictionMS:S,audit:g,trackDeletes:R}=e;S??=0;let{attributes:E}=e;E||(E=[]);let T=tR(i,n,l),O,v,F={},q=Promise.resolve(),j,te,se;for(let K of E)(K.assignCreatedTime||K.name==="__createdtime__")&&(j=K),(K.assignUpdatedTime||K.name==="__updatedtime__")&&(te=K),K.expiresAt&&(se=K),K.isPrimaryKey&&(F=K);let z,ne=[],le=[],ie=1,Re=2,pe={},Ae={},Bt=864e5,dt=0,Cn,nn,wr,kd=!1,nc,jT=new Map,QT=new Map,Ht,Fd,Gd=Qc.get(B.REPLICATION_DATABASES);if(Array.isArray(Gd)){for(let K of Gd)if(K.name===c&&K.replicateTo>=0){Fd=K.replicateTo;break}}let JT=i.getRange({start:!1,end:!1}).constructor,Sp=10,qd=6;g&&Tp(),Lf(i.env.path,K=>{if(v)return zo(K)});class De extends Gr{#e;#t;#n;#r;#s;#i;static name=s;static primaryStore=i;static auditStore=l;static primaryKey=t;static tableName=s;static tableId=n;static indices=r;static audit=g;static databasePath=o;static databaseName=c;static attributes=E;static replicate=_;static sealed=d;static splitSegments=h??!0;static createdTimeProperty=j;static updatedTimeProperty=te;static propertyResolvers;static userResolvers={};static sources=[];static getResidencyById;static get expirationMS(){return p}static dbisDB=f;static schemaDefined=u;static sourcedFrom(m,y){if(y&&(this.sourceOptions=y,(y.expiration||y.eviction||y.scanInterval)&&this.setTTLExpiration(y)),y?.intermediateSource)m.intermediateSource=!0,this.sources.unshift(m);else{if(this.sources.some(b=>!b.intermediateSource)){if(this.sources.some(b=>b.name===m.name))return;throw new Error("Can not have multiple canonical (non-intermediate) sources")}this.sources.push(m)}v=v||m.get&&(!m.get.reliesOnPrototype||m.prototype.get),O=O||m.load;let L=a(b=>{let I=this.sources;if(I=I.filter(x=>x.intermediateSource&&x[b]&&(!x[b].reliesOnPrototype||x.prototype[b])),I.length>0)if(I.length===1){let x=I[0];return(N,H,U)=>{if(N?.source!==x)return x[b](H,U,N)}}else return(x,N,H)=>{let U=[];for(let Q of I){if(x?.source===Q)break;U.push(Q[b](N,H,x))}return Promise.all(U)}},"getApplyToIntermediateSource"),C=this.sources[this.sources.length-1];C.intermediateSource&&(C={});let A=a(b=>{if(C[b]&&(!C[b].reliesOnPrototype||C.prototype[b]))return(I,x,N)=>{if(!I?.source)return C[b](x,N,I)}},"getApplyToCanonicalSource");pe={put:A("put"),patch:A("patch"),delete:A("delete"),publish:A("publish")},Ae={put:L("put"),patch:L("patch"),delete:L("delete"),publish:L("publish"),invalidate:L("invalidate")};let w=C.shouldRevalidateEvents;return(async()=>{let b=!1,I,x=a(async(N,H)=>{let U=N.value,Q=N.table?Ye[c][N.table]:De;if(c===Qd&&(N.table===ql.ROLE_TABLE_NAME||N.table===ql.USER_TABLE_NAME)&&(b=!0),N.id===void 0&&(N.id=U[Q.primaryKey],N.id===void 0))throw new Error("Replication message without an id "+JSON.stringify(N));N.source=m;let J={residencyId:ac(N.residencyList),isNotification:!0,ensureLoaded:!1,nodeId:N.nodeId},k=await Q.getResource(N.id,H,J);switch(N.finished&&await N.finished,N.type){case"put":return w?k._writeInvalidate(U,J):k._writeUpdate(U,!0,J);case"patch":return w?k._writeInvalidate(U,J):k._writeUpdate(U,!1,J);case"delete":return k._writeDelete(J);case"publish":case"message":return k._writePublish(U,J);case"invalidate":return k._writeInvalidate(U,J);case"relocate":return k._writeRelocate(J);default:xe.default.error?.("Unknown operation",N.type,N.id)}},"writeUpdate");try{let N=m.subscribe;N&&R==null&&(R=!0);let H={crossThreads:!1,inTransactionUpdates:!0,supportsTransactions:!0,omitCurrent:!0},U=m.subscribeOnThisThread?m.subscribeOnThisThread((0,jc.getWorkerIndex)(),H):(0,jc.getWorkerIndex)()===0,Q=N&&U&&await m.subscribe?.(H);if(Q){let J;for await(let k of Q)try{if(!(k.type==="transaction"?k.writes[0]:k)){xe.default.error?.("Bad subscription event",k);continue}if(k.source=m,k.type==="end_txn"){if(J?.resolve(),k.localTime&&I!==k.localTime){if(k.remoteNodeIds?.length>0){let ye=[Symbol.for("seq"),k.remoteNodeIds[0]],Y=f.get(ye),V=Y?.nodes;V||(V=[]);for(let _e of k.remoteNodeIds.slice(1)){let me=V.find(Te=>Te.id===_e);V=V.filter(Te=>Te.id!==_e||Te===me),me||(me={id:_e,seqId:0},V.push(me)),me.seqId=Math.max(Y?.seqId??1,k.localTime),_e===J?.nodeId&&(me.lastTxnTime=k.timestamp)}let ue=Math.max(Y?.seqId??1,k.localTime);xe.default.trace?.("Received txn",c,ue,new Date(ue),k.localTime,new Date(k.localTime),k.remoteNodeIds),f.put(ye,{seqId:ue,nodes:V})}I=k.localTime}k.onCommit&&J?.committed.then(k.onCommit);continue}if(J)if(k.beginTxn)J.resolve();else{J.write_promises.push(x(k,J));continue}!k.timestamp&&k.version&&(k.timestamp=k.version);let de=wt(k,()=>{if(k.type==="transaction"){let ye=[];for(let Y of k.writes)try{ye.push(x(Y,k))}catch(V){throw V.message+=" writing "+JSON.stringify(Y)+" of event "+JSON.stringify(k),V}return Promise.all(ye)}else if(k.type==="define_schema"){let ye=this.attributes.slice(0),Y;for(let V of k.attributes)ye.find(ue=>ue.name===V.name)||(ye.push(V),Y=!0);Y&&(_t({table:s,database:c,attributes:ye,origin:"cluster"}),O_.signalSchemaChange(new N_.SchemaEventMsg(process.pid,Yt.CREATE_TABLE,c,s)))}else return k.beginTxn?(J=k,J.write_promises=[x(k,k)],new Promise(ye=>{J.resolve=()=>ye(Promise.all(J.write_promises))})):x(k,k)});J&&(J.committed=de),b&&de&&!de?.waitingForUserChange&&(de.then(()=>O_.signalUserChange(new N_.UserEventMsg(process.pid))),de.waitingForUserChange=!0),k.onCommit&&(de?de.then(k.onCommit):k.onCommit())}catch(Ce){xe.default.error?.("error in subscription handler",Ce)}}}catch(N){xe.default.error?.(N)}})(),this}static get isCaching(){return v}static get shouldRevalidateEvents(){return this.prototype.get!==De.prototype.get}static getResource(m,y,L){let C=super.getResource(m,y,L);if(m!=null){Ir(m);try{if(C.getRecord?.())return C;if(typeof m=="object"&&m&&!Array.isArray(m))throw new Error(`Invalid id ${JSON.stringify(m)}`);let A=!L?.async||i.cache?.get?.(m),w=Cr(y),b=w.getReadTxn();if(b?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");return Pn(m,y,{transaction:b,ensureLoaded:L?.ensureLoaded},A,I=>{if(I?De._updateResource(C,I):C.#e=null,y.onlyIfCached&&y.noCacheStore){if(!C.doesExist())throw new br.ServerError("Entry is not cached",504)}else if(L?.ensureLoaded){let x=sn(m,I,y,C);if(x)return w?.disregardReadTxn(),C.#i=!0,bb(x,N=>(De._updateResource(C,N),C))}return C})}catch(A){throw A.message.includes("Unable to serialize object")&&(A.message+=": "+JSON.stringify(m)),A}}return C}static _updateResource(m,y){m.#r=y,m.#e=y?.value??null,m.#n=y?.version}ensureLoaded(){let m=sn(this.getId(),this.#r,this.getContext());if(m)return this.#i=!0,bb(m,y=>{this.#r=y,this.#e=y.value,this.#n=y.version})}static getNewId(){let m=F?.type;if(m==="String"||m==="ID")return super.getNewId();if(!Ht){let A=i.getEntry(Symbol.for("id_allocation")),w=A?.value,b;if(w&&w.nodeName===server.hostname&&(!Vee(i)||w.pid===process.pid)){let I=w.start,x=w.end;b=I;for(let N of i.getKeys({start:x,end:I,limit:1,reverse:!0}))b=N}else w=C(A?.version??null),b=w.start;Ht=new BigInt64Array([BigInt(b)+1n]),Ht=new BigInt64Array(i.getUserSharedBuffer("id",Ht.buffer)),Ht.maxSafeId=w.end}let y=Number(Atomics.add(Ht,0,1n)),L=m==="Int"?512:1048576;if(y+L>=Ht.maxSafeId){let A=a(w=>{Ht.maxSafeId=y+(m==="Int"?1023:4194303);let b=(m==="Int"?Math.pow(2,31):Math.pow(2,49))-1,I=w?void 0:i.useReadTransaction(),x=Number(Ht[0]);for(let U of i.getKeys({start:x+1,end:b,limit:1,transaction:I}))b=U;I?.done();let{value:N,version:H}=i.getEntry(Symbol.for("id_allocation"));if(Ht.maxSafeId<b){if(N.end>Ht.maxSafeId-100)return;xe.default.info?.("New id allocation",y,Ht.maxSafeId,H),i.put(Symbol.for("id_allocation"),{start:N.start,end:Ht.maxSafeId,nodeName:server.hostname,pid:process.pid},Date.now(),H)}else{xe.default.warn?.(`Id conflict detected, starting new id allocation range, attempting to allocate to ${Ht.maxSafeId}, but id of ${b} detected`);let U=C(H);U.alreadyUpdated||Atomics.store(Ht,0,BigInt(U.start+1)),Ht.maxSafeId=U.end}},"updateEnd");y+L===Ht.maxSafeId?setImmediate(A):y+100>=Ht.maxSafeId&&(xe.default.warn?.(`Synchronous id allocation required on table ${s}${m=="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`),i.transactionSync(()=>A(!0)))}return y;function C(A){let w=(m==="Int"?Math.pow(2,31):Math.pow(2,49))-1,b=w/4,I,x,N=!1,H,U;do{H=Math.floor(Math.random()*w),U={start:H,end:H+(m==="Int"?1024:4194304),nodeName:server.hostname,pid:process.pid},I=0;for(let Q of i.getKeys({start:H,limit:1,reverse:!0}))I=Q;x=w;for(let Q of i.getKeys({start:H+1,end:w,limit:1}))x=Q;b*=.875,b<1e3&&!N&&(N=!0,xe.default.error?.(`Id allocation in table ${s} is very dense, limited safe range of numbers to allocate ids in${m==="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`,H,I,x,b))}while(!(b<x-H&&(b<H-I||I===0)));return i.transactionSync(()=>{let Q=i.getEntry(Symbol.for("id_allocation"));return(Q?.version??null)==A?(xe.default.info?.("Allocated new id range",U),i.put(Symbol.for("id_allocation"),U,Date.now()),U):(xe.default.debug?.("Looks like ids were already allocated"),{alreadyUpdated:!0,...Q.value})})}}static setTTLExpiration(m){if(typeof m=="number")p=m*1e3,S||(S=0);else if(m&&typeof m=="object")p=m.expiration*1e3,S=(m.eviction||0)*1e3,Bt=m.scanInterval*1e3;else throw new Error("Invalid expiration value type");if(p<0)throw new Error("Expiration can not be negative");Bt=Bt||(p+S)/4,zo()}static getResidencyRecord(m){return f.get([Symbol.for("residency_by_id"),m])}static setResidency(m){De.getResidency=m&&((y,L)=>{try{return m(y,L)}catch(C){throw C.message+=` in residency function for table ${s}`,C}})}static setResidencyById(m){De.getResidencyById=m&&(y=>{try{return m(y)}catch(L){throw L.message+=` in residency function for table ${s}`,L}})}static getResidency(m,y){if(De.getResidencyById)return De.getResidencyById(m[t]);let L=Fd;if(y.replicateTo!=null){if(Array.isArray(y.replicateTo))return y.replicateTo.includes(server.hostname)?y.replicateTo:[server.hostname,...y.replicateTo];y.replicateTo>=0&&(L=y.replicateTo)}if(L>=0&&server.nodes){let C=[server.hostname];if(y.previousResidency)C.push(...y.previousResidency.slice(0,L));else{let A=server.nodes.map(I=>I.name),w=Math.floor(A.length*Math.random());C.push(...A.slice(w,w+L));let b=w+L-A.length;b>0&&C.push(...A.slice(0,b))}return C}}static enableAuditing(m=!0){g=m,m&&Tp(),De.audit=m}static coerceId(m){return m===""?null:IE(m,F)}static async dropTable(){delete Ye[c][s];for(let m of i.getRange({versions:!0,snapshot:!1,lazy:!0}))m.metadataFlags&_n&&m.value&&ia(m.value);if(c===o){for(let m of E)f.remove(De.tableName+"/"+m.name),r[m.name]?.drop();f.remove(De.tableName+"/"),i.drop(),await f.committed}else console.log("legacy dropTable"),await i.close(),await wE.default.remove(data_path),await wE.default.remove(data_path===standard_path?data_path+MDB_LOCK_FILE_SUFFIX:path.join(path.dirname(data_path),MDB_LEGACY_LOCK_FILE_NAME));O_.signalSchemaChange(new N_.SchemaEventMsg(process.pid,Yt.DROP_TABLE,c,s))}get(m){if(typeof m=="string")return this.getProperty(m);if(this.isCollection)return this.search(m);if(this.getId()===null){if(m?.conditions||m?.size>0)return this.search(m);let y={records:"./",name:s,database:c,auditSize:l?.getStats().entryCount,attributes:E};return this.getContext()?.includeExpensiveRecordCountEstimates?De.getRecordCount().then(L=>(y.recordCount=L.recordCount,y.estimatedRecordRange=L.estimatedRange,y)):y}if(m?.property)return this.getProperty(m.property);if(this.doesExist()||m?.ensureLoaded===!1||this.getContext()?.returnNonexistent)return this}allowRead(m,y){let L=sc(m);if(L?.read){if(L.isSuperUser)return!0;let C=L.attribute_permissions,A=y?.select;if(C?.length>0||kd&&A){if(y||(y={}),A){let w=C?.length>0&&yb(C,"read");y.select=A.map(b=>{let I=b.name||b;if(!w||w[I]){let x=wr[I]?.definition?.tableClass;if(x){if(b.name||(b={name:b}),!x.prototype.allowRead.call(null,m,b))return!1;if(!b.select)return b.name}return b}}).filter(Boolean)}else y.select=C.filter(w=>w.read&&!wr[w.attribute_name]).map(w=>w.attribute_name);return y}else return!0}}allowUpdate(m,y){let L=sc(m);if(L?.update){let C=L.attribute_permissions;if(C?.length>0){let A=yb(C,"update");for(let w in y)if(!A[w])return!1;for(let w of C){let b=w.attribute_name;!w.update&&!(b in y)&&(y[b]=this.getProperty(b))}}return Wo(this.getContext())}}allowCreate(m,y){if(this.isCollection){let L=sc(m);if(L?.insert){let C=L.attribute_permissions;if(C?.length>0){let A=yb(C,"insert");for(let w in y)if(!A[w])return!1;return Wo(this.getContext())}else return Wo(this.getContext())}}else return this.allowUpdate(m,{})}allowDelete(m){return sc(m)?.delete&&Wo(this.getContext())}update(m,y){if(!Cr(this.getContext()))throw new Error("Can not update a table resource outside of a transaction");if(m===!1)return this;let C;return typeof m=="object"&&m&&(y?(Object.isFrozen(m)&&(m={...m}),this.#e={},this.#t=m):(C=this.#t,C&&(m=Object.assign(C,m)),this.#t=m)),this._writeUpdate(this.#t,y),this}addTo(m,y){if(typeof y=="number"||typeof y=="bigint")this.#s===EB?this.set(m,(+this.getProperty(m)||0)+y):(this.#s||this.update(),this.set(m,new Jm(y)));else throw new Error("Can not add a non-numeric value")}subtractFrom(m,y){if(typeof y=="number")return this.addTo(m,-y);throw new Error("Can not subtract a non-numeric value")}getMetadata(){return this.#r}getRecord(){return this.#e}getChanges(){return this.#t}_setChanges(m){this.#t=m}setRecord(m){this.#e=m}invalidate(){this._writeInvalidate()}_writeInvalidate(m,y){let L=this.getContext(),C=this.getId();Ir(C),Cr(this.getContext()).addWrite({key:C,store:i,invalidated:!0,entry:this.#r,before:pe.invalidate?.bind(this,L,C),beforeIntermediate:Ae.invalidate?.bind(this,L,C),commit:a((w,b)=>{if(!(Yo(w,b,y?.nodeId)<=0)){m??=null;for(let I in r)m||(m={}),m[I]===void 0&&(m[I]=this.getProperty(I));xe.default.trace?.(`Invalidating entry id: ${C}, timestamp: ${new Date(w).toISOString()}`),T(C,m,this.#r,w,un,g,{user:L?.user,residencyId:y?.residencyId,nodeId:y?.nodeId},"invalidate")}},"commit")})}_writeRelocate(m){let y=this.getContext(),L=this.getId();Ir(L),Cr(this.getContext()).addWrite({key:L,store:i,invalidated:!0,entry:this.#r,before:pe.relocate?.bind(this,y,L),beforeIntermediate:Ae.relocate?.bind(this,y,L),commit:a((A,w)=>{if(Yo(A,w,m?.nodeId)<=0)return;let b=De.getResidencyRecord(m.residencyId),I=0,x=null,N=w?.value;if(b&&!b.includes(server.hostname)){for(let H in r)x||(x={}),x[H]=N[H];I=un}else x=N;xe.default.trace?.(`Relocating entry id: ${L}, timestamp: ${new Date(A).toISOString()}`),T(L,x,this.#r,A,I,g,{user:y.user,residencyId:m.residencyId,nodeId:m.nodeId,expiresAt:m.expiresAt},"relocate",!1,null)},"commit")})}static _recordRelocate(m,y){let L={previousResidency:this.getResidencyRecord(m.residencyId),isRelocation:!0},C=oc(this.getResidency(y.value,L)),A;if(C){if(!C.includes(server.hostname))return!1;A=ac(C)}let w=0;xe.default.debug?.("Performing a relocate of an entry",m.key,y.value,C);let b=T(m.key,y.value,m,m.version,w,!0,{residencyId:A,expiresAt:y.expiresAt},"relocate",!1,null);return!0}static evict(m,y,L){let C=this.Source,A;if(!((v||g)&&(!y||(A=i.getEntry(m),!A||!y)||A.version!==L))){if(v){if(i.hasLock(m,A.version))return;let w;for(let b in r)w||(w={}),w[b]=y[b];if(w)return T(m,w,A,L,ta,null,null,null,!0)}if(i.ifVersion(m,L,()=>{Wi(m,y,null)}),g)return T(m,null,A,L,ta,null,null,null,!0);yc(i,A??i.getEntry(m),L)}}lock(){throw new Error("Not yet implemented")}static operation(m,y){return m.table||=s,m.schema||=c,OB.operation(m,y)}put(m){this.update(m,!0)}patch(m){this.update(m,!1)}_writeUpdate(m,y,L){let C=this.getContext(),A=Cr(C),w=this.getId();Ir(w);let b=this.#r;this.#s=y?EB:kee;let I={key:w,store:i,entry:b,nodeName:C?.nodeName,validate:a(x=>{m||(m=this.#t),y||m&&jm(this.#t===m?this:m)?C?.source||(A.checkOverloaded(),this.validate(m,!y),te&&(m[te.name]=te.type==="Date"?new Date(x):te.type==="String"?new Date(x).toISOString():x),y&&(t&&m[t]!==w&&(m[t]=w),j&&(b?.value?m[j.name]=b?.value[j.name]:m[j.name]=j.type==="Date"?new Date(x):j.type==="String"?new Date(x).toISOString():x),m=Uc(m))):A.removeWrite(I)},"validate"),before:y?pe.put?()=>pe.put(C,w,m):null:pe.patch?()=>pe.patch(C,w,m):pe.put?()=>pe.put(C,w,Uc(this)):null,beforeIntermediate:y?Ae.put?()=>Ae.put(C,w,m):null:Ae.patch?()=>Ae.patch(C,w,m):Ae.put?()=>Ae.put(C,w,Uc(this)):null,commit:a((x,N,H)=>{if(H){if(C&&N?.version>(C.lastModified||0)&&(C.lastModified=N.version),this.#r=N,N?.value&&N.value.getRecord)throw new Error("Can not assign a record to a record, check for circular references");y||(this.#e=N?.value??null)}this.#t=void 0,this.#n=x;let U=N?.value,Q=m;this.#s=0;let J=!1,k=Yo(x,N,L?.nodeId),Ce;if(k<=0)if(g){let ue=N.localTime,_e=N.version;xe.default.trace?.("Applying CRDT update to record with id: ",w,"applying later update:",_e);let me=[];for(;ue>x||_e>=x&&ue>0;){let Te=l.get(ue);if(!Te)break;let Pe=It(Te);if(_e=Pe.version,_e>=x){if(_e===x){if(k=Yo(x,{version:_e,localTime:ue},L?.nodeId),k===0)return;if(k>0)continue}if(Pe.type==="patch")me.push(Pe),Ce=m;else if(Pe.type==="put"||Pe.type==="delete")return}ue=Pe.previousLocalTime}me.sort((Te,Pe)=>Te.version-Pe.version);for(let Te of me){let Pe=Te.getValue(i);if(Q=gm(Q,Pe,y),xe.default.debug?.("Rebuilding update with future patch:",Q),!Q)return}}else{if(y)return;Q=gm(Q,U,y),xe.default.debug?.("Rebuilding update without audit:",Q)}let de;if(y?de=Q:(this.#e=U,de=Uc(this,Q)),this.#e=de,de&&de.getRecord)throw new Error("Can not assign a record to a record, check for circular references");let ye;if(L?.residencyId!=null)ye=L.residencyId;else{b?.residencyId&&(C.previousResidency=De.getResidencyRecord(b.residencyId));let ue=oc(De.getResidency(de,C));if(ue&&!ue.includes(server.hostname))if(Ce??=de,J=!0,De.getResidencyById)de=void 0;else{de=null;for(let _e in r)de||(de={}),de[_e]=Ce[_e]}ye=ac(ue)}y||(Ce=m);let Y=C?.expiresAt??(p?p+Date.now():-1);xe.default.trace?.(`Saving record with id: ${w}, timestamp: ${new Date(x).toISOString()}${Y?", expires at: "+new Date(Y).toISOString():""}${N?", replaces entry from: "+new Date(N.version).toISOString():", new entry"}`,(()=>{try{return JSON.stringify(de).slice(0,100)}catch{return""}})()),Wi(w,U,de);let V=y?"put":"patch";T(w,de,N,x,J?un:0,g,{omitLocalRecord:J,user:C?.user,residencyId:ye,expiresAt:Y,nodeId:L?.nodeId,originatingOperation:C?.originatingOperation},V,!1,Ce),C.expiresAt&&zo()},"commit")};A.addWrite(I)}async delete(m){if(typeof m=="string")return this.deleteProperty(m);if(this.isCollection){for await(let y of this.search(m))(await De.getResource(y[t],this.getContext(),{ensureLoaded:!1}))._writeDelete(m);return}return this.#e?this._writeDelete(m):!1}_writeDelete(m){let y=Cr(this.getContext()),L=this.getId();Ir(L);let C=this.getContext();return y.addWrite({key:L,store:i,entry:this.#r,nodeName:C?.nodeName,before:pe.delete?.bind(this,C,L),beforeIntermediate:Ae.delete?.bind(this,C,L),commit:a((A,w,b)=>{let I=w?.value;b&&(C&&w?.version>(C.lastModified||0)&&(C.lastModified=w.version),De._updateResource(this,w)),!(Yo(A,w,m?.nodeId)<=0)&&(Wi(this.getId(),I),xe.default.trace?.(`Deleting record with id: ${L}, txn timestamp: ${new Date(A).toISOString()}`),g||R?(T(L,null,this.#r,A,0,g,{user:C?.user,nodeId:m?.nodeId},"delete"),g||zo()):yc(i,w))},"commit")}),!0}search(m){let y=this.getContext(),L=Cr(y);if(!m)throw new Error("No query provided");let C=m.conditions;C?C.length===void 0&&(C=C[Symbol.iterator]?Array.from(C):[C]):C=Array.isArray(m)?m:m[Symbol.iterator]?Array.from(m):[],this.getId()&&(C=[{attribute:null,comparator:Array.isArray(this.getId())?"prefix":"starts_with",value:this.getId()}].concat(C));let A,w={};function b(V,ue){let _e;switch(ue){case"and":case void 0:if(V.length<1)throw new Error('An "and" operator requires at least one condition');_e=!0;break;case"or":if(V.length<2)throw new Error('An "or" operator requires at least two conditions');break;default:throw new Error("Invalid operator "+ue)}for(let me of V){if(me.conditions){me.conditions=b(me.conditions,me.operator);continue}let Te=me[0]??me.attribute,Pe=Te==null?F:hi(E,Te);if(Pe)(Pe.type||wA[me.comparator])&&(me[1]===void 0?me.value=x(me.value,Pe):me[1]=x(me[1],Pe));else if(Te!=null)throw(0,br.handleHDBError)(new Error,`${Te} is not a defined attribute`,404);if(me.chainedConditions)if(me.chainedConditions.length===1&&(!me.operator||me.operator=="and")){let Ve=me.chainedConditions[0],We,Dn;if(Ve.comparator==="gt"||Ve.comparator==="greater_than"||Ve.comparator==="ge"||Ve.comparator==="greater_than_equal"?(We=me,Dn=Ve):(We=Ve,Dn=me),We.comparator!=="lt"&&We.comparator!=="less_than"&&We.comparator!=="le"&&We.comparator!=="less_than_equal")throw new Error("Invalid chained condition, only less than and greater than conditions can be chained together");let os=Dn.comparator==="ge"||Dn.comparator==="greater_than_equal",Ap=We.comparator==="le"||We.comparator==="less_than_equal";me.comparator=(os?"ge":"gt")+(Ap?"le":"lt"),me.value=[Dn.value,We.value]}else throw new Error("Multiple chained conditions are not currently supported")}return V}a(b,"prepareConditions");function I(V,ue){if(m.enforceExecutionOrder)return V;for(let _e of V)_e.conditions&&(_e.conditions=I(_e.conditions,_e.operator));return V.length>1&&ue!=="or"?(0,yB.sortBy)(V,Kp(De)):V}a(I,"orderConditions");function x(V,ue){return Array.isArray(V)?V.map(_e=>IE(_e,ue)):IE(V,ue)}a(x,"coerceTypedValues");let N=m.operator;(C.length>0||N)&&(C=b(C,N));let H=typeof m.sort=="object"&&m.sort,U;if(H&&N!=="or"){let V=H.attribute;if(V==null)throw new br.ClientError("Sort requires an attribute");if(A=C.find(ue=>zl(ue.attribute)===zl(V)),!A){let ue=hi(E,V);if(!ue)throw(0,br.handleHDBError)(new Error,`${Array.isArray(V)?V.join("."):V} is not a defined attribute`,404);if(ue.indexed)A={attribute:V,comparator:"sort"},C.push(A);else if(C.length===0&&!m.allowFullScan)throw(0,br.handleHDBError)(new Error,`${Array.isArray(V)?V.join("."):V} is not indexed and not combined with any other conditions`,404)}A&&(A.descending=!!H.descending)}C=I(C,N),H&&(A&&C[0]===A?H.next&&(U={dbOrderedAttribute:H.attribute,attribute:H.next.attribute,descending:H.next.descending,next:H.next.next}):(A&&C.splice(C.indexOf(A),1),U=H));let Q=m.select;if(C.length===0&&(C=[{attribute:t,comparator:"greater_than",value:!0}]),m.explain)return{conditions:C,operator:N,postOrdering:U,selectApplied:!!Q};let J=L.useReadTxn(),k=IA(C,N,De,J,m,y,(V,ue)=>Vd(V,Q,y,J,ue),w),Ce=m.ensureLoaded!==!1;U||(k=Y(k));let de=De.transformEntryForSelect(Q,y,J,w,Ce,!0),ye=De.transformToOrderedSelect(k,Q,U,J,y,de);function Y(V){return m.offset||m.limit!==void 0?V.slice(m.offset,m.limit!==void 0?(m.offset||0)+m.limit:void 0):V}return a(Y,"applyOffset"),U&&(ye=Y(ye)),ye.onDone=()=>{ye.onDone=null,L.doneReadTxn()},ye.selectApplied=!0,ye.getColumns=()=>{if(Q){let V=[];for(let ue of Q)ue==="*"?V.push(...E.map(_e=>_e.name)):V.push(ue.name||ue);return V}return E.filter(V=>!V.computed&&!V.relationship).map(V=>V.name)},ye}static transformToOrderedSelect(m,y,L,C,A,w){let b=new JT;if(L){m=Vd(m,y,C,A,null);let I;b.iterate=function(){let N,H=m[Symbol.asyncIterator]?m[Symbol.asyncIterator]():m[Symbol.iterator](),U,Q=L.dbOrderedAttribute,J,k,Ce=!0;function de(Y){let V=Y.next&&de(Y.next),ue=Y.descending;return(_e,me)=>{let Te=ic(_e,Y.attribute,C),Pe=ic(me,Y.attribute,C),Ve=ue?(0,Jc.compareKeys)(Pe,Te):(0,Jc.compareKeys)(Te,Pe);return Ve===0?V?.(_e,me)||0:Ve}}a(de,"createComparator");let ye=de(L);return{async next(){let Y;if(N)if(Y=N.next(),Y.done){if(U)return b.onDone&&b.onDone(),Y}else return{value:await w.call(this,Y.value)};I=[],J&&I.push(J);do if(Y=await H.next(),Y.done){if(U=!0,I.length)break;return b.onDone&&b.onDone(),Y}else{let V=Y.value;if(V?.then&&(V=await V),Q){let ue=ic(V,Q,C);if(Ce)Ce=!1,k=ue;else if(ue!==k){k=ue,J=V;break}}I.push(V)}while(!0);return L.isGrouped,I.sort(ye),N=I[Symbol.iterator](),Y=N.next(),Y.done?(b.onDone&&b.onDone(),Y):{value:await w.call(this,Y.value)}},return(){b.onDone&&b.onDone(),H.return()},throw(){b.onDone&&b.onDone(),H.throw()}}};let x=a(N=>{if(typeof y=="object"&&Array.isArray(N.attribute))for(let H=0;H<y.length;H++){let U=y[H],Q;if(U.name===N.attribute[0]){for(Q=U.sort||(U.sort={});Q.next;)Q=Q.next;Q.attribute=N.attribute.slice(1),Q.descending=N.descending}else U===N.attribute[0]&&(y[H]=Q={name:U,sort:{attribute:N.attribute.slice(1),descending:N.descending}})}N.next&&x(N.next)},"applySortingOnSelect");x(L)}else b.iterate=(m[Symbol.asyncIterator]||m[Symbol.iterator]).bind(m),b=b.map(function(I){try{let x=w.call(this,I);return typeof x?.catch=="function"?x.catch(N=>{throw N.partialObject={[t]:I.key},N}):x}catch(x){throw x.partialObject={[t]:I.key},x}});return b}static transformEntryForSelect(m,y,L,C,A,w){if(m&&(m===t||m?.length===1&&m[0]===t&&Array.isArray(m))){let N=a(H=>(y?.transaction?.stale&&(y.transaction.stale=!1),H?.key??H),"transform");return m===t?N:m.asArray?H=>[N(H)]:H=>({[t]:N(H)})}let b;A&&v&&!(typeof m=="string"?[m]:m)?.every(N=>{let H;return typeof N=="object"?H=N.name:H=N,r[H]||H===t})&&(b=!0);let I,x=a(function(N){let H;if(y?.transaction?.stale&&(y.transaction.stale=!1),N!=null){if(H=N.value||N.deref?.()?.value,!H&&(N.key===void 0||N.deref)||N.metadataFlags&un){if(N.metadataFlags&un&&y.replicateFrom===!1&&w&&N.residencyId)return Ea.SKIP;if(N=Pn(N.key??N,y,{transaction:L,lazy:m?.length<4,ensureLoaded:A},this?.isSync,U=>U),N?.then)return N.then(x.bind(this));H=N?.value}if(b&&N?.metadataFlags&(un|ta)||N?.expiresAt!=null&&N?.expiresAt<Date.now()){if(y.onlyIfCached&&y.noCacheStore)return{[t]:N.key,message:"This entry has expired"};let U=sn(N.key??N,N,y);if(U?.then)return U.then(x)}}if(H==null)return w?Ea.SKIP:H;if(m&&!(m[0]==="*"&&m.length===1)){let U,Q=a((k,Ce)=>{let de;typeof k=="object"?de=k.name:de=k;let ye=wr?.[de],Y;if(ye){let V=C?.[de];if(V)if(V.hasMappings){let _e=ye.from?H[ye.from]:zl(N.key);Y=V.get(_e),Y||(Y=[])}else Y=V.fromRecord?.(H);else Y=ye(H,y,N);let ue=a(_e=>{if(_e&&typeof _e=="object"){let me=ye.definition?.tableClass||De;I||(I={});let Te=I[de]||(I[de]=me.transformEntryForSelect(de===k?null:k.select||(Array.isArray(k)?k:null),y,L,V,A));if(Array.isArray(_e)){let Pe=[],Ve=me.transformToOrderedSelect(_e,k.select,typeof k.sort=="object"&&k.sort,y,L,Te)[this.isSync?Symbol.iterator:Symbol.asyncIterator](),We=a(os=>{for(;!os.done;){if(os?.then)return os.then(We);Pe.push(os.value),os=Ve.next()}Ce(Pe,de)},"nextValue"),Dn=We(Ve.next());Dn&&(U||(U=[]),U.push(Dn));return}else if(_e=Te.call(this,_e),_e?.then){U||(U=[]),U.push(_e.then(Pe=>Ce(Pe,de)));return}}Ce(_e,de)},"handleResolvedValue");Y?.then?(U||(U=[]),U.push(Y.then(ue))):ue(Y);return}else Y=H[de],Y&&typeof Y=="object"&&de!==k&&(Y=De.transformEntryForSelect(k.select||k,y,L,null)({value:Y}));Ce(Y,de)},"selectAttribute"),J;if(typeof m=="string")Q(m,k=>{J=k});else if(Array.isArray(m))if(m.asArray)J=[],m.forEach((k,Ce)=>{k==="*"?m[Ce]=H:Q(k,de=>J[Ce]=de)});else{J={};let k=m.forceNulls;for(let Ce of m)if(Ce==="*")for(let de in H)J[de]=H[de];else Q(Ce,(de,ye)=>{de===void 0&&k&&(de=null),J[ye]=de})}else throw new br.ClientError("Invalid select"+m);return U?Promise.all(U).then(()=>J):J}return H},"transform");return x}async subscribe(m){if(!l)throw new Error("Can not subscribe to a table without an audit log");g||_t({table:s,database:c,schemaDefined:u,attributes:E,audit:!0}),m||(m={});let y=!m.rawEvents,L=[],C=this,A=pR(De,this.getId()??null,function(b,I,x,N){try{let H=I.getValue?.(i,y),U=I.type;if(!H&&U==="patch"&&y){let J=i.getEntry(b);J?.version===I.version?H=J.value:H=I.getValue?.(i,!0,x),U="put"}let Q={id:b,localTime:x,value:H,version:I.version,type:U,beginTxn:N};L?L.push(Q):this.send(Q)}catch(H){xe.default.error?.(H)}},m.startTime||0,m),w=(async()=>{this.isCollection&&(A.includeDescendants=!0,m.onlyChildren&&(A.onlyChildren=!0)),m.supportsTransactions&&(A.supportsTransactions=!0);let b=this.getId(),I=m.previousCount;I>1e3&&(I=1e3);let x=m.startTime;if(this.isCollection){if(x){if(I)throw new br.ClientError("startTime and previousCount can not be combined for a table level subscription");for(let{key:N,value:H}of l.getRange({start:x,exclusiveStart:!0,snapshot:!1})){let U=It(H);if(U.tableId!==n)continue;let Q=U.recordId;if(b==null||AB(b,Q)){let J=U.getValue(i,y,N);if(A.send({id:Q,localTime:N,value:J,version:U.version,type:U.type}),A.queue?.length>SB&&await A.waitForDrain()===!1)return}A.startTime=N}}else if(I){let N=[];for(let{key:H,value:U}of l.getRange({start:"z",end:!1,reverse:!0}))try{let Q=It(U);if(Q.tableId!==n)continue;let J=Q.recordId;if(b==null||AB(b,J)){let k=Q.getValue(i,y,H);if(N.push({id:J,localTime:H,value:k,version:Q.version,type:Q.type}),--I<=0)break}}catch(Q){xe.default.error("Error getting history entry",H,Q)}for(let H=N.length;H>0;)A.send(N[--H]);N[0]&&(A.startTime=N[0].localTime)}else if(!m.omitCurrent){for(let{key:N,value:H,version:U,localTime:Q}of i.getRange({start:b??!1,end:b==null?void 0:[b,Jc.MAXIMUM_KEY],versions:!0,snapshot:!1}))if(H&&(A.send({id:N,localTime:Q,value:H,version:U,type:"put"}),A.queue?.length>SB&&await A.waitForDrain()===!1))return}}else{I&&!x&&(x=0);let N=this.#r?.localTime;if(N===eR&&(i.cache?.delete(b),this.#r=i.getEntry(b),xe.default.trace?.("re-retrieved record",N,this.#r?.localTime),N=this.#r?.localTime),xe.default.trace?.("Subscription from",x,"from",b,N),x<N){let H=[],U=N;do{let Q=l.get(U);if(Q){m.omitCurrent=!0;let J=It(Q),k=J.getValue(i,y,U);y&&(J.type="put"),H.push({id:b,value:k,localTime:U,...J}),U=J.previousLocalTime}else break;I&&I--}while(U>x&&I!==0);for(let Q=H.length;Q>0;)A.send(H[--Q]);A.startTime=N}!m.omitCurrent&&this.doesExist()&&A.send({id:b,localTime:N,value:this.#e,version:this.#n,type:"put"})}for(let N of L)A.send(N);L=null})();return m.listener&&A.on("data",m.listener),A}static subscribeOnThisThread(m,y){return m===0||y?.crossThreads===!1}doesExist(){return!!(this.#e||this.#s)}publish(m,y){this._writePublish(m,y)}_writePublish(m,y){let L=Cr(this.getContext()),C=this.getId()||null;C!=null&&Ir(C);let A=this.getContext();L.addWrite({key:C,store:i,entry:this.#r,nodeName:A?.nodeName,validate:a(()=>{A?.source||(L.checkOverloaded(),this.validate(m))},"validate"),before:pe.publish?.bind(this,A,C,m),beforeIntermediate:Ae.publish?.bind(this,A,C,m),commit:a((w,b,I)=>{b===void 0&&R&&!g&&zo(),xe.default.trace?.(`Publishing message to id: ${C}, timestamp: ${new Date(w).toISOString()}`),T(C,b?.value??null,b,b?.version||w,0,!0,{user:A?.user,residencyId:y?.residencyId,expiresAt:A?.expiresAt,nodeId:y?.nodeId},"message",!1,m)},"commit")})}validate(m,y){let L,C=a((A,w,b)=>{if(w.type&&A!=null)if(y&&A.__op__&&(A=A.value),w.properties){typeof A!="object"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an object${w.type?" ("+w.type+")":""}`);let I=w.properties;for(let x=0,N=I.length;x<N;x++){let H=I[x],U=C(A[H.name],H,b+"."+H.name);U&&(A[H.name]=U)}if(w.sealed&&A!=null&&typeof A=="object")for(let x in A)I.find(N=>N.name===x)||(L||(L=[])).push(`Property ${x} is not allowed within object in property ${b}`)}else switch(w.type){case"Int":(typeof A!="number"||A>>0!==A)&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an integer (from -2147483648 to 2147483647)`);break;case"Long":(typeof A!="number"||!(Math.floor(A)===A&&Math.abs(A)<=9007199254740992))&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an integer (from -9007199254740992 to 9007199254740992)`);break;case"Float":typeof A!="number"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a number`);break;case"ID":typeof A=="string"||A?.length>0&&A.every?.(I=>typeof I=="string")||(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a string, or an array of strings`);break;case"String":typeof A!="string"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a string`);break;case"Boolean":typeof A!="boolean"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a boolean`);break;case"Date":if(!(A instanceof Date)){if(typeof A=="string"||typeof A=="number")return new Date(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Date`)}break;case"BigInt":if(typeof A!="bigint"){if(typeof A=="string"||typeof A=="number")return BigInt(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a bigint`)}break;case"Bytes":if(!(A instanceof Uint8Array)){if(typeof A=="string")return Buffer.from(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Buffer or Uint8Array`)}break;case"Blob":if(!(A instanceof Ei)){if(typeof A=="string"&&(A=Buffer.from(A)),A instanceof Buffer)return createBlob(A,{type:"text/plain"});(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Blob`)}break;case"array":if(Array.isArray(A)){if(w.elements)for(let I=0,x=A.length;I<x;I++){let N=A[I],H=C(N,w.elements,b+"[*]");H&&(A[I]=H)}}else(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an Array`);break}w.nullable===!1&&A==null&&(L||(L=[])).push(`Property ${b} is required (and not does not allow null values)`)},"validateValue");for(let A=0,w=E.length;A<w;A++){let b=E[A];if(!(b.relationship||b.computed)&&(!y||b.name in m)){let I=C(m[b.name],b,b.name);I&&(m[b.name]=I)}}if(d)for(let A in m)E.find(w=>w.name===A)||(L||(L=[])).push(`Property ${A} is not allowed`);if(L)throw new br.ClientError(L.join(". "))}getUpdatedTime(){return this.#n}wasLoadedFromSource(){return v?!!this.#i:void 0}static async addAttributes(m){let y=E.slice(0);for(let L of m){if(!L.name)throw new br.ClientError("Attribute name is required");if(L.name.match(/[`/]/))throw new br.ClientError("Attribute names cannot include backticks or forward slashes");(0,bB.validateAttribute)(L.name),y.push(L)}return _t({table:s,database:c,schemaDefined:u,attributes:y}),De.indexingOperation}static async removeAttributes(m){let y=E.filter(L=>!m.includes(L.name));return _t({table:s,database:c,schemaDefined:u,attributes:y}),De.indexingOperation}static getSize(){let m=i.getStats();return(m.treeBranchPageCount+m.treeLeafPageCount+m.overflowPages)*m.pageSize}static getAuditSize(){let m=l?.getStats();return m&&(m.treeBranchPageCount+m.treeLeafPageCount+m.overflowPages)*m.pageSize}static getStorageStats(){let m=i.env.path,y=wE.default.statfsSync?.(m)??{};return{available:y.bavail*y.bsize,free:y.bfree*y.bsize,size:y.blocks*y.bsize}}static async getRecordCount(m){let y=i.getStats().entryCount,L=1e3/2,C=performance.now(),A=Math.floor(y/2),w=m?.exactCount,b=0,I=0,x;for(let{value:N}of i.getRange({start:!0,lazy:!0,snapshot:!1}))if(N!=null&&b++,I++,await ma(),!w&&I<A&&performance.now()-C>L){x=I;break}if(x){let N=b;b=0;for(let{value:Y}of i.getRange({start:"\uFFFF",reverse:!0,lazy:!0,limit:x,snapshot:!1}))Y!=null&&b++,await ma();let H=x*2,U=(b+N)/H,Q=Math.pow((b-N+1)/x/2,2)+U*(1-U)/H,J=Math.max(Math.sqrt(Q)*y,1),k=Math.round(U*y),Ce=Math.max(k-1.96*J,b+N),de=Math.min(k+1.96*J,y),ye=Math.pow(10,Math.round(Math.log10(J)));return ye>k&&(ye=ye/10),b=Math.round(k/ye)*ye,{recordCount:b,estimatedRange:[Math.round(Ce),Math.round(de)]}}return{recordCount:b}}static updatedAttributes(){wr=this.propertyResolvers={$id:a((m,y,L)=>({value:L.key}),"$id"),$updatedtime:a((m,y,L)=>L.version,"$updatedtime"),$record:a((m,y,L)=>L?{value:m}:m,"$record")};for(let m of this.attributes){m.isPrimaryKey&&(F=m),m.resolve=null;let y=m.relationship,L=m.computed;if(y)if(m.indexed&&console.error("A relationship property can not be directly indexed, (but you may want to index the foreign key attribute)"),L&&console.error("A relationship property is already computed and can not be combined with a computed function (the relationship will be given precedence)"),kd=!0,y.to)m.elements?.definition?(wr[m.name]=m.resolve=(C,A,w)=>{let b=C[y.from?y.from:t],I=m.elements.definition.tableClass;return w?Wl({attribute:y.to,value:b},Cr(A).getReadTxn(),!1,I,!1).asArray:I.search([{attribute:y.to,value:b}],A).asArray},m.set=()=>{throw new Error("Setting a one-to-many relationship property is not supported")},m.resolve.definition=m.elements.definition,y.from&&(m.resolve.from=y.from)):console.error(`The one-to-many/many-to-many relationship property "${m.name}" in table "${s}" must have an array type referencing a table as the elements`);else if(y.from){let C=m.definition||m.elements?.definition;C?(wr[m.name]=m.resolve=(A,w,b)=>{let I=A[y.from];if(I!==void 0){if(m.elements){let x,N=I?.map(H=>{let U=b?C.tableClass.primaryStore.getEntry(H,{transaction:Cr(w).getReadTxn()}):C.tableClass.get(H,w);return U?.then&&(x=!0),U});return y.filterMissing?x?Promise.all(N).then(H=>H.filter(RB)):N.filter(RB):x?Promise.all(N):N}return b?C.tableClass.primaryStore.getEntry(I,{transaction:Cr(w).getReadTxn()}):C.tableClass.get(I,w)}},m.set=(A,w)=>{if(Array.isArray(w)){let b=w.map(I=>I.getId?.()||I[C.tableClass.primaryKey]);A[y.from]=b}else{let b=w.getId?.()||w[C.tableClass.primaryKey];A[y.from]=b}},m.resolve.definition=m.definition||m.elements?.definition,m.resolve.from=y.from):console.error(`The relationship property "${m.name}" in table "${s}" must be a type that references a table`)}else console.error(`The relationship directive on "${m.name}" in table "${s}" must use either "from" or "to" arguments`);else L&&(typeof L.from=="function"&&this.setComputedAttribute(m.name,L.from),wr[m.name]=m.resolve=(C,A,w)=>{let b=typeof L.from=="string"?C[L.from]:C,I=this.userResolvers[m.name];if(I)return I(b,A,w);xe.default.warn(`Computed attribute "${m.name}" does not have a function assigned to it. Please use setComputedAttribute('${m.name}', resolver) to assign a resolver function.`),this.userResolvers[m.name]=()=>{}})}Xm(this,this)}static setComputedAttribute(m,y){let L=hi(E,m);if(!L){console.error(`The attribute "${m}" does not exist in the table "${s}"`);return}if(!L.computed){console.error(`The attribute "${m}" is not defined as computed in the table "${s}"`);return}this.userResolvers[m]=y}static async deleteHistory(m=0,y=!1){let L;for(let{key:C,value:A}of l.getRange({start:0,end:m}))await ma(),It(A).tableId===n&&(L=wm(l,C,A));if(y)for(let C of i.getRange({start:0,versions:!0})){let{key:A,value:w,localTime:b}=C;await ma(),w===null&&b<m&&(L=yc(i,C))}await L}static async*getHistory(m=0,y=1/0){for(let{key:L,value:C}of l.getRange({start:m||1,end:y})){await ma();let A=It(C);A.tableId===n&&(yield{id:A.recordId,localTime:L,version:A.version,type:A.type,value:A.getValue(i,!0,L),user:A.user,operation:A.originatingOperation})}}static async getHistoryOfRecord(m){let y=[];if(m==null)throw new Error("An id is required");let L=i.getEntry(m);if(!L)return y;let C=L.localTime;if(!C)throw new Error("The entry does not have a local audit time");let A=0;do{await ma();let w=l.get(C);if(w){let b=It(w);y.push({id:b.recordId,localTime:C,version:b.version,type:b.type,value:b.getValue(i,!0,C),user:b.user}),C=b.previousLocalTime}else break}while(A<1e3&&C);return y.reverse()}static cleanup(){z?.remove()}}De.updatedAttributes();let $d=De.prototype;return p&&De.setTTLExpiration(p/1e3),se&&Yd(),De;function Wi(K,m,y){let L;for(let C in r){let A=r[C],w=A.isIndexing,b=wr[C],I=y&&(b?b(y):y[C]),x=m&&(b?b(m):m[C]);if(I===x&&!w)continue;L=!0;let N=A.indexNulls,H=(0,b_.getIndexedValues)(I,N),U=(0,b_.getIndexedValues)(x,N);if(U?.length>0){let Q=new Set(U);if(H=H?H.filter(J=>{if(Q.has(J))Q.delete(J);else return!0}):[],U=Array.from(Q),(U.length>0||H.length>0)&&mB){let J=U.concat(H).map(k=>({key:k,value:K}));A.prefetch(J,TB)}for(let J=0,k=U.length;J<k;J++)A.remove(U[J],K)}else H?.length>0&&mB&&A.prefetch(H.map(Q=>({key:Q,value:K})),TB);if(H)for(let Q=0,J=H.length;Q<J;Q++)A.put(H[Q],K)}return L}a(Wi,"updateIndices");function Ir(K){switch(typeof K){case"number":return!0;case"string":if(K.length<659)return!0;if(K.length>gB)throw new Error("Primary key size is too large: "+K.length);break;case"object":if(K===null)throw new Error("Invalid primary key of null");break;case"bigint":if(K<2n**64n&&K>-(2n**64n))return!0;break;default:throw new Error("Invalid primary key type: "+typeof K)}if((0,Jc.writeKey)(K,Fee,0)>gB)throw new Error("Primary key size is too large: "+K.length);return!0}a(Ir,"checkValidId");function Pn(K,m,y,L,C){if(De.getResidencyById&&y.ensureLoaded&&m?.replicateFrom!==!1){let w=oc(De.getResidencyById(K));if(w&&!w.includes(server.hostname)&&O)return O({key:K,residency:w}).then(C)}let A=a(()=>{if(m?.transaction?.stale&&(m.transaction.stale=!1),y.transaction?.isDone)return C(null,K);let w=i.getEntry(K,y);return w?.residencyId&&w.metadataFlags&un&&O&&y.ensureLoaded&&m?.replicateFrom!==!1?O(w).then(b=>C(b,K),b=>(xe.default.error?.("Error loading remote record",K,w,y,b),C(null,K))):(w&&m&&(w?.version>(m.lastModified||0)&&(m.lastModified=w.version),w?.localTime&&!m.lastRefreshed&&(m.lastRefreshed=w.localTime)),C(w,K))},"whenPrefetched");return L?A():ie>0?(ie--,A()):new Promise((w,b)=>{ie===0?(ie--,i.prefetch([K],()=>{I(),x()})):(ne.push(K),le.push(x),ne.length>qd&&(ie--,I()));function I(){if(ne.length>0){let N=le;i.prefetch(ne,()=>{ie===-1?I():ie++;for(let H of N)H()}),ne=[],le=[],Re>2&&Re--}else ie=Re,Re<Sp&&Re++}a(I,"prefetch");function x(){try{w(A())}catch(N){b(N)}}a(x,"load")})}a(Pn,"loadLocalRecord");function sc(K){if(!K?.role)return;let m=K.role.permission;if(m.super_user)return Gee;let y=m[c],L,C=y?.tables;if(C)return C[s];if(c==="data"&&(L=m[s])&&!L.tables)return L}a(sc,"getTablePermissions");function sn(K,m,y,L){if(v){let C=!1;if(y.noCache?C=!0:(m?(!m.value||m.metadataFlags&(un|ta)||m.expiresAt!=null&&m.expiresAt<Date.now())&&(C=!0):C=!0,Yn(!C,"cache-hit",s)),C){let A=Kd(K,m,y).then(w=>(w?.value&&w?.value.getRecord?.()&&xe.default.error?.("Can not assign a record that is already a resource"),y&&(w?.version>(y.lastModified||0)&&(y.lastModified=w.version),y.lastRefreshed=Date.now()),w));if(y?.onlyIfCached||m?.value&&L?.allowStaleWhileRevalidate?.(m,K)){if(A.catch(w=>xe.default.warn?.(w)),y?.onlyIfCached&&!L.doesExist())throw new br.ServerError("Entry is not cached",504);return}else return A}}else if(m?.value&&m.expiresAt!=null&&m.expiresAt<Date.now())return De.evict(m.key,m.value,m.version),m.value=null,{then(C){return C(m)}}}a(sn,"ensureLoadedFromSource");function Cr(K){let m=K?.transaction;if(m){if(!m.lmdbDb)return m.lmdbDb=i,m;do{if(m.lmdbDb?.path===i.path)return m;let y=m.next;if(!y)return m=m.next=new dc,m.lmdbDb=i,m;m=y}while(!0)}else return new qp}a(Cr,"txnForContext");function ic(K,m,y){if(!K)return;let L=K.value||i.getEntry(K.key)?.value;if(typeof m=="object"){let A=wr,w=L;for(let b=0,I=m.length;b<I;b++){let x=m[b],N=A?.[x];w=N&&w?N(w,y,!0)?.value:w?.[x],A=N?.definition?.tableClass?.propertyResolvers}return w}let C=wr[m];return C?C(L,y):L[m]}a(ic,"getAttributeValue");function Vd(K,m,y,L,C){let A=C?.length,w={transaction:L,lazy:A>0||typeof m=="string"||m?.length<4,alwaysPrefetch:!0},b;function I(x,N){let H=x?.value;if(!H)return Ea.SKIP;for(let U=0;U<A;U++)if(!b?.includes(U)&&!C[U](H,x))return Ea.SKIP;return N!==void 0&&(x.key=N),x}if(a(I,"processEntry"),A>0||!K.hasEntries){let x=K.map(N=>{if(b=null,typeof N=="object"&&N?.key!==void 0)return A>0?I(N):N;if(N==null)return Ea.SKIP;for(let H=0;H<A;H++){let Q=C[H].idFilter;if(Q){if(!Q(N))return Ea.SKIP;b||(b=[]),b.push(H)}}return Pn(N,y,w,!1,I)});return Array.isArray(K)&&(x=x.filter(N=>N!==Ea.SKIP)),x.hasEntries=!0,x}return K}a(Vd,"transformToEntries");function Yo(K,m,y=server.replication?.getThisNodeId(l)){if(K<=m?.version){if(m?.version===K&&y!==void 0){let L=server.replication?.exportIdMapping(l),C=m.localTime,A=C&&l.get(C);if(A){let w,b,I=It(A);for(let x in L)L[x]===y&&(w=x),L[x]===I.nodeId&&(b=x);if(w>b)return 1;if(w===b)return 0}}return-1}return 1}a(Yo,"precedesExistingVersion");async function Kd(K,m,y){let L=m?.metadataFlags,C=m?.version,A,w;if(!i.attemptLock(K,C,()=>{clearTimeout(w);let N=i.getEntry(K);!N||!N.value||N.metadataFlags&(un|ta)?A(Kd(K,i.getEntry(K),y)):A(N)}))return new Promise(N=>{A=N,w=setTimeout(()=>{i.unlock(K,C)},Hee)});let b=m?.value,I={requestContext:y,replacingRecord:b,replacingEntry:m,replacingVersion:C,noCacheStore:!1,source:null,resourceCache:y?.resourceCache},x=y?.responseHeaders;return new Promise((N,H)=>{let U;bb(wt(I,async Q=>{let J=performance.now(),k,Ce,de;try{for(let ue of De.sources)if(ue.get&&(!ue.get.reliesOnPrototype||ue.prototype.get)){if(ue.available?.(m)===!1)continue;if(I.source=ue,k=await ue.get(K,I),k)break}de=L&un;let Y=I.lastModified||de&&C;Ce=de||Y>C||!b,Y||(Y=(0,b_.getNextMonotonicTime)());let V=performance.now()-J;if(Lt(V,"cache-resolution",s,null,"success"),x&&OE(x,"Server-Timing",`cache-resolve;dur=${V.toFixed(2)}`,!0),Q.timestamp=Y,p&&I.expiresAt==null&&(I.expiresAt=Date.now()+p),k){if(typeof k!="object")throw new Error("Only objects can be cached and stored in tables");if(k.status>0&&k.headers)if(k.status>=300)if(k.status===304)k=b,Y=C;else throw new br.ServerError(k.body||"Error from source",k.status);else k=k.body;typeof k.toJSON=="function"&&(k=k.toJSON()),t&&k[t]!==K&&(k[t]=K)}U=!0,N({key:K,version:Y,value:k})}catch(Y){Y.message+=` while resolving record ${K} for ${s}`,b&&((Y.code==="ECONNRESET"||Y.code==="ECONNREFUSED"||Y.code==="EAI_AGAIN")&&!y?.mustRevalidate||y?.staleIfError&&(Y.statusCode===500||Y.statusCode===502||Y.statusCode===503||Y.statusCode===504))?(N({key:K,version:C,value:b}),xe.default.trace?.(Y.message,"(returned stale record)")):H(Y);let V=performance.now()-J;Lt(V,"cache-resolution",s,null,"fail"),x&&OE(x,"Server-Timing",`cache-resolve;dur=${V.toFixed(2)}`,!0),I.transaction.abort();return}if(y?.noCacheStore||I.noCacheStore){I.transaction.abort();return}Cr(I).addWrite({key:K,store:i,entry:m,nodeName:"source",commit:a((Y,V)=>{if(V?.version!==C)return;let ue=Wi(K,b,k);if(k){Ae.put?.(I,K,k),V&&(y.previousResidency=De.getResidencyRecord(V.residencyId));let _e,me=!1,Te,Pe=oc(De.getResidency(k,y));if(Pe){if(!Pe.includes(server.hostname))if(_e=k,me=!0,De.getResidencyById)k=void 0;else{k=null;for(let Ve in r)k||(k={}),k[Ve]=_e[Ve]}Te=ac(Pe)}xe.default.trace?.(`Writing resolved record from source with id: ${K}, timestamp: ${new Date(Y).toISOString()}`),T(K,k,V,Y,me?un:0,g&&(Ce||me)||null,{user:I?.user,expiresAt:I.expiresAt,residencyId:Te},"put",!!de,_e)}else V&&(Ae.delete?.(I,K),xe.default.trace?.(`Deleting resolved record from source with id: ${K}, timestamp: ${new Date(Y).toISOString()}`),g||R?T(K,null,V,Y,0,g&&Ce||null,{user:I?.user},"delete",!!de):yc(i,V,C))},"commit")})}),()=>{i.unlock(K,C)},Q=>{i.unlock(K,C),U&&xe.default.error?.("Error committing cache update",Q)})})}a(Kd,"getFromSource");function Wo(K){if(!K||K.user?.role?.permission?.super_user)return!0;if(K.replicateTo)throw new br.ClientError("Can not specify replication parameters without super user permissions",403);if(K.replicatedConfirmation)throw new br.ClientError("Can not specify replication confirmation without super user permissions",403);return!0}a(Wo,"checkContextPermissions");function zo(K){let m=!1;if(K&&(K-dt>1&&(m=!0),dt=K),!(Bt===Cn&&!m)&&(Cn=Bt,(0,jc.getWorkerIndex)()===(0,jc.getWorkerCount)()-1))return nn&&clearTimeout(nn),Bt?new Promise(y=>{let L=new Date;L.setMonth(0),L.setDate(1),L.setHours(0),L.setMinutes(0),L.setSeconds(0);let C=Bt/(1+dt),A=m?Date.now():Math.ceil((Date.now()-L.getTime())/C)*C+L.getTime(),w=a(b=>{xe.default.trace?.(`Scheduled next cleanup scan at ${new Date(b)}`),nn=setTimeout(()=>q=q.then(async()=>{if(w(Math.max(b+Bt,Date.now())),i.rootStore.status!=="open"){clearTimeout(nn);return}let I=50,x=new Array(I),N=0,H=Math.pow(dt,8)*(Qc.get(B.STORAGE_RECLAMATION_EVICTIONFACTOR)??1e5),U=S/Math.pow(Math.max(dt,1),4);xe.default.info?.(`Starting cleanup scan for ${s}, evict threshold ${H}, adjusted eviction ${U}ms`);function Q(J,k,Ce,de){let ye=J+U-Date.now();if(ye<0)return!0;if(dt){let Y=i.lastSize;return Ce&_n&&Xl(de,V=>{V.size&&(Y+=V.size)}),xe.default.trace?.(`shouldEvict adjusted ${ye} ${Y}, ${ye*(J-k)/Y} < ${H}`),ye*(J-k)/Y<H}return!1}a(Q,"shouldEvict");try{let J=0;for(let k of i.getRange({start:!1,snapshot:!1,versions:!0,lazy:!0})){let{key:Ce,value:de,version:ye,expiresAt:Y,metadataFlags:V}=k,ue;de===null&&!g&&ye+Bee<Date.now()?ue=yc(i,k,ye):Y!=null&&Q(Y,ye,V,de)&&(ue=De.evict(Ce,de,ye),J++),ue&&(await x[N],x[N]=ue.catch(_e=>{xe.default.error?.("Cleanup error",_e)}),++N>=I&&(N=0)),await ma()}xe.default.info?.(`Finished cleanup scan for ${s}, evicted ${J} entries`)}catch(J){xe.default.warn?.(`Error in cleanup scan for ${s}:`,J)}y(void 0),dt=0}),Math.min(b-Date.now(),2147483647)).unref()},"startNextTimer");w(A)}):void 0}a(zo,"scheduleCleanup");function Tp(){z=l?.addDeleteRemovalCallback(n,i,(K,m)=>{i.remove(K,m)})}a(Tp,"addDeleteRemoval");function Yd(){(0,jc.getWorkerIndex)()===0&&setInterval(async()=>{if(!nc){nc=!0;try{let K=se.name,m=r[K];if(!m)throw new Error(`expiresAt attribute ${se} must be indexed`);for(let y of m.getRange({start:!0,values:!1,end:Date.now(),snapshot:!1})){for(let L of m.getValues(y)){let C=i.getEntry(L);C?.value?C.value[K]<Date.now()&&De.evict(L,C.value,C.version):i.ifVersion(L,C?.version,()=>m.remove(y,L))}await ma()}}catch(K){xe.default.error?.("Error in evicting old records",K)}finally{nc=!1}}},xee).unref()}a(Yd,"runRecordExpirationEviction");function oc(K){if(K!=null){if(Array.isArray(K))return K;if(typeof K=="number"){if(K>=65536)throw new Error(`Shard id ${K} must be below 65536`);let m=server.shards?.get?.(K);if(m)return xe.default.trace?.(`Shard ${K} mapped to ${m.map(y=>y.name).join(", ")}`),m.map(y=>y.name);throw new Error(`Shard ${K} is not defined`)}throw new Error(`Shard or residency list ${K} is not a valid type, must be a shard number or residency list of node hostnames`)}}a(oc,"residencyFromFunction");function ac(K){if(K){let m=K.join(","),y=f.get([Symbol.for("residency_by_set"),m]);return y||(f.put([Symbol.for("residency_by_set"),m],y=Math.floor(Math.random()*2147418112)+65535),f.put([Symbol.for("residency_by_id"),y],K),y)}}a(ac,"getResidencyId")}function yb(e,t){let r=e.attr_object||(e.attr_object={}),n=r[t];if(n)return n;n=r[t]=Object.create(null);for(let s of e)n[s.attribute_name]=s[t];return n}function TB(){}function qee(e){OB=e}function IE(e,t){let r=t?.type;if(e===null)return e;if(e===""&&r&&r!=="String"&&r!=="Any")return null;try{switch(r){case"Int":case"Long":if(e[0]==="$")return NE(parseInt(e.slice(1),36));if(e==="null")return null;if(!/^-?[0-9]+$/.test(e)&&!(e instanceof Date))throw new SyntaxError;return NE(+e);case"Float":return e==="null"?null:NE(+e);case"BigInt":return e==="null"?null:BigInt(e);case"Boolean":return e==="true"?!0:e==="false"?!1:e;case"Date":if(isNaN(e)){if(e==="null")return null;$ee.test(e)||(e+="Z");let n=new Date(e);return NE(n.getTime()),n}return new Date(+e);case void 0:case"Any":return(0,CE.autoCast)(e);default:return e}}catch(n){throw n.message=`Invalid value for attribute ${t.name}: "${e}", expecting ${r}`,n.statusCode=400,n}}function NE(e){if(isNaN(e))throw new SyntaxError;return e}function AB(e,t){if(e==null)return!0;if(!Array.isArray(t))return e===t||t.startsWith?.(e);if(Array.isArray(e)){let r=e.length;if(e[r-1]===null&&r--,t.length>=r){for(let n=0;n<r;n++)if(t[n]!==e[n])return!1;return!0}return!1}else if(t[0]===e)return!0}function bb(e,t,r){return e?.then?e.then(t,r):t(e)}function RB(e){return e!=null}function Es(e){try{return JSON.stringify(e)}catch{return e}}function Vee(e){let t=process.pid;return e.env.readerList().slice(1).some(r=>+r.match(/\d+/)?.[0]!=t)}var Ea,b_,yB,bB,Qc,br,O_,N_,xe,Jc,jc,CE,wE,Uee,OB,xee,Bee,mB,Hee,EB,kee,un,ta,Fee,gB,SB,Gee,ZNe,$ee,ma,pf=be(()=>{G();Ea=require("lmdb"),b_=M(an()),yB=require("lodash"),bB=M(lf());ra();$p();Qc=M(ce());mR();br=M(he()),O_=M(ao()),N_=M(Gs());Ue();hf();xe=M(pi());Cy();fc();Jc=require("ordered-binary"),jc=M(st());no();CE=M(oe());eu();Ii();Sm();y_();wE=M(require("node:fs"));ds();ym();Uee=new Uint8Array(9);Uee[8]=192;xee=6e4,Bee=864e5;Qc.initSync();mB=Qc.get(B.STORAGE_PREFETCHWRITES),Hee=1e4,EB=1,kee=2,un=1,ta=8,Fee=Buffer.allocUnsafeSlow(8192),gB=1978,SB=100,Gee={read:!0,insert:!0,update:!0,delete:!0,isSuperUser:!0},ZNe=(0,CE.convertToMS)(Qc.get(B.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE))||864e5;a(PE,"makeTable");a(yb,"attributesAsObject");a(TB,"noop");a(qee,"setServerUtilities");$ee=/[+-][0-9]{2}:[0-9]{2}|[a-zA-Z]$/;a(IE,"coerceType");a(NE,"rejectNaN");a(AB,"isDescendantId");ma=a(()=>new Promise(setImmediate),"rest");a(bb,"when");a(RB,"exists");a(Es,"stringify");a(Vee,"hasOtherProcesses")});var ct={};Be(ct,{database:()=>uu,database_envs:()=>mo,databases:()=>Ye,dropDatabase:()=>vy,dropTableMeta:()=>jee,getDatabases:()=>Xe,getDefaultCompression:()=>xE,getTables:()=>Kee,onRemovedDB:()=>L_,onUpdatedTable:()=>Zc,readMetaDb:()=>w_,resetDatabases:()=>Ru,table:()=>_t,tables:()=>zn});function Kee(){return vE||Xe(),zn||{}}function Xe(){if(vE)return Ye;vE=!0,Tu=new Map;let e=(0,jt.getHdbBasePath)()&&(0,Mt.join)((0,jt.getHdbBasePath)(),lc),t=(0,jt.get)(B.DATABASES)||{};if(process.env.SCHEMAS_DATA_PATH&&(t.data={path:process.env.SCHEMAS_DATA_PATH}),e=process.env.STORAGE_PATH||(0,jt.get)(B.STORAGE_PATH)||e&&((0,Wn.existsSync)(e)?e:(0,Mt.join)((0,jt.getHdbBasePath)(),wp)),!e)return;if((0,Wn.existsSync)(e))for(let n of(0,Wn.readdirSync)(e,{withFileTypes:!0})){let s=(0,Mt.basename)(n.name,".mdb");n.isFile()&&(0,Mt.extname)(n.name).toLowerCase()===".mdb"&&!t[s]?.path&&w_((0,Mt.join)(e,n.name),null,s)}if((0,Wn.existsSync)((0,Su.getBaseSchemaPath)())){for(let n of(0,Wn.readdirSync)((0,Su.getBaseSchemaPath)(),{withFileTypes:!0}))if(!n.isFile()){let s=(0,Mt.join)((0,Su.getBaseSchemaPath)(),n.name),i=(0,Mt.join)((0,Su.getTransactionAuditStoreBasePath)(),n.name);for(let o of(0,Wn.readdirSync)(s,{withFileTypes:!0}))if(o.isFile()&&(0,Mt.extname)(o.name).toLowerCase()===".mdb"){let c=(0,Mt.join)(i,o.name);w_((0,Mt.join)(s,o.name),(0,Mt.basename)(o.name,".mdb"),n.name,c,!0)}}}if(t)for(let n in t){let s=t[n],i=s.path;if((0,Wn.existsSync)(i))for(let c of(0,Wn.readdirSync)(i,{withFileTypes:!0}))c.isFile()&&(0,Mt.extname)(c.name).toLowerCase()===".mdb"&&w_((0,Mt.join)(i,c.name),(0,Mt.basename)(c.name,".mdb"),n);let o=s.tables;if(o)for(let c in o){let l=o[c],u=(0,Mt.join)(l.path,(0,Mt.basename)(c+".mdb"));(0,Wn.existsSync)(u)&&w_(u,c,n,null,!0)}}for(let n in Ye){let s=Tu.get(n);if(s){let i=Ye[n];n.includes("delete")&&vt.trace(`defined tables ${Array.from(s.keys())}`);for(let o in i)s.has(o)||(vt.trace(`delete table class ${o}`),delete i[o])}else if(delete Ye[n],n==="data"){for(let i in zn)delete zn[i];delete zn[UE]}}let r=["hdb_temp","hdb_certificate","hdb_analytics","hdb_raw_analytics","hdb_session_will","hdb_job","hdb_license","hdb_info"];if(Ye.system)for(let n of r)Ye.system[n]&&(Ye.system[n].replicate=!1);return Tu=null,Ye}function Ru(){vE=!1;for(let[,e]of mo)e.needsDeletion=!0;Xe();for(let[e,t]of mo)t.needsDeletion&&!e.endsWith("system.mdb")&&(t.close(),mo.delete(e),delete Ye[t.databaseName],C_.forEach(r=>r(t.databaseName)));return Ye}function w_(e,t,r=Ib,n,s){let i=new Nb.default(e,!1);try{let o=mo.get(e);o?o.needsDeletion=!1:(o=(0,Au.open)(i),mo.set(e,o));let c=new Xc.default(!1),l=o.dbisDb||(o.dbisDb=o.openDB(DE.INTERNAL_DBIS_NAME,c)),u=o.auditStore;u||(n?(0,Wn.existsSync)(n)&&(i.path=n,u=(0,Au.open)(i),u.isLegacy=!0):u=Nm(o));let f=CB(r),d=f[UE],h=new Map;for(let{key:_,value:p}of l.getRange({start:!1})){let[S,g]=_.toString().split("/");g===""?g=p.name:g||(g=S,S=t,p.name||(p.name=g,p.indexed=!p.is_hash_attribute)),d?.add(S);let R=h.get(S);R||h.set(S,R={attributes:[]}),(g==null||p.is_hash_attribute)&&(R.primary=p),g!=null&&R.attributes.push(p),Object.defineProperty(p,"key",{value:_,configurable:!0})}for(let[_,p]of h){let{attributes:S,primary:g}=p;if(!g){for(let ie of S)if(ie.is_hash_attribute||ie.isPrimaryKey){g=ie;break}if(!g){vt.warn(`Unable to find a primary key attribute on table ${_}, with attributes: ${JSON.stringify(S)}`);continue}}let R=f[_],E={},T=[],O,v,F=typeof g.audit=="boolean"?g.audit:(0,jt.get)(B.LOGGING_AUDITLOG),q=g.trackDeletes,j=g.expiration,te=g.eviction,se=g.sealed,z=g.splitSegments,ne=g.replicate;if(R)E=R.indices,T=R.attributes,R.schemaVersion++;else{O=g.tableId,O?O>=(l.get(gu)||0)&&(l.putSync(gu,O+1),vt.info(`Updating next table id (it was out of sync) to ${O+1} for ${_}`)):(g.tableId=O=l.get(gu),O||(O=1),vt.debug("Table {table_name} missing an id, assigning {table_id}"),l.putSync(gu,O+1),l.putSync(g.key,g));let ie=new Xc.default(!g.is_hash_attribute,g.is_hash_attribute);if(ie.compression=g.compression,ie.compression){let Re=(0,jt.get)(B.STORAGE_COMPRESSION_THRESHOLD)||IB;ie.compression.threshold=Re}v=mm(o.openDB(g.key,ie),o),o.databaseName=r,v.tableId=O}let le;for(let ie of S){ie.attribute=ie.name;try{if(!ie.is_hash_attribute&&(ie.indexed||ie.attribute&&!ie.name)){if(!E[ie.name]){let pe=new Xc.default(!ie.is_hash_attribute,ie.is_hash_attribute);E[ie.name]=o.openDB(ie.key,pe),E[ie.name].indexNulls=ie.indexNulls}let Re=T.find(pe=>pe.name===ie.name);Re?T.splice(T.indexOf(Re),1,ie):T.push(ie),le=!0}}catch(Re){vt.error("Error trying to update attribute",ie,T,E,Re)}}for(let ie of T)if(!S.find(pe=>pe.name===ie.name)){if(ie.is_hash_attribute){vt.error("Unable to remove existing primary key attribute",ie);continue}ie.indexed&&(T.splice(T.indexOf(ie),1),le=!0)}if(R)le&&(R.schemaVersion++,R.updatedAttributes());else{R=PB(f,_,PE({primaryStore:v,auditStore:u,audit:F,sealed:se,splitSegments:z,replicate:ne,expirationMS:j&&j*1e3,evictionMS:te&&te*1e3,trackDeletes:q,tableName:_,tableId:O,primaryKey:g.name,databasePath:s?r+"/"+_:r,databaseName:r,indices:E,attributes:S,schemaDefined:g.schemaDefined,dbisDB:l})),R.schemaVersion=1;for(let ie of I_)ie(R)}}return o}catch(o){throw o.message+=` opening database ${e}`,o}}function CB(e){let t=Ye[e];if(t||(e==="data"?t=Ye[e]=zn:e==="system"?Object.defineProperty(Ye,"system",{value:t=Object.create(null),configurable:!0}):t=Ye[e]=Object.create(null)),Tu&&!Tu.has(e)){let r=new Set;t[UE]=r,Tu.set(e,r)}return t}function PB(e,t,r){return e[t]=r,r}function uu({database:e,table:t}){e||(e=Ib),Xe();let r=CB(e),n=(0,Mt.join)((0,jt.getHdbBasePath)(),lc),s=(0,jt.get)(B.DATABASES)||{};process.env.SCHEMAS_DATA_PATH&&(s.data={path:process.env.SCHEMAS_DATA_PATH});let i=t&&s[e]?.tables?.[t]?.path;n=i||s[e]?.path||process.env.STORAGE_PATH||(0,jt.get)(B.STORAGE_PATH)||((0,Wn.existsSync)(n)?n:(0,Mt.join)((0,jt.getHdbBasePath)(),wp));let o=(0,Mt.join)(n,(i?t:e)+".mdb"),c=mo.get(o);if(!c||c.status==="closed"){let l=new Nb.default(o,!1);c=(0,Au.open)(l),mo.set(o,c)}return c.auditStore||(c.auditStore=Nm(c)),c}async function vy(e){if(!Ye[e])throw new Error("Schema does not exist");let t=Ye[e],r;for(let n in t)r=t[n].primaryStore.rootStore,mo.delete(r.path),r.status==="open"&&(await r.close(),await P_.remove(r.path));if(r||(r=uu({database:e,table:null}),r.status==="open"&&(await r.close(),await P_.remove(r.path))),e==="data"){for(let n in zn)delete zn[n];delete zn[UE]}delete Ye[e],C_.forEach(n=>n(e)),await YA(r)}function _t(e){let{table:t,database:r,expiration:n,eviction:s,scanInterval:i,attributes:o,audit:c,sealed:l,splitSegments:u,replicate:f,trackDeletes:d,schemaDefined:h,origin:_}=e;r||(r=Ib);let p=uu({database:r,table:t}),S=Ye[r];vt.trace(`Defining ${t} in ${r}`);let g=S?.[t];if(p.status==="closed")throw new Error(`Can not use a closed data store for ${t}`);let R,E,T;h==null&&(h=!0);let O=new Xc.default(!1);for(let z of o)z.attribute&&!z.name?(z.name=z.attribute,z.indexed=!0):z.attribute=z.name,z.expiresAt&&(z.indexed=!0);let v,F;if(g){if(R=g.primaryKey,g.primaryStore.rootStore.status==="closed")throw new Error(`Can not use a closed data store from ${t} class`);u==null&&(u=g.splitSegments),g.attributes.splice(0,g.attributes.length,...o)}else{let z=p.auditStore;E=o.find(Re=>Re.isPrimaryKey)||{},R=E.name,E.is_hash_attribute=E.isPrimaryKey=!0,E.schemaDefined=h,E.compression=xE(),d&&(E.trackDeletes=!0),c=E.audit=typeof c=="boolean"?c:(0,jt.get)(B.LOGGING_AUDITLOG),n&&(E.expiration=n),s&&(E.eviction=s),u??=!1,E.splitSegments=u,typeof l=="boolean"&&(E.sealed=l),typeof f=="boolean"&&(E.replicate=f),_&&(E.origins?E.origins.includes(_)||E.origins.push(_):E.origins=[_]),vt.trace(`${t} table loading, opening primary store`);let ne=new Xc.default(!1,!0);ne.compression=E.compression;let le=t+"/";if(T=p.dbisDb=p.openDB(DE.INTERNAL_DBIS_NAME,O),se(),T.get(le))return F&&F(),Ru(),_t(e);let ie=mm(p.openDB(le,ne),p);p.databaseName=r,ie.tableId=T.get(gu),vt.trace(`Assigning new table id ${ie.tableId} for ${t}`),ie.tableId||(ie.tableId=1),T.put(gu,ie.tableId+1),E.tableId=ie.tableId,g=PB(S,t,PE({primaryStore:ie,auditStore:z,audit:c,sealed:l,splitSegments:u,replicate:f,trackDeletes:d,expirationMS:n&&n*1e3,evictionMS:s&&s*1e3,primaryKey:R,tableName:t,tableId:ie.tableId,databasePath:r,databaseName:r,indices:{},attributes:o,schemaDefined:h,dbisDB:T})),g.schemaVersion=1,v=!0,T.put(le,E)}let q=g.indices;T=T||(p.dbisDb=p.openDB(DE.INTERNAL_DBIS_NAME,O)),g.dbisDB=T;let j=[];for(let{key:z,value:ne}of T.getRange({start:!0})){let[le,ie]=z.toString().split("/");if(ie===""&&(ie=ne.name),ie){if(le!==t)continue}else continue;let Re=o.find(Ae=>Ae.name===ie),pe=!Re?.indexed&&ne.indexed&&!ne.isPrimaryKey;if((!Re||pe)&&(se(),v=!0,Re||T.remove(z),pe)){let Ae=g.indices[le];Ae&&j.push(Ae)}}let te=[];try{for(let z of o||[]){if((z.relationship||z.computed)&&(v=!0,z.relationship))continue;let ne=t+"/"+(z.name||"");Object.defineProperty(z,"key",{value:ne,configurable:!0});let le=T.get(ne);if(z.isPrimaryKey){if(le=le||T.get(ne=t+"/")||{},c!==void 0&&c!==g.audit||l!==void 0&&l!==g.sealed||f!==void 0&&f!==g.replicate||(+n||void 0)!==(+le.expiration||void 0)||(+s||void 0)!==(+le.eviction||void 0)||z.type!==le.type){let Re={...le};typeof c=="boolean"&&(c&&g.enableAuditing(c),Re.audit=c),n&&(Re.expiration=+n),s&&(Re.eviction=+s),l!==void 0&&(Re.sealed=l),f!==void 0&&(Re.replicate=f),z.type&&(Re.type=z.type),v=!0,se(),T.put(ne,Re)}continue}le?.attribute&&!le.name&&(le.indexed=!0);let ie=!le||le.type!==z.type||le.indexed!==z.indexed||le.nullable!==z.nullable||le.version!==z.version||JSON.stringify(le.properties)!==JSON.stringify(z.properties)||JSON.stringify(le.elements)!==JSON.stringify(z.elements);if(z.indexed){let Re=new Xc.default(!0,!1),pe=p.openDB(ne,Re);(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<D_.workerData?.restartNumber)&&(v=!0,se(),le=T.get(ne),(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<D_.workerData?.restartNumber)&&(v=!0,z.indexNulls===void 0&&(z.indexNulls=!0),g.primaryStore.getStats().entryCount>0&&(z.lastIndexedKey=le?.lastIndexedKey??void 0,z.indexingPID=process.pid,pe.isIndexing=!0,Object.defineProperty(z,"dbi",{value:pe}),te.push(z))),T.put(ne,z)),le?.indexNulls&&z.indexNulls===void 0&&(z.indexNulls=!0),pe.indexNulls=z.indexNulls,q[z.name]=pe}else ie&&(v=!0,se(),T.put(ne,z))}}finally{F&&F()}if(v&&(g.schemaVersion++,g.updatedAttributes()),vt.trace(`${t} table loading, running index`),te.length>0||j.length>0?g.indexingOperation=zee(g,te,j):v&&LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"schema-change",g.databaseName,g.tableName)),g.origin=_,v)for(let z of I_)z(g,_!=="cluster");return(n||s||i)&&g.setTTLExpiration({expiration:n,eviction:s,scanInterval:i}),vt.trace(`${t} table loaded`),g;function se(){F||p.transactionSync(()=>({then(z){F=z}}))}a(se,"startTxn")}async function zee(e,t,r){try{vt.info(`Indexing ${e.tableName} attributes`,t);let n=e.schemaVersion;await LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"schema-change",e.databaseName,e.tableName));let s;for(let u of r)s=u.drop();let i,o={},c=0,l=t.length;if(await new Promise(u=>setImmediate(u)),l>0){let u;for(let d of t)(0,Au.compareKeys)(d.lastIndexedKey,u)<0&&(u=d.lastIndexedKey),d.lastIndexedKey==null&&d.dbi.clearAsync();let f=0;for(let{key:d,value:h,version:_}of e.primaryStore.getRange({start:u,lazy:l<4,versions:!0,snapshot:!1}))if(h){if(f++,s=e.primaryStore.ifVersion(d,_,()=>{for(let p=0;p<l;p++){let S=t[p],g=S.name;try{let R=S.resolve,E=h&&(R?R(h):h[g]),T=(0,NB.getIndexedValues)(E);if(T)for(let O=0,v=T.length;O<v;O++)S.dbi.put(T[O],d)}catch(R){o[g]||(o[g]=!0,vt.error(`Error indexing attribute ${g}`,R))}}}),s.then(()=>f--,p=>{f--,vt.error(p)}),D_.workerData&&D_.workerData.restartNumber!==wB.restartNumber&&(i=!0),++c%100===0||i){for(let p of t)p.lastIndexedKey=d,e.dbisDB.put(p.key,p);if(i)return}f>Yee?await s:f>Wee&&await new Promise(p=>setImmediate(p))}for(let d of t)delete d.lastIndexedKey,delete d.indexingPID,d.dbi.isIndexing=!1,s=e.dbisDB.put(d.key,d)}await s,await LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"indexing-finished",e.databaseName,e.tableName)),vt.info(`Finished indexing ${e.tableName} attributes`,t)}catch(n){vt.error("Error in indexing",n)}}function jee({table:e,database:t}){let r=uu({database:t,table:e}),n=[],s=r.dbisDb;for(let i of s.getKeys({start:e+"/",end:e+"0"}))n.push(s.remove(i));return Promise.all(n)}function Zc(e){return I_.push(e),{remove(){let t=I_.indexOf(e);t>-1&&I_.splice(t,1)}}}function L_(e){return C_.push(e),{remove(){let t=C_.indexOf(e);t>-1&&C_.splice(t,1)}}}function xE(){let e=(0,jt.get)(B.STORAGE_COMPRESSION),t=(0,jt.get)(B.STORAGE_COMPRESSION_DICTIONARY),r=(0,jt.get)(B.STORAGE_COMPRESSION_THRESHOLD)||IB,n={startingOffset:32};return t&&(n.dictionary=P_.readFileSync(t)),r&&(n.threshold=r),e&&n}var jt,DE,Au,Mt,Wn,Su,Xc,Nb,P_,wb,NB,LE,ME,D_,vt,wB,Ib,UE,IB,zn,Ye,gu,I_,C_,vE,mo,Tu,Yee,Wee,Ue=be(()=>{jt=M(ce()),DE=M(Ft()),Au=require("lmdb"),Mt=require("path"),Wn=require("fs"),Su=M(gt());pf();Xc=M(xf()),Nb=M(Bf());G();P_=M(require("fs-extra")),wb=M(ui()),NB=M(an()),LE=M(ao()),ME=M(Gs()),D_=require("worker_threads"),vt=M(X()),wB=M(st());no();eu();ds();Ib="data",UE=Symbol("defined-tables"),IB=((0,jt.get)(B.STORAGE_PAGESIZE)||4096)-60;(0,jt.initSync)();zn=Object.create(null),Ye=Object.create(null);(0,wb._assignPackageExport)("databases",Ye);(0,wb._assignPackageExport)("tables",zn);gu=Symbol.for("next-table-id"),I_=[],C_=[],mo=new Map;a(Kee,"getTables");a(Xe,"getDatabases");a(Ru,"resetDatabases");a(w_,"readMetaDb");a(CB,"ensureDB");a(PB,"setTable");a(uu,"database");a(vy,"dropDatabase");a(_t,"table");Yee=1e3,Wee=10;a(zee,"runIndexing");a(jee,"dropTableMeta");a(Zc,"onUpdatedTable");a(L_,"onRemovedDB");a(xE,"getDefaultCompression")});var oe=P((uwe,VB)=>{"use strict";var ga=require("path"),UB=require("fs-extra"),An=X(),DB=require("fs-extra"),BE=require("os"),Qee=require("net"),Jee=require("recursive-iterator"),Er=(G(),D($)),{PACKAGE_ROOT:Xee}=Et(),Zee=gA(),LB=require("papaparse"),HE=require("moment"),{inspect:ete}=require("util"),MB=require("is-number"),lwe=require("lodash"),tte=require("minimist"),rte=require("https"),nte=require("http"),{hdb_errors:kE}=he(),ste=/^((\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d\.\d+([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z)))$/,xB=require("util").promisify(setTimeout),ite=100,ote=5,ate="",cte=4,vB={true:!0,TRUE:!0,FALSE:!1,false:!1,undefined:null,null:null,NULL:null,NaN:NaN};VB.exports={isEmpty:jn,isEmptyOrZeroLength:Ci,arrayHasEmptyValues:dte,arrayHasEmptyOrZeroLengthValues:fte,buildFolderPath:_te,isBoolean:BB,errorizeMessage:lte,stripFileExtension:pte,autoCast:mte,autoCastJSON:HB,autoCastJSONDeep:Pb,removeDir:Ete,compareVersions:gte,isCompatibleDataVersion:Ste,escapeRawValue:Tte,unescapeValue:Ate,stringifyProps:Rte,timeoutPromise:bte,isClusterOperation:Nte,getClusterUser:Ite,checkGlobalSchemaTable:wte,getHomeDir:FB,getPropsFilePath:yte,promisifyPapaParse:Cte,removeBOM:GB,createEventPromise:Pte,checkProcessRunning:Dte,checkSchemaTableExist:Lte,checkSchemaExists:qB,checkTableExists:$B,getStartOfTomorrowInSeconds:Mte,getLimitKey:vte,isObject:hte,isNotEmptyAndHasValue:ute,autoCasterIsNumberCheck:kB,backtickASTSchemaItems:Ute,isPortTaken:Ote,createForkArgs:xte,autoCastBoolean:Bte,async_set_timeout:xB,getTableHashAttribute:Hte,doesSchemaExist:kte,doesTableExist:Fte,stringifyObj:Gte,ms_to_time:qte,changeExtension:$te,getEnvCliRootPath:Db,noBootFile:Vte,httpRequest:Kte,transformReq:Yte,convertToMS:Wte,PACKAGE_ROOT:Xee};function lte(e){return e instanceof Error?e:new Error(e)}a(lte,"errorizeMessage");function jn(e){return e==null}a(jn,"isEmpty");function ute(e){return!jn(e)&&(e||e===0||e===""||BB(e))}a(ute,"isNotEmptyAndHasValue");function Ci(e){return jn(e)||e.length===0||e.size===0}a(Ci,"isEmptyOrZeroLength");function dte(e){if(jn(e))return!0;for(let t=0;t<e.length;t++)if(jn(e[t]))return!0;return!1}a(dte,"arrayHasEmptyValues");function fte(e){if(Ci(e))return!0;for(let t=0;t<e.length;t++)if(Ci(e[t]))return!0;return!1}a(fte,"arrayHasEmptyOrZeroLengthValues");function _te(...e){try{return e.join(ga.sep)}catch{console.error(e)}}a(_te,"buildFolderPath");function BB(e){return jn(e)?!1:e===!0||e===!1}a(BB,"isBoolean");function hte(e){return jn(e)?!1:typeof e=="object"}a(hte,"isObject");function pte(e){return Ci(e)?ate:e.slice(0,-cte)}a(pte,"stripFileExtension");function mte(e){return jn(e)||e===""||typeof e!="string"?e:vB[e]!==void 0?vB[e]:kB(e)===!0?Number(e):ste.test(e)?new Date(e):e}a(mte,"autoCast");function HB(e){if(typeof e=="string"&&(e.startsWith("{")&&e.endsWith("}")||e.startsWith("[")&&e.endsWith("]")))try{return JSON.parse(e)}catch{}return e}a(HB,"autoCastJSON");function Pb(e){if(e&&typeof e=="object"){if(Array.isArray(e))for(let t=0,r=e.length;t<r;t++){let n=e[t],s=Pb(n);s!==n&&(e[t]=s)}else for(let t in e){let r=e[t],n=Pb(r);n!==r&&(e[t]=n)}return e}else return HB(e)}a(Pb,"autoCastJSONDeep");function kB(e){if(e.startsWith("0.")&&MB(e))return!0;let t=e.toUpperCase().includes("E");return!!((e!=="0"&&e.startsWith("0"))===!1&&t===!1&&MB(e))}a(kB,"autoCasterIsNumberCheck");async function Ete(e){if(Ci(e))throw new Error(`Directory path: ${e} does not exist`);try{await DB.emptyDir(e),await DB.remove(e)}catch(t){throw An.error(`Error removing files in ${e} -- ${t}`),t}}a(Ete,"removeDir");function gte(e,t){if(Ci(e)){An.info("Invalid current version sent as parameter.");return}if(Ci(t)){An.info("Invalid upgrade version sent as parameter.");return}let r,n=/(\.0+)+$/,s=e.version?e.version:e,i=t.version?t.version:t,o=s.replace(n,"").split("."),c=i.replace(n,"").split("."),l=Math.min(o.length,c.length);for(let u=0;u<l;u++)if(r=parseInt(o[u],10)-parseInt(c[u],10),r)return r;return o.length-c.length}a(gte,"compareVersions");function Ste(e,t,r=!1){let n=e.toString().split("."),s=t.toString().split(".");return n[0]===s[0]&&(!r||n[1]===s[1])}a(Ste,"isCompatibleDataVersion");function Tte(e){if(jn(e))return e;let t=String(e);return t==="."?Er.UNICODE_PERIOD:t===".."?Er.UNICODE_PERIOD+Er.UNICODE_PERIOD:t.replace(Er.FORWARD_SLASH_REGEX,Er.UNICODE_FORWARD_SLASH)}a(Tte,"escapeRawValue");function Ate(e){if(jn(e))return e;let t=String(e);return t===Er.UNICODE_PERIOD?".":t===Er.UNICODE_PERIOD+Er.UNICODE_PERIOD?"..":String(e).replace(Er.ESCAPED_FORWARD_SLASH_REGEX,"/")}a(Ate,"unescapeValue");function Rte(e,t){if(jn(e))return An.info("Properties object is null"),"";let r="";return e.each(function(n,s){try{if(t&&t[n]){let i=t[n];for(let o of i)r+=";"+o+BE.EOL}!Ci(n)&&n[0]===";"?r+="	"+n+s+BE.EOL:Ci(n)||(r+=n+"="+s+BE.EOL)}catch{An.error(`Found bad property during upgrade with key ${n} and value: ${s}`)}}),r}a(Rte,"stringifyProps");function FB(){let e;try{e=BE.homedir()}catch{e=process.env.HOME}return e}a(FB,"getHomeDir");function yte(){let e=ga.join(FB(),Er.HDB_HOME_DIR_NAME,Er.BOOT_PROPS_FILE_NAME);return UB.existsSync(e)||(e=ga.join(__dirname,"../","hdb_boot_properties.file")),e}a(yte,"getPropsFilePath");function bte(e,t){let r,n;return n=new Promise(function(s){r=setTimeout(function(){s(t)},e)}),{promise:n,cancel:a(function(){clearTimeout(r)},"cancel")}}a(bte,"timeoutPromise");async function Ote(e){if(!e)throw new Error("Invalid port passed as parameter");return new Promise((t,r)=>{let n=Qee.createServer().once("error",s=>{s.code==="EADDRINUSE"?t(!0):r(s)}).once("listening",()=>n.once("close",()=>t(!1)).close()).listen(e)})}a(Ote,"isPortTaken");function Nte(e){try{return Er.CLUSTER_OPERATIONS[e.toLowerCase()]!==void 0}catch(t){An.error(`Error checking operation against cluster ops ${t}`)}return!1}a(Nte,"isClusterOperation");function wte(e,t){let r=(Ue(),D(ct)).getDatabases();if(!r[e])return kE.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e);if(!r[e][t])return kE.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(wte,"checkGlobalSchemaTable");function Ite(e,t){if(jn(t)){An.warn("No CLUSTERING_USER defined, clustering disabled");return}if(jn(e)||Ci(e)){An.warn("No users to search.");return}let r;try{let n=e.get(t);n&&n.role.permission.cluster_user===!0&&n.active===!0&&(r=n)}catch(n){An.error(`unable to find cluster_user due to: ${n.message}`);return}if(r===void 0){An.warn(`CLUSTERING_USER: ${t} not found or is not active.`);return}return r}a(Ite,"getClusterUser");function Cte(){LB.parsePromise=function(e,t,r){return new Promise(function(n,s){LB.parse(e,{header:!0,transformHeader:GB,chunk:t.bind(null,s),skipEmptyLines:!0,transform:r,dynamicTyping:!1,error:s,complete:n})})}}a(Cte,"promisifyPapaParse");function GB(e){if(typeof e!="string")throw new TypeError(`Expected a string, got ${typeof e}`);return e.charCodeAt(0)===65279?e.slice(1):e}a(GB,"removeBOM");function Pte(e,t,r){return new Promise(n=>{t.once(e,s=>{let i=r;An.info(`Got cluster status event response: ${ete(s)}`);try{i.cancel()}catch{An.error("Error trying to cancel timeout.")}n(s)})})}a(Pte,"createEventPromise");async function Dte(e){let t=!0,r=0;do await xB(ite*r++),(await Zee.findPs(e)).length>0&&(t=!1);while(t&&r<ote);if(t)throw new Error(`process ${e} was not started`)}a(Dte,"checkProcessRunning");function Lte(e,t){let r=qB(e);if(r)return r;let n=$B(e,t);if(n)return n}a(Lte,"checkSchemaTableExist");function qB(e){let{getDatabases:t}=(Ue(),D(ct));if(!t()[e])return kE.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(qB,"checkSchemaExists");function $B(e,t){let{getDatabases:r}=(Ue(),D(ct));if(!r()[e][t])return kE.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a($B,"checkTableExists");function Mte(){let e=HE().utc().add(1,"d").startOf("d").unix(),t=HE().utc().unix();return e-t}a(Mte,"getStartOfTomorrowInSeconds");function vte(){return HE().utc().format("DD-MM-YYYY")}a(vte,"getLimitKey");function Ute(e){try{let t=new Jee(e);for(let{node:r}of t)r&&(r.columnid&&typeof r.columnid!="string"&&(r.columnid=r.columnid.toString()),r.columnid&&!r.columnid.startsWith("`")&&(r.columnid_orig=r.columnid,r.columnid=`\`${r.columnid}\``),r.tableid&&!r.tableid.startsWith("`")&&(r.tableid_orig=r.tableid,r.tableid=`\`${r.tableid}\``),r.databaseid&&!r.databaseid.startsWith("`")&&(r.databaseid_orig=r.databaseid,r.databaseid=`\`${r.databaseid}\``),r.as&&typeof r.as=="string"&&!r.as.startsWith("[")&&(r.as_orig=r.as,r.as=`\`${r.as}\``))}catch(t){An.error("Got an error back ticking items."),An.error(t)}}a(Ute,"backtickASTSchemaItems");function xte(e){return[e]}a(xte,"createForkArgs");function Bte(e){return e===!0||typeof e=="string"&&e.toLowerCase()==="true"}a(Bte,"autoCastBoolean");function Hte(e,t){let{getDatabases:r}=(Ue(),D(ct)),n=r()[e]?.[t];return n?.primaryKey||n?.hash_attribute}a(Hte,"getTableHashAttribute");function kte(e){let{getDatabases:t}=(Ue(),D(ct));return t()[e]!==void 0}a(kte,"doesSchemaExist");function Fte(e,t){let{getDatabases:r}=(Ue(),D(ct));return r()[e]?.[t]!==void 0}a(Fte,"doesTableExist");function Gte(e){try{return JSON.stringify(e)}catch{return e}}a(Gte,"stringifyObj");function qte(e){let t=HE.duration(e),r=t.seconds()>0?t.seconds()+"s":"",n=t.minutes()>0?t.minutes()+"m ":"",s=t.hours()>0?t.hours()+"h ":"",i=t.days()>0?t.days()+"d ":"";return(t.years()>0?t.years()+"y ":"")+i+s+n+r}a(qte,"ms_to_time");function $te(e,t){let r=ga.basename(e,ga.extname(e));return ga.join(ga.dirname(e),r+t)}a($te,"changeExtension");function Db(){if(process.env[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()])return process.env[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()];let e=tte(process.argv);if(e[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()])return e[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()]}a(Db,"getEnvCliRootPath");var Cb;function Vte(){if(Cb)return Cb;let e=Db();if(Db()&&UB.pathExistsSync(ga.join(e,Er.HDB_CONFIG_FILE)))return Cb=!0,!0}a(Vte,"noBootFile");function Kte(e,t){let r;return e.protocol==="http:"?r=nte:r=rte,new Promise((n,s)=>{let i=r.request(e,o=>{o.setEncoding("utf8"),o.body="",o.on("data",c=>{o.body+=c}),o.on("end",()=>{n(o)})});i.on("error",o=>{s(o)}),i.write(t instanceof Buffer?t:JSON.stringify(t)),i.end()})}a(Kte,"httpRequest");function Yte(e){if(!e.schema&&!e.database){e.schema=Er.DEFAULT_DATABASE_NAME;return}e.database&&(e.schema=e.database)}a(Yte,"transformReq");function Wte(e){let t=0;if(typeof e=="number"&&(t=e),typeof e=="string")switch(t=parseFloat(e),e.slice(-1)){case"M":t*=86400*30;break;case"D":case"d":t*=86400;break;case"H":case"h":t*=3600;break;case"m":t*=60;break}return t*1e3}a(Wte,"convertToMS")});var ce=P((jB,QB)=>{"use strict";var Lb=require("fs-extra"),el=require("path"),KB=require("os"),zte=require("properties-reader"),v_=X(),M_=oe(),Me=(G(),D($)),FE=Dt(),jte="Error initializing environment manager",GE="BOOT_PROPS_FILE_PATH",YB=!1,Qte={[Me.HDB_SETTINGS_NAMES.INSTALL_USER]:!0,[Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY]:!0,[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]:!0,BOOT_PROPS_FILE_PATH:!0},Eo={};Object.assign(jB,QB.exports={BOOT_PROPS_FILE_PATH:GE,getHdbBasePath:Jte,setHdbBasePath:Xte,get:WB,initSync:ere,setProperty:ze,initTestEnvironment:rre,setCloneVar:tre});function Jte(){return Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]}a(Jte,"getHdbBasePath");function Xte(e){Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]=e}a(Xte,"setHdbBasePath");function WB(e){let t=FE.getConfigValue(e);return t===void 0?Eo[e]:t}a(WB,"get");function ze(e,t){Qte[e]&&(Eo[e]=t),FE.updateConfigObject(e,t)}a(ze,"setProperty");function Zte(){let e;try{e=M_.getPropsFilePath(),Lb.accessSync(e,Lb.constants.F_OK|Lb.constants.R_OK),YB=!0;let t=zte(e);return Eo[Me.HDB_SETTINGS_NAMES.INSTALL_USER]=t.get(Me.HDB_SETTINGS_NAMES.INSTALL_USER),Eo[Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY]=t.get(Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY),Eo[GE]=e,!0}catch{return v_.trace(`Environment manager found no properties file at ${e}`),!1}}a(Zte,"doesPropFileExist");function ere(e=!1){try{((YB||Zte()||M_.noBootFile())&&!zB||e)&&(FE.initConfig(e),Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]=FE.getConfigValue(Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY))}catch(t){v_.error(jte),v_.error(t),console.error(t),process.exit(1)}}a(ere,"initSync");var zB=!1;function tre(e){zB=e}a(tre,"setCloneVar");function rre(e={}){try{let{keep_alive_timeout:t,headers_timeout:r,server_timeout:n,https_enabled:s,cors_enabled:i,cors_accesslist:o,local_studio_on:c}=e,l=el.join(__dirname,"../../","unitTests");Eo[GE]=el.join(l,"hdb_boot_properties.file"),ze(Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY,el.join(l,"settings.test")),ze(Me.HDB_SETTINGS_NAMES.INSTALL_USER,KB.userInfo()?KB.userInfo().username:void 0),ze(Me.HDB_SETTINGS_NAMES.LOG_LEVEL_KEY,"debug"),ze(Me.HDB_SETTINGS_NAMES.LOG_PATH_KEY,el.join(l,"envDir","log")),ze(Me.HDB_SETTINGS_NAMES.LOG_DAILY_ROTATE_KEY,!1),ze(Me.HDB_SETTINGS_NAMES.CLUSTERING_ENABLED_KEY,!0),ze(Me.HDB_SETTINGS_NAMES.CLUSTERING_NODE_NAME_KEY,"1231412de213"),ze(Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY,el.join(l,"envDir")),ze(Me.CONFIG_PARAMS.STORAGE_PATH,el.join(l,"envDir")),s&&(ze(Me.CONFIG_PARAMS.HTTP_SECUREPORT,WB(Me.CONFIG_PARAMS.HTTP_PORT)),ze(Me.CONFIG_PARAMS.HTTP_PORT,null)),ze(Me.CONFIG_PARAMS.CUSTOMFUNCTIONS_NETWORK_HTTPS,!!s),ze(Me.CONFIG_PARAMS.HTTP_PORT,9926),ze(Me.HDB_SETTINGS_NAMES.SERVER_PORT_KEY,9925),ze(Me.CONFIG_PARAMS.OPERATIONSAPI_NETWORK_PORT,9925),ze(Me.HDB_SETTINGS_NAMES.CORS_ENABLED_KEY,M_.isEmpty(i)?!1:i),ze(Me.CONFIG_PARAMS.HTTP_CORS,M_.isEmpty(i)?!1:i),ze(Me.HDB_SETTINGS_NAMES.MAX_CUSTOM_FUNCTION_PROCESSES,2),ze(Me.HDB_SETTINGS_NAMES.MAX_HDB_PROCESSES,4),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_PORT_KEY,9926),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_ENABLED_KEY,!0),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_DIRECTORY_KEY,el.resolve(__dirname,"../../unitTests/server/fastifyRoutes/custom_functions")),ze(Me.HDB_SETTINGS_NAMES.LOCAL_STUDIO_ON,M_.isEmpty(c)?!1:c),o&&(ze("CORS_ACCESSLIST",o),ze(Me.CONFIG_PARAMS.HTTP_CORSACCESSLIST,o)),n&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_TIMEOUT_KEY,n),ze(Me.CONFIG_PARAMS.HTTP_TIMEOUT,n)),t&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_KEEP_ALIVE_TIMEOUT_KEY,t),ze(Me.CONFIG_PARAMS.HTTP_KEEPALIVETIMEOUT,t)),r&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_HEADERS_TIMEOUT_KEY,r),ze(Me.CONFIG_PARAMS.HTTP_HEADERSTIMEOUT,r))}catch(t){let r=`Error reading in HDB environment variables from path ${GE}.  Please check your boot props and settings files`;v_.fatal(r),v_.error(t)}}a(rre,"initTestEnvironment")});var Ub={};Be(Ub,{loadGQLSchema:()=>ire,start:()=>vb,startOnMainThread:()=>sre});function vb({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r,n,s,i){let{parse:o,Source:c,Kind:l,NamedTypeNode:u,StringValueNode:f}=await import("graphql"),d=o(new c(r.toString(),s)),h=new Map,_=[],p;for(let R of d.definitions)switch(R.kind){case l.OBJECT_TYPE_DEFINITION:let F=function(j){if(j.kind==="NonNullType"){let z=F(j.type);return z.nullable=!1,z}if(j.kind==="ListType")return{type:"array",elements:F(j.type)};let se={type:j.name?.value};return Object.defineProperty(se,"location",{value:j.loc.startToken}),se};a(F,"getProperty");let E=R.name.value,T=[],O={table:null,database:null,properties:T};h.set(E,O);for(let j of R.directives){if(j.name.value==="table"){for(let se of j.arguments)O[se.name.value]=se.value.value;O.schema&&(O.database=O.schema),O.table||(O.table=E),O.audit&&(O.audit=O.audit!=="false"),O.attributes=O.properties,_.push(O)}if(j.name.value==="sealed"&&(O.sealed=!0),j.name.value==="splitSegments"&&(O.splitSegments=!0),j.name.value==="replicate"&&(O.replicate=!0),j.name.value==="export"){O.export=!0;for(let se of j.arguments)typeof O.export!="object"&&(O.export={}),O.export[se.name.value]=se.value.value}}let v=!1,q={};for(let j of R.fields){let te=F(j.type);te.name=j.name.value,T.push(te),q[te.name]=void 0;for(let se of j.directives){let z=se.name.value;if(z==="primaryKey")v?console.warn("Can not define two attributes as a primary key at",se.loc):(te.isPrimaryKey=!0,v=!0);else if(z==="indexed")te.indexed=!0;else if(z==="computed"){for(let ne of se.arguments||[])if(ne.name.value==="from"){let le=ne.value.value;te.computed={from:g(le,ne,q)},te.version==null&&(te.version=le)}else ne.name.value==="version"&&(te.version=ne.value.value);te.computed=te.computed||!0}else if(z==="relationship"){let ne={};for(let le of se.arguments)ne[le.name.value]=le.value.value;te.relationship=ne}else if(z==="createdTime")te.assignCreatedTime=!0;else if(z==="updatedTime")te.assignUpdatedTime=!0;else if(z==="expiresAt")te.expiresAt=!0;else if(z==="allow"){let ne=te.authorizedRoles=[];for(let le of se.arguments)le.name.value==="role"&&ne.push(le.value.value)}else server.knownGraphQLDirectives.includes(z)&&console.warn(`@${z} is an unknown directive, at`,se.loc)}}O.type=E,E==="Query"&&(p=O)}function S(R){let E=h.get(R.type);E?(Object.defineProperty(R,"properties",{value:E.properties}),Object.defineProperty(R,"definition",{value:E})):R.type==="array"?S(R.elements):nre.includes(R.type)||(0,XB.getWorkerIndex)()===0&&console.error(`The type ${R.type} is unknown at line ${R.location.line}, column ${R.location.column}, in ${s}`)}a(S,"connectPropertyType");for(let R of h.values())for(let E of R.properties)S(E);for(let R of _)R.tableClass=e(R),R.export&&(R.export.name===""?i.set((0,Mb.dirname)(n),R.tableClass):i.set((0,Mb.dirname)(n)+"/"+(R.export.name||R.type),R.tableClass,R.export));function g(R,E,T){return new JB.Script(`function computed(attributes) { return function(record) { with(attributes) { with (record) { return ${R}; } } } } computed;`,{filename:s,lineOffset:E.loc.startToken.line-1,columnOffset:E.loc.startToken.column}).runInThisContext()(T)}a(g,"createComputedFrom")}}var Mb,JB,XB,nre,sre,ire,ZB=be(()=>{Mb=require("path"),JB=require("node:vm");Ue();XB=M(st()),nre=["ID","Int","Float","Long","String","Boolean","Date","Bytes","Any","BigInt","Blob"];server.knownGraphQLDirectives&&(server.knownGraphQLDirectives=["table","sealed","export","primaryKey","indexed","computed","relationship","createdTime","updatedTime","expiresAt","allow"]);a(vb,"start");sre=vb,ire=vb({ensureTable:_t}).handleFile});var Bb={};Be(Bb,{start:()=>hre});function ore(e){if(e.kind!==ve.Kind.OPERATION_DEFINITION&&e.kind!==ve.Kind.FRAGMENT_DEFINITION)throw new Or(`Unexpected non-executable definition type ${e.kind}.`)}function eH(e){if(typeof e!="object"||e===null)throw new Pi("Request body must be an object.");if(!("query"in e))throw new Pi("Request body must contain a `query` field.");if(typeof e.query!="string")throw new Pi("Request body `query` field must be a string.");if("variables"in e&&(typeof e.variables!="object"||e.variables===null))throw new Pi("Request body `variables` field must be an object.");if("operationName"in e&&typeof e.operationName!="string")throw new Pi("Request body `operationName` field must be a string.")}function xb(e){return parseInt(e.value,10)}function rH(e){return parseFloat(e.value)}function nH(e,t,r){let n=r.get(e.name.value);return sH(n)?iH(n,t):{attribute:t,value:n}}function sH(e){return typeof e=="object"&&e!=null&&!Array.isArray(e)}function iH(e,t){return t=typeof t=="string"?[t]:t,Object.entries(e).flatMap(([r,n])=>(t=[...t,r],sH(n)?iH(n,t):{attribute:t,value:n}))}function are(e,t,r){switch(t=[...t,e.name.value],e.value.kind){case ve.Kind.NULL:return{attribute:t,value:null};case ve.Kind.INT:return{attribute:t,value:xb(e.value)};case ve.Kind.FLOAT:return{attribute:t,value:rH(e.value)};case ve.Kind.BOOLEAN:case ve.Kind.STRING:return{attribute:t,value:e.value.value};case ve.Kind.VARIABLE:return nH(e.value,t,r);case ve.Kind.OBJECT:return oH(e.value,t,r);case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Value type, ${e.value.kind}, is not supported.`)}}function oH(e,t,r){return e.fields.flatMap(n=>are(n,t,r))}function cre(e,t){switch(e.value.kind){case ve.Kind.NULL:return{attribute:e.name.value,value:null};case ve.Kind.INT:return{attribute:e.name.value,value:xb(e.value)};case ve.Kind.FLOAT:return{attribute:e.name.value,value:rH(e.value)};case ve.Kind.BOOLEAN:case ve.Kind.STRING:return{attribute:e.name.value,value:e.value.value};case ve.Kind.VARIABLE:return nH(e.value,e.name.value,t);case ve.Kind.OBJECT:return oH(e.value,[e.name.value],t);case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Argument type, ${e.value.kind}, is not supported.`)}}function lre(e,t){return e.flatMap(r=>cre(r,t))}function qE(e,t){return e.selections.flatMap(r=>{switch(r.kind){case ve.Kind.FIELD:return r;case ve.Kind.FRAGMENT_SPREAD:{let n=r.name.value,s=t.get(n);if(s==null)throw new Or(`Fragment \`${n}\` not found.`);return qE(s.selectionSet,t)}case ve.Kind.INLINE_FRAGMENT:return qE(r.selectionSet,t)}})}function aH(e,t){return qE(e,t).map(r=>r.selectionSet?.selections.length>0?{name:r.name.value,select:aH(r.selectionSet,t)}:r.name.value)}async function ure(e,t,r,n){let s=us.getMatch(e.name.value,"graphql");if(s===void 0)throw new Or(`Resource \`${e.name.value}\` not found.`);let i=s.Resource,o={select:aH(e.selectionSet,r),conditions:lre(e.arguments,t)},c=[];n.authorize=!0;for await(let l of i.search(o,n))c.push(l);return[e.name.value,c]}function cH(e){switch(e.kind){case ve.Kind.NULL:return null;case ve.Kind.INT:return xb(e);case ve.Kind.FLOAT:return parseFloat(e.value);case ve.Kind.STRING:case ve.Kind.BOOLEAN:return e.value;case ve.Kind.OBJECT:return e.fields.reduce((t,r)=>({[r.name.value]:cH(r.value),...t}),{});case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Value type, ${e.kind}, is not supported.`)}}function dre(e,t){let r=new Map;for(let n of e){let s=n.variable.name.value,i=t?.[s];if(i===void 0&&n.defaultValue!==void 0&&(i=cH(n.defaultValue)),n.type.kind===ve.Kind.NON_NULL_TYPE&&!(s in t)&&i===void 0)throw new Or(`Variable $${s} is required, but not provided.`);r.set(n.variable.name.value,i??null)}return r}async function fre(e,t,r,n){if(e.operation===ve.OperationTypeNode.SUBSCRIPTION)throw new Or("Subscriptions are not supported.");if(e.operation===ve.OperationTypeNode.MUTATION)throw new Or("Mutations are not supported yet.");let s=dre(e.variableDefinitions,t),i=await Promise.all(qE(e.selectionSet,r).map(c=>ure(c,s,r,n))),o={data:{}};for(let[c,l]of i)o.data[c]=l;return o}async function tH({query:e,variables:t={},operationName:r},n){let s=ve.parse(e),i=new Map,o=new Map;for(let u of s.definitions)if(ore(u),u.kind===ve.Kind.FRAGMENT_DEFINITION)o.set(u.name.value,u);else{if(u.name===void 0&&s.definitions.length>1)throw new Or("Unnamed operations are only allowed when there is a single operation in the document.");let f=u.name?.value??"Unnamed Query";if(i.has(f))throw new Or(`Duplicate operation definition: ${f}`);i.set(f,u)}let c;if(r==null)if(i.size===1)c=i.entries().next().value[1];else throw new Or("Operation name is required when there are multiple operations in the document.");else if(c=i.get(r),c==null)throw new Or(`Operation \`${r}\` not found.`);let l=await fre(c,t,o,n);return{status:200,headers:{"Content-Type":"application/graphql-response+json; charset=utf-8"},body:JSON.stringify(l)}}async function _re(e){switch(e.method){case"GET":{let t=new URLSearchParams(e.url.split("?")[1]),r={};for(let[n,s]of t)r[n]=n==="variables"||n==="extensions"?JSON.parse(s):s;return eH(r),tH(r,e)}case"POST":{let r=await Xi(e.headers.get("content-type"),!0)(e._nodeRequest);return eH(r),tH(r,e)}default:throw new Pi("Method Not Allowed",405,{Allow:"GET, POST"})}}function hre(e){e.server.http(async(t,r)=>{if(!t.url.startsWith("/graphql"))return r(t);try{return await _re(t)}catch(n){logger.error(n);let s=t.headers.get("accept")??"application/graphql-response+json";switch(s){case"application/json":{if(n instanceof Pi)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json",...n.headers}};if(n instanceof ve.GraphQLError)return{status:200,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/json"}};if(n instanceof Or)return{status:200,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};break}default:logger.info(`Unsupported accept header, ${s}, defaulting to application/graphql-response+json`);case"application/graphql-response+json":{if(n instanceof Pi)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json",...n.headers}};if(n instanceof ve.GraphQLError)return{status:400,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Or)return{status:400,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};break}}throw n}},{port:e.port,securePort:e.securePort})}var ve,Or,Pi,lH=be(()=>{ve=M(require("graphql"));Zi();Ql();a(ore,"assertExecutableDefinitionNode");a(eH,"assertRequestParams");a(xb,"processIntValueNode");a(rH,"processFloatValueNode");a(nH,"processVariableNode");a(sH,"isObject");a(iH,"transformObjectIntoQueryCondition");a(are,"processObjectFieldNode");a(oH,"processObjectValueNode");a(cre,"processArgumentNode");a(lre,"buildConditionsQuery");a(qE,"fillInFragments");a(aH,"buildSelectQuery");a(ure,"processFieldNode");a(cH,"processConstValueNode");a(dre,"resolveVariables");a(fre,"executeOperation");a(tH,"resolver");Or=class extends Error{static{a(this,"GraphQLQueryingError")}},Pi=class extends Error{static{a(this,"HTTPError")}statusCode;headers;constructor(t,r=400,n={}){super(t),this.statusCode=r,this.headers=n}};a(_re,"graphqlQueryingHandler");a(hre,"start")});var pH=P((gwe,hH)=>{var yu=require("validate.js"),dH=it(),bu=(G(),D($)),{handleHDBError:pre,hdb_errors:mre}=he(),{HDB_ERROR_MSGS:Qt,HTTP_STATUS_CODES:Ere}=mre,Hb=a(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),gre={STRUCTURE_USER:"structure_user"},uH=Object.values(bu.ROLE_TYPES_ENUM),Sre="attribute_permissions",Tre="attribute_name",{PERMS_CRUD_ENUM:Ou}=bu,Are=[Sre,...Object.values(Ou)],fH=[Ou.READ,Ou.INSERT,Ou.UPDATE],Rre=[Tre,...fH];function yre(e){let t=Hb();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,_H(e,t)}a(yre,"addRoleValidation");function bre(e){let t=Hb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,_H(e,t)}a(bre,"alterRoleValidation");function Ore(e){let t=Hb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,dH.validateObject(e,t)}a(Ore,"dropRoleValidation");var Nre=["operation","role","id","permission","hdb_user","access"];function _H(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let o=0,c=n.length;o<c;o++)Nre.includes(n[o])||s.push(n[o]);s.length>0&&nr(Qt.INVALID_ROLE_JSON_KEYS(s),r);let i=dH.validateObject(e,t);if(i&&i.message.split(",").forEach(o=>{nr(o,r)}),e.permission){let o=wre(e);o&&nr(o,r),uH.forEach(c=>{e.permission[c]&&!yu.isBoolean(e.permission[c])&&nr(Qt.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let o in e.permission)if(uH.indexOf(o)<0){if(o===gre.STRUCTURE_USER){let l=e.permission[o];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,f=l.length;u<f;u++){let d=l[u];global.hdb_schema[d]||nr(Qt.SCHEMA_NOT_FOUND(d),r)}continue}nr(Qt.STRUCTURE_USER_ROLE_TYPE_ERROR(o),r);continue}let c=e.permission[o];if(!o||!global.hdb_schema[o]){nr(Qt.SCHEMA_NOT_FOUND(o),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[o][l]){nr(Qt.TABLE_NOT_FOUND(o,l),r);continue}if(Object.keys(u).forEach(f=>{Are.includes(f)||nr(Qt.INVALID_PERM_KEY(f),r,o,l)}),Object.values(Ou).forEach(f=>{yu.isDefined(u[f])?yu.isBoolean(u[f])||nr(Qt.TABLE_PERM_NOT_BOOLEAN(f),r,o,l):nr(Qt.TABLE_PERM_MISSING(f),r,o,l)}),u.attribute_permissions===void 0){nr(Qt.ATTR_PERMS_ARRAY_MISSING,r,o,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){nr(Qt.ATTR_PERMS_NOT_ARRAY,r,o,l);continue}if(u.attribute_permissions){let f=global.hdb_schema[o][l].attributes.map(({attribute:h})=>h),d={read:!1,insert:!1,update:!1};for(let h in u.attribute_permissions){let _=u.attribute_permissions[h];if(Object.keys(_).forEach(S=>{!Rre.includes(S)&&S!==Ou.DELETE&&nr(Qt.INVALID_ATTR_PERM_KEY(S),r,o,l)}),!yu.isDefined(_.attribute_name)){nr(Qt.ATTR_PERM_MISSING_NAME,r,o,l);continue}let p=_.attribute_name;if(!f.includes(p)){nr(Qt.INVALID_ATTRIBUTE_IN_PERMS(p),r,o,l);continue}fH.forEach(S=>{yu.isDefined(_[S])?yu.isBoolean(_[S])||nr(Qt.ATTR_PERM_NOT_BOOLEAN(S,p),r,o,l):nr(Qt.ATTR_PERM_MISSING(S,p),r,o,l)}),!d.read&&_.read===!0&&(d.read=!0),!d.insert&&_.insert===!0&&(d.insert=!0),!d.update&&_.update===!0&&(d.update=!0)}if(u.read===!1&&d.read===!0||u.insert===!1&&d.insert===!0||u.update===!1&&d.update===!0){let h=`${o}.${l}`;nr(Qt.MISMATCHED_TABLE_ATTR_PERMS(h),r,o,l)}}}}return Ire(r)}a(_H,"customValidate");hH.exports={addRoleValidation:yre,alterRoleValidation:bre,dropRoleValidation:Ore};function wre(e){let{operation:t,permission:r}=e;if(t===bu.OPERATIONS_ENUM.ADD_ROLE||t===bu.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return Qt.SU_CU_ROLE_COMBINED_ERROR;{let o=r.super_user?bu.ROLE_TYPES_ENUM.SUPER_USER:bu.ROLE_TYPES_ENUM.CLUSTER_USER;return Qt.SU_CU_ROLE_NO_PERMS_ALLOWED(o)}}}return null}a(wre,"validateNoSUPerms");function Ire(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:Qt.ROLE_PERMS_ERROR,...e};return pre(new Error,n,Ere.BAD_REQUEST)}else return null}a(Ire,"generateRolePermResponse");function nr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}a(nr,"addPermError")});var x_=P((Awe,SH)=>{"use strict";var mH=Sn(),EH=Vr(),Cre=qc(),Fb=pH(),Gb=ao(),Twe=require("uuid").v4,Pre=require("util"),$E=(G(),D($)),Dre=oe(),qb=EH.searchByValue,Lre=EH.searchByHash,Mre=Pre.promisify(Cre.delete),vre=qs(),Ure=cu(),{hdb_errors:xre,handleHDBError:tl}=he(),{HDB_ERROR_MSGS:gH,HTTP_STATUS_CODES:U_}=xre,{UserEventMsg:$b}=Gs();SH.exports={addRole:Bre,alterRole:Hre,dropRole:kre,listRoles:Fre};function kb(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}a(kb,"scrubRoleDetails");async function Bre(e){let t=Fb.addRoleValidation(e);if(t)throw t;e=kb(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await qb(r)||[])}catch(i){throw tl(i)}if(n&&n.length>0)throw tl(new Error,gH.ROLE_ALREADY_EXISTS(e.role),U_.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await mH.insert(s),Gb.signalUserChange(new $b(process.pid)),e=kb(e),e}a(Bre,"addRole");async function Hre(e){let t=Fb.alterRoleValidation(e);if(t)throw t;e=kb(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await mH.update(r)}catch(s){throw tl(s)}if(n&&n?.message==="updated 0 of 1 records")throw tl(new Error,"Invalid role id",U_.BAD_REQUEST,void 0,void 0,!0);return await Gb.signalUserChange(new $b(process.pid)),e}a(Hre,"alterRole");async function kre(e){let t=Fb.dropRoleValidation(e);if(t)throw tl(new Error,t,U_.BAD_REQUEST,void 0,void 0,!0);let r=new Ure($E.SYSTEM_SCHEMA_NAME,$E.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await Lre(r));if(n.length===0)throw tl(new Error,gH.ROLE_NOT_FOUND,U_.NOT_FOUND,void 0,void 0,!0);let s=new vre($E.SYSTEM_SCHEMA_NAME,$E.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await qb(s)),o=!1;if(Dre.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){o=!0;break}}if(o===!0)throw tl(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,U_.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await Mre(c),Gb.signalUserChange(new $b(process.pid)),`${n[0].role} successfully deleted`}a(kre,"dropRole");async function Fre(){return qb({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}a(Fre,"listRoles")});var Vb={};Be(Vb,{start:()=>RH,startOnMainThread:()=>$re});function RH({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,TH.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let o in i.permission){if(Gre.includes(o))continue;let c=i.permission[o];c.tables||(i.permission[o]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let f=[];for(let d in u.attributes){let h=u.attributes[d];h.attribute_name=d,f.push(h)}u.attribute_permissions=f,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let f of u.attribute_permissions)f.read=!!f.read,f.insert=!!f.insert,f.update=!!f.update}else u.attribute_permissions=null}}i.role=i.id=s,await qre(i)}}}async function qre(e){let t=Xe().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,AH.isEqual)(i,e)?void 0:(e.id=r.id,(0,VE.alterRole)(e))}return(0,VE.addRole)(e)}var VE,TH,AH,Gre,$re,yH=be(()=>{Ue();VE=M(x_()),TH=require("yaml"),AH=require("lodash"),Gre=["super_user","cluster_user","structure_user"];a(RH,"start");a(qre,"ensureRole");$re=RH});async function KE(e){let t=(0,NH.pathToFileURL)(e).toString();if(Vre)return B_||(B_=Kre(Wre)),(await(await B_).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function Kre(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),B_=new Compartment({console,Math,Date,fetch:Yre,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,OH.extname)(r)||(r+=".js"),r)},importHook:a(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){Object.assign(s,{Resource:Gr,tables:zn,databases:Ye})}};let n=await(0,bH.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),B_}function Yre(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function Wre(){return{Resource:Gr,tables:zn}}var bH,OH,NH,Vre,B_,Kb=be(()=>{ra();Ue();bH=require("fs/promises"),OH=require("path"),NH=require("url"),Vre=!1;a(KE,"secureImport");a(Kre,"getCompartment");a(Yre,"secureOnlyFetch");a(Wre,"getGlobalVars")});var Wb={};Be(Wb,{handleFile:()=>zre});async function zre(e,t,r,n){let s=new Map,i=await KE(r);c(i.default)&&n.set((0,Yb.dirname)(t),i.default),o(i,(0,Yb.dirname)(t));function o(l,u){for(let f in l){let d=l[f];c(d)?n.set(u+"/"+f,d):typeof d=="object"&&o(d,u+"/"+f)}}a(o,"recurseForResources");function c(l){return typeof l=="function"&&(l.get||l.put||l.post||l.delete)}return a(c,"isResource"),s}var Yb,wH=be(()=>{Kb();Yb=require("path");a(zre,"handleFile")});var jb={};Be(jb,{start:()=>jre});function jre({resources:e}){e.set("login",zb),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var zb,IH=be(()=>{ra();a(jre,"start");zb=class extends Gr{static{a(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:o}=r;return{data:await n.login(s,i)}}}});function MH(e){let t={openapi:Qre,info:{title:"HarperDB HTTP REST interface",version:LH.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:o,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},f=[];if(o)for(let{type:T,name:O,elements:v,relationship:F,definition:q}of o){if(F)T==="array"?u[O]={type:"array",items:{$ref:Sa+v.type}}:u[O]={$ref:Sa+T};else{let j=q??v?.definition;if(j){if(!t.components.schemas[j.type]){let te={};j.properties.forEach(se=>{te[se.name]=new Zb(Qb[se.type],se.type)}),t.components.schemas[j.type]=new DH(te)}T==="array"?u[O]={type:"array",items:{$ref:Sa+j.type}}:u[O]={$ref:Sa+j.type}}else T==="array"?v.type==="Any"||v.type=="ID"?u[O]={type:"array",items:{format:v.type}}:u[O]={type:"array",items:new Zb(Qb[v.type],v.type)}:T==="Any"||T=="ID"?u[O]={format:T}:u[O]=new Zb(Qb[T],T)}f.push(new eO(O,"query",u[O]))}let d=Object.keys(u),h=new eO(c,"path",{format:"ID"});h.required=!0,h.description="primary key of record";let _=new eO("property","path",{enum:d});_.required=!0,t.components.schemas[i]=new DH(u);let p=l.post!==Resource.prototype.post||l.update,S=typeof l.put=="function",g=typeof l.get=="function",R=typeof l.delete=="function",E="/"+s+"/";p&&(t.paths[E]={},t.paths[E].post=new Jre(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[E]||(t.paths[E]={}),t.paths[E].get=new Jb(f,r,{200:new Xb({$ref:Sa+i})},"search for records by the specified property name and value pairs")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new PH(f,r,"delete all the records that match the provided query",{204:new CH})),E="/"+s+"/{"+c+"}",g&&(t.paths[E]={},t.paths[E].get=new Jb([h],r,{200:new Xb({$ref:Sa+i})},"retrieve a record by its primary key")),S&&(t.paths[E]||(t.paths[E]={}),t.paths[E].put=new Xre([h],r,i,"create or update the record with the URL path that maps to the record's primary key")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new PH([h],r,"delete a record with the given primary key",{204:new CH})),g&&_.schema.enum.length>0&&(E="/"+s+"/{"+c+"}.{property}",t.paths[E]={},t.paths[E].get=new Jb([h,_],r,{200:new Xb({enum:d})},"used to retrieve the specified property of the specified record"))}return t}function Jre(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:Sa+e}}}},this.security=t,this.responses={200:{description:tO,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function Jb(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function Xb(e){this.description=tO,this.content={"application/json":{schema:e}}}function CH(){this.description="successfully processed request, no content returned to client"}function Xre(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:Sa+r}}}},this.responses={200:{description:tO}}}function PH(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function DH(e){this.type="object",this.properties=e}function Zb(e,t){this.type=e,this.format=t}function eO(e,t,r){this.name=e,this.in=t,this.schema=r}var LH,Qre,Qb,Sa,tO,vH=be(()=>{LH=M(Et()),Qre="3.0.3",Qb={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},Sa="#/components/schemas/",tO="successful operation";a(MH,"generateJsonApi");a(Jre,"Post");a(Jb,"Get");a(Xb,"Response200");a(CH,"Response204");a(Xre,"Put");a(PH,"Delete");a(DH,"ResourceSchema");a(Zb,"Type");a(eO,"Parameter")});var xH={};Be(xH,{Request:()=>H_,createReuseportFd:()=>YE});var UH,H_,rO,nO,YE,WE=be(()=>{UH=require("os"),H_=class{static{a(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new nO(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new rO(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},rO=class{static{a(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},nO=class{constructor(t){this.asObject=t}static{a(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,UH.platform)()!="win32"&&(YE=require("node-unix-socket").createReuseportFd)});var jE={};Be(jE,{parseHeaderValue:()=>iO,start:()=>tne});async function ene(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&Yp(e);let i=new po;try{e.responseHeaders=i;let o=e.url.slice(1),c,l;if(o!==BH){let g=zE.getMatch(o,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new _c(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let R=iO(g);for(let E of R)switch(E.name){case"max-age":e.expiresAt=E.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=iO(u).map(R=>(R.next?.name==="confirm"&&R.next.value>=0&&(e.replicatedConfirmation=+R.next.value),R.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let d=await wt(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=Xi(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new Nu.ClientError(g,400)}if(e.authorize=!0,o===BH&&s==="GET"){if(e?.user?.role?.permission?.super_user)return MH(zE);throw new Nu.ServerError("Forbidden",403)}switch(s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new Nu.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new Nu.ServerError(`Method ${s} is not recognized`,501)}}),h=200,_;if(d==null)h=s==="GET"||s==="HEAD"?404:204,sO.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(d.status>0&&d.headers){let g=Rb(d.headers,i);return d.headers!==g&&(d.headers=g),d.data!==void 0&&(d.body=Tf(d.data,e,d)),d}else if(_=e.lastModified){Zre[0]=_;let g=String.fromCharCode(34,(vr[0]&63)+62,(vr[0]>>6)+(vr[1]<<2&63)+62,(vr[1]>>4)+(vr[2]<<4&63)+62,(vr[2]>>2)+62,(vr[3]&63)+62,(vr[3]>>6)+(vr[4]<<2&63)+62,(vr[4]>>4)+(vr[5]<<4&63)+62,(vr[5]>>2)+62,(vr[6]&63)+62,(vr[6]>>6)+(vr[7]<<2&63)+62,34),R=r["if-none-match"];R&&g==R?(d?.onDone&&d.onDone(),h=304,d=void 0):i.setIfNone("ETag",g),sO.lastModified&&i.setIfNone("Last-Modified",new Date(_).toUTCString())}e.createdResource&&(h=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let p={status:h,headers:i,body:void 0},S=d?.wasLoadedFromSource?.();return S!==void 0&&(p.wasCacheMiss=S,!S&&_&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||_))/1e3))),d!==void 0&&(p.body=Tf(d,e,p),s==="HEAD"&&(p.body=void 0)),p}catch(o){o.statusCode?o.statusCode===500?Di.warn(o):Di.info(o):Di.error(o),o.statusCode===405&&(o.method&&(o.message+=` to handle HTTP method ${o.method.toUpperCase()||""}`),o.allow&&(o.allow.push("trace","head","options"),i.setIfNone("Allow",o.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:o.statusCode||500,headers:i,body:void 0};return c.body=Tf(o.contentType?o:o.toString(),e,c),c}}function tne(e){sO=e,e.includeExpensiveRecordCountEstimates&&(H_.prototype.includeExpensiveRecordCountEstimates=!0),!HH&&(HH=!0,zE=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return ene(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{k_++;let s=new Mn;kH||(kH=!0,A_(l=>{k_>0&&l.push({metric:"ws-connections",connections:k_,byThread:!0})}));let i;t.on("error",l=>{i=!0,Di.warn(l)});let o;t.on("message",a(function(u){o||(o=Xi(r.requestedContentType??r.headers.asObject["content-type"],!1));let f=o(u);Lt(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(f)},"message"));let c;t.on("close",()=>{k_--,Yn(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=zE.getMatch(l,"ws");if(Yn(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,Lt(p=>({count:p.count,total:k_}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let f=new _c(u.relativeURL),d=u.Resource;c=(await wt(r,()=>d.connect(f,s,r)))[Symbol.asyncIterator]();let _;for(;!(_=await c.next()).done;){let p=await sa(_.value,r);t.send(p),Lt(p.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(S=>t._socket.once("drain",S))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Di.warn(l):Di.info(l):Di.error(l),t.close(rne[l.statusCode]||1011,l.toString())}t.close()},e))}function iO(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,o]=s.trim().split("=");i=i.trim(),o&&(o=o.trim()),r={name:i.toLowerCase(),value:o,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Di,Nu,vr,Zre,sO,BH,HH,zE,kH,k_,rne,FH=be(()=>{Zi();Ii();Di=M(X()),Nu=M(he());hf();Vl();fc();y_();vH();hf();WE();vr=new Uint8Array(8),Zre=new Float64Array(vr.buffer,0,1),sO={},BH="openapi";a(ene,"http");k_=0;a(tne,"start");rne={401:3e3,403:3003};a(iO,"parseHeaderValue")});var oO=P((Wwe,qH)=>{var{recordAction:QE,recordActionBinary:GH}=(Ii(),D(R_)),nne=require("fastify-plugin"),sne=200;qH.exports=nne(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let o=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,f,d;l.config?.isOperation?(u=n.body?.operation,f="operation"):(u=l.url,f="fastify-route",d=l.method),QE(o,"duration",u,d,f),GH(s.raw.statusCode<400,"success",u,d,f),GH(1,"response_"+s.raw.statusCode,u,d,f);let h=sne;i?.pipe?(i.on("data",g=>{h+=g.length}),i.on("end",()=>{QE(performance.now()-c,"transfer",u,d,f),QE(h,"bytes-sent",u,d,f)})):(h+=i?.length||0,QE(h,"bytes-sent",u,d,f));let _=o.toFixed(3),p=s.getHeader("Server-Timing"),S=`db;dur=${_}`;s.header("Server-Timing",p?`${p}, ${S}`:S)}),r()},{name:"hdb-request-time"})});var VH=P((zwe,$H)=>{var ine=it(),one={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};$H.exports=function(e){return ine.validateObject(e,one)}});var JE=P((jwe,KH)=>{"use strict";var ane=(G(),D($)).OPERATIONS_ENUM,aO=class{static{a(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=ane.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};KH.exports=aO});var q_={};Be(q_,{createTokens:()=>lne,getJWTRSAKeys:()=>rg,refreshOperationToken:()=>une,validateOperationToken:()=>uO,validateRefreshToken:()=>ng});async function rg(){if(XE)return XE;try{let e=F_.default.join(G_.default.getHdbBasePath(),aA),t=await ZE.default.readFile(F_.default.join(e,Jd.JWT_PASSPHRASE_NAME),"utf8"),r=await ZE.default.readFile(F_.default.join(e,Jd.JWT_PRIVATE_KEY_NAME),"utf8");return XE={publicKey:await ZE.default.readFile(F_.default.join(e,Jd.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},XE}catch(e){throw tg.default.error(e),new zs.ClientError(Iu.NO_ENCRYPTION_KEYS,wu.INTERNAL_SERVER_ERROR)}}async function lne(e){let t=(0,cO.validateBySchema)(e,Li.default.object({username:Li.default.string().optional(),password:Li.default.string().optional(),role:Li.default.string().optional(),expires_in:Li.default.alternatives(Li.default.string(),Li.default.number()).optional()}));if(t)throw new zs.ClientError(t.message);let r;try{let d=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,d=!1),r=await(0,lO.findAndValidateUser)(e.username,e.password,d)}catch(d){throw tg.default.error(d),new zs.ClientError(Iu.INVALID_CREDENTIALS,wu.UNAUTHORIZED)}if(!r)throw new zs.ClientError(Iu.INVALID_CREDENTIALS,wu.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let o=await rg(),c=await Cu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:e.expires_in??QH,algorithm:eg,subject:"operation"}),l=await Cu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:cne,algorithm:eg,subject:"refresh"}),u=Zy(l,"sha256");if((await(0,YH.update)(new WH.default(Qd,ql.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new zs.ClientError(Iu.REFRESH_TOKEN_SAVE_FAILED,wu.INTERNAL_SERVER_ERROR);return zH.default.signalUserChange(new jH.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function une(e){let t=(0,cO.validateBySchema)(e,Li.default.object({refresh_token:Li.default.string().required()}).required());if(t)throw new zs.ClientError(t.message);let{refresh_token:r}=e;await ng(r);let n=await rg(),s=await Cu.default.decode(r);return{operation_token:await Cu.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:QH,algorithm:eg,subject:"operation"})}}async function uO(e){return JH(e,"operation")}async function ng(e){return JH(e,"refresh")}async function JH(e,t){try{let r=await rg(),n=await Cu.default.verify(e,r.publicKey,{algorithms:eg,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,lO.findAndValidateUser)(n.username,void 0,!1);if(t==="refresh"&&!eb(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw tg.default.warn(r),r?.name==="TokenExpiredError"?new zs.ClientError(Iu.TOKEN_EXPIRED,wu.FORBIDDEN):new zs.ClientError(Iu.INVALID_TOKEN,wu.UNAUTHORIZED)}}var Cu,ZE,F_,Li,cO,zs,tg,lO,YH,WH,zH,jH,G_,wu,Iu,QH,cne,eg,XE,Pu=be(()=>{Cu=M(require("jsonwebtoken")),ZE=M(require("fs-extra")),F_=M(require("node:path")),Li=M(require("joi")),cO=M(it());G();zs=M(he()),tg=M(X());_E();lO=M(Vn()),YH=M(Sn()),WH=M(JE()),zH=M(ao()),jH=M(Gs()),G_=M(ce()),{HTTP_STATUS_CODES:wu,AUTHENTICATION_ERROR_MSGS:Iu}=zs.hdb_errors;G_.default.initSync();QH=G_.default.get(B.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",cne=G_.default.get(B.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",eg="RS256";a(rg,"getJWTRSAKeys");a(lne,"createTokens");a(une,"refreshOperationToken");a(uO,"validateOperationToken");a(ng,"validateRefreshToken");a(JH,"validateToken")});var dO=P((eIe,ek)=>{"use strict";var dne=VH(),Du=require("passport"),fne=require("passport-local").Strategy,_ne=require("passport-http").BasicStrategy,hne=require("util"),pne=Vn(),ZH=hne.callbackify(pne.findAndValidateUser),Zwe=Ln(),mne=(G(),D($)),XH=(Pu(),D(q_));Du.use(new fne(function(e,t,r){ZH(e,t,r)}));Du.use(new _ne(function(e,t,r){ZH(e,t,r)}));Du.serializeUser(function(e,t){t(null,e)});Du.deserializeUser(function(e,t){t(null,e)});function Ene(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let o=e.headers.authorization.split(" ");n=o[0],s=o[1]}function i(o,c){return o?r(o):c?r(null,c):r("Must login")}switch(a(i,"handleResponse"),n){case"Basic":Du.authenticate("basic",{session:!1},(o,c)=>{i(o,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===mne.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?XH.validateRefreshToken(s).then(o=>{e.body.refresh_token=s,r(null,o)}).catch(o=>{r(o)}):XH.validateOperationToken(s).then(o=>{r(null,o)}).catch(o=>{r(o)});break;default:Du.authenticate("local",{session:!1},function(o,c){i(o,c)})(e,t,r);break}}a(Ene,"authorize");function gne(e,t){let r=dne(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let o=i[e.schema].tables[e.table].attribute_permissions;for(let c in o)e.attributes.indexOf(o[c].attribute_name)>-1&&!o[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${o[c].attribute_name} `))}return t(null,n)}a(gne,"checkPermissions");ek.exports={authorize:Ene,checkPermissions:gne}});var sg=P((rIe,tk)=>{"use strict";var Sne=Fn();tk.exports={writeTransaction:Tne};function Tne(e,t,r){return Sne.writeTransaction(e,t,r)}a(Tne,"writeTransaction")});var ik=P((iIe,sk)=>{"use strict";var Ane=Vr(),Rne=Ks(),rk=X(),yne=Sn(),sIe=sg(),bne=require("clone"),_O=require("alasql"),One=rE(),nk=require("util"),Nne=nk.promisify(Rne.getTableSchema),wne=nk.promisify(Ane.search),Ine=(G(),D($)),fO=oe();One(_O);sk.exports={update:Pne};var Cne="There was a problem performing this update. Please check the logs and try again.";async function Pne({statement:e,hdb_user:t}){let r=await Nne(e.table.databaseid,e.table.tableid),n=Dne(e.columns);fO.backtickASTSchemaItems(e);let{table:s,where:i}=e,o=bne(s),c=fO.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=_O.parse(l).statements[0],f=await wne(u),d=Lne(n,f);return Mne(o,d,t)}a(Pne,"update");function Dne(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=_O.compile(`SELECT ${r.expression.toString()} AS [${Ine.FUNC_VAL}] FROM ?`)}),t}catch(t){throw rk.error(t),new Error(Cne)}}a(Dne,"createUpdateRecord");function Lne(e,t){return fO.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}a(Lne,"buildUpdateRecords");async function Mne(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await yne.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){rk.error(`Error delete new_attributes from update response: ${i}`)}return s}a(Mne,"updateRecords")});var ak=P((lIe,ok)=>{var vne=require("alasql"),Une=Vr(),xne=X(),Bne=Fn(),pO=require("util"),hO=oe(),Hne=(G(),D($)),kne=Ks(),aIe=sg(),cIe=Sn(),Fne="record",Gne="successfully deleted",qne=pO.callbackify(Yne),$ne=pO.promisify(Une.search),Vne=pO.promisify(kne.getTableSchema);ok.exports={convertDelete:qne};function Kne(e){return`${e.deleted_hashes.length} ${Fne}${e.deleted_hashes.length===1?"":"s"} ${Gne}`}a(Kne,"generateReturnMessage");async function Yne({statement:e,hdb_user:t}){let r=await Vne(e.table.databaseid,e.table.tableid);hO.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=hO.isEmpty(s)?"":` WHERE  ${s.toString()}`,o=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=vne.parse(o).statements[0],l={operation:Hne.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await $ne(c);let u=await Bne.deleteRecords(l);return hO.isEmptyOrZeroLength(u.message)&&(u.message=Kne(u)),delete u.txn_time,u}catch(u){throw xne.error(u),u.hdb_code?u.message:u}}a(Yne,"convertDelete")});var fk=P((dIe,dk)=>{"use strict";var Wne=_o(),{hdb_errors:ck}=he(),{getDatabases:lk}=(Ue(),D(ct));dk.exports={checkSchemaExists:uk,checkSchemaTableExists:zne,schema_describe:Wne};async function uk(e){if(!lk()[e])return ck.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(uk,"checkSchemaExists");async function zne(e,t){let r=await uk(e);if(r)return r;if(!lk()[e][t])return ck.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(zne,"checkSchemaTableExists")});var TO=P((mIe,bk)=>{"use strict";var{decode:jne}=require("msgpackr"),{isMainThread:_Ie,parentPort:hIe,threadId:pIe}=require("worker_threads"),ag=gr(),Lu=Ct(),gO=(G(),D($)),Wr=X(),EO=ce(),Qne=(G(),D($)),{onMessageByType:Jne}=st(),mk=fo(),{recordAction:_k,recordActionBinary:Xne}=(Ii(),D(R_)),{publishToStream:Zne}=ag,{ConsumerEvents:hk}=require("nats"),ese=Vr(),{promisify:tse}=require("util"),{decodeBlobsWithWrites:rse}=(ds(),D(um)),Ek=tse(setTimeout),cg=1e4,lg,og,nse,sse,gk,$_=new Map,Mu=new Map;bk.exports={initialize:Sk,ingestConsumer:SO,setSubscription:ise,setIgnoreOrigin:cse,getDatabaseSubscriptions:ase,updateConsumer:Tk};async function Sk(){Jne(gO.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await Tk(n)}),gk=!0,Wr.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await ag.getNATSReferences();lg=e,og=e.info.server_name,nse=t,sse=r}a(Sk,"initialize");async function Tk(e){if(e.status==="start"){let{js:t,jsm:r}=await Ak(e.node_domain_name);SO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=$_.get(e.stream_name+e.node_domain_name);t&&(Wr.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),$_.set(e.stream_name+e.node_domain_name,"close")),Mu.get(e.node_domain_name)==="failed"&&Mu.set(e.node_domain_name,"close")}}a(Tk,"updateConsumer");var ug=new Map;function ise(e,t,r){let n=ug.get(e);n||ug.set(e,n=new Map),n.set(t,r),gk||Sk().then(ose)}a(ise,"setSubscription");async function ose(){let e=await ese.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+Lu.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await Ak(r),!n))break;let{schema:o,table:c}=i,l=mk.createNatsTableStreamName(o,c);SO(l,n,s,r)}}}a(ose,"accessConsumers");async function Ak(e){let t,r,n=1;for(;!r;)try{t=await lg.jetstream({domain:e}),r=await lg.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(Mu.get(e)==="close")break;Mu.set(e,"failed"),n%10===1&&Wr.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<cg?n++*100:cg;await Ek(i)}return{js:t,jsm:r}}a(Ak,"connectToRemoteJS");function ase(){return ug}a(ase,"getDatabaseSubscriptions");var Rk;function cse(e){Rk=e}a(cse,"setIgnoreOrigin");var yk=100,pk=new Array(yk),ig=0;async function SO(e,t,r,n){let{connection:s}=await ag.getNATSReferences();lg=s,og=s.info.server_name;let i,o=1;for(;!i;)try{i=await t.consumers.get(e,og),Wr.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(Mu.get(n)==="close")break;o%10===1&&Wr.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(Wr.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await ag.createConsumer(r,e,og,new Date(Date.now()).toISOString()));let f=o++*100<cg?o++*100:cg;await Ek(f)}let c=!1,l;for(;!c;){if($_.get(e+n)==="close"||Mu.get(n)==="close"){$_.delete(e+n),c=!0;continue}l=await i.consume({max_messages:EO.get(gO.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),$_.set(e+n,l);let u=!1;(async()=>{for await(let f of await l.status())if(f.type===hk.ConsumerDeleted&&(await l.close(),c=!0),f.type===hk.HeartbeatsMissed){let d=f.data;Wr.trace(`${d} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),d===100&&(Wr.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let f of l)await pk[ig],pk[ig]=lse(f).catch(d=>{Wr.error(d)}),++ig>=yk&&(ig=0)}catch(f){f.message==="consumer deleted"?(Wr.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):Wr.error("Error consuming clustering ingest, restarting consumer",f)}}}a(SO,"ingestConsumer");async function lse(e){let t;await rse(()=>{t=jne(e.data)}),_k(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),Wr.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=EO.get(gO.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has(Lu.MSG_HEADERS.TRANSACTED_NODES)&&r.values(Lu.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get(Lu.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!Rk),Xne(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append(Lu.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:o,schema:c,next:l,table:u,records:f,hash_values:d,__origin:h,expiresAt:_}=t;Wr.trace("processing message:",o,c,u,(f?"records: "+f.map(v=>v?.id):"")+(d?"ids: "+d:""),"with sequence:",e.seq),Wr.trace(`messageProcessor nats msg id: ${e.headers.get(Lu.MSG_HEADERS.NATS_MSG_ID)}`);let p;f||(f=d);let S=new Promise(v=>p=v),{timestamp:g,user:R,node_name:E}=h||{},T=ug.get(c)?.get(u);if(!T)throw new Error(`Missing table for replication message: ${u}`);if(o==="define_schema")t.type=o,t.onCommit=p,T.send(t);else if(f.length===1&&!l)T.send({type:mO(o),value:f[0],id:d?.[0],expiresAt:_,timestamp:g,table:u,onCommit:p,user:R,nodeName:E});else{let v=f.map((F,q)=>({type:mO(o),value:F,expiresAt:_,id:d?.[q],table:u}));for(;l;)v.push({type:mO(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;T.send({type:"transaction",writes:v,table:u,timestamp:g,onCommit:p,user:R,nodeName:E})}EO.get(Qne.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&Zne(e.subject.split(".").slice(0,-1).join("."),mk.createNatsTableStreamName(c,u),e.headers,e.data),await S;let O=Date.now()-g;g&&_k(O,"replication-latency",e.subject,o,"ingest")}catch(o){Wr.error(o)}e.ack()}a(lse,"messageProcessor");function mO(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}a(mO,"convertOperation")});var gr=P((yIe,Gk)=>{"use strict";var Nr=ce();Nr.initSync();var use=require("fs-extra"),dse=require("semver"),Y_=require("path"),{monotonicFactory:fse}=require("ulidx"),Nk=fse(),_se=require("util"),wk=require("child_process"),hse=_se.promisify(wk.exec),pse=wk.spawn,Ur=Ct(),je=(G(),D($)),{packageJson:mse,PACKAGE_ROOT:Ese}=Et(),dg=oe(),js=X(),fg=fo(),gse=sg(),V_=Dt(),{broadcast:Sse,onMessageByType:Tse,getWorkerIndex:Ase}=st(),{isMainThread:Ik}=require("worker_threads"),{Encoder:Rse,decode:bO}=require("msgpackr"),Ck=new Rse,{isEmpty:il}=dg,Pk=Vn(),gIe=48*36e11;Ik&&Tse(je.ITC_EVENT_TYPES.RESTART,()=>{zr=void 0,sl=void 0});var{connect:yse,StorageType:bse,RetentionPolicy:Ose,AckPolicy:OO,DeliverPolicy:NO,DiscardPolicy:Nse,NatsConnection:SIe,JetStreamManager:TIe,JetStreamClient:AIe,StringCodec:RIe,JSONCodec:wse,createInbox:wO,headers:Ise,ErrorCode:Ok}=require("nats"),{recordAction:Cse}=(Ii(),D(R_)),{encodeBlobsAsBuffers:Pse}=(ds(),D(um)),Dk=wse(),Dse="clustering",Lse=mse.engines[Ur.NATS_SERVER_NAME],Mse=Y_.join(Ese,"dependencies"),yO=Y_.join(Mse,`${process.platform}-${process.arch}`,Ur.NATS_BINARY_NAME),AO,RO,K_,rl,nl;Gk.exports={runCommand:Lk,checkNATSServerInstalled:vse,createConnection:IO,getConnection:W_,getJetStreamManager:z_,getJetStream:vk,getNATSReferences:Mi,getServerList:xse,createLocalStream:CO,listStreams:Uk,deleteLocalStream:Bse,getServerConfig:vu,listRemoteStreams:Hse,viewStream:kse,viewStreamIterator:Fse,publishToStream:Gse,request:Vse,reloadNATS:PO,reloadNATSHub:Kse,reloadNATSLeaf:Yse,extractServerName:$se,requestErrorHandler:Wse,createLocalTableStream:kk,createTableStreams:Qse,purgeTableStream:Fk,purgeSchemaTableStreams:Jse,getStreamInfo:Xse,updateLocalStreams:eie,closeConnection:Use,getJsmServerName:_g,addNatsMsgHeader:xk,clearClientCache:Mk,updateRemoteConsumer:zse,createConsumer:Bk,updateConsumerIterator:jse};async function Lk(e,t=void 0){let{stdout:r,stderr:n}=await hse(e,{cwd:t});if(n)throw new Error(n.replace(`
+`,t)}var Wc,Zx,eB,tB,g_,Tb,S_,T_,rB,zc,yE,nB,RE,sB,iB,oB,aB,Yx,Wx,E_,uB,Cee,Pee,jx,Qx,fB,Jx,Xx,Lee,hB,pa,Mee,Ii=be(()=>{Wc=require("worker_threads"),Zx=M(st());Ue();eB=M(X()),tB=M(pi()),g_=require("path"),Tb=require("fs/promises"),S_=M(an()),T_=M(ce());G();Pr();rB=M(require("node:fs")),zc=(0,tB.loggerWithTag)("analytics");(0,T_.initSync)();yE=new Map,nB=(0,T_.get)(B.ANALYTICS_AGGREGATEPERIOD)>-1;a(yee,"setAnalyticsEnabled");a(bee,"recordExistingAction");a(Oee,"recordNewAction");a(Lt,"recordAction");Ke.recordAnalytics=Lt;a(Yn,"recordActionBinary");RE=0,sB=1e3,iB="analytics-report",oB=[];a(A_,"addAnalyticsListener");aB=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];a(Nee,"sendAnalytics");a(bE,"storeMetric");a(cB,"calculateCPUUtilization");a(lB,"diffResourceUsage");a(wee,"storeTableSizeMetrics");a(Vx,"storeDBSizeMetrics");a(Kx,"storeVolumeMetrics");a(Iee,"aggregation");Yx=0,Wx=0,E_={},uB=a(()=>new Promise(setImmediate),"rest");a(zx,"cleanup");Cee=36e5,Pee=31536e6;a(Ab,"getRawAnalyticsTable");a(dB,"getAnalyticsTable");(0,Zx.setChildListenerByType)(iB,_B);a(Dee,"startScheduledTasks");Jx=0,Xx=new Map,Lee=!1;a(_B,"recordAnalytics");Mee=1e6;a(vee,"logAnalytics")});var pB={};Be(pB,{Headers:()=>po,appendHeader:()=>OE,mergeHeaders:()=>Rb});function OE(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function Rb(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new po(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var po,y_=be(()=>{po=class extends Map{static{a(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let o=i[1];if(n)r=(typeof o=="string"?o:o.join(", "))+", "+r;else if(typeof o=="string")r=[o,r];else{o.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};a(OE,"appendHeader");a(Rb,"mergeHeaders")});var Ob={};Be(Ob,{EVICTED:()=>ta,INVALIDATED:()=>un,coerceType:()=>IE,makeTable:()=>PE,setServerUtilities:()=>qee});function PE(e){let{primaryKey:t,indices:r,tableId:n,tableName:s,primaryStore:i,databasePath:o,databaseName:c,auditStore:l,schemaDefined:u,dbisDB:f,sealed:d,splitSegments:h,replicate:_}=e,{expirationMS:p,evictionMS:S,audit:g,trackDeletes:R}=e;S??=0;let{attributes:E}=e;E||(E=[]);let T=tR(i,n,l),O,v,F={},q=Promise.resolve(),j,te,se;for(let K of E)(K.assignCreatedTime||K.name==="__createdtime__")&&(j=K),(K.assignUpdatedTime||K.name==="__updatedtime__")&&(te=K),K.expiresAt&&(se=K),K.isPrimaryKey&&(F=K);let z,ne=[],le=[],ie=1,Re=2,pe={},Ae={},Bt=864e5,dt=0,Cn,nn,wr,kd=!1,nc,jT=new Map,QT=new Map,Ht,Fd,Gd=Qc.get(B.REPLICATION_DATABASES);if(Array.isArray(Gd)){for(let K of Gd)if(K.name===c&&K.replicateTo>=0){Fd=K.replicateTo;break}}let JT=i.getRange({start:!1,end:!1}).constructor,Sp=10,qd=6;g&&Tp(),Lf(i.env.path,K=>{if(v)return zo(K)});class De extends Gr{#e;#t;#n;#r;#s;#i;static name=s;static primaryStore=i;static auditStore=l;static primaryKey=t;static tableName=s;static tableId=n;static indices=r;static audit=g;static databasePath=o;static databaseName=c;static attributes=E;static replicate=_;static sealed=d;static splitSegments=h??!0;static createdTimeProperty=j;static updatedTimeProperty=te;static propertyResolvers;static userResolvers={};static sources=[];static getResidencyById;static get expirationMS(){return p}static dbisDB=f;static schemaDefined=u;static sourcedFrom(m,y){if(y&&(this.sourceOptions=y,(y.expiration||y.eviction||y.scanInterval)&&this.setTTLExpiration(y)),y?.intermediateSource)m.intermediateSource=!0,this.sources.unshift(m);else{if(this.sources.some(b=>!b.intermediateSource)){if(this.sources.some(b=>b.name===m.name))return;throw new Error("Can not have multiple canonical (non-intermediate) sources")}this.sources.push(m)}v=v||m.get&&(!m.get.reliesOnPrototype||m.prototype.get),O=O||m.load;let L=a(b=>{let I=this.sources;if(I=I.filter(x=>x.intermediateSource&&x[b]&&(!x[b].reliesOnPrototype||x.prototype[b])),I.length>0)if(I.length===1){let x=I[0];return(N,H,U)=>{if(N?.source!==x)return x[b](H,U,N)}}else return(x,N,H)=>{let U=[];for(let Q of I){if(x?.source===Q)break;U.push(Q[b](N,H,x))}return Promise.all(U)}},"getApplyToIntermediateSource"),C=this.sources[this.sources.length-1];C.intermediateSource&&(C={});let A=a(b=>{if(C[b]&&(!C[b].reliesOnPrototype||C.prototype[b]))return(I,x,N)=>{if(!I?.source)return C[b](x,N,I)}},"getApplyToCanonicalSource");pe={put:A("put"),patch:A("patch"),delete:A("delete"),publish:A("publish")},Ae={put:L("put"),patch:L("patch"),delete:L("delete"),publish:L("publish"),invalidate:L("invalidate")};let w=C.shouldRevalidateEvents;return(async()=>{let b=!1,I,x=a(async(N,H)=>{let U=N.value,Q=N.table?Ye[c][N.table]:De;if(c===Qd&&(N.table===ql.ROLE_TABLE_NAME||N.table===ql.USER_TABLE_NAME)&&(b=!0),N.id===void 0&&(N.id=U[Q.primaryKey],N.id===void 0))throw new Error("Replication message without an id "+JSON.stringify(N));N.source=m;let J={residencyId:ac(N.residencyList),isNotification:!0,ensureLoaded:!1,nodeId:N.nodeId,async:!0},k=await Q.getResource(N.id,H,J);switch(N.finished&&await N.finished,N.type){case"put":return w?k._writeInvalidate(U,J):k._writeUpdate(U,!0,J);case"patch":return w?k._writeInvalidate(U,J):k._writeUpdate(U,!1,J);case"delete":return k._writeDelete(J);case"publish":case"message":return k._writePublish(U,J);case"invalidate":return k._writeInvalidate(U,J);case"relocate":return k._writeRelocate(J);default:xe.default.error?.("Unknown operation",N.type,N.id)}},"writeUpdate");try{let N=m.subscribe;N&&R==null&&(R=!0);let H={crossThreads:!1,inTransactionUpdates:!0,supportsTransactions:!0,omitCurrent:!0},U=m.subscribeOnThisThread?m.subscribeOnThisThread((0,jc.getWorkerIndex)(),H):(0,jc.getWorkerIndex)()===0,Q=N&&U&&await m.subscribe?.(H);if(Q){let J;for await(let k of Q)try{if(!(k.type==="transaction"?k.writes[0]:k)){xe.default.error?.("Bad subscription event",k);continue}if(k.source=m,k.type==="end_txn"){if(J?.resolve(),k.localTime&&I!==k.localTime){if(k.remoteNodeIds?.length>0){let ye=[Symbol.for("seq"),k.remoteNodeIds[0]],Y=f.get(ye),V=Y?.nodes;V||(V=[]);for(let _e of k.remoteNodeIds.slice(1)){let me=V.find(Te=>Te.id===_e);V=V.filter(Te=>Te.id!==_e||Te===me),me||(me={id:_e,seqId:0},V.push(me)),me.seqId=Math.max(Y?.seqId??1,k.localTime),_e===J?.nodeId&&(me.lastTxnTime=k.timestamp)}let ue=Math.max(Y?.seqId??1,k.localTime);xe.default.trace?.("Received txn",c,ue,new Date(ue),k.localTime,new Date(k.localTime),k.remoteNodeIds),f.put(ye,{seqId:ue,nodes:V})}I=k.localTime}k.onCommit&&J?.committed.then(k.onCommit);continue}if(J)if(k.beginTxn)J.resolve();else{J.write_promises.push(x(k,J));continue}!k.timestamp&&k.version&&(k.timestamp=k.version);let de=wt(k,()=>{if(k.type==="transaction"){let ye=[];for(let Y of k.writes)try{ye.push(x(Y,k))}catch(V){throw V.message+=" writing "+JSON.stringify(Y)+" of event "+JSON.stringify(k),V}return Promise.all(ye)}else if(k.type==="define_schema"){let ye=this.attributes.slice(0),Y;for(let V of k.attributes)ye.find(ue=>ue.name===V.name)||(ye.push(V),Y=!0);Y&&(_t({table:s,database:c,attributes:ye,origin:"cluster"}),O_.signalSchemaChange(new N_.SchemaEventMsg(process.pid,Yt.CREATE_TABLE,c,s)))}else return k.beginTxn?(J=k,J.write_promises=[x(k,k)],new Promise(ye=>{J.resolve=()=>ye(Promise.all(J.write_promises))})):x(k,k)});J&&(J.committed=de),b&&de&&!de?.waitingForUserChange&&(de.then(()=>O_.signalUserChange(new N_.UserEventMsg(process.pid))),de.waitingForUserChange=!0),k.onCommit&&(de?de.then(k.onCommit):k.onCommit())}catch(Ce){xe.default.error?.("error in subscription handler",Ce)}}}catch(N){xe.default.error?.(N)}})(),this}static get isCaching(){return v}static get shouldRevalidateEvents(){return this.prototype.get!==De.prototype.get}static getResource(m,y,L){let C=super.getResource(m,y,L);if(m!=null){Ir(m);try{if(C.getRecord?.())return C;if(typeof m=="object"&&m&&!Array.isArray(m))throw new Error(`Invalid id ${JSON.stringify(m)}`);let A=!L?.async||i.cache?.get?.(m),w=Cr(y),b=w.getReadTxn();if(b?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");return Pn(m,y,{transaction:b,ensureLoaded:L?.ensureLoaded},A,I=>{if(I?De._updateResource(C,I):C.#e=null,y.onlyIfCached&&y.noCacheStore){if(!C.doesExist())throw new br.ServerError("Entry is not cached",504)}else if(L?.ensureLoaded){let x=sn(m,I,y,C);if(x)return w?.disregardReadTxn(),C.#i=!0,bb(x,N=>(De._updateResource(C,N),C))}return C})}catch(A){throw A.message.includes("Unable to serialize object")&&(A.message+=": "+JSON.stringify(m)),A}}return C}static _updateResource(m,y){m.#r=y,m.#e=y?.value??null,m.#n=y?.version}ensureLoaded(){let m=sn(this.getId(),this.#r,this.getContext());if(m)return this.#i=!0,bb(m,y=>{this.#r=y,this.#e=y.value,this.#n=y.version})}static getNewId(){let m=F?.type;if(m==="String"||m==="ID")return super.getNewId();if(!Ht){let A=i.getEntry(Symbol.for("id_allocation")),w=A?.value,b;if(w&&w.nodeName===server.hostname&&(!Vee(i)||w.pid===process.pid)){let I=w.start,x=w.end;b=I;for(let N of i.getKeys({start:x,end:I,limit:1,reverse:!0}))b=N}else w=C(A?.version??null),b=w.start;Ht=new BigInt64Array([BigInt(b)+1n]),Ht=new BigInt64Array(i.getUserSharedBuffer("id",Ht.buffer)),Ht.maxSafeId=w.end}let y=Number(Atomics.add(Ht,0,1n)),L=m==="Int"?512:1048576;if(y+L>=Ht.maxSafeId){let A=a(w=>{Ht.maxSafeId=y+(m==="Int"?1023:4194303);let b=(m==="Int"?Math.pow(2,31):Math.pow(2,49))-1,I=w?void 0:i.useReadTransaction(),x=Number(Ht[0]);for(let U of i.getKeys({start:x+1,end:b,limit:1,transaction:I}))b=U;I?.done();let{value:N,version:H}=i.getEntry(Symbol.for("id_allocation"));if(Ht.maxSafeId<b){if(N.end>Ht.maxSafeId-100)return;xe.default.info?.("New id allocation",y,Ht.maxSafeId,H),i.put(Symbol.for("id_allocation"),{start:N.start,end:Ht.maxSafeId,nodeName:server.hostname,pid:process.pid},Date.now(),H)}else{xe.default.warn?.(`Id conflict detected, starting new id allocation range, attempting to allocate to ${Ht.maxSafeId}, but id of ${b} detected`);let U=C(H);U.alreadyUpdated||Atomics.store(Ht,0,BigInt(U.start+1)),Ht.maxSafeId=U.end}},"updateEnd");y+L===Ht.maxSafeId?setImmediate(A):y+100>=Ht.maxSafeId&&(xe.default.warn?.(`Synchronous id allocation required on table ${s}${m=="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`),i.transactionSync(()=>A(!0)))}return y;function C(A){let w=(m==="Int"?Math.pow(2,31):Math.pow(2,49))-1,b=w/4,I,x,N=!1,H,U;do{H=Math.floor(Math.random()*w),U={start:H,end:H+(m==="Int"?1024:4194304),nodeName:server.hostname,pid:process.pid},I=0;for(let Q of i.getKeys({start:H,limit:1,reverse:!0}))I=Q;x=w;for(let Q of i.getKeys({start:H+1,end:w,limit:1}))x=Q;b*=.875,b<1e3&&!N&&(N=!0,xe.default.error?.(`Id allocation in table ${s} is very dense, limited safe range of numbers to allocate ids in${m==="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`,H,I,x,b))}while(!(b<x-H&&(b<H-I||I===0)));return i.transactionSync(()=>{let Q=i.getEntry(Symbol.for("id_allocation"));return(Q?.version??null)==A?(xe.default.info?.("Allocated new id range",U),i.put(Symbol.for("id_allocation"),U,Date.now()),U):(xe.default.debug?.("Looks like ids were already allocated"),{alreadyUpdated:!0,...Q.value})})}}static setTTLExpiration(m){if(typeof m=="number")p=m*1e3,S||(S=0);else if(m&&typeof m=="object")p=m.expiration*1e3,S=(m.eviction||0)*1e3,Bt=m.scanInterval*1e3;else throw new Error("Invalid expiration value type");if(p<0)throw new Error("Expiration can not be negative");Bt=Bt||(p+S)/4,zo()}static getResidencyRecord(m){return f.get([Symbol.for("residency_by_id"),m])}static setResidency(m){De.getResidency=m&&((y,L)=>{try{return m(y,L)}catch(C){throw C.message+=` in residency function for table ${s}`,C}})}static setResidencyById(m){De.getResidencyById=m&&(y=>{try{return m(y)}catch(L){throw L.message+=` in residency function for table ${s}`,L}})}static getResidency(m,y){if(De.getResidencyById)return De.getResidencyById(m[t]);let L=Fd;if(y.replicateTo!=null){if(Array.isArray(y.replicateTo))return y.replicateTo.includes(server.hostname)?y.replicateTo:[server.hostname,...y.replicateTo];y.replicateTo>=0&&(L=y.replicateTo)}if(L>=0&&server.nodes){let C=[server.hostname];if(y.previousResidency)C.push(...y.previousResidency.slice(0,L));else{let A=server.nodes.map(I=>I.name),w=Math.floor(A.length*Math.random());C.push(...A.slice(w,w+L));let b=w+L-A.length;b>0&&C.push(...A.slice(0,b))}return C}}static enableAuditing(m=!0){g=m,m&&Tp(),De.audit=m}static coerceId(m){return m===""?null:IE(m,F)}static async dropTable(){delete Ye[c][s];for(let m of i.getRange({versions:!0,snapshot:!1,lazy:!0}))m.metadataFlags&_n&&m.value&&ia(m.value);if(c===o){for(let m of E)f.remove(De.tableName+"/"+m.name),r[m.name]?.drop();f.remove(De.tableName+"/"),i.drop(),await f.committed}else console.log("legacy dropTable"),await i.close(),await wE.default.remove(data_path),await wE.default.remove(data_path===standard_path?data_path+MDB_LOCK_FILE_SUFFIX:path.join(path.dirname(data_path),MDB_LEGACY_LOCK_FILE_NAME));O_.signalSchemaChange(new N_.SchemaEventMsg(process.pid,Yt.DROP_TABLE,c,s))}get(m){if(typeof m=="string")return this.getProperty(m);if(this.isCollection)return this.search(m);if(this.getId()===null){if(m?.conditions||m?.size>0)return this.search(m);let y={records:"./",name:s,database:c,auditSize:l?.getStats().entryCount,attributes:E};return this.getContext()?.includeExpensiveRecordCountEstimates?De.getRecordCount().then(L=>(y.recordCount=L.recordCount,y.estimatedRecordRange=L.estimatedRange,y)):y}if(m?.property)return this.getProperty(m.property);if(this.doesExist()||m?.ensureLoaded===!1||this.getContext()?.returnNonexistent)return this}allowRead(m,y){let L=sc(m);if(L?.read){if(L.isSuperUser)return!0;let C=L.attribute_permissions,A=y?.select;if(C?.length>0||kd&&A){if(y||(y={}),A){let w=C?.length>0&&yb(C,"read");y.select=A.map(b=>{let I=b.name||b;if(!w||w[I]){let x=wr[I]?.definition?.tableClass;if(x){if(b.name||(b={name:b}),!x.prototype.allowRead.call(null,m,b))return!1;if(!b.select)return b.name}return b}}).filter(Boolean)}else y.select=C.filter(w=>w.read&&!wr[w.attribute_name]).map(w=>w.attribute_name);return y}else return!0}}allowUpdate(m,y){let L=sc(m);if(L?.update){let C=L.attribute_permissions;if(C?.length>0){let A=yb(C,"update");for(let w in y)if(!A[w])return!1;for(let w of C){let b=w.attribute_name;!w.update&&!(b in y)&&(y[b]=this.getProperty(b))}}return Wo(this.getContext())}}allowCreate(m,y){if(this.isCollection){let L=sc(m);if(L?.insert){let C=L.attribute_permissions;if(C?.length>0){let A=yb(C,"insert");for(let w in y)if(!A[w])return!1;return Wo(this.getContext())}else return Wo(this.getContext())}}else return this.allowUpdate(m,{})}allowDelete(m){return sc(m)?.delete&&Wo(this.getContext())}update(m,y){if(!Cr(this.getContext()))throw new Error("Can not update a table resource outside of a transaction");if(m===!1)return this;let C;return typeof m=="object"&&m&&(y?(Object.isFrozen(m)&&(m={...m}),this.#e={},this.#t=m):(C=this.#t,C&&(m=Object.assign(C,m)),this.#t=m)),this._writeUpdate(this.#t,y),this}addTo(m,y){if(typeof y=="number"||typeof y=="bigint")this.#s===EB?this.set(m,(+this.getProperty(m)||0)+y):(this.#s||this.update(),this.set(m,new Jm(y)));else throw new Error("Can not add a non-numeric value")}subtractFrom(m,y){if(typeof y=="number")return this.addTo(m,-y);throw new Error("Can not subtract a non-numeric value")}getMetadata(){return this.#r}getRecord(){return this.#e}getChanges(){return this.#t}_setChanges(m){this.#t=m}setRecord(m){this.#e=m}invalidate(){this._writeInvalidate()}_writeInvalidate(m,y){let L=this.getContext(),C=this.getId();Ir(C),Cr(this.getContext()).addWrite({key:C,store:i,invalidated:!0,entry:this.#r,before:pe.invalidate?.bind(this,L,C),beforeIntermediate:Ae.invalidate?.bind(this,L,C),commit:a((w,b)=>{if(!(Yo(w,b,y?.nodeId)<=0)){m??=null;for(let I in r)m||(m={}),m[I]===void 0&&(m[I]=this.getProperty(I));xe.default.trace?.(`Invalidating entry id: ${C}, timestamp: ${new Date(w).toISOString()}`),T(C,m,this.#r,w,un,g,{user:L?.user,residencyId:y?.residencyId,nodeId:y?.nodeId},"invalidate")}},"commit")})}_writeRelocate(m){let y=this.getContext(),L=this.getId();Ir(L),Cr(this.getContext()).addWrite({key:L,store:i,invalidated:!0,entry:this.#r,before:pe.relocate?.bind(this,y,L),beforeIntermediate:Ae.relocate?.bind(this,y,L),commit:a((A,w)=>{if(Yo(A,w,m?.nodeId)<=0)return;let b=De.getResidencyRecord(m.residencyId),I=0,x=null,N=w?.value;if(b&&!b.includes(server.hostname)){for(let H in r)x||(x={}),x[H]=N[H];I=un}else x=N;xe.default.trace?.(`Relocating entry id: ${L}, timestamp: ${new Date(A).toISOString()}`),T(L,x,this.#r,A,I,g,{user:y.user,residencyId:m.residencyId,nodeId:m.nodeId,expiresAt:m.expiresAt},"relocate",!1,null)},"commit")})}static _recordRelocate(m,y){let L={previousResidency:this.getResidencyRecord(m.residencyId),isRelocation:!0},C=oc(this.getResidency(y.value,L)),A;if(C){if(!C.includes(server.hostname))return!1;A=ac(C)}let w=0;xe.default.debug?.("Performing a relocate of an entry",m.key,y.value,C);let b=T(m.key,y.value,m,m.version,w,!0,{residencyId:A,expiresAt:y.expiresAt},"relocate",!1,null);return!0}static evict(m,y,L){let C=this.Source,A;if(!((v||g)&&(!y||(A=i.getEntry(m),!A||!y)||A.version!==L))){if(v){if(i.hasLock(m,A.version))return;let w;for(let b in r)w||(w={}),w[b]=y[b];if(w)return T(m,w,A,L,ta,null,null,null,!0)}if(i.ifVersion(m,L,()=>{Wi(m,y,null)}),g)return T(m,null,A,L,ta,null,null,null,!0);yc(i,A??i.getEntry(m),L)}}lock(){throw new Error("Not yet implemented")}static operation(m,y){return m.table||=s,m.schema||=c,OB.operation(m,y)}put(m){this.update(m,!0)}patch(m){this.update(m,!1)}_writeUpdate(m,y,L){let C=this.getContext(),A=Cr(C),w=this.getId();Ir(w);let b=this.#r;this.#s=y?EB:kee;let I={key:w,store:i,entry:b,nodeName:C?.nodeName,validate:a(x=>{m||(m=this.#t),y||m&&jm(this.#t===m?this:m)?C?.source||(A.checkOverloaded(),this.validate(m,!y),te&&(m[te.name]=te.type==="Date"?new Date(x):te.type==="String"?new Date(x).toISOString():x),y&&(t&&m[t]!==w&&(m[t]=w),j&&(b?.value?m[j.name]=b?.value[j.name]:m[j.name]=j.type==="Date"?new Date(x):j.type==="String"?new Date(x).toISOString():x),m=Uc(m))):A.removeWrite(I)},"validate"),before:y?pe.put?()=>pe.put(C,w,m):null:pe.patch?()=>pe.patch(C,w,m):pe.put?()=>pe.put(C,w,Uc(this)):null,beforeIntermediate:y?Ae.put?()=>Ae.put(C,w,m):null:Ae.patch?()=>Ae.patch(C,w,m):Ae.put?()=>Ae.put(C,w,Uc(this)):null,commit:a((x,N,H)=>{if(H){if(C&&N?.version>(C.lastModified||0)&&(C.lastModified=N.version),this.#r=N,N?.value&&N.value.getRecord)throw new Error("Can not assign a record to a record, check for circular references");y||(this.#e=N?.value??null)}this.#t=void 0,this.#n=x;let U=N?.value,Q=m;this.#s=0;let J=!1,k=Yo(x,N,L?.nodeId),Ce;if(k<=0)if(g){let ue=N.localTime,_e=N.version;xe.default.trace?.("Applying CRDT update to record with id: ",w,"applying later update:",_e);let me=[];for(;ue>x||_e>=x&&ue>0;){let Te=l.get(ue);if(!Te)break;let Pe=It(Te);if(_e=Pe.version,_e>=x){if(_e===x){if(k=Yo(x,{version:_e,localTime:ue},L?.nodeId),k===0)return;if(k>0)continue}if(Pe.type==="patch")me.push(Pe),Ce=m;else if(Pe.type==="put"||Pe.type==="delete")return}ue=Pe.previousLocalTime}me.sort((Te,Pe)=>Te.version-Pe.version);for(let Te of me){let Pe=Te.getValue(i);if(Q=gm(Q,Pe,y),xe.default.debug?.("Rebuilding update with future patch:",Q),!Q)return}}else{if(y)return;Q=gm(Q,U,y),xe.default.debug?.("Rebuilding update without audit:",Q)}let de;if(y?de=Q:(this.#e=U,de=Uc(this,Q)),this.#e=de,de&&de.getRecord)throw new Error("Can not assign a record to a record, check for circular references");let ye;if(L?.residencyId!=null)ye=L.residencyId;else{b?.residencyId&&(C.previousResidency=De.getResidencyRecord(b.residencyId));let ue=oc(De.getResidency(de,C));if(ue&&!ue.includes(server.hostname))if(Ce??=de,J=!0,De.getResidencyById)de=void 0;else{de=null;for(let _e in r)de||(de={}),de[_e]=Ce[_e]}ye=ac(ue)}y||(Ce=m);let Y=C?.expiresAt??(p?p+Date.now():-1);xe.default.trace?.(`Saving record with id: ${w}, timestamp: ${new Date(x).toISOString()}${Y?", expires at: "+new Date(Y).toISOString():""}${N?", replaces entry from: "+new Date(N.version).toISOString():", new entry"}`,(()=>{try{return JSON.stringify(de).slice(0,100)}catch{return""}})()),Wi(w,U,de);let V=y?"put":"patch";T(w,de,N,x,J?un:0,g,{omitLocalRecord:J,user:C?.user,residencyId:ye,expiresAt:Y,nodeId:L?.nodeId,originatingOperation:C?.originatingOperation},V,!1,Ce),C.expiresAt&&zo()},"commit")};A.addWrite(I)}async delete(m){if(typeof m=="string")return this.deleteProperty(m);if(this.isCollection){for await(let y of this.search(m))(await De.getResource(y[t],this.getContext(),{ensureLoaded:!1}))._writeDelete(m);return}return this.#e?this._writeDelete(m):!1}_writeDelete(m){let y=Cr(this.getContext()),L=this.getId();Ir(L);let C=this.getContext();return y.addWrite({key:L,store:i,entry:this.#r,nodeName:C?.nodeName,before:pe.delete?.bind(this,C,L),beforeIntermediate:Ae.delete?.bind(this,C,L),commit:a((A,w,b)=>{let I=w?.value;b&&(C&&w?.version>(C.lastModified||0)&&(C.lastModified=w.version),De._updateResource(this,w)),!(Yo(A,w,m?.nodeId)<=0)&&(Wi(this.getId(),I),xe.default.trace?.(`Deleting record with id: ${L}, txn timestamp: ${new Date(A).toISOString()}`),g||R?(T(L,null,this.#r,A,0,g,{user:C?.user,nodeId:m?.nodeId},"delete"),g||zo()):yc(i,w))},"commit")}),!0}search(m){let y=this.getContext(),L=Cr(y);if(!m)throw new Error("No query provided");let C=m.conditions;C?C.length===void 0&&(C=C[Symbol.iterator]?Array.from(C):[C]):C=Array.isArray(m)?m:m[Symbol.iterator]?Array.from(m):[],this.getId()&&(C=[{attribute:null,comparator:Array.isArray(this.getId())?"prefix":"starts_with",value:this.getId()}].concat(C));let A,w={};function b(V,ue){let _e;switch(ue){case"and":case void 0:if(V.length<1)throw new Error('An "and" operator requires at least one condition');_e=!0;break;case"or":if(V.length<2)throw new Error('An "or" operator requires at least two conditions');break;default:throw new Error("Invalid operator "+ue)}for(let me of V){if(me.conditions){me.conditions=b(me.conditions,me.operator);continue}let Te=me[0]??me.attribute,Pe=Te==null?F:hi(E,Te);if(Pe)(Pe.type||wA[me.comparator])&&(me[1]===void 0?me.value=x(me.value,Pe):me[1]=x(me[1],Pe));else if(Te!=null)throw(0,br.handleHDBError)(new Error,`${Te} is not a defined attribute`,404);if(me.chainedConditions)if(me.chainedConditions.length===1&&(!me.operator||me.operator=="and")){let Ve=me.chainedConditions[0],We,Dn;if(Ve.comparator==="gt"||Ve.comparator==="greater_than"||Ve.comparator==="ge"||Ve.comparator==="greater_than_equal"?(We=me,Dn=Ve):(We=Ve,Dn=me),We.comparator!=="lt"&&We.comparator!=="less_than"&&We.comparator!=="le"&&We.comparator!=="less_than_equal")throw new Error("Invalid chained condition, only less than and greater than conditions can be chained together");let os=Dn.comparator==="ge"||Dn.comparator==="greater_than_equal",Ap=We.comparator==="le"||We.comparator==="less_than_equal";me.comparator=(os?"ge":"gt")+(Ap?"le":"lt"),me.value=[Dn.value,We.value]}else throw new Error("Multiple chained conditions are not currently supported")}return V}a(b,"prepareConditions");function I(V,ue){if(m.enforceExecutionOrder)return V;for(let _e of V)_e.conditions&&(_e.conditions=I(_e.conditions,_e.operator));return V.length>1&&ue!=="or"?(0,yB.sortBy)(V,Kp(De)):V}a(I,"orderConditions");function x(V,ue){return Array.isArray(V)?V.map(_e=>IE(_e,ue)):IE(V,ue)}a(x,"coerceTypedValues");let N=m.operator;(C.length>0||N)&&(C=b(C,N));let H=typeof m.sort=="object"&&m.sort,U;if(H&&N!=="or"){let V=H.attribute;if(V==null)throw new br.ClientError("Sort requires an attribute");if(A=C.find(ue=>zl(ue.attribute)===zl(V)),!A){let ue=hi(E,V);if(!ue)throw(0,br.handleHDBError)(new Error,`${Array.isArray(V)?V.join("."):V} is not a defined attribute`,404);if(ue.indexed)A={attribute:V,comparator:"sort"},C.push(A);else if(C.length===0&&!m.allowFullScan)throw(0,br.handleHDBError)(new Error,`${Array.isArray(V)?V.join("."):V} is not indexed and not combined with any other conditions`,404)}A&&(A.descending=!!H.descending)}C=I(C,N),H&&(A&&C[0]===A?H.next&&(U={dbOrderedAttribute:H.attribute,attribute:H.next.attribute,descending:H.next.descending,next:H.next.next}):(A&&C.splice(C.indexOf(A),1),U=H));let Q=m.select;if(C.length===0&&(C=[{attribute:t,comparator:"greater_than",value:!0}]),m.explain)return{conditions:C,operator:N,postOrdering:U,selectApplied:!!Q};let J=L.useReadTxn(),k=IA(C,N,De,J,m,y,(V,ue)=>Vd(V,Q,y,J,ue),w),Ce=m.ensureLoaded!==!1;U||(k=Y(k));let de=De.transformEntryForSelect(Q,y,J,w,Ce,!0),ye=De.transformToOrderedSelect(k,Q,U,J,y,de);function Y(V){return m.offset||m.limit!==void 0?V.slice(m.offset,m.limit!==void 0?(m.offset||0)+m.limit:void 0):V}return a(Y,"applyOffset"),U&&(ye=Y(ye)),ye.onDone=()=>{ye.onDone=null,L.doneReadTxn()},ye.selectApplied=!0,ye.getColumns=()=>{if(Q){let V=[];for(let ue of Q)ue==="*"?V.push(...E.map(_e=>_e.name)):V.push(ue.name||ue);return V}return E.filter(V=>!V.computed&&!V.relationship).map(V=>V.name)},ye}static transformToOrderedSelect(m,y,L,C,A,w){let b=new JT;if(L){m=Vd(m,y,C,A,null);let I;b.iterate=function(){let N,H=m[Symbol.asyncIterator]?m[Symbol.asyncIterator]():m[Symbol.iterator](),U,Q=L.dbOrderedAttribute,J,k,Ce=!0;function de(Y){let V=Y.next&&de(Y.next),ue=Y.descending;return(_e,me)=>{let Te=ic(_e,Y.attribute,C),Pe=ic(me,Y.attribute,C),Ve=ue?(0,Jc.compareKeys)(Pe,Te):(0,Jc.compareKeys)(Te,Pe);return Ve===0?V?.(_e,me)||0:Ve}}a(de,"createComparator");let ye=de(L);return{async next(){let Y;if(N)if(Y=N.next(),Y.done){if(U)return b.onDone&&b.onDone(),Y}else return{value:await w.call(this,Y.value)};I=[],J&&I.push(J);do if(Y=await H.next(),Y.done){if(U=!0,I.length)break;return b.onDone&&b.onDone(),Y}else{let V=Y.value;if(V?.then&&(V=await V),Q){let ue=ic(V,Q,C);if(Ce)Ce=!1,k=ue;else if(ue!==k){k=ue,J=V;break}}I.push(V)}while(!0);return L.isGrouped,I.sort(ye),N=I[Symbol.iterator](),Y=N.next(),Y.done?(b.onDone&&b.onDone(),Y):{value:await w.call(this,Y.value)}},return(){b.onDone&&b.onDone(),H.return()},throw(){b.onDone&&b.onDone(),H.throw()}}};let x=a(N=>{if(typeof y=="object"&&Array.isArray(N.attribute))for(let H=0;H<y.length;H++){let U=y[H],Q;if(U.name===N.attribute[0]){for(Q=U.sort||(U.sort={});Q.next;)Q=Q.next;Q.attribute=N.attribute.slice(1),Q.descending=N.descending}else U===N.attribute[0]&&(y[H]=Q={name:U,sort:{attribute:N.attribute.slice(1),descending:N.descending}})}N.next&&x(N.next)},"applySortingOnSelect");x(L)}else b.iterate=(m[Symbol.asyncIterator]||m[Symbol.iterator]).bind(m),b=b.map(function(I){try{let x=w.call(this,I);return typeof x?.catch=="function"?x.catch(N=>{throw N.partialObject={[t]:I.key},N}):x}catch(x){throw x.partialObject={[t]:I.key},x}});return b}static transformEntryForSelect(m,y,L,C,A,w){if(m&&(m===t||m?.length===1&&m[0]===t&&Array.isArray(m))){let N=a(H=>(y?.transaction?.stale&&(y.transaction.stale=!1),H?.key??H),"transform");return m===t?N:m.asArray?H=>[N(H)]:H=>({[t]:N(H)})}let b;A&&v&&!(typeof m=="string"?[m]:m)?.every(N=>{let H;return typeof N=="object"?H=N.name:H=N,r[H]||H===t})&&(b=!0);let I,x=a(function(N){let H;if(y?.transaction?.stale&&(y.transaction.stale=!1),N!=null){if(H=N.value||N.deref?.()?.value,!H&&(N.key===void 0||N.deref)||N.metadataFlags&un){if(N.metadataFlags&un&&y.replicateFrom===!1&&w&&N.residencyId)return Ea.SKIP;if(N=Pn(N.key??N,y,{transaction:L,lazy:m?.length<4,ensureLoaded:A},this?.isSync,U=>U),N?.then)return N.then(x.bind(this));H=N?.value}if(b&&N?.metadataFlags&(un|ta)||N?.expiresAt!=null&&N?.expiresAt<Date.now()){if(y.onlyIfCached&&y.noCacheStore)return{[t]:N.key,message:"This entry has expired"};let U=sn(N.key??N,N,y);if(U?.then)return U.then(x)}}if(H==null)return w?Ea.SKIP:H;if(m&&!(m[0]==="*"&&m.length===1)){let U,Q=a((k,Ce)=>{let de;typeof k=="object"?de=k.name:de=k;let ye=wr?.[de],Y;if(ye){let V=C?.[de];if(V)if(V.hasMappings){let _e=ye.from?H[ye.from]:zl(N.key);Y=V.get(_e),Y||(Y=[])}else Y=V.fromRecord?.(H);else Y=ye(H,y,N);let ue=a(_e=>{if(_e&&typeof _e=="object"){let me=ye.definition?.tableClass||De;I||(I={});let Te=I[de]||(I[de]=me.transformEntryForSelect(de===k?null:k.select||(Array.isArray(k)?k:null),y,L,V,A));if(Array.isArray(_e)){let Pe=[],Ve=me.transformToOrderedSelect(_e,k.select,typeof k.sort=="object"&&k.sort,y,L,Te)[this.isSync?Symbol.iterator:Symbol.asyncIterator](),We=a(os=>{for(;!os.done;){if(os?.then)return os.then(We);Pe.push(os.value),os=Ve.next()}Ce(Pe,de)},"nextValue"),Dn=We(Ve.next());Dn&&(U||(U=[]),U.push(Dn));return}else if(_e=Te.call(this,_e),_e?.then){U||(U=[]),U.push(_e.then(Pe=>Ce(Pe,de)));return}}Ce(_e,de)},"handleResolvedValue");Y?.then?(U||(U=[]),U.push(Y.then(ue))):ue(Y);return}else Y=H[de],Y&&typeof Y=="object"&&de!==k&&(Y=De.transformEntryForSelect(k.select||k,y,L,null)({value:Y}));Ce(Y,de)},"selectAttribute"),J;if(typeof m=="string")Q(m,k=>{J=k});else if(Array.isArray(m))if(m.asArray)J=[],m.forEach((k,Ce)=>{k==="*"?m[Ce]=H:Q(k,de=>J[Ce]=de)});else{J={};let k=m.forceNulls;for(let Ce of m)if(Ce==="*")for(let de in H)J[de]=H[de];else Q(Ce,(de,ye)=>{de===void 0&&k&&(de=null),J[ye]=de})}else throw new br.ClientError("Invalid select"+m);return U?Promise.all(U).then(()=>J):J}return H},"transform");return x}async subscribe(m){if(!l)throw new Error("Can not subscribe to a table without an audit log");g||_t({table:s,database:c,schemaDefined:u,attributes:E,audit:!0}),m||(m={});let y=!m.rawEvents,L=[],C=this,A=pR(De,this.getId()??null,function(b,I,x,N){try{let H=I.getValue?.(i,y),U=I.type;if(!H&&U==="patch"&&y){let J=i.getEntry(b);J?.version===I.version?H=J.value:H=I.getValue?.(i,!0,x),U="put"}let Q={id:b,localTime:x,value:H,version:I.version,type:U,beginTxn:N};L?L.push(Q):this.send(Q)}catch(H){xe.default.error?.(H)}},m.startTime||0,m),w=(async()=>{this.isCollection&&(A.includeDescendants=!0,m.onlyChildren&&(A.onlyChildren=!0)),m.supportsTransactions&&(A.supportsTransactions=!0);let b=this.getId(),I=m.previousCount;I>1e3&&(I=1e3);let x=m.startTime;if(this.isCollection){if(x){if(I)throw new br.ClientError("startTime and previousCount can not be combined for a table level subscription");for(let{key:N,value:H}of l.getRange({start:x,exclusiveStart:!0,snapshot:!1})){let U=It(H);if(U.tableId!==n)continue;let Q=U.recordId;if(b==null||AB(b,Q)){let J=U.getValue(i,y,N);if(A.send({id:Q,localTime:N,value:J,version:U.version,type:U.type}),A.queue?.length>SB&&await A.waitForDrain()===!1)return}A.startTime=N}}else if(I){let N=[];for(let{key:H,value:U}of l.getRange({start:"z",end:!1,reverse:!0}))try{let Q=It(U);if(Q.tableId!==n)continue;let J=Q.recordId;if(b==null||AB(b,J)){let k=Q.getValue(i,y,H);if(N.push({id:J,localTime:H,value:k,version:Q.version,type:Q.type}),--I<=0)break}}catch(Q){xe.default.error("Error getting history entry",H,Q)}for(let H=N.length;H>0;)A.send(N[--H]);N[0]&&(A.startTime=N[0].localTime)}else if(!m.omitCurrent){for(let{key:N,value:H,version:U,localTime:Q}of i.getRange({start:b??!1,end:b==null?void 0:[b,Jc.MAXIMUM_KEY],versions:!0,snapshot:!1}))if(H&&(A.send({id:N,localTime:Q,value:H,version:U,type:"put"}),A.queue?.length>SB&&await A.waitForDrain()===!1))return}}else{I&&!x&&(x=0);let N=this.#r?.localTime;if(N===eR&&(i.cache?.delete(b),this.#r=i.getEntry(b),xe.default.trace?.("re-retrieved record",N,this.#r?.localTime),N=this.#r?.localTime),xe.default.trace?.("Subscription from",x,"from",b,N),x<N){let H=[],U=N;do{let Q=l.get(U);if(Q){m.omitCurrent=!0;let J=It(Q),k=J.getValue(i,y,U);y&&(J.type="put"),H.push({id:b,value:k,localTime:U,...J}),U=J.previousLocalTime}else break;I&&I--}while(U>x&&I!==0);for(let Q=H.length;Q>0;)A.send(H[--Q]);A.startTime=N}!m.omitCurrent&&this.doesExist()&&A.send({id:b,localTime:N,value:this.#e,version:this.#n,type:"put"})}for(let N of L)A.send(N);L=null})();return m.listener&&A.on("data",m.listener),A}static subscribeOnThisThread(m,y){return m===0||y?.crossThreads===!1}doesExist(){return!!(this.#e||this.#s)}publish(m,y){this._writePublish(m,y)}_writePublish(m,y){let L=Cr(this.getContext()),C=this.getId()||null;C!=null&&Ir(C);let A=this.getContext();L.addWrite({key:C,store:i,entry:this.#r,nodeName:A?.nodeName,validate:a(()=>{A?.source||(L.checkOverloaded(),this.validate(m))},"validate"),before:pe.publish?.bind(this,A,C,m),beforeIntermediate:Ae.publish?.bind(this,A,C,m),commit:a((w,b,I)=>{b===void 0&&R&&!g&&zo(),xe.default.trace?.(`Publishing message to id: ${C}, timestamp: ${new Date(w).toISOString()}`),T(C,b?.value??null,b,b?.version||w,0,!0,{user:A?.user,residencyId:y?.residencyId,expiresAt:A?.expiresAt,nodeId:y?.nodeId},"message",!1,m)},"commit")})}validate(m,y){let L,C=a((A,w,b)=>{if(w.type&&A!=null)if(y&&A.__op__&&(A=A.value),w.properties){typeof A!="object"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an object${w.type?" ("+w.type+")":""}`);let I=w.properties;for(let x=0,N=I.length;x<N;x++){let H=I[x],U=C(A[H.name],H,b+"."+H.name);U&&(A[H.name]=U)}if(w.sealed&&A!=null&&typeof A=="object")for(let x in A)I.find(N=>N.name===x)||(L||(L=[])).push(`Property ${x} is not allowed within object in property ${b}`)}else switch(w.type){case"Int":(typeof A!="number"||A>>0!==A)&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an integer (from -2147483648 to 2147483647)`);break;case"Long":(typeof A!="number"||!(Math.floor(A)===A&&Math.abs(A)<=9007199254740992))&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an integer (from -9007199254740992 to 9007199254740992)`);break;case"Float":typeof A!="number"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a number`);break;case"ID":typeof A=="string"||A?.length>0&&A.every?.(I=>typeof I=="string")||(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a string, or an array of strings`);break;case"String":typeof A!="string"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a string`);break;case"Boolean":typeof A!="boolean"&&(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a boolean`);break;case"Date":if(!(A instanceof Date)){if(typeof A=="string"||typeof A=="number")return new Date(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Date`)}break;case"BigInt":if(typeof A!="bigint"){if(typeof A=="string"||typeof A=="number")return BigInt(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a bigint`)}break;case"Bytes":if(!(A instanceof Uint8Array)){if(typeof A=="string")return Buffer.from(A);(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Buffer or Uint8Array`)}break;case"Blob":if(!(A instanceof Ei)){if(typeof A=="string"&&(A=Buffer.from(A)),A instanceof Buffer)return createBlob(A,{type:"text/plain"});(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be a Blob`)}break;case"array":if(Array.isArray(A)){if(w.elements)for(let I=0,x=A.length;I<x;I++){let N=A[I],H=C(N,w.elements,b+"[*]");H&&(A[I]=H)}}else(L||(L=[])).push(`Value ${Es(A)} in property ${b} must be an Array`);break}w.nullable===!1&&A==null&&(L||(L=[])).push(`Property ${b} is required (and not does not allow null values)`)},"validateValue");for(let A=0,w=E.length;A<w;A++){let b=E[A];if(!(b.relationship||b.computed)&&(!y||b.name in m)){let I=C(m[b.name],b,b.name);I&&(m[b.name]=I)}}if(d)for(let A in m)E.find(w=>w.name===A)||(L||(L=[])).push(`Property ${A} is not allowed`);if(L)throw new br.ClientError(L.join(". "))}getUpdatedTime(){return this.#n}wasLoadedFromSource(){return v?!!this.#i:void 0}static async addAttributes(m){let y=E.slice(0);for(let L of m){if(!L.name)throw new br.ClientError("Attribute name is required");if(L.name.match(/[`/]/))throw new br.ClientError("Attribute names cannot include backticks or forward slashes");(0,bB.validateAttribute)(L.name),y.push(L)}return _t({table:s,database:c,schemaDefined:u,attributes:y}),De.indexingOperation}static async removeAttributes(m){let y=E.filter(L=>!m.includes(L.name));return _t({table:s,database:c,schemaDefined:u,attributes:y}),De.indexingOperation}static getSize(){let m=i.getStats();return(m.treeBranchPageCount+m.treeLeafPageCount+m.overflowPages)*m.pageSize}static getAuditSize(){let m=l?.getStats();return m&&(m.treeBranchPageCount+m.treeLeafPageCount+m.overflowPages)*m.pageSize}static getStorageStats(){let m=i.env.path,y=wE.default.statfsSync?.(m)??{};return{available:y.bavail*y.bsize,free:y.bfree*y.bsize,size:y.blocks*y.bsize}}static async getRecordCount(m){let y=i.getStats().entryCount,L=1e3/2,C=performance.now(),A=Math.floor(y/2),w=m?.exactCount,b=0,I=0,x;for(let{value:N}of i.getRange({start:!0,lazy:!0,snapshot:!1}))if(N!=null&&b++,I++,await ma(),!w&&I<A&&performance.now()-C>L){x=I;break}if(x){let N=b;b=0;for(let{value:Y}of i.getRange({start:"\uFFFF",reverse:!0,lazy:!0,limit:x,snapshot:!1}))Y!=null&&b++,await ma();let H=x*2,U=(b+N)/H,Q=Math.pow((b-N+1)/x/2,2)+U*(1-U)/H,J=Math.max(Math.sqrt(Q)*y,1),k=Math.round(U*y),Ce=Math.max(k-1.96*J,b+N),de=Math.min(k+1.96*J,y),ye=Math.pow(10,Math.round(Math.log10(J)));return ye>k&&(ye=ye/10),b=Math.round(k/ye)*ye,{recordCount:b,estimatedRange:[Math.round(Ce),Math.round(de)]}}return{recordCount:b}}static updatedAttributes(){wr=this.propertyResolvers={$id:a((m,y,L)=>({value:L.key}),"$id"),$updatedtime:a((m,y,L)=>L.version,"$updatedtime"),$record:a((m,y,L)=>L?{value:m}:m,"$record")};for(let m of this.attributes){m.isPrimaryKey&&(F=m),m.resolve=null;let y=m.relationship,L=m.computed;if(y)if(m.indexed&&console.error("A relationship property can not be directly indexed, (but you may want to index the foreign key attribute)"),L&&console.error("A relationship property is already computed and can not be combined with a computed function (the relationship will be given precedence)"),kd=!0,y.to)m.elements?.definition?(wr[m.name]=m.resolve=(C,A,w)=>{let b=C[y.from?y.from:t],I=m.elements.definition.tableClass;return w?Wl({attribute:y.to,value:b},Cr(A).getReadTxn(),!1,I,!1).asArray:I.search([{attribute:y.to,value:b}],A).asArray},m.set=()=>{throw new Error("Setting a one-to-many relationship property is not supported")},m.resolve.definition=m.elements.definition,y.from&&(m.resolve.from=y.from)):console.error(`The one-to-many/many-to-many relationship property "${m.name}" in table "${s}" must have an array type referencing a table as the elements`);else if(y.from){let C=m.definition||m.elements?.definition;C?(wr[m.name]=m.resolve=(A,w,b)=>{let I=A[y.from];if(I!==void 0){if(m.elements){let x,N=I?.map(H=>{let U=b?C.tableClass.primaryStore.getEntry(H,{transaction:Cr(w).getReadTxn()}):C.tableClass.get(H,w);return U?.then&&(x=!0),U});return y.filterMissing?x?Promise.all(N).then(H=>H.filter(RB)):N.filter(RB):x?Promise.all(N):N}return b?C.tableClass.primaryStore.getEntry(I,{transaction:Cr(w).getReadTxn()}):C.tableClass.get(I,w)}},m.set=(A,w)=>{if(Array.isArray(w)){let b=w.map(I=>I.getId?.()||I[C.tableClass.primaryKey]);A[y.from]=b}else{let b=w.getId?.()||w[C.tableClass.primaryKey];A[y.from]=b}},m.resolve.definition=m.definition||m.elements?.definition,m.resolve.from=y.from):console.error(`The relationship property "${m.name}" in table "${s}" must be a type that references a table`)}else console.error(`The relationship directive on "${m.name}" in table "${s}" must use either "from" or "to" arguments`);else L&&(typeof L.from=="function"&&this.setComputedAttribute(m.name,L.from),wr[m.name]=m.resolve=(C,A,w)=>{let b=typeof L.from=="string"?C[L.from]:C,I=this.userResolvers[m.name];if(I)return I(b,A,w);xe.default.warn(`Computed attribute "${m.name}" does not have a function assigned to it. Please use setComputedAttribute('${m.name}', resolver) to assign a resolver function.`),this.userResolvers[m.name]=()=>{}})}Xm(this,this)}static setComputedAttribute(m,y){let L=hi(E,m);if(!L){console.error(`The attribute "${m}" does not exist in the table "${s}"`);return}if(!L.computed){console.error(`The attribute "${m}" is not defined as computed in the table "${s}"`);return}this.userResolvers[m]=y}static async deleteHistory(m=0,y=!1){let L;for(let{key:C,value:A}of l.getRange({start:0,end:m}))await ma(),It(A).tableId===n&&(L=wm(l,C,A));if(y)for(let C of i.getRange({start:0,versions:!0})){let{key:A,value:w,localTime:b}=C;await ma(),w===null&&b<m&&(L=yc(i,C))}await L}static async*getHistory(m=0,y=1/0){for(let{key:L,value:C}of l.getRange({start:m||1,end:y})){await ma();let A=It(C);A.tableId===n&&(yield{id:A.recordId,localTime:L,version:A.version,type:A.type,value:A.getValue(i,!0,L),user:A.user,operation:A.originatingOperation})}}static async getHistoryOfRecord(m){let y=[];if(m==null)throw new Error("An id is required");let L=i.getEntry(m);if(!L)return y;let C=L.localTime;if(!C)throw new Error("The entry does not have a local audit time");let A=0;do{await ma();let w=l.get(C);if(w){let b=It(w);y.push({id:b.recordId,localTime:C,version:b.version,type:b.type,value:b.getValue(i,!0,C),user:b.user}),C=b.previousLocalTime}else break}while(A<1e3&&C);return y.reverse()}static cleanup(){z?.remove()}}De.updatedAttributes();let $d=De.prototype;return p&&De.setTTLExpiration(p/1e3),se&&Yd(),De;function Wi(K,m,y){let L;for(let C in r){let A=r[C],w=A.isIndexing,b=wr[C],I=y&&(b?b(y):y[C]),x=m&&(b?b(m):m[C]);if(I===x&&!w)continue;L=!0;let N=A.indexNulls,H=(0,b_.getIndexedValues)(I,N),U=(0,b_.getIndexedValues)(x,N);if(U?.length>0){let Q=new Set(U);if(H=H?H.filter(J=>{if(Q.has(J))Q.delete(J);else return!0}):[],U=Array.from(Q),(U.length>0||H.length>0)&&mB){let J=U.concat(H).map(k=>({key:k,value:K}));A.prefetch(J,TB)}for(let J=0,k=U.length;J<k;J++)A.remove(U[J],K)}else H?.length>0&&mB&&A.prefetch(H.map(Q=>({key:Q,value:K})),TB);if(H)for(let Q=0,J=H.length;Q<J;Q++)A.put(H[Q],K)}return L}a(Wi,"updateIndices");function Ir(K){switch(typeof K){case"number":return!0;case"string":if(K.length<659)return!0;if(K.length>gB)throw new Error("Primary key size is too large: "+K.length);break;case"object":if(K===null)throw new Error("Invalid primary key of null");break;case"bigint":if(K<2n**64n&&K>-(2n**64n))return!0;break;default:throw new Error("Invalid primary key type: "+typeof K)}if((0,Jc.writeKey)(K,Fee,0)>gB)throw new Error("Primary key size is too large: "+K.length);return!0}a(Ir,"checkValidId");function Pn(K,m,y,L,C){if(De.getResidencyById&&y.ensureLoaded&&m?.replicateFrom!==!1){let w=oc(De.getResidencyById(K));if(w&&!w.includes(server.hostname)&&O)return O({key:K,residency:w}).then(C)}let A=a(()=>{if(m?.transaction?.stale&&(m.transaction.stale=!1),y.transaction?.isDone)return C(null,K);let w=i.getEntry(K,y);return w?.residencyId&&w.metadataFlags&un&&O&&y.ensureLoaded&&m?.replicateFrom!==!1?O(w).then(b=>C(b,K),b=>(xe.default.error?.("Error loading remote record",K,w,y,b),C(null,K))):(w&&m&&(w?.version>(m.lastModified||0)&&(m.lastModified=w.version),w?.localTime&&!m.lastRefreshed&&(m.lastRefreshed=w.localTime)),C(w,K))},"whenPrefetched");return L?A():ie>0?(ie--,A()):new Promise((w,b)=>{ie===0?(ie--,i.prefetch([K],()=>{I(),x()})):(ne.push(K),le.push(x),ne.length>qd&&(ie--,I()));function I(){if(ne.length>0){let N=le;i.prefetch(ne,()=>{ie===-1?I():ie++;for(let H of N)H()}),ne=[],le=[],Re>2&&Re--}else ie=Re,Re<Sp&&Re++}a(I,"prefetch");function x(){try{w(A())}catch(N){b(N)}}a(x,"load")})}a(Pn,"loadLocalRecord");function sc(K){if(!K?.role)return;let m=K.role.permission;if(m.super_user)return Gee;let y=m[c],L,C=y?.tables;if(C)return C[s];if(c==="data"&&(L=m[s])&&!L.tables)return L}a(sc,"getTablePermissions");function sn(K,m,y,L){if(v){let C=!1;if(y.noCache?C=!0:(m?(!m.value||m.metadataFlags&(un|ta)||m.expiresAt!=null&&m.expiresAt<Date.now())&&(C=!0):C=!0,Yn(!C,"cache-hit",s)),C){let A=Kd(K,m,y).then(w=>(w?.value&&w?.value.getRecord?.()&&xe.default.error?.("Can not assign a record that is already a resource"),y&&(w?.version>(y.lastModified||0)&&(y.lastModified=w.version),y.lastRefreshed=Date.now()),w));if(y?.onlyIfCached||m?.value&&L?.allowStaleWhileRevalidate?.(m,K)){if(A.catch(w=>xe.default.warn?.(w)),y?.onlyIfCached&&!L.doesExist())throw new br.ServerError("Entry is not cached",504);return}else return A}}else if(m?.value&&m.expiresAt!=null&&m.expiresAt<Date.now())return De.evict(m.key,m.value,m.version),m.value=null,{then(C){return C(m)}}}a(sn,"ensureLoadedFromSource");function Cr(K){let m=K?.transaction;if(m){if(!m.lmdbDb)return m.lmdbDb=i,m;do{if(m.lmdbDb?.path===i.path)return m;let y=m.next;if(!y)return m=m.next=new dc,m.lmdbDb=i,m;m=y}while(!0)}else return new qp}a(Cr,"txnForContext");function ic(K,m,y){if(!K)return;let L=K.value||i.getEntry(K.key)?.value;if(typeof m=="object"){let A=wr,w=L;for(let b=0,I=m.length;b<I;b++){let x=m[b],N=A?.[x];w=N&&w?N(w,y,!0)?.value:w?.[x],A=N?.definition?.tableClass?.propertyResolvers}return w}let C=wr[m];return C?C(L,y):L[m]}a(ic,"getAttributeValue");function Vd(K,m,y,L,C){let A=C?.length,w={transaction:L,lazy:A>0||typeof m=="string"||m?.length<4,alwaysPrefetch:!0},b;function I(x,N){let H=x?.value;if(!H)return Ea.SKIP;for(let U=0;U<A;U++)if(!b?.includes(U)&&!C[U](H,x))return Ea.SKIP;return N!==void 0&&(x.key=N),x}if(a(I,"processEntry"),A>0||!K.hasEntries){let x=K.map(N=>{if(b=null,typeof N=="object"&&N?.key!==void 0)return A>0?I(N):N;if(N==null)return Ea.SKIP;for(let H=0;H<A;H++){let Q=C[H].idFilter;if(Q){if(!Q(N))return Ea.SKIP;b||(b=[]),b.push(H)}}return Pn(N,y,w,!1,I)});return Array.isArray(K)&&(x=x.filter(N=>N!==Ea.SKIP)),x.hasEntries=!0,x}return K}a(Vd,"transformToEntries");function Yo(K,m,y=server.replication?.getThisNodeId(l)){if(K<=m?.version){if(m?.version===K&&y!==void 0){let L=server.replication?.exportIdMapping(l),C=m.localTime,A=C&&l.get(C);if(A){let w,b,I=It(A);for(let x in L)L[x]===y&&(w=x),L[x]===I.nodeId&&(b=x);if(w>b)return 1;if(w===b)return 0}}return-1}return 1}a(Yo,"precedesExistingVersion");async function Kd(K,m,y){let L=m?.metadataFlags,C=m?.version,A,w;if(!i.attemptLock(K,C,()=>{clearTimeout(w);let N=i.getEntry(K);!N||!N.value||N.metadataFlags&(un|ta)?A(Kd(K,i.getEntry(K),y)):A(N)}))return new Promise(N=>{A=N,w=setTimeout(()=>{i.unlock(K,C)},Hee)});let b=m?.value,I={requestContext:y,replacingRecord:b,replacingEntry:m,replacingVersion:C,noCacheStore:!1,source:null,resourceCache:y?.resourceCache},x=y?.responseHeaders;return new Promise((N,H)=>{let U;bb(wt(I,async Q=>{let J=performance.now(),k,Ce,de;try{for(let ue of De.sources)if(ue.get&&(!ue.get.reliesOnPrototype||ue.prototype.get)){if(ue.available?.(m)===!1)continue;if(I.source=ue,k=await ue.get(K,I),k)break}de=L&un;let Y=I.lastModified||de&&C;Ce=de||Y>C||!b,Y||(Y=(0,b_.getNextMonotonicTime)());let V=performance.now()-J;if(Lt(V,"cache-resolution",s,null,"success"),x&&OE(x,"Server-Timing",`cache-resolve;dur=${V.toFixed(2)}`,!0),Q.timestamp=Y,p&&I.expiresAt==null&&(I.expiresAt=Date.now()+p),k){if(typeof k!="object")throw new Error("Only objects can be cached and stored in tables");if(k.status>0&&k.headers)if(k.status>=300)if(k.status===304)k=b,Y=C;else throw new br.ServerError(k.body||"Error from source",k.status);else k=k.body;typeof k.toJSON=="function"&&(k=k.toJSON()),t&&k[t]!==K&&(k[t]=K)}U=!0,N({key:K,version:Y,value:k})}catch(Y){Y.message+=` while resolving record ${K} for ${s}`,b&&((Y.code==="ECONNRESET"||Y.code==="ECONNREFUSED"||Y.code==="EAI_AGAIN")&&!y?.mustRevalidate||y?.staleIfError&&(Y.statusCode===500||Y.statusCode===502||Y.statusCode===503||Y.statusCode===504))?(N({key:K,version:C,value:b}),xe.default.trace?.(Y.message,"(returned stale record)")):H(Y);let V=performance.now()-J;Lt(V,"cache-resolution",s,null,"fail"),x&&OE(x,"Server-Timing",`cache-resolve;dur=${V.toFixed(2)}`,!0),I.transaction.abort();return}if(y?.noCacheStore||I.noCacheStore){I.transaction.abort();return}Cr(I).addWrite({key:K,store:i,entry:m,nodeName:"source",commit:a((Y,V)=>{if(V?.version!==C)return;let ue=Wi(K,b,k);if(k){Ae.put?.(I,K,k),V&&(y.previousResidency=De.getResidencyRecord(V.residencyId));let _e,me=!1,Te,Pe=oc(De.getResidency(k,y));if(Pe){if(!Pe.includes(server.hostname))if(_e=k,me=!0,De.getResidencyById)k=void 0;else{k=null;for(let Ve in r)k||(k={}),k[Ve]=_e[Ve]}Te=ac(Pe)}xe.default.trace?.(`Writing resolved record from source with id: ${K}, timestamp: ${new Date(Y).toISOString()}`),T(K,k,V,Y,me?un:0,g&&(Ce||me)||null,{user:I?.user,expiresAt:I.expiresAt,residencyId:Te},"put",!!de,_e)}else V&&(Ae.delete?.(I,K),xe.default.trace?.(`Deleting resolved record from source with id: ${K}, timestamp: ${new Date(Y).toISOString()}`),g||R?T(K,null,V,Y,0,g&&Ce||null,{user:I?.user},"delete",!!de):yc(i,V,C))},"commit")})}),()=>{i.unlock(K,C)},Q=>{i.unlock(K,C),U&&xe.default.error?.("Error committing cache update",Q)})})}a(Kd,"getFromSource");function Wo(K){if(!K||K.user?.role?.permission?.super_user)return!0;if(K.replicateTo)throw new br.ClientError("Can not specify replication parameters without super user permissions",403);if(K.replicatedConfirmation)throw new br.ClientError("Can not specify replication confirmation without super user permissions",403);return!0}a(Wo,"checkContextPermissions");function zo(K){let m=!1;if(K&&(K-dt>1&&(m=!0),dt=K),!(Bt===Cn&&!m)&&(Cn=Bt,(0,jc.getWorkerIndex)()===(0,jc.getWorkerCount)()-1))return nn&&clearTimeout(nn),Bt?new Promise(y=>{let L=new Date;L.setMonth(0),L.setDate(1),L.setHours(0),L.setMinutes(0),L.setSeconds(0);let C=Bt/(1+dt),A=m?Date.now():Math.ceil((Date.now()-L.getTime())/C)*C+L.getTime(),w=a(b=>{xe.default.trace?.(`Scheduled next cleanup scan at ${new Date(b)}`),nn=setTimeout(()=>q=q.then(async()=>{if(w(Math.max(b+Bt,Date.now())),i.rootStore.status!=="open"){clearTimeout(nn);return}let I=50,x=new Array(I),N=0,H=Math.pow(dt,8)*(Qc.get(B.STORAGE_RECLAMATION_EVICTIONFACTOR)??1e5),U=S/Math.pow(Math.max(dt,1),4);xe.default.info?.(`Starting cleanup scan for ${s}, evict threshold ${H}, adjusted eviction ${U}ms`);function Q(J,k,Ce,de){let ye=J+U-Date.now();if(ye<0)return!0;if(dt){let Y=i.lastSize;return Ce&_n&&Xl(de,V=>{V.size&&(Y+=V.size)}),xe.default.trace?.(`shouldEvict adjusted ${ye} ${Y}, ${ye*(J-k)/Y} < ${H}`),ye*(J-k)/Y<H}return!1}a(Q,"shouldEvict");try{let J=0;for(let k of i.getRange({start:!1,snapshot:!1,versions:!0,lazy:!0})){let{key:Ce,value:de,version:ye,expiresAt:Y,metadataFlags:V}=k,ue;de===null&&!g&&ye+Bee<Date.now()?ue=yc(i,k,ye):Y!=null&&Q(Y,ye,V,de)&&(ue=De.evict(Ce,de,ye),J++),ue&&(await x[N],x[N]=ue.catch(_e=>{xe.default.error?.("Cleanup error",_e)}),++N>=I&&(N=0)),await ma()}xe.default.info?.(`Finished cleanup scan for ${s}, evicted ${J} entries`)}catch(J){xe.default.warn?.(`Error in cleanup scan for ${s}:`,J)}y(void 0),dt=0}),Math.min(b-Date.now(),2147483647)).unref()},"startNextTimer");w(A)}):void 0}a(zo,"scheduleCleanup");function Tp(){z=l?.addDeleteRemovalCallback(n,i,(K,m)=>{i.remove(K,m)})}a(Tp,"addDeleteRemoval");function Yd(){(0,jc.getWorkerIndex)()===0&&setInterval(async()=>{if(!nc){nc=!0;try{let K=se.name,m=r[K];if(!m)throw new Error(`expiresAt attribute ${se} must be indexed`);for(let y of m.getRange({start:!0,values:!1,end:Date.now(),snapshot:!1})){for(let L of m.getValues(y)){let C=i.getEntry(L);C?.value?C.value[K]<Date.now()&&De.evict(L,C.value,C.version):i.ifVersion(L,C?.version,()=>m.remove(y,L))}await ma()}}catch(K){xe.default.error?.("Error in evicting old records",K)}finally{nc=!1}}},xee).unref()}a(Yd,"runRecordExpirationEviction");function oc(K){if(K!=null){if(Array.isArray(K))return K;if(typeof K=="number"){if(K>=65536)throw new Error(`Shard id ${K} must be below 65536`);let m=server.shards?.get?.(K);if(m)return xe.default.trace?.(`Shard ${K} mapped to ${m.map(y=>y.name).join(", ")}`),m.map(y=>y.name);throw new Error(`Shard ${K} is not defined`)}throw new Error(`Shard or residency list ${K} is not a valid type, must be a shard number or residency list of node hostnames`)}}a(oc,"residencyFromFunction");function ac(K){if(K){let m=K.join(","),y=f.get([Symbol.for("residency_by_set"),m]);return y||(f.put([Symbol.for("residency_by_set"),m],y=Math.floor(Math.random()*2147418112)+65535),f.put([Symbol.for("residency_by_id"),y],K),y)}}a(ac,"getResidencyId")}function yb(e,t){let r=e.attr_object||(e.attr_object={}),n=r[t];if(n)return n;n=r[t]=Object.create(null);for(let s of e)n[s.attribute_name]=s[t];return n}function TB(){}function qee(e){OB=e}function IE(e,t){let r=t?.type;if(e===null)return e;if(e===""&&r&&r!=="String"&&r!=="Any")return null;try{switch(r){case"Int":case"Long":if(e[0]==="$")return NE(parseInt(e.slice(1),36));if(e==="null")return null;if(!/^-?[0-9]+$/.test(e)&&!(e instanceof Date))throw new SyntaxError;return NE(+e);case"Float":return e==="null"?null:NE(+e);case"BigInt":return e==="null"?null:BigInt(e);case"Boolean":return e==="true"?!0:e==="false"?!1:e;case"Date":if(isNaN(e)){if(e==="null")return null;$ee.test(e)||(e+="Z");let n=new Date(e);return NE(n.getTime()),n}return new Date(+e);case void 0:case"Any":return(0,CE.autoCast)(e);default:return e}}catch(n){throw n.message=`Invalid value for attribute ${t.name}: "${e}", expecting ${r}`,n.statusCode=400,n}}function NE(e){if(isNaN(e))throw new SyntaxError;return e}function AB(e,t){if(e==null)return!0;if(!Array.isArray(t))return e===t||t.startsWith?.(e);if(Array.isArray(e)){let r=e.length;if(e[r-1]===null&&r--,t.length>=r){for(let n=0;n<r;n++)if(t[n]!==e[n])return!1;return!0}return!1}else if(t[0]===e)return!0}function bb(e,t,r){return e?.then?e.then(t,r):t(e)}function RB(e){return e!=null}function Es(e){try{return JSON.stringify(e)}catch{return e}}function Vee(e){let t=process.pid;return e.env.readerList().slice(1).some(r=>+r.match(/\d+/)?.[0]!=t)}var Ea,b_,yB,bB,Qc,br,O_,N_,xe,Jc,jc,CE,wE,Uee,OB,xee,Bee,mB,Hee,EB,kee,un,ta,Fee,gB,SB,Gee,ZNe,$ee,ma,pf=be(()=>{G();Ea=require("lmdb"),b_=M(an()),yB=require("lodash"),bB=M(lf());ra();$p();Qc=M(ce());mR();br=M(he()),O_=M(ao()),N_=M(Gs());Ue();hf();xe=M(pi());Cy();fc();Jc=require("ordered-binary"),jc=M(st());no();CE=M(oe());eu();Ii();Sm();y_();wE=M(require("node:fs"));ds();ym();Uee=new Uint8Array(9);Uee[8]=192;xee=6e4,Bee=864e5;Qc.initSync();mB=Qc.get(B.STORAGE_PREFETCHWRITES),Hee=1e4,EB=1,kee=2,un=1,ta=8,Fee=Buffer.allocUnsafeSlow(8192),gB=1978,SB=100,Gee={read:!0,insert:!0,update:!0,delete:!0,isSuperUser:!0},ZNe=(0,CE.convertToMS)(Qc.get(B.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE))||864e5;a(PE,"makeTable");a(yb,"attributesAsObject");a(TB,"noop");a(qee,"setServerUtilities");$ee=/[+-][0-9]{2}:[0-9]{2}|[a-zA-Z]$/;a(IE,"coerceType");a(NE,"rejectNaN");a(AB,"isDescendantId");ma=a(()=>new Promise(setImmediate),"rest");a(bb,"when");a(RB,"exists");a(Es,"stringify");a(Vee,"hasOtherProcesses")});var ct={};Be(ct,{database:()=>uu,database_envs:()=>mo,databases:()=>Ye,dropDatabase:()=>vy,dropTableMeta:()=>jee,getDatabases:()=>Xe,getDefaultCompression:()=>xE,getTables:()=>Kee,onRemovedDB:()=>L_,onUpdatedTable:()=>Zc,readMetaDb:()=>w_,resetDatabases:()=>Ru,table:()=>_t,tables:()=>zn});function Kee(){return vE||Xe(),zn||{}}function Xe(){if(vE)return Ye;vE=!0,Tu=new Map;let e=(0,jt.getHdbBasePath)()&&(0,Mt.join)((0,jt.getHdbBasePath)(),lc),t=(0,jt.get)(B.DATABASES)||{};if(process.env.SCHEMAS_DATA_PATH&&(t.data={path:process.env.SCHEMAS_DATA_PATH}),e=process.env.STORAGE_PATH||(0,jt.get)(B.STORAGE_PATH)||e&&((0,Wn.existsSync)(e)?e:(0,Mt.join)((0,jt.getHdbBasePath)(),wp)),!e)return;if((0,Wn.existsSync)(e))for(let n of(0,Wn.readdirSync)(e,{withFileTypes:!0})){let s=(0,Mt.basename)(n.name,".mdb");n.isFile()&&(0,Mt.extname)(n.name).toLowerCase()===".mdb"&&!t[s]?.path&&w_((0,Mt.join)(e,n.name),null,s)}if((0,Wn.existsSync)((0,Su.getBaseSchemaPath)())){for(let n of(0,Wn.readdirSync)((0,Su.getBaseSchemaPath)(),{withFileTypes:!0}))if(!n.isFile()){let s=(0,Mt.join)((0,Su.getBaseSchemaPath)(),n.name),i=(0,Mt.join)((0,Su.getTransactionAuditStoreBasePath)(),n.name);for(let o of(0,Wn.readdirSync)(s,{withFileTypes:!0}))if(o.isFile()&&(0,Mt.extname)(o.name).toLowerCase()===".mdb"){let c=(0,Mt.join)(i,o.name);w_((0,Mt.join)(s,o.name),(0,Mt.basename)(o.name,".mdb"),n.name,c,!0)}}}if(t)for(let n in t){let s=t[n],i=s.path;if((0,Wn.existsSync)(i))for(let c of(0,Wn.readdirSync)(i,{withFileTypes:!0}))c.isFile()&&(0,Mt.extname)(c.name).toLowerCase()===".mdb"&&w_((0,Mt.join)(i,c.name),(0,Mt.basename)(c.name,".mdb"),n);let o=s.tables;if(o)for(let c in o){let l=o[c],u=(0,Mt.join)(l.path,(0,Mt.basename)(c+".mdb"));(0,Wn.existsSync)(u)&&w_(u,c,n,null,!0)}}for(let n in Ye){let s=Tu.get(n);if(s){let i=Ye[n];n.includes("delete")&&vt.trace(`defined tables ${Array.from(s.keys())}`);for(let o in i)s.has(o)||(vt.trace(`delete table class ${o}`),delete i[o])}else if(delete Ye[n],n==="data"){for(let i in zn)delete zn[i];delete zn[UE]}}let r=["hdb_temp","hdb_certificate","hdb_analytics","hdb_raw_analytics","hdb_session_will","hdb_job","hdb_license","hdb_info"];if(Ye.system)for(let n of r)Ye.system[n]&&(Ye.system[n].replicate=!1);return Tu=null,Ye}function Ru(){vE=!1;for(let[,e]of mo)e.needsDeletion=!0;Xe();for(let[e,t]of mo)t.needsDeletion&&!e.endsWith("system.mdb")&&(t.close(),mo.delete(e),delete Ye[t.databaseName],C_.forEach(r=>r(t.databaseName)));return Ye}function w_(e,t,r=Ib,n,s){let i=new Nb.default(e,!1);try{let o=mo.get(e);o?o.needsDeletion=!1:(o=(0,Au.open)(i),mo.set(e,o));let c=new Xc.default(!1),l=o.dbisDb||(o.dbisDb=o.openDB(DE.INTERNAL_DBIS_NAME,c)),u=o.auditStore;u||(n?(0,Wn.existsSync)(n)&&(i.path=n,u=(0,Au.open)(i),u.isLegacy=!0):u=Nm(o));let f=CB(r),d=f[UE],h=new Map;for(let{key:_,value:p}of l.getRange({start:!1})){let[S,g]=_.toString().split("/");g===""?g=p.name:g||(g=S,S=t,p.name||(p.name=g,p.indexed=!p.is_hash_attribute)),d?.add(S);let R=h.get(S);R||h.set(S,R={attributes:[]}),(g==null||p.is_hash_attribute)&&(R.primary=p),g!=null&&R.attributes.push(p),Object.defineProperty(p,"key",{value:_,configurable:!0})}for(let[_,p]of h){let{attributes:S,primary:g}=p;if(!g){for(let ie of S)if(ie.is_hash_attribute||ie.isPrimaryKey){g=ie;break}if(!g){vt.warn(`Unable to find a primary key attribute on table ${_}, with attributes: ${JSON.stringify(S)}`);continue}}let R=f[_],E={},T=[],O,v,F=typeof g.audit=="boolean"?g.audit:(0,jt.get)(B.LOGGING_AUDITLOG),q=g.trackDeletes,j=g.expiration,te=g.eviction,se=g.sealed,z=g.splitSegments,ne=g.replicate;if(R)E=R.indices,T=R.attributes,R.schemaVersion++;else{O=g.tableId,O?O>=(l.get(gu)||0)&&(l.putSync(gu,O+1),vt.info(`Updating next table id (it was out of sync) to ${O+1} for ${_}`)):(g.tableId=O=l.get(gu),O||(O=1),vt.debug("Table {table_name} missing an id, assigning {table_id}"),l.putSync(gu,O+1),l.putSync(g.key,g));let ie=new Xc.default(!g.is_hash_attribute,g.is_hash_attribute);if(ie.compression=g.compression,ie.compression){let Re=(0,jt.get)(B.STORAGE_COMPRESSION_THRESHOLD)||IB;ie.compression.threshold=Re}v=mm(o.openDB(g.key,ie),o),o.databaseName=r,v.tableId=O}let le;for(let ie of S){ie.attribute=ie.name;try{if(!ie.is_hash_attribute&&(ie.indexed||ie.attribute&&!ie.name)){if(!E[ie.name]){let pe=new Xc.default(!ie.is_hash_attribute,ie.is_hash_attribute);E[ie.name]=o.openDB(ie.key,pe),E[ie.name].indexNulls=ie.indexNulls}let Re=T.find(pe=>pe.name===ie.name);Re?T.splice(T.indexOf(Re),1,ie):T.push(ie),le=!0}}catch(Re){vt.error("Error trying to update attribute",ie,T,E,Re)}}for(let ie of T)if(!S.find(pe=>pe.name===ie.name)){if(ie.is_hash_attribute){vt.error("Unable to remove existing primary key attribute",ie);continue}ie.indexed&&(T.splice(T.indexOf(ie),1),le=!0)}if(R)le&&(R.schemaVersion++,R.updatedAttributes());else{R=PB(f,_,PE({primaryStore:v,auditStore:u,audit:F,sealed:se,splitSegments:z,replicate:ne,expirationMS:j&&j*1e3,evictionMS:te&&te*1e3,trackDeletes:q,tableName:_,tableId:O,primaryKey:g.name,databasePath:s?r+"/"+_:r,databaseName:r,indices:E,attributes:S,schemaDefined:g.schemaDefined,dbisDB:l})),R.schemaVersion=1;for(let ie of I_)ie(R)}}return o}catch(o){throw o.message+=` opening database ${e}`,o}}function CB(e){let t=Ye[e];if(t||(e==="data"?t=Ye[e]=zn:e==="system"?Object.defineProperty(Ye,"system",{value:t=Object.create(null),configurable:!0}):t=Ye[e]=Object.create(null)),Tu&&!Tu.has(e)){let r=new Set;t[UE]=r,Tu.set(e,r)}return t}function PB(e,t,r){return e[t]=r,r}function uu({database:e,table:t}){e||(e=Ib),Xe();let r=CB(e),n=(0,Mt.join)((0,jt.getHdbBasePath)(),lc),s=(0,jt.get)(B.DATABASES)||{};process.env.SCHEMAS_DATA_PATH&&(s.data={path:process.env.SCHEMAS_DATA_PATH});let i=t&&s[e]?.tables?.[t]?.path;n=i||s[e]?.path||process.env.STORAGE_PATH||(0,jt.get)(B.STORAGE_PATH)||((0,Wn.existsSync)(n)?n:(0,Mt.join)((0,jt.getHdbBasePath)(),wp));let o=(0,Mt.join)(n,(i?t:e)+".mdb"),c=mo.get(o);if(!c||c.status==="closed"){let l=new Nb.default(o,!1);c=(0,Au.open)(l),mo.set(o,c)}return c.auditStore||(c.auditStore=Nm(c)),c}async function vy(e){if(!Ye[e])throw new Error("Schema does not exist");let t=Ye[e],r;for(let n in t)r=t[n].primaryStore.rootStore,mo.delete(r.path),r.status==="open"&&(await r.close(),await P_.remove(r.path));if(r||(r=uu({database:e,table:null}),r.status==="open"&&(await r.close(),await P_.remove(r.path))),e==="data"){for(let n in zn)delete zn[n];delete zn[UE]}delete Ye[e],C_.forEach(n=>n(e)),await YA(r)}function _t(e){let{table:t,database:r,expiration:n,eviction:s,scanInterval:i,attributes:o,audit:c,sealed:l,splitSegments:u,replicate:f,trackDeletes:d,schemaDefined:h,origin:_}=e;r||(r=Ib);let p=uu({database:r,table:t}),S=Ye[r];vt.trace(`Defining ${t} in ${r}`);let g=S?.[t];if(p.status==="closed")throw new Error(`Can not use a closed data store for ${t}`);let R,E,T;h==null&&(h=!0);let O=new Xc.default(!1);for(let z of o)z.attribute&&!z.name?(z.name=z.attribute,z.indexed=!0):z.attribute=z.name,z.expiresAt&&(z.indexed=!0);let v,F;if(g){if(R=g.primaryKey,g.primaryStore.rootStore.status==="closed")throw new Error(`Can not use a closed data store from ${t} class`);u==null&&(u=g.splitSegments),g.attributes.splice(0,g.attributes.length,...o)}else{let z=p.auditStore;E=o.find(Re=>Re.isPrimaryKey)||{},R=E.name,E.is_hash_attribute=E.isPrimaryKey=!0,E.schemaDefined=h,E.compression=xE(),d&&(E.trackDeletes=!0),c=E.audit=typeof c=="boolean"?c:(0,jt.get)(B.LOGGING_AUDITLOG),n&&(E.expiration=n),s&&(E.eviction=s),u??=!1,E.splitSegments=u,typeof l=="boolean"&&(E.sealed=l),typeof f=="boolean"&&(E.replicate=f),_&&(E.origins?E.origins.includes(_)||E.origins.push(_):E.origins=[_]),vt.trace(`${t} table loading, opening primary store`);let ne=new Xc.default(!1,!0);ne.compression=E.compression;let le=t+"/";if(T=p.dbisDb=p.openDB(DE.INTERNAL_DBIS_NAME,O),se(),T.get(le))return F&&F(),Ru(),_t(e);let ie=mm(p.openDB(le,ne),p);p.databaseName=r,ie.tableId=T.get(gu),vt.trace(`Assigning new table id ${ie.tableId} for ${t}`),ie.tableId||(ie.tableId=1),T.put(gu,ie.tableId+1),E.tableId=ie.tableId,g=PB(S,t,PE({primaryStore:ie,auditStore:z,audit:c,sealed:l,splitSegments:u,replicate:f,trackDeletes:d,expirationMS:n&&n*1e3,evictionMS:s&&s*1e3,primaryKey:R,tableName:t,tableId:ie.tableId,databasePath:r,databaseName:r,indices:{},attributes:o,schemaDefined:h,dbisDB:T})),g.schemaVersion=1,v=!0,T.put(le,E)}let q=g.indices;T=T||(p.dbisDb=p.openDB(DE.INTERNAL_DBIS_NAME,O)),g.dbisDB=T;let j=[];for(let{key:z,value:ne}of T.getRange({start:!0})){let[le,ie]=z.toString().split("/");if(ie===""&&(ie=ne.name),ie){if(le!==t)continue}else continue;let Re=o.find(Ae=>Ae.name===ie),pe=!Re?.indexed&&ne.indexed&&!ne.isPrimaryKey;if((!Re||pe)&&(se(),v=!0,Re||T.remove(z),pe)){let Ae=g.indices[le];Ae&&j.push(Ae)}}let te=[];try{for(let z of o||[]){if((z.relationship||z.computed)&&(v=!0,z.relationship))continue;let ne=t+"/"+(z.name||"");Object.defineProperty(z,"key",{value:ne,configurable:!0});let le=T.get(ne);if(z.isPrimaryKey){if(le=le||T.get(ne=t+"/")||{},c!==void 0&&c!==g.audit||l!==void 0&&l!==g.sealed||f!==void 0&&f!==g.replicate||(+n||void 0)!==(+le.expiration||void 0)||(+s||void 0)!==(+le.eviction||void 0)||z.type!==le.type){let Re={...le};typeof c=="boolean"&&(c&&g.enableAuditing(c),Re.audit=c),n&&(Re.expiration=+n),s&&(Re.eviction=+s),l!==void 0&&(Re.sealed=l),f!==void 0&&(Re.replicate=f),z.type&&(Re.type=z.type),v=!0,se(),T.put(ne,Re)}continue}le?.attribute&&!le.name&&(le.indexed=!0);let ie=!le||le.type!==z.type||le.indexed!==z.indexed||le.nullable!==z.nullable||le.version!==z.version||JSON.stringify(le.properties)!==JSON.stringify(z.properties)||JSON.stringify(le.elements)!==JSON.stringify(z.elements);if(z.indexed){let Re=new Xc.default(!0,!1),pe=p.openDB(ne,Re);(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<D_.workerData?.restartNumber)&&(v=!0,se(),le=T.get(ne),(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<D_.workerData?.restartNumber)&&(v=!0,z.indexNulls===void 0&&(z.indexNulls=!0),g.primaryStore.getStats().entryCount>0&&(z.lastIndexedKey=le?.lastIndexedKey??void 0,z.indexingPID=process.pid,pe.isIndexing=!0,Object.defineProperty(z,"dbi",{value:pe}),te.push(z))),T.put(ne,z)),le?.indexNulls&&z.indexNulls===void 0&&(z.indexNulls=!0),pe.indexNulls=z.indexNulls,q[z.name]=pe}else ie&&(v=!0,se(),T.put(ne,z))}}finally{F&&F()}if(v&&(g.schemaVersion++,g.updatedAttributes()),vt.trace(`${t} table loading, running index`),te.length>0||j.length>0?g.indexingOperation=zee(g,te,j):v&&LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"schema-change",g.databaseName,g.tableName)),g.origin=_,v)for(let z of I_)z(g,_!=="cluster");return(n||s||i)&&g.setTTLExpiration({expiration:n,eviction:s,scanInterval:i}),vt.trace(`${t} table loaded`),g;function se(){F||p.transactionSync(()=>({then(z){F=z}}))}a(se,"startTxn")}async function zee(e,t,r){try{vt.info(`Indexing ${e.tableName} attributes`,t);let n=e.schemaVersion;await LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"schema-change",e.databaseName,e.tableName));let s;for(let u of r)s=u.drop();let i,o={},c=0,l=t.length;if(await new Promise(u=>setImmediate(u)),l>0){let u;for(let d of t)(0,Au.compareKeys)(d.lastIndexedKey,u)<0&&(u=d.lastIndexedKey),d.lastIndexedKey==null&&d.dbi.clearAsync();let f=0;for(let{key:d,value:h,version:_}of e.primaryStore.getRange({start:u,lazy:l<4,versions:!0,snapshot:!1}))if(h){if(f++,s=e.primaryStore.ifVersion(d,_,()=>{for(let p=0;p<l;p++){let S=t[p],g=S.name;try{let R=S.resolve,E=h&&(R?R(h):h[g]),T=(0,NB.getIndexedValues)(E);if(T)for(let O=0,v=T.length;O<v;O++)S.dbi.put(T[O],d)}catch(R){o[g]||(o[g]=!0,vt.error(`Error indexing attribute ${g}`,R))}}}),s.then(()=>f--,p=>{f--,vt.error(p)}),D_.workerData&&D_.workerData.restartNumber!==wB.restartNumber&&(i=!0),++c%100===0||i){for(let p of t)p.lastIndexedKey=d,e.dbisDB.put(p.key,p);if(i)return}f>Yee?await s:f>Wee&&await new Promise(p=>setImmediate(p))}for(let d of t)delete d.lastIndexedKey,delete d.indexingPID,d.dbi.isIndexing=!1,s=e.dbisDB.put(d.key,d)}await s,await LE.signalSchemaChange(new ME.SchemaEventMsg(process.pid,"indexing-finished",e.databaseName,e.tableName)),vt.info(`Finished indexing ${e.tableName} attributes`,t)}catch(n){vt.error("Error in indexing",n)}}function jee({table:e,database:t}){let r=uu({database:t,table:e}),n=[],s=r.dbisDb;for(let i of s.getKeys({start:e+"/",end:e+"0"}))n.push(s.remove(i));return Promise.all(n)}function Zc(e){return I_.push(e),{remove(){let t=I_.indexOf(e);t>-1&&I_.splice(t,1)}}}function L_(e){return C_.push(e),{remove(){let t=C_.indexOf(e);t>-1&&C_.splice(t,1)}}}function xE(){let e=(0,jt.get)(B.STORAGE_COMPRESSION),t=(0,jt.get)(B.STORAGE_COMPRESSION_DICTIONARY),r=(0,jt.get)(B.STORAGE_COMPRESSION_THRESHOLD)||IB,n={startingOffset:32};return t&&(n.dictionary=P_.readFileSync(t)),r&&(n.threshold=r),e&&n}var jt,DE,Au,Mt,Wn,Su,Xc,Nb,P_,wb,NB,LE,ME,D_,vt,wB,Ib,UE,IB,zn,Ye,gu,I_,C_,vE,mo,Tu,Yee,Wee,Ue=be(()=>{jt=M(ce()),DE=M(Ft()),Au=require("lmdb"),Mt=require("path"),Wn=require("fs"),Su=M(gt());pf();Xc=M(xf()),Nb=M(Bf());G();P_=M(require("fs-extra")),wb=M(ui()),NB=M(an()),LE=M(ao()),ME=M(Gs()),D_=require("worker_threads"),vt=M(X()),wB=M(st());no();eu();ds();Ib="data",UE=Symbol("defined-tables"),IB=((0,jt.get)(B.STORAGE_PAGESIZE)||4096)-60;(0,jt.initSync)();zn=Object.create(null),Ye=Object.create(null);(0,wb._assignPackageExport)("databases",Ye);(0,wb._assignPackageExport)("tables",zn);gu=Symbol.for("next-table-id"),I_=[],C_=[],mo=new Map;a(Kee,"getTables");a(Xe,"getDatabases");a(Ru,"resetDatabases");a(w_,"readMetaDb");a(CB,"ensureDB");a(PB,"setTable");a(uu,"database");a(vy,"dropDatabase");a(_t,"table");Yee=1e3,Wee=10;a(zee,"runIndexing");a(jee,"dropTableMeta");a(Zc,"onUpdatedTable");a(L_,"onRemovedDB");a(xE,"getDefaultCompression")});var oe=P((uwe,VB)=>{"use strict";var ga=require("path"),UB=require("fs-extra"),An=X(),DB=require("fs-extra"),BE=require("os"),Qee=require("net"),Jee=require("recursive-iterator"),Er=(G(),D($)),{PACKAGE_ROOT:Xee}=Et(),Zee=gA(),LB=require("papaparse"),HE=require("moment"),{inspect:ete}=require("util"),MB=require("is-number"),lwe=require("lodash"),tte=require("minimist"),rte=require("https"),nte=require("http"),{hdb_errors:kE}=he(),ste=/^((\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d\.\d+([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z)))$/,xB=require("util").promisify(setTimeout),ite=100,ote=5,ate="",cte=4,vB={true:!0,TRUE:!0,FALSE:!1,false:!1,undefined:null,null:null,NULL:null,NaN:NaN};VB.exports={isEmpty:jn,isEmptyOrZeroLength:Ci,arrayHasEmptyValues:dte,arrayHasEmptyOrZeroLengthValues:fte,buildFolderPath:_te,isBoolean:BB,errorizeMessage:lte,stripFileExtension:pte,autoCast:mte,autoCastJSON:HB,autoCastJSONDeep:Pb,removeDir:Ete,compareVersions:gte,isCompatibleDataVersion:Ste,escapeRawValue:Tte,unescapeValue:Ate,stringifyProps:Rte,timeoutPromise:bte,isClusterOperation:Nte,getClusterUser:Ite,checkGlobalSchemaTable:wte,getHomeDir:FB,getPropsFilePath:yte,promisifyPapaParse:Cte,removeBOM:GB,createEventPromise:Pte,checkProcessRunning:Dte,checkSchemaTableExist:Lte,checkSchemaExists:qB,checkTableExists:$B,getStartOfTomorrowInSeconds:Mte,getLimitKey:vte,isObject:hte,isNotEmptyAndHasValue:ute,autoCasterIsNumberCheck:kB,backtickASTSchemaItems:Ute,isPortTaken:Ote,createForkArgs:xte,autoCastBoolean:Bte,async_set_timeout:xB,getTableHashAttribute:Hte,doesSchemaExist:kte,doesTableExist:Fte,stringifyObj:Gte,ms_to_time:qte,changeExtension:$te,getEnvCliRootPath:Db,noBootFile:Vte,httpRequest:Kte,transformReq:Yte,convertToMS:Wte,PACKAGE_ROOT:Xee};function lte(e){return e instanceof Error?e:new Error(e)}a(lte,"errorizeMessage");function jn(e){return e==null}a(jn,"isEmpty");function ute(e){return!jn(e)&&(e||e===0||e===""||BB(e))}a(ute,"isNotEmptyAndHasValue");function Ci(e){return jn(e)||e.length===0||e.size===0}a(Ci,"isEmptyOrZeroLength");function dte(e){if(jn(e))return!0;for(let t=0;t<e.length;t++)if(jn(e[t]))return!0;return!1}a(dte,"arrayHasEmptyValues");function fte(e){if(Ci(e))return!0;for(let t=0;t<e.length;t++)if(Ci(e[t]))return!0;return!1}a(fte,"arrayHasEmptyOrZeroLengthValues");function _te(...e){try{return e.join(ga.sep)}catch{console.error(e)}}a(_te,"buildFolderPath");function BB(e){return jn(e)?!1:e===!0||e===!1}a(BB,"isBoolean");function hte(e){return jn(e)?!1:typeof e=="object"}a(hte,"isObject");function pte(e){return Ci(e)?ate:e.slice(0,-cte)}a(pte,"stripFileExtension");function mte(e){return jn(e)||e===""||typeof e!="string"?e:vB[e]!==void 0?vB[e]:kB(e)===!0?Number(e):ste.test(e)?new Date(e):e}a(mte,"autoCast");function HB(e){if(typeof e=="string"&&(e.startsWith("{")&&e.endsWith("}")||e.startsWith("[")&&e.endsWith("]")))try{return JSON.parse(e)}catch{}return e}a(HB,"autoCastJSON");function Pb(e){if(e&&typeof e=="object"){if(Array.isArray(e))for(let t=0,r=e.length;t<r;t++){let n=e[t],s=Pb(n);s!==n&&(e[t]=s)}else for(let t in e){let r=e[t],n=Pb(r);n!==r&&(e[t]=n)}return e}else return HB(e)}a(Pb,"autoCastJSONDeep");function kB(e){if(e.startsWith("0.")&&MB(e))return!0;let t=e.toUpperCase().includes("E");return!!((e!=="0"&&e.startsWith("0"))===!1&&t===!1&&MB(e))}a(kB,"autoCasterIsNumberCheck");async function Ete(e){if(Ci(e))throw new Error(`Directory path: ${e} does not exist`);try{await DB.emptyDir(e),await DB.remove(e)}catch(t){throw An.error(`Error removing files in ${e} -- ${t}`),t}}a(Ete,"removeDir");function gte(e,t){if(Ci(e)){An.info("Invalid current version sent as parameter.");return}if(Ci(t)){An.info("Invalid upgrade version sent as parameter.");return}let r,n=/(\.0+)+$/,s=e.version?e.version:e,i=t.version?t.version:t,o=s.replace(n,"").split("."),c=i.replace(n,"").split("."),l=Math.min(o.length,c.length);for(let u=0;u<l;u++)if(r=parseInt(o[u],10)-parseInt(c[u],10),r)return r;return o.length-c.length}a(gte,"compareVersions");function Ste(e,t,r=!1){let n=e.toString().split("."),s=t.toString().split(".");return n[0]===s[0]&&(!r||n[1]===s[1])}a(Ste,"isCompatibleDataVersion");function Tte(e){if(jn(e))return e;let t=String(e);return t==="."?Er.UNICODE_PERIOD:t===".."?Er.UNICODE_PERIOD+Er.UNICODE_PERIOD:t.replace(Er.FORWARD_SLASH_REGEX,Er.UNICODE_FORWARD_SLASH)}a(Tte,"escapeRawValue");function Ate(e){if(jn(e))return e;let t=String(e);return t===Er.UNICODE_PERIOD?".":t===Er.UNICODE_PERIOD+Er.UNICODE_PERIOD?"..":String(e).replace(Er.ESCAPED_FORWARD_SLASH_REGEX,"/")}a(Ate,"unescapeValue");function Rte(e,t){if(jn(e))return An.info("Properties object is null"),"";let r="";return e.each(function(n,s){try{if(t&&t[n]){let i=t[n];for(let o of i)r+=";"+o+BE.EOL}!Ci(n)&&n[0]===";"?r+="	"+n+s+BE.EOL:Ci(n)||(r+=n+"="+s+BE.EOL)}catch{An.error(`Found bad property during upgrade with key ${n} and value: ${s}`)}}),r}a(Rte,"stringifyProps");function FB(){let e;try{e=BE.homedir()}catch{e=process.env.HOME}return e}a(FB,"getHomeDir");function yte(){let e=ga.join(FB(),Er.HDB_HOME_DIR_NAME,Er.BOOT_PROPS_FILE_NAME);return UB.existsSync(e)||(e=ga.join(__dirname,"../","hdb_boot_properties.file")),e}a(yte,"getPropsFilePath");function bte(e,t){let r,n;return n=new Promise(function(s){r=setTimeout(function(){s(t)},e)}),{promise:n,cancel:a(function(){clearTimeout(r)},"cancel")}}a(bte,"timeoutPromise");async function Ote(e){if(!e)throw new Error("Invalid port passed as parameter");return new Promise((t,r)=>{let n=Qee.createServer().once("error",s=>{s.code==="EADDRINUSE"?t(!0):r(s)}).once("listening",()=>n.once("close",()=>t(!1)).close()).listen(e)})}a(Ote,"isPortTaken");function Nte(e){try{return Er.CLUSTER_OPERATIONS[e.toLowerCase()]!==void 0}catch(t){An.error(`Error checking operation against cluster ops ${t}`)}return!1}a(Nte,"isClusterOperation");function wte(e,t){let r=(Ue(),D(ct)).getDatabases();if(!r[e])return kE.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e);if(!r[e][t])return kE.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(wte,"checkGlobalSchemaTable");function Ite(e,t){if(jn(t)){An.warn("No CLUSTERING_USER defined, clustering disabled");return}if(jn(e)||Ci(e)){An.warn("No users to search.");return}let r;try{let n=e.get(t);n&&n.role.permission.cluster_user===!0&&n.active===!0&&(r=n)}catch(n){An.error(`unable to find cluster_user due to: ${n.message}`);return}if(r===void 0){An.warn(`CLUSTERING_USER: ${t} not found or is not active.`);return}return r}a(Ite,"getClusterUser");function Cte(){LB.parsePromise=function(e,t,r){return new Promise(function(n,s){LB.parse(e,{header:!0,transformHeader:GB,chunk:t.bind(null,s),skipEmptyLines:!0,transform:r,dynamicTyping:!1,error:s,complete:n})})}}a(Cte,"promisifyPapaParse");function GB(e){if(typeof e!="string")throw new TypeError(`Expected a string, got ${typeof e}`);return e.charCodeAt(0)===65279?e.slice(1):e}a(GB,"removeBOM");function Pte(e,t,r){return new Promise(n=>{t.once(e,s=>{let i=r;An.info(`Got cluster status event response: ${ete(s)}`);try{i.cancel()}catch{An.error("Error trying to cancel timeout.")}n(s)})})}a(Pte,"createEventPromise");async function Dte(e){let t=!0,r=0;do await xB(ite*r++),(await Zee.findPs(e)).length>0&&(t=!1);while(t&&r<ote);if(t)throw new Error(`process ${e} was not started`)}a(Dte,"checkProcessRunning");function Lte(e,t){let r=qB(e);if(r)return r;let n=$B(e,t);if(n)return n}a(Lte,"checkSchemaTableExist");function qB(e){let{getDatabases:t}=(Ue(),D(ct));if(!t()[e])return kE.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(qB,"checkSchemaExists");function $B(e,t){let{getDatabases:r}=(Ue(),D(ct));if(!r()[e][t])return kE.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a($B,"checkTableExists");function Mte(){let e=HE().utc().add(1,"d").startOf("d").unix(),t=HE().utc().unix();return e-t}a(Mte,"getStartOfTomorrowInSeconds");function vte(){return HE().utc().format("DD-MM-YYYY")}a(vte,"getLimitKey");function Ute(e){try{let t=new Jee(e);for(let{node:r}of t)r&&(r.columnid&&typeof r.columnid!="string"&&(r.columnid=r.columnid.toString()),r.columnid&&!r.columnid.startsWith("`")&&(r.columnid_orig=r.columnid,r.columnid=`\`${r.columnid}\``),r.tableid&&!r.tableid.startsWith("`")&&(r.tableid_orig=r.tableid,r.tableid=`\`${r.tableid}\``),r.databaseid&&!r.databaseid.startsWith("`")&&(r.databaseid_orig=r.databaseid,r.databaseid=`\`${r.databaseid}\``),r.as&&typeof r.as=="string"&&!r.as.startsWith("[")&&(r.as_orig=r.as,r.as=`\`${r.as}\``))}catch(t){An.error("Got an error back ticking items."),An.error(t)}}a(Ute,"backtickASTSchemaItems");function xte(e){return[e]}a(xte,"createForkArgs");function Bte(e){return e===!0||typeof e=="string"&&e.toLowerCase()==="true"}a(Bte,"autoCastBoolean");function Hte(e,t){let{getDatabases:r}=(Ue(),D(ct)),n=r()[e]?.[t];return n?.primaryKey||n?.hash_attribute}a(Hte,"getTableHashAttribute");function kte(e){let{getDatabases:t}=(Ue(),D(ct));return t()[e]!==void 0}a(kte,"doesSchemaExist");function Fte(e,t){let{getDatabases:r}=(Ue(),D(ct));return r()[e]?.[t]!==void 0}a(Fte,"doesTableExist");function Gte(e){try{return JSON.stringify(e)}catch{return e}}a(Gte,"stringifyObj");function qte(e){let t=HE.duration(e),r=t.seconds()>0?t.seconds()+"s":"",n=t.minutes()>0?t.minutes()+"m ":"",s=t.hours()>0?t.hours()+"h ":"",i=t.days()>0?t.days()+"d ":"";return(t.years()>0?t.years()+"y ":"")+i+s+n+r}a(qte,"ms_to_time");function $te(e,t){let r=ga.basename(e,ga.extname(e));return ga.join(ga.dirname(e),r+t)}a($te,"changeExtension");function Db(){if(process.env[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()])return process.env[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()];let e=tte(process.argv);if(e[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()])return e[Er.CONFIG_PARAMS.ROOTPATH.toUpperCase()]}a(Db,"getEnvCliRootPath");var Cb;function Vte(){if(Cb)return Cb;let e=Db();if(Db()&&UB.pathExistsSync(ga.join(e,Er.HDB_CONFIG_FILE)))return Cb=!0,!0}a(Vte,"noBootFile");function Kte(e,t){let r;return e.protocol==="http:"?r=nte:r=rte,new Promise((n,s)=>{let i=r.request(e,o=>{o.setEncoding("utf8"),o.body="",o.on("data",c=>{o.body+=c}),o.on("end",()=>{n(o)})});i.on("error",o=>{s(o)}),i.write(t instanceof Buffer?t:JSON.stringify(t)),i.end()})}a(Kte,"httpRequest");function Yte(e){if(!e.schema&&!e.database){e.schema=Er.DEFAULT_DATABASE_NAME;return}e.database&&(e.schema=e.database)}a(Yte,"transformReq");function Wte(e){let t=0;if(typeof e=="number"&&(t=e),typeof e=="string")switch(t=parseFloat(e),e.slice(-1)){case"M":t*=86400*30;break;case"D":case"d":t*=86400;break;case"H":case"h":t*=3600;break;case"m":t*=60;break}return t*1e3}a(Wte,"convertToMS")});var ce=P((jB,QB)=>{"use strict";var Lb=require("fs-extra"),el=require("path"),KB=require("os"),zte=require("properties-reader"),v_=X(),M_=oe(),Me=(G(),D($)),FE=Dt(),jte="Error initializing environment manager",GE="BOOT_PROPS_FILE_PATH",YB=!1,Qte={[Me.HDB_SETTINGS_NAMES.INSTALL_USER]:!0,[Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY]:!0,[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]:!0,BOOT_PROPS_FILE_PATH:!0},Eo={};Object.assign(jB,QB.exports={BOOT_PROPS_FILE_PATH:GE,getHdbBasePath:Jte,setHdbBasePath:Xte,get:WB,initSync:ere,setProperty:ze,initTestEnvironment:rre,setCloneVar:tre});function Jte(){return Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]}a(Jte,"getHdbBasePath");function Xte(e){Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]=e}a(Xte,"setHdbBasePath");function WB(e){let t=FE.getConfigValue(e);return t===void 0?Eo[e]:t}a(WB,"get");function ze(e,t){Qte[e]&&(Eo[e]=t),FE.updateConfigObject(e,t)}a(ze,"setProperty");function Zte(){let e;try{e=M_.getPropsFilePath(),Lb.accessSync(e,Lb.constants.F_OK|Lb.constants.R_OK),YB=!0;let t=zte(e);return Eo[Me.HDB_SETTINGS_NAMES.INSTALL_USER]=t.get(Me.HDB_SETTINGS_NAMES.INSTALL_USER),Eo[Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY]=t.get(Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY),Eo[GE]=e,!0}catch{return v_.trace(`Environment manager found no properties file at ${e}`),!1}}a(Zte,"doesPropFileExist");function ere(e=!1){try{((YB||Zte()||M_.noBootFile())&&!zB||e)&&(FE.initConfig(e),Eo[Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY]=FE.getConfigValue(Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY))}catch(t){v_.error(jte),v_.error(t),console.error(t),process.exit(1)}}a(ere,"initSync");var zB=!1;function tre(e){zB=e}a(tre,"setCloneVar");function rre(e={}){try{let{keep_alive_timeout:t,headers_timeout:r,server_timeout:n,https_enabled:s,cors_enabled:i,cors_accesslist:o,local_studio_on:c}=e,l=el.join(__dirname,"../../","unitTests");Eo[GE]=el.join(l,"hdb_boot_properties.file"),ze(Me.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY,el.join(l,"settings.test")),ze(Me.HDB_SETTINGS_NAMES.INSTALL_USER,KB.userInfo()?KB.userInfo().username:void 0),ze(Me.HDB_SETTINGS_NAMES.LOG_LEVEL_KEY,"debug"),ze(Me.HDB_SETTINGS_NAMES.LOG_PATH_KEY,el.join(l,"envDir","log")),ze(Me.HDB_SETTINGS_NAMES.LOG_DAILY_ROTATE_KEY,!1),ze(Me.HDB_SETTINGS_NAMES.CLUSTERING_ENABLED_KEY,!0),ze(Me.HDB_SETTINGS_NAMES.CLUSTERING_NODE_NAME_KEY,"1231412de213"),ze(Me.HDB_SETTINGS_NAMES.HDB_ROOT_KEY,el.join(l,"envDir")),ze(Me.CONFIG_PARAMS.STORAGE_PATH,el.join(l,"envDir")),s&&(ze(Me.CONFIG_PARAMS.HTTP_SECUREPORT,WB(Me.CONFIG_PARAMS.HTTP_PORT)),ze(Me.CONFIG_PARAMS.HTTP_PORT,null)),ze(Me.CONFIG_PARAMS.CUSTOMFUNCTIONS_NETWORK_HTTPS,!!s),ze(Me.CONFIG_PARAMS.HTTP_PORT,9926),ze(Me.HDB_SETTINGS_NAMES.SERVER_PORT_KEY,9925),ze(Me.CONFIG_PARAMS.OPERATIONSAPI_NETWORK_PORT,9925),ze(Me.HDB_SETTINGS_NAMES.CORS_ENABLED_KEY,M_.isEmpty(i)?!1:i),ze(Me.CONFIG_PARAMS.HTTP_CORS,M_.isEmpty(i)?!1:i),ze(Me.HDB_SETTINGS_NAMES.MAX_CUSTOM_FUNCTION_PROCESSES,2),ze(Me.HDB_SETTINGS_NAMES.MAX_HDB_PROCESSES,4),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_PORT_KEY,9926),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_ENABLED_KEY,!0),ze(Me.HDB_SETTINGS_NAMES.CUSTOM_FUNCTIONS_DIRECTORY_KEY,el.resolve(__dirname,"../../unitTests/server/fastifyRoutes/custom_functions")),ze(Me.HDB_SETTINGS_NAMES.LOCAL_STUDIO_ON,M_.isEmpty(c)?!1:c),o&&(ze("CORS_ACCESSLIST",o),ze(Me.CONFIG_PARAMS.HTTP_CORSACCESSLIST,o)),n&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_TIMEOUT_KEY,n),ze(Me.CONFIG_PARAMS.HTTP_TIMEOUT,n)),t&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_KEEP_ALIVE_TIMEOUT_KEY,t),ze(Me.CONFIG_PARAMS.HTTP_KEEPALIVETIMEOUT,t)),r&&(ze(Me.HDB_SETTINGS_NAMES.SERVER_HEADERS_TIMEOUT_KEY,r),ze(Me.CONFIG_PARAMS.HTTP_HEADERSTIMEOUT,r))}catch(t){let r=`Error reading in HDB environment variables from path ${GE}.  Please check your boot props and settings files`;v_.fatal(r),v_.error(t)}}a(rre,"initTestEnvironment")});var Ub={};Be(Ub,{loadGQLSchema:()=>ire,start:()=>vb,startOnMainThread:()=>sre});function vb({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r,n,s,i){let{parse:o,Source:c,Kind:l,NamedTypeNode:u,StringValueNode:f}=await import("graphql"),d=o(new c(r.toString(),s)),h=new Map,_=[],p;for(let R of d.definitions)switch(R.kind){case l.OBJECT_TYPE_DEFINITION:let F=function(j){if(j.kind==="NonNullType"){let z=F(j.type);return z.nullable=!1,z}if(j.kind==="ListType")return{type:"array",elements:F(j.type)};let se={type:j.name?.value};return Object.defineProperty(se,"location",{value:j.loc.startToken}),se};a(F,"getProperty");let E=R.name.value,T=[],O={table:null,database:null,properties:T};h.set(E,O);for(let j of R.directives){if(j.name.value==="table"){for(let se of j.arguments)O[se.name.value]=se.value.value;O.schema&&(O.database=O.schema),O.table||(O.table=E),O.audit&&(O.audit=O.audit!=="false"),O.attributes=O.properties,_.push(O)}if(j.name.value==="sealed"&&(O.sealed=!0),j.name.value==="splitSegments"&&(O.splitSegments=!0),j.name.value==="replicate"&&(O.replicate=!0),j.name.value==="export"){O.export=!0;for(let se of j.arguments)typeof O.export!="object"&&(O.export={}),O.export[se.name.value]=se.value.value}}let v=!1,q={};for(let j of R.fields){let te=F(j.type);te.name=j.name.value,T.push(te),q[te.name]=void 0;for(let se of j.directives){let z=se.name.value;if(z==="primaryKey")v?console.warn("Can not define two attributes as a primary key at",se.loc):(te.isPrimaryKey=!0,v=!0);else if(z==="indexed")te.indexed=!0;else if(z==="computed"){for(let ne of se.arguments||[])if(ne.name.value==="from"){let le=ne.value.value;te.computed={from:g(le,ne,q)},te.version==null&&(te.version=le)}else ne.name.value==="version"&&(te.version=ne.value.value);te.computed=te.computed||!0}else if(z==="relationship"){let ne={};for(let le of se.arguments)ne[le.name.value]=le.value.value;te.relationship=ne}else if(z==="createdTime")te.assignCreatedTime=!0;else if(z==="updatedTime")te.assignUpdatedTime=!0;else if(z==="expiresAt")te.expiresAt=!0;else if(z==="allow"){let ne=te.authorizedRoles=[];for(let le of se.arguments)le.name.value==="role"&&ne.push(le.value.value)}else server.knownGraphQLDirectives.includes(z)&&console.warn(`@${z} is an unknown directive, at`,se.loc)}}O.type=E,E==="Query"&&(p=O)}function S(R){let E=h.get(R.type);E?(Object.defineProperty(R,"properties",{value:E.properties}),Object.defineProperty(R,"definition",{value:E})):R.type==="array"?S(R.elements):nre.includes(R.type)||(0,XB.getWorkerIndex)()===0&&console.error(`The type ${R.type} is unknown at line ${R.location.line}, column ${R.location.column}, in ${s}`)}a(S,"connectPropertyType");for(let R of h.values())for(let E of R.properties)S(E);for(let R of _)R.tableClass=e(R),R.export&&(R.export.name===""?i.set((0,Mb.dirname)(n),R.tableClass):i.set((0,Mb.dirname)(n)+"/"+(R.export.name||R.type),R.tableClass,R.export));function g(R,E,T){return new JB.Script(`function computed(attributes) { return function(record) { with(attributes) { with (record) { return ${R}; } } } } computed;`,{filename:s,lineOffset:E.loc.startToken.line-1,columnOffset:E.loc.startToken.column}).runInThisContext()(T)}a(g,"createComputedFrom")}}var Mb,JB,XB,nre,sre,ire,ZB=be(()=>{Mb=require("path"),JB=require("node:vm");Ue();XB=M(st()),nre=["ID","Int","Float","Long","String","Boolean","Date","Bytes","Any","BigInt","Blob"];server.knownGraphQLDirectives&&(server.knownGraphQLDirectives=["table","sealed","export","primaryKey","indexed","computed","relationship","createdTime","updatedTime","expiresAt","allow"]);a(vb,"start");sre=vb,ire=vb({ensureTable:_t}).handleFile});var Bb={};Be(Bb,{start:()=>hre});function ore(e){if(e.kind!==ve.Kind.OPERATION_DEFINITION&&e.kind!==ve.Kind.FRAGMENT_DEFINITION)throw new Or(`Unexpected non-executable definition type ${e.kind}.`)}function eH(e){if(typeof e!="object"||e===null)throw new Pi("Request body must be an object.");if(!("query"in e))throw new Pi("Request body must contain a `query` field.");if(typeof e.query!="string")throw new Pi("Request body `query` field must be a string.");if("variables"in e&&(typeof e.variables!="object"||e.variables===null))throw new Pi("Request body `variables` field must be an object.");if("operationName"in e&&typeof e.operationName!="string")throw new Pi("Request body `operationName` field must be a string.")}function xb(e){return parseInt(e.value,10)}function rH(e){return parseFloat(e.value)}function nH(e,t,r){let n=r.get(e.name.value);return sH(n)?iH(n,t):{attribute:t,value:n}}function sH(e){return typeof e=="object"&&e!=null&&!Array.isArray(e)}function iH(e,t){return t=typeof t=="string"?[t]:t,Object.entries(e).flatMap(([r,n])=>(t=[...t,r],sH(n)?iH(n,t):{attribute:t,value:n}))}function are(e,t,r){switch(t=[...t,e.name.value],e.value.kind){case ve.Kind.NULL:return{attribute:t,value:null};case ve.Kind.INT:return{attribute:t,value:xb(e.value)};case ve.Kind.FLOAT:return{attribute:t,value:rH(e.value)};case ve.Kind.BOOLEAN:case ve.Kind.STRING:return{attribute:t,value:e.value.value};case ve.Kind.VARIABLE:return nH(e.value,t,r);case ve.Kind.OBJECT:return oH(e.value,t,r);case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Value type, ${e.value.kind}, is not supported.`)}}function oH(e,t,r){return e.fields.flatMap(n=>are(n,t,r))}function cre(e,t){switch(e.value.kind){case ve.Kind.NULL:return{attribute:e.name.value,value:null};case ve.Kind.INT:return{attribute:e.name.value,value:xb(e.value)};case ve.Kind.FLOAT:return{attribute:e.name.value,value:rH(e.value)};case ve.Kind.BOOLEAN:case ve.Kind.STRING:return{attribute:e.name.value,value:e.value.value};case ve.Kind.VARIABLE:return nH(e.value,e.name.value,t);case ve.Kind.OBJECT:return oH(e.value,[e.name.value],t);case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Argument type, ${e.value.kind}, is not supported.`)}}function lre(e,t){return e.flatMap(r=>cre(r,t))}function qE(e,t){return e.selections.flatMap(r=>{switch(r.kind){case ve.Kind.FIELD:return r;case ve.Kind.FRAGMENT_SPREAD:{let n=r.name.value,s=t.get(n);if(s==null)throw new Or(`Fragment \`${n}\` not found.`);return qE(s.selectionSet,t)}case ve.Kind.INLINE_FRAGMENT:return qE(r.selectionSet,t)}})}function aH(e,t){return qE(e,t).map(r=>r.selectionSet?.selections.length>0?{name:r.name.value,select:aH(r.selectionSet,t)}:r.name.value)}async function ure(e,t,r,n){let s=us.getMatch(e.name.value,"graphql");if(s===void 0)throw new Or(`Resource \`${e.name.value}\` not found.`);let i=s.Resource,o={select:aH(e.selectionSet,r),conditions:lre(e.arguments,t)},c=[];n.authorize=!0;for await(let l of i.search(o,n))c.push(l);return[e.name.value,c]}function cH(e){switch(e.kind){case ve.Kind.NULL:return null;case ve.Kind.INT:return xb(e);case ve.Kind.FLOAT:return parseFloat(e.value);case ve.Kind.STRING:case ve.Kind.BOOLEAN:return e.value;case ve.Kind.OBJECT:return e.fields.reduce((t,r)=>({[r.name.value]:cH(r.value),...t}),{});case ve.Kind.LIST:case ve.Kind.ENUM:default:throw new Or(`Value type, ${e.kind}, is not supported.`)}}function dre(e,t){let r=new Map;for(let n of e){let s=n.variable.name.value,i=t?.[s];if(i===void 0&&n.defaultValue!==void 0&&(i=cH(n.defaultValue)),n.type.kind===ve.Kind.NON_NULL_TYPE&&!(s in t)&&i===void 0)throw new Or(`Variable $${s} is required, but not provided.`);r.set(n.variable.name.value,i??null)}return r}async function fre(e,t,r,n){if(e.operation===ve.OperationTypeNode.SUBSCRIPTION)throw new Or("Subscriptions are not supported.");if(e.operation===ve.OperationTypeNode.MUTATION)throw new Or("Mutations are not supported yet.");let s=dre(e.variableDefinitions,t),i=await Promise.all(qE(e.selectionSet,r).map(c=>ure(c,s,r,n))),o={data:{}};for(let[c,l]of i)o.data[c]=l;return o}async function tH({query:e,variables:t={},operationName:r},n){let s=ve.parse(e),i=new Map,o=new Map;for(let u of s.definitions)if(ore(u),u.kind===ve.Kind.FRAGMENT_DEFINITION)o.set(u.name.value,u);else{if(u.name===void 0&&s.definitions.length>1)throw new Or("Unnamed operations are only allowed when there is a single operation in the document.");let f=u.name?.value??"Unnamed Query";if(i.has(f))throw new Or(`Duplicate operation definition: ${f}`);i.set(f,u)}let c;if(r==null)if(i.size===1)c=i.entries().next().value[1];else throw new Or("Operation name is required when there are multiple operations in the document.");else if(c=i.get(r),c==null)throw new Or(`Operation \`${r}\` not found.`);let l=await fre(c,t,o,n);return{status:200,headers:{"Content-Type":"application/graphql-response+json; charset=utf-8"},body:JSON.stringify(l)}}async function _re(e){switch(e.method){case"GET":{let t=new URLSearchParams(e.url.split("?")[1]),r={};for(let[n,s]of t)r[n]=n==="variables"||n==="extensions"?JSON.parse(s):s;return eH(r),tH(r,e)}case"POST":{let r=await Xi(e.headers.get("content-type"),!0)(e._nodeRequest);return eH(r),tH(r,e)}default:throw new Pi("Method Not Allowed",405,{Allow:"GET, POST"})}}function hre(e){e.server.http(async(t,r)=>{if(!t.url.startsWith("/graphql"))return r(t);try{return await _re(t)}catch(n){logger.error(n);let s=t.headers.get("accept")??"application/graphql-response+json";switch(s){case"application/json":{if(n instanceof Pi)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json",...n.headers}};if(n instanceof ve.GraphQLError)return{status:200,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/json"}};if(n instanceof Or)return{status:200,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};break}default:logger.info(`Unsupported accept header, ${s}, defaulting to application/graphql-response+json`);case"application/graphql-response+json":{if(n instanceof Pi)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json",...n.headers}};if(n instanceof ve.GraphQLError)return{status:400,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Or)return{status:400,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};break}}throw n}},{port:e.port,securePort:e.securePort})}var ve,Or,Pi,lH=be(()=>{ve=M(require("graphql"));Zi();Ql();a(ore,"assertExecutableDefinitionNode");a(eH,"assertRequestParams");a(xb,"processIntValueNode");a(rH,"processFloatValueNode");a(nH,"processVariableNode");a(sH,"isObject");a(iH,"transformObjectIntoQueryCondition");a(are,"processObjectFieldNode");a(oH,"processObjectValueNode");a(cre,"processArgumentNode");a(lre,"buildConditionsQuery");a(qE,"fillInFragments");a(aH,"buildSelectQuery");a(ure,"processFieldNode");a(cH,"processConstValueNode");a(dre,"resolveVariables");a(fre,"executeOperation");a(tH,"resolver");Or=class extends Error{static{a(this,"GraphQLQueryingError")}},Pi=class extends Error{static{a(this,"HTTPError")}statusCode;headers;constructor(t,r=400,n={}){super(t),this.statusCode=r,this.headers=n}};a(_re,"graphqlQueryingHandler");a(hre,"start")});var pH=P((gwe,hH)=>{var yu=require("validate.js"),dH=it(),bu=(G(),D($)),{handleHDBError:pre,hdb_errors:mre}=he(),{HDB_ERROR_MSGS:Qt,HTTP_STATUS_CODES:Ere}=mre,Hb=a(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),gre={STRUCTURE_USER:"structure_user"},uH=Object.values(bu.ROLE_TYPES_ENUM),Sre="attribute_permissions",Tre="attribute_name",{PERMS_CRUD_ENUM:Ou}=bu,Are=[Sre,...Object.values(Ou)],fH=[Ou.READ,Ou.INSERT,Ou.UPDATE],Rre=[Tre,...fH];function yre(e){let t=Hb();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,_H(e,t)}a(yre,"addRoleValidation");function bre(e){let t=Hb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,_H(e,t)}a(bre,"alterRoleValidation");function Ore(e){let t=Hb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,dH.validateObject(e,t)}a(Ore,"dropRoleValidation");var Nre=["operation","role","id","permission","hdb_user","access"];function _H(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let o=0,c=n.length;o<c;o++)Nre.includes(n[o])||s.push(n[o]);s.length>0&&nr(Qt.INVALID_ROLE_JSON_KEYS(s),r);let i=dH.validateObject(e,t);if(i&&i.message.split(",").forEach(o=>{nr(o,r)}),e.permission){let o=wre(e);o&&nr(o,r),uH.forEach(c=>{e.permission[c]&&!yu.isBoolean(e.permission[c])&&nr(Qt.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let o in e.permission)if(uH.indexOf(o)<0){if(o===gre.STRUCTURE_USER){let l=e.permission[o];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,f=l.length;u<f;u++){let d=l[u];global.hdb_schema[d]||nr(Qt.SCHEMA_NOT_FOUND(d),r)}continue}nr(Qt.STRUCTURE_USER_ROLE_TYPE_ERROR(o),r);continue}let c=e.permission[o];if(!o||!global.hdb_schema[o]){nr(Qt.SCHEMA_NOT_FOUND(o),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[o][l]){nr(Qt.TABLE_NOT_FOUND(o,l),r);continue}if(Object.keys(u).forEach(f=>{Are.includes(f)||nr(Qt.INVALID_PERM_KEY(f),r,o,l)}),Object.values(Ou).forEach(f=>{yu.isDefined(u[f])?yu.isBoolean(u[f])||nr(Qt.TABLE_PERM_NOT_BOOLEAN(f),r,o,l):nr(Qt.TABLE_PERM_MISSING(f),r,o,l)}),u.attribute_permissions===void 0){nr(Qt.ATTR_PERMS_ARRAY_MISSING,r,o,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){nr(Qt.ATTR_PERMS_NOT_ARRAY,r,o,l);continue}if(u.attribute_permissions){let f=global.hdb_schema[o][l].attributes.map(({attribute:h})=>h),d={read:!1,insert:!1,update:!1};for(let h in u.attribute_permissions){let _=u.attribute_permissions[h];if(Object.keys(_).forEach(S=>{!Rre.includes(S)&&S!==Ou.DELETE&&nr(Qt.INVALID_ATTR_PERM_KEY(S),r,o,l)}),!yu.isDefined(_.attribute_name)){nr(Qt.ATTR_PERM_MISSING_NAME,r,o,l);continue}let p=_.attribute_name;if(!f.includes(p)){nr(Qt.INVALID_ATTRIBUTE_IN_PERMS(p),r,o,l);continue}fH.forEach(S=>{yu.isDefined(_[S])?yu.isBoolean(_[S])||nr(Qt.ATTR_PERM_NOT_BOOLEAN(S,p),r,o,l):nr(Qt.ATTR_PERM_MISSING(S,p),r,o,l)}),!d.read&&_.read===!0&&(d.read=!0),!d.insert&&_.insert===!0&&(d.insert=!0),!d.update&&_.update===!0&&(d.update=!0)}if(u.read===!1&&d.read===!0||u.insert===!1&&d.insert===!0||u.update===!1&&d.update===!0){let h=`${o}.${l}`;nr(Qt.MISMATCHED_TABLE_ATTR_PERMS(h),r,o,l)}}}}return Ire(r)}a(_H,"customValidate");hH.exports={addRoleValidation:yre,alterRoleValidation:bre,dropRoleValidation:Ore};function wre(e){let{operation:t,permission:r}=e;if(t===bu.OPERATIONS_ENUM.ADD_ROLE||t===bu.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return Qt.SU_CU_ROLE_COMBINED_ERROR;{let o=r.super_user?bu.ROLE_TYPES_ENUM.SUPER_USER:bu.ROLE_TYPES_ENUM.CLUSTER_USER;return Qt.SU_CU_ROLE_NO_PERMS_ALLOWED(o)}}}return null}a(wre,"validateNoSUPerms");function Ire(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:Qt.ROLE_PERMS_ERROR,...e};return pre(new Error,n,Ere.BAD_REQUEST)}else return null}a(Ire,"generateRolePermResponse");function nr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}a(nr,"addPermError")});var x_=P((Awe,SH)=>{"use strict";var mH=Sn(),EH=Vr(),Cre=qc(),Fb=pH(),Gb=ao(),Twe=require("uuid").v4,Pre=require("util"),$E=(G(),D($)),Dre=oe(),qb=EH.searchByValue,Lre=EH.searchByHash,Mre=Pre.promisify(Cre.delete),vre=qs(),Ure=cu(),{hdb_errors:xre,handleHDBError:tl}=he(),{HDB_ERROR_MSGS:gH,HTTP_STATUS_CODES:U_}=xre,{UserEventMsg:$b}=Gs();SH.exports={addRole:Bre,alterRole:Hre,dropRole:kre,listRoles:Fre};function kb(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}a(kb,"scrubRoleDetails");async function Bre(e){let t=Fb.addRoleValidation(e);if(t)throw t;e=kb(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await qb(r)||[])}catch(i){throw tl(i)}if(n&&n.length>0)throw tl(new Error,gH.ROLE_ALREADY_EXISTS(e.role),U_.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await mH.insert(s),Gb.signalUserChange(new $b(process.pid)),e=kb(e),e}a(Bre,"addRole");async function Hre(e){let t=Fb.alterRoleValidation(e);if(t)throw t;e=kb(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await mH.update(r)}catch(s){throw tl(s)}if(n&&n?.message==="updated 0 of 1 records")throw tl(new Error,"Invalid role id",U_.BAD_REQUEST,void 0,void 0,!0);return await Gb.signalUserChange(new $b(process.pid)),e}a(Hre,"alterRole");async function kre(e){let t=Fb.dropRoleValidation(e);if(t)throw tl(new Error,t,U_.BAD_REQUEST,void 0,void 0,!0);let r=new Ure($E.SYSTEM_SCHEMA_NAME,$E.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await Lre(r));if(n.length===0)throw tl(new Error,gH.ROLE_NOT_FOUND,U_.NOT_FOUND,void 0,void 0,!0);let s=new vre($E.SYSTEM_SCHEMA_NAME,$E.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await qb(s)),o=!1;if(Dre.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){o=!0;break}}if(o===!0)throw tl(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,U_.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await Mre(c),Gb.signalUserChange(new $b(process.pid)),`${n[0].role} successfully deleted`}a(kre,"dropRole");async function Fre(){return qb({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}a(Fre,"listRoles")});var Vb={};Be(Vb,{start:()=>RH,startOnMainThread:()=>$re});function RH({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,TH.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let o in i.permission){if(Gre.includes(o))continue;let c=i.permission[o];c.tables||(i.permission[o]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let f=[];for(let d in u.attributes){let h=u.attributes[d];h.attribute_name=d,f.push(h)}u.attribute_permissions=f,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let f of u.attribute_permissions)f.read=!!f.read,f.insert=!!f.insert,f.update=!!f.update}else u.attribute_permissions=null}}i.role=i.id=s,await qre(i)}}}async function qre(e){let t=Xe().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,AH.isEqual)(i,e)?void 0:(e.id=r.id,(0,VE.alterRole)(e))}return(0,VE.addRole)(e)}var VE,TH,AH,Gre,$re,yH=be(()=>{Ue();VE=M(x_()),TH=require("yaml"),AH=require("lodash"),Gre=["super_user","cluster_user","structure_user"];a(RH,"start");a(qre,"ensureRole");$re=RH});async function KE(e){let t=(0,NH.pathToFileURL)(e).toString();if(Vre)return B_||(B_=Kre(Wre)),(await(await B_).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function Kre(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),B_=new Compartment({console,Math,Date,fetch:Yre,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,OH.extname)(r)||(r+=".js"),r)},importHook:a(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){Object.assign(s,{Resource:Gr,tables:zn,databases:Ye})}};let n=await(0,bH.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),B_}function Yre(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function Wre(){return{Resource:Gr,tables:zn}}var bH,OH,NH,Vre,B_,Kb=be(()=>{ra();Ue();bH=require("fs/promises"),OH=require("path"),NH=require("url"),Vre=!1;a(KE,"secureImport");a(Kre,"getCompartment");a(Yre,"secureOnlyFetch");a(Wre,"getGlobalVars")});var Wb={};Be(Wb,{handleFile:()=>zre});async function zre(e,t,r,n){let s=new Map,i=await KE(r);c(i.default)&&n.set((0,Yb.dirname)(t),i.default),o(i,(0,Yb.dirname)(t));function o(l,u){for(let f in l){let d=l[f];c(d)?n.set(u+"/"+f,d):typeof d=="object"&&o(d,u+"/"+f)}}a(o,"recurseForResources");function c(l){return typeof l=="function"&&(l.get||l.put||l.post||l.delete)}return a(c,"isResource"),s}var Yb,wH=be(()=>{Kb();Yb=require("path");a(zre,"handleFile")});var jb={};Be(jb,{start:()=>jre});function jre({resources:e}){e.set("login",zb),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var zb,IH=be(()=>{ra();a(jre,"start");zb=class extends Gr{static{a(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:o}=r;return{data:await n.login(s,i)}}}});function MH(e){let t={openapi:Qre,info:{title:"HarperDB HTTP REST interface",version:LH.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:o,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},f=[];if(o)for(let{type:T,name:O,elements:v,relationship:F,definition:q}of o){if(F)T==="array"?u[O]={type:"array",items:{$ref:Sa+v.type}}:u[O]={$ref:Sa+T};else{let j=q??v?.definition;if(j){if(!t.components.schemas[j.type]){let te={};j.properties.forEach(se=>{te[se.name]=new Zb(Qb[se.type],se.type)}),t.components.schemas[j.type]=new DH(te)}T==="array"?u[O]={type:"array",items:{$ref:Sa+j.type}}:u[O]={$ref:Sa+j.type}}else T==="array"?v.type==="Any"||v.type=="ID"?u[O]={type:"array",items:{format:v.type}}:u[O]={type:"array",items:new Zb(Qb[v.type],v.type)}:T==="Any"||T=="ID"?u[O]={format:T}:u[O]=new Zb(Qb[T],T)}f.push(new eO(O,"query",u[O]))}let d=Object.keys(u),h=new eO(c,"path",{format:"ID"});h.required=!0,h.description="primary key of record";let _=new eO("property","path",{enum:d});_.required=!0,t.components.schemas[i]=new DH(u);let p=l.post!==Resource.prototype.post||l.update,S=typeof l.put=="function",g=typeof l.get=="function",R=typeof l.delete=="function",E="/"+s+"/";p&&(t.paths[E]={},t.paths[E].post=new Jre(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[E]||(t.paths[E]={}),t.paths[E].get=new Jb(f,r,{200:new Xb({$ref:Sa+i})},"search for records by the specified property name and value pairs")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new PH(f,r,"delete all the records that match the provided query",{204:new CH})),E="/"+s+"/{"+c+"}",g&&(t.paths[E]={},t.paths[E].get=new Jb([h],r,{200:new Xb({$ref:Sa+i})},"retrieve a record by its primary key")),S&&(t.paths[E]||(t.paths[E]={}),t.paths[E].put=new Xre([h],r,i,"create or update the record with the URL path that maps to the record's primary key")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new PH([h],r,"delete a record with the given primary key",{204:new CH})),g&&_.schema.enum.length>0&&(E="/"+s+"/{"+c+"}.{property}",t.paths[E]={},t.paths[E].get=new Jb([h,_],r,{200:new Xb({enum:d})},"used to retrieve the specified property of the specified record"))}return t}function Jre(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:Sa+e}}}},this.security=t,this.responses={200:{description:tO,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function Jb(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function Xb(e){this.description=tO,this.content={"application/json":{schema:e}}}function CH(){this.description="successfully processed request, no content returned to client"}function Xre(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:Sa+r}}}},this.responses={200:{description:tO}}}function PH(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function DH(e){this.type="object",this.properties=e}function Zb(e,t){this.type=e,this.format=t}function eO(e,t,r){this.name=e,this.in=t,this.schema=r}var LH,Qre,Qb,Sa,tO,vH=be(()=>{LH=M(Et()),Qre="3.0.3",Qb={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},Sa="#/components/schemas/",tO="successful operation";a(MH,"generateJsonApi");a(Jre,"Post");a(Jb,"Get");a(Xb,"Response200");a(CH,"Response204");a(Xre,"Put");a(PH,"Delete");a(DH,"ResourceSchema");a(Zb,"Type");a(eO,"Parameter")});var xH={};Be(xH,{Request:()=>H_,createReuseportFd:()=>YE});var UH,H_,rO,nO,YE,WE=be(()=>{UH=require("os"),H_=class{static{a(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new nO(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new rO(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},rO=class{static{a(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},nO=class{constructor(t){this.asObject=t}static{a(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,UH.platform)()!="win32"&&(YE=require("node-unix-socket").createReuseportFd)});var jE={};Be(jE,{parseHeaderValue:()=>iO,start:()=>tne});async function ene(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&Yp(e);let i=new po;try{e.responseHeaders=i;let o=e.url.slice(1),c,l;if(o!==BH){let g=zE.getMatch(o,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new _c(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let R=iO(g);for(let E of R)switch(E.name){case"max-age":e.expiresAt=E.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=iO(u).map(R=>(R.next?.name==="confirm"&&R.next.value>=0&&(e.replicatedConfirmation=+R.next.value),R.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let d=await wt(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=Xi(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new Nu.ClientError(g,400)}if(e.authorize=!0,o===BH&&s==="GET"){if(e?.user?.role?.permission?.super_user)return MH(zE);throw new Nu.ServerError("Forbidden",403)}switch(s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new Nu.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new Nu.ServerError(`Method ${s} is not recognized`,501)}}),h=200,_;if(d==null)h=s==="GET"||s==="HEAD"?404:204,sO.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(d.status>0&&d.headers){let g=Rb(d.headers,i);return d.headers!==g&&(d.headers=g),d.data!==void 0&&(d.body=Tf(d.data,e,d)),d}else if(_=e.lastModified){Zre[0]=_;let g=String.fromCharCode(34,(vr[0]&63)+62,(vr[0]>>6)+(vr[1]<<2&63)+62,(vr[1]>>4)+(vr[2]<<4&63)+62,(vr[2]>>2)+62,(vr[3]&63)+62,(vr[3]>>6)+(vr[4]<<2&63)+62,(vr[4]>>4)+(vr[5]<<4&63)+62,(vr[5]>>2)+62,(vr[6]&63)+62,(vr[6]>>6)+(vr[7]<<2&63)+62,34),R=r["if-none-match"];R&&g==R?(d?.onDone&&d.onDone(),h=304,d=void 0):i.setIfNone("ETag",g),sO.lastModified&&i.setIfNone("Last-Modified",new Date(_).toUTCString())}e.createdResource&&(h=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let p={status:h,headers:i,body:void 0},S=d?.wasLoadedFromSource?.();return S!==void 0&&(p.wasCacheMiss=S,!S&&_&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||_))/1e3))),d!==void 0&&(p.body=Tf(d,e,p),s==="HEAD"&&(p.body=void 0)),p}catch(o){o.statusCode?o.statusCode===500?Di.warn(o):Di.info(o):Di.error(o),o.statusCode===405&&(o.method&&(o.message+=` to handle HTTP method ${o.method.toUpperCase()||""}`),o.allow&&(o.allow.push("trace","head","options"),i.setIfNone("Allow",o.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:o.statusCode||500,headers:i,body:void 0};return c.body=Tf(o.contentType?o:o.toString(),e,c),c}}function tne(e){sO=e,e.includeExpensiveRecordCountEstimates&&(H_.prototype.includeExpensiveRecordCountEstimates=!0),!HH&&(HH=!0,zE=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return ene(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{k_++;let s=new Mn;kH||(kH=!0,A_(l=>{k_>0&&l.push({metric:"ws-connections",connections:k_,byThread:!0})}));let i;t.on("error",l=>{i=!0,Di.warn(l)});let o;t.on("message",a(function(u){o||(o=Xi(r.requestedContentType??r.headers.asObject["content-type"],!1));let f=o(u);Lt(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(f)},"message"));let c;t.on("close",()=>{k_--,Yn(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=zE.getMatch(l,"ws");if(Yn(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,Lt(p=>({count:p.count,total:k_}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let f=new _c(u.relativeURL),d=u.Resource;c=(await wt(r,()=>d.connect(f,s,r)))[Symbol.asyncIterator]();let _;for(;!(_=await c.next()).done;){let p=await sa(_.value,r);t.send(p),Lt(p.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(S=>t._socket.once("drain",S))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Di.warn(l):Di.info(l):Di.error(l),t.close(rne[l.statusCode]||1011,l.toString())}t.close()},e))}function iO(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,o]=s.trim().split("=");i=i.trim(),o&&(o=o.trim()),r={name:i.toLowerCase(),value:o,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Di,Nu,vr,Zre,sO,BH,HH,zE,kH,k_,rne,FH=be(()=>{Zi();Ii();Di=M(X()),Nu=M(he());hf();Vl();fc();y_();vH();hf();WE();vr=new Uint8Array(8),Zre=new Float64Array(vr.buffer,0,1),sO={},BH="openapi";a(ene,"http");k_=0;a(tne,"start");rne={401:3e3,403:3003};a(iO,"parseHeaderValue")});var oO=P((Wwe,qH)=>{var{recordAction:QE,recordActionBinary:GH}=(Ii(),D(R_)),nne=require("fastify-plugin"),sne=200;qH.exports=nne(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let o=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,f,d;l.config?.isOperation?(u=n.body?.operation,f="operation"):(u=l.url,f="fastify-route",d=l.method),QE(o,"duration",u,d,f),GH(s.raw.statusCode<400,"success",u,d,f),GH(1,"response_"+s.raw.statusCode,u,d,f);let h=sne;i?.pipe?(i.on("data",g=>{h+=g.length}),i.on("end",()=>{QE(performance.now()-c,"transfer",u,d,f),QE(h,"bytes-sent",u,d,f)})):(h+=i?.length||0,QE(h,"bytes-sent",u,d,f));let _=o.toFixed(3),p=s.getHeader("Server-Timing"),S=`db;dur=${_}`;s.header("Server-Timing",p?`${p}, ${S}`:S)}),r()},{name:"hdb-request-time"})});var VH=P((zwe,$H)=>{var ine=it(),one={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};$H.exports=function(e){return ine.validateObject(e,one)}});var JE=P((jwe,KH)=>{"use strict";var ane=(G(),D($)).OPERATIONS_ENUM,aO=class{static{a(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=ane.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};KH.exports=aO});var q_={};Be(q_,{createTokens:()=>lne,getJWTRSAKeys:()=>rg,refreshOperationToken:()=>une,validateOperationToken:()=>uO,validateRefreshToken:()=>ng});async function rg(){if(XE)return XE;try{let e=F_.default.join(G_.default.getHdbBasePath(),aA),t=await ZE.default.readFile(F_.default.join(e,Jd.JWT_PASSPHRASE_NAME),"utf8"),r=await ZE.default.readFile(F_.default.join(e,Jd.JWT_PRIVATE_KEY_NAME),"utf8");return XE={publicKey:await ZE.default.readFile(F_.default.join(e,Jd.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},XE}catch(e){throw tg.default.error(e),new zs.ClientError(Iu.NO_ENCRYPTION_KEYS,wu.INTERNAL_SERVER_ERROR)}}async function lne(e){let t=(0,cO.validateBySchema)(e,Li.default.object({username:Li.default.string().optional(),password:Li.default.string().optional(),role:Li.default.string().optional(),expires_in:Li.default.alternatives(Li.default.string(),Li.default.number()).optional()}));if(t)throw new zs.ClientError(t.message);let r;try{let d=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,d=!1),r=await(0,lO.findAndValidateUser)(e.username,e.password,d)}catch(d){throw tg.default.error(d),new zs.ClientError(Iu.INVALID_CREDENTIALS,wu.UNAUTHORIZED)}if(!r)throw new zs.ClientError(Iu.INVALID_CREDENTIALS,wu.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let o=await rg(),c=await Cu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:e.expires_in??QH,algorithm:eg,subject:"operation"}),l=await Cu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:cne,algorithm:eg,subject:"refresh"}),u=Zy(l,"sha256");if((await(0,YH.update)(new WH.default(Qd,ql.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new zs.ClientError(Iu.REFRESH_TOKEN_SAVE_FAILED,wu.INTERNAL_SERVER_ERROR);return zH.default.signalUserChange(new jH.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function une(e){let t=(0,cO.validateBySchema)(e,Li.default.object({refresh_token:Li.default.string().required()}).required());if(t)throw new zs.ClientError(t.message);let{refresh_token:r}=e;await ng(r);let n=await rg(),s=await Cu.default.decode(r);return{operation_token:await Cu.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:QH,algorithm:eg,subject:"operation"})}}async function uO(e){return JH(e,"operation")}async function ng(e){return JH(e,"refresh")}async function JH(e,t){try{let r=await rg(),n=await Cu.default.verify(e,r.publicKey,{algorithms:eg,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,lO.findAndValidateUser)(n.username,void 0,!1);if(t==="refresh"&&!eb(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw tg.default.warn(r),r?.name==="TokenExpiredError"?new zs.ClientError(Iu.TOKEN_EXPIRED,wu.FORBIDDEN):new zs.ClientError(Iu.INVALID_TOKEN,wu.UNAUTHORIZED)}}var Cu,ZE,F_,Li,cO,zs,tg,lO,YH,WH,zH,jH,G_,wu,Iu,QH,cne,eg,XE,Pu=be(()=>{Cu=M(require("jsonwebtoken")),ZE=M(require("fs-extra")),F_=M(require("node:path")),Li=M(require("joi")),cO=M(it());G();zs=M(he()),tg=M(X());_E();lO=M(Vn()),YH=M(Sn()),WH=M(JE()),zH=M(ao()),jH=M(Gs()),G_=M(ce()),{HTTP_STATUS_CODES:wu,AUTHENTICATION_ERROR_MSGS:Iu}=zs.hdb_errors;G_.default.initSync();QH=G_.default.get(B.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",cne=G_.default.get(B.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",eg="RS256";a(rg,"getJWTRSAKeys");a(lne,"createTokens");a(une,"refreshOperationToken");a(uO,"validateOperationToken");a(ng,"validateRefreshToken");a(JH,"validateToken")});var dO=P((eIe,ek)=>{"use strict";var dne=VH(),Du=require("passport"),fne=require("passport-local").Strategy,_ne=require("passport-http").BasicStrategy,hne=require("util"),pne=Vn(),ZH=hne.callbackify(pne.findAndValidateUser),Zwe=Ln(),mne=(G(),D($)),XH=(Pu(),D(q_));Du.use(new fne(function(e,t,r){ZH(e,t,r)}));Du.use(new _ne(function(e,t,r){ZH(e,t,r)}));Du.serializeUser(function(e,t){t(null,e)});Du.deserializeUser(function(e,t){t(null,e)});function Ene(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let o=e.headers.authorization.split(" ");n=o[0],s=o[1]}function i(o,c){return o?r(o):c?r(null,c):r("Must login")}switch(a(i,"handleResponse"),n){case"Basic":Du.authenticate("basic",{session:!1},(o,c)=>{i(o,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===mne.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?XH.validateRefreshToken(s).then(o=>{e.body.refresh_token=s,r(null,o)}).catch(o=>{r(o)}):XH.validateOperationToken(s).then(o=>{r(null,o)}).catch(o=>{r(o)});break;default:Du.authenticate("local",{session:!1},function(o,c){i(o,c)})(e,t,r);break}}a(Ene,"authorize");function gne(e,t){let r=dne(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let o=i[e.schema].tables[e.table].attribute_permissions;for(let c in o)e.attributes.indexOf(o[c].attribute_name)>-1&&!o[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${o[c].attribute_name} `))}return t(null,n)}a(gne,"checkPermissions");ek.exports={authorize:Ene,checkPermissions:gne}});var sg=P((rIe,tk)=>{"use strict";var Sne=Fn();tk.exports={writeTransaction:Tne};function Tne(e,t,r){return Sne.writeTransaction(e,t,r)}a(Tne,"writeTransaction")});var ik=P((iIe,sk)=>{"use strict";var Ane=Vr(),Rne=Ks(),rk=X(),yne=Sn(),sIe=sg(),bne=require("clone"),_O=require("alasql"),One=rE(),nk=require("util"),Nne=nk.promisify(Rne.getTableSchema),wne=nk.promisify(Ane.search),Ine=(G(),D($)),fO=oe();One(_O);sk.exports={update:Pne};var Cne="There was a problem performing this update. Please check the logs and try again.";async function Pne({statement:e,hdb_user:t}){let r=await Nne(e.table.databaseid,e.table.tableid),n=Dne(e.columns);fO.backtickASTSchemaItems(e);let{table:s,where:i}=e,o=bne(s),c=fO.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=_O.parse(l).statements[0],f=await wne(u),d=Lne(n,f);return Mne(o,d,t)}a(Pne,"update");function Dne(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=_O.compile(`SELECT ${r.expression.toString()} AS [${Ine.FUNC_VAL}] FROM ?`)}),t}catch(t){throw rk.error(t),new Error(Cne)}}a(Dne,"createUpdateRecord");function Lne(e,t){return fO.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}a(Lne,"buildUpdateRecords");async function Mne(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await yne.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){rk.error(`Error delete new_attributes from update response: ${i}`)}return s}a(Mne,"updateRecords")});var ak=P((lIe,ok)=>{var vne=require("alasql"),Une=Vr(),xne=X(),Bne=Fn(),pO=require("util"),hO=oe(),Hne=(G(),D($)),kne=Ks(),aIe=sg(),cIe=Sn(),Fne="record",Gne="successfully deleted",qne=pO.callbackify(Yne),$ne=pO.promisify(Une.search),Vne=pO.promisify(kne.getTableSchema);ok.exports={convertDelete:qne};function Kne(e){return`${e.deleted_hashes.length} ${Fne}${e.deleted_hashes.length===1?"":"s"} ${Gne}`}a(Kne,"generateReturnMessage");async function Yne({statement:e,hdb_user:t}){let r=await Vne(e.table.databaseid,e.table.tableid);hO.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=hO.isEmpty(s)?"":` WHERE  ${s.toString()}`,o=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=vne.parse(o).statements[0],l={operation:Hne.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await $ne(c);let u=await Bne.deleteRecords(l);return hO.isEmptyOrZeroLength(u.message)&&(u.message=Kne(u)),delete u.txn_time,u}catch(u){throw xne.error(u),u.hdb_code?u.message:u}}a(Yne,"convertDelete")});var fk=P((dIe,dk)=>{"use strict";var Wne=_o(),{hdb_errors:ck}=he(),{getDatabases:lk}=(Ue(),D(ct));dk.exports={checkSchemaExists:uk,checkSchemaTableExists:zne,schema_describe:Wne};async function uk(e){if(!lk()[e])return ck.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(uk,"checkSchemaExists");async function zne(e,t){let r=await uk(e);if(r)return r;if(!lk()[e][t])return ck.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(zne,"checkSchemaTableExists")});var TO=P((mIe,bk)=>{"use strict";var{decode:jne}=require("msgpackr"),{isMainThread:_Ie,parentPort:hIe,threadId:pIe}=require("worker_threads"),ag=gr(),Lu=Ct(),gO=(G(),D($)),Wr=X(),EO=ce(),Qne=(G(),D($)),{onMessageByType:Jne}=st(),mk=fo(),{recordAction:_k,recordActionBinary:Xne}=(Ii(),D(R_)),{publishToStream:Zne}=ag,{ConsumerEvents:hk}=require("nats"),ese=Vr(),{promisify:tse}=require("util"),{decodeBlobsWithWrites:rse}=(ds(),D(um)),Ek=tse(setTimeout),cg=1e4,lg,og,nse,sse,gk,$_=new Map,Mu=new Map;bk.exports={initialize:Sk,ingestConsumer:SO,setSubscription:ise,setIgnoreOrigin:cse,getDatabaseSubscriptions:ase,updateConsumer:Tk};async function Sk(){Jne(gO.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await Tk(n)}),gk=!0,Wr.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await ag.getNATSReferences();lg=e,og=e.info.server_name,nse=t,sse=r}a(Sk,"initialize");async function Tk(e){if(e.status==="start"){let{js:t,jsm:r}=await Ak(e.node_domain_name);SO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=$_.get(e.stream_name+e.node_domain_name);t&&(Wr.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),$_.set(e.stream_name+e.node_domain_name,"close")),Mu.get(e.node_domain_name)==="failed"&&Mu.set(e.node_domain_name,"close")}}a(Tk,"updateConsumer");var ug=new Map;function ise(e,t,r){let n=ug.get(e);n||ug.set(e,n=new Map),n.set(t,r),gk||Sk().then(ose)}a(ise,"setSubscription");async function ose(){let e=await ese.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+Lu.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await Ak(r),!n))break;let{schema:o,table:c}=i,l=mk.createNatsTableStreamName(o,c);SO(l,n,s,r)}}}a(ose,"accessConsumers");async function Ak(e){let t,r,n=1;for(;!r;)try{t=await lg.jetstream({domain:e}),r=await lg.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(Mu.get(e)==="close")break;Mu.set(e,"failed"),n%10===1&&Wr.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<cg?n++*100:cg;await Ek(i)}return{js:t,jsm:r}}a(Ak,"connectToRemoteJS");function ase(){return ug}a(ase,"getDatabaseSubscriptions");var Rk;function cse(e){Rk=e}a(cse,"setIgnoreOrigin");var yk=100,pk=new Array(yk),ig=0;async function SO(e,t,r,n){let{connection:s}=await ag.getNATSReferences();lg=s,og=s.info.server_name;let i,o=1;for(;!i;)try{i=await t.consumers.get(e,og),Wr.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(Mu.get(n)==="close")break;o%10===1&&Wr.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(Wr.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await ag.createConsumer(r,e,og,new Date(Date.now()).toISOString()));let f=o++*100<cg?o++*100:cg;await Ek(f)}let c=!1,l;for(;!c;){if($_.get(e+n)==="close"||Mu.get(n)==="close"){$_.delete(e+n),c=!0;continue}l=await i.consume({max_messages:EO.get(gO.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),$_.set(e+n,l);let u=!1;(async()=>{for await(let f of await l.status())if(f.type===hk.ConsumerDeleted&&(await l.close(),c=!0),f.type===hk.HeartbeatsMissed){let d=f.data;Wr.trace(`${d} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),d===100&&(Wr.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let f of l)await pk[ig],pk[ig]=lse(f).catch(d=>{Wr.error(d)}),++ig>=yk&&(ig=0)}catch(f){f.message==="consumer deleted"?(Wr.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):Wr.error("Error consuming clustering ingest, restarting consumer",f)}}}a(SO,"ingestConsumer");async function lse(e){let t;await rse(()=>{t=jne(e.data)}),_k(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),Wr.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=EO.get(gO.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has(Lu.MSG_HEADERS.TRANSACTED_NODES)&&r.values(Lu.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get(Lu.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!Rk),Xne(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append(Lu.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:o,schema:c,next:l,table:u,records:f,hash_values:d,__origin:h,expiresAt:_}=t;Wr.trace("processing message:",o,c,u,(f?"records: "+f.map(v=>v?.id):"")+(d?"ids: "+d:""),"with sequence:",e.seq),Wr.trace(`messageProcessor nats msg id: ${e.headers.get(Lu.MSG_HEADERS.NATS_MSG_ID)}`);let p;f||(f=d);let S=new Promise(v=>p=v),{timestamp:g,user:R,node_name:E}=h||{},T=ug.get(c)?.get(u);if(!T)throw new Error(`Missing table for replication message: ${u}`);if(o==="define_schema")t.type=o,t.onCommit=p,T.send(t);else if(f.length===1&&!l)T.send({type:mO(o),value:f[0],id:d?.[0],expiresAt:_,timestamp:g,table:u,onCommit:p,user:R,nodeName:E});else{let v=f.map((F,q)=>({type:mO(o),value:F,expiresAt:_,id:d?.[q],table:u}));for(;l;)v.push({type:mO(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;T.send({type:"transaction",writes:v,table:u,timestamp:g,onCommit:p,user:R,nodeName:E})}EO.get(Qne.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&Zne(e.subject.split(".").slice(0,-1).join("."),mk.createNatsTableStreamName(c,u),e.headers,e.data),await S;let O=Date.now()-g;g&&_k(O,"replication-latency",e.subject,o,"ingest")}catch(o){Wr.error(o)}e.ack()}a(lse,"messageProcessor");function mO(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}a(mO,"convertOperation")});var gr=P((yIe,Gk)=>{"use strict";var Nr=ce();Nr.initSync();var use=require("fs-extra"),dse=require("semver"),Y_=require("path"),{monotonicFactory:fse}=require("ulidx"),Nk=fse(),_se=require("util"),wk=require("child_process"),hse=_se.promisify(wk.exec),pse=wk.spawn,Ur=Ct(),je=(G(),D($)),{packageJson:mse,PACKAGE_ROOT:Ese}=Et(),dg=oe(),js=X(),fg=fo(),gse=sg(),V_=Dt(),{broadcast:Sse,onMessageByType:Tse,getWorkerIndex:Ase}=st(),{isMainThread:Ik}=require("worker_threads"),{Encoder:Rse,decode:bO}=require("msgpackr"),Ck=new Rse,{isEmpty:il}=dg,Pk=Vn(),gIe=48*36e11;Ik&&Tse(je.ITC_EVENT_TYPES.RESTART,()=>{zr=void 0,sl=void 0});var{connect:yse,StorageType:bse,RetentionPolicy:Ose,AckPolicy:OO,DeliverPolicy:NO,DiscardPolicy:Nse,NatsConnection:SIe,JetStreamManager:TIe,JetStreamClient:AIe,StringCodec:RIe,JSONCodec:wse,createInbox:wO,headers:Ise,ErrorCode:Ok}=require("nats"),{recordAction:Cse}=(Ii(),D(R_)),{encodeBlobsAsBuffers:Pse}=(ds(),D(um)),Dk=wse(),Dse="clustering",Lse=mse.engines[Ur.NATS_SERVER_NAME],Mse=Y_.join(Ese,"dependencies"),yO=Y_.join(Mse,`${process.platform}-${process.arch}`,Ur.NATS_BINARY_NAME),AO,RO,K_,rl,nl;Gk.exports={runCommand:Lk,checkNATSServerInstalled:vse,createConnection:IO,getConnection:W_,getJetStreamManager:z_,getJetStream:vk,getNATSReferences:Mi,getServerList:xse,createLocalStream:CO,listStreams:Uk,deleteLocalStream:Bse,getServerConfig:vu,listRemoteStreams:Hse,viewStream:kse,viewStreamIterator:Fse,publishToStream:Gse,request:Vse,reloadNATS:PO,reloadNATSHub:Kse,reloadNATSLeaf:Yse,extractServerName:$se,requestErrorHandler:Wse,createLocalTableStream:kk,createTableStreams:Qse,purgeTableStream:Fk,purgeSchemaTableStreams:Jse,getStreamInfo:Xse,updateLocalStreams:eie,closeConnection:Use,getJsmServerName:_g,addNatsMsgHeader:xk,clearClientCache:Mk,updateRemoteConsumer:zse,createConsumer:Bk,updateConsumerIterator:jse};async function Lk(e,t=void 0){let{stdout:r,stderr:n}=await hse(e,{cwd:t});if(n)throw new Error(n.replace(`
 `,""));return r.replace(`
-`,"")}a(Lk,"runCommand");async function vse(){try{await use.access(yO)}catch{return!1}let e=await Lk(`${yO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return dse.eq(t,Lse)}a(vse,"checkNATSServerInstalled");async function IO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await Pk.getClusterUser();if(il(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}js.trace("create nats connection called");let i=await yse({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&js.error("Error with Nats client connection, connection closed",o),i===zr&&Mk()}),i}a(IO,"createConnection");function Mk(){zr=void 0,rl=void 0,nl=void 0,sl=void 0}a(Mk,"clearClientCache");async function Use(){zr&&(await zr.drain(),zr=void 0,rl=void 0,nl=void 0,sl=void 0)}a(Use,"closeConnection");var zr,sl;async function W_(){return sl||(sl=IO(Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),zr=await sl),zr||sl}a(W_,"getConnection");async function z_(){if(rl)return rl;il(zr)&&await W_();let{domain:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(il(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return rl=await zr.jetstreamManager({domain:e,timeout:6e4}),rl}a(z_,"getJetStreamManager");async function vk(){if(nl)return nl;il(zr)&&await W_();let{domain:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(il(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return nl=zr.jetstream({domain:e,timeout:6e4}),nl}a(vk,"getJetStream");async function Mi(){let e=zr||await W_(),t=rl||await z_(),r=nl||await vk();return{connection:e,jsm:t,js:r}}a(Mi,"getNATSReferences");async function xse(e){let t=Nr.get(je.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await Pk.getClusterUser(),s=await IO(t,r,n),i=wO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=Dk.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await dg.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(xse,"getServerList");async function CO(e,t){let{jsm:r}=await Mi(),n=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:bse.File,retention:Ose.Limits,subjects:t,discard:Nse.Old,max_msgs:s,max_bytes:i,max_age:n})}a(CO,"createLocalStream");async function Uk(){let{jsm:e}=await Mi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(Uk,"listStreams");async function Bse(e){let{jsm:t}=await Mi();await t.streams.delete(e)}a(Bse,"deleteLocalStream");async function Hse(e){let{connection:t}=await Mi(),r=[],n=wO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(Dk.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(Hse,"listRemoteStreams");async function kse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=Nk(),o={durable_name:i,ack_policy:OO.Explicit};t&&(o.deliver_policy=NO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=bO(f.data),h={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(h.origin=f.headers.get(Ur.MSG_HEADERS.ORIGIN)),u.push(h),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(kse,"viewStream");async function*Fse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=Nk(),o={durable_name:i,ack_policy:OO.Explicit};t&&(o.deliver_policy=NO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=bO(u.data);f[0]||(f=[f]);for(let d of f){let h={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(h.origin=u.headers.get(Ur.MSG_HEADERS.ORIGIN)),yield h}if(u.ack(),u.info.pending===0)break}await c.delete()}a(Fse,"viewStreamIterator");async function Gse(e,t,r,n){js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=xk(n,r);let{js:s}=await Mi(),i=await _g(),o=`${e}.${i}`,c=await Pse(()=>n instanceof Uint8Array?n:Ck.encode(n));try{js.trace(`publishToStream publishing to subject: ${o}`),Cse(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return Hk(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await CO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(Gse,"publishToStream");function xk(e,t){t===void 0&&(t=Ise());let r=Nr.get(je.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Ur.MSG_HEADERS.ORIGIN)&&r&&t.append(Ur.MSG_HEADERS.ORIGIN,r),t}a(xk,"addNatsMsgHeader");function vu(e){e=e.toLowerCase();let t=Y_.join(Nr.get(je.CONFIG_PARAMS.ROOTPATH),Dse);if(e===je.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return il(RO)&&(RO={port:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.HUB,config_file:Ur.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:Y_.join(t,Ur.PID_FILES.HUB),hdb_nats_path:t}),RO;if(e===je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return il(AO)&&(AO={port:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.LEAF,config_file:Ur.NATS_CONFIG_FILES.LEAF_SERVER,domain:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.LEAF,pid_file_path:Y_.join(t,Ur.PID_FILES.LEAF),hdb_nats_path:t}),AO;js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(vu,"getServerConfig");async function Bk(e,t,r,n){try{await e.consumers.add(t,{ack_policy:OO.Explicit,durable_name:r,deliver_policy:NO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(Bk,"createConsumer");async function qse(e,t,r){await e.consumers.delete(t,r)}a(qse,"removeConsumer");function $se(e){return e.split(".")[1]}a($se,"extractServerName");async function Vse(e,t,r=6e4,n=wO()){if(!dg.isObject(t))throw new Error("data param must be an object");let s=Ck.encode(t),{connection:i}=await Mi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return bO(c.data)}a(Vse,"request");function PO(e){return new Promise(async(t,r)=>{let n=pse(yO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(PO,"reloadNATS");async function Kse(){let{pid_file_path:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await PO(e)}a(Kse,"reloadNATSHub");async function Yse(){let{pid_file_path:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await PO(e)}a(Yse,"reloadNATSLeaf");function Wse(e,t,r){let n;switch(e.code){case Ok.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case Ok.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(Wse,"requestErrorHandler");async function zse(e,t){let r=t+Ur.SERVER_SUFFIX.LEAF,{connection:n}=await Mi(),{jsm:s}=await rie(r),{schema:i,table:o}=e,c=fg.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await Hk(async()=>{if(e.subscribe===!0)await Bk(s,c,n.info.server_name,l);else try{await qse(s,c,n.info.server_name)}catch(u){js.trace(u)}})}a(zse,"updateRemoteConsumer");async function jse(e,t,r,n){let s=fg.createNatsTableStreamName(e,t),i=r+Ur.SERVER_SUFFIX.LEAF,o={type:je.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!Ik&&Ase()<Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=TO();await c(o)}await Sse(o),n==="stop"&&await dg.async_set_timeout(1e3)}a(jse,"updateConsumerIterator");function Hk(e){return gse.writeTransaction(je.SYSTEM_SCHEMA_NAME,je.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(Hk,"exclusiveLock");async function kk(e,t){let r=fg.createNatsTableStreamName(e,t),n=await _g(),s=Zse(e,t,n);await CO(r,[s])}a(kk,"createLocalTableStream");async function Qse(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await kk(n,s)}}a(Qse,"createTableStreams");async function Fk(e,t,r=void 0){if(Nr.get(je.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=fg.createNatsTableStreamName(e,t),{domain:s}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await W_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")js.warn(n);else throw n}}a(Fk,"purgeTableStream");async function Jse(e,t){if(Nr.get(je.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await Fk(e,t[r])}a(Jse,"purgeSchemaTableStreams");async function Xse(e){return(await z_()).streams.info(e)}a(Xse,"getStreamInfo");function Zse(e,t,r){return`${Ur.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Zse,"createSubjectName");async function _g(){if(K_)return K_;if(K_=(await z_())?.nc?.info?.server_name,K_===void 0)throw new Error("Unable to get jetstream manager server name");return K_}a(_g,"getJsmServerName");async function eie(){let e=await z_(),t=await _g(),r=await Uk();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=tie(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(eie,"updateLocalStreams");function tie(e){let{config:t}=e,r=!1,n=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(tie,"updateStreamLimits");async function rie(e){let t,r;try{t=await zr.jetstream({domain:e}),r=await zr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(rie,"connectToRemoteJS")});function DO(e){let t=e.get(hg),r=t?(0,Uu.unpack)(t):null;r||(r={remoteNameToId:{}});let n=tt(),s=!1;r.nodeName=tt();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:Q_(e)??1,nodes:[]})})}i[n]=0,e.putSync(hg,(0,Uu.pack)(r))}return r}function j_(e){return DO(e).remoteNameToId}function $k(e,t){let r=DO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(hg,(0,Uu.pack)(r)),s}function pg(e,t){let r=DO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(hg,(0,Uu.pack)(r))}return qk.trace?.("The remote node name map",e,n,s),s}var qk,Uu,hg,LO=be(()=>{qk=M(pi());gs();Uu=require("msgpackr"),hg=Symbol.for("remote-ids");a(DO,"getIdMappingRecord");a(j_,"exportIdMapping");a($k,"remoteToLocalNodeId");a(pg,"getIdOfRemoteNode")});var MO={};Be(MO,{commits_awaiting_replication:()=>Bu,getHDBNodeTable:()=>sr,getReplicationSharedStatus:()=>mg,iterateRoutes:()=>X_,shouldReplicateToNode:()=>J_,subscribeToNodeUpdates:()=>Hu});function sr(){return Vk||(Vk=_t({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function mg(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Hu(e){sr().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;zk.debug?.("adding node",n,"on  node",tt()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==tt()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of sr().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function J_(e,t){return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&sr().primaryStore.get(tt())?.replicates||e.subscriptions?.some(r=>(r.database||r.schema)===t&&r.subscribe)}function nie(){Hu(e=>{Ta({},(t,r)=>{let n=e.name,s=Kk.get(n);if(s||Kk.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=mg(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of Bu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*X_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=xu.default.get(B.REPLICATION_SECUREPORT)??(!xu.default.get(B.REPLICATION_PORT)&&xu.default.get(B.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||xu.default.get(B.REPLICATION_PORT)||xu.default.get(B.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){Yk.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var Yk,Wk,xu,zk,Vk,Kk,Bu,ol=be(()=>{Ue();gs();$p();Yk=require("worker_threads"),Wk=M(he()),xu=M(ce());G();zk=M(pi());server.nodes=[];a(sr,"getHDBNodeTable");a(mg,"getReplicationSharedStatus");a(Hu,"subscribeToNodeUpdates");a(J_,"shouldReplicateToNode");Kk=new Map;yD((e,t,r)=>{if(r>server.nodes.length)throw new Wk.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);Bu||(Bu=new Map,nie());let n=Bu.get(e);return n||(n=[],Bu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(nie,"startSubscriptionToReplications");a(X_,"iterateRoutes")});var Jk={};Be(Jk,{connectedToNode:()=>al,disconnectedFromNode:()=>Fu,ensureNode:()=>go,requestClusterStatus:()=>Qk,startOnMainThread:()=>xO});async function xO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){Eg.set(i,Q_(l.auditStore));break}}}Ui.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of X_(e))try{let c=!o.subscriptions;if(c){let u=tt(),f=sr().primaryStore.get(u);if(f!==null){let d=e.url??Aa();(f===void 0||f.url!==d||f.shard!==e.shard)&&await go(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Hu(s)});let n;function s(i,o=i?.name){let c=tt()&&o===tt()||Aa()&&i?.url===Aa();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let h of sr().search([]))h.replicates&&h.name!==o&&s(h,h.name);n=d}if(nt.trace("Setting up node replication for",i),!i){for(let[d,h]of vi){let _;for(let[p,{worker:S,nodes:g}]of h){let R=g[0];if(R&&R.name==o){_=!0;for(let[E,{worker:T}]of h)h.delete(E),nt.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(_){vi.get(d).iterator.remove(),vi.delete(d);return}}return}if(c)return;if(!i.url){nt.info(`Node ${i.name} is missing url`);return}let l=vi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(nt.info(`Added node ${i.name} at ${i.url} for process ${tt()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,h]of ku)if(i.url===h.url){ku.delete(d);break}ku.set(i.name,i)}let u=Xe();if(l||(l=new Map,vi.set(i.url,l)),l.iterator=Ta(e,(d,h,_)=>{_?f(h,!0):f(h,!1)}),i.subscriptions)for(let d of i.subscriptions){let h=d.database||d.schema;u[h]||(nt.warn(`Database ${h} not found for node ${i.name}, making a subscription anyway`),f(h,!1))}function f(d,h){nt.trace("Setting up replication for database",d,"on node",i.name);let _=l.get(d),p,S=[{replicateByDefault:h,...i}];Eg.has(d)&&(S.push({replicateByDefault:h,name:tt(),start_time:Eg.get(d),end_time:Date.now(),replicates:!0}),Eg.delete(d));let g=J_(i,d),R=Ui.workers.filter(E=>E.name==="http");if(_?(p=_.worker,_.nodes=S):g&&(t=t%R.length,p=R[t++],l.set(d,{worker:p,nodes:S,url:i.url}),p?.on("exit",()=>{l.get(d)?.worker===p&&(l.delete(d),f(d,h))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};p?p.postMessage(E):Z_(E)},sie);else{nt.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],sr().primaryStore.get(tt())?.replicates),sr().primaryStore.get(tt())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};p?p.postMessage(E):Sg(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Fu=a(function(i){try{if(UO.default.get(B.REPLICATION_FAILOVER)===!1)return;nt.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(ku.keys()),c=o.sort(),l=c.indexOf(i.name||Qs(i.url));if(l===-1){nt.warn("Disconnected node not found in node map",i.name,o);return}let u=vi.get(i.url),f=u?.get(i.database);if(!f){nt.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished)return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let h=d.shard,_=(l+1)%c.length;for(;l!==_;){let p=c[_],S=ku.get(p);u=vi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==h){_=(_+1)%c.length;continue}let{worker:R,nodes:E}=g,T=!1;for(let O of f.nodes){if(E.some(v=>v.name===O.name)){nt.info(`Disconnected node is already failing over to ${p} for ${i.database}`);continue}O.end_time<Date.now()||(E.push(O),T=!0)}if(f.nodes=[f.nodes[0]],!T){nt.info(`Disconnected node ${i.name} has no nodes to fail over to ${p}`);return}nt.info(`Failing over ${i.database} from ${i.name} to ${p}`),R?R.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):Z_({database:i.database,nodes:E});return}nt.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){nt.error("Error failing over node",o)}},"disconnectedFromNode"),al=a(function(i){let o=vi.get(i.url),c=o?.get(i.database);if(!c){nt.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){nt.info("Connected node has no nodes",i.database,c);return}if(!l.name){nt.debug("Connected node is not named yet",i.database,c);return}c.nodes=[l];let u=!1;for(let f of vi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:h,nodes:_,connected:p}=d;if(_)if(p===!1&&_[0].shard===l.shard)u=!0,c.nodes.push(_[0]);else{let S=_.filter(g=>g.name!==l.name);S.length<_.length&&(d.nodes=S,h.postMessage({type:"subscribe-to-node",database:i.database,nodes:_}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,Ui.onMessageByType)("disconnected-from-node",Fu),(0,Ui.onMessageByType)("connected-to-node",al),(0,Ui.onMessageByType)("request-cluster-status",Qk)}function Qk(e,t){let r=[];for(let[n,s]of ku)try{let i=vi.get(s.url);nt.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:h}]of i)o.push({database:l,connected:f,latency:h,thread_id:u?.threadId,nodes:d.filter(_=>!(_.end_time<Date.now())).map(_=>_.name)});let c=(0,vO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){nt.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function go(e,t){let r=sr();e=e??Qs(t.url),t.name=e;try{if(t.ca){let s=new jk.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){nt.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(nt.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!UO.default.get(B.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,vO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}nt.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var Ui,gg,nt,vO,UO,jk,sie,vi,Fu,al,ku,Eg,eh=be(()=>{Ue();Ui=M(st());gs();gg=require("worker_threads");ol();nt=M(X()),vO=require("lodash"),UO=M(ce());G();jk=require("crypto"),sie=200,vi=new Map,ku=new Map,Eg=new Map;a(xO,"startOnMainThread");a(Qk,"requestClusterStatus");gg.parentPort&&(Fu=a(e=>{gg.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),al=a(e=>{gg.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,Ui.onMessageByType)("subscribe-to-node",e=>{Z_(e)}),(0,Ui.onMessageByType)("unsubscribe-from-node",e=>{Sg(e)}));a(go,"ensureNode")});var Zs=P(TF=>{"use strict";var ir=require("path"),{watch:iie}=require("chokidar"),Rn=require("fs-extra"),Gu=require("node-forge"),nF=require("net"),{generateKeyPair:HO,X509Certificate:So,createPrivateKey:sF}=require("crypto"),oie=require("util");HO=oie.promisify(HO);var yt=Gu.pki,Js=require("joi"),{v4:iF}=require("uuid"),{validateBySchema:qO}=it(),St=X(),Qn=ce(),Ss=(G(),D($)),{CONFIG_PARAMS:ll}=Ss,Xs=nb(),{ClientError:ya}=he(),Tg=require("node:tls"),{relative:oF,join:aie}=require("node:path"),{CERT_PREFERENCE_APP:FIe,CERTIFICATE_VALUES:Xk}=Xs,cie=uc(),kO=Dt(),{table:lie,getDatabases:uie,databases:BO}=(Ue(),D(ct)),{getJWTRSAKeys:Zk}=(Pu(),D(q_));Object.assign(TF,{generateKeys:KO,updateConfigCert:hF,createCsr:Eie,signCertificate:gie,setCertTable:qu,loadCertificates:dF,reviewSelfSignedCert:WO,createTLSSelector:mF,listCertificates:gF,addCertificate:bie,removeCertificate:Nie,createNatsCerts:Aie,generateCertsKeys:Tie,getReplicationCert:rh,getReplicationCertAuth:mie,renewSelfSigned:Rie,hostnamesFromCert:zO,getKey:wie});var{urlToNodeName:aF,getThisNodeUrl:die,getThisNodeName:Rg,clearThisNodeName:fie}=(gs(),D(Na)),{readFileSync:_ie,statSync:cF}=require("node:fs"),GIe=ce(),{getTicketKeys:hie,onMessageFromWorkers:pie}=st(),Ra=X(),{isMainThread:lF}=require("worker_threads"),{TLSSocket:uF,createSecureContext:qIe}=require("node:tls"),$O=3650,th=["127.0.0.1","localhost","::1"],VO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];pie(async e=>{e.type===Ss.ITC_EVENT_TYPES.RESTART&&(Qn.initSync(!0),await WO())});var xr;function Oa(){return xr||(xr=uie().system.hdb_certificate,xr||(xr=lie({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),xr}a(Oa,"getCertTable");async function rh(){let e=mF("operations-api"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(Rg());if(!r)return;let n=new So(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(rh,"getReplicationCert");async function mie(){Oa();let e=(await rh()).options.cert,r=new So(e).issuer.match(/CN=(.*)/)?.[1];return xr.get(r)}a(mie,"getReplicationCertAuth");var eF,ba=new Map;function dF(){if(eF)return;eF=!0;let e=[{configKey:ll.TLS},{configKey:ll.OPERATIONSAPI_TLS}];Oa();let t=ir.dirname(kO.getConfigFilePath()),r;for(let{configKey:n}of e){let s=kO.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&oF(aie(t,"keys"),o);c&&tF(o,l=>{ba.set(c,l)},"private key");for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&lF){let f;tF(u,d=>{if(Xk.cert===d)return;let h=i.hostname??i.hostnames??i.host??i.hosts;h&&!Array.isArray(h)&&(h=[h]);let _=pF(u),p=new So(_),S;try{S=SF(p)}catch(T){logger.error("error extracting host name from certificate",T);return}if(S==null){logger.error("No host name found on certificate");return}if(p.checkIssued(new So(Xk.cert)))return;let g=xr.primaryStore.get(S),R=cF(u).mtimeMs,E=!g||g.is_self_signed?1:g.file_timestamp??g.__updatedtime__;if(g&&R<=E){R<E&&St.info(`Certificate ${S} at ${u} is older (${new Date(R)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}r=xr.put({name:S,uses:["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:_,private_key_name:c,is_authority:l,hostnames:h,file_timestamp:R,details:{issuer:p.issuer.replace(/\n/g," "),subject:p.subject.replace(/\n/g," "),subject_alt_name:p.subjectAltName,serial_number:p.serialNumber,valid_from:p.validFrom,valid_to:p.validTo}})},l?"certificate authority":"certificate")}}}}}return r}a(dF,"loadCertificates");function tF(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&lF&&St.warn(`Reloading ${r}:`,i),n=c,t(pF(i)))}catch(c){St.error(`Error loading ${r}:`,i,c)}},"loadFile");Rn.existsSync(e)?s(e,cF(e)):St.error(`${r} file not found:`,e),iie(e,{persistent:!1}).on("change",s)}a(tF,"loadAndWatch");function FO(){let e=die();if(e==null){let t=th[0];return St.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return aF(e)}a(FO,"getHost");function Ag(){let e=Rg();if(e==null){let t=th[0];return St.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(Ag,"getCommonName");async function Eie(){let e=await rh(),t=yt.certificateFromPem(e.options.cert),r=yt.privateKeyFromPem(e.options.key);St.info("Creating CSR with cert named:",e.name);let n=yt.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:Ag()},...VO];St.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:fF()}];return St.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),Gu.pki.certificationRequestToPem(n)}a(Eie,"createCsr");function fF(){let e=th.includes(Ag())?th:[...th,Ag()];return e.includes(FO())||e.push(FO()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>nF.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(fF,"certExtensions");async function gie(e){let t={},r=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;Oa();for await(let f of xr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(ba.has(f.private_key_name)){n=ba.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await Rn.exists(ir.join(r,f.private_key_name))){n=Rn.readFile(ir.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await GO();s=f.ca,n=f.private_key}n=yt.privateKeyFromPem(n),t.signingCA=s.certificate;let i=yt.certificateFromPem(s.certificate);St.info("Signing CSR with cert named",s.name);let o=yt.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return St.error(f),new Error("Error verifying CSR: "+f.message)}let c=Gu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+$O),St.info("sign cert setting validity:",c.validity),St.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),St.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;St.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,Gu.md.sha256.create()),t.certificate=yt.certificateToPem(c)}else St.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(gie,"signCertificate");async function Sie(e,t){await qu({name:Rg(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await qu({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:yt.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Sie,"createCertificateTable");async function qu(e){let t=new So(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},Oa(),await xr.patch(e)}a(qu,"setCertTable");async function KO(){let e=await HO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:yt.publicKeyFromPem(e.publicKey),private_key:yt.privateKeyFromPem(e.privateKey)}}a(KO,"generateKeys");async function YO(e,t,r){let n=yt.createCertificate();if(!t){let o=await rh();t=yt.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+$O);let i=[{name:"commonName",value:Ag()},...VO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(fF()),n.sign(e,Gu.md.sha256.create()),yt.certificateToPem(n)}a(YO,"generateCertificates");async function GO(){let e=await gF(),t;for(let r of e){if(!r.is_authority)continue;let n=await EF(r.private_key_name);if(r.private_key_name&&n&&new So(r.certificate).checkPrivateKey(sF(n))){St.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;St.trace("No CA found with matching private key")}a(GO,"getCertAuthority");async function _F(e,t,r=!0){let n=yt.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+$O);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Qn.get(ll.REPLICATION_HOSTNAME)??aF(Qn.get(ll.REPLICATION_URL))??iF().split("-")[0]}`},...VO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,Gu.md.sha256.create());let o=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),c=ir.join(o,Xs.PRIVATEKEY_PEM_NAME);return r&&await Rn.writeFile(c,yt.privateKeyToPem(e)),n}a(_F,"generateCertAuthority");async function Tie(){let{private_key:e,public_key:t}=await KO(),r=await _F(e,t),n=await YO(e,t,r);await Sie(n,r),hF()}a(Tie,"generateCertsKeys");async function Aie(){let e=await YO(yt.privateKeyFromPem(Xs.CERTIFICATE_VALUES.key),void 0,yt.certificateFromPem(Xs.CERTIFICATE_VALUES.cert)),t=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),r=ir.join(t,Xs.NATS_CERTIFICATE_PEM_NAME);await Rn.exists(r)||await Rn.writeFile(r,e);let n=ir.join(t,Xs.NATS_CA_PEM_NAME);await Rn.exists(n)||await Rn.writeFile(n,Xs.CERTIFICATE_VALUES.cert)}a(Aie,"createNatsCerts");async function Rie(){Oa();for await(let e of xr.search([{attribute:"is_self_signed",value:!0}]))await xr.delete(e.name);await WO()}a(Rie,"renewSelfSigned");async function WO(){fie(),await dF(),Oa();let e=await GO();if(!e){St.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:yt.privateKeyFromPem(Rn.readFileSync(u)),keyPath:u}}catch(f){return St.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Qn.get(ll.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Qn.get(ll.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),c=oF(o,i);s||(St.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await KO(),Rn.existsSync(ir.join(o,Xs.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${iF().split("-")[0]}.pem`),await Rn.writeFile(ir.join(o,c),yt.privateKeyToPem(s)));let l=await _F(s,yt.setRsaPublicKey(s.n,s.e),!1);await qu({name:l.subject.getField("CN").value,uses:["https"],certificate:yt.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await rh()){let r=Rg();St.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await GO();let n=yt.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await YO(yt.privateKeyFromPem(e.private_key),s,n);await qu({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(WO,"reviewSelfSignedCert");function hF(){let e=cie(Object.keys(Ss.CONFIG_PARAM_MAP),!0),t=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),r=ir.join(t,Xs.PRIVATEKEY_PEM_NAME),n=ir.join(t,Xs.NATS_CERTIFICATE_PEM_NAME),s=ir.join(t,Xs.NATS_CA_PEM_NAME),i=Ss.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),kO.updateConfigValue(void 0,void 0,o,!1,!0)}a(hF,"updateConfigCert");function pF(e){return e.startsWith("-----BEGIN")?e:_ie(e,"utf8")}a(pF,"readPEM");var rF=Tg.createSecureContext;Tg.createSecureContext=function(e){if(!e.cert||!e.key)return rF(e);let t={...e};delete t.key,delete t.cert;let r=rF(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var yie=uF.prototype._init;uF.prototype._init=function(e,t){yie.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var cl=new Map;function mF(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),cl.clear();let f=0;for await(let d of BO.system.hdb_certificate.search([])){let h=d.certificate,_=new So(h);d.is_authority&&(_.asString=h,cl.set(_.subject,h))}for await(let d of BO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let h=e==="operations-api",_=d.is_self_signed?1:2;h&&d.uses?.includes?.("operations")&&(_+=1);let p=await EF(d.private_key_name),S=d.certificate,g=new So(S);if(cl.has(g.issuer)&&(S+=`
-`+cl.get(g.issuer)),!p||!S)throw new Error("Missing private key or certificate for secure server");let R={ciphers:d.ciphers,ticketKeys:hie(),availableCAs:cl,ca:t&&Array.from(cl.values()),cert:S,key:p,key_file:d.private_key_name,is_self_signed:d.is_self_signed};o&&(R.sessionIdContext=o.sessionIdContext);let E=Tg.createSecureContext(R);E.name=d.name,E.options=R,E.quality=_,E.certificateAuthorities=Array.from(cl),E.certStart=S.toString().slice(0,100);let T=d.hostnames??zO(g);Array.isArray(T)||(T=[T]);let O;for(let v of T)if(v){v[0]==="*"&&(s=!0,v=v.slice(1)),v===FO()&&(_+=2),nF.isIP(v)&&(O=!0);let F=r.get(v)?.quality??0;_>F&&r.set(v,E)}else Ra.error("No hostname found for certificate at",Tg.certificate);Ra.trace("Adding TLS",E.name,"for",o.ports||"client","cert named",d.name,"hostnames",T,"quality",_,"best quality",f),_>f&&(i.defaultContext=n=E,f=_,o&&(o.defaultContext=E))}catch(h){Ra.error("Error applying TLS for",d.name,h)}o?.secureContextsListeners.forEach(d=>d()),c(n)}catch(f){l(f)}}a(u,"updateTLS"),BO.system.hdb_certificate.subscribe({listener:a(()=>setTimeout(()=>u(),1500).unref(),"listener"),omitCurrent:!0}),u()})),i;function i(o,c){Ra.info("TLS requested for",o||"(no SNI)");let l=o;for(;;){let f=r.get(l);if(f)return Ra.debug("Found certificate for",o,f.certStart),f.updatedContext&&(f=f.updatedContext),c(null,f);if(s&&l){let d=l.indexOf(".",1);d<0?l="":l=l.slice(d)}else break}o?Ra.debug("No certificate found to match",o,"using the default certificate"):Ra.debug("No SNI, using the default certificate",n?.name);let u=n;u?u.updatedContext&&(u=u.updatedContext):Ra.info("No default certificate found"),c(null,u)}a(i,"SNICallback")}a(mF,"createTLSSelector");async function EF(e){let t=ba.get(e);return!t&&e?await Rn.readFile(ir.join(Qn.get(ll.ROOTPATH),Ss.LICENSE_KEY_DIR_NAME,e),"utf8"):t}a(EF,"getPrivateKeyByName");async function gF(){Oa();let e=[];for await(let t of xr.search([]))e.push(t);return e}a(gF,"listCertificates");async function bie(e){let t=qO(e,Js.object({name:Js.string().required(),certificate:Js.string().required(),is_authority:Js.boolean().required(),private_key:Js.string(),hosts:Js.array(),uses:Js.array()}));if(t)throw new ya(t.message);let{name:r,certificate:n,private_key:s,is_authority:i}=e,o=new So(n),c=!1,l=!1,u;for(let[_,p]of ba)!s&&!c&&o.checkPrivateKey(sF(p))&&(c=!0,u=_),s&&s===p&&(l=!0,u=_);if(!i&&!s&&!c)throw new ya("A suitable private key was not found for this certificate");let f;if(!r){try{f=SF(o)}catch(_){St.error(_)}if(f==null)throw new ya("Error extracting certificate common name, please provide a name parameter")}let d=Oie(r??f);s&&!c&&!l&&(await Rn.writeFile(ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME,d+".pem"),s),ba.set(d,s));let h={name:r??f,certificate:n,is_authority:i,hosts:e.hosts,uses:e.uses};return(!i||i&&u||i&&s)&&(h.private_key_name=u??d+".pem"),e.ciphers&&(h.ciphers=e.ciphers),await qu(h),"Successfully added certificate: "+d}a(bie,"addCertificate");function Oie(e){return e.replace(/[^a-z0-9\.]/gi,"-")}a(Oie,"sanitizeName");async function Nie(e){let t=qO(e,Js.object({name:Js.string().required()}));if(t)throw new ya(t.message);let{name:r}=e;Oa();let n=await xr.get(r);if(!n)throw new ya(r+" not found");let{private_key_name:s}=n;if(s){let i=Array.from(await xr.search([{attribute:"private_key_name",value:s}]));i.length===1&&i[0].name===r&&(St.info("Removing private key named",s),await Rn.remove(ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME,s)))}return await xr.delete(r),"Successfully removed "+r}a(Nie,"removeCertificate");function SF(e){let t=e.subject.match(/CN=(.*)/)?.[1];return t||zO(e)[0]}a(SF,"getPrimaryHostName");function zO(e){if(e.subjectAltName)return e.subjectAltName.split(",").map(r=>{let n=r.indexOf(":");if(r=r.slice(n+1),r=r.trim(),r[0]==='"')try{r=JSON.parse(r)}catch{}return r.indexOf("=")>-1?r.match(/CN=([^,]*)/)?.[1]:r}).filter(r=>r);let t=certObj.subject.match(/CN=(.*)/)?.[1];return t?[t]:[]}a(zO,"hostnamesFromCert");async function wie(e){if(e.bypass_auth!==!0)throw new ya("Unauthorized","401");let t=qO(e,Js.object({name:Js.string().required()}));if(t)throw new ya(t.message);let{name:r}=e;if(r===".jwtPrivate")return(await Zk()).privateKey;if(r===".jwtPublic")return(await Zk()).publicKey;if(ba.get(r))return ba.get(e.name);throw new ya("Key not found")}a(wie,"getKey")});var qF={};Be(qF,{CONFIRMATION_STATUS_POSITION:()=>kF,NodeReplicationConnection:()=>Vu,OPERATION_REQUEST:()=>XO,RECEIVED_TIME_POSITION:()=>eN,RECEIVED_VERSION_POSITION:()=>ZO,RECEIVING_STATUS_POSITION:()=>tN,RECEIVING_STATUS_RECEIVING:()=>GF,RECEIVING_STATUS_WAITING:()=>FF,SENDING_TIME_POSITION:()=>nh,createWebSocket:()=>Cg,database_subscriptions:()=>Ia,replicateOverWS:()=>sh,table_update_listeners:()=>nN});async function Cg(e,t){let{authorization:r,rejectUnauthorized:n}=t||{},s=tt(),i;if(e==null)throw new TypeError(`Invalid URL: Expected a string URL for node "${s}" but received ${e}`);if(e.includes("wss://")){if(!QO){let l=(0,UF.createTLSSelector)("operations-api"),u={secureContexts:null};await l.initialize(u),QO=u.secureContexts}if(i=QO.get(s),i&&ae.debug?.("Creating web socket for URL",e,"with certificate named:",i.name),!i&&n!==!1)throw new Error("Unable to find a valid certificate to use for replication to connect to "+e)}let o={};r&&(o.Authorization=r);let c={headers:o,localAddress:s?.startsWith("127.0")?s:void 0,servername:(0,BF.isIP)(t?.serverName)?void 0:t?.serverName,noDelay:!0,highWaterMark:128*1024,rejectUnauthorized:n!==!1,secureContext:void 0};return i&&(Ig?.caCount!==To.size&&(Ig=xF.createSecureContext({...i.options,ca:[...To,...i.options.availableCAs.values()]}),Ig.caCount=To.size),c.secureContext=Ig),new MF.WebSocket(e,"harperdb-replication-v1",c)}function sh(e,t,r){let n=t.port||t.securePort,s=ul.pid%1e3+"-"+vF.threadId+(n?"s:"+n:"c:"+t.url?.slice(-4))+" "+Math.random().toString().slice(2,3),i=0,o=Buffer.allocUnsafeSlow(1024),c=0,l=new DataView(o.buffer,0,1024),u=t.database,f=t.databaseSubscriptions||Ia,d,h,_=!1,p=t.subscription;p?.then&&p.then(A=>p=A);let S=t.tables||u&&Xe()[u];if(!r){ae.error?.("No authorization provided"),sn(1008,"Unauthorized");return}let g=new Map,R=[],E=r.name;E&&t.connection&&(t.connection.nodeName=E);let T,O,v,F,q,j,te,se=6e4,z,ne=0,le=0,ie=0,Re=LF.default.get(B.REPLICATION_BLOBTIMEOUT)??12e4,pe=new Map,Ae=[],Bt=0,dt;if(t.url){let A=a(()=>{q&&le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten?e.terminate():(q=performance.now(),e.ping(),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten)},"send_ping");v=setInterval(A,PF).unref(),A()}else Cn();e._socket?.setMaxListeners(200);function Cn(){clearTimeout(F),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten,F=setTimeout(()=>{le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten&&(ae.warn?.(`Timeout waiting for ping from ${E}, terminating connection and reconnecting`),e.terminate())},PF*2).unref()}a(Cn,"resetPingTimer");function nn(){return h||(h=mg(d,u,E)),h}a(nn,"getSharedStatus"),u&&zo(u);let wr,kd,nc=[],jT=[],QT,Ht=[],Fd=[],Gd=[],JT=150,Sp=25,qd=0,De=0,$d=!1,Wi,Ir,Pn,sc;e.on("message",A=>{ne=performance.now();try{let w=A.dataView=new wc(A.buffer,A.byteOffset,A.byteLength);if(A[0]>127){let N=(0,et.decode)(A),[H,U,Q]=N;switch(H){case RF:{if(U){if(E){if(E!==U){ae.error?.(s,`Node name mismatch, expecting to connect to ${E}, but peer reported name as ${U}, disconnecting`),e.send((0,et.encode)([$u])),sn(1008,"Node name mismatch");return}}else if(E=U,t.connection?.tentativeNode){let Y=t.connection.tentativeNode;Y.name=E,t.connection.tentativeNode=null,go(E,Y)}if(t.connection&&(t.connection.nodeName=E),ae.debug?.(s,"received node name:",E,"db:",u),!u)try{zo(u=N[2]),u==="system"&&(wr=Ta(t,(Y,V)=>{Wo(V)&&Yd(V)}),e.on("close",()=>{wr?.remove()}))}catch(Y){ae.warn?.(s,"Error setting database",Y),e.send((0,et.encode)([$u])),sn(1008,Y.message);return}Yo()}break}case IF:{ae.debug?.(s,"Received table definitions for",U.map(Y=>Y.table));for(let Y of U){let V=N[2];Y.database=V;let ue;Wo(V)&&(V==="system"?Ye[V]?.[Y.table]||(ue=C(Y,Ye[V]?.[Y.table])):ue=C(Y,Ye[V]?.[Y.table]),d||(d=ue?.auditStore),S||(S=Xe()?.[V]))}break}case $u:sn();break;case XO:try{let Y=r?.replicates||r?.subscribers||r?.name;server.operation(U,{user:r},!Y).then(V=>{Array.isArray(V)&&(V={results:V}),V.requestId=U.requestId,e.send((0,et.encode)([bg,V]))},V=>{e.send((0,et.encode)([bg,{requestId:U.requestId,error:V instanceof Error?V.toString():V}]))})}catch(Y){e.send((0,et.encode)([bg,{requestId:U.requestId,error:Y instanceof Error?Y.toString():Y}]))}break;case bg:let{resolve:J,reject:k}=g.get(U.requestId);U.error?k(new Error(U.error)):J(U),g.delete(U.requestId);break;case jO:let Ce=N[3];S||(u?ae.error?.(s,"No tables found for",u):ae.error?.(s,"Database name never received"));let de=S[Ce];de=C({table:Ce,database:u,attributes:U.attributes,schemaDefined:U.schemaDefined},de),nc[Q]={name:Ce,decoder:new et.Packr({useBigIntExtension:!0,randomAccessStructure:!0,freezeData:!0,typedStructs:U.typedStructs,structures:U.structures}),getEntry(Y){return de.primaryStore.getEntry(Y)},rootStore:de.primaryStore.rootStore};break;case yF:sc=d?$k(U,d):new Map,QT=N[2],ae.debug?.(s,`Acknowledged subscription request, receiving messages for nodes: ${QT}`);break;case bF:let ye=Q;Gd[ye]=U;break;case wF:nn()[kF]=U,ae.trace?.(s,"received and broadcasting committed update",U),nn().buffer.notify();break;case NF:T=U,p.send({type:"end_txn",localTime:T,remoteNodeIds:R});break;case Og:{let Y=N[1],{fileId:V,size:ue,finished:_e,error:me}=Y,Te=pe.get(V);ae.debug?.("Received blob",V,"has stream",!!Te,"connectedToBlob",!!Te?.connectedToBlob,"length",N[2].length,"finished",_e),Te||(Te=new JO.PassThrough,Te.expectedSize=ue,pe.set(V,Te)),Te.lastChunk=Date.now();let Pe=N[2];Lt(Pe.byteLength,"bytes-received",`${E}.${u}`,"replication","blob");try{_e?(me?(Te.on("error",()=>{}),Te.destroy(new Error("Blob error: "+me+" for record "+(Te.recordId??"unknown")+" from "+E))):Te.end(Pe),Te.connectedToBlob&&pe.delete(V)):Te.write(Pe)}catch(Ve){ae.error?.(`Error receiving blob for ${Te.recordId} from ${E} and streaming to storage`,Ve),pe.delete(V)}break}case OF:{let Y=U,V;try{let ue=N[3],_e=jT[Q]||(jT[Q]=S[N[4]]);if(!_e)return ae.warn?.("Unknown table id trying to handle record request",Q);let me=_e.primaryStore.getBinaryFast(Symbol.for("structures")),Te=me?.length;if(Te>0&&Te!==De){De=Te;let Ve=(0,et.decode)(me);e.send((0,et.encode)([jO,{typedStructs:Ve.typed,structures:Ve.named},Q,_e.tableName]))}let Pe=_e.primaryStore.getBinaryFast(ue);if(Pe){let Ve=_e.primaryStore.decoder.decode(Pe,{valueAsBuffer:!0}),We=Ve.value;Ve[Ac]&_n&&(We=Buffer.from(We),Of(()=>_e.primaryStore.decoder.decode(Pe),Dn=>ic(Dn,ue),_e.primaryStore.rootStore)),V=(0,et.encode)([yg,Y,{value:We,expiresAt:Ve.expiresAt,version:Ve.version,residencyId:Ve.residencyId,nodeId:Ve.nodeId,user:Ve.user}])}else V=(0,et.encode)([yg,Y])}catch(ue){V=(0,et.encode)([yg,Y,{error:ue.message}])}e.send(V);break}case yg:{let{resolve:Y,reject:V,tableId:ue,key:_e}=g.get(N[1]),me=N[2];if(me?.error)V(new Error(me.error));else if(me){let Te;lm(()=>{let Pe=nc[ue].decoder.decode(me.value);me.value=Pe,me.key=_e,Y(me)||Te&&setTimeout(()=>Te.forEach(om),6e4).unref()},Pe=>{let Ve=Vd(Pe,_e);return Te||(Te=[]),Te.push(Ve),Ve})}else Y();g.delete(N[1]);break}case AF:{Pn=U;let Y,V,ue=!1;if(p){if(u!==p.databaseName&&!p.then){ae.error?.("Subscription request for wrong database",u,p.databaseName);return}}else p=f.get(u);if(ae.debug?.(s,"received subscription request for",u,"at",Pn),!p){let we;p=new Promise(kt=>{ae.debug?.("Waiting for subscription to database "+u),we=kt}),p.ready=we,Ia.set(u,p)}if(r.name)V=sr().subscribe(r.name),V.then(async we=>{Y=we;for await(let kt of Y){let Ot=kt.value;if(!(Ot?.replicates===!0||Ot?.replicates?.receives||Ot?.subscriptions?.some(Rr=>(Rr.database||Rr.schema)===u&&Rr.publish!==!1))){ue=!0,e.send((0,et.encode)([$u])),sn(1008,`Unauthorized database subscription to ${u}`);return}}},we=>{ae.error?.(s,"Error subscribing to HDB nodes",we)});else if(!(r?.role?.permission?.super_user||r.replicates)){e.send((0,et.encode)([$u])),sn(1008,`Unauthorized database subscription to ${u}`);return}if(Ir&&(ae.debug?.(s,"stopping previous subscription",u),Ir.emit("close")),Pn.length===0)return;let _e=Pn[0],me=a(we=>{if(we&&(_e.replicateByDefault?!_e.tables.includes(we.tableName):_e.tables.includes(we.tableName)))return{table:we}},"tableToTableEntry"),Te={txnTime:0},Pe,Ve,We=1/0,Dn,os=a((we,kt)=>{if(we.type==="end_txn"){Te.txnTime&&(o[i]!==66&&ae.error?.("Invalid encoding of message"),K(9),K(Im),y(Dn=kt),Ap()),i=c,Te.txnTime=0;return}let Ot=we.nodeId,Rr=we.tableId,At=Ve[Rr];if(!At&&(At=Ve[Rr]=me(p.tableById[Rr]),!At))return ae.debug?.("Not subscribed to table",Rr);let as=At.table,Nt=as.primaryStore,vs=Nt.encoder;(we.extendedType&pm||!vs.typedStructs)&&(vs._mergeStructures(vs.getStructures()),vs.typedStructs&&(vs.lastTypedStructuresLength=vs.typedStructs.length));let Fl=Pe[Ot];if(!(Fl&&Fl.startTime<kt&&(!Fl.endTime||Fl.endTime>kt)))return wg&&ae.trace?.(s,"skipping replication update",we.recordId,"to:",E,"from:",Ot,"subscribed:",Pe),iP();wg&&ae.trace?.(s,"sending replication update",we.recordId,"to:",E,"from:",Ot,"subscribed:",Pe);let XT=we.version;Te.txnTime!==XT&&(Te.txnTime&&(wg&&ae.trace?.(s,"new txn time, sending queued txn",Te.txnTime),o[i]!==66&&ae.error?.("Invalid encoding of message"),Ap()),Te.txnTime=XT,i=c,y(XT));let cc=we.residencyId,ZT=Kd(cc,as),Rp;if(ZT&&!ZT.includes(E)){let Us=Kd(we.previousResidencyId,as);if(Us&&!Us.includes(E)&&(we.type==="put"||we.type==="patch")||as.getResidencyById)return iP();let Wd=we.recordId;ae.trace?.(s,"sending invalidation",Wd,E,"from",Ot);let zd=0;cc&&(zd|=bc),we.previousResidencyId&&(zd|=Oc);let rA,yp=null;for(let oP in as.indices){if(!yp){if(rA=we.getValue(Nt,!0),!rA)break;yp={}}yp[oP]=rA[oP]}Rp=Rc(we.version,Rr,Wd,null,Ot,we.user,we.type==="put"||we.type==="patch"?"invalidate":we.type,vs.encode(yp),zd,cc,we.previousResidencyId,we.expiresAt)}function iP(){return ae.trace?.(s,"skipping audit record",we.recordId),j||(j=setTimeout(()=>{j=null,(Dn||0)+CF/2<We&&(wg&&ae.trace?.(s,"sending skipped sequence update",We),e.send((0,et.encode)([NF,We])))},CF).unref()),new Promise(setImmediate)}a(iP,"skipAuditRecord");let eA=vs.typedStructs,tA=vs.structures;if((eA?.length!=At.typed_length||tA?.length!=At.structure_length)&&(At.typed_length=eA?.length,At.structure_length=tA.length,ae.debug?.(s,"send table struct",At.typed_length,At.structure_length),At.sentName||(At.sentName=!0),e.send((0,et.encode)([jO,{typedStructs:eA,structures:tA,attributes:as.attributes,schemaDefined:as.schemaDefined},Rr,At.table.tableName]))),cc&&!Fd[cc]&&(e.send((0,et.encode)([bF,ZT,cc])),Fd[cc]=!0),Rp)K(Rp.length),m(Rp);else{let Us=we.encoded;we.extendedType&_n&&Of(()=>we.getValue(Nt),zd=>ic(zd,we.recordId),Nt.rootStore);let Wd=Us[0]===66?8:0;K(Us.length-Wd),m(Us,Wd),ae.trace?.("wrote record",we.recordId,"length:",Us.length)}return e._socket.writableNeedDrain?new Promise(Us=>{ae.debug?.(`Waiting for remote node ${E} to allow more commits ${e._socket.writableNeedDrain?"due to network backlog":"due to requested flow directive"}`),e._socket.once("drain",Us)}):Bt>Sp?new Promise(Us=>{dt=Us}):new Promise(setImmediate)},"sendAuditRecord"),Ap=a(()=>{c-i>8?(e.send(o.subarray(i,c)),ae.debug?.(s,"Sent message, size:",c-i),Lt(c-i,"bytes-sent",`${E}.${u}`,"replication","egress")):ae.debug?.(s,"skipping empty transaction")},"sendQueuedData");Ir=new rN.EventEmitter,Ir.once("close",()=>{ue=!0,Y?.end()});for(let{startTime:we}of Pn)we<We&&(We=we);(V||Promise.resolve()).then(async()=>{p=await p,d=p.auditStore,Ve=p.tableById.map(me),Pe=[];for(let{name:kt,startTime:Ot,endTime:Rr}of Pn){let At=pg(kt,d);ae.debug?.("subscription to",kt,"using local id",At,"starting",Ot),Pe[At]={startTime:Ot,endTime:Rr}}Yd(u),wr||(wr=Zc(kt=>{kt.databaseName===u&&Yd(u)}),kd=L_(kt=>{kt===u&&(e.send((0,et.encode)([$u])),sn())}),e.on("close",()=>{wr?.remove(),kd?.remove()})),e.send((0,et.encode)([yF,j_(p.auditStore),Pn.map(({name:kt})=>kt)]));let we=!0;do{isFinite(We)||(ae.warn?.("Invalid sequence id "+We),sn(1008,"Invalid sequence id"+We));let kt;if(we&&!ue&&(we=!1,We===0)){let Ot=We,Rr=Pg(d);for(let At in S){if(!me(At))continue;let as=S[At];ae.warn?.(`Fully copying ${At} table to ${E}`);for(let Nt of as.primaryStore.getRange({snapshot:!1,versions:!0})){if(ue)return;if(Nt.localTime>=We){ae.trace?.(s,"Copying record from",u,At,Nt.key,Nt.localTime),Ot=Math.max(Nt.localTime,Ot),kt=!0,nn()[nh]=1;let vs=Rc(Nt.version,as.tableId,Nt.key,null,Rr,null,"put",Of(()=>as.primaryStore.encoder.encode(Nt.value),Fl=>ic(Fl,Nt.key)),Nt.metadataFlags&-256,Nt.residencyId,null,Nt.expiresAt);await os({recordId:Nt.key,tableId:as.tableId,type:"put",getValue(){return Nt.value},encoded:vs,version:Nt.version,residencyId:Nt.residencyId,nodeId:Rr,extendedType:Nt.metadataFlags},Nt.localTime)}}}kt&&os({type:"end_txn"},We),nn()[nh]=0,We=Ot}for(let{key:Ot,value:Rr}of d.getRange({start:We||1,exclusiveStart:!0,snapshot:!1})){if(ue)return;let At=It(Rr);ae.debug?.("sending audit record",new Date(Ot)),nn()[nh]=Ot,We=Ot,await os(At,Ot),Ir.startTime=Ot,kt=!0}kt&&os({type:"end_txn"},We),nn()[nh]=0,await xL(d)}while(!ue)}).catch(we=>{ae.error?.(s,"Error handling subscription to node",we),sn(1008,"Error handling subscription to node")});break}}return}w.position=8;let b=!0,I,x;do{nn();let N=w.readInt();if(N===9&&w.getUint8(w.position)==Im){w.position++,T=x=w.readFloat64(),h[ZO]=T,h[eN]=Date.now(),h[tN]=FF,ae.trace?.("received remote sequence update",T,u);break}let H=w.position,U=It(A,H,H+N),Q=nc[U.tableId];Q||ae.error?.(`No table found with an id of ${U.tableId}`);let J;U.residencyId&&(J=Gd[U.residencyId],ae.trace?.(s,"received residency list",J,U.type,U.recordId));try{let k=U.recordId;lm(()=>{I={table:Q.name,id:k,type:U.type,nodeId:sc.get(U.nodeId),residencyList:J,timestamp:U.version,value:U.getValue(Q),user:U.user,beginTxn:b,expiresAt:U.expiresAt}},Ce=>Vd(Ce,k))}catch(k){throw k.message+="typed structures for current decoder"+JSON.stringify(Q.decoder.typedStructs),k}b=!1,ae.trace?.(s,"received replication message",U.type,"id",I.id,"version",new Date(U.version),"nodeId",I.nodeId),h[ZO]=U.version,h[eN]=Date.now(),h[tN]=GF,p.send(I),w.position=H+N}while(w.position<A.byteLength);qd++,Lt(A.byteLength,"bytes-received",`${E}.${u}.${I?.table||"unknown_table"}`,"replication","ingest"),qd>JT&&!$d&&($d=!0,e.pause(),ae.debug?.(`Commit backlog causing replication back-pressure, requesting that ${E} pause replication`)),p.send({type:"end_txn",localTime:T,remoteNodeIds:R,async onCommit(){if(I){let N=Date.now()-I.timestamp;Lt(N,"replication-latency",E+"."+u+"."+I.table,I.type,"ingest")}qd--,$d&&($d=!1,e.resume(),ae.debug?.(`Replication resuming ${E}`)),Ae.length>0&&await Promise.all(Ae),ae.trace?.("All blobs finished"),!O&&x&&(ae.trace?.(s,"queuing confirmation of a commit at",x),setTimeout(()=>{e.send((0,et.encode)([wF,O])),ae.trace?.(s,"sent confirmation of a commit at",O),O=null},Cie)),O=x,ae.debug?.("last sequence committed",new Date(x),u)}})}catch(w){ae.error?.(s,"Error handling incoming replication message",w)}}),e.on("ping",Cn),e.on("pong",()=>{t.connection&&(t.connection.latency=performance.now()-q,t.isSubscriptionConnection&&al({name:E,database:u,url:t.url,latency:t.connection.latency})),q=null}),e.on("close",(A,w)=>{clearInterval(v),clearTimeout(F),clearInterval(te),Ir&&Ir.emit("close"),Wi&&Wi.end();for(let[b,{reject:I}]of g)I(new Error(`Connection closed ${w?.toString()} ${A}`));ae.debug?.(s,"closed",A,w?.toString())});function sn(A,w){e.isFinished=!0,e.close(A,w),t.connection?.emit("finished")}a(sn,"close");let Cr=new Set;async function ic(A,w){let b=am(A);if(Cr.has(b)){ae.debug?.("Blob already being sent",b);return}Cr.add(b);try{let I;Bt++;for await(let x of A.stream())I&&(ae.debug?.("Sending blob chunk",b,"length",I.length),e.send((0,et.encode)([Og,{fileId:b,size:A.size},I]))),I=x,e._socket.writableNeedDrain&&(ae.debug?.("draining",b),await new Promise(N=>e._socket.once("drain",N)),ae.debug?.("drained",b)),Lt(x.length,"bytes-sent",`${E}.${u}`,"replication","blob");ae.debug?.("Sending final blob chunk",b,"length",I.length),e.send((0,et.encode)([Og,{fileId:b,size:A.size,finished:!0},I]))}catch(I){ae.warn?.("Error sending blob",I,"blob id",b,"for record",w),e.send((0,et.encode)([Og,{fileId:b,finished:!0,error:I.toString()},Buffer.alloc(0)]))}finally{Cr.delete(b),Bt--,Bt<Sp&&dt?.()}}a(ic,"sendBlobs");function Vd(A,w){let b=am(A),I=pe.get(b);ae.debug?.("Received transaction for record",w,"with blob",b,"has stream",!!I,"ended",!!I?.writableEnded),I?I.writableEnded&&pe.delete(b):(I=new JO.PassThrough,pe.set(b,I)),I.connectedToBlob=!0,I.lastChunk=Date.now(),I.recordId=w,A.size===void 0&&I.expectedSize&&(A.size=I.expectedSize);let x=I.blob??createBlob(I,A);I.blob=x;let N=x.save({primaryStore:p.auditStore});return N&&(N.blobId=b,Ae.push(N),N.finally(()=>{ae.debug?.(`Finished receiving blob stream ${b}`),Ae.splice(Ae.indexOf(N),1)})),x}a(Vd,"receiveBlobs");function Yo(){if(_||(_=!0,t.connection?.on("subscriptions-updated",Yo)),t.connection?.isFinished)throw new Error("Can not make a subscription request on a connection that is already closed");let A=new Map;d||(d=p?.auditStore);try{for(let I of p?.dbisDB?.getRange({start:Symbol.for("seq"),end:[Symbol.for("seq"),Buffer.from([255])]})||[])for(let x of I.value.nodes||[])x.lastTxnTime>(A.get(x.id)??0)&&A.set(x.id,x.lastTxnTime)}catch(I){if(!I.message.includes("Can not re"))throw I}let w=t.connection?.nodeSubscriptions?.[0];R=[];let b=t.connection?.nodeSubscriptions?.map((I,x)=>{let N=[],{replicateByDefault:H}=I;if(I.subscriptions){for(let k of I.subscriptions)if(k.subscribe&&(k.schema||k.database)===u){let Ce=k.table;S?.[Ce]?.replicate!==!1&&N.push(Ce)}H=!1}else for(let k in S)(H?S[k].replicate===!1:S[k].replicate)&&N.push(k);let U=d&&pg(I.name,d),Q=p?.dbisDB?.get([Symbol.for("seq"),U])??1,J=Math.max(Q?.seqId??1,(typeof I.start_time=="string"?new Date(I.start_time).getTime():I.start_time)??1);if(ae.debug?.("Starting time recorded in db",I.name,U,u,Q?.seqId,"start time:",J,new Date(J)),w!==I){let k=d&&pg(w.name,d),Ce=p?.dbisDB?.get([Symbol.for("seq"),k])??1;for(let de of Ce?.nodes||[])de.name===I.name&&(J=de.seqId,ae.debug?.("Using sequence id from proxy node",w.name,J))}if(U===void 0?ae.warn("Starting subscription request from node",I,"but no node id found"):R.push(U),A.get(U)>J&&(J=A.get(U),ae.debug?.("Updating start time from more recent txn recorded",w.name,J)),J===1&&Ng)try{new URL(Ng).hostname===I.name&&E===I.name?(ae.warn?.(`Requesting full copy of database ${u} from ${Ng}`),J=0):J=Date.now()-6e4}catch(k){ae.error?.("Error parsing leader URL",Ng,k)}return ae.trace?.(s,"defining subscription request",I.name,u,new Date(J)),{name:I.name,replicateByDefault:H,tables:N,startTime:J,endTime:I.end_time}});if(b)if(ae.debug?.(s,"sending subscription request",b,p?.dbisDB?.path),clearTimeout(z),b.length>0)e.send((0,et.encode)([AF,b]));else{let I=a(()=>{let x=performance.now();z=setTimeout(()=>{ne<=x?sn(1008,"Connection has no subscriptions and is no longer used"):I()},se).unref()},"schedule_close");I()}}a(Yo,"sendSubscriptionRequestUpdate");function Kd(A,w){if(!A)return;let b=Ht[A];return b||(b=w.getResidencyRecord(A),Ht[A]=b),b}a(Kd,"getResidence");function Wo(A){return!(wa&&wa!="*"&&!wa[A]&&!wa.includes?.(A)&&!wa.some?.(w=>w.name===A))}a(Wo,"checkDatabaseAccess");function zo(A){if(p=p||f.get(A),!Wo(A))throw new Error(`Access to database "${A}" is not permitted`);p||ae.warn?.(`No database named "${A}" was declared and registered`),d=p?.auditStore,S||(S=Xe()?.[A]);let w=tt();if(w===E)throw w?new Error("Should not connect to self",w):new Error("Node name not defined");return Tp(w,A),!0}a(zo,"setDatabase");function Tp(A,w){let b=Xe()?.[w],I=[];for(let x in b){let N=b[x];I.push({table:x,schemaDefined:N.schemaDefined,attributes:N.attributes.map(H=>({name:H.name,type:H.type,isPrimaryKey:H.isPrimaryKey}))})}ae.trace?.("Sending database info for node",A,"database name",w),e.send((0,et.encode)([RF,A,w,I]))}a(Tp,"sendNodeDBName");function Yd(A){let w=Xe()?.[A],b=[];for(let I in w){if(Pn&&!Pn.some(N=>N.replicateByDefault?!N.tables.includes(I):N.tables.includes(I)))continue;let x=w[I];b.push({table:I,schemaDefined:x.schemaDefined,attributes:x.attributes.map(N=>({name:N.name,type:N.type,isPrimaryKey:N.isPrimaryKey}))})}e.send((0,et.encode)([IF,b,A]))}a(Yd,"sendDBSchema"),te=setInterval(()=>{for(let[A,w]of pe)w.lastChunk+Re<Date.now()&&(ae.warn?.(`Timeout waiting for blob stream to finish ${A} for record ${w.recordId??"unknown"} from ${E}`),pe.delete(A),w.end())},Re).unref();let oc=1,ac=[];return{end(){Wi&&Wi.end(),Ir&&Ir.emit("close")},getRecord(A){let w=oc++;return new Promise((b,I)=>{let x=[OF,w,A.table.tableId,A.id];ac[A.table.tableId]||(x.push(A.table.tableName),ac[A.table.tableId]=!0),e.send((0,et.encode)(x)),ne=performance.now(),g.set(w,{tableId:A.table.tableId,key:A.id,resolve(N){let{table:H,entry:U}=A;if(b(N),N)return H._recordRelocate(U,N)},reject:I})})},sendOperation(A){let w=oc++;return A.requestId=w,e.send((0,et.encode)([XO,A])),new Promise((b,I)=>{g.set(w,{resolve:b,reject:I})})}};function K(A){L(5),A<128?o[c++]=A:A<16384?(l.setUint16(c,A|32768),c+=2):A<1056964608?(l.setUint32(c,A|3221225472),c+=4):(o[c]=255,l.setUint32(c+1,A),c+=5)}function m(A,w=0,b=A.length){let I=b-w;L(I),A.copy(o,c,w,b),c+=I}function y(A){L(8),l.setFloat64(c,A),c+=8}function L(A){if(A+16>o.length-c){let w=Buffer.allocUnsafeSlow(c+A-i+65536>>10<<11);o.copy(w,0,i,c),c=c-i,i=0,o=w,l=new DataView(o.buffer,0,o.length)}}function C(A,w){let b=A.database??"data";if(b!=="data"&&!Ye[b]){ae.warn?.("Database not found",A.database);return}w||(w={});let I=w.schemaDefined,x=!1,N=A.schemaDefined,H=w.attributes||[];for(let U=0;U<A.attributes?.length;U++){let Q=A.attributes[U],J=H.find(k=>k.name===Q.name);(!J||J.type!==Q.type)&&(I?ae.error?.(`Schema for '${u}.${A.table}' is defined locally, but attribute '${Q.name}: ${Q.type}' from '${E}' does not match local attribute ${J?"'"+J.name+": "+J.type+"'":"which does not exist"}`):(x=!0,N||(Q.indexed=!0),J?H[H.indexOf(J)]=Q:H.push(Q)))}return x?(ae.debug?.("(Re)creating",A),_t({table:A.table,database:A.database,schemaDefined:A.schemaDefined,attributes:H,...w})):w}}var LF,et,MF,vF,ae,rN,UF,xF,ul,BF,JO,HF,AF,RF,yF,$u,bF,jO,OF,yg,XO,bg,NF,wF,IF,Og,kF,ZO,eN,nh,tN,FF,GF,Iie,Ng,nN,Ia,wg,CF,Cie,PF,QO,Ig,DF,Vu,sN=be(()=>{Ue();no();LO();mR();gs();LF=M(ce());G();eu();et=require("msgpackr"),MF=require("ws"),vF=require("worker_threads"),ae=M(pi());eh();rN=require("events"),UF=M(Zs()),xF=M(require("node:tls"));ol();ul=M(require("node:process")),BF=require("node:net");Ii();ds();JO=require("node:stream"),HF=M(require("minimist")),AF=129,RF=140,yF=141,$u=142,bF=130,jO=132,OF=133,yg=134,XO=136,bg=137,NF=143,wF=144,IF=145,Og=146,kF=0,ZO=1,eN=2,nh=3,tN=4,FF=0,GF=1,Iie=(0,HF.default)(ul.argv),Ng=Iie.HDB_LEADER_URL??ul.env.HDB_LEADER_URL,nN=new Map,Ia=new Map,wg=!0,CF=300,Cie=2,PF=3e4;a(Cg,"createWebSocket");DF=500,Vu=class extends rN.EventEmitter{constructor(r,n,s,i,o){super();this.url=r;this.subscription=n;this.databaseName=s;this.nodeName=i;this.authorization=o;this.nodeName=this.nodeName??Qs(r)}static{a(this,"NodeReplicationConnection")}socket;startTime;retryTime=DF;retries=0;isConnected=!0;isFinished=!1;nodeSubscriptions;latency=0;replicateTablesByDefault;session;sessionResolve;sessionReject;async connect(){this.session||this.resetSession();let r=[];this.socket=await Cg(this.url,{serverName:this.nodeName,authorization:this.authorization});let n;ae.debug?.(`Connecting to ${this.url}, db: ${this.databaseName}, process ${ul.pid}`),this.socket.on("open",()=>{this.socket._socket.unref(),ae[this.isConnected?"info":"warn"]?.(`Connected to ${this.url}, db: ${this.databaseName}`),this.retries=0,this.retryTime=DF,this.nodeSubscriptions&&al({name:this.nodeName,database:this.databaseName,url:this.url}),this.isConnected=!0,n=sh(this.socket,{database:this.databaseName,subscription:this.subscription,url:this.url,connection:this,isSubscriptionConnection:this.nodeSubscriptions!==void 0},{replicates:!0}),this.sessionResolve(n)}),this.socket.on("error",s=>{s.code==="SELF_SIGNED_CERT_IN_CHAIN"?(ae.warn?.(`Can not connect to ${this.url}, this server does not have a certificate authority for the certificate provided by ${this.url}`),s.isHandled=!0):s.code!=="ECONNREFUSED"&&(s.code==="UNABLE_TO_VERIFY_LEAF_SIGNATURE"?ae.error?.(`Can not connect to ${this.url}, the certificate provided by ${this.url} is not trusted, this node needs to be added to the cluster, or a certificate authority needs to be added`):ae.error?.(`Error in connection to ${this.url} due to ${s.message}`)),this.sessionReject(s)}),this.socket.on("close",(s,i)=>{if(this.isConnected&&(this.nodeSubscriptions&&Fu({name:this.nodeName,database:this.databaseName,url:this.url,finished:this.socket.isFinished}),this.isConnected=!1),this.removeAllListeners("subscriptions-updated"),this.socket.isFinished){this.isFinished=!0,n?.end(),this.emit("finished");return}if(++this.retries%20===1){let o=i?.toString();ae.warn?.(`${n?"Disconnected from":"Failed to connect to"} ${this.url} (db: "${this.databaseName}"), due to ${o?'"'+o+'" ':""}(code: ${s})`)}n=null,this.resetSession(),setTimeout(()=>{this.connect()},this.retryTime).unref(),this.retryTime+=this.retryTime>>8})}resetSession(){this.session=new Promise((r,n)=>{this.sessionResolve=r,this.sessionReject=n})}subscribe(r,n){this.nodeSubscriptions=r,this.replicateTablesByDefault=n,this.emit("subscriptions-updated",r)}unsubscribe(){this.socket.isFinished=!0,this.socket.close(1008,"No longer subscribed")}getRecord(r){return this.session.then(n=>n.getRecord(r))}};a(sh,"replicateOverWS")});var Na={};Be(Na,{clearThisNodeName:()=>Hie,disableReplication:()=>Mie,enabled_databases:()=>wa,forEachReplicatedDatabase:()=>Ta,getThisNodeId:()=>Pg,getThisNodeName:()=>tt,getThisNodeUrl:()=>Aa,hostnameToUrl:()=>Ug,lastTimeInAuditStore:()=>Q_,monitorNodeCAs:()=>QF,replicateOperation:()=>Fie,replication_certificate_authorities:()=>To,sendOperationToNode:()=>ih,servers:()=>Die,setReplicator:()=>XF,start:()=>Lie,startOnMainThread:()=>xO,subscribeToNode:()=>Z_,unsubscribeFromNode:()=>Sg,urlToNodeName:()=>Qs});function Lie(e){if(e.port||(e.port=Ts.default.get(B.OPERATIONSAPI_NETWORK_PORT)),e.securePort||(e.securePort=Ts.default.get(B.OPERATIONSAPI_NETWORK_SECUREPORT)),!tt())throw new Error("Can not load replication without a url (see replication.url in the config)");let t=new Map;for(let s of X_(e))t.set(Qs(s.url),s);vie(e),e={mtls:!0,isOperationsServer:!0,maxPayload:10*1024*1024*1024,...e};let r=Ke.ws(async(s,i,o,c)=>{if(i.headers.get("sec-websocket-protocol")!=="harperdb-replication-v1")return c(s,i,o);await o,s._socket.unref(),sh(s,e,i?.user),s.on("error",l=>{l.code!=="ECONNREFUSED"&&or.error("Error in connection to "+this.url,l.message)})},e);e.runFirst=!0,Ke.http((s,i)=>{if(s.isWebSocket&&s.headers.get("Sec-WebSocket-Protocol")==="harperdb-replication-v1"){!s.authorized&&s._nodeRequest.socket.authorizationError&&or.error(`Incoming client connection from ${s.ip} did not have valid certificate, you may need turn on enableRootCAs in the config if you are using a publicly signed certificate, or add the CA to the server's trusted CAs`,s._nodeRequest.socket.authorizationError);let o=sr().primaryStore;if(s.authorized&&s.peerCertificate.subject){let c=s.peerCertificate.subject,l=c&&(o.get(c.CN)||t.get(c.CN));if(l)if(l?.revoked_certificates?.includes(s.peerCertificate.serialNumber)){or.warn("Revoked certificate used in attempt to connect to node",l.name,"certificate serial number",s.peerCertificate.serialNumber);return}else s.user=l;else or.warn(`No node found for certificate common name ${c.CN}, available nodes are ${Array.from(o.getRange({}).filter(({value:u})=>u).map(({key:u})=>u)).join(", ")} and routes ${Array.from(t.keys()).join(", ")}, connection will require credentials.`)}else{let c=o.get(s.ip)||t.get(s.ip);c?s.user=c:or.warn(`No node found for IP address ${s.ip}, available nodes are ${Array.from(new Set([...o.getKeys(),...t.keys()])).join(", ")}, connection will require credentials.`)}}return i(s)},e);let n=[];for(let s of r)if(s.secureContexts){let i=a(()=>{let o=new Set(s.secureContexts.values());s.defaultContext&&o.add(s.defaultContext);for(let c of o)try{let l=Array.from(To);c.options.availableCAs&&l.push(...c.options.availableCAs.values());let u={...c.options,ca:l};c.updatedContext=vg.createSecureContext(u)}catch(l){or.error("Error creating replication TLS config",l)}},"updateContexts");s.secureContextsListeners.push(i),n.push(i),Ts.default.get(B.REPLICATION_ENABLEROOTCAS)!==!1&&i()}QF(()=>{for(let s of n)s()})}function QF(e){let t=0;Hu(r=>{r?.ca&&(To.add(r.ca),To.size!==t&&(t=To.size,e?.()))})}function Mie(e=!0){jF=e}function vie(e){jF||(Xe(),wa=e.databases,Ta(e,(t,r)=>{if(!t){let n=e.databaseSubscriptions||Ia;for(let[s,i]of Lg){let o=i.get(r);o&&(o.subscribe([],!1),i.delete(r))}n.delete(r);return}for(let n in t){let s=t[n];XF(r,s,e),nN.get(s)?.forEach(i=>i(s))}}))}function XF(e,t,r){if(!t)return console.error(`Attempt to replicate non-existent table ${t.name} from database ${e}`);if(t.replicate===!1||t.sources?.some(s=>s.isReplicator))return;let n;t.sourcedFrom(class JF extends Gr{static{a(this,"Replicator")}static connection;static subscription;static async subscribe(){let i=r.databaseSubscriptions||Ia,o=i.get(e),c=o?.tableById||[];c[t.tableId]=t;let l=o?.ready;if(or.trace("Setting up replicator subscription to database",e),!o?.auditStore)return this.subscription=o=new Mn,i.set(e,o),o.tableById=c,o.auditStore=t.auditStore,o.dbisDB=t.dbisDB,o.databaseName=e,l&&l(o),o;this.subscription=o}static subscribeOnThisThread(i,o){return!0}static async load(i){if(i){let o=i.residencyId,c=i.residency||t.dbisDB.get([Symbol.for("residency_by_id"),o]);if(c){let l,u=new Set;do{let f;for(let h of c){if(h===Ke.hostname)continue;let _=xie(h,JF.subscription,e);_?.isConnected&&!u.has(_)&&(!f||_.latency<f.latency)&&(f=_)}if(!f)throw l||new WF.ServerError("No connection to any other nodes are available",502);let d={requestId:Pie++,table:t,entry:i,id:i.key};u.add(f);try{return await f.getRecord(d)}catch(h){if(f.isConnected)throw h;or.warn("Error in load from node",Mg,h),l||(l=h)}}while(!0)}}}static isReplicator=!0},{intermediateSource:!0})}function Uie(e,t,r,n,s){let i=Lg.get(e);i||(i=new Map,Lg.set(e,i));let o=i.get(r);if(o)return o;if(t)return i.set(r,o=new Vu(e,t,r,n,s)),o.connect(),o.once("finished",()=>i.delete(r)),o}function xie(e,t,r){let n=$F.get(e);n||(n=new Map,$F.set(e,n));let s=n.get(r);if(s)return s;let i=sr().primaryStore.get(e);return i?.url&&(s=new Vu(i.url,t,r,e,i.authorization),n.set(r,s),s.connect(),s.once("finished",()=>n.delete(r))),s}async function ih(e,t,r){r||(r={}),r.serverName=e.name;let n=await Cg(e.url,r),s=sh(n,{},{});return new Promise((i,o)=>{n.on("open",()=>{i(s.sendOperation(t))}),n.on("error",c=>{o(c)}),n.on("close",c=>{or.info("Sending operation connection to "+e.url+" closed",c)})}).finally(()=>{n.close()})}function Z_(e){try{zF.isMainThread&&or.trace("Subscribing on main thread (should not happen in multi-threaded instance)",e.nodes[0].url,e.database);let t=Ia.get(e.database);if(!t){let n;t=new Promise(s=>{or.info("Waiting for subscription to database "+e.database),n=s}),t.ready=n,Ia.set(e.database,t)}let r=Uie(e.nodes[0].url,t,e.database,e.nodes[0].name,e.nodes[0].authorization);e.nodes[0].name===void 0?r.tentativeNode=e.nodes[0]:r.nodeName=e.nodes[0].name,r.subscribe(e.nodes.filter(n=>J_(n,e.database)),e.replicateByDefault)}catch(t){or.error("Error in subscription to node",e.nodes[0]?.url,t)}}async function Sg({name:e,url:t,database:r}){or.trace("Unsubscribing from node",e,t,r,"nodes",Array.from(sr().primaryStore.getRange({})));let n=Lg.get(t);if(n){let s=n.get(r);s&&(s.unsubscribe(),n.delete(r))}}function Bie(){if(iN!==void 0)return iN;let e=Ts.default.get(B.OPERATIONSAPI_TLS_CERTIFICATE)||Ts.default.get(B.TLS_CERTIFICATE);if(e)return iN=new KF.X509Certificate((0,YF.readFileSync)(e)).subject.match(/CN=(.*)/)?.[1]??null}function tt(){return Mg||(Mg=Ts.default.get("replication_hostname")??Qs(Ts.default.get("replication_url"))??Bie()??VF("operationsapi_network_secureport")??VF("operationsapi_network_port")??"127.0.0.1")}function Hie(){Mg=void 0}function VF(e){let t=Ts.default.get(e),r=t?.lastIndexOf?.(":");if(r>0)return t.slice(0,r)}function Dg(e){let t=Ts.default.get(e),r=t?.lastIndexOf?.(":");return r>0?+t.slice(r+1).replace(/[\[\]]/g,""):+t}function Pg(e){return j_(e)?.[tt()]}function Aa(){let e=Ts.default.get("replication_url");return e||Ug(tt())}function Ug(e){let t=Dg("replication_port");if(t)return`ws://${e}:${t}`;if(t=Dg("replication_secureport"),t)return`wss://${e}:${t}`;if(t=Dg("operationsapi_network_port"),t)return`ws://${e}:${t}`;if(t=Dg("operationsapi_network_secureport"),t)return`wss://${e}:${t}`}function Qs(e){if(e)return new URL(e).hostname}function Ta(e,t){for(let n of Object.getOwnPropertyNames(Ye))r(n);return L_(n=>{r(n)}),Zc((n,s)=>{r(n.databaseName)});function r(n){let s=Ye[n];or.trace("Checking replication status of ",n,e?.databases),e?.databases===void 0||e.databases==="*"||e.databases.includes(n)||e.databases.some?.(i=>i.name===n)||!s?t(s,n,!0):kie(n)&&t(s,n,!1)}a(r,"forDatabase")}function kie(e){let t=Ye[e];for(let r in t)if(t[r].replicate)return!0}function Q_(e){for(let t of e.getKeys({limit:1,reverse:!0}))return t}async function Fie(e){let t={message:""};if(e.replicated){e.replicated=!1,or.trace?.("Replicating operation",e.operation,"to nodes",Ke.nodes.map(n=>n.name));let r=await Promise.allSettled(Ke.nodes.map(n=>ih(n,e)));t.replicated=r.map((n,s)=>{let i=n.status==="rejected"?{status:"failed",reason:n.reason.toString()}:n.value;return i.node=Ke.nodes[s]?.name,i})}return t}var Ts,or,KF,YF,vg,WF,zF,jF,Pie,Die,To,wa,Lg,$F,iN,Mg,gs=be(()=>{Ue();ra();Vl();sN();Pr();Ts=M(ce()),or=M(X()),KF=require("crypto"),YF=require("fs");eh();ol();G();LO();vg=M(require("node:tls")),WF=M(he()),zF=require("worker_threads"),Pie=1,Die=[],To=Ts.default.get(B.REPLICATION_ENABLEROOTCAS)!==!1?new Set(vg.rootCertificates):new Set;a(Lie,"start");a(QF,"monitorNodeCAs");a(Mie,"disableReplication");a(vie,"assignReplicationSource");a(XF,"setReplicator");Lg=new Map;a(Uie,"getSubscriptionConnection");$F=new Map;a(xie,"getRetrievalConnectionByName");a(ih,"sendOperationToNode");a(Z_,"subscribeToNode");a(Sg,"unsubscribeFromNode");a(Bie,"getCommonNameFromCert");a(tt,"getThisNodeName");a(Hie,"clearThisNodeName");Object.defineProperty(Ke,"hostname",{get(){return tt()}});a(VF,"getHostFromListeningPort");a(Dg,"getPortFromListeningPort");a(Pg,"getThisNodeId");Ke.replication={getThisNodeId:Pg,exportIdMapping:j_};a(Aa,"getThisNodeUrl");a(Ug,"hostnameToUrl");a(Qs,"urlToNodeName");a(Ta,"forEachReplicatedDatabase");a(kie,"hasExplicitlyReplicatedTable");a(Q_,"lastTimeInAuditStore");a(Fie,"replicateOperation")});var Fg=P((hCe,nG)=>{"use strict";var Ku=fk(),{validateBySchema:oh}=it(),{common_validators:Yu,schema_regex:oN}=Ai(),ar=require("joi"),Gie=X(),qie=require("uuid").v4,Hg=ao(),Wu=(G(),D($)),$ie=require("util"),Ca=Fn(),{handleHDBError:Ao,hdb_errors:Vie,ClientError:ah}=he(),{HDB_ERROR_MSGS:xg,HTTP_STATUS_CODES:Ro}=Vie,{SchemaEventMsg:kg}=Gs(),ZF=gr(),{getDatabases:Kie}=(Ue(),D(ct)),{transformReq:zu}=oe(),{replicateOperation:eG}=(gs(),D(Na)),Bg=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message}),Yie=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message}).required(),Wie=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message,"any.required":"'primary_key' is required","string.base":"'primary_key' must be a string"}).required();nG.exports={createSchema:zie,createSchemaStructure:tG,createTable:jie,createTableStructure:rG,createAttribute:eoe,dropSchema:Qie,dropTable:Jie,dropAttribute:Xie,getBackup:toe};async function zie(e){let t=await tG(e);return Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema)),t}a(zie,"createSchema");async function tG(e){let t=oh(e,ar.object({database:Bg,schema:Bg}));if(t)throw new ah(t.message);if(zu(e),!await Ku.checkSchemaExists(e.schema))throw Ao(new Error,xg.SCHEMA_EXISTS_ERR(e.schema),Ro.BAD_REQUEST,Wu.LOG_LEVELS.ERROR,xg.SCHEMA_EXISTS_ERR(e.schema),!0);return await Ca.createSchema(e),`database '${e.schema}' successfully created`}a(tG,"createSchemaStructure");async function jie(e){return zu(e),e.hash_attribute=e.primary_key??e.hash_attribute,await rG(e)}a(jie,"createTable");async function rG(e){let t=oh(e,ar.object({database:Bg,schema:Bg,table:Yie,residence:ar.array().items(ar.string().min(1)).optional(),hash_attribute:Wie}));if(t)throw new ah(t.message);if(!await Ku.checkSchemaTableExists(e.schema,e.table))throw Ao(new Error,xg.TABLE_EXISTS_ERR(e.schema,e.table),Ro.BAD_REQUEST,Wu.LOG_LEVELS.ERROR,xg.TABLE_EXISTS_ERR(e.schema,e.table),!0);let n={name:e.table,schema:e.schema,id:qie(),hash_attribute:e.hash_attribute};try{if(e.residence)if(global.clustering_on)n.residence=e.residence,await Ca.createTable(n,e);else throw Ao(new Error,"Clustering does not appear to be enabled. Cannot insert table with property 'residence'.",Ro.BAD_REQUEST);else await Ca.createTable(n,e);return`table '${e.schema}.${e.table}' successfully created.`}catch(s){throw s}}a(rG,"createTableStructure");async function Qie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string()}).or("database","schema").messages({"object.missing":"'database' is required"}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaExists(e.schema);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);let n=await Ku.schema_describe.describeSchema({schema:e.schema}),s=Object.keys(global.hdb_schema[e.schema]);await Ca.dropSchema(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema)),await ZF.purgeSchemaTableStreams(e.schema,s);let i=await eG(e);return i.message=`successfully deleted '${e.schema}'`,i}a(Qie,"dropSchema");async function Jie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required()}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);await Ca.dropTable(e),await ZF.purgeTableStream(e.schema,e.table);let n=await eG(e);return n.message=`successfully deleted table '${e.schema}.${e.table}'`,n}a(Jie,"dropTable");async function Xie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required(),attribute:ar.string().required()}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);if(e.attribute===global.hdb_schema[e.schema][e.table].hash_attribute)throw Ao(new Error,"You cannot drop a hash attribute",Ro.BAD_REQUEST,void 0,void 0,!0);if(Wu.TIME_STAMP_NAMES.indexOf(e.attribute)>=0)throw Ao(new Error,`cannot drop internal timestamp attribute: ${e.attribute}`,Ro.BAD_REQUEST,void 0,void 0,!0);try{return await Ca.dropAttribute(e),Zie(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema,e.table,e.attribute)),`successfully deleted attribute '${e.attribute}'`}catch(n){throw Gie.error(`Got an error deleting attribute ${$ie.inspect(e)}.`),n}}a(Xie,"dropAttribute");function Zie(e){let t=Object.values(global.hdb_schema[e.schema][e.table].attributes);for(let r=0;r<t.length;r++)t[r].attribute===e.attribute&&global.hdb_schema[e.schema][e.table].attributes.splice(r,1)}a(Zie,"dropAttributeFromGlobal");async function eoe(e){zu(e);let t=Kie()[e.schema][e.table].attributes;for(let{name:r}of t)if(r===e.attribute)throw Ao(new Error,`attribute '${e.attribute}' already exists in ${e.schema}.${e.table}`,Ro.BAD_REQUEST,void 0,void 0,!0);return await Ca.createAttribute(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema,e.table,e.attribute)),`attribute '${e.schema}.${e.table}.${e.attribute}' successfully created.`}a(eoe,"createAttribute");function toe(e){return Ca.getBackup(e)}a(toe,"getBackup")});var iG=P((mCe,sG)=>{"use strict";var{OPERATIONS_ENUM:roe}=(G(),D($)),aN=class{static{a(this,"ReadAuditLogObject")}constructor(t,r,n=void 0,s=void 0){this.operation=roe.READ_AUDIT_LOG,this.schema=t,this.table=r,this.search_type=n,this.search_values=s}};sG.exports=aN});var cN=P((SCe,uG)=>{"use strict";var noe=Fn(),gCe=iG(),Gg=oe(),qg=(G(),D($)),soe=ce(),{handleHDBError:oG,hdb_errors:ioe}=he(),{HDB_ERROR_MSGS:aG,HTTP_STATUS_CODES:cG}=ioe,ooe=Object.values(qg.READ_AUDIT_LOG_SEARCH_TYPES_ENUM),lG="To use this operation audit log must be enabled in harperdb-config.yaml";uG.exports=aoe;async function aoe(e){if(Gg.isEmpty(e.schema))throw new Error(aG.SCHEMA_REQUIRED_ERR);if(Gg.isEmpty(e.table))throw new Error(aG.TABLE_REQUIRED_ERR);if(!soe.get(qg.CONFIG_PARAMS.LOGGING_AUDITLOG))throw oG(new Error,lG,cG.BAD_REQUEST,qg.LOG_LEVELS.ERROR,lG,!0);let t=Gg.checkSchemaTableExist(e.schema,e.table);if(t)throw oG(new Error,t,cG.NOT_FOUND,qg.LOG_LEVELS.ERROR,t,!0);if(!Gg.isEmpty(e.search_type)&&ooe.indexOf(e.search_type)<0)throw new Error(`Invalid search_type '${e.search_type}'`);return await noe.readAuditLog(e)}a(aoe,"readAuditLog")});var fG=P((ACe,dG)=>{"use strict";var{OPERATIONS_ENUM:coe}=(G(),D($)),lN=class{static{a(this,"GetBackupObject")}constructor(t,r,n=void 0,s=void 0){this.operation=coe.GET_BACKUP,this.schema=t,this.table=r}};dG.exports=lN});var pG=P((OCe,hG)=>{"use strict";var loe=Fn(),yCe=fG(),uN=oe(),uoe=(G(),D($)),bCe=ce(),{handleHDBError:doe,hdb_errors:foe}=he(),{HDB_ERROR_MSGS:_G,HTTP_STATUS_CODES:_oe}=foe;hG.exports=hoe;async function hoe(e){if(uN.isEmpty(e.schema))throw new Error(_G.SCHEMA_REQUIRED_ERR);if(uN.isEmpty(e.table))throw new Error(_G.TABLE_REQUIRED_ERR);let t=uN.checkSchemaTableExist(e.schema,e.table);if(t)throw doe(new Error,t,_oe.NOT_FOUND,uoe.LOG_LEVELS.ERROR,t,!0);return await loe.getBackup(read_audit_log_object)}a(hoe,"getBackup")});var SG=P((wCe,gG)=>{"use strict";var poe=ce(),Pa=require("joi"),moe=it(),mG=require("moment"),Eoe=require("fs-extra"),dN=require("path"),goe=require("lodash"),ch=(G(),D($)),{LOG_LEVELS:dl}=(G(),D($)),Soe="YYYY-MM-DD hh:mm:ss",Toe=dN.resolve(__dirname,"../logs");gG.exports=function(e){return moe.validateBySchema(e,Aoe)};var Aoe=Pa.object({from:Pa.custom(EG),until:Pa.custom(EG),level:Pa.valid(dl.NOTIFY,dl.FATAL,dl.ERROR,dl.WARN,dl.INFO,dl.DEBUG,dl.TRACE),order:Pa.valid("asc","desc"),limit:Pa.number().min(1),start:Pa.number().min(0),log_name:Pa.custom(Roe)});function EG(e,t){if(mG(e,mG.ISO_8601).format(Soe)==="Invalid date")return t.message(`'${t.state.path[0]}' date '${e}' is invalid.`)}a(EG,"validateDatetime");function Roe(e,t){if(goe.invert(ch.LOG_NAMES)[e]===void 0)return t.message(`'log_name' '${e}' is invalid.`);let n=poe.get(ch.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e===void 0?ch.LOG_NAMES.HDB:e,i=s===ch.LOG_NAMES.INSTALL?dN.join(Toe,ch.LOG_NAMES.INSTALL):dN.join(n,s);return Eoe.existsSync(i)?null:t.message(`'log_name' '${e}' does not exist.`)}a(Roe,"validateReadLogPath")});var _N=P((CCe,AG)=>{"use strict";var $g=(G(),D($)),yoe=X(),boe=ce(),Ooe=SG(),fN=require("path"),TG=require("fs-extra"),{once:Noe}=require("events"),{handleHDBError:woe,hdb_errors:Ioe}=he(),{PACKAGE_ROOT:Coe}=Et(),Poe=fN.join(Coe,"logs"),Doe=1e3,Loe=200;AG.exports=Moe;async function Moe(e){let t=Ooe(e);if(t)throw woe(t,t.message,Ioe.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0);let r=boe.get($g.HDB_SETTINGS_NAMES.LOG_PATH_KEY),n=e.log_name===void 0?$g.LOG_NAMES.HDB:e.log_name,s=n===$g.LOG_NAMES.INSTALL?fN.join(Poe,$g.LOG_NAMES.INSTALL):fN.join(r,n),i=e.level!==void 0,o=i?e.level:void 0,c=e.from!==void 0,l=c?new Date(e.from):void 0,u=e.until!==void 0,f=u?new Date(e.until):void 0,d=e.limit===void 0?Doe:e.limit,h=e.order===void 0?void 0:e.order,_=e.start===void 0?0:e.start,p=_+d,S=0;h==="desc"&&!l&&!f&&(S=Math.max(TG.statSync(s).size-(p+5)*Loe,0));let g=TG.createReadStream(s,{start:S});g.on("error",F=>{yoe.error(F)});let R=0,E=[],T="",O;g.on("data",F=>{let q=/(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d\.]+Z) \[(.+?)]: /g;F=T+F;let j=0,te;for(;(te=q.exec(F))&&!g.destroyed;){O&&(O.message=F.slice(j,te.index),v(O));let[se,z,ne]=te,le=ne.split("] ["),ie=le[0],Re=le[1];le.splice(0,2),O={timestamp:z,thread:ie,level:Re,tags:le,message:""},j=te.index+se.length}T=F.slice(j)}),g.on("end",F=>{g.destroyed||O&&(O.message=T.trim(),v(O))}),g.resume();function v(F){let q,j,te;switch(!0){case(i&&c&&u):q=new Date(F.timestamp),j=new Date(l),te=new Date(f),F.level===o&&q>=j&&q<=te&&R<_?R++:F.level===o&&q>=j&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(i&&c):q=new Date(F.timestamp),j=new Date(l),F.level===o&&q>=j&&R<_?R++:F.level===o&&q>=j&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(i&&u):q=new Date(F.timestamp),te=new Date(f),F.level===o&&q<=te&&R<_?R++:F.level===o&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(c&&u):q=new Date(F.timestamp),j=new Date(l),te=new Date(f),q>=j&&q<=te&&R<_?R++:q>=j&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case i:F.level===o&&R<_?R++:F.level===o&&(Da(F,h,E),R++,R===p&&g.destroy());break;case c:q=new Date(F.timestamp),j=new Date(l),q>=j&&R<_?R++:q>=j&&R>=_&&(Da(F,h,E),R++,R===p&&g.destroy());break;case u:q=new Date(F.timestamp),te=new Date(f),q<=te&&R<_?R++:q<=te&&R>=_&&(Da(F,h,E),R++,R===p&&g.destroy());break;default:R<_?R++:(Da(F,h,E),R++,R===p&&g.destroy())}}return a(v,"onLogMessage"),await Noe(g,"close"),E}a(Moe,"readLog");function Da(e,t,r){t==="desc"?voe(e,r):t==="asc"?Uoe(e,r):r.push(e)}a(Da,"pushLineToResult");function voe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)>r?n=i+1:s=i}t.splice(n,0,e)}a(voe,"insertDescending");function Uoe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)<r?n=i+1:s=i}t.splice(n,0,e)}a(Uoe,"insertAscending")});var Vg=P((UCe,OG)=>{"use strict";var hN=require("joi"),{string:ju,boolean:RG,date:xoe}=hN.types(),Boe=it(),{validateSchemaExists:DCe,validateTableExists:LCe,validateSchemaName:MCe}=Ai(),Hoe=(G(),D($)),koe=Ct(),yG=ce();yG.initSync();var vCe=ju.invalid(yG.get(Hoe.CONFIG_PARAMS.CLUSTERING_NODENAME)??"node_name").pattern(koe.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),bG={operation:ju.valid("add_node","update_node","set_node_replication"),node_name:ju.optional(),subscriptions:hN.array().items({table:ju.optional(),schema:ju.optional(),database:ju.optional(),subscribe:RG.required(),publish:RG.required().custom(Goe),start_time:xoe.iso()})};function Foe(e){return Boe.validateBySchema(e,hN.object(bG))}a(Foe,"addUpdateNodeValidator");function Goe(e,t){if(t.state.ancestors[2].operation==="add_node"&&e===!1&&t.state.ancestors[0].subscribe===!1)return t.message(`'subscriptions[${t.state.path[1]}]' subscribe and/or publish must be set to true when adding a node`)}a(Goe,"checkForFalsy");OG.exports={addUpdateNodeValidator:Foe,validation_schema:bG}});var Qu=P((BCe,NG)=>{"use strict";var pN=class{static{a(this,"Node")}constructor(t,r,n){this.name=t,this.subscriptions=r,this.system_info=n}},mN=class{static{a(this,"NodeSubscription")}constructor(t,r,n,s){this.schema=t,this.table=r,this.publish=n,this.subscribe=s}};NG.exports={Node:pN,NodeSubscription:mN}});var IG=P((kCe,wG)=>{"use strict";var qoe=(G(),D($)).OPERATIONS_ENUM,EN=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=qoe.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};wG.exports=EN});var lh=P((GCe,CG)=>{"use strict";var gN=class{static{a(this,"RemotePayloadObject")}constructor(t,r,n,s){this.operation=t,this.node_name=r,this.subscriptions=n,this.system_info=s}},SN=class{static{a(this,"RemotePayloadSubscription")}constructor(t,r,n,s,i,o,c){this.schema=t,this.table=r,this.hash_attribute=n,this.publish=s,this.subscribe=i,this.start_time=o,c!==void 0&&(this.attributes=c)}};CG.exports={RemotePayloadObject:gN,RemotePayloadSubscription:SN}});var DG=P(($Ce,PG)=>{"use strict";var TN=class{static{a(this,"TableSizeObject")}constructor(t,r,n=0,s=0,i=0,o=0){this.schema=t,this.table=r,this.table_size=n,this.record_count=s,this.transaction_log_size=i,this.transaction_log_record_count=o}};PG.exports=TN});var MG=P((jCe,LG)=>{"use strict";var $oe=DG(),KCe=Ft(),YCe=ft(),Voe=X(),{getSchemaPath:WCe,getTransactionAuditStorePath:zCe}=gt(),{getDatabases:Koe}=(Ue(),D(ct));LG.exports=Yoe;async function Yoe(e){let t=new $oe;try{let r=Koe()[e.schema]?.[e.name],n=r.primaryStore.getStats(),s=r.auditStore?.getStats();t.schema=e.schema,t.table=e.name,t.record_count=n.entryCount,t.transaction_log_record_count=s.entryCount}catch(r){Voe.warn(`unable to stat table dbi due to ${r}`)}return t}a(Yoe,"lmdbGetTableSize")});var UG=P((JCe,vG)=>{"use strict";var AN=class{static{a(this,"SystemInformationObject")}constructor(t,r,n,s,i,o,c){this.system=t,this.time=r,this.cpu=n,this.memory=s,this.disk=i,this.network=o,this.harperdb_processes=c}};vG.exports=AN});var Xu=P((nPe,kG)=>{"use strict";var Woe=require("fs-extra"),zoe=require("path"),jr=require("systeminformation"),La=X(),xG=gr(),ZCe=Ct(),Ju=(G(),D($)),joe=MG(),Qoe=_o(),{getThreadInfo:BG}=st(),uh=ce();uh.initSync();var Joe=UG(),{openEnvironment:ePe}=ft(),{getSchemaPath:tPe}=gt(),{database:rPe,databases:RN}=(Ue(),D(ct)),Kg;kG.exports={getHDBProcessInfo:NN,getNetworkInfo:IN,getDiskInfo:wN,getMemoryInfo:ON,getCPUInfo:bN,getTimeInfo:yN,getSystemInformation:CN,systemInformation:Xoe,getTableSize:PN,getMetrics:DN};function yN(){return jr.time()}a(yN,"getTimeInfo");async function bN(){try{let{family:e,model:t,stepping:r,revision:n,voltage:s,speedmin:i,speedmax:o,governor:c,socket:l,cache:u,...f}=await jr.cpu();f.cpu_speed=await jr.cpuCurrentSpeed();let{raw_currentload:d,raw_currentload_idle:h,raw_currentload_irq:_,raw_currentload_nice:p,raw_currentload_system:S,raw_currentload_user:g,cpus:R,...E}=await jr.currentLoad();return E.cpus=[],R.forEach(T=>{let{raw_load:O,raw_load_idle:v,raw_load_irq:F,raw_load_nice:q,raw_load_system:j,raw_load_user:te,...se}=T;E.cpus.push(se)}),f.current_load=E,f}catch(e){return La.error(`error in getCPUInfo: ${e}`),{}}}a(bN,"getCPUInfo");async function ON(){try{let{buffers:e,cached:t,slab:r,buffcache:n,...s}=await jr.mem();return Object.assign(s,process.memoryUsage())}catch(e){return La.error(`error in getMemoryInfo: ${e}`),{}}}a(ON,"getMemoryInfo");async function NN(){let e={core:[],clustering:[]};try{let t=await jr.processes(),r;try{r=Number.parseInt(await Woe.readFile(zoe.join(uh.get(Ju.CONFIG_PARAMS.ROOTPATH),Ju.HDB_PID_FILE),"utf8"))}catch(n){if(n.code===Ju.NODE_ERROR_CODES.ENOENT)La.warn("Unable to locate 'hdb.pid' file, try stopping and starting HarperDB. This could be because HarperDB is not running.");else throw n}t.list.forEach(n=>{n.pid===r?e.core.push(n):n.name==="nats-server"&&e.clustering.push(n)});for(let n of e.core)for(let s of t.list)s.pid===n.parentPid&&(s.name==="PM2"||s.command==="PM2")&&(n.parent="PM2");return e}catch(t){return La.error(`error in getHDBProcessInfo: ${t}`),e}}a(NN,"getHDBProcessInfo");async function wN(){let e={};try{if(!uh.get(Ju.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_DISK))return e;let{rIO_sec:t,wIO_sec:r,tIO_sec:n,ms:s,...i}=await jr.disksIO();e.io=i;let{rx_sec:o,tx_sec:c,wx_sec:l,...u}=await jr.fsStats();return e.read_write=u,e.size=await jr.fsSize(),e}catch(t){return La.error(`error in getDiskInfo: ${t}`),e}}a(wN,"getDiskInfo");async function IN(){let e={default_interface:null,latency:{},interfaces:[],stats:[],connections:[]};try{return uh.get(Ju.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_NETWORK)&&(e.default_interface=await jr.networkInterfaceDefault(),e.latency=await jr.inetChecksite("google.com"),(await jr.networkInterfaces()).forEach(n=>{let{internal:s,virtual:i,mtu:o,dhcp:c,dnsSuffix:l,ieee8021xAuth:u,ieee8021xState:f,carrier_changes:d,...h}=n;e.interfaces.push(h)}),(await jr.networkStats()).forEach(n=>{let{rx_sec:s,tx_sec:i,ms:o,...c}=n;e.stats.push(c)})),e}catch(t){return La.error(`error in getNetworkInfo: ${t}`),e}}a(IN,"getNetworkInfo");async function CN(){if(Kg!==void 0)return Kg;let e={};try{let{codepage:t,logofile:r,serial:n,build:s,servicepack:i,uefi:o,...c}=await jr.osInfo();e=c;let l=await jr.versions("node, npm");return e.node_version=l.node,e.npm_version=l.npm,Kg=e,Kg}catch(t){return La.error(`error in getSystemInformation: ${t}`),e}}a(CN,"getSystemInformation");async function PN(){let e=[],t=await Qoe.describeAll();for(let r of Object.values(t))for(let n of Object.values(r))e.push(await joe(n));return e}a(PN,"getTableSize");async function DN(){let e={};for(let t in RN){let r=e[t]={},n=r.tables={};for(let s in RN[t])try{let i=RN[t][s];if(!r.readers&&(Object.assign(r,i.primaryStore.rootStore.getStats()),delete r.root,r.readers=i.primaryStore.rootStore.readerList().split(/\n\s+/).slice(1).map(l=>{let[u,f,d]=l.trim().split(" ");return{pid:u,thread:f,txnid:d}}),i.auditStore)){let{treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:h}=i.auditStore.getStats();r.audit={treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:h}}let o=i.primaryStore.getStats(),c={};for(let l of["treeDepth","treeBranchPageCount","treeLeafPageCount","entryCount","overflowPages"])c[l]=o[l];n[s]=c}catch(i){La.notify(`Error getting stats for table ${s}: ${i}`)}}return e}a(DN,"getMetrics");async function HG(){if(uh.get(Ju.CONFIG_PARAMS.CLUSTERING_ENABLED)){let{jsm:e}=await xG.getNATSReferences(),t=await xG.listStreams(),r=[];for(let n of t){let s=[],i=await e.consumers.list(n.config.name);for await(let c of i)s.push({name:c.name,created:c.created,num_ack_pending:c.num_ack_pending,num_redelivered:c.num_redelivered,num_waiting:c.num_waiting,num_pending:c.num_pending});let o={stream_name:n.config.name,database:n.config.subjects[0].split(".")[1],table:n.config.subjects[0].split(".")[2],state:n.state,consumers:s};r.push(o)}return r}}a(HG,"getNatsStreamInfo");async function Xoe(e){let t=new Joe;if(!Array.isArray(e.attributes)||e.attributes.length===0)return t.system=await CN(),t.time=yN(),t.cpu=await bN(),t.memory=await ON(),t.disk=await wN(),t.network=await IN(),t.harperdb_processes=await NN(),t.table_size=await PN(),t.metrics=await DN(),t.threads=await BG(),t.replication=await HG(),t;for(let r=0;r<e.attributes.length;r++)switch(e.attributes[r]){case"system":t.system=await CN();break;case"time":t.time=yN();break;case"cpu":t.cpu=await bN();break;case"memory":t.memory=await ON();break;case"disk":t.disk=await wN();break;case"network":t.network=await IN();break;case"harperdb_processes":t.harperdb_processes=await NN();break;case"table_size":t.table_size=await PN();break;case"database_metrics":case"metrics":t.metrics=await DN();break;case"threads":t.threads=await BG();break;case"replication":t.replication=await HG();break;default:break}return t}a(Xoe,"systemInformation")});var yo=P((cPe,$G)=>{"use strict";var Zoe=Sn(),LN=oe(),eae=require("util"),fl=(G(),D($)),FG=ce();FG.initSync();var tae=dO(),GG=Vr(),{Node:iPe,NodeSubscription:oPe}=Qu(),rae=cu(),nae=IG(),{RemotePayloadObject:sae,RemotePayloadSubscription:iae}=lh(),{handleHDBError:oae,hdb_errors:aae}=he(),{HTTP_STATUS_CODES:cae,HDB_ERROR_MSGS:lae}=aae,uae=qs(),dae=Xu(),{packageJson:fae}=Et(),{getDatabases:_ae}=(Ue(),D(ct)),aPe=eae.promisify(tae.authorize),hae=GG.searchByHash,pae=GG.searchByValue;$G.exports={isEmpty:mae,getNodeRecord:Eae,upsertNodeRecord:gae,buildNodePayloads:Sae,checkClusteringEnabled:Tae,getAllNodeRecords:Aae,getSystemInfo:Rae,reverseSubscription:qG};function mae(e){return e==null}a(mae,"isEmpty");async function Eae(e){let t=new rae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e],["*"]);return hae(t)}a(Eae,"getNodeRecord");async function gae(e){let t=new nae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e]);return Zoe.upsert(t)}a(gae,"upsertNodeRecord");function qG(e){if(LN.isEmpty(e.subscribe)||LN.isEmpty(e.publish))throw new Error("Received invalid subscription object");let{schema:t,table:r,hash_attribute:n}=e,s={schema:t,table:r,hash_attribute:n};return e.subscribe===!0&&e.publish===!1?(s.subscribe=!1,s.publish=!0):e.subscribe===!1&&e.publish===!0?(s.subscribe=!0,s.publish=!1):(s.subscribe=e.subscribe,s.publish=e.publish),s}a(qG,"reverseSubscription");function Sae(e,t,r,n){let s=[];for(let i=0,o=e.length;i<o;i++){let c=e[i],{schema:l,table:u}=c,f=LN.getTableHashAttribute(l,u),{subscribe:d,publish:h}=qG(c),_=_ae()[l]?.[u],p=new iae(l,u,f,h,d,c.start_time,_.schemaDefined?_.attributes:void 0);s.push(p)}return new sae(r,t,s,n)}a(Sae,"buildNodePayloads");function Tae(){if(!FG.get(fl.CONFIG_PARAMS.CLUSTERING_ENABLED))throw oae(new Error,lae.CLUSTERING_NOT_ENABLED,cae.BAD_REQUEST,void 0,void 0,!0)}a(Tae,"checkClusteringEnabled");async function Aae(){let e=new uae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,"name","*",void 0,["*"]);return Array.from(await pae(e))}a(Aae,"getAllNodeRecords");async function Rae(){let e=await dae.getSystemInformation();return{hdb_version:fae.version,node_version:e.node_version,platform:e.platform}}a(Rae,"getSystemInfo")});var MN=P((uPe,JG)=>{"use strict";var Yg=gr(),VG=oe(),KG=Ct(),YG=(G(),D($)),Wg=X(),WG=Fg(),yae=Jf(),{RemotePayloadObject:bae}=lh(),{handleHDBError:zG,hdb_errors:Oae}=he(),{HTTP_STATUS_CODES:jG}=Oae,{NodeSubscription:QG}=Qu();JG.exports=Nae;async function Nae(e,t){let r;try{r=await Yg.request(`${t}.${KG.REQUEST_SUFFIX}`,new bae(YG.OPERATIONS_ENUM.DESCRIBE_ALL,t,void 0,void 0)),Wg.trace("Response from remote describe all request:",r)}catch(o){Wg.error(`addNode received error from describe all request to remote node: ${o}`);let c=Yg.requestErrorHandler(o,"add_node",t);throw zG(new Error,c,jG.INTERNAL_SERVER_ERROR,"error",c)}if(r.status===KG.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let o=`Error returned from remote node ${t}: ${r.message}`;throw zG(new Error,o,jG.INTERNAL_SERVER_ERROR,"error",o)}let n=r.message,s=[],i=[];for(let o of e){let{table:c}=o,l=o.database??o.schema??"data";if(l===YG.SYSTEM_SCHEMA_NAME){await Yg.createLocalTableStream(l,c);let p=new QG(l,c,o.publish,o.subscribe);p.start_time=o.start_time,i.push(p);continue}let u=VG.doesSchemaExist(l),f=n[l]!==void 0,d=c?VG.doesTableExist(l,c):!0,h=c?n?.[l]?.[c]!==void 0:!0;if(!u&&!f||!d&&!h){s.push(o);continue}if(!u&&f&&(Wg.trace(`addNode creating schema: ${l}`),await WG.createSchema({operation:"create_schema",schema:l})),!d&&h){Wg.trace(`addNode creating table: ${c} in schema: ${l} with attributes ${JSON.stringify(n[l][c].attributes)}`);let p=new yae(l,c,n[l][c].hash_attribute);n[l][c].attributes&&(p.attributes=n[l][c].attributes),await WG.createTable(p)}await Yg.createLocalTableStream(l,c);let _=new QG(l,c,o.publish,o.subscribe);_.start_time=o.start_time,i.push(_)}return{added:i,skipped:s}}a(Nae,"reviewSubscriptions")});var _l={};Be(_l,{addNodeBack:()=>Dae,removeNodeBack:()=>Lae,setNode:()=>Pae});async function Pae(e){e.node_name&&!e.hostname&&(e.hostname=e.node_name),e.verify_tls!==void 0&&(e.rejectUnauthorized=e.verify_tls);let{url:t,hostname:r}=e;t?r||(r=e.hostname=Qs(t)):t=Ug(r);let n=(0,ZG.validateBySchema)(e,Cae);if(n)throw(0,bo.handleHDBError)(n,n.message,Iae.BAD_REQUEST,void 0,void 0,!0);if(e.operation==="remove_node"){if(!t&&!r)throw new bo.ClientError("url or hostname is required for remove_node operation");let _=r,p=sr(),S=await p.get(_);if(!S)throw new bo.ClientError(_+" does not exist");try{await ih({url:S.url},{operation:Yt.REMOVE_NODE_BACK,name:S?.subscriptions?.length>0?tt():_},void 0)}catch(g){Jn.warn(`Error removing node from target node ${_}, if it is offline and we be online in the future, you may need to clean up this node manually, or retry:`,g)}return await p.delete(_),`Successfully removed '${_}' from cluster`}if(!t)throw new bo.ClientError("url required for this operation");let s=Aa();if(s==null)throw new bo.ClientError("replication url is missing from harperdb-config.yaml");let i,o,c;if(t?.startsWith("wss:")){i=await(0,As.getReplicationCert)();let _=await(0,As.getReplicationCertAuth)();if(!i)throw new Error("Unable to find a certificate to use for replication");i.options.is_self_signed?(o=await(0,As.createCsr)(),Jn.info("Sending CSR to target node:",t)):_&&(c=_.certificate,Jn.info("Sending CA named",_.name,"to target node",t))}let l={operation:Yt.ADD_NODE_BACK,hostname:(0,va.get)(B.REPLICATION_HOSTNAME),target_hostname:r,url:s,csr:o,cert_auth:c,authorization:e.retain_authorization?e.authorization:null};if((0,va.get)(B.REPLICATION_SHARD)!==void 0&&(l.shard=(0,va.get)(B.REPLICATION_SHARD)),e.subscriptions?l.subscriptions=e.subscriptions.map(XG):l.subscriptions=null,e.hasOwnProperty("subscribe")||e.hasOwnProperty("publish")){let _=XG(e);l.subscribe=_.subscribe,l.publish=_.publish}e?.authorization?.username&&e?.authorization?.password&&(e.authorization="Basic "+Buffer.from(e.authorization.username+":"+e.authorization.password).toString("base64"));let u,f;try{u=await ih({url:t},l,e)}catch(_){_.message=`Error returned from ${t}: `+_.message,Jn.warn("Error adding node:",t,"to cluster:",_),f=_}if(o&&(!u?.certificate||!u?.certificate?.includes?.("BEGIN CERTIFICATE")))throw f?(f.message+=" and connection was required to sign certificate",f):new Error(`Unexpected certificate signature response from node ${t} response: ${JSON.stringify(u)}`);o&&(Jn.info("CSR response received from node:",t,"saving certificate and CA in hdb_certificate"),await(0,As.setCertTable)({name:wae.certificateFromPem(u.signingCA).issuer.getField("CN").value,certificate:u.signingCA,is_authority:!0}),u.certificate&&await(0,As.setCertTable)({name:tt(),uses:["https","operations","wss"],certificate:u.certificate,private_key_name:i?.options?.key_file,is_authority:!1,is_self_signed:!1}),c=u.signingCA);let d={url:t,ca:u?.usingCA};if(e.hostname&&(d.name=e.hostname),e.subscriptions?d.subscriptions=e.subscriptions:d.replicates=!0,e.start_time&&(d.start_time=typeof e.start_time=="string"?new Date(e.start_time).getTime():e.start_time),e.retain_authorization&&(d.authorization=e.authorization),e.revoked_certificates&&(d.revoked_certificates=e.revoked_certificates),u?.shard!==void 0?d.shard=u.shard:e.shard!==void 0&&(d.shard=e.shard),d.replicates){let _={url:s,ca:c,replicates:!0,subscriptions:null};(0,va.get)(B.REPLICATION_SHARD)!==void 0&&(_.shard=(0,va.get)(B.REPLICATION_SHARD)),e.retain_authorization&&(_.authorization=e.authorization),e.start_time&&(_.start_time=e.start_time),await go(tt(),_)}await go(u?u.nodeName:d.name??Qs(t),d);let h;return e.operation==="update_node"?h=`Successfully updated '${t}'`:h=`Successfully added '${t}' to cluster`,f&&(h+=" but there was an error updating target node: "+f.message),h}async function Dae(e){Jn.trace("addNodeBack received request:",e);let t=await(0,As.signCertificate)(e),r;e.csr?(r=t.signingCA,Jn.info("addNodeBack received CSR from node:",e.url,"this node will use and respond with CA that was used to issue CSR")):(r=e?.cert_auth,Jn.info("addNodeBack received CA from node:",e.url));let n={url:e.url,ca:r};e.subscriptions?n.subscriptions=e.subscriptions:(n.replicates=!0,n.subscriptions=null),e.start_time&&(n.start_time=e.start_time),e.authorization&&(n.authorization=e.authorization),e.shard!==void 0&&(n.shard=e.shard);let s=await(0,As.getReplicationCertAuth)();if(n.replicates){let i={url:Aa(),ca:s?.certificate,replicates:!0,subscriptions:null};(0,va.get)(B.REPLICATION_SHARD)!==void 0&&(i.shard=(0,va.get)(B.REPLICATION_SHARD),t.shard=i.shard),e.start_time&&(i.start_time=e.start_time),e.authorization&&(i.authorization=e.authorization),await go(tt(),i)}return await go(e.hostname,n),t.nodeName=tt(),t.usingCA=s?.certificate,Jn.info("addNodeBack responding to:",e.url,"with CA named:",s?.name),t}async function Lae(e){Jn.trace("removeNodeBack received request:",e),await sr().delete(e.name)}function XG(e){let{subscribe:t,publish:r}=e;return{...e,subscribe:r,publish:t}}var As,ZG,Ma,va,Jn,bo,wae,Iae,Cae,hl=be(()=>{As=M(Zs()),ZG=M(it()),Ma=M(require("joi")),va=M(ce());G();eh();ol();gs();Jn=M(X()),bo=M(he()),{pki:wae}=require("node-forge"),{HTTP_STATUS_CODES:Iae}=bo.hdb_errors,Cae=Ma.default.object({hostname:Ma.default.string(),verify_tls:Ma.default.boolean(),replicates:Ma.default.boolean(),subscriptions:Ma.default.array(),revoked_certificates:Ma.default.array(),shard:Ma.default.number()});a(Pae,"setNode");a(Dae,"addNodeBack");a(Lae,"removeNodeBack");a(XG,"reverseSubscription")});var Xg=P((SPe,tq)=>{"use strict";var{handleHDBError:zg,hdb_errors:Mae}=he(),{HTTP_STATUS_CODES:jg}=Mae,{addUpdateNodeValidator:vae}=Vg(),Qg=X(),Jg=(G(),D($)),eq=Ct(),Uae=oe(),dh=gr(),fh=yo(),vN=ce(),xae=MN(),{Node:Bae,NodeSubscription:Hae}=Qu(),{broadcast:kae}=st(),{setNode:Fae}=(hl(),D(_l)),EPe=ce(),gPe=(G(),D($)),Gae="Unable to create subscriptions due to schema and/or tables not existing on the local or remote node",qae="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",$ae=vN.get(Jg.CONFIG_PARAMS.CLUSTERING_NODENAME);tq.exports=Vae;async function Vae(e,t=!1){if(Qg.trace("addNode called with:",e),vN.get(Jg.CONFIG_PARAMS.REPLICATION_URL)||vN.get(Jg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Fae(e);fh.checkClusteringEnabled();let r=vae(e);if(r)throw zg(r,r.message,jg.BAD_REQUEST,void 0,void 0,!0);let n=e.node_name;if(!t){let d=await fh.getNodeRecord(n);if(!Uae.isEmptyOrZeroLength(d))throw zg(new Error,`Node '${n}' has already been added, perform update_node to proceed.`,jg.BAD_REQUEST,void 0,void 0,!0)}let{added:s,skipped:i}=await xae(e.subscriptions,n),o={message:void 0,added:s,skipped:i};if(s.length===0)return o.message=Gae,o;let c=fh.buildNodePayloads(s,$ae,Jg.OPERATIONS_ENUM.ADD_NODE,await fh.getSystemInfo()),l=[];for(let d=0,h=s.length;d<h;d++){let _=s[d];s[d].start_time===void 0&&delete s[d].start_time,l.push(new Hae(_.schema,_.table,_.publish,_.subscribe))}Qg.trace("addNode sending remote payload:",c);let u;try{u=await dh.request(`${n}.${eq.REQUEST_SUFFIX}`,c)}catch(d){Qg.error(`addNode received error from request: ${d}`);for(let _=0,p=s.length;_<p;_++){let S=s[_];S.publish=!1,S.subscribe=!1,await dh.updateRemoteConsumer(S,n)}let h=dh.requestErrorHandler(d,"add_node",n);throw zg(new Error,h,jg.INTERNAL_SERVER_ERROR,"error",h)}if(u.status===eq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let d=`Error returned from remote node ${n}: ${u.message}`;throw zg(new Error,d,jg.INTERNAL_SERVER_ERROR,"error",d)}Qg.trace(u);for(let d=0,h=s.length;d<h;d++){let _=s[d];await dh.updateRemoteConsumer(_,n),_.subscribe===!0&&await dh.updateConsumerIterator(_.schema,_.table,n,"start")}let f=new Bae(n,l,u.system_info);return await fh.upsertNodeRecord(f),kae({type:"nats_update"}),i.length>0?o.message=qae:o.message=`Successfully added '${n}' to manifest`,o}a(Vae,"addNode")});var HN=P((RPe,nq)=>{"use strict";var{handleHDBError:UN,hdb_errors:Kae}=he(),{HTTP_STATUS_CODES:xN}=Kae,{addUpdateNodeValidator:Yae}=Vg(),_h=X(),Zg=(G(),D($)),rq=Ct(),APe=oe(),hh=gr(),ph=yo(),BN=ce(),{cloneDeep:Wae}=require("lodash"),zae=MN(),{Node:jae,NodeSubscription:Qae}=Qu(),{broadcast:Jae}=st(),{setNode:Xae}=(hl(),D(_l)),Zae="Unable to update subscriptions due to schema and/or tables not existing on the local or remote node",ece="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",tce=BN.get(Zg.CONFIG_PARAMS.CLUSTERING_NODENAME);nq.exports=rce;async function rce(e){if(_h.trace("updateNode called with:",e),BN.get(Zg.CONFIG_PARAMS.REPLICATION_URL)??BN.get(Zg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Xae(e);ph.checkClusteringEnabled();let t=Yae(e);if(t)throw UN(t,t.message,xN.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n,s=await ph.getNodeRecord(r);s.length>0&&(n=Wae(s));let{added:i,skipped:o}=await zae(e.subscriptions,r),c={message:void 0,updated:i,skipped:o};if(i.length===0)return c.message=Zae,c;let l=ph.buildNodePayloads(i,tce,Zg.OPERATIONS_ENUM.UPDATE_NODE,await ph.getSystemInfo());for(let f=0,d=i.length;f<d;f++){let h=i[f];_h.trace(`updateNode updating work stream for node: ${r} subscription:`,h),i[f].start_time===void 0&&delete i[f].start_time}_h.trace("updateNode sending remote payload:",l);let u;try{u=await hh.request(`${r}.${rq.REQUEST_SUFFIX}`,l)}catch(f){_h.error(`updateNode received error from request: ${f}`);let d=hh.requestErrorHandler(f,"update_node",r);throw UN(new Error,d,xN.INTERNAL_SERVER_ERROR,"error",d)}if(u.status===rq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let f=`Error returned from remote node ${r}: ${u.message}`;throw UN(new Error,f,xN.INTERNAL_SERVER_ERROR,"error",f)}_h.trace(u);for(let f=0,d=i.length;f<d;f++){let h=i[f];await hh.updateRemoteConsumer(h,r),h.subscribe===!0?await hh.updateConsumerIterator(h.schema,h.table,r,"start"):await hh.updateConsumerIterator(h.schema,h.table,r,"stop")}return n||(n=[new jae(r,[],u.system_info)]),await nce(n[0],i,u.system_info),o.length>0?c.message=ece:c.message=`Successfully updated '${r}'`,c}a(rce,"updateNode");async function nce(e,t,r){let n=e;for(let s=0,i=t.length;s<i;s++){let o=t[s],c=!1;for(let l=0,u=e.subscriptions.length;l<u;l++){let f=n.subscriptions[l];if(f.schema===o.schema&&f.table===o.table){f.publish=o.publish,f.subscribe=o.subscribe,c=!0;break}}c||n.subscriptions.push(new Qae(o.schema,o.table,o.publish,o.subscribe))}n.system_info=r,await ph.upsertNodeRecord(n),Jae({type:"nats_update"})}a(nce,"updateNodeTable")});var cq=P((bPe,aq)=>{"use strict";var oq=require("joi"),{string:sq}=oq.types(),sce=it(),iq=(G(),D($)),ice=ce(),oce=Ct();aq.exports=ace;function ace(e){let t=sq.invalid(ice.get(iq.CONFIG_PARAMS.CLUSTERING_NODENAME)).pattern(oce.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),r=oq.object({operation:sq.valid(iq.OPERATIONS_ENUM.REMOVE_NODE).required(),node_name:t});return sce.validateBySchema(e,r)}a(ace,"removeNodeValidator")});var eS=P((NPe,_q)=>{"use strict";var{handleHDBError:lq,hdb_errors:cce}=he(),{HTTP_STATUS_CODES:uq}=cce,lce=cq(),mh=X(),dq=yo(),uce=oe(),Zu=(G(),D($)),fq=Ct(),kN=gr(),FN=ce(),{RemotePayloadObject:dce}=lh(),{NodeSubscription:fce}=Qu(),_ce=Qf(),hce=qc(),{broadcast:pce}=st(),{setNode:mce}=(hl(),D(_l)),Ece=FN.get(Zu.CONFIG_PARAMS.CLUSTERING_NODENAME);_q.exports=gce;async function gce(e){if(mh.trace("removeNode called with:",e),FN.get(Zu.CONFIG_PARAMS.REPLICATION_URL)??FN.get(Zu.CONFIG_PARAMS.REPLICATION_HOSTNAME))return mce(e);dq.checkClusteringEnabled();let t=lce(e);if(t)throw lq(t,t.message,uq.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n=await dq.getNodeRecord(r);if(uce.isEmptyOrZeroLength(n))throw lq(new Error,`Node '${r}' was not found.`,uq.BAD_REQUEST,void 0,void 0,!0);n=n[0];let s=new dce(Zu.OPERATIONS_ENUM.REMOVE_NODE,Ece,[]),i,o=!1;for(let l=0,u=n.subscriptions.length;l<u;l++){let f=n.subscriptions[l];f.subscribe===!0&&await kN.updateConsumerIterator(f.schema,f.table,r,"stop");try{await kN.updateRemoteConsumer(new fce(f.schema,f.table,!1,!1),r)}catch(d){mh.error(d)}}try{i=await kN.request(`${r}.${fq.REQUEST_SUFFIX}`,s),mh.trace("Remove node reply from remote node:",r,i)}catch(l){mh.error("removeNode received error from request:",l),o=!0}let c=new _ce(Zu.SYSTEM_SCHEMA_NAME,Zu.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[r]);return await hce.deleteRecord(c),pce({type:"nats_update"}),i?.status===fq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR||o?(mh.error("Error returned from remote node:",r,i?.message),`Successfully removed '${r}' from local manifest, however there was an error reaching remote node. Check the logs for more details.`):`Successfully removed '${r}' from manifest`}a(gce,"removeNode")});var mq=P((IPe,pq)=>{"use strict";var hq=require("joi"),{string:Sce,array:Tce}=hq.types(),Ace=it(),Rce=Vg();pq.exports=yce;function yce(e){let t=hq.object({operation:Sce.valid("configure_cluster").required(),connections:Tce.items(Rce.validation_schema).required()});return Ace.validateBySchema(e,t)}a(yce,"configureClusterValidator")});var GN=P((PPe,Aq)=>{"use strict";var Eq=(G(),D($)),tS=X(),bce=oe(),Oce=ce(),Nce=eS(),wce=Xg(),Ice=yo(),Cce=mq(),{handleHDBError:gq,hdb_errors:Pce}=he(),{HTTP_STATUS_CODES:Sq}=Pce,Dce="Configure cluster complete.",Lce="Failed to configure the cluster. Check the logs for more details.",Mce="Configure cluster was partially successful. Errors occurred when attempting to configure the following nodes. Check the logs for more details.";Aq.exports=vce;async function vce(e){tS.trace("configure cluster called with:",e);let t=Cce(e);if(t)throw gq(t,t.message,Sq.BAD_REQUEST,void 0,void 0,!0);let r=await Ice.getAllNodeRecords(),n=[];if(Oce.get(Eq.CONFIG_PARAMS.CLUSTERING_ENABLED)){for(let f=0,d=r.length;f<d;f++){let h=await Tq(Nce,{operation:Eq.OPERATIONS_ENUM.REMOVE_NODE,node_name:r[f].name},r[f].name);n.push(h)}tS.trace("All results from configure_cluster remove node:",n)}let s=[],i=e.connections.length;for(let f=0;f<i;f++){let d=e.connections[f],h=await Tq(wce,d,d.node_name);s.push(h)}tS.trace("All results from configure_cluster add node:",s);let o=[],c=[],l=!1,u=n.concat(s);for(let f=0,d=u.length;f<d;f++){let h=u[f];h.status==="rejected"&&(tS.error(h.node_name,h?.error?.message,h?.error?.stack),o.includes(h.node_name)||o.push(h.node_name)),(h?.result?.message?.includes?.("Successfully")||h?.result?.includes?.("Successfully"))&&(l=!0),!(typeof h.result=="string"&&h.result.includes("Successfully removed")||h.status==="rejected")&&c.push({node_name:h?.node_name,response:h?.result})}if(bce.isEmptyOrZeroLength(o))return{message:Dce,connections:c};if(l)return{message:Mce,failed_nodes:o,connections:c};throw gq(new Error,Lce,Sq.INTERNAL_SERVER_ERROR,void 0,void 0,!0)}a(vce,"configureCluster");async function Tq(e,t,r){try{return{node_name:r,result:await e(t)}}catch(n){return{node_name:r,error:n,status:"rejected"}}}a(Tq,"functionWrapper")});var Oq=P((LPe,bq)=>{"use strict";var Eh=require("joi"),Uce=it(),{validateSchemaExists:Rq,validateTableExists:xce,validateSchemaName:yq}=Ai(),Bce=Eh.object({operation:Eh.string().valid("purge_stream"),schema:Eh.string().custom(Rq).custom(yq).optional(),database:Eh.string().custom(Rq).custom(yq).optional(),table:Eh.string().custom(xce).required()});function Hce(e){return Uce.validateBySchema(e,Bce)}a(Hce,"purgeStreamValidator");bq.exports=Hce});var qN=P((vPe,Nq)=>{"use strict";var{handleHDBError:kce,hdb_errors:Fce}=he(),{HTTP_STATUS_CODES:Gce}=Fce,qce=Oq(),$ce=gr(),Vce=yo();Nq.exports=Kce;async function Kce(e){e.schema=e.schema??e.database;let t=qce(e);if(t)throw kce(t,t.message,Gce.BAD_REQUEST,void 0,void 0,!0);Vce.checkClusteringEnabled();let{schema:r,table:n,options:s}=e;return await $ce.purgeTableStream(r,n,s),`Successfully purged table '${r}.${n}'`}a(Kce,"purgeStream")});var KN=P((xPe,Mq)=>{"use strict";var VN=yo(),Yce=gr(),nS=ce(),ed=(G(),D($)),pl=Ct(),Wce=oe(),$N=X(),{RemotePayloadObject:zce}=lh(),{ErrorCode:wq}=require("nats"),{parentPort:Iq}=require("worker_threads"),{onMessageByType:jce}=st(),{getThisNodeName:Qce}=(gs(),D(Na)),{requestClusterStatus:Jce}=(eh(),D(Jk)),{getReplicationSharedStatus:Xce,getHDBNodeTable:Zce}=(ol(),D(MO)),{CONFIRMATION_STATUS_POSITION:ele,RECEIVED_VERSION_POSITION:tle,RECEIVED_TIME_POSITION:rle,SENDING_TIME_POSITION:nle,RECEIVING_STATUS_POSITION:sle,RECEIVING_STATUS_RECEIVING:ile}=(sN(),D(qF)),Cq=nS.get(ed.CONFIG_PARAMS.CLUSTERING_ENABLED),Pq=nS.get(ed.CONFIG_PARAMS.CLUSTERING_NODENAME);Mq.exports={clusterStatus:ole,buildNodeStatus:Lq};var Dq;jce("cluster-status",async e=>{Dq(e)});async function ole(){if(nS.get(ed.CONFIG_PARAMS.REPLICATION_URL)||nS.get(ed.CONFIG_PARAMS.REPLICATION_HOSTNAME)){let n;if(Iq){Iq.postMessage({type:"request-cluster-status"}),n=await new Promise(i=>{Dq=i});for(let i of n.connections){let o=i.name;for(let c of i.database_sockets){let l=c.database,u;for(let d of Object.values(databases[l]||{}))if(u=d.auditStore,u)break;if(!u)continue;let f=Xce(u,l,o);c.lastCommitConfirmed=rS(f[ele]),c.lastReceivedRemoteTime=rS(f[tle]),c.lastReceivedLocalTime=rS(f[rle]),c.sendingMessage=rS(f[nle]),c.lastReceivedStatus=f[sle]===ile?"Receiving":"Waiting"}}}else n=Jce();n.node_name=Qce();let s=Zce().primaryStore.get(n.node_name);return s?.shard&&(n.shard=s.shard),s?.url&&(n.url=s.url),n.is_enabled=!0,n}let e={node_name:Pq,is_enabled:Cq,connections:[]};if(!Cq)return e;let t=await VN.getAllNodeRecords();if(Wce.isEmptyOrZeroLength(t))return e;let r=[];for(let n=0,s=t.length;n<s;n++)r.push(Lq(t[n],e.connections));return await Promise.allSettled(r),e}a(ole,"clusterStatus");function rS(e){return e?e===1?"Copying":new Date(e).toUTCString():void 0}a(rS,"asDate");async function Lq(e,t){let r=e.name,n=new zce(ed.OPERATIONS_ENUM.CLUSTER_STATUS,Pq,void 0,await VN.getSystemInfo()),s,i,o=pl.CLUSTER_STATUS_STATUSES.OPEN;try{let l=Date.now();s=await Yce.request(pl.REQUEST_SUBJECT(r),n),i=Date.now()-l,s.status===pl.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR&&(o=pl.CLUSTER_STATUS_STATUSES.CLOSED,$N.error(`Error getting node status from ${r} `,s))}catch(l){$N.warn(`Error getting node status from ${r}`,l),l.code===wq.NoResponders?o=pl.CLUSTER_STATUS_STATUSES.NO_RESPONDERS:l.code===wq.Timeout?o=pl.CLUSTER_STATUS_STATUSES.TIMEOUT:o=pl.CLUSTER_STATUS_STATUSES.CLOSED}let c=new ale(r,o,s?.message?.ports?.clustering,s?.message?.ports?.operations_api,i,s?.message?.uptime,e.subscriptions,s?.message?.system_info);try{let l={name:r,system_info:s?.message?.system_info};e.system_info?.hdb_version!==ed.PRE_4_0_0_VERSION&&await VN.upsertNodeRecord(l)}catch(l){$N.error("Cluster status encountered an error updating system info for node:",r,l)}t.push(c)}a(Lq,"buildNodeStatus");function ale(e,t,r,n,s,i,o,c){this.node_name=e,this.status=t,this.ports={clustering:r,operations_api:n},this.latency_ms=s,this.uptime=i,this.subscriptions=o,this.system_info=c}a(ale,"NodeStatusObject")});var WN=P((HPe,vq)=>{"use strict";var{handleHDBError:cle,hdb_errors:lle}=he(),{HTTP_STATUS_CODES:ule}=lle,dle=gr(),fle=yo(),YN=oe(),sS=require("joi"),_le=it(),hle=2e3,ple=sS.object({timeout:sS.number().min(1),connected_nodes:sS.boolean(),routes:sS.boolean()});vq.exports=mle;async function mle(e){fle.checkClusteringEnabled();let t=_le.validateBySchema(e,ple);if(t)throw cle(t,t.message,ule.BAD_REQUEST,void 0,void 0,!0);let{timeout:r,connected_nodes:n,routes:s}=e,i=n===void 0||YN.autoCastBoolean(n),o=s===void 0||YN.autoCastBoolean(s),c={nodes:[]},l=await dle.getServerList(r??hle),u={};if(i)for(let f=0,d=l.length;f<d;f++){let h=l[f].statsz;h&&(u[l[f].server.name]=h.routes)}for(let f=0,d=l.length;f<d;f++){if(l[f].statsz)continue;let h=l[f].server,_=l[f].data;if(h.name.endsWith("-hub")){let p={name:h.name.slice(0,-4),response_time:l[f].response_time};i&&(p.connected_nodes=[],u[h.name]&&u[h.name].forEach(S=>{p.connected_nodes.includes(S.name.slice(0,-4))||p.connected_nodes.push(S.name.slice(0,-4))})),o&&(p.routes=_.cluster?.urls?_.cluster?.urls.map(S=>({host:S.split(":")[0],port:YN.autoCast(S.split(":")[1])})):[]),c.nodes.push(p)}}return c}a(mle,"clusterNetwork")});var Hq=P((FPe,Bq)=>{"use strict";var zN=require("joi"),Uq=it(),{route_constraints:xq}=ib();Bq.exports={setRoutesValidator:Ele,deleteRoutesValidator:gle};function Ele(e){let t=zN.object({server:zN.valid("hub","leaf"),routes:xq.required()});return Uq.validateBySchema(e,t)}a(Ele,"setRoutesValidator");function gle(e){let t=zN.object({routes:xq.required()});return Uq.validateBySchema(e,t)}a(gle,"deleteRoutesValidator")});var iS=P((qPe,Kq)=>{"use strict";var Oo=Dt(),jN=oe(),Rs=(G(),D($)),td=ce(),kq=Hq(),{handleHDBError:Fq,hdb_errors:Sle}=he(),{HTTP_STATUS_CODES:Gq}=Sle,qq="cluster routes successfully set",$q="cluster routes successfully deleted";Kq.exports={setRoutes:Ale,getRoutes:Rle,deleteRoutes:yle};function Tle(e){let t=Oo.getClusteringRoutes(),r=e.server==="hub"?t.hub_routes:t.leaf_routes,n=e.server==="hub"?t.leaf_routes:t.hub_routes,s=[],i=[];for(let o=0,c=e.routes.length;o<c;o++){let l=e.routes[o];l.port=jN.autoCast(l.port);let u=r.some(d=>d.host===l.host&&d.port===l.port),f=n.some(d=>d.host===l.host&&d.port===l.port);u||f?s.push(l):(r.push(l),i.push(l))}return e.server==="hub"?Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r):Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,r),{message:qq,set:i,skipped:s}}a(Tle,"setRoutesNats");function Ale(e){let t=kq.setRoutesValidator(e);if(t)throw Fq(t,t.message,Gq.BAD_REQUEST,void 0,void 0,!0);if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return Tle(e);let r=[],n=[],s=td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[];return e.routes.forEach(i=>{Vq(s,i)?n.push(i):(s.push(i),r.push(i))}),Oo.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,s),{message:qq,set:r,skipped:n}}a(Ale,"setRoutes");function Vq(e,t){return typeof t=="string"?e.includes(t):typeof t=="object"&&t!==null?e.some(r=>(r.host===t.host||r.hostname===t.hostname)&&r.port===t.port):!1}a(Vq,"existsInArray");function Rle(){if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED)){let e=Oo.getClusteringRoutes();return{hub:e.hub_routes,leaf:e.leaf_routes}}else return td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[]}a(Rle,"getRoutes");function yle(e){let t=kq.deleteRoutesValidator(e);if(t)throw Fq(t,t.message,Gq.BAD_REQUEST,void 0,void 0,!0);if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return ble(e);let r=[],n=[],s=td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[],i=[];return s.forEach(o=>{Vq(e.routes,o)?r.push(o):(i.push(o),n.push(o))}),Oo.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,i),{message:$q,deleted:r,skipped:n}}a(yle,"deleteRoutes");function ble(e){let t=Oo.getClusteringRoutes(),r=t.hub_routes,n=t.leaf_routes,s=[],i=[],o=!1,c=!1;for(let l=0,u=e.routes.length;l<u;l++){let f=e.routes[l],d=!1;for(let h=0,_=r.length;h<_;h++){let p=r[h];if(f.host===p.host&&f.port===p.port){r.splice(h,1),d=!0,o=!0,s.push(f);break}}if(!d){let h=!0;for(let _=0,p=n.length;_<p;_++){let S=n[_];if(f.host===S.host&&f.port===S.port){n.splice(_,1),c=!0,h=!1,s.push(f);break}}h&&i.push(f)}}return o&&(r=jN.isEmptyOrZeroLength(r)?null:r,Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r)),c&&(n=jN.isEmptyOrZeroLength(n)?null:n,Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,n)),{message:$q,deleted:s,skipped:i}}a(ble,"deleteRoutesNats")});var Wq=P((VPe,Yq)=>{"use strict";var gh=require("alasql"),ml=require("recursive-iterator"),ei=X(),Ole=oe(),Sh=(G(),D($)),QN=class{static{a(this,"sql_statement_bucket")}constructor(t){this.ast=t,this.affected_attributes=new Map,this.table_lookup=new Map,this.schema_lookup=new Map,this.table_to_schema_lookup=new Map,wle(this.ast,this.affected_attributes,this.table_lookup,this.schema_lookup,this.table_to_schema_lookup)}getAttributesBySchemaTableName(t,r){if(!t||!r||!this.affected_attributes)return[];if(this.affected_attributes.has(t))return!this.affected_attributes.get(t).has(r)&&(r=this.table_lookup.get(r),!r)?[]:this.affected_attributes.get(t).get(r)}getAllTables(){let t=[];if(!this.affected_attributes)return t;for(let r of this.affected_attributes.keys())t.push(Array.from(this.affected_attributes.get(r).keys()));return t}getTablesBySchemaName(t){return!t||!this.affected_attributes?[]:Array.from(this.affected_attributes.get(t).keys())}getSchemas(){return this.affected_attributes?Array.from(this.affected_attributes.keys()):[]}getAst(){return this.ast}updateAttributeWildcardsForRolePerms(t){let r=this.ast.columns.filter(s=>Sh.SEARCH_WILDCARDS.includes(s.columnid));if(r.length===0)return this.ast;let n=this.ast.from[0].databaseid;return this.ast.columns=this.ast.columns.filter(s=>!Sh.SEARCH_WILDCARDS.includes(s.columnid)),r.forEach(s=>{let i=this.table_to_schema_lookup.has(s.tableid)?this.table_to_schema_lookup.get(s.tableid):n,o=this.table_lookup.has(s.tableid)?this.table_lookup.get(s.tableid):this.ast.from[0].tableid;if(t[i]&&t[i].tables[o]&&t[i].tables[o][Sh.PERMS_CRUD_ENUM.READ]){let c;t[i].tables[o].attribute_permissions.length>0?c=Nle(t[i].tables[o].attribute_permissions):c=global.hdb_schema[i][o].attributes.map(u=>({attribute_name:u.attribute}));let l=this.affected_attributes.get(i).get(o).filter(u=>!Sh.SEARCH_WILDCARDS.includes(u));c.forEach(({attribute_name:u})=>{let f=new gh.yy.Column({columnid:u});s.tableid&&(f.tableid=s.tableid),this.ast.columns.push(f),l.includes(u)||l.push(u)}),this.affected_attributes.get(i).set(o,l)}}),this.ast}};function Nle(e){return e.filter(t=>t[Sh.PERMS_CRUD_ENUM.READ])}a(Nle,"filterReadRestrictedAttrs");function wle(e,t,r,n,s){Ile(e,t,r,n,s)}a(wle,"interpretAST");function Th(e,t,r,n,s){if(!(!e||!e.databaseid)&&(t.has(e.databaseid)||t.set(e.databaseid,new Map),t.get(e.databaseid).has(e.tableid)||t.get(e.databaseid).set(e.tableid,[]),e.as&&(r.has(e.as)||r.set(e.as,e.tableid),n&&!n.has(e.as)&&n.set(e.as,e.databaseid)),s)){let i=e.databaseid,o=e.tableid;e.as&&(o=e.as),s.set(o,i)}}a(Th,"addSchemaTableToMap");function Ile(e,t,r,n,s){if(!e){ei.info("getRecordAttributesAST: invalid SQL syntax tree");return}e instanceof gh.yy.Insert?Lle(e,t,r):e instanceof gh.yy.Select?Cle(e,t,r,n,s):e instanceof gh.yy.Update?Ple(e,t,r):e instanceof gh.yy.Delete?Dle(e,t,r):ei.error("AST in getRecordAttributesAST() is not a valid SQL type.")}a(Ile,"getRecordAttributesAST");function Cle(e,t,r,n,s){if(!e){ei.info("getSelectAttributes: invalid SQL syntax tree");return}if(!e.from||e.from[0]===void 0)return;let i=e.from[0].databaseid;if(Ole.isEmptyOrZeroLength(i)){ei.error("No schema specified");return}e.from.forEach(c=>{Th(c,t,r,n,s)}),e.joins&&e.joins.forEach(c=>{c.as&&(c.table.as=c.as),Th(c.table,t,r,n,s)});let o=new ml(e.columns);for(let{node:c}of o)if(c&&c.columnid){let l=c.tableid,u=n.has(l)?n.get(l):i;if(l||(l=e.from[0].tableid),!t.get(u).has(l))if(r.has(l))l=r.get(l);else{ei.info(`table specified as ${l} not found.`);return}t.get(u).get(l).indexOf(c.columnid)<0&&t.get(u).get(l).push(c.columnid)}if(e.where){let c=new ml(e.where),l=e.from[0].tableid;for(let{node:u}of c)if(u&&u.columnid){let f=u.tableid?u.tableid:l;if(!t.get(i).has(f))if(r.has(f))f=r.get(f);else{ei.info(`table specified as ${f} not found.`);continue}t.get(i).get(f).indexOf(u.columnid)<0&&t.get(i).get(f).push(u.columnid)}}if(e.joins&&e.joins.forEach(c=>{let l=new ml(c.on);for(let{node:u}of l)if(u&&u.columnid){let f=u.tableid,d=s.get(f);if(!t.get(d).has(f))if(r.has(f))f=r.get(f);else{ei.info(`table specified as ${f} not found.`);continue}t.get(d).get(f).indexOf(u.columnid)<0&&t.get(d).get(f).push(u.columnid)}}),e.order){let c=new ml(e.order);for(let{node:l}of c)if(l&&l.columnid){let u=l.tableid,f=n.has(u)?n.get(u):i;if(u||(u=e.from[0].tableid),!t.get(f).has(u))if(r.has(u))u=r.get(u);else{ei.info(`table specified as ${u} not found.`);return}t.get(f).get(u).indexOf(l.columnid)<0&&t.get(f).get(u).push(l.columnid)}}}a(Cle,"getSelectAttributes");function Ple(e,t,r){if(!e){ei.info("getUpdateAttributes: invalid SQL syntax tree");return}let n=new ml(e.columns),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.table.tableid,s,i.columnid,t,r)}a(Ple,"getUpdateAttributes");function Dle(e,t,r){if(!e){ei.info("getDeleteAttributes: invalid SQL syntax tree");return}let n=new ml(e.where),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.table.tableid,s,i.columnid,t,r)}a(Dle,"getDeleteAttributes");function Lle(e,t,r){if(!e){ei.info("getInsertAttributes: invalid SQL syntax tree");return}let n=new ml(e.columns),s=e.into.databaseid;Th(e.into,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.into.tableid,s,i.columnid,t,r)}a(Lle,"getInsertAttributes");function JN(e,t,r,n,s){if(!n.get(t))return;let i=e;n.get(t).has(i)||(i=s.get(i)),n.get(t).get(i).push(r)}a(JN,"pushAttribute");Yq.exports=QN});var jq=P((YPe,zq)=>{"use strict";var oS=(G(),D($)),aS=class{static{a(this,"BaseLicense")}constructor(t=0,r=oS.RAM_ALLOCATION_ENUM.DEFAULT,n=oS.LICENSE_VALUES.VERSION_DEFAULT,s){this.exp_date=t,this.ram_allocation=r,this.version=n,this.fingerprint=s}},XN=class extends aS{static{a(this,"ExtendedLicense")}constructor(t=0,r=oS.RAM_ALLOCATION_ENUM.DEFAULT,n=oS.LICENSE_VALUES.VERSION_DEFAULT,s,i=!1){super(t,r,n,s),this.enterprise=i}};zq.exports={BaseLicense:aS,ExtendedLicense:XN}});var sd=P((zPe,t$)=>{"use strict";var nd=require("fs-extra"),cS=(_E(),D(fE)),Jq=require("crypto"),Mle=require("moment"),vle=require("uuid").v4,Qr=X(),ew=require("path"),Ule=oe(),El=(G(),D($)),{totalmem:Qq}=require("os"),xle=jq().ExtendedLicense,rd="invalid license key format",Ble="061183",Hle="mofi25",kle="aes-256-cbc",Fle=16,Gle=32,Xq=ce(),{resolvePath:Zq}=Dt();Xq.initSync();var ZN;t$.exports={validateLicense:e$,generateFingerPrint:$le,licenseSearch:nw,getLicense:Yle,checkMemoryLimit:Wle};function tw(){return ew.join(Xq.getHdbBasePath(),El.LICENSE_KEY_DIR_NAME,El.LICENSE_FILE_NAME)}a(tw,"getLicenseDirPath");function qle(){let e=tw();return Zq(ew.join(e,El.LICENSE_FILE_NAME))}a(qle,"getLicenseFilePath");function rw(){let e=tw();return Zq(ew.join(e,El.REG_KEY_FILE_NAME))}a(rw,"getFingerPrintFilePath");async function $le(){let e=rw();try{return await nd.readFile(e,"utf8")}catch(t){if(t.code==="ENOENT")return await Vle();throw Qr.error(`Error writing fingerprint file to ${e}`),Qr.error(t),new Error("There was an error generating the fingerprint")}}a($le,"generateFingerPrint");async function Vle(){let e=vle(),t=cS.hash(e,cS.HASH_FUNCTION.MD5),r=rw();try{await nd.mkdirp(tw()),await nd.writeFile(r,t)}catch(n){if(n.code==="EEXIST")return t;throw Qr.error(`Error writing fingerprint file to ${r}`),Qr.error(n),new Error("There was an error generating the fingerprint")}return t}a(Vle,"writeFingerprint");function e$(e,t){let r={valid_license:!1,valid_date:!1,valid_machine:!1,exp_date:null,ram_allocation:El.RAM_ALLOCATION_ENUM.DEFAULT,version:El.LICENSE_VALUES.VERSION_DEFAULT};if(!e)return Qr.error("empty license key passed to validate."),r;let n=rw(),s=!1;try{s=nd.statSync(n)}catch(i){Qr.error(i)}if(s){let i;try{i=nd.readFileSync(n,"utf8")}catch{Qr.error("error validating this machine in the license"),r.valid_machine=!1;return}let o=e.split(Hle),c=o[1];c=Buffer.concat([Buffer.from(c)],Fle);let l=Buffer.concat([Buffer.from(i)],Gle),u=Jq.createDecipheriv(kle,l,c);r.valid_date=!0,r.valid_license=!0,r.valid_machine=!0;let f=null;try{f=u.update(o[0],"hex","utf8"),f.trim(),f+=u.final("utf8")}catch{let _=Kle(o[0],i);if(_)f=_;else throw r.valid_license=!1,r.valid_machine=!1,console.error(rd),Qr.error(rd),new Error(rd)}let d;if(isNaN(f))try{d=JSON.parse(f),r.version=d.version,r.exp_date=d.exp_date,isNaN(r.exp_date)&&(r.exp_date=new Date(r.exp_date).getTime()),d.ram_allocation&&(r.ram_allocation=d.ram_allocation)}catch{throw console.error(rd),Qr.error(rd),new Error(rd)}else r.exp_date=f;r.exp_date<Mle().valueOf()&&(r.valid_date=!1),cS.validate(o[1],`${Ble}${i}${t}`,cS.HASH_FUNCTION.MD5)||(r.valid_license=!1)}else r.valid_license=!1,r.valid_machine=!1;return r.valid_license&&r.valid_machine&&r.valid_date||Qr.error("Invalid licence"),r}a(e$,"validateLicense");function Kle(e,t){try{let r=Jq.createDecipher("aes192",t),n=r.update(e,"hex","utf8");return n.trim(),n+=r.final("utf8"),n}catch{Qr.warn("Check old license failed")}}a(Kle,"checkOldLicense");function nw(){let e=new xle,t=[];try{t=nd.readFileSync(qle(),"utf-8").split(`\r
+`,"")}a(Lk,"runCommand");async function vse(){try{await use.access(yO)}catch{return!1}let e=await Lk(`${yO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return dse.eq(t,Lse)}a(vse,"checkNATSServerInstalled");async function IO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await Pk.getClusterUser();if(il(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}js.trace("create nats connection called");let i=await yse({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:Nr.get(je.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&js.error("Error with Nats client connection, connection closed",o),i===zr&&Mk()}),i}a(IO,"createConnection");function Mk(){zr=void 0,rl=void 0,nl=void 0,sl=void 0}a(Mk,"clearClientCache");async function Use(){zr&&(await zr.drain(),zr=void 0,rl=void 0,nl=void 0,sl=void 0)}a(Use,"closeConnection");var zr,sl;async function W_(){return sl||(sl=IO(Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),zr=await sl),zr||sl}a(W_,"getConnection");async function z_(){if(rl)return rl;il(zr)&&await W_();let{domain:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(il(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return rl=await zr.jetstreamManager({domain:e,timeout:6e4}),rl}a(z_,"getJetStreamManager");async function vk(){if(nl)return nl;il(zr)&&await W_();let{domain:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(il(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return nl=zr.jetstream({domain:e,timeout:6e4}),nl}a(vk,"getJetStream");async function Mi(){let e=zr||await W_(),t=rl||await z_(),r=nl||await vk();return{connection:e,jsm:t,js:r}}a(Mi,"getNATSReferences");async function xse(e){let t=Nr.get(je.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await Pk.getClusterUser(),s=await IO(t,r,n),i=wO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=Dk.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await dg.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(xse,"getServerList");async function CO(e,t){let{jsm:r}=await Mi(),n=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:bse.File,retention:Ose.Limits,subjects:t,discard:Nse.Old,max_msgs:s,max_bytes:i,max_age:n})}a(CO,"createLocalStream");async function Uk(){let{jsm:e}=await Mi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(Uk,"listStreams");async function Bse(e){let{jsm:t}=await Mi();await t.streams.delete(e)}a(Bse,"deleteLocalStream");async function Hse(e){let{connection:t}=await Mi(),r=[],n=wO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(Dk.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(Hse,"listRemoteStreams");async function kse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=Nk(),o={durable_name:i,ack_policy:OO.Explicit};t&&(o.deliver_policy=NO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=bO(f.data),h={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(h.origin=f.headers.get(Ur.MSG_HEADERS.ORIGIN)),u.push(h),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(kse,"viewStream");async function*Fse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=Nk(),o={durable_name:i,ack_policy:OO.Explicit};t&&(o.deliver_policy=NO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=bO(u.data);f[0]||(f=[f]);for(let d of f){let h={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(h.origin=u.headers.get(Ur.MSG_HEADERS.ORIGIN)),yield h}if(u.ack(),u.info.pending===0)break}await c.delete()}a(Fse,"viewStreamIterator");async function Gse(e,t,r,n){js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=xk(n,r);let{js:s}=await Mi(),i=await _g(),o=`${e}.${i}`,c=await Pse(()=>n instanceof Uint8Array?n:Ck.encode(n));try{js.trace(`publishToStream publishing to subject: ${o}`),Cse(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return Hk(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await CO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(Gse,"publishToStream");function xk(e,t){t===void 0&&(t=Ise());let r=Nr.get(je.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Ur.MSG_HEADERS.ORIGIN)&&r&&t.append(Ur.MSG_HEADERS.ORIGIN,r),t}a(xk,"addNatsMsgHeader");function vu(e){e=e.toLowerCase();let t=Y_.join(Nr.get(je.CONFIG_PARAMS.ROOTPATH),Dse);if(e===je.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return il(RO)&&(RO={port:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.HUB,config_file:Ur.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:Y_.join(t,Ur.PID_FILES.HUB),hdb_nats_path:t}),RO;if(e===je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return il(AO)&&(AO={port:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.LEAF,config_file:Ur.NATS_CONFIG_FILES.LEAF_SERVER,domain:V_.getConfigFromFile(je.CONFIG_PARAMS.CLUSTERING_NODENAME)+Ur.SERVER_SUFFIX.LEAF,pid_file_path:Y_.join(t,Ur.PID_FILES.LEAF),hdb_nats_path:t}),AO;js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(vu,"getServerConfig");async function Bk(e,t,r,n){try{await e.consumers.add(t,{ack_policy:OO.Explicit,durable_name:r,deliver_policy:NO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(Bk,"createConsumer");async function qse(e,t,r){await e.consumers.delete(t,r)}a(qse,"removeConsumer");function $se(e){return e.split(".")[1]}a($se,"extractServerName");async function Vse(e,t,r=6e4,n=wO()){if(!dg.isObject(t))throw new Error("data param must be an object");let s=Ck.encode(t),{connection:i}=await Mi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return bO(c.data)}a(Vse,"request");function PO(e){return new Promise(async(t,r)=>{let n=pse(yO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(PO,"reloadNATS");async function Kse(){let{pid_file_path:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await PO(e)}a(Kse,"reloadNATSHub");async function Yse(){let{pid_file_path:e}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await PO(e)}a(Yse,"reloadNATSLeaf");function Wse(e,t,r){let n;switch(e.code){case Ok.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case Ok.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(Wse,"requestErrorHandler");async function zse(e,t){let r=t+Ur.SERVER_SUFFIX.LEAF,{connection:n}=await Mi(),{jsm:s}=await rie(r),{schema:i,table:o}=e,c=fg.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await Hk(async()=>{if(e.subscribe===!0)await Bk(s,c,n.info.server_name,l);else try{await qse(s,c,n.info.server_name)}catch(u){js.trace(u)}})}a(zse,"updateRemoteConsumer");async function jse(e,t,r,n){let s=fg.createNatsTableStreamName(e,t),i=r+Ur.SERVER_SUFFIX.LEAF,o={type:je.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!Ik&&Ase()<Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=TO();await c(o)}await Sse(o),n==="stop"&&await dg.async_set_timeout(1e3)}a(jse,"updateConsumerIterator");function Hk(e){return gse.writeTransaction(je.SYSTEM_SCHEMA_NAME,je.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(Hk,"exclusiveLock");async function kk(e,t){let r=fg.createNatsTableStreamName(e,t),n=await _g(),s=Zse(e,t,n);await CO(r,[s])}a(kk,"createLocalTableStream");async function Qse(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await kk(n,s)}}a(Qse,"createTableStreams");async function Fk(e,t,r=void 0){if(Nr.get(je.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=fg.createNatsTableStreamName(e,t),{domain:s}=vu(je.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await W_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")js.warn(n);else throw n}}a(Fk,"purgeTableStream");async function Jse(e,t){if(Nr.get(je.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await Fk(e,t[r])}a(Jse,"purgeSchemaTableStreams");async function Xse(e){return(await z_()).streams.info(e)}a(Xse,"getStreamInfo");function Zse(e,t,r){return`${Ur.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Zse,"createSubjectName");async function _g(){if(K_)return K_;if(K_=(await z_())?.nc?.info?.server_name,K_===void 0)throw new Error("Unable to get jetstream manager server name");return K_}a(_g,"getJsmServerName");async function eie(){let e=await z_(),t=await _g(),r=await Uk();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=tie(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(eie,"updateLocalStreams");function tie(e){let{config:t}=e,r=!1,n=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=Nr.get(je.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(tie,"updateStreamLimits");async function rie(e){let t,r;try{t=await zr.jetstream({domain:e}),r=await zr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(rie,"connectToRemoteJS")});function DO(e){let t=e.get(hg),r=t?(0,Uu.unpack)(t):null;r||(r={remoteNameToId:{}});let n=tt(),s=!1;r.nodeName=tt();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:Q_(e)??1,nodes:[]})})}i[n]=0,e.putSync(hg,(0,Uu.pack)(r))}return r}function j_(e){return DO(e).remoteNameToId}function $k(e,t){let r=DO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(hg,(0,Uu.pack)(r)),s}function pg(e,t){let r=DO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(hg,(0,Uu.pack)(r))}return qk.trace?.("The remote node name map",e,n,s),s}var qk,Uu,hg,LO=be(()=>{qk=M(pi());gs();Uu=require("msgpackr"),hg=Symbol.for("remote-ids");a(DO,"getIdMappingRecord");a(j_,"exportIdMapping");a($k,"remoteToLocalNodeId");a(pg,"getIdOfRemoteNode")});var MO={};Be(MO,{commits_awaiting_replication:()=>Bu,getHDBNodeTable:()=>sr,getReplicationSharedStatus:()=>mg,iterateRoutes:()=>X_,shouldReplicateToNode:()=>J_,subscribeToNodeUpdates:()=>Hu});function sr(){return Vk||(Vk=_t({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function mg(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Hu(e){sr().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;zk.debug?.("adding node",n,"on  node",tt()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==tt()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of sr().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function J_(e,t){return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&sr().primaryStore.get(tt())?.replicates||e.subscriptions?.some(r=>(r.database||r.schema)===t&&r.subscribe)}function nie(){Hu(e=>{Ta({},(t,r)=>{let n=e.name,s=Kk.get(n);if(s||Kk.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=mg(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of Bu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*X_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=xu.default.get(B.REPLICATION_SECUREPORT)??(!xu.default.get(B.REPLICATION_PORT)&&xu.default.get(B.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||xu.default.get(B.REPLICATION_PORT)||xu.default.get(B.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){Yk.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var Yk,Wk,xu,zk,Vk,Kk,Bu,ol=be(()=>{Ue();gs();$p();Yk=require("worker_threads"),Wk=M(he()),xu=M(ce());G();zk=M(pi());server.nodes=[];a(sr,"getHDBNodeTable");a(mg,"getReplicationSharedStatus");a(Hu,"subscribeToNodeUpdates");a(J_,"shouldReplicateToNode");Kk=new Map;yD((e,t,r)=>{if(r>server.nodes.length)throw new Wk.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);Bu||(Bu=new Map,nie());let n=Bu.get(e);return n||(n=[],Bu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(nie,"startSubscriptionToReplications");a(X_,"iterateRoutes")});var Jk={};Be(Jk,{connectedToNode:()=>al,disconnectedFromNode:()=>Fu,ensureNode:()=>go,requestClusterStatus:()=>Qk,startOnMainThread:()=>xO});async function xO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){Eg.set(i,Q_(l.auditStore));break}}}Ui.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of X_(e))try{let c=!o.subscriptions;if(c){let u=tt(),f=sr().primaryStore.get(u);if(f!==null){let d=e.url??Aa();(f===void 0||f.url!==d||f.shard!==e.shard)&&await go(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Hu(s)});let n;function s(i,o=i?.name){let c=tt()&&o===tt()||Aa()&&i?.url===Aa();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let h of sr().search([]))h.replicates&&h.name!==o&&s(h,h.name);n=d}if(nt.trace("Setting up node replication for",i),!i){for(let[d,h]of vi){let _;for(let[p,{worker:S,nodes:g}]of h){let R=g[0];if(R&&R.name==o){_=!0;for(let[E,{worker:T}]of h)h.delete(E),nt.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(_){vi.get(d).iterator.remove(),vi.delete(d);return}}return}if(c)return;if(!i.url){nt.info(`Node ${i.name} is missing url`);return}let l=vi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(nt.info(`Added node ${i.name} at ${i.url} for process ${tt()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,h]of ku)if(i.url===h.url){ku.delete(d);break}ku.set(i.name,i)}let u=Xe();if(l||(l=new Map,vi.set(i.url,l)),l.iterator=Ta(e,(d,h,_)=>{_?f(h,!0):f(h,!1)}),i.subscriptions)for(let d of i.subscriptions){let h=d.database||d.schema;u[h]||(nt.warn(`Database ${h} not found for node ${i.name}, making a subscription anyway`),f(h,!1))}function f(d,h){nt.trace("Setting up replication for database",d,"on node",i.name);let _=l.get(d),p,S=[{replicateByDefault:h,...i}];Eg.has(d)&&(S.push({replicateByDefault:h,name:tt(),start_time:Eg.get(d),end_time:Date.now(),replicates:!0}),Eg.delete(d));let g=J_(i,d),R=Ui.workers.filter(E=>E.name==="http");if(_?(p=_.worker,_.nodes=S):g&&(t=t%R.length,p=R[t++],l.set(d,{worker:p,nodes:S,url:i.url}),p?.on("exit",()=>{l.get(d)?.worker===p&&(l.delete(d),f(d,h))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};p?p.postMessage(E):Z_(E)},sie);else{nt.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],sr().primaryStore.get(tt())?.replicates),sr().primaryStore.get(tt())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};p?p.postMessage(E):Sg(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Fu=a(function(i){try{nt.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(ku.keys()),c=o.sort(),l=c.indexOf(i.name||Qs(i.url));if(l===-1){nt.warn("Disconnected node not found in node map",i.name,o);return}let u=vi.get(i.url),f=u?.get(i.database);if(!f){nt.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished||UO.default.get(B.REPLICATION_FAILOVER)===!1)return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let h=d.shard,_=(l+1)%c.length;for(;l!==_;){let p=c[_],S=ku.get(p);u=vi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==h){_=(_+1)%c.length;continue}let{worker:R,nodes:E}=g,T=!1;for(let O of f.nodes){if(E.some(v=>v.name===O.name)){nt.info(`Disconnected node is already failing over to ${p} for ${i.database}`);continue}O.end_time<Date.now()||(E.push(O),T=!0)}if(f.nodes=[f.nodes[0]],!T){nt.info(`Disconnected node ${i.name} has no nodes to fail over to ${p}`);return}nt.info(`Failing over ${i.database} from ${i.name} to ${p}`),R?R.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):Z_({database:i.database,nodes:E});return}nt.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){nt.error("Error failing over node",o)}},"disconnectedFromNode"),al=a(function(i){let o=vi.get(i.url),c=o?.get(i.database);if(!c){nt.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){nt.info("Connected node has no nodes",i.database,c);return}if(!l.name){nt.debug("Connected node is not named yet",i.database,c);return}c.nodes=[l];let u=!1;for(let f of vi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:h,nodes:_,connected:p}=d;if(_)if(p===!1&&_[0].shard===l.shard)u=!0,c.nodes.push(_[0]);else{let S=_.filter(g=>g.name!==l.name);S.length<_.length&&(d.nodes=S,h.postMessage({type:"subscribe-to-node",database:i.database,nodes:_}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,Ui.onMessageByType)("disconnected-from-node",Fu),(0,Ui.onMessageByType)("connected-to-node",al),(0,Ui.onMessageByType)("request-cluster-status",Qk)}function Qk(e,t){let r=[];for(let[n,s]of ku)try{let i=vi.get(s.url);nt.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:h}]of i)o.push({database:l,connected:f,latency:h,thread_id:u?.threadId,nodes:d.filter(_=>!(_.end_time<Date.now())).map(_=>_.name)});let c=(0,vO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){nt.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function go(e,t){let r=sr();e=e??Qs(t.url),t.name=e;try{if(t.ca){let s=new jk.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){nt.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(nt.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!UO.default.get(B.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,vO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}nt.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var Ui,gg,nt,vO,UO,jk,sie,vi,Fu,al,ku,Eg,eh=be(()=>{Ue();Ui=M(st());gs();gg=require("worker_threads");ol();nt=M(X()),vO=require("lodash"),UO=M(ce());G();jk=require("crypto"),sie=200,vi=new Map,ku=new Map,Eg=new Map;a(xO,"startOnMainThread");a(Qk,"requestClusterStatus");gg.parentPort&&(Fu=a(e=>{gg.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),al=a(e=>{gg.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,Ui.onMessageByType)("subscribe-to-node",e=>{Z_(e)}),(0,Ui.onMessageByType)("unsubscribe-from-node",e=>{Sg(e)}));a(go,"ensureNode")});var Zs=P(TF=>{"use strict";var ir=require("path"),{watch:iie}=require("chokidar"),Rn=require("fs-extra"),Gu=require("node-forge"),nF=require("net"),{generateKeyPair:HO,X509Certificate:So,createPrivateKey:sF}=require("crypto"),oie=require("util");HO=oie.promisify(HO);var yt=Gu.pki,Js=require("joi"),{v4:iF}=require("uuid"),{validateBySchema:qO}=it(),St=X(),Qn=ce(),Ss=(G(),D($)),{CONFIG_PARAMS:ll}=Ss,Xs=nb(),{ClientError:ya}=he(),Tg=require("node:tls"),{relative:oF,join:aie}=require("node:path"),{CERT_PREFERENCE_APP:FIe,CERTIFICATE_VALUES:Xk}=Xs,cie=uc(),kO=Dt(),{table:lie,getDatabases:uie,databases:BO}=(Ue(),D(ct)),{getJWTRSAKeys:Zk}=(Pu(),D(q_));Object.assign(TF,{generateKeys:KO,updateConfigCert:hF,createCsr:Eie,signCertificate:gie,setCertTable:qu,loadCertificates:dF,reviewSelfSignedCert:WO,createTLSSelector:mF,listCertificates:gF,addCertificate:bie,removeCertificate:Nie,createNatsCerts:Aie,generateCertsKeys:Tie,getReplicationCert:rh,getReplicationCertAuth:mie,renewSelfSigned:Rie,hostnamesFromCert:zO,getKey:wie});var{urlToNodeName:aF,getThisNodeUrl:die,getThisNodeName:Rg,clearThisNodeName:fie}=(gs(),D(Na)),{readFileSync:_ie,statSync:cF}=require("node:fs"),GIe=ce(),{getTicketKeys:hie,onMessageFromWorkers:pie}=st(),Ra=X(),{isMainThread:lF}=require("worker_threads"),{TLSSocket:uF,createSecureContext:qIe}=require("node:tls"),$O=3650,th=["127.0.0.1","localhost","::1"],VO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];pie(async e=>{e.type===Ss.ITC_EVENT_TYPES.RESTART&&(Qn.initSync(!0),await WO())});var xr;function Oa(){return xr||(xr=uie().system.hdb_certificate,xr||(xr=lie({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),xr}a(Oa,"getCertTable");async function rh(){let e=mF("operations-api"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(Rg());if(!r)return;let n=new So(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(rh,"getReplicationCert");async function mie(){Oa();let e=(await rh()).options.cert,r=new So(e).issuer.match(/CN=(.*)/)?.[1];return xr.get(r)}a(mie,"getReplicationCertAuth");var eF,ba=new Map;function dF(){if(eF)return;eF=!0;let e=[{configKey:ll.TLS},{configKey:ll.OPERATIONSAPI_TLS}];Oa();let t=ir.dirname(kO.getConfigFilePath()),r;for(let{configKey:n}of e){let s=kO.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&oF(aie(t,"keys"),o);c&&tF(o,l=>{ba.set(c,l)},"private key");for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&lF){let f;tF(u,d=>{if(Xk.cert===d)return;let h=i.hostname??i.hostnames??i.host??i.hosts;h&&!Array.isArray(h)&&(h=[h]);let _=pF(u),p=new So(_),S;try{S=SF(p)}catch(T){logger.error("error extracting host name from certificate",T);return}if(S==null){logger.error("No host name found on certificate");return}if(p.checkIssued(new So(Xk.cert)))return;let g=xr.primaryStore.get(S),R=cF(u).mtimeMs,E=!g||g.is_self_signed?1:g.file_timestamp??g.__updatedtime__;if(g&&R<=E){R<E&&St.info(`Certificate ${S} at ${u} is older (${new Date(R)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}r=xr.put({name:S,uses:["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:_,private_key_name:c,is_authority:l,hostnames:h,file_timestamp:R,details:{issuer:p.issuer.replace(/\n/g," "),subject:p.subject?.replace(/\n/g," "),subject_alt_name:p.subjectAltName,serial_number:p.serialNumber,valid_from:p.validFrom,valid_to:p.validTo}})},l?"certificate authority":"certificate")}}}}}return r}a(dF,"loadCertificates");function tF(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&lF&&St.warn(`Reloading ${r}:`,i),n=c,t(pF(i)))}catch(c){St.error(`Error loading ${r}:`,i,c)}},"loadFile");Rn.existsSync(e)?s(e,cF(e)):St.error(`${r} file not found:`,e),iie(e,{persistent:!1}).on("change",s)}a(tF,"loadAndWatch");function FO(){let e=die();if(e==null){let t=th[0];return St.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return aF(e)}a(FO,"getHost");function Ag(){let e=Rg();if(e==null){let t=th[0];return St.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(Ag,"getCommonName");async function Eie(){let e=await rh(),t=yt.certificateFromPem(e.options.cert),r=yt.privateKeyFromPem(e.options.key);St.info("Creating CSR with cert named:",e.name);let n=yt.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:Ag()},...VO];St.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:fF()}];return St.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),Gu.pki.certificationRequestToPem(n)}a(Eie,"createCsr");function fF(){let e=th.includes(Ag())?th:[...th,Ag()];return e.includes(FO())||e.push(FO()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>nF.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(fF,"certExtensions");async function gie(e){let t={},r=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;Oa();for await(let f of xr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(ba.has(f.private_key_name)){n=ba.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await Rn.exists(ir.join(r,f.private_key_name))){n=Rn.readFile(ir.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await GO();s=f.ca,n=f.private_key}n=yt.privateKeyFromPem(n),t.signingCA=s.certificate;let i=yt.certificateFromPem(s.certificate);St.info("Signing CSR with cert named",s.name);let o=yt.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return St.error(f),new Error("Error verifying CSR: "+f.message)}let c=Gu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+$O),St.info("sign cert setting validity:",c.validity),St.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),St.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;St.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,Gu.md.sha256.create()),t.certificate=yt.certificateToPem(c)}else St.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(gie,"signCertificate");async function Sie(e,t){await qu({name:Rg(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await qu({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:yt.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Sie,"createCertificateTable");async function qu(e){let t=new So(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},Oa(),await xr.patch(e)}a(qu,"setCertTable");async function KO(){let e=await HO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:yt.publicKeyFromPem(e.publicKey),private_key:yt.privateKeyFromPem(e.privateKey)}}a(KO,"generateKeys");async function YO(e,t,r){let n=yt.createCertificate();if(!t){let o=await rh();t=yt.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+$O);let i=[{name:"commonName",value:Ag()},...VO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(fF()),n.sign(e,Gu.md.sha256.create()),yt.certificateToPem(n)}a(YO,"generateCertificates");async function GO(){let e=await gF(),t;for(let r of e){if(!r.is_authority)continue;let n=await EF(r.private_key_name);if(r.private_key_name&&n&&new So(r.certificate).checkPrivateKey(sF(n))){St.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;St.trace("No CA found with matching private key")}a(GO,"getCertAuthority");async function _F(e,t,r=!0){let n=yt.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+$O);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Qn.get(ll.REPLICATION_HOSTNAME)??aF(Qn.get(ll.REPLICATION_URL))??iF().split("-")[0]}`},...VO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,Gu.md.sha256.create());let o=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),c=ir.join(o,Xs.PRIVATEKEY_PEM_NAME);return r&&await Rn.writeFile(c,yt.privateKeyToPem(e)),n}a(_F,"generateCertAuthority");async function Tie(){let{private_key:e,public_key:t}=await KO(),r=await _F(e,t),n=await YO(e,t,r);await Sie(n,r),hF()}a(Tie,"generateCertsKeys");async function Aie(){let e=await YO(yt.privateKeyFromPem(Xs.CERTIFICATE_VALUES.key),void 0,yt.certificateFromPem(Xs.CERTIFICATE_VALUES.cert)),t=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),r=ir.join(t,Xs.NATS_CERTIFICATE_PEM_NAME);await Rn.exists(r)||await Rn.writeFile(r,e);let n=ir.join(t,Xs.NATS_CA_PEM_NAME);await Rn.exists(n)||await Rn.writeFile(n,Xs.CERTIFICATE_VALUES.cert)}a(Aie,"createNatsCerts");async function Rie(){Oa();for await(let e of xr.search([{attribute:"is_self_signed",value:!0}]))await xr.delete(e.name);await WO()}a(Rie,"renewSelfSigned");async function WO(){fie(),await dF(),Oa();let e=await GO();if(!e){St.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:yt.privateKeyFromPem(Rn.readFileSync(u)),keyPath:u}}catch(f){return St.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Qn.get(ll.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Qn.get(ll.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),c=oF(o,i);s||(St.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await KO(),Rn.existsSync(ir.join(o,Xs.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${iF().split("-")[0]}.pem`),await Rn.writeFile(ir.join(o,c),yt.privateKeyToPem(s)));let l=await _F(s,yt.setRsaPublicKey(s.n,s.e),!1);await qu({name:l.subject.getField("CN").value,uses:["https"],certificate:yt.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await rh()){let r=Rg();St.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await GO();let n=yt.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await YO(yt.privateKeyFromPem(e.private_key),s,n);await qu({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(WO,"reviewSelfSignedCert");function hF(){let e=cie(Object.keys(Ss.CONFIG_PARAM_MAP),!0),t=ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME),r=ir.join(t,Xs.PRIVATEKEY_PEM_NAME),n=ir.join(t,Xs.NATS_CERTIFICATE_PEM_NAME),s=ir.join(t,Xs.NATS_CA_PEM_NAME),i=Ss.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),kO.updateConfigValue(void 0,void 0,o,!1,!0)}a(hF,"updateConfigCert");function pF(e){return e.startsWith("-----BEGIN")?e:_ie(e,"utf8")}a(pF,"readPEM");var rF=Tg.createSecureContext;Tg.createSecureContext=function(e){if(!e.cert||!e.key)return rF(e);let t={...e};delete t.key,delete t.cert;let r=rF(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var yie=uF.prototype._init;uF.prototype._init=function(e,t){yie.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var cl=new Map;function mF(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),cl.clear();let f=0;for await(let d of BO.system.hdb_certificate.search([])){let h=d.certificate,_=new So(h);d.is_authority&&(_.asString=h,cl.set(_.subject,h))}for await(let d of BO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let h=e==="operations-api",_=d.is_self_signed?1:2;h&&d.uses?.includes?.("operations")&&(_+=1);let p=await EF(d.private_key_name),S=d.certificate,g=new So(S);if(cl.has(g.issuer)&&(S+=`
+`+cl.get(g.issuer)),!p||!S)throw new Error("Missing private key or certificate for secure server");let R={ciphers:d.ciphers,ticketKeys:hie(),availableCAs:cl,ca:t&&Array.from(cl.values()),cert:S,key:p,key_file:d.private_key_name,is_self_signed:d.is_self_signed};o&&(R.sessionIdContext=o.sessionIdContext);let E=Tg.createSecureContext(R);E.name=d.name,E.options=R,E.quality=_,E.certificateAuthorities=Array.from(cl),E.certStart=S.toString().slice(0,100);let T=d.hostnames??zO(g);Array.isArray(T)||(T=[T]);let O;for(let v of T)if(v){v[0]==="*"&&(s=!0,v=v.slice(1)),v===FO()&&(_+=2),nF.isIP(v)&&(O=!0);let F=r.get(v)?.quality??0;_>F&&r.set(v,E)}else Ra.error("No hostname found for certificate at",Tg.certificate);Ra.trace("Adding TLS",E.name,"for",o.ports||"client","cert named",d.name,"hostnames",T,"quality",_,"best quality",f),_>f&&(i.defaultContext=n=E,f=_,o&&(o.defaultContext=E))}catch(h){Ra.error("Error applying TLS for",d.name,h)}o?.secureContextsListeners.forEach(d=>d()),c(n)}catch(f){l(f)}}a(u,"updateTLS"),BO.system.hdb_certificate.subscribe({listener:a(()=>setTimeout(()=>u(),1500).unref(),"listener"),omitCurrent:!0}),u()})),i;function i(o,c){Ra.info("TLS requested for",o||"(no SNI)");let l=o;for(;;){let f=r.get(l);if(f)return Ra.debug("Found certificate for",o,f.certStart),f.updatedContext&&(f=f.updatedContext),c(null,f);if(s&&l){let d=l.indexOf(".",1);d<0?l="":l=l.slice(d)}else break}o?Ra.debug("No certificate found to match",o,"using the default certificate"):Ra.debug("No SNI, using the default certificate",n?.name);let u=n;u?u.updatedContext&&(u=u.updatedContext):Ra.info("No default certificate found"),c(null,u)}a(i,"SNICallback")}a(mF,"createTLSSelector");async function EF(e){let t=ba.get(e);return!t&&e?await Rn.readFile(ir.join(Qn.get(ll.ROOTPATH),Ss.LICENSE_KEY_DIR_NAME,e),"utf8"):t}a(EF,"getPrivateKeyByName");async function gF(){Oa();let e=[];for await(let t of xr.search([]))e.push(t);return e}a(gF,"listCertificates");async function bie(e){let t=qO(e,Js.object({name:Js.string().required(),certificate:Js.string().required(),is_authority:Js.boolean().required(),private_key:Js.string(),hosts:Js.array(),uses:Js.array()}));if(t)throw new ya(t.message);let{name:r,certificate:n,private_key:s,is_authority:i}=e,o=new So(n),c=!1,l=!1,u;for(let[_,p]of ba)!s&&!c&&o.checkPrivateKey(sF(p))&&(c=!0,u=_),s&&s===p&&(l=!0,u=_);if(!i&&!s&&!c)throw new ya("A suitable private key was not found for this certificate");let f;if(!r){try{f=SF(o)}catch(_){St.error(_)}if(f==null)throw new ya("Error extracting certificate common name, please provide a name parameter")}let d=Oie(r??f);s&&!c&&!l&&(await Rn.writeFile(ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME,d+".pem"),s),ba.set(d,s));let h={name:r??f,certificate:n,is_authority:i,hosts:e.hosts,uses:e.uses};return(!i||i&&u||i&&s)&&(h.private_key_name=u??d+".pem"),e.ciphers&&(h.ciphers=e.ciphers),await qu(h),"Successfully added certificate: "+d}a(bie,"addCertificate");function Oie(e){return e.replace(/[^a-z0-9\.]/gi,"-")}a(Oie,"sanitizeName");async function Nie(e){let t=qO(e,Js.object({name:Js.string().required()}));if(t)throw new ya(t.message);let{name:r}=e;Oa();let n=await xr.get(r);if(!n)throw new ya(r+" not found");let{private_key_name:s}=n;if(s){let i=Array.from(await xr.search([{attribute:"private_key_name",value:s}]));i.length===1&&i[0].name===r&&(St.info("Removing private key named",s),await Rn.remove(ir.join(Qn.getHdbBasePath(),Ss.LICENSE_KEY_DIR_NAME,s)))}return await xr.delete(r),"Successfully removed "+r}a(Nie,"removeCertificate");function SF(e){let t=e.subject?.match(/CN=(.*)/)?.[1];return t||zO(e)[0]}a(SF,"getPrimaryHostName");function zO(e){if(e.subjectAltName)return e.subjectAltName.split(",").map(r=>{let n=r.indexOf(":");if(r=r.slice(n+1),r=r.trim(),r[0]==='"')try{r=JSON.parse(r)}catch{}return r.indexOf("=")>-1?r.match(/CN=([^,]*)/)?.[1]:r}).filter(r=>r);let t=certObj.subject?.match(/CN=(.*)/)?.[1];return t?[t]:[]}a(zO,"hostnamesFromCert");async function wie(e){if(e.bypass_auth!==!0)throw new ya("Unauthorized","401");let t=qO(e,Js.object({name:Js.string().required()}));if(t)throw new ya(t.message);let{name:r}=e;if(r===".jwtPrivate")return(await Zk()).privateKey;if(r===".jwtPublic")return(await Zk()).publicKey;if(ba.get(r))return ba.get(e.name);throw new ya("Key not found")}a(wie,"getKey")});var qF={};Be(qF,{CONFIRMATION_STATUS_POSITION:()=>kF,NodeReplicationConnection:()=>Vu,OPERATION_REQUEST:()=>XO,RECEIVED_TIME_POSITION:()=>eN,RECEIVED_VERSION_POSITION:()=>ZO,RECEIVING_STATUS_POSITION:()=>tN,RECEIVING_STATUS_RECEIVING:()=>GF,RECEIVING_STATUS_WAITING:()=>FF,SENDING_TIME_POSITION:()=>nh,createWebSocket:()=>Cg,database_subscriptions:()=>Ia,replicateOverWS:()=>sh,table_update_listeners:()=>nN});async function Cg(e,t){let{authorization:r,rejectUnauthorized:n}=t||{},s=tt(),i;if(e==null)throw new TypeError(`Invalid URL: Expected a string URL for node "${s}" but received ${e}`);if(e.includes("wss://")){if(!QO){let l=(0,UF.createTLSSelector)("operations-api"),u={secureContexts:null};await l.initialize(u),QO=u.secureContexts}if(i=QO.get(s),i&&ae.debug?.("Creating web socket for URL",e,"with certificate named:",i.name),!i&&n!==!1)throw new Error("Unable to find a valid certificate to use for replication to connect to "+e)}let o={};r&&(o.Authorization=r);let c={headers:o,localAddress:s?.startsWith("127.0")?s:void 0,servername:(0,BF.isIP)(t?.serverName)?void 0:t?.serverName,noDelay:!0,highWaterMark:128*1024,rejectUnauthorized:n!==!1,secureContext:void 0};return i&&(Ig?.caCount!==To.size&&(Ig=xF.createSecureContext({...i.options,ca:[...To,...i.options.availableCAs.values()]}),Ig.caCount=To.size),c.secureContext=Ig),new MF.WebSocket(e,"harperdb-replication-v1",c)}function sh(e,t,r){let n=t.port||t.securePort,s=ul.pid%1e3+"-"+vF.threadId+(n?"s:"+n:"c:"+t.url?.slice(-4))+" "+Math.random().toString().slice(2,3),i=0,o=Buffer.allocUnsafeSlow(1024),c=0,l=new DataView(o.buffer,0,1024),u=t.database,f=t.databaseSubscriptions||Ia,d,h,_=!1,p=t.subscription;p?.then&&p.then(A=>p=A);let S=t.tables||u&&Xe()[u];if(!r){ae.error?.("No authorization provided"),sn(1008,"Unauthorized");return}let g=new Map,R=[],E=r.name;E&&t.connection&&(t.connection.nodeName=E);let T,O,v,F,q,j,te,se=6e4,z,ne=0,le=0,ie=0,Re=LF.default.get(B.REPLICATION_BLOBTIMEOUT)??12e4,pe=new Map,Ae=[],Bt=0,dt;if(t.url){let A=a(()=>{q&&le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten?e.terminate():(q=performance.now(),e.ping(),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten)},"send_ping");v=setInterval(A,PF).unref(),A()}else Cn();e._socket?.setMaxListeners(200);function Cn(){clearTimeout(F),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten,F=setTimeout(()=>{le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten&&(ae.warn?.(`Timeout waiting for ping from ${E}, terminating connection and reconnecting`),e.terminate())},PF*2).unref()}a(Cn,"resetPingTimer");function nn(){return h||(h=mg(d,u,E)),h}a(nn,"getSharedStatus"),u&&zo(u);let wr,kd,nc=[],jT=[],QT,Ht=[],Fd=[],Gd=[],JT=150,Sp=25,qd=0,De=0,$d=!1,Wi,Ir,Pn,sc;e.on("message",A=>{ne=performance.now();try{let w=A.dataView=new wc(A.buffer,A.byteOffset,A.byteLength);if(A[0]>127){let N=(0,et.decode)(A),[H,U,Q]=N;switch(H){case RF:{if(U){if(E){if(E!==U){ae.error?.(s,`Node name mismatch, expecting to connect to ${E}, but peer reported name as ${U}, disconnecting`),e.send((0,et.encode)([$u])),sn(1008,"Node name mismatch");return}}else if(E=U,t.connection?.tentativeNode){let Y=t.connection.tentativeNode;Y.name=E,t.connection.tentativeNode=null,go(E,Y)}if(t.connection&&(t.connection.nodeName=E),ae.debug?.(s,"received node name:",E,"db:",u),!u)try{zo(u=N[2]),u==="system"&&(wr=Ta(t,(Y,V)=>{Wo(V)&&Yd(V)}),e.on("close",()=>{wr?.remove()}))}catch(Y){ae.warn?.(s,"Error setting database",Y),e.send((0,et.encode)([$u])),sn(1008,Y.message);return}Yo()}break}case IF:{ae.debug?.(s,"Received table definitions for",U.map(Y=>Y.table));for(let Y of U){let V=N[2];Y.database=V;let ue;Wo(V)&&(V==="system"?Ye[V]?.[Y.table]||(ue=C(Y,Ye[V]?.[Y.table])):ue=C(Y,Ye[V]?.[Y.table]),d||(d=ue?.auditStore),S||(S=Xe()?.[V]))}break}case $u:sn();break;case XO:try{let Y=r?.replicates||r?.subscribers||r?.name;server.operation(U,{user:r},!Y).then(V=>{Array.isArray(V)&&(V={results:V}),V.requestId=U.requestId,e.send((0,et.encode)([bg,V]))},V=>{e.send((0,et.encode)([bg,{requestId:U.requestId,error:V instanceof Error?V.toString():V}]))})}catch(Y){e.send((0,et.encode)([bg,{requestId:U.requestId,error:Y instanceof Error?Y.toString():Y}]))}break;case bg:let{resolve:J,reject:k}=g.get(U.requestId);U.error?k(new Error(U.error)):J(U),g.delete(U.requestId);break;case jO:let Ce=N[3];S||(u?ae.error?.(s,"No tables found for",u):ae.error?.(s,"Database name never received"));let de=S[Ce];de=C({table:Ce,database:u,attributes:U.attributes,schemaDefined:U.schemaDefined},de),nc[Q]={name:Ce,decoder:new et.Packr({useBigIntExtension:!0,randomAccessStructure:!0,freezeData:!0,typedStructs:U.typedStructs,structures:U.structures}),getEntry(Y){return de.primaryStore.getEntry(Y)},rootStore:de.primaryStore.rootStore};break;case yF:sc=d?$k(U,d):new Map,QT=N[2],ae.debug?.(s,`Acknowledged subscription request, receiving messages for nodes: ${QT}`);break;case bF:let ye=Q;Gd[ye]=U;break;case wF:nn()[kF]=U,ae.trace?.(s,"received and broadcasting committed update",U),nn().buffer.notify();break;case NF:T=U,p.send({type:"end_txn",localTime:T,remoteNodeIds:R});break;case Og:{let Y=N[1],{fileId:V,size:ue,finished:_e,error:me}=Y,Te=pe.get(V);ae.debug?.("Received blob",V,"has stream",!!Te,"connectedToBlob",!!Te?.connectedToBlob,"length",N[2].length,"finished",_e),Te||(Te=new JO.PassThrough,Te.expectedSize=ue,pe.set(V,Te)),Te.lastChunk=Date.now();let Pe=N[2];Lt(Pe.byteLength,"bytes-received",`${E}.${u}`,"replication","blob");try{_e?(me?(Te.on("error",()=>{}),Te.destroy(new Error("Blob error: "+me+" for record "+(Te.recordId??"unknown")+" from "+E))):Te.end(Pe),Te.connectedToBlob&&pe.delete(V)):Te.write(Pe)}catch(Ve){ae.error?.(`Error receiving blob for ${Te.recordId} from ${E} and streaming to storage`,Ve),pe.delete(V)}break}case OF:{let Y=U,V;try{let ue=N[3],_e=jT[Q]||(jT[Q]=S[N[4]]);if(!_e)return ae.warn?.("Unknown table id trying to handle record request",Q);let me=_e.primaryStore.getBinaryFast(Symbol.for("structures")),Te=me?.length;if(Te>0&&Te!==De){De=Te;let Ve=(0,et.decode)(me);e.send((0,et.encode)([jO,{typedStructs:Ve.typed,structures:Ve.named},Q,_e.tableName]))}let Pe=_e.primaryStore.getBinaryFast(ue);if(Pe){let Ve=_e.primaryStore.decoder.decode(Pe,{valueAsBuffer:!0}),We=Ve.value;Ve[Ac]&_n&&(We=Buffer.from(We),Of(()=>_e.primaryStore.decoder.decode(Pe),Dn=>ic(Dn,ue),_e.primaryStore.rootStore)),V=(0,et.encode)([yg,Y,{value:We,expiresAt:Ve.expiresAt,version:Ve.version,residencyId:Ve.residencyId,nodeId:Ve.nodeId,user:Ve.user}])}else V=(0,et.encode)([yg,Y])}catch(ue){V=(0,et.encode)([yg,Y,{error:ue.message}])}e.send(V);break}case yg:{let{resolve:Y,reject:V,tableId:ue,key:_e}=g.get(N[1]),me=N[2];if(me?.error)V(new Error(me.error));else if(me){let Te;lm(()=>{let Pe=nc[ue].decoder.decode(me.value);me.value=Pe,me.key=_e,Y(me)||Te&&setTimeout(()=>Te.forEach(om),6e4).unref()},Pe=>{let Ve=Vd(Pe,_e);return Te||(Te=[]),Te.push(Ve),Ve})}else Y();g.delete(N[1]);break}case AF:{Pn=U;let Y,V,ue=!1;if(p){if(u!==p.databaseName&&!p.then){ae.error?.("Subscription request for wrong database",u,p.databaseName);return}}else p=f.get(u);if(ae.debug?.(s,"received subscription request for",u,"at",Pn),!p){let we;p=new Promise(kt=>{ae.debug?.("Waiting for subscription to database "+u),we=kt}),p.ready=we,Ia.set(u,p)}if(r.name)V=sr().subscribe(r.name),V.then(async we=>{Y=we;for await(let kt of Y){let Ot=kt.value;if(!(Ot?.replicates===!0||Ot?.replicates?.receives||Ot?.subscriptions?.some(Rr=>(Rr.database||Rr.schema)===u&&Rr.publish!==!1))){ue=!0,e.send((0,et.encode)([$u])),sn(1008,`Unauthorized database subscription to ${u}`);return}}},we=>{ae.error?.(s,"Error subscribing to HDB nodes",we)});else if(!(r?.role?.permission?.super_user||r.replicates)){e.send((0,et.encode)([$u])),sn(1008,`Unauthorized database subscription to ${u}`);return}if(Ir&&(ae.debug?.(s,"stopping previous subscription",u),Ir.emit("close")),Pn.length===0)return;let _e=Pn[0],me=a(we=>{if(we&&(_e.replicateByDefault?!_e.tables.includes(we.tableName):_e.tables.includes(we.tableName)))return{table:we}},"tableToTableEntry"),Te={txnTime:0},Pe,Ve,We=1/0,Dn,os=a((we,kt)=>{if(we.type==="end_txn"){Te.txnTime&&(o[i]!==66&&ae.error?.("Invalid encoding of message"),K(9),K(Im),y(Dn=kt),Ap()),i=c,Te.txnTime=0;return}let Ot=we.nodeId,Rr=we.tableId,At=Ve[Rr];if(!At&&(At=Ve[Rr]=me(p.tableById[Rr]),!At))return ae.debug?.("Not subscribed to table",Rr);let as=At.table,Nt=as.primaryStore,vs=Nt.encoder;(we.extendedType&pm||!vs.typedStructs)&&(vs._mergeStructures(vs.getStructures()),vs.typedStructs&&(vs.lastTypedStructuresLength=vs.typedStructs.length));let Fl=Pe[Ot];if(!(Fl&&Fl.startTime<kt&&(!Fl.endTime||Fl.endTime>kt)))return wg&&ae.trace?.(s,"skipping replication update",we.recordId,"to:",E,"from:",Ot,"subscribed:",Pe),iP();wg&&ae.trace?.(s,"sending replication update",we.recordId,"to:",E,"from:",Ot,"subscribed:",Pe);let XT=we.version;Te.txnTime!==XT&&(Te.txnTime&&(wg&&ae.trace?.(s,"new txn time, sending queued txn",Te.txnTime),o[i]!==66&&ae.error?.("Invalid encoding of message"),Ap()),Te.txnTime=XT,i=c,y(XT));let cc=we.residencyId,ZT=Kd(cc,as),Rp;if(ZT&&!ZT.includes(E)){let Us=Kd(we.previousResidencyId,as);if(Us&&!Us.includes(E)&&(we.type==="put"||we.type==="patch")||as.getResidencyById)return iP();let Wd=we.recordId;ae.trace?.(s,"sending invalidation",Wd,E,"from",Ot);let zd=0;cc&&(zd|=bc),we.previousResidencyId&&(zd|=Oc);let rA,yp=null;for(let oP in as.indices){if(!yp){if(rA=we.getValue(Nt,!0),!rA)break;yp={}}yp[oP]=rA[oP]}Rp=Rc(we.version,Rr,Wd,null,Ot,we.user,we.type==="put"||we.type==="patch"?"invalidate":we.type,vs.encode(yp),zd,cc,we.previousResidencyId,we.expiresAt)}function iP(){return ae.trace?.(s,"skipping audit record",we.recordId),j||(j=setTimeout(()=>{j=null,(Dn||0)+CF/2<We&&(wg&&ae.trace?.(s,"sending skipped sequence update",We),e.send((0,et.encode)([NF,We])))},CF).unref()),new Promise(setImmediate)}a(iP,"skipAuditRecord");let eA=vs.typedStructs,tA=vs.structures;if((eA?.length!=At.typed_length||tA?.length!=At.structure_length)&&(At.typed_length=eA?.length,At.structure_length=tA.length,ae.debug?.(s,"send table struct",At.typed_length,At.structure_length),At.sentName||(At.sentName=!0),e.send((0,et.encode)([jO,{typedStructs:eA,structures:tA,attributes:as.attributes,schemaDefined:as.schemaDefined},Rr,At.table.tableName]))),cc&&!Fd[cc]&&(e.send((0,et.encode)([bF,ZT,cc])),Fd[cc]=!0),Rp)K(Rp.length),m(Rp);else{let Us=we.encoded;we.extendedType&_n&&Of(()=>we.getValue(Nt),zd=>ic(zd,we.recordId),Nt.rootStore);let Wd=Us[0]===66?8:0;K(Us.length-Wd),m(Us,Wd),ae.trace?.("wrote record",we.recordId,"length:",Us.length)}return e._socket.writableNeedDrain?new Promise(Us=>{ae.debug?.(`Waiting for remote node ${E} to allow more commits ${e._socket.writableNeedDrain?"due to network backlog":"due to requested flow directive"}`),e._socket.once("drain",Us)}):Bt>Sp?new Promise(Us=>{dt=Us}):new Promise(setImmediate)},"sendAuditRecord"),Ap=a(()=>{c-i>8?(e.send(o.subarray(i,c)),ae.debug?.(s,"Sent message, size:",c-i),Lt(c-i,"bytes-sent",`${E}.${u}`,"replication","egress")):ae.debug?.(s,"skipping empty transaction")},"sendQueuedData");Ir=new rN.EventEmitter,Ir.once("close",()=>{ue=!0,Y?.end()});for(let{startTime:we}of Pn)we<We&&(We=we);(V||Promise.resolve()).then(async()=>{p=await p,d=p.auditStore,Ve=p.tableById.map(me),Pe=[];for(let{name:kt,startTime:Ot,endTime:Rr}of Pn){let At=pg(kt,d);ae.debug?.("subscription to",kt,"using local id",At,"starting",Ot),Pe[At]={startTime:Ot,endTime:Rr}}Yd(u),wr||(wr=Zc(kt=>{kt.databaseName===u&&Yd(u)}),kd=L_(kt=>{kt===u&&(e.send((0,et.encode)([$u])),sn())}),e.on("close",()=>{wr?.remove(),kd?.remove()})),e.send((0,et.encode)([yF,j_(p.auditStore),Pn.map(({name:kt})=>kt)]));let we=!0;do{isFinite(We)||(ae.warn?.("Invalid sequence id "+We),sn(1008,"Invalid sequence id"+We));let kt;if(we&&!ue&&(we=!1,We===0)){let Ot=We,Rr=Pg(d);for(let At in S){if(!me(At))continue;let as=S[At];ae.warn?.(`Fully copying ${At} table to ${E}`);for(let Nt of as.primaryStore.getRange({snapshot:!1,versions:!0})){if(ue)return;if(Nt.localTime>=We){ae.trace?.(s,"Copying record from",u,At,Nt.key,Nt.localTime),Ot=Math.max(Nt.localTime,Ot),kt=!0,nn()[nh]=1;let vs=Rc(Nt.version,as.tableId,Nt.key,null,Rr,null,"put",Of(()=>as.primaryStore.encoder.encode(Nt.value),Fl=>ic(Fl,Nt.key)),Nt.metadataFlags&-256,Nt.residencyId,null,Nt.expiresAt);await os({recordId:Nt.key,tableId:as.tableId,type:"put",getValue(){return Nt.value},encoded:vs,version:Nt.version,residencyId:Nt.residencyId,nodeId:Rr,extendedType:Nt.metadataFlags},Nt.localTime)}}}kt&&os({type:"end_txn"},We),nn()[nh]=0,We=Ot}for(let{key:Ot,value:Rr}of d.getRange({start:We||1,exclusiveStart:!0,snapshot:!1})){if(ue)return;let At=It(Rr);ae.debug?.("sending audit record",new Date(Ot)),nn()[nh]=Ot,We=Ot,await os(At,Ot),Ir.startTime=Ot,kt=!0}kt&&os({type:"end_txn"},We),nn()[nh]=0,await xL(d)}while(!ue)}).catch(we=>{ae.error?.(s,"Error handling subscription to node",we),sn(1008,"Error handling subscription to node")});break}}return}w.position=8;let b=!0,I,x;do{nn();let N=w.readInt();if(N===9&&w.getUint8(w.position)==Im){w.position++,T=x=w.readFloat64(),h[ZO]=T,h[eN]=Date.now(),h[tN]=FF,ae.trace?.("received remote sequence update",T,u);break}let H=w.position,U=It(A,H,H+N),Q=nc[U.tableId];Q||ae.error?.(`No table found with an id of ${U.tableId}`);let J;U.residencyId&&(J=Gd[U.residencyId],ae.trace?.(s,"received residency list",J,U.type,U.recordId));try{let k=U.recordId;lm(()=>{I={table:Q.name,id:k,type:U.type,nodeId:sc.get(U.nodeId),residencyList:J,timestamp:U.version,value:U.getValue(Q),user:U.user,beginTxn:b,expiresAt:U.expiresAt}},Ce=>Vd(Ce,k))}catch(k){throw k.message+="typed structures for current decoder"+JSON.stringify(Q.decoder.typedStructs),k}b=!1,ae.trace?.(s,"received replication message",U.type,"id",I.id,"version",new Date(U.version),"nodeId",I.nodeId),h[ZO]=U.version,h[eN]=Date.now(),h[tN]=GF,p.send(I),w.position=H+N}while(w.position<A.byteLength);qd++,Lt(A.byteLength,"bytes-received",`${E}.${u}.${I?.table||"unknown_table"}`,"replication","ingest"),qd>JT&&!$d&&($d=!0,e.pause(),ae.debug?.(`Commit backlog causing replication back-pressure, requesting that ${E} pause replication`)),p.send({type:"end_txn",localTime:T,remoteNodeIds:R,async onCommit(){if(I){let N=Date.now()-I.timestamp;Lt(N,"replication-latency",E+"."+u+"."+I.table,I.type,"ingest")}qd--,$d&&($d=!1,e.resume(),ae.debug?.(`Replication resuming ${E}`)),Ae.length>0&&await Promise.all(Ae),ae.trace?.("All blobs finished"),!O&&x&&(ae.trace?.(s,"queuing confirmation of a commit at",x),setTimeout(()=>{e.send((0,et.encode)([wF,O])),ae.trace?.(s,"sent confirmation of a commit at",O),O=null},Cie)),O=x,ae.debug?.("last sequence committed",new Date(x),u)}})}catch(w){ae.error?.(s,"Error handling incoming replication message",w)}}),e.on("ping",Cn),e.on("pong",()=>{t.connection&&(t.connection.latency=performance.now()-q,t.isSubscriptionConnection&&al({name:E,database:u,url:t.url,latency:t.connection.latency})),q=null}),e.on("close",(A,w)=>{clearInterval(v),clearTimeout(F),clearInterval(te),Ir&&Ir.emit("close"),Wi&&Wi.end();for(let[b,{reject:I}]of g)I(new Error(`Connection closed ${w?.toString()} ${A}`));ae.debug?.(s,"closed",A,w?.toString())});function sn(A,w){e.isFinished=!0,e.close(A,w),t.connection?.emit("finished")}a(sn,"close");let Cr=new Set;async function ic(A,w){let b=am(A);if(Cr.has(b)){ae.debug?.("Blob already being sent",b);return}Cr.add(b);try{let I;Bt++;for await(let x of A.stream())I&&(ae.debug?.("Sending blob chunk",b,"length",I.length),e.send((0,et.encode)([Og,{fileId:b,size:A.size},I]))),I=x,e._socket.writableNeedDrain&&(ae.debug?.("draining",b),await new Promise(N=>e._socket.once("drain",N)),ae.debug?.("drained",b)),Lt(x.length,"bytes-sent",`${E}.${u}`,"replication","blob");ae.debug?.("Sending final blob chunk",b,"length",I.length),e.send((0,et.encode)([Og,{fileId:b,size:A.size,finished:!0},I]))}catch(I){ae.warn?.("Error sending blob",I,"blob id",b,"for record",w),e.send((0,et.encode)([Og,{fileId:b,finished:!0,error:I.toString()},Buffer.alloc(0)]))}finally{Cr.delete(b),Bt--,Bt<Sp&&dt?.()}}a(ic,"sendBlobs");function Vd(A,w){let b=am(A),I=pe.get(b);ae.debug?.("Received transaction for record",w,"with blob",b,"has stream",!!I,"ended",!!I?.writableEnded),I?I.writableEnded&&pe.delete(b):(I=new JO.PassThrough,pe.set(b,I)),I.connectedToBlob=!0,I.lastChunk=Date.now(),I.recordId=w,A.size===void 0&&I.expectedSize&&(A.size=I.expectedSize);let x=I.blob??createBlob(I,A);I.blob=x;let N=x.save({primaryStore:p.auditStore});return N&&(N.blobId=b,Ae.push(N),N.finally(()=>{ae.debug?.(`Finished receiving blob stream ${b}`),Ae.splice(Ae.indexOf(N),1)})),x}a(Vd,"receiveBlobs");function Yo(){if(_||(_=!0,t.connection?.on("subscriptions-updated",Yo)),t.connection?.isFinished)throw new Error("Can not make a subscription request on a connection that is already closed");let A=new Map;d||(d=p?.auditStore);try{for(let I of p?.dbisDB?.getRange({start:Symbol.for("seq"),end:[Symbol.for("seq"),Buffer.from([255])]})||[])for(let x of I.value.nodes||[])x.lastTxnTime>(A.get(x.id)??0)&&A.set(x.id,x.lastTxnTime)}catch(I){if(!I.message.includes("Can not re"))throw I}let w=t.connection?.nodeSubscriptions?.[0];R=[];let b=t.connection?.nodeSubscriptions?.map((I,x)=>{let N=[],{replicateByDefault:H}=I;if(I.subscriptions){for(let k of I.subscriptions)if(k.subscribe&&(k.schema||k.database)===u){let Ce=k.table;S?.[Ce]?.replicate!==!1&&N.push(Ce)}H=!1}else for(let k in S)(H?S[k].replicate===!1:S[k].replicate)&&N.push(k);let U=d&&pg(I.name,d),Q=p?.dbisDB?.get([Symbol.for("seq"),U])??1,J=Math.max(Q?.seqId??1,(typeof I.start_time=="string"?new Date(I.start_time).getTime():I.start_time)??1);if(ae.debug?.("Starting time recorded in db",I.name,U,u,Q?.seqId,"start time:",J,new Date(J)),w!==I){let k=d&&pg(w.name,d),Ce=p?.dbisDB?.get([Symbol.for("seq"),k])??1;for(let de of Ce?.nodes||[])de.name===I.name&&(J=de.seqId,ae.debug?.("Using sequence id from proxy node",w.name,J))}if(U===void 0?ae.warn("Starting subscription request from node",I,"but no node id found"):R.push(U),A.get(U)>J&&(J=A.get(U),ae.debug?.("Updating start time from more recent txn recorded",w.name,J)),J===1&&Ng)try{new URL(Ng).hostname===I.name&&E===I.name?(ae.warn?.(`Requesting full copy of database ${u} from ${Ng}`),J=0):J=Date.now()-6e4}catch(k){ae.error?.("Error parsing leader URL",Ng,k)}return ae.trace?.(s,"defining subscription request",I.name,u,new Date(J)),{name:I.name,replicateByDefault:H,tables:N,startTime:J,endTime:I.end_time}});if(b)if(ae.debug?.(s,"sending subscription request",b,p?.dbisDB?.path),clearTimeout(z),b.length>0)e.send((0,et.encode)([AF,b]));else{let I=a(()=>{let x=performance.now();z=setTimeout(()=>{ne<=x?sn(1008,"Connection has no subscriptions and is no longer used"):I()},se).unref()},"schedule_close");I()}}a(Yo,"sendSubscriptionRequestUpdate");function Kd(A,w){if(!A)return;let b=Ht[A];return b||(b=w.getResidencyRecord(A),Ht[A]=b),b}a(Kd,"getResidence");function Wo(A){return!(wa&&wa!="*"&&!wa[A]&&!wa.includes?.(A)&&!wa.some?.(w=>w.name===A))}a(Wo,"checkDatabaseAccess");function zo(A){if(p=p||f.get(A),!Wo(A))throw new Error(`Access to database "${A}" is not permitted`);p||ae.warn?.(`No database named "${A}" was declared and registered`),d=p?.auditStore,S||(S=Xe()?.[A]);let w=tt();if(w===E)throw w?new Error("Should not connect to self",w):new Error("Node name not defined");return Tp(w,A),!0}a(zo,"setDatabase");function Tp(A,w){let b=Xe()?.[w],I=[];for(let x in b){let N=b[x];I.push({table:x,schemaDefined:N.schemaDefined,attributes:N.attributes.map(H=>({name:H.name,type:H.type,isPrimaryKey:H.isPrimaryKey}))})}ae.trace?.("Sending database info for node",A,"database name",w),e.send((0,et.encode)([RF,A,w,I]))}a(Tp,"sendNodeDBName");function Yd(A){let w=Xe()?.[A],b=[];for(let I in w){if(Pn&&!Pn.some(N=>N.replicateByDefault?!N.tables.includes(I):N.tables.includes(I)))continue;let x=w[I];b.push({table:I,schemaDefined:x.schemaDefined,attributes:x.attributes.map(N=>({name:N.name,type:N.type,isPrimaryKey:N.isPrimaryKey}))})}e.send((0,et.encode)([IF,b,A]))}a(Yd,"sendDBSchema"),te=setInterval(()=>{for(let[A,w]of pe)w.lastChunk+Re<Date.now()&&(ae.warn?.(`Timeout waiting for blob stream to finish ${A} for record ${w.recordId??"unknown"} from ${E}`),pe.delete(A),w.end())},Re).unref();let oc=1,ac=[];return{end(){Wi&&Wi.end(),Ir&&Ir.emit("close")},getRecord(A){let w=oc++;return new Promise((b,I)=>{let x=[OF,w,A.table.tableId,A.id];ac[A.table.tableId]||(x.push(A.table.tableName),ac[A.table.tableId]=!0),e.send((0,et.encode)(x)),ne=performance.now(),g.set(w,{tableId:A.table.tableId,key:A.id,resolve(N){let{table:H,entry:U}=A;if(b(N),N)return H._recordRelocate(U,N)},reject:I})})},sendOperation(A){let w=oc++;return A.requestId=w,e.send((0,et.encode)([XO,A])),new Promise((b,I)=>{g.set(w,{resolve:b,reject:I})})}};function K(A){L(5),A<128?o[c++]=A:A<16384?(l.setUint16(c,A|32768),c+=2):A<1056964608?(l.setUint32(c,A|3221225472),c+=4):(o[c]=255,l.setUint32(c+1,A),c+=5)}function m(A,w=0,b=A.length){let I=b-w;L(I),A.copy(o,c,w,b),c+=I}function y(A){L(8),l.setFloat64(c,A),c+=8}function L(A){if(A+16>o.length-c){let w=Buffer.allocUnsafeSlow(c+A-i+65536>>10<<11);o.copy(w,0,i,c),c=c-i,i=0,o=w,l=new DataView(o.buffer,0,o.length)}}function C(A,w){let b=A.database??"data";if(b!=="data"&&!Ye[b]){ae.warn?.("Database not found",A.database);return}w||(w={});let I=w.schemaDefined,x=!1,N=A.schemaDefined,H=w.attributes||[];for(let U=0;U<A.attributes?.length;U++){let Q=A.attributes[U],J=H.find(k=>k.name===Q.name);(!J||J.type!==Q.type)&&(I?ae.error?.(`Schema for '${u}.${A.table}' is defined locally, but attribute '${Q.name}: ${Q.type}' from '${E}' does not match local attribute ${J?"'"+J.name+": "+J.type+"'":"which does not exist"}`):(x=!0,N||(Q.indexed=!0),J?H[H.indexOf(J)]=Q:H.push(Q)))}return x?(ae.debug?.("(Re)creating",A),_t({table:A.table,database:A.database,schemaDefined:A.schemaDefined,attributes:H,...w})):w}}var LF,et,MF,vF,ae,rN,UF,xF,ul,BF,JO,HF,AF,RF,yF,$u,bF,jO,OF,yg,XO,bg,NF,wF,IF,Og,kF,ZO,eN,nh,tN,FF,GF,Iie,Ng,nN,Ia,wg,CF,Cie,PF,QO,Ig,DF,Vu,sN=be(()=>{Ue();no();LO();mR();gs();LF=M(ce());G();eu();et=require("msgpackr"),MF=require("ws"),vF=require("worker_threads"),ae=M(pi());eh();rN=require("events"),UF=M(Zs()),xF=M(require("node:tls"));ol();ul=M(require("node:process")),BF=require("node:net");Ii();ds();JO=require("node:stream"),HF=M(require("minimist")),AF=129,RF=140,yF=141,$u=142,bF=130,jO=132,OF=133,yg=134,XO=136,bg=137,NF=143,wF=144,IF=145,Og=146,kF=0,ZO=1,eN=2,nh=3,tN=4,FF=0,GF=1,Iie=(0,HF.default)(ul.argv),Ng=Iie.HDB_LEADER_URL??ul.env.HDB_LEADER_URL,nN=new Map,Ia=new Map,wg=!0,CF=300,Cie=2,PF=3e4;a(Cg,"createWebSocket");DF=500,Vu=class extends rN.EventEmitter{constructor(r,n,s,i,o){super();this.url=r;this.subscription=n;this.databaseName=s;this.nodeName=i;this.authorization=o;this.nodeName=this.nodeName??Qs(r)}static{a(this,"NodeReplicationConnection")}socket;startTime;retryTime=DF;retries=0;isConnected=!0;isFinished=!1;nodeSubscriptions;latency=0;replicateTablesByDefault;session;sessionResolve;sessionReject;async connect(){this.session||this.resetSession();let r=[];this.socket=await Cg(this.url,{serverName:this.nodeName,authorization:this.authorization});let n;ae.debug?.(`Connecting to ${this.url}, db: ${this.databaseName}, process ${ul.pid}`),this.socket.on("open",()=>{this.socket._socket.unref(),ae[this.isConnected?"info":"warn"]?.(`Connected to ${this.url}, db: ${this.databaseName}`),this.retries=0,this.retryTime=DF,this.nodeSubscriptions&&al({name:this.nodeName,database:this.databaseName,url:this.url}),this.isConnected=!0,n=sh(this.socket,{database:this.databaseName,subscription:this.subscription,url:this.url,connection:this,isSubscriptionConnection:this.nodeSubscriptions!==void 0},{replicates:!0}),this.sessionResolve(n)}),this.socket.on("error",s=>{s.code==="SELF_SIGNED_CERT_IN_CHAIN"?(ae.warn?.(`Can not connect to ${this.url}, this server does not have a certificate authority for the certificate provided by ${this.url}`),s.isHandled=!0):s.code!=="ECONNREFUSED"&&(s.code==="UNABLE_TO_VERIFY_LEAF_SIGNATURE"?ae.error?.(`Can not connect to ${this.url}, the certificate provided by ${this.url} is not trusted, this node needs to be added to the cluster, or a certificate authority needs to be added`):ae.error?.(`Error in connection to ${this.url} due to ${s.message}`)),this.sessionReject(s)}),this.socket.on("close",(s,i)=>{if(this.isConnected&&(this.nodeSubscriptions&&Fu({name:this.nodeName,database:this.databaseName,url:this.url,finished:this.socket.isFinished}),this.isConnected=!1),this.removeAllListeners("subscriptions-updated"),this.socket.isFinished){this.isFinished=!0,n?.end(),this.emit("finished");return}if(++this.retries%20===1){let o=i?.toString();ae.warn?.(`${n?"Disconnected from":"Failed to connect to"} ${this.url} (db: "${this.databaseName}"), due to ${o?'"'+o+'" ':""}(code: ${s})`)}n=null,this.resetSession(),setTimeout(()=>{this.connect()},this.retryTime).unref(),this.retryTime+=this.retryTime>>8})}resetSession(){this.session=new Promise((r,n)=>{this.sessionResolve=r,this.sessionReject=n})}subscribe(r,n){this.nodeSubscriptions=r,this.replicateTablesByDefault=n,this.emit("subscriptions-updated",r)}unsubscribe(){this.socket.isFinished=!0,this.socket.close(1008,"No longer subscribed")}getRecord(r){return this.session.then(n=>n.getRecord(r))}};a(sh,"replicateOverWS")});var Na={};Be(Na,{clearThisNodeName:()=>Hie,disableReplication:()=>Mie,enabled_databases:()=>wa,forEachReplicatedDatabase:()=>Ta,getThisNodeId:()=>Pg,getThisNodeName:()=>tt,getThisNodeUrl:()=>Aa,hostnameToUrl:()=>Ug,lastTimeInAuditStore:()=>Q_,monitorNodeCAs:()=>QF,replicateOperation:()=>Fie,replication_certificate_authorities:()=>To,sendOperationToNode:()=>ih,servers:()=>Die,setReplicator:()=>XF,start:()=>Lie,startOnMainThread:()=>xO,subscribeToNode:()=>Z_,unsubscribeFromNode:()=>Sg,urlToNodeName:()=>Qs});function Lie(e){if(e.port||(e.port=Ts.default.get(B.OPERATIONSAPI_NETWORK_PORT)),e.securePort||(e.securePort=Ts.default.get(B.OPERATIONSAPI_NETWORK_SECUREPORT)),!tt())throw new Error("Can not load replication without a url (see replication.url in the config)");let t=new Map;for(let s of X_(e))t.set(Qs(s.url),s);vie(e),e={mtls:!0,isOperationsServer:!0,maxPayload:10*1024*1024*1024,...e};let r=Ke.ws(async(s,i,o,c)=>{if(i.headers.get("sec-websocket-protocol")!=="harperdb-replication-v1")return c(s,i,o);await o,s._socket.unref(),sh(s,e,i?.user),s.on("error",l=>{l.code!=="ECONNREFUSED"&&or.error("Error in connection to "+this.url,l.message)})},e);e.runFirst=!0,Ke.http((s,i)=>{if(s.isWebSocket&&s.headers.get("Sec-WebSocket-Protocol")==="harperdb-replication-v1"){!s.authorized&&s._nodeRequest.socket.authorizationError&&or.error(`Incoming client connection from ${s.ip} did not have valid certificate, you may need turn on enableRootCAs in the config if you are using a publicly signed certificate, or add the CA to the server's trusted CAs`,s._nodeRequest.socket.authorizationError);let o=sr().primaryStore;if(s.authorized&&s.peerCertificate.subject){let c=s.peerCertificate.subject,l=c&&(o.get(c.CN)||t.get(c.CN));if(l)if(l?.revoked_certificates?.includes(s.peerCertificate.serialNumber)){or.warn("Revoked certificate used in attempt to connect to node",l.name,"certificate serial number",s.peerCertificate.serialNumber);return}else s.user=l;else or.warn(`No node found for certificate common name ${c.CN}, available nodes are ${Array.from(o.getRange({}).filter(({value:u})=>u).map(({key:u})=>u)).join(", ")} and routes ${Array.from(t.keys()).join(", ")}, connection will require credentials.`)}else{let c=o.get(s.ip)||t.get(s.ip);c?s.user=c:or.warn(`No node found for IP address ${s.ip}, available nodes are ${Array.from(new Set([...o.getKeys(),...t.keys()])).join(", ")}, connection will require credentials.`)}}return i(s)},e);let n=[];for(let s of r)if(s.secureContexts){let i=a(()=>{let o=new Set(s.secureContexts.values());s.defaultContext&&o.add(s.defaultContext);for(let c of o)try{let l=Array.from(To);c.options.availableCAs&&l.push(...c.options.availableCAs.values());let u={...c.options,ca:l};c.updatedContext=vg.createSecureContext(u)}catch(l){or.error("Error creating replication TLS config",l)}},"updateContexts");s.secureContextsListeners.push(i),n.push(i),Ts.default.get(B.REPLICATION_ENABLEROOTCAS)!==!1&&i()}QF(()=>{for(let s of n)s()})}function QF(e){let t=0;Hu(r=>{r?.ca&&(To.add(r.ca),To.size!==t&&(t=To.size,e?.()))})}function Mie(e=!0){jF=e}function vie(e){jF||(Xe(),wa=e.databases,Ta(e,(t,r)=>{if(!t){let n=e.databaseSubscriptions||Ia;for(let[s,i]of Lg){let o=i.get(r);o&&(o.subscribe([],!1),i.delete(r))}n.delete(r);return}for(let n in t){let s=t[n];XF(r,s,e),nN.get(s)?.forEach(i=>i(s))}}))}function XF(e,t,r){if(!t)return console.error(`Attempt to replicate non-existent table ${t.name} from database ${e}`);if(t.replicate===!1||t.sources?.some(s=>s.isReplicator))return;let n;t.sourcedFrom(class JF extends Gr{static{a(this,"Replicator")}static connection;static subscription;static async subscribe(){let i=r.databaseSubscriptions||Ia,o=i.get(e),c=o?.tableById||[];c[t.tableId]=t;let l=o?.ready;if(or.trace("Setting up replicator subscription to database",e),!o?.auditStore)return this.subscription=o=new Mn,i.set(e,o),o.tableById=c,o.auditStore=t.auditStore,o.dbisDB=t.dbisDB,o.databaseName=e,l&&l(o),o;this.subscription=o}static subscribeOnThisThread(i,o){return!0}static async load(i){if(i){let o=i.residencyId,c=i.residency||t.dbisDB.get([Symbol.for("residency_by_id"),o]);if(c){let l,u=new Set;do{let f;for(let h of c){if(h===Ke.hostname)continue;let _=xie(h,JF.subscription,e);_?.isConnected&&!u.has(_)&&(!f||_.latency<f.latency)&&(f=_)}if(!f)throw l||new WF.ServerError("No connection to any other nodes are available",502);let d={requestId:Pie++,table:t,entry:i,id:i.key};u.add(f);try{return await f.getRecord(d)}catch(h){if(f.isConnected)throw h;or.warn("Error in load from node",Mg,h),l||(l=h)}}while(!0)}}}static isReplicator=!0},{intermediateSource:!0})}function Uie(e,t,r,n,s){let i=Lg.get(e);i||(i=new Map,Lg.set(e,i));let o=i.get(r);if(o)return o;if(t)return i.set(r,o=new Vu(e,t,r,n,s)),o.connect(),o.once("finished",()=>i.delete(r)),o}function xie(e,t,r){let n=$F.get(e);n||(n=new Map,$F.set(e,n));let s=n.get(r);if(s)return s;let i=sr().primaryStore.get(e);return i?.url&&(s=new Vu(i.url,t,r,e,i.authorization),n.set(r,s),s.connect(),s.once("finished",()=>n.delete(r))),s}async function ih(e,t,r){r||(r={}),r.serverName=e.name;let n=await Cg(e.url,r),s=sh(n,{},{});return new Promise((i,o)=>{n.on("open",()=>{i(s.sendOperation(t))}),n.on("error",c=>{o(c)}),n.on("close",c=>{or.info("Sending operation connection to "+e.url+" closed",c)})}).finally(()=>{n.close()})}function Z_(e){try{zF.isMainThread&&or.trace("Subscribing on main thread (should not happen in multi-threaded instance)",e.nodes[0].url,e.database);let t=Ia.get(e.database);if(!t){let n;t=new Promise(s=>{or.info("Waiting for subscription to database "+e.database),n=s}),t.ready=n,Ia.set(e.database,t)}let r=Uie(e.nodes[0].url,t,e.database,e.nodes[0].name,e.nodes[0].authorization);e.nodes[0].name===void 0?r.tentativeNode=e.nodes[0]:r.nodeName=e.nodes[0].name,r.subscribe(e.nodes.filter(n=>J_(n,e.database)),e.replicateByDefault)}catch(t){or.error("Error in subscription to node",e.nodes[0]?.url,t)}}async function Sg({name:e,url:t,database:r}){or.trace("Unsubscribing from node",e,t,r,"nodes",Array.from(sr().primaryStore.getRange({})));let n=Lg.get(t);if(n){let s=n.get(r);s&&(s.unsubscribe(),n.delete(r))}}function Bie(){if(iN!==void 0)return iN;let e=Ts.default.get(B.OPERATIONSAPI_TLS_CERTIFICATE)||Ts.default.get(B.TLS_CERTIFICATE);if(e)return iN=new KF.X509Certificate((0,YF.readFileSync)(e)).subject?.match(/CN=(.*)/)?.[1]??null}function tt(){return Mg||(Mg=Ts.default.get("replication_hostname")??Qs(Ts.default.get("replication_url"))??Bie()??VF("operationsapi_network_secureport")??VF("operationsapi_network_port")??"127.0.0.1")}function Hie(){Mg=void 0}function VF(e){let t=Ts.default.get(e),r=t?.lastIndexOf?.(":");if(r>0)return t.slice(0,r)}function Dg(e){let t=Ts.default.get(e),r=t?.lastIndexOf?.(":");return r>0?+t.slice(r+1).replace(/[\[\]]/g,""):+t}function Pg(e){return j_(e)?.[tt()]}function Aa(){let e=Ts.default.get("replication_url");return e||Ug(tt())}function Ug(e){let t=Dg("replication_port");if(t)return`ws://${e}:${t}`;if(t=Dg("replication_secureport"),t)return`wss://${e}:${t}`;if(t=Dg("operationsapi_network_port"),t)return`ws://${e}:${t}`;if(t=Dg("operationsapi_network_secureport"),t)return`wss://${e}:${t}`}function Qs(e){if(e)return new URL(e).hostname}function Ta(e,t){for(let n of Object.getOwnPropertyNames(Ye))r(n);return L_(n=>{r(n)}),Zc((n,s)=>{r(n.databaseName)});function r(n){let s=Ye[n];or.trace("Checking replication status of ",n,e?.databases),e?.databases===void 0||e.databases==="*"||e.databases.includes(n)||e.databases.some?.(i=>i.name===n)||!s?t(s,n,!0):kie(n)&&t(s,n,!1)}a(r,"forDatabase")}function kie(e){let t=Ye[e];for(let r in t)if(t[r].replicate)return!0}function Q_(e){for(let t of e.getKeys({limit:1,reverse:!0}))return t}async function Fie(e){let t={message:""};if(e.replicated){e.replicated=!1,or.trace?.("Replicating operation",e.operation,"to nodes",Ke.nodes.map(n=>n.name));let r=await Promise.allSettled(Ke.nodes.map(n=>ih(n,e)));t.replicated=r.map((n,s)=>{let i=n.status==="rejected"?{status:"failed",reason:n.reason.toString()}:n.value;return i.node=Ke.nodes[s]?.name,i})}return t}var Ts,or,KF,YF,vg,WF,zF,jF,Pie,Die,To,wa,Lg,$F,iN,Mg,gs=be(()=>{Ue();ra();Vl();sN();Pr();Ts=M(ce()),or=M(X()),KF=require("crypto"),YF=require("fs");eh();ol();G();LO();vg=M(require("node:tls")),WF=M(he()),zF=require("worker_threads"),Pie=1,Die=[],To=Ts.default.get(B.REPLICATION_ENABLEROOTCAS)!==!1?new Set(vg.rootCertificates):new Set;a(Lie,"start");a(QF,"monitorNodeCAs");a(Mie,"disableReplication");a(vie,"assignReplicationSource");a(XF,"setReplicator");Lg=new Map;a(Uie,"getSubscriptionConnection");$F=new Map;a(xie,"getRetrievalConnectionByName");a(ih,"sendOperationToNode");a(Z_,"subscribeToNode");a(Sg,"unsubscribeFromNode");a(Bie,"getCommonNameFromCert");a(tt,"getThisNodeName");a(Hie,"clearThisNodeName");Object.defineProperty(Ke,"hostname",{get(){return tt()}});a(VF,"getHostFromListeningPort");a(Dg,"getPortFromListeningPort");a(Pg,"getThisNodeId");Ke.replication={getThisNodeId:Pg,exportIdMapping:j_};a(Aa,"getThisNodeUrl");a(Ug,"hostnameToUrl");a(Qs,"urlToNodeName");a(Ta,"forEachReplicatedDatabase");a(kie,"hasExplicitlyReplicatedTable");a(Q_,"lastTimeInAuditStore");a(Fie,"replicateOperation")});var Fg=P((hCe,nG)=>{"use strict";var Ku=fk(),{validateBySchema:oh}=it(),{common_validators:Yu,schema_regex:oN}=Ai(),ar=require("joi"),Gie=X(),qie=require("uuid").v4,Hg=ao(),Wu=(G(),D($)),$ie=require("util"),Ca=Fn(),{handleHDBError:Ao,hdb_errors:Vie,ClientError:ah}=he(),{HDB_ERROR_MSGS:xg,HTTP_STATUS_CODES:Ro}=Vie,{SchemaEventMsg:kg}=Gs(),ZF=gr(),{getDatabases:Kie}=(Ue(),D(ct)),{transformReq:zu}=oe(),{replicateOperation:eG}=(gs(),D(Na)),Bg=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message}),Yie=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message}).required(),Wie=ar.string().min(1).max(Yu.schema_length.maximum).pattern(oN).messages({"string.pattern.base":"{:#label} "+Yu.schema_format.message,"any.required":"'primary_key' is required","string.base":"'primary_key' must be a string"}).required();nG.exports={createSchema:zie,createSchemaStructure:tG,createTable:jie,createTableStructure:rG,createAttribute:eoe,dropSchema:Qie,dropTable:Jie,dropAttribute:Xie,getBackup:toe};async function zie(e){let t=await tG(e);return Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema)),t}a(zie,"createSchema");async function tG(e){let t=oh(e,ar.object({database:Bg,schema:Bg}));if(t)throw new ah(t.message);if(zu(e),!await Ku.checkSchemaExists(e.schema))throw Ao(new Error,xg.SCHEMA_EXISTS_ERR(e.schema),Ro.BAD_REQUEST,Wu.LOG_LEVELS.ERROR,xg.SCHEMA_EXISTS_ERR(e.schema),!0);return await Ca.createSchema(e),`database '${e.schema}' successfully created`}a(tG,"createSchemaStructure");async function jie(e){return zu(e),e.hash_attribute=e.primary_key??e.hash_attribute,await rG(e)}a(jie,"createTable");async function rG(e){let t=oh(e,ar.object({database:Bg,schema:Bg,table:Yie,residence:ar.array().items(ar.string().min(1)).optional(),hash_attribute:Wie}));if(t)throw new ah(t.message);if(!await Ku.checkSchemaTableExists(e.schema,e.table))throw Ao(new Error,xg.TABLE_EXISTS_ERR(e.schema,e.table),Ro.BAD_REQUEST,Wu.LOG_LEVELS.ERROR,xg.TABLE_EXISTS_ERR(e.schema,e.table),!0);let n={name:e.table,schema:e.schema,id:qie(),hash_attribute:e.hash_attribute};try{if(e.residence)if(global.clustering_on)n.residence=e.residence,await Ca.createTable(n,e);else throw Ao(new Error,"Clustering does not appear to be enabled. Cannot insert table with property 'residence'.",Ro.BAD_REQUEST);else await Ca.createTable(n,e);return`table '${e.schema}.${e.table}' successfully created.`}catch(s){throw s}}a(rG,"createTableStructure");async function Qie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string()}).or("database","schema").messages({"object.missing":"'database' is required"}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaExists(e.schema);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);let n=await Ku.schema_describe.describeSchema({schema:e.schema}),s=Object.keys(global.hdb_schema[e.schema]);await Ca.dropSchema(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema)),await ZF.purgeSchemaTableStreams(e.schema,s);let i=await eG(e);return i.message=`successfully deleted '${e.schema}'`,i}a(Qie,"dropSchema");async function Jie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required()}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);await Ca.dropTable(e),await ZF.purgeTableStream(e.schema,e.table);let n=await eG(e);return n.message=`successfully deleted table '${e.schema}.${e.table}'`,n}a(Jie,"dropTable");async function Xie(e){let t=oh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required(),attribute:ar.string().required()}));if(t)throw new ah(t.message);zu(e);let r=await Ku.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Wu.LOG_LEVELS.ERROR,r,!0);if(e.attribute===global.hdb_schema[e.schema][e.table].hash_attribute)throw Ao(new Error,"You cannot drop a hash attribute",Ro.BAD_REQUEST,void 0,void 0,!0);if(Wu.TIME_STAMP_NAMES.indexOf(e.attribute)>=0)throw Ao(new Error,`cannot drop internal timestamp attribute: ${e.attribute}`,Ro.BAD_REQUEST,void 0,void 0,!0);try{return await Ca.dropAttribute(e),Zie(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema,e.table,e.attribute)),`successfully deleted attribute '${e.attribute}'`}catch(n){throw Gie.error(`Got an error deleting attribute ${$ie.inspect(e)}.`),n}}a(Xie,"dropAttribute");function Zie(e){let t=Object.values(global.hdb_schema[e.schema][e.table].attributes);for(let r=0;r<t.length;r++)t[r].attribute===e.attribute&&global.hdb_schema[e.schema][e.table].attributes.splice(r,1)}a(Zie,"dropAttributeFromGlobal");async function eoe(e){zu(e);let t=Kie()[e.schema][e.table].attributes;for(let{name:r}of t)if(r===e.attribute)throw Ao(new Error,`attribute '${e.attribute}' already exists in ${e.schema}.${e.table}`,Ro.BAD_REQUEST,void 0,void 0,!0);return await Ca.createAttribute(e),Hg.signalSchemaChange(new kg(process.pid,e.operation,e.schema,e.table,e.attribute)),`attribute '${e.schema}.${e.table}.${e.attribute}' successfully created.`}a(eoe,"createAttribute");function toe(e){return Ca.getBackup(e)}a(toe,"getBackup")});var iG=P((mCe,sG)=>{"use strict";var{OPERATIONS_ENUM:roe}=(G(),D($)),aN=class{static{a(this,"ReadAuditLogObject")}constructor(t,r,n=void 0,s=void 0){this.operation=roe.READ_AUDIT_LOG,this.schema=t,this.table=r,this.search_type=n,this.search_values=s}};sG.exports=aN});var cN=P((SCe,uG)=>{"use strict";var noe=Fn(),gCe=iG(),Gg=oe(),qg=(G(),D($)),soe=ce(),{handleHDBError:oG,hdb_errors:ioe}=he(),{HDB_ERROR_MSGS:aG,HTTP_STATUS_CODES:cG}=ioe,ooe=Object.values(qg.READ_AUDIT_LOG_SEARCH_TYPES_ENUM),lG="To use this operation audit log must be enabled in harperdb-config.yaml";uG.exports=aoe;async function aoe(e){if(Gg.isEmpty(e.schema))throw new Error(aG.SCHEMA_REQUIRED_ERR);if(Gg.isEmpty(e.table))throw new Error(aG.TABLE_REQUIRED_ERR);if(!soe.get(qg.CONFIG_PARAMS.LOGGING_AUDITLOG))throw oG(new Error,lG,cG.BAD_REQUEST,qg.LOG_LEVELS.ERROR,lG,!0);let t=Gg.checkSchemaTableExist(e.schema,e.table);if(t)throw oG(new Error,t,cG.NOT_FOUND,qg.LOG_LEVELS.ERROR,t,!0);if(!Gg.isEmpty(e.search_type)&&ooe.indexOf(e.search_type)<0)throw new Error(`Invalid search_type '${e.search_type}'`);return await noe.readAuditLog(e)}a(aoe,"readAuditLog")});var fG=P((ACe,dG)=>{"use strict";var{OPERATIONS_ENUM:coe}=(G(),D($)),lN=class{static{a(this,"GetBackupObject")}constructor(t,r,n=void 0,s=void 0){this.operation=coe.GET_BACKUP,this.schema=t,this.table=r}};dG.exports=lN});var pG=P((OCe,hG)=>{"use strict";var loe=Fn(),yCe=fG(),uN=oe(),uoe=(G(),D($)),bCe=ce(),{handleHDBError:doe,hdb_errors:foe}=he(),{HDB_ERROR_MSGS:_G,HTTP_STATUS_CODES:_oe}=foe;hG.exports=hoe;async function hoe(e){if(uN.isEmpty(e.schema))throw new Error(_G.SCHEMA_REQUIRED_ERR);if(uN.isEmpty(e.table))throw new Error(_G.TABLE_REQUIRED_ERR);let t=uN.checkSchemaTableExist(e.schema,e.table);if(t)throw doe(new Error,t,_oe.NOT_FOUND,uoe.LOG_LEVELS.ERROR,t,!0);return await loe.getBackup(read_audit_log_object)}a(hoe,"getBackup")});var SG=P((wCe,gG)=>{"use strict";var poe=ce(),Pa=require("joi"),moe=it(),mG=require("moment"),Eoe=require("fs-extra"),dN=require("path"),goe=require("lodash"),ch=(G(),D($)),{LOG_LEVELS:dl}=(G(),D($)),Soe="YYYY-MM-DD hh:mm:ss",Toe=dN.resolve(__dirname,"../logs");gG.exports=function(e){return moe.validateBySchema(e,Aoe)};var Aoe=Pa.object({from:Pa.custom(EG),until:Pa.custom(EG),level:Pa.valid(dl.NOTIFY,dl.FATAL,dl.ERROR,dl.WARN,dl.INFO,dl.DEBUG,dl.TRACE),order:Pa.valid("asc","desc"),limit:Pa.number().min(1),start:Pa.number().min(0),log_name:Pa.custom(Roe)});function EG(e,t){if(mG(e,mG.ISO_8601).format(Soe)==="Invalid date")return t.message(`'${t.state.path[0]}' date '${e}' is invalid.`)}a(EG,"validateDatetime");function Roe(e,t){if(goe.invert(ch.LOG_NAMES)[e]===void 0)return t.message(`'log_name' '${e}' is invalid.`);let n=poe.get(ch.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e===void 0?ch.LOG_NAMES.HDB:e,i=s===ch.LOG_NAMES.INSTALL?dN.join(Toe,ch.LOG_NAMES.INSTALL):dN.join(n,s);return Eoe.existsSync(i)?null:t.message(`'log_name' '${e}' does not exist.`)}a(Roe,"validateReadLogPath")});var _N=P((CCe,AG)=>{"use strict";var $g=(G(),D($)),yoe=X(),boe=ce(),Ooe=SG(),fN=require("path"),TG=require("fs-extra"),{once:Noe}=require("events"),{handleHDBError:woe,hdb_errors:Ioe}=he(),{PACKAGE_ROOT:Coe}=Et(),Poe=fN.join(Coe,"logs"),Doe=1e3,Loe=200;AG.exports=Moe;async function Moe(e){let t=Ooe(e);if(t)throw woe(t,t.message,Ioe.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0);let r=boe.get($g.HDB_SETTINGS_NAMES.LOG_PATH_KEY),n=e.log_name===void 0?$g.LOG_NAMES.HDB:e.log_name,s=n===$g.LOG_NAMES.INSTALL?fN.join(Poe,$g.LOG_NAMES.INSTALL):fN.join(r,n),i=e.level!==void 0,o=i?e.level:void 0,c=e.from!==void 0,l=c?new Date(e.from):void 0,u=e.until!==void 0,f=u?new Date(e.until):void 0,d=e.limit===void 0?Doe:e.limit,h=e.order===void 0?void 0:e.order,_=e.start===void 0?0:e.start,p=_+d,S=0;h==="desc"&&!l&&!f&&(S=Math.max(TG.statSync(s).size-(p+5)*Loe,0));let g=TG.createReadStream(s,{start:S});g.on("error",F=>{yoe.error(F)});let R=0,E=[],T="",O;g.on("data",F=>{let q=/(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d\.]+Z) \[(.+?)]: /g;F=T+F;let j=0,te;for(;(te=q.exec(F))&&!g.destroyed;){O&&(O.message=F.slice(j,te.index),v(O));let[se,z,ne]=te,le=ne.split("] ["),ie=le[0],Re=le[1];le.splice(0,2),O={timestamp:z,thread:ie,level:Re,tags:le,message:""},j=te.index+se.length}T=F.slice(j)}),g.on("end",F=>{g.destroyed||O&&(O.message=T.trim(),v(O))}),g.resume();function v(F){let q,j,te;switch(!0){case(i&&c&&u):q=new Date(F.timestamp),j=new Date(l),te=new Date(f),F.level===o&&q>=j&&q<=te&&R<_?R++:F.level===o&&q>=j&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(i&&c):q=new Date(F.timestamp),j=new Date(l),F.level===o&&q>=j&&R<_?R++:F.level===o&&q>=j&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(i&&u):q=new Date(F.timestamp),te=new Date(f),F.level===o&&q<=te&&R<_?R++:F.level===o&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case(c&&u):q=new Date(F.timestamp),j=new Date(l),te=new Date(f),q>=j&&q<=te&&R<_?R++:q>=j&&q<=te&&(Da(F,h,E),R++,R===p&&g.destroy());break;case i:F.level===o&&R<_?R++:F.level===o&&(Da(F,h,E),R++,R===p&&g.destroy());break;case c:q=new Date(F.timestamp),j=new Date(l),q>=j&&R<_?R++:q>=j&&R>=_&&(Da(F,h,E),R++,R===p&&g.destroy());break;case u:q=new Date(F.timestamp),te=new Date(f),q<=te&&R<_?R++:q<=te&&R>=_&&(Da(F,h,E),R++,R===p&&g.destroy());break;default:R<_?R++:(Da(F,h,E),R++,R===p&&g.destroy())}}return a(v,"onLogMessage"),await Noe(g,"close"),E}a(Moe,"readLog");function Da(e,t,r){t==="desc"?voe(e,r):t==="asc"?Uoe(e,r):r.push(e)}a(Da,"pushLineToResult");function voe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)>r?n=i+1:s=i}t.splice(n,0,e)}a(voe,"insertDescending");function Uoe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)<r?n=i+1:s=i}t.splice(n,0,e)}a(Uoe,"insertAscending")});var Vg=P((UCe,OG)=>{"use strict";var hN=require("joi"),{string:ju,boolean:RG,date:xoe}=hN.types(),Boe=it(),{validateSchemaExists:DCe,validateTableExists:LCe,validateSchemaName:MCe}=Ai(),Hoe=(G(),D($)),koe=Ct(),yG=ce();yG.initSync();var vCe=ju.invalid(yG.get(Hoe.CONFIG_PARAMS.CLUSTERING_NODENAME)??"node_name").pattern(koe.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),bG={operation:ju.valid("add_node","update_node","set_node_replication"),node_name:ju.optional(),subscriptions:hN.array().items({table:ju.optional(),schema:ju.optional(),database:ju.optional(),subscribe:RG.required(),publish:RG.required().custom(Goe),start_time:xoe.iso()})};function Foe(e){return Boe.validateBySchema(e,hN.object(bG))}a(Foe,"addUpdateNodeValidator");function Goe(e,t){if(t.state.ancestors[2].operation==="add_node"&&e===!1&&t.state.ancestors[0].subscribe===!1)return t.message(`'subscriptions[${t.state.path[1]}]' subscribe and/or publish must be set to true when adding a node`)}a(Goe,"checkForFalsy");OG.exports={addUpdateNodeValidator:Foe,validation_schema:bG}});var Qu=P((BCe,NG)=>{"use strict";var pN=class{static{a(this,"Node")}constructor(t,r,n){this.name=t,this.subscriptions=r,this.system_info=n}},mN=class{static{a(this,"NodeSubscription")}constructor(t,r,n,s){this.schema=t,this.table=r,this.publish=n,this.subscribe=s}};NG.exports={Node:pN,NodeSubscription:mN}});var IG=P((kCe,wG)=>{"use strict";var qoe=(G(),D($)).OPERATIONS_ENUM,EN=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=qoe.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};wG.exports=EN});var lh=P((GCe,CG)=>{"use strict";var gN=class{static{a(this,"RemotePayloadObject")}constructor(t,r,n,s){this.operation=t,this.node_name=r,this.subscriptions=n,this.system_info=s}},SN=class{static{a(this,"RemotePayloadSubscription")}constructor(t,r,n,s,i,o,c){this.schema=t,this.table=r,this.hash_attribute=n,this.publish=s,this.subscribe=i,this.start_time=o,c!==void 0&&(this.attributes=c)}};CG.exports={RemotePayloadObject:gN,RemotePayloadSubscription:SN}});var DG=P(($Ce,PG)=>{"use strict";var TN=class{static{a(this,"TableSizeObject")}constructor(t,r,n=0,s=0,i=0,o=0){this.schema=t,this.table=r,this.table_size=n,this.record_count=s,this.transaction_log_size=i,this.transaction_log_record_count=o}};PG.exports=TN});var MG=P((jCe,LG)=>{"use strict";var $oe=DG(),KCe=Ft(),YCe=ft(),Voe=X(),{getSchemaPath:WCe,getTransactionAuditStorePath:zCe}=gt(),{getDatabases:Koe}=(Ue(),D(ct));LG.exports=Yoe;async function Yoe(e){let t=new $oe;try{let r=Koe()[e.schema]?.[e.name],n=r.primaryStore.getStats(),s=r.auditStore?.getStats();t.schema=e.schema,t.table=e.name,t.record_count=n.entryCount,t.transaction_log_record_count=s.entryCount}catch(r){Voe.warn(`unable to stat table dbi due to ${r}`)}return t}a(Yoe,"lmdbGetTableSize")});var UG=P((JCe,vG)=>{"use strict";var AN=class{static{a(this,"SystemInformationObject")}constructor(t,r,n,s,i,o,c){this.system=t,this.time=r,this.cpu=n,this.memory=s,this.disk=i,this.network=o,this.harperdb_processes=c}};vG.exports=AN});var Xu=P((nPe,kG)=>{"use strict";var Woe=require("fs-extra"),zoe=require("path"),jr=require("systeminformation"),La=X(),xG=gr(),ZCe=Ct(),Ju=(G(),D($)),joe=MG(),Qoe=_o(),{getThreadInfo:BG}=st(),uh=ce();uh.initSync();var Joe=UG(),{openEnvironment:ePe}=ft(),{getSchemaPath:tPe}=gt(),{database:rPe,databases:RN}=(Ue(),D(ct)),Kg;kG.exports={getHDBProcessInfo:NN,getNetworkInfo:IN,getDiskInfo:wN,getMemoryInfo:ON,getCPUInfo:bN,getTimeInfo:yN,getSystemInformation:CN,systemInformation:Xoe,getTableSize:PN,getMetrics:DN};function yN(){return jr.time()}a(yN,"getTimeInfo");async function bN(){try{let{family:e,model:t,stepping:r,revision:n,voltage:s,speedmin:i,speedmax:o,governor:c,socket:l,cache:u,...f}=await jr.cpu();f.cpu_speed=await jr.cpuCurrentSpeed();let{raw_currentload:d,raw_currentload_idle:h,raw_currentload_irq:_,raw_currentload_nice:p,raw_currentload_system:S,raw_currentload_user:g,cpus:R,...E}=await jr.currentLoad();return E.cpus=[],R.forEach(T=>{let{raw_load:O,raw_load_idle:v,raw_load_irq:F,raw_load_nice:q,raw_load_system:j,raw_load_user:te,...se}=T;E.cpus.push(se)}),f.current_load=E,f}catch(e){return La.error(`error in getCPUInfo: ${e}`),{}}}a(bN,"getCPUInfo");async function ON(){try{let{buffers:e,cached:t,slab:r,buffcache:n,...s}=await jr.mem();return Object.assign(s,process.memoryUsage())}catch(e){return La.error(`error in getMemoryInfo: ${e}`),{}}}a(ON,"getMemoryInfo");async function NN(){let e={core:[],clustering:[]};try{let t=await jr.processes(),r;try{r=Number.parseInt(await Woe.readFile(zoe.join(uh.get(Ju.CONFIG_PARAMS.ROOTPATH),Ju.HDB_PID_FILE),"utf8"))}catch(n){if(n.code===Ju.NODE_ERROR_CODES.ENOENT)La.warn("Unable to locate 'hdb.pid' file, try stopping and starting HarperDB. This could be because HarperDB is not running.");else throw n}t.list.forEach(n=>{n.pid===r?e.core.push(n):n.name==="nats-server"&&e.clustering.push(n)});for(let n of e.core)for(let s of t.list)s.pid===n.parentPid&&(s.name==="PM2"||s.command==="PM2")&&(n.parent="PM2");return e}catch(t){return La.error(`error in getHDBProcessInfo: ${t}`),e}}a(NN,"getHDBProcessInfo");async function wN(){let e={};try{if(!uh.get(Ju.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_DISK))return e;let{rIO_sec:t,wIO_sec:r,tIO_sec:n,ms:s,...i}=await jr.disksIO();e.io=i;let{rx_sec:o,tx_sec:c,wx_sec:l,...u}=await jr.fsStats();return e.read_write=u,e.size=await jr.fsSize(),e}catch(t){return La.error(`error in getDiskInfo: ${t}`),e}}a(wN,"getDiskInfo");async function IN(){let e={default_interface:null,latency:{},interfaces:[],stats:[],connections:[]};try{return uh.get(Ju.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_NETWORK)&&(e.default_interface=await jr.networkInterfaceDefault(),e.latency=await jr.inetChecksite("google.com"),(await jr.networkInterfaces()).forEach(n=>{let{internal:s,virtual:i,mtu:o,dhcp:c,dnsSuffix:l,ieee8021xAuth:u,ieee8021xState:f,carrier_changes:d,...h}=n;e.interfaces.push(h)}),(await jr.networkStats()).forEach(n=>{let{rx_sec:s,tx_sec:i,ms:o,...c}=n;e.stats.push(c)})),e}catch(t){return La.error(`error in getNetworkInfo: ${t}`),e}}a(IN,"getNetworkInfo");async function CN(){if(Kg!==void 0)return Kg;let e={};try{let{codepage:t,logofile:r,serial:n,build:s,servicepack:i,uefi:o,...c}=await jr.osInfo();e=c;let l=await jr.versions("node, npm");return e.node_version=l.node,e.npm_version=l.npm,Kg=e,Kg}catch(t){return La.error(`error in getSystemInformation: ${t}`),e}}a(CN,"getSystemInformation");async function PN(){let e=[],t=await Qoe.describeAll();for(let r of Object.values(t))for(let n of Object.values(r))e.push(await joe(n));return e}a(PN,"getTableSize");async function DN(){let e={};for(let t in RN){let r=e[t]={},n=r.tables={};for(let s in RN[t])try{let i=RN[t][s];if(!r.readers&&(Object.assign(r,i.primaryStore.rootStore.getStats()),delete r.root,r.readers=i.primaryStore.rootStore.readerList().split(/\n\s+/).slice(1).map(l=>{let[u,f,d]=l.trim().split(" ");return{pid:u,thread:f,txnid:d}}),i.auditStore)){let{treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:h}=i.auditStore.getStats();r.audit={treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:h}}let o=i.primaryStore.getStats(),c={};for(let l of["treeDepth","treeBranchPageCount","treeLeafPageCount","entryCount","overflowPages"])c[l]=o[l];n[s]=c}catch(i){La.notify(`Error getting stats for table ${s}: ${i}`)}}return e}a(DN,"getMetrics");async function HG(){if(uh.get(Ju.CONFIG_PARAMS.CLUSTERING_ENABLED)){let{jsm:e}=await xG.getNATSReferences(),t=await xG.listStreams(),r=[];for(let n of t){let s=[],i=await e.consumers.list(n.config.name);for await(let c of i)s.push({name:c.name,created:c.created,num_ack_pending:c.num_ack_pending,num_redelivered:c.num_redelivered,num_waiting:c.num_waiting,num_pending:c.num_pending});let o={stream_name:n.config.name,database:n.config.subjects[0].split(".")[1],table:n.config.subjects[0].split(".")[2],state:n.state,consumers:s};r.push(o)}return r}}a(HG,"getNatsStreamInfo");async function Xoe(e){let t=new Joe;if(!Array.isArray(e.attributes)||e.attributes.length===0)return t.system=await CN(),t.time=yN(),t.cpu=await bN(),t.memory=await ON(),t.disk=await wN(),t.network=await IN(),t.harperdb_processes=await NN(),t.table_size=await PN(),t.metrics=await DN(),t.threads=await BG(),t.replication=await HG(),t;for(let r=0;r<e.attributes.length;r++)switch(e.attributes[r]){case"system":t.system=await CN();break;case"time":t.time=yN();break;case"cpu":t.cpu=await bN();break;case"memory":t.memory=await ON();break;case"disk":t.disk=await wN();break;case"network":t.network=await IN();break;case"harperdb_processes":t.harperdb_processes=await NN();break;case"table_size":t.table_size=await PN();break;case"database_metrics":case"metrics":t.metrics=await DN();break;case"threads":t.threads=await BG();break;case"replication":t.replication=await HG();break;default:break}return t}a(Xoe,"systemInformation")});var yo=P((cPe,$G)=>{"use strict";var Zoe=Sn(),LN=oe(),eae=require("util"),fl=(G(),D($)),FG=ce();FG.initSync();var tae=dO(),GG=Vr(),{Node:iPe,NodeSubscription:oPe}=Qu(),rae=cu(),nae=IG(),{RemotePayloadObject:sae,RemotePayloadSubscription:iae}=lh(),{handleHDBError:oae,hdb_errors:aae}=he(),{HTTP_STATUS_CODES:cae,HDB_ERROR_MSGS:lae}=aae,uae=qs(),dae=Xu(),{packageJson:fae}=Et(),{getDatabases:_ae}=(Ue(),D(ct)),aPe=eae.promisify(tae.authorize),hae=GG.searchByHash,pae=GG.searchByValue;$G.exports={isEmpty:mae,getNodeRecord:Eae,upsertNodeRecord:gae,buildNodePayloads:Sae,checkClusteringEnabled:Tae,getAllNodeRecords:Aae,getSystemInfo:Rae,reverseSubscription:qG};function mae(e){return e==null}a(mae,"isEmpty");async function Eae(e){let t=new rae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e],["*"]);return hae(t)}a(Eae,"getNodeRecord");async function gae(e){let t=new nae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e]);return Zoe.upsert(t)}a(gae,"upsertNodeRecord");function qG(e){if(LN.isEmpty(e.subscribe)||LN.isEmpty(e.publish))throw new Error("Received invalid subscription object");let{schema:t,table:r,hash_attribute:n}=e,s={schema:t,table:r,hash_attribute:n};return e.subscribe===!0&&e.publish===!1?(s.subscribe=!1,s.publish=!0):e.subscribe===!1&&e.publish===!0?(s.subscribe=!0,s.publish=!1):(s.subscribe=e.subscribe,s.publish=e.publish),s}a(qG,"reverseSubscription");function Sae(e,t,r,n){let s=[];for(let i=0,o=e.length;i<o;i++){let c=e[i],{schema:l,table:u}=c,f=LN.getTableHashAttribute(l,u),{subscribe:d,publish:h}=qG(c),_=_ae()[l]?.[u],p=new iae(l,u,f,h,d,c.start_time,_.schemaDefined?_.attributes:void 0);s.push(p)}return new sae(r,t,s,n)}a(Sae,"buildNodePayloads");function Tae(){if(!FG.get(fl.CONFIG_PARAMS.CLUSTERING_ENABLED))throw oae(new Error,lae.CLUSTERING_NOT_ENABLED,cae.BAD_REQUEST,void 0,void 0,!0)}a(Tae,"checkClusteringEnabled");async function Aae(){let e=new uae(fl.SYSTEM_SCHEMA_NAME,fl.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,"name","*",void 0,["*"]);return Array.from(await pae(e))}a(Aae,"getAllNodeRecords");async function Rae(){let e=await dae.getSystemInformation();return{hdb_version:fae.version,node_version:e.node_version,platform:e.platform}}a(Rae,"getSystemInfo")});var MN=P((uPe,JG)=>{"use strict";var Yg=gr(),VG=oe(),KG=Ct(),YG=(G(),D($)),Wg=X(),WG=Fg(),yae=Jf(),{RemotePayloadObject:bae}=lh(),{handleHDBError:zG,hdb_errors:Oae}=he(),{HTTP_STATUS_CODES:jG}=Oae,{NodeSubscription:QG}=Qu();JG.exports=Nae;async function Nae(e,t){let r;try{r=await Yg.request(`${t}.${KG.REQUEST_SUFFIX}`,new bae(YG.OPERATIONS_ENUM.DESCRIBE_ALL,t,void 0,void 0)),Wg.trace("Response from remote describe all request:",r)}catch(o){Wg.error(`addNode received error from describe all request to remote node: ${o}`);let c=Yg.requestErrorHandler(o,"add_node",t);throw zG(new Error,c,jG.INTERNAL_SERVER_ERROR,"error",c)}if(r.status===KG.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let o=`Error returned from remote node ${t}: ${r.message}`;throw zG(new Error,o,jG.INTERNAL_SERVER_ERROR,"error",o)}let n=r.message,s=[],i=[];for(let o of e){let{table:c}=o,l=o.database??o.schema??"data";if(l===YG.SYSTEM_SCHEMA_NAME){await Yg.createLocalTableStream(l,c);let p=new QG(l,c,o.publish,o.subscribe);p.start_time=o.start_time,i.push(p);continue}let u=VG.doesSchemaExist(l),f=n[l]!==void 0,d=c?VG.doesTableExist(l,c):!0,h=c?n?.[l]?.[c]!==void 0:!0;if(!u&&!f||!d&&!h){s.push(o);continue}if(!u&&f&&(Wg.trace(`addNode creating schema: ${l}`),await WG.createSchema({operation:"create_schema",schema:l})),!d&&h){Wg.trace(`addNode creating table: ${c} in schema: ${l} with attributes ${JSON.stringify(n[l][c].attributes)}`);let p=new yae(l,c,n[l][c].hash_attribute);n[l][c].attributes&&(p.attributes=n[l][c].attributes),await WG.createTable(p)}await Yg.createLocalTableStream(l,c);let _=new QG(l,c,o.publish,o.subscribe);_.start_time=o.start_time,i.push(_)}return{added:i,skipped:s}}a(Nae,"reviewSubscriptions")});var _l={};Be(_l,{addNodeBack:()=>Dae,removeNodeBack:()=>Lae,setNode:()=>Pae});async function Pae(e){e.node_name&&!e.hostname&&(e.hostname=e.node_name),e.verify_tls!==void 0&&(e.rejectUnauthorized=e.verify_tls);let{url:t,hostname:r}=e;t?r||(r=e.hostname=Qs(t)):t=Ug(r);let n=(0,ZG.validateBySchema)(e,Cae);if(n)throw(0,bo.handleHDBError)(n,n.message,Iae.BAD_REQUEST,void 0,void 0,!0);if(e.operation==="remove_node"){if(!t&&!r)throw new bo.ClientError("url or hostname is required for remove_node operation");let _=r,p=sr(),S=await p.get(_);if(!S)throw new bo.ClientError(_+" does not exist");try{await ih({url:S.url},{operation:Yt.REMOVE_NODE_BACK,name:S?.subscriptions?.length>0?tt():_},void 0)}catch(g){Jn.warn(`Error removing node from target node ${_}, if it is offline and we be online in the future, you may need to clean up this node manually, or retry:`,g)}return await p.delete(_),`Successfully removed '${_}' from cluster`}if(!t)throw new bo.ClientError("url required for this operation");let s=Aa();if(s==null)throw new bo.ClientError("replication url is missing from harperdb-config.yaml");let i,o,c;if(t?.startsWith("wss:")){i=await(0,As.getReplicationCert)();let _=await(0,As.getReplicationCertAuth)();if(!i)throw new Error("Unable to find a certificate to use for replication");i.options.is_self_signed?(o=await(0,As.createCsr)(),Jn.info("Sending CSR to target node:",t)):_&&(c=_.certificate,Jn.info("Sending CA named",_.name,"to target node",t))}let l={operation:Yt.ADD_NODE_BACK,hostname:(0,va.get)(B.REPLICATION_HOSTNAME),target_hostname:r,url:s,csr:o,cert_auth:c,authorization:e.retain_authorization?e.authorization:null};if((0,va.get)(B.REPLICATION_SHARD)!==void 0&&(l.shard=(0,va.get)(B.REPLICATION_SHARD)),e.subscriptions?l.subscriptions=e.subscriptions.map(XG):l.subscriptions=null,e.hasOwnProperty("subscribe")||e.hasOwnProperty("publish")){let _=XG(e);l.subscribe=_.subscribe,l.publish=_.publish}e?.authorization?.username&&e?.authorization?.password&&(e.authorization="Basic "+Buffer.from(e.authorization.username+":"+e.authorization.password).toString("base64"));let u,f;try{u=await ih({url:t},l,e)}catch(_){_.message=`Error returned from ${t}: `+_.message,Jn.warn("Error adding node:",t,"to cluster:",_),f=_}if(o&&(!u?.certificate||!u?.certificate?.includes?.("BEGIN CERTIFICATE")))throw f?(f.message+=" and connection was required to sign certificate",f):new Error(`Unexpected certificate signature response from node ${t} response: ${JSON.stringify(u)}`);o&&(Jn.info("CSR response received from node:",t,"saving certificate and CA in hdb_certificate"),await(0,As.setCertTable)({name:wae.certificateFromPem(u.signingCA).issuer.getField("CN").value,certificate:u.signingCA,is_authority:!0}),u.certificate&&await(0,As.setCertTable)({name:tt(),uses:["https","operations","wss"],certificate:u.certificate,private_key_name:i?.options?.key_file,is_authority:!1,is_self_signed:!1}),c=u.signingCA);let d={url:t,ca:u?.usingCA};if(e.hostname&&(d.name=e.hostname),e.subscriptions?d.subscriptions=e.subscriptions:d.replicates=!0,e.start_time&&(d.start_time=typeof e.start_time=="string"?new Date(e.start_time).getTime():e.start_time),e.retain_authorization&&(d.authorization=e.authorization),e.revoked_certificates&&(d.revoked_certificates=e.revoked_certificates),u?.shard!==void 0?d.shard=u.shard:e.shard!==void 0&&(d.shard=e.shard),d.replicates){let _={url:s,ca:c,replicates:!0,subscriptions:null};(0,va.get)(B.REPLICATION_SHARD)!==void 0&&(_.shard=(0,va.get)(B.REPLICATION_SHARD)),e.retain_authorization&&(_.authorization=e.authorization),e.start_time&&(_.start_time=e.start_time),await go(tt(),_)}await go(u?u.nodeName:d.name??Qs(t),d);let h;return e.operation==="update_node"?h=`Successfully updated '${t}'`:h=`Successfully added '${t}' to cluster`,f&&(h+=" but there was an error updating target node: "+f.message),h}async function Dae(e){Jn.trace("addNodeBack received request:",e);let t=await(0,As.signCertificate)(e),r;e.csr?(r=t.signingCA,Jn.info("addNodeBack received CSR from node:",e.url,"this node will use and respond with CA that was used to issue CSR")):(r=e?.cert_auth,Jn.info("addNodeBack received CA from node:",e.url));let n={url:e.url,ca:r};e.subscriptions?n.subscriptions=e.subscriptions:(n.replicates=!0,n.subscriptions=null),e.start_time&&(n.start_time=e.start_time),e.authorization&&(n.authorization=e.authorization),e.shard!==void 0&&(n.shard=e.shard);let s=await(0,As.getReplicationCertAuth)();if(n.replicates){let i={url:Aa(),ca:s?.certificate,replicates:!0,subscriptions:null};(0,va.get)(B.REPLICATION_SHARD)!==void 0&&(i.shard=(0,va.get)(B.REPLICATION_SHARD),t.shard=i.shard),e.start_time&&(i.start_time=e.start_time),e.authorization&&(i.authorization=e.authorization),await go(tt(),i)}return await go(e.hostname,n),t.nodeName=tt(),t.usingCA=s?.certificate,Jn.info("addNodeBack responding to:",e.url,"with CA named:",s?.name),t}async function Lae(e){Jn.trace("removeNodeBack received request:",e),await sr().delete(e.name)}function XG(e){let{subscribe:t,publish:r}=e;return{...e,subscribe:r,publish:t}}var As,ZG,Ma,va,Jn,bo,wae,Iae,Cae,hl=be(()=>{As=M(Zs()),ZG=M(it()),Ma=M(require("joi")),va=M(ce());G();eh();ol();gs();Jn=M(X()),bo=M(he()),{pki:wae}=require("node-forge"),{HTTP_STATUS_CODES:Iae}=bo.hdb_errors,Cae=Ma.default.object({hostname:Ma.default.string(),verify_tls:Ma.default.boolean(),replicates:Ma.default.boolean(),subscriptions:Ma.default.array(),revoked_certificates:Ma.default.array(),shard:Ma.default.number()});a(Pae,"setNode");a(Dae,"addNodeBack");a(Lae,"removeNodeBack");a(XG,"reverseSubscription")});var Xg=P((SPe,tq)=>{"use strict";var{handleHDBError:zg,hdb_errors:Mae}=he(),{HTTP_STATUS_CODES:jg}=Mae,{addUpdateNodeValidator:vae}=Vg(),Qg=X(),Jg=(G(),D($)),eq=Ct(),Uae=oe(),dh=gr(),fh=yo(),vN=ce(),xae=MN(),{Node:Bae,NodeSubscription:Hae}=Qu(),{broadcast:kae}=st(),{setNode:Fae}=(hl(),D(_l)),EPe=ce(),gPe=(G(),D($)),Gae="Unable to create subscriptions due to schema and/or tables not existing on the local or remote node",qae="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",$ae=vN.get(Jg.CONFIG_PARAMS.CLUSTERING_NODENAME);tq.exports=Vae;async function Vae(e,t=!1){if(Qg.trace("addNode called with:",e),vN.get(Jg.CONFIG_PARAMS.REPLICATION_URL)||vN.get(Jg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Fae(e);fh.checkClusteringEnabled();let r=vae(e);if(r)throw zg(r,r.message,jg.BAD_REQUEST,void 0,void 0,!0);let n=e.node_name;if(!t){let d=await fh.getNodeRecord(n);if(!Uae.isEmptyOrZeroLength(d))throw zg(new Error,`Node '${n}' has already been added, perform update_node to proceed.`,jg.BAD_REQUEST,void 0,void 0,!0)}let{added:s,skipped:i}=await xae(e.subscriptions,n),o={message:void 0,added:s,skipped:i};if(s.length===0)return o.message=Gae,o;let c=fh.buildNodePayloads(s,$ae,Jg.OPERATIONS_ENUM.ADD_NODE,await fh.getSystemInfo()),l=[];for(let d=0,h=s.length;d<h;d++){let _=s[d];s[d].start_time===void 0&&delete s[d].start_time,l.push(new Hae(_.schema,_.table,_.publish,_.subscribe))}Qg.trace("addNode sending remote payload:",c);let u;try{u=await dh.request(`${n}.${eq.REQUEST_SUFFIX}`,c)}catch(d){Qg.error(`addNode received error from request: ${d}`);for(let _=0,p=s.length;_<p;_++){let S=s[_];S.publish=!1,S.subscribe=!1,await dh.updateRemoteConsumer(S,n)}let h=dh.requestErrorHandler(d,"add_node",n);throw zg(new Error,h,jg.INTERNAL_SERVER_ERROR,"error",h)}if(u.status===eq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let d=`Error returned from remote node ${n}: ${u.message}`;throw zg(new Error,d,jg.INTERNAL_SERVER_ERROR,"error",d)}Qg.trace(u);for(let d=0,h=s.length;d<h;d++){let _=s[d];await dh.updateRemoteConsumer(_,n),_.subscribe===!0&&await dh.updateConsumerIterator(_.schema,_.table,n,"start")}let f=new Bae(n,l,u.system_info);return await fh.upsertNodeRecord(f),kae({type:"nats_update"}),i.length>0?o.message=qae:o.message=`Successfully added '${n}' to manifest`,o}a(Vae,"addNode")});var HN=P((RPe,nq)=>{"use strict";var{handleHDBError:UN,hdb_errors:Kae}=he(),{HTTP_STATUS_CODES:xN}=Kae,{addUpdateNodeValidator:Yae}=Vg(),_h=X(),Zg=(G(),D($)),rq=Ct(),APe=oe(),hh=gr(),ph=yo(),BN=ce(),{cloneDeep:Wae}=require("lodash"),zae=MN(),{Node:jae,NodeSubscription:Qae}=Qu(),{broadcast:Jae}=st(),{setNode:Xae}=(hl(),D(_l)),Zae="Unable to update subscriptions due to schema and/or tables not existing on the local or remote node",ece="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",tce=BN.get(Zg.CONFIG_PARAMS.CLUSTERING_NODENAME);nq.exports=rce;async function rce(e){if(_h.trace("updateNode called with:",e),BN.get(Zg.CONFIG_PARAMS.REPLICATION_URL)??BN.get(Zg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Xae(e);ph.checkClusteringEnabled();let t=Yae(e);if(t)throw UN(t,t.message,xN.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n,s=await ph.getNodeRecord(r);s.length>0&&(n=Wae(s));let{added:i,skipped:o}=await zae(e.subscriptions,r),c={message:void 0,updated:i,skipped:o};if(i.length===0)return c.message=Zae,c;let l=ph.buildNodePayloads(i,tce,Zg.OPERATIONS_ENUM.UPDATE_NODE,await ph.getSystemInfo());for(let f=0,d=i.length;f<d;f++){let h=i[f];_h.trace(`updateNode updating work stream for node: ${r} subscription:`,h),i[f].start_time===void 0&&delete i[f].start_time}_h.trace("updateNode sending remote payload:",l);let u;try{u=await hh.request(`${r}.${rq.REQUEST_SUFFIX}`,l)}catch(f){_h.error(`updateNode received error from request: ${f}`);let d=hh.requestErrorHandler(f,"update_node",r);throw UN(new Error,d,xN.INTERNAL_SERVER_ERROR,"error",d)}if(u.status===rq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let f=`Error returned from remote node ${r}: ${u.message}`;throw UN(new Error,f,xN.INTERNAL_SERVER_ERROR,"error",f)}_h.trace(u);for(let f=0,d=i.length;f<d;f++){let h=i[f];await hh.updateRemoteConsumer(h,r),h.subscribe===!0?await hh.updateConsumerIterator(h.schema,h.table,r,"start"):await hh.updateConsumerIterator(h.schema,h.table,r,"stop")}return n||(n=[new jae(r,[],u.system_info)]),await nce(n[0],i,u.system_info),o.length>0?c.message=ece:c.message=`Successfully updated '${r}'`,c}a(rce,"updateNode");async function nce(e,t,r){let n=e;for(let s=0,i=t.length;s<i;s++){let o=t[s],c=!1;for(let l=0,u=e.subscriptions.length;l<u;l++){let f=n.subscriptions[l];if(f.schema===o.schema&&f.table===o.table){f.publish=o.publish,f.subscribe=o.subscribe,c=!0;break}}c||n.subscriptions.push(new Qae(o.schema,o.table,o.publish,o.subscribe))}n.system_info=r,await ph.upsertNodeRecord(n),Jae({type:"nats_update"})}a(nce,"updateNodeTable")});var cq=P((bPe,aq)=>{"use strict";var oq=require("joi"),{string:sq}=oq.types(),sce=it(),iq=(G(),D($)),ice=ce(),oce=Ct();aq.exports=ace;function ace(e){let t=sq.invalid(ice.get(iq.CONFIG_PARAMS.CLUSTERING_NODENAME)).pattern(oce.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),r=oq.object({operation:sq.valid(iq.OPERATIONS_ENUM.REMOVE_NODE).required(),node_name:t});return sce.validateBySchema(e,r)}a(ace,"removeNodeValidator")});var eS=P((NPe,_q)=>{"use strict";var{handleHDBError:lq,hdb_errors:cce}=he(),{HTTP_STATUS_CODES:uq}=cce,lce=cq(),mh=X(),dq=yo(),uce=oe(),Zu=(G(),D($)),fq=Ct(),kN=gr(),FN=ce(),{RemotePayloadObject:dce}=lh(),{NodeSubscription:fce}=Qu(),_ce=Qf(),hce=qc(),{broadcast:pce}=st(),{setNode:mce}=(hl(),D(_l)),Ece=FN.get(Zu.CONFIG_PARAMS.CLUSTERING_NODENAME);_q.exports=gce;async function gce(e){if(mh.trace("removeNode called with:",e),FN.get(Zu.CONFIG_PARAMS.REPLICATION_URL)??FN.get(Zu.CONFIG_PARAMS.REPLICATION_HOSTNAME))return mce(e);dq.checkClusteringEnabled();let t=lce(e);if(t)throw lq(t,t.message,uq.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n=await dq.getNodeRecord(r);if(uce.isEmptyOrZeroLength(n))throw lq(new Error,`Node '${r}' was not found.`,uq.BAD_REQUEST,void 0,void 0,!0);n=n[0];let s=new dce(Zu.OPERATIONS_ENUM.REMOVE_NODE,Ece,[]),i,o=!1;for(let l=0,u=n.subscriptions.length;l<u;l++){let f=n.subscriptions[l];f.subscribe===!0&&await kN.updateConsumerIterator(f.schema,f.table,r,"stop");try{await kN.updateRemoteConsumer(new fce(f.schema,f.table,!1,!1),r)}catch(d){mh.error(d)}}try{i=await kN.request(`${r}.${fq.REQUEST_SUFFIX}`,s),mh.trace("Remove node reply from remote node:",r,i)}catch(l){mh.error("removeNode received error from request:",l),o=!0}let c=new _ce(Zu.SYSTEM_SCHEMA_NAME,Zu.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[r]);return await hce.deleteRecord(c),pce({type:"nats_update"}),i?.status===fq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR||o?(mh.error("Error returned from remote node:",r,i?.message),`Successfully removed '${r}' from local manifest, however there was an error reaching remote node. Check the logs for more details.`):`Successfully removed '${r}' from manifest`}a(gce,"removeNode")});var mq=P((IPe,pq)=>{"use strict";var hq=require("joi"),{string:Sce,array:Tce}=hq.types(),Ace=it(),Rce=Vg();pq.exports=yce;function yce(e){let t=hq.object({operation:Sce.valid("configure_cluster").required(),connections:Tce.items(Rce.validation_schema).required()});return Ace.validateBySchema(e,t)}a(yce,"configureClusterValidator")});var GN=P((PPe,Aq)=>{"use strict";var Eq=(G(),D($)),tS=X(),bce=oe(),Oce=ce(),Nce=eS(),wce=Xg(),Ice=yo(),Cce=mq(),{handleHDBError:gq,hdb_errors:Pce}=he(),{HTTP_STATUS_CODES:Sq}=Pce,Dce="Configure cluster complete.",Lce="Failed to configure the cluster. Check the logs for more details.",Mce="Configure cluster was partially successful. Errors occurred when attempting to configure the following nodes. Check the logs for more details.";Aq.exports=vce;async function vce(e){tS.trace("configure cluster called with:",e);let t=Cce(e);if(t)throw gq(t,t.message,Sq.BAD_REQUEST,void 0,void 0,!0);let r=await Ice.getAllNodeRecords(),n=[];if(Oce.get(Eq.CONFIG_PARAMS.CLUSTERING_ENABLED)){for(let f=0,d=r.length;f<d;f++){let h=await Tq(Nce,{operation:Eq.OPERATIONS_ENUM.REMOVE_NODE,node_name:r[f].name},r[f].name);n.push(h)}tS.trace("All results from configure_cluster remove node:",n)}let s=[],i=e.connections.length;for(let f=0;f<i;f++){let d=e.connections[f],h=await Tq(wce,d,d.node_name);s.push(h)}tS.trace("All results from configure_cluster add node:",s);let o=[],c=[],l=!1,u=n.concat(s);for(let f=0,d=u.length;f<d;f++){let h=u[f];h.status==="rejected"&&(tS.error(h.node_name,h?.error?.message,h?.error?.stack),o.includes(h.node_name)||o.push(h.node_name)),(h?.result?.message?.includes?.("Successfully")||h?.result?.includes?.("Successfully"))&&(l=!0),!(typeof h.result=="string"&&h.result.includes("Successfully removed")||h.status==="rejected")&&c.push({node_name:h?.node_name,response:h?.result})}if(bce.isEmptyOrZeroLength(o))return{message:Dce,connections:c};if(l)return{message:Mce,failed_nodes:o,connections:c};throw gq(new Error,Lce,Sq.INTERNAL_SERVER_ERROR,void 0,void 0,!0)}a(vce,"configureCluster");async function Tq(e,t,r){try{return{node_name:r,result:await e(t)}}catch(n){return{node_name:r,error:n,status:"rejected"}}}a(Tq,"functionWrapper")});var Oq=P((LPe,bq)=>{"use strict";var Eh=require("joi"),Uce=it(),{validateSchemaExists:Rq,validateTableExists:xce,validateSchemaName:yq}=Ai(),Bce=Eh.object({operation:Eh.string().valid("purge_stream"),schema:Eh.string().custom(Rq).custom(yq).optional(),database:Eh.string().custom(Rq).custom(yq).optional(),table:Eh.string().custom(xce).required()});function Hce(e){return Uce.validateBySchema(e,Bce)}a(Hce,"purgeStreamValidator");bq.exports=Hce});var qN=P((vPe,Nq)=>{"use strict";var{handleHDBError:kce,hdb_errors:Fce}=he(),{HTTP_STATUS_CODES:Gce}=Fce,qce=Oq(),$ce=gr(),Vce=yo();Nq.exports=Kce;async function Kce(e){e.schema=e.schema??e.database;let t=qce(e);if(t)throw kce(t,t.message,Gce.BAD_REQUEST,void 0,void 0,!0);Vce.checkClusteringEnabled();let{schema:r,table:n,options:s}=e;return await $ce.purgeTableStream(r,n,s),`Successfully purged table '${r}.${n}'`}a(Kce,"purgeStream")});var KN=P((xPe,Mq)=>{"use strict";var VN=yo(),Yce=gr(),nS=ce(),ed=(G(),D($)),pl=Ct(),Wce=oe(),$N=X(),{RemotePayloadObject:zce}=lh(),{ErrorCode:wq}=require("nats"),{parentPort:Iq}=require("worker_threads"),{onMessageByType:jce}=st(),{getThisNodeName:Qce}=(gs(),D(Na)),{requestClusterStatus:Jce}=(eh(),D(Jk)),{getReplicationSharedStatus:Xce,getHDBNodeTable:Zce}=(ol(),D(MO)),{CONFIRMATION_STATUS_POSITION:ele,RECEIVED_VERSION_POSITION:tle,RECEIVED_TIME_POSITION:rle,SENDING_TIME_POSITION:nle,RECEIVING_STATUS_POSITION:sle,RECEIVING_STATUS_RECEIVING:ile}=(sN(),D(qF)),Cq=nS.get(ed.CONFIG_PARAMS.CLUSTERING_ENABLED),Pq=nS.get(ed.CONFIG_PARAMS.CLUSTERING_NODENAME);Mq.exports={clusterStatus:ole,buildNodeStatus:Lq};var Dq;jce("cluster-status",async e=>{Dq(e)});async function ole(){if(nS.get(ed.CONFIG_PARAMS.REPLICATION_URL)||nS.get(ed.CONFIG_PARAMS.REPLICATION_HOSTNAME)){let n;if(Iq){Iq.postMessage({type:"request-cluster-status"}),n=await new Promise(i=>{Dq=i});for(let i of n.connections){let o=i.name;for(let c of i.database_sockets){let l=c.database,u;for(let d of Object.values(databases[l]||{}))if(u=d.auditStore,u)break;if(!u)continue;let f=Xce(u,l,o);c.lastCommitConfirmed=rS(f[ele]),c.lastReceivedRemoteTime=rS(f[tle]),c.lastReceivedLocalTime=rS(f[rle]),c.sendingMessage=rS(f[nle]),c.lastReceivedStatus=f[sle]===ile?"Receiving":"Waiting"}}}else n=Jce();n.node_name=Qce();let s=Zce().primaryStore.get(n.node_name);return s?.shard&&(n.shard=s.shard),s?.url&&(n.url=s.url),n.is_enabled=!0,n}let e={node_name:Pq,is_enabled:Cq,connections:[]};if(!Cq)return e;let t=await VN.getAllNodeRecords();if(Wce.isEmptyOrZeroLength(t))return e;let r=[];for(let n=0,s=t.length;n<s;n++)r.push(Lq(t[n],e.connections));return await Promise.allSettled(r),e}a(ole,"clusterStatus");function rS(e){return e?e===1?"Copying":new Date(e).toUTCString():void 0}a(rS,"asDate");async function Lq(e,t){let r=e.name,n=new zce(ed.OPERATIONS_ENUM.CLUSTER_STATUS,Pq,void 0,await VN.getSystemInfo()),s,i,o=pl.CLUSTER_STATUS_STATUSES.OPEN;try{let l=Date.now();s=await Yce.request(pl.REQUEST_SUBJECT(r),n),i=Date.now()-l,s.status===pl.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR&&(o=pl.CLUSTER_STATUS_STATUSES.CLOSED,$N.error(`Error getting node status from ${r} `,s))}catch(l){$N.warn(`Error getting node status from ${r}`,l),l.code===wq.NoResponders?o=pl.CLUSTER_STATUS_STATUSES.NO_RESPONDERS:l.code===wq.Timeout?o=pl.CLUSTER_STATUS_STATUSES.TIMEOUT:o=pl.CLUSTER_STATUS_STATUSES.CLOSED}let c=new ale(r,o,s?.message?.ports?.clustering,s?.message?.ports?.operations_api,i,s?.message?.uptime,e.subscriptions,s?.message?.system_info);try{let l={name:r,system_info:s?.message?.system_info};e.system_info?.hdb_version!==ed.PRE_4_0_0_VERSION&&await VN.upsertNodeRecord(l)}catch(l){$N.error("Cluster status encountered an error updating system info for node:",r,l)}t.push(c)}a(Lq,"buildNodeStatus");function ale(e,t,r,n,s,i,o,c){this.node_name=e,this.status=t,this.ports={clustering:r,operations_api:n},this.latency_ms=s,this.uptime=i,this.subscriptions=o,this.system_info=c}a(ale,"NodeStatusObject")});var WN=P((HPe,vq)=>{"use strict";var{handleHDBError:cle,hdb_errors:lle}=he(),{HTTP_STATUS_CODES:ule}=lle,dle=gr(),fle=yo(),YN=oe(),sS=require("joi"),_le=it(),hle=2e3,ple=sS.object({timeout:sS.number().min(1),connected_nodes:sS.boolean(),routes:sS.boolean()});vq.exports=mle;async function mle(e){fle.checkClusteringEnabled();let t=_le.validateBySchema(e,ple);if(t)throw cle(t,t.message,ule.BAD_REQUEST,void 0,void 0,!0);let{timeout:r,connected_nodes:n,routes:s}=e,i=n===void 0||YN.autoCastBoolean(n),o=s===void 0||YN.autoCastBoolean(s),c={nodes:[]},l=await dle.getServerList(r??hle),u={};if(i)for(let f=0,d=l.length;f<d;f++){let h=l[f].statsz;h&&(u[l[f].server.name]=h.routes)}for(let f=0,d=l.length;f<d;f++){if(l[f].statsz)continue;let h=l[f].server,_=l[f].data;if(h.name.endsWith("-hub")){let p={name:h.name.slice(0,-4),response_time:l[f].response_time};i&&(p.connected_nodes=[],u[h.name]&&u[h.name].forEach(S=>{p.connected_nodes.includes(S.name.slice(0,-4))||p.connected_nodes.push(S.name.slice(0,-4))})),o&&(p.routes=_.cluster?.urls?_.cluster?.urls.map(S=>({host:S.split(":")[0],port:YN.autoCast(S.split(":")[1])})):[]),c.nodes.push(p)}}return c}a(mle,"clusterNetwork")});var Hq=P((FPe,Bq)=>{"use strict";var zN=require("joi"),Uq=it(),{route_constraints:xq}=ib();Bq.exports={setRoutesValidator:Ele,deleteRoutesValidator:gle};function Ele(e){let t=zN.object({server:zN.valid("hub","leaf"),routes:xq.required()});return Uq.validateBySchema(e,t)}a(Ele,"setRoutesValidator");function gle(e){let t=zN.object({routes:xq.required()});return Uq.validateBySchema(e,t)}a(gle,"deleteRoutesValidator")});var iS=P((qPe,Kq)=>{"use strict";var Oo=Dt(),jN=oe(),Rs=(G(),D($)),td=ce(),kq=Hq(),{handleHDBError:Fq,hdb_errors:Sle}=he(),{HTTP_STATUS_CODES:Gq}=Sle,qq="cluster routes successfully set",$q="cluster routes successfully deleted";Kq.exports={setRoutes:Ale,getRoutes:Rle,deleteRoutes:yle};function Tle(e){let t=Oo.getClusteringRoutes(),r=e.server==="hub"?t.hub_routes:t.leaf_routes,n=e.server==="hub"?t.leaf_routes:t.hub_routes,s=[],i=[];for(let o=0,c=e.routes.length;o<c;o++){let l=e.routes[o];l.port=jN.autoCast(l.port);let u=r.some(d=>d.host===l.host&&d.port===l.port),f=n.some(d=>d.host===l.host&&d.port===l.port);u||f?s.push(l):(r.push(l),i.push(l))}return e.server==="hub"?Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r):Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,r),{message:qq,set:i,skipped:s}}a(Tle,"setRoutesNats");function Ale(e){let t=kq.setRoutesValidator(e);if(t)throw Fq(t,t.message,Gq.BAD_REQUEST,void 0,void 0,!0);if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return Tle(e);let r=[],n=[],s=td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[];return e.routes.forEach(i=>{Vq(s,i)?n.push(i):(s.push(i),r.push(i))}),Oo.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,s),{message:qq,set:r,skipped:n}}a(Ale,"setRoutes");function Vq(e,t){return typeof t=="string"?e.includes(t):typeof t=="object"&&t!==null?e.some(r=>(r.host===t.host||r.hostname===t.hostname)&&r.port===t.port):!1}a(Vq,"existsInArray");function Rle(){if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED)){let e=Oo.getClusteringRoutes();return{hub:e.hub_routes,leaf:e.leaf_routes}}else return td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[]}a(Rle,"getRoutes");function yle(e){let t=kq.deleteRoutesValidator(e);if(t)throw Fq(t,t.message,Gq.BAD_REQUEST,void 0,void 0,!0);if(td.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return ble(e);let r=[],n=[],s=td.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[],i=[];return s.forEach(o=>{Vq(e.routes,o)?r.push(o):(i.push(o),n.push(o))}),Oo.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,i),{message:$q,deleted:r,skipped:n}}a(yle,"deleteRoutes");function ble(e){let t=Oo.getClusteringRoutes(),r=t.hub_routes,n=t.leaf_routes,s=[],i=[],o=!1,c=!1;for(let l=0,u=e.routes.length;l<u;l++){let f=e.routes[l],d=!1;for(let h=0,_=r.length;h<_;h++){let p=r[h];if(f.host===p.host&&f.port===p.port){r.splice(h,1),d=!0,o=!0,s.push(f);break}}if(!d){let h=!0;for(let _=0,p=n.length;_<p;_++){let S=n[_];if(f.host===S.host&&f.port===S.port){n.splice(_,1),c=!0,h=!1,s.push(f);break}}h&&i.push(f)}}return o&&(r=jN.isEmptyOrZeroLength(r)?null:r,Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r)),c&&(n=jN.isEmptyOrZeroLength(n)?null:n,Oo.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,n)),{message:$q,deleted:s,skipped:i}}a(ble,"deleteRoutesNats")});var Wq=P((VPe,Yq)=>{"use strict";var gh=require("alasql"),ml=require("recursive-iterator"),ei=X(),Ole=oe(),Sh=(G(),D($)),QN=class{static{a(this,"sql_statement_bucket")}constructor(t){this.ast=t,this.affected_attributes=new Map,this.table_lookup=new Map,this.schema_lookup=new Map,this.table_to_schema_lookup=new Map,wle(this.ast,this.affected_attributes,this.table_lookup,this.schema_lookup,this.table_to_schema_lookup)}getAttributesBySchemaTableName(t,r){if(!t||!r||!this.affected_attributes)return[];if(this.affected_attributes.has(t))return!this.affected_attributes.get(t).has(r)&&(r=this.table_lookup.get(r),!r)?[]:this.affected_attributes.get(t).get(r)}getAllTables(){let t=[];if(!this.affected_attributes)return t;for(let r of this.affected_attributes.keys())t.push(Array.from(this.affected_attributes.get(r).keys()));return t}getTablesBySchemaName(t){return!t||!this.affected_attributes?[]:Array.from(this.affected_attributes.get(t).keys())}getSchemas(){return this.affected_attributes?Array.from(this.affected_attributes.keys()):[]}getAst(){return this.ast}updateAttributeWildcardsForRolePerms(t){let r=this.ast.columns.filter(s=>Sh.SEARCH_WILDCARDS.includes(s.columnid));if(r.length===0)return this.ast;let n=this.ast.from[0].databaseid;return this.ast.columns=this.ast.columns.filter(s=>!Sh.SEARCH_WILDCARDS.includes(s.columnid)),r.forEach(s=>{let i=this.table_to_schema_lookup.has(s.tableid)?this.table_to_schema_lookup.get(s.tableid):n,o=this.table_lookup.has(s.tableid)?this.table_lookup.get(s.tableid):this.ast.from[0].tableid;if(t[i]&&t[i].tables[o]&&t[i].tables[o][Sh.PERMS_CRUD_ENUM.READ]){let c;t[i].tables[o].attribute_permissions.length>0?c=Nle(t[i].tables[o].attribute_permissions):c=global.hdb_schema[i][o].attributes.map(u=>({attribute_name:u.attribute}));let l=this.affected_attributes.get(i).get(o).filter(u=>!Sh.SEARCH_WILDCARDS.includes(u));c.forEach(({attribute_name:u})=>{let f=new gh.yy.Column({columnid:u});s.tableid&&(f.tableid=s.tableid),this.ast.columns.push(f),l.includes(u)||l.push(u)}),this.affected_attributes.get(i).set(o,l)}}),this.ast}};function Nle(e){return e.filter(t=>t[Sh.PERMS_CRUD_ENUM.READ])}a(Nle,"filterReadRestrictedAttrs");function wle(e,t,r,n,s){Ile(e,t,r,n,s)}a(wle,"interpretAST");function Th(e,t,r,n,s){if(!(!e||!e.databaseid)&&(t.has(e.databaseid)||t.set(e.databaseid,new Map),t.get(e.databaseid).has(e.tableid)||t.get(e.databaseid).set(e.tableid,[]),e.as&&(r.has(e.as)||r.set(e.as,e.tableid),n&&!n.has(e.as)&&n.set(e.as,e.databaseid)),s)){let i=e.databaseid,o=e.tableid;e.as&&(o=e.as),s.set(o,i)}}a(Th,"addSchemaTableToMap");function Ile(e,t,r,n,s){if(!e){ei.info("getRecordAttributesAST: invalid SQL syntax tree");return}e instanceof gh.yy.Insert?Lle(e,t,r):e instanceof gh.yy.Select?Cle(e,t,r,n,s):e instanceof gh.yy.Update?Ple(e,t,r):e instanceof gh.yy.Delete?Dle(e,t,r):ei.error("AST in getRecordAttributesAST() is not a valid SQL type.")}a(Ile,"getRecordAttributesAST");function Cle(e,t,r,n,s){if(!e){ei.info("getSelectAttributes: invalid SQL syntax tree");return}if(!e.from||e.from[0]===void 0)return;let i=e.from[0].databaseid;if(Ole.isEmptyOrZeroLength(i)){ei.error("No schema specified");return}e.from.forEach(c=>{Th(c,t,r,n,s)}),e.joins&&e.joins.forEach(c=>{c.as&&(c.table.as=c.as),Th(c.table,t,r,n,s)});let o=new ml(e.columns);for(let{node:c}of o)if(c&&c.columnid){let l=c.tableid,u=n.has(l)?n.get(l):i;if(l||(l=e.from[0].tableid),!t.get(u).has(l))if(r.has(l))l=r.get(l);else{ei.info(`table specified as ${l} not found.`);return}t.get(u).get(l).indexOf(c.columnid)<0&&t.get(u).get(l).push(c.columnid)}if(e.where){let c=new ml(e.where),l=e.from[0].tableid;for(let{node:u}of c)if(u&&u.columnid){let f=u.tableid?u.tableid:l;if(!t.get(i).has(f))if(r.has(f))f=r.get(f);else{ei.info(`table specified as ${f} not found.`);continue}t.get(i).get(f).indexOf(u.columnid)<0&&t.get(i).get(f).push(u.columnid)}}if(e.joins&&e.joins.forEach(c=>{let l=new ml(c.on);for(let{node:u}of l)if(u&&u.columnid){let f=u.tableid,d=s.get(f);if(!t.get(d).has(f))if(r.has(f))f=r.get(f);else{ei.info(`table specified as ${f} not found.`);continue}t.get(d).get(f).indexOf(u.columnid)<0&&t.get(d).get(f).push(u.columnid)}}),e.order){let c=new ml(e.order);for(let{node:l}of c)if(l&&l.columnid){let u=l.tableid,f=n.has(u)?n.get(u):i;if(u||(u=e.from[0].tableid),!t.get(f).has(u))if(r.has(u))u=r.get(u);else{ei.info(`table specified as ${u} not found.`);return}t.get(f).get(u).indexOf(l.columnid)<0&&t.get(f).get(u).push(l.columnid)}}}a(Cle,"getSelectAttributes");function Ple(e,t,r){if(!e){ei.info("getUpdateAttributes: invalid SQL syntax tree");return}let n=new ml(e.columns),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.table.tableid,s,i.columnid,t,r)}a(Ple,"getUpdateAttributes");function Dle(e,t,r){if(!e){ei.info("getDeleteAttributes: invalid SQL syntax tree");return}let n=new ml(e.where),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.table.tableid,s,i.columnid,t,r)}a(Dle,"getDeleteAttributes");function Lle(e,t,r){if(!e){ei.info("getInsertAttributes: invalid SQL syntax tree");return}let n=new ml(e.columns),s=e.into.databaseid;Th(e.into,t,r);for(let{node:i}of n)i&&i.columnid&&JN(e.into.tableid,s,i.columnid,t,r)}a(Lle,"getInsertAttributes");function JN(e,t,r,n,s){if(!n.get(t))return;let i=e;n.get(t).has(i)||(i=s.get(i)),n.get(t).get(i).push(r)}a(JN,"pushAttribute");Yq.exports=QN});var jq=P((YPe,zq)=>{"use strict";var oS=(G(),D($)),aS=class{static{a(this,"BaseLicense")}constructor(t=0,r=oS.RAM_ALLOCATION_ENUM.DEFAULT,n=oS.LICENSE_VALUES.VERSION_DEFAULT,s){this.exp_date=t,this.ram_allocation=r,this.version=n,this.fingerprint=s}},XN=class extends aS{static{a(this,"ExtendedLicense")}constructor(t=0,r=oS.RAM_ALLOCATION_ENUM.DEFAULT,n=oS.LICENSE_VALUES.VERSION_DEFAULT,s,i=!1){super(t,r,n,s),this.enterprise=i}};zq.exports={BaseLicense:aS,ExtendedLicense:XN}});var sd=P((zPe,t$)=>{"use strict";var nd=require("fs-extra"),cS=(_E(),D(fE)),Jq=require("crypto"),Mle=require("moment"),vle=require("uuid").v4,Qr=X(),ew=require("path"),Ule=oe(),El=(G(),D($)),{totalmem:Qq}=require("os"),xle=jq().ExtendedLicense,rd="invalid license key format",Ble="061183",Hle="mofi25",kle="aes-256-cbc",Fle=16,Gle=32,Xq=ce(),{resolvePath:Zq}=Dt();Xq.initSync();var ZN;t$.exports={validateLicense:e$,generateFingerPrint:$le,licenseSearch:nw,getLicense:Yle,checkMemoryLimit:Wle};function tw(){return ew.join(Xq.getHdbBasePath(),El.LICENSE_KEY_DIR_NAME,El.LICENSE_FILE_NAME)}a(tw,"getLicenseDirPath");function qle(){let e=tw();return Zq(ew.join(e,El.LICENSE_FILE_NAME))}a(qle,"getLicenseFilePath");function rw(){let e=tw();return Zq(ew.join(e,El.REG_KEY_FILE_NAME))}a(rw,"getFingerPrintFilePath");async function $le(){let e=rw();try{return await nd.readFile(e,"utf8")}catch(t){if(t.code==="ENOENT")return await Vle();throw Qr.error(`Error writing fingerprint file to ${e}`),Qr.error(t),new Error("There was an error generating the fingerprint")}}a($le,"generateFingerPrint");async function Vle(){let e=vle(),t=cS.hash(e,cS.HASH_FUNCTION.MD5),r=rw();try{await nd.mkdirp(tw()),await nd.writeFile(r,t)}catch(n){if(n.code==="EEXIST")return t;throw Qr.error(`Error writing fingerprint file to ${r}`),Qr.error(n),new Error("There was an error generating the fingerprint")}return t}a(Vle,"writeFingerprint");function e$(e,t){let r={valid_license:!1,valid_date:!1,valid_machine:!1,exp_date:null,ram_allocation:El.RAM_ALLOCATION_ENUM.DEFAULT,version:El.LICENSE_VALUES.VERSION_DEFAULT};if(!e)return Qr.error("empty license key passed to validate."),r;let n=rw(),s=!1;try{s=nd.statSync(n)}catch(i){Qr.error(i)}if(s){let i;try{i=nd.readFileSync(n,"utf8")}catch{Qr.error("error validating this machine in the license"),r.valid_machine=!1;return}let o=e.split(Hle),c=o[1];c=Buffer.concat([Buffer.from(c)],Fle);let l=Buffer.concat([Buffer.from(i)],Gle),u=Jq.createDecipheriv(kle,l,c);r.valid_date=!0,r.valid_license=!0,r.valid_machine=!0;let f=null;try{f=u.update(o[0],"hex","utf8"),f.trim(),f+=u.final("utf8")}catch{let _=Kle(o[0],i);if(_)f=_;else throw r.valid_license=!1,r.valid_machine=!1,console.error(rd),Qr.error(rd),new Error(rd)}let d;if(isNaN(f))try{d=JSON.parse(f),r.version=d.version,r.exp_date=d.exp_date,isNaN(r.exp_date)&&(r.exp_date=new Date(r.exp_date).getTime()),d.ram_allocation&&(r.ram_allocation=d.ram_allocation)}catch{throw console.error(rd),Qr.error(rd),new Error(rd)}else r.exp_date=f;r.exp_date<Mle().valueOf()&&(r.valid_date=!1),cS.validate(o[1],`${Ble}${i}${t}`,cS.HASH_FUNCTION.MD5)||(r.valid_license=!1)}else r.valid_license=!1,r.valid_machine=!1;return r.valid_license&&r.valid_machine&&r.valid_date||Qr.error("Invalid licence"),r}a(e$,"validateLicense");function Kle(e,t){try{let r=Jq.createDecipher("aes192",t),n=r.update(e,"hex","utf8");return n.trim(),n+=r.final("utf8"),n}catch{Qr.warn("Check old license failed")}}a(Kle,"checkOldLicense");function nw(){let e=new xle,t=[];try{t=nd.readFileSync(qle(),"utf-8").split(`\r
 `)}catch(r){r.code==="ENOENT"?Qr.debug("no license file found"):Qr.error(`could not search for licenses due to: '${r.message}`)}for(let r=0;r<t.length;++r){let n=t[r];try{if(Ule.isEmptyOrZeroLength(n))continue;let s=JSON.parse(n),i=e$(s.license_key,s.company);i.valid_machine===!0&&i.valid_date===!0&&i.valid_machine===!0&&(e.exp_date=i.exp_date>e.exp_date?i.exp_date:e.exp_date,e.ram_allocation=i.ram_allocation,e.enterprise=!0)}catch(s){Qr.error("There was an error parsing the license string."),Qr.error(s),e.ram_allocation=El.RAM_ALLOCATION_ENUM.DEFAULT,e.enterprise=!1}}return ZN=e,e}a(nw,"licenseSearch");async function Yle(){return ZN||await nw(),ZN}a(Yle,"getLicense");function Wle(){let e=nw().ram_allocation,t=process.constrainedMemory?.()||Qq();if(t=Math.round(Math.min(t,Qq())/2**20),t>e)return`This server has more memory (${t}MB) than HarperDB is licensed for (${e}MB), this should only be used for educational and development purposes.`}a(Wle,"checkMemoryLimit")});var ow=P((QPe,i$)=>{var lS=sd(),r$=require("chalk"),Xn=X(),n$=require("prompt"),{promisify:zle}=require("util"),sw=(G(),D($)),jle=require("fs-extra"),Qle=require("path"),Jle=oe(),{packageJson:Xle}=Et(),s$=ce();s$.initSync();var Zle=require("moment"),eue=zle(n$.get),tue=Qle.join(s$.getHdbBasePath(),sw.LICENSE_KEY_DIR_NAME,sw.LICENSE_FILE_NAME,sw.LICENSE_FILE_NAME);i$.exports={getFingerprint:nue,setLicense:rue,parseLicense:iw,register:sue,getRegistrationInfo:oue};async function rue(e){if(e&&e.key&&e.company){try{Xn.info(`parsing license key: ${e.key} and `);let t=e.company.toString();await iw(e.key.trim(),t.trim())}catch(t){let r="There was an error parsing the license key.";throw Xn.error(r),Xn.error(t),new Error(r)}return"Wrote license key file.  Registration successful."}throw new Error("Invalid key or company specified for license file.")}a(rue,"setLicense");async function nue(){let e={};try{e=await lS.generateFingerPrint()}catch(t){let r="Error generating fingerprint.";throw Xn.error(r),Xn.error(t),new Error(r)}return e}a(nue,"getFingerprint");async function iw(e,t){if(!e||!t)throw new Error("Invalid entries for License Key and Customer Company");Xn.info("Validating license input...");let r=lS.validateLicense(e,t);if(Xn.info("checking for valid license..."),!r.valid_license)throw new Error("Invalid license found.");if(Xn.info("checking valid license date..."),!r.valid_date)throw new Error("This License has expired.");if(Xn.info(`checking for valid machine license ${r.valid_machine}`),!r.valid_machine)throw new Error("This license is in use on another machine.");try{Xn.info("writing license to disk"),await jle.writeFile(tue,JSON.stringify({license_key:e,company:t}))}catch(n){throw Xn.error("Failed to write License"),n}return"Registration successful."}a(iw,"parseLicense");async function sue(){let e=await iue();return iw(e.HDB_LICENSE,e.CUSTOMER_COMPANY)}a(sue,"register");async function iue(){let e=await lS.generateFingerPrint(),t={properties:{CUSTOMER_COMPANY:{description:r$.magenta("[COMPANY] Please enter your company name"),required:!0},HDB_LICENSE:{description:r$.magenta(`[HDB_LICENSE] Your fingerprint is ${e} Please enter your license key`),required:!0}}};try{n$.start()}catch(n){Xn.error(n)}let r;try{r=await eue(t)}catch(n){throw console.error("There was a problem prompting for registration input.  Exiting."),n}return r}a(iue,"promptForRegistration");async function oue(){let e={registered:!1,version:null,ram_allocation:null,license_expiration_date:null},t;try{t=await lS.getLicense()}catch(r){throw Xn.error(`There was an error when searching licenses due to: ${r.message}`),r}if(Jle.isEmptyOrZeroLength(t))throw new Error("There were no licenses found.");if(e.registered=t.enterprise,e.version=Xle.version,e.ram_allocation=t.ram_allocation,isNaN(t.exp_date))e.license_expiration_date=t.enterprise?t.exp_date:null;else{let r=Zle.utc(t.exp_date).format("YYYY-MM-DD");e.license_expiration_date=t.enterprise?r:null}return e}a(oue,"getRegistrationInfo")});var a$=P((XPe,o$)=>{"use strict";var aue=Ct(),aw=class{static{a(this,"HubConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d,h,_,p){this.port=t,o===null&&(o=void 0),this.server_name=r+aue.SERVER_SUFFIX.HUB,this.pid_file=n,this.max_payload=67108864,this.reconnect_error_reports=100,this.jetstream={enabled:!1},this.tls={cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l},this.leafnodes={port:u,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c}},this.cluster={name:f,port:d,routes:h,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l}},this.accounts={SYS:{users:_},HDB:{users:p}},this.system_account="SYS"}};o$.exports=aw});var u$=P((eDe,l$)=>{"use strict";var c$=Ct(),cw=class{static{a(this,"LeafConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d){this.port=t,d===null&&(d=void 0),this.server_name=r+c$.SERVER_SUFFIX.LEAF,this.pid_file=n,this.max_payload=67108864,this.jetstream={enabled:!0,store_dir:s,domain:r+c$.SERVER_SUFFIX.LEAF},this.tls={cert_file:u,key_file:f,ca_file:d,insecure:!0},this.leafnodes={remotes:[{tls:{ca_file:d,insecure:!0},urls:i,account:"SYS"},{tls:{ca_file:d,insecure:!0},urls:o,account:"HDB"}]},this.accounts={SYS:{users:c},HDB:{users:l,jetstream:"enabled"}},this.system_account="SYS"}};l$.exports=cw});var f$=P((rDe,d$)=>{"use strict";var lw=class{static{a(this,"HdbUserObject")}constructor(t,r){this.user=t,this.password=r}};d$.exports=lw});var h$=P((sDe,_$)=>{"use strict";var cue=Ct(),uw=class{static{a(this,"SysUserObject")}constructor(t,r){this.user=t+cue.SERVER_SUFFIX.ADMIN,this.password=r}};_$.exports=uw});var _S=P((oDe,E$)=>{"use strict";var gl=require("path"),Sl=require("fs-extra"),lue=a$(),uue=u$(),due=f$(),fue=h$(),dw=Vn(),od=oe(),yn=Dt(),dS=(G(),D($)),Ah=Ct(),{CONFIG_PARAMS:Jt}=dS,ad=X(),Rh=ce(),p$=fo(),fw=gr(),_ue=Zs(),id="clustering",hue=1e4,m$=50;E$.exports={generateNatsConfig:mue,removeNatsConfig:Eue,getHubConfigPath:pue};function pue(){let e=Rh.get(Jt.ROOTPATH);return gl.join(e,id,Ah.NATS_CONFIG_FILES.HUB_SERVER)}a(pue,"getHubConfigPath");async function mue(e=!1,t=void 0){let r=Rh.get(Jt.ROOTPATH);Sl.ensureDirSync(gl.join(r,"clustering","leaf")),Rh.initSync();let n=yn.getConfigFromFile(Jt.CLUSTERING_TLS_CERT_AUTH),s=yn.getConfigFromFile(Jt.CLUSTERING_TLS_PRIVATEKEY),i=yn.getConfigFromFile(Jt.CLUSTERING_TLS_CERTIFICATE);!await Sl.exists(i)&&!await Sl.exists(!n)&&await _ue.createNatsCerts();let o=gl.join(r,id,Ah.PID_FILES.HUB),c=gl.join(r,id,Ah.PID_FILES.LEAF),l=yn.getConfigFromFile(Jt.CLUSTERING_LEAFSERVER_STREAMS_PATH),u=gl.join(r,id,Ah.NATS_CONFIG_FILES.HUB_SERVER),f=gl.join(r,id,Ah.NATS_CONFIG_FILES.LEAF_SERVER),d=yn.getConfigFromFile(Jt.CLUSTERING_TLS_INSECURE),h=yn.getConfigFromFile(Jt.CLUSTERING_TLS_VERIFY),_=yn.getConfigFromFile(Jt.CLUSTERING_NODENAME),p=yn.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT);await fw.checkNATSServerInstalled()||fS("nats-server dependency is either missing or the wrong version. Run 'npm install' to fix");let S=await dw.listUsers(),g=yn.getConfigFromFile(Jt.CLUSTERING_USER),R=await dw.getClusterUser();(od.isEmpty(R)||R.active!==!0)&&fS(`Invalid cluster user '${g}'. A valid user with the role 'cluster_user' must be defined under clustering.user in harperdb-config.yaml`),e||(await uS(Jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),await uS(Jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT),await uS(Jt.CLUSTERING_HUBSERVER_NETWORK_PORT),await uS(Jt.CLUSTERING_LEAFSERVER_NETWORK_PORT));let E=[],T=[];for(let[se,z]of S.entries())z.role?.role===dS.ROLE_TYPES_ENUM.CLUSTER_USER&&z.active&&(E.push(new fue(z.username,p$.decrypt(z.hash))),T.push(new due(z.username,p$.decrypt(z.hash))));let O=[],{hub_routes:v}=yn.getClusteringRoutes();if(!od.isEmptyOrZeroLength(v))for(let se of v)O.push(`tls://${R.sys_name_encoded}:${R.uri_encoded_d_hash}@${se.host}:${se.port}`);let F=new lue(yn.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_NETWORK_PORT),_,o,i,s,n,d,h,p,yn.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_CLUSTER_NAME),yn.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),O,E,T);n==null&&(delete F.tls.ca_file,delete F.leafnodes.tls.ca_file),t=od.isEmpty(t)?void 0:t.toLowerCase(),(t===void 0||t===dS.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())&&(await Sl.writeJson(u,F),ad.trace(`Hub server config written to ${u}`));let q=`tls://${R.sys_name_encoded}:${R.uri_encoded_d_hash}@0.0.0.0:${p}`,j=`tls://${R.uri_encoded_name}:${R.uri_encoded_d_hash}@0.0.0.0:${p}`,te=new uue(yn.getConfigFromFile(Jt.CLUSTERING_LEAFSERVER_NETWORK_PORT),_,c,l,[q],[j],E,T,i,s,n,d);n==null&&delete te.tls.ca_file,(t===void 0||t===dS.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())&&(await Sl.writeJson(f,te),ad.trace(`Leaf server config written to ${f}`))}a(mue,"generateNatsConfig");async function uS(e){let t=Rh.get(e);return od.isEmpty(t)&&fS(`port undefined for '${e}'`),await od.isPortTaken(t)&&fS(`'${e}' port '${t}' is is in use by another process, check to see if HarperDB is already running or another process is using this port.`),!0}a(uS,"isPortAvailable");function fS(e){let t=`Error generating clustering config: ${e}`;ad.error(t),console.error(t),process.exit(1)}a(fS,"generateNatsConfigError");async function Eue(e){let{port:t,config_file:r}=fw.getServerConfig(e),{username:n,decrypt_hash:s}=await dw.getClusterUser(),i=0,o=2e3;for(;i<m$;){try{let f=await fw.createConnection(t,n,s,!1);if(f.protocol.connected===!0){f.close();break}}catch(f){ad.trace(`removeNatsConfig waiting for ${e}. Caught and swallowed error ${f}`)}if(i++,i>=m$)throw new Error(`Operations API timed out attempting to connect to ${e}. This is commonly caused by incorrect clustering config. Check hdb.log for further details.`);let u=o*(i*2);u>3e4&&ad.notify("Operations API waiting for Nats server connection. This could be caused by large Nats streams or incorrect clustering config."),await od.async_set_timeout(u)}let c="0".repeat(hue),l=gl.join(Rh.get(Jt.ROOTPATH),id,r);await Sl.writeFile(l,c),await Sl.remove(l),ad.notify(e,"started.")}a(Eue,"removeNatsConfig")});var y$=P((cDe,R$)=>{"use strict";var Zn=ce(),gue=sd(),qe=(G(),D($)),yh=Ct(),No=require("path"),{PACKAGE_ROOT:pS}=Et(),g$=ce(),hS=oe(),cd="/dev/null",Sue=No.join(pS,"launchServiceScripts"),S$=No.join(pS,"utility/scripts"),Tue=No.join(S$,qe.HDB_RESTART_SCRIPT),T$=No.resolve(pS,"dependencies",`${process.platform}-${process.arch}`,yh.NATS_BINARY_NAME);function A$(){let t=gue.licenseSearch().ram_allocation||qe.RAM_ALLOCATION_ENUM.DEFAULT,r=qe.MEM_SETTING_KEY+t,n={[qe.PROCESS_NAME_ENV_PROP]:qe.PROCESS_DESCRIPTORS.HDB,IS_SCRIPTED_SERVICE:!0};return hS.noBootFile()&&(n[qe.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=hS.getEnvCliRootPath()),{name:qe.PROCESS_DESCRIPTORS.HDB,script:qe.LAUNCH_SERVICE_SCRIPTS.MAIN,exec_mode:"fork",env:n,node_args:r,cwd:pS}}a(A$,"generateMainServerConfig");var Aue=9930;function Rue(){Zn.initSync(!0);let e=Zn.get(qe.CONFIG_PARAMS.ROOTPATH),t=No.join(e,"clustering",yh.NATS_CONFIG_FILES.HUB_SERVER),r=No.join(Zn.get(qe.HDB_SETTINGS_NAMES.LOG_PATH_KEY),qe.LOG_NAMES.HDB),n=g$.get(qe.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),s=yh.LOG_LEVEL_FLAGS[Zn.get(qe.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:qe.PROCESS_DESCRIPTORS.CLUSTERING_HUB+(n!==Aue?"-"+n:""),script:T$,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[qe.PROCESS_NAME_ENV_PROP]:qe.PROCESS_DESCRIPTORS.CLUSTERING_HUB},merge_logs:!0,out_file:r,error_file:r,instances:1};return Zn.get(qe.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=cd,i.error_file=cd),i}a(Rue,"generateNatsHubServerConfig");var yue=9940;function bue(){Zn.initSync(!0);let e=Zn.get(qe.CONFIG_PARAMS.ROOTPATH),t=No.join(e,"clustering",yh.NATS_CONFIG_FILES.LEAF_SERVER),r=No.join(Zn.get(qe.HDB_SETTINGS_NAMES.LOG_PATH_KEY),qe.LOG_NAMES.HDB),n=g$.get(qe.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),s=yh.LOG_LEVEL_FLAGS[Zn.get(qe.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:qe.PROCESS_DESCRIPTORS.CLUSTERING_LEAF+(n!==yue?"-"+n:""),script:T$,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[qe.PROCESS_NAME_ENV_PROP]:qe.PROCESS_DESCRIPTORS.CLUSTERING_LEAF},merge_logs:!0,out_file:r,error_file:r,instances:1};return Zn.get(qe.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=cd,i.error_file=cd),i}a(bue,"generateNatsLeafServerConfig");function Oue(){Zn.initSync();let e=No.join(Zn.get(qe.CONFIG_PARAMS.LOGGING_ROOT),qe.LOG_NAMES.HDB),t={name:qe.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0,script:qe.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,exec_mode:"fork",env:{[qe.PROCESS_NAME_ENV_PROP]:qe.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0},merge_logs:!0,out_file:e,error_file:e,instances:1,cwd:Sue,autorestart:!1};return Zn.get(qe.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(t.out_file=cd,t.error_file=cd),t}a(Oue,"generateClusteringUpgradeV4ServiceConfig");function Nue(){let e={[qe.PROCESS_NAME_ENV_PROP]:qe.PROCESS_DESCRIPTORS.RESTART_HDB};return hS.noBootFile()&&(e[qe.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=hS.getEnvCliRootPath()),{...{name:qe.PROCESS_DESCRIPTORS.RESTART_HDB,exec_mode:"fork",env:e,instances:1,autorestart:!1,cwd:S$},script:Tue}}a(Nue,"generateRestart");function wue(){return{apps:[A$()]}}a(wue,"generateAllServiceConfigs");R$.exports={generateAllServiceConfigs:wue,generateMainServerConfig:A$,generateRestart:Nue,generateNatsHubServerConfig:Rue,generateNatsLeafServerConfig:bue,generateClusteringUpgradeV4ServiceConfig:Oue}});var Oh=P((dDe,B$)=>{"use strict";var rt=(G(),D($)),Iue=oe(),Io=_S(),mS=gr(),wo=Ct(),Ua=y$(),ES=ce(),Tl=X(),Cue=yo(),{startWorker:b$,onMessageFromWorkers:Pue}=st(),Due=Xu(),uDe=require("util"),Lue=require("child_process"),Mue=require("fs"),{execFile:vue}=Lue,Qe;B$.exports={enterPM2Mode:Uue,start:xa,stop:_w,reload:N$,restart:w$,list:hw,describe:P$,connect:Co,kill:Fue,startAllServices:Gue,startService:pw,getUniqueServicesList:D$,restartAllServices:que,isServiceRegistered:L$,reloadStopStart:M$,restartHdb:C$,deleteProcess:Hue,startClusteringProcesses:U$,startClusteringThreads:x$,isHdbRestartRunning:kue,isClusteringRunning:Vue,stopClustering:$ue,reloadClustering:Kue,expectedRestartOfChildren:I$};var bh=!1;Pue(e=>{e.type==="restart"&&ES.initSync(!0)});function Uue(){bh=!0}a(Uue,"enterPM2Mode");function Co(){return Qe||(Qe=require("pm2")),new Promise((e,t)=>{Qe.connect((r,n)=>{r&&t(r),e(n)})})}a(Co,"connect");var Jr,xue=10,O$;function xa(e,t=!1){if(bh)return Bue(e);let r=vue(e.script,e.args.split(" "),e);r.name=e.name,r.config=e,r.on("exit",async i=>{let o=Jr.indexOf(r);o>-1&&Jr.splice(o,1),!O$&&i!==0&&(e.restarts=(e.restarts||0)+1,e.restarts<xue&&(Mue.existsSync(Io.getHubConfigPath())?xa(e):(await Io.generateNatsConfig(!0),xa(e),await new Promise(c=>setTimeout(c,3e3)),await Io.removeNatsConfig(rt.PROCESS_DESCRIPTORS.CLUSTERING_HUB),await Io.removeNatsConfig(rt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF))))});let n={serviceName:e.name.replace(/ /g,"-")};function s(i){let o=ES.get(rt.CONFIG_PARAMS.CLUSTERING_LOGLEVEL),c=/\[\d+][^\[]+\[(\w+)]/g,l,u=0,f;for(;l=c.exec(i);){if(l.index&&wo.LOG_LEVEL_HIERARCHY[o]>=wo.LOG_LEVEL_HIERARCHY[f||"info"]){let _=f===wo.LOG_LEVELS.ERR||f===wo.LOG_LEVELS.WRN?Tl.OUTPUTS.STDERR:Tl.OUTPUTS.STDOUT;Tl.logCustomLevel(f||"info",_,n,i.slice(u,l.index).trim())}let[d,h]=l;u=l.index+d.length,f=wo.LOG_LEVELS[h]}if(wo.LOG_LEVEL_HIERARCHY[o]>=wo.LOG_LEVEL_HIERARCHY[f||"info"]){let d=f===wo.LOG_LEVELS.ERR||f===wo.LOG_LEVELS.WRN?Tl.OUTPUTS.STDERR:Tl.OUTPUTS.STDOUT;Tl.logCustomLevel(f||"info",d,n,i.slice(u).trim())}}if(a(s,"extractMessages"),r.stdout.on("data",s),r.stderr.on("data",s),r.unref(),!Jr&&(Jr=[],!t)){let i=a(()=>{O$=!0,Jr&&(Jr.map(o=>o.kill()),process.exit(0))},"kill_children");process.on("exit",i),process.on("SIGINT",i),process.on("SIGQUIT",i),process.on("SIGTERM",i)}Jr.push(r)}a(xa,"start");function Bue(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.start(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(Bue,"startWithPM2");function _w(e){if(!bh){for(let t of Jr||[])t.name===e&&(Jr.splice(Jr.indexOf(t),1),t.kill());return}return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.stop(e,async(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.delete(e,(i,o)=>{i&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(o)})})})}a(_w,"stop");function N$(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.reload(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(N$,"reload");function w$(e){if(!bh){I$();for(let t of Jr||[])t.name===e&&t.kill()}return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.restart(e,(n,s)=>{Qe.disconnect(),t(s)})})}a(w$,"restart");function I$(){for(let e of Jr||[])e.config&&(e.config.restarts=0)}a(I$,"expectedRestartOfChildren");function Hue(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.delete(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(Hue,"deleteProcess");async function C$(){await xa(Ua.generateRestart())}a(C$,"restartHdb");async function kue(){let e=await hw();for(let t in e)if(e[t].name===rt.PROCESS_DESCRIPTORS.RESTART_HDB)return!0;return!1}a(kue,"isHdbRestartRunning");function hw(){return new Promise(async(e,t)=>{try{await Co()}catch(r){t(r)}Qe.list((r,n)=>{r&&(Qe.disconnect(),t(r)),Qe.disconnect(),e(n)})})}a(hw,"list");function P$(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.describe(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(P$,"describe");function Fue(){if(!bh){for(let e of Jr||[])e.kill();Jr=[];return}return new Promise(async(e,t)=>{try{await Co()}catch(r){t(r)}Qe.killDaemon((r,n)=>{r&&(Qe.disconnect(),t(r)),Qe.disconnect(),e(n)})})}a(Fue,"kill");async function Gue(){try{await U$(),await x$(),await xa(Ua.generateAllServiceConfigs())}catch(e){throw Qe?.disconnect(),e}}a(Gue,"startAllServices");async function pw(e,t=!1){try{let r;switch(e=e.toLowerCase(),e){case rt.PROCESS_DESCRIPTORS.HDB.toLowerCase():r=Ua.generateMainServerConfig();break;case rt.PROCESS_DESCRIPTORS.CLUSTERING_INGEST_SERVICE.toLowerCase():r=Ua.generateNatsIngestServiceConfig();break;case rt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE.toLowerCase():r=Ua.generateNatsReplyServiceConfig();break;case rt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase():r=Ua.generateNatsHubServerConfig(),await xa(r,t),await Io.removeNatsConfig(e);return;case rt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase():r=Ua.generateNatsLeafServerConfig(),await xa(r,t),await Io.removeNatsConfig(e);return;case rt.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0.toLowerCase():r=Ua.generateClusteringUpgradeV4ServiceConfig();break;default:throw new Error(`Start service called with unknown service config: ${e}`)}await xa(r)}catch(r){throw Qe?.disconnect(),r}}a(pw,"startService");async function D$(){try{let e=await hw(),t={};for(let r=0,n=e.length;r<n;r++){let s=e[r];t[s.name]===void 0&&(t[s.name]={name:s.name,exec_mode:s.pm2_env.exec_mode})}return t}catch(e){throw Qe?.disconnect(),e}}a(D$,"getUniqueServicesList");async function que(e=[]){try{let t=!1,r=await D$();for(let n=0,s=Object.values(r).length;n<s;n++){let o=Object.values(r)[n].name;e.includes(o)||(o===rt.PROCESS_DESCRIPTORS.HDB?t=!0:await w$(o))}t&&await M$(rt.PROCESS_DESCRIPTORS.HDB)}catch(t){throw Qe?.disconnect(),t}}a(que,"restartAllServices");async function L$(e){if(Jr?.find(r=>r.name===e))return!0;let t=await Due.getHDBProcessInfo();return t.core.length&&t.core[0]?.parent==="PM2"}a(L$,"isServiceRegistered");async function M$(e){let t=ES.get(rt.CONFIG_PARAMS.THREADS_COUNT)??ES.get(rt.CONFIG_PARAMS.THREADS),r=await P$(e),n=Iue.isEmptyOrZeroLength(r)?0:r.length;t!==n?(await _w(e),await pw(e)):e===rt.PROCESS_DESCRIPTORS.HDB?await C$():await N$(e)}a(M$,"reloadStopStart");var v$;async function U$(e=!1){for(let t in rt.CLUSTERING_PROCESSES){let r=rt.CLUSTERING_PROCESSES[t];await pw(r,e)}}a(U$,"startClusteringProcesses");async function x$(){v$=b$(rt.LAUNCH_SERVICE_SCRIPTS.NATS_REPLY_SERVICE,{name:rt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE});try{await mS.deleteLocalStream("__HARPERDB_WORK_QUEUE__")}catch{}await mS.updateLocalStreams();let e=await Cue.getAllNodeRecords();for(let t=0,r=e.length;t<r;t++)if(e[t].system_info?.hdb_version===rt.PRE_4_0_0_VERSION){Tl.info("Starting clustering upgrade 4.0.0 process"),b$(rt.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,{name:"Upgrade-4-0-0"});break}}a(x$,"startClusteringThreads");async function $ue(){for(let e in rt.CLUSTERING_PROCESSES)if(e!==rt.CLUSTERING_PROCESSES.CLUSTERING_INGEST_PROC_DESCRIPTOR)if(e===rt.CLUSTERING_PROCESSES.CLUSTERING_REPLY_SERVICE_DESCRIPTOR)await v$.terminate();else{let t=rt.CLUSTERING_PROCESSES[e];await _w(t)}}a($ue,"stopClustering");async function Vue(){for(let e in rt.CLUSTERING_PROCESSES){let t=rt.CLUSTERING_PROCESSES[e];if(await L$(t)===!1)return!1}return!0}a(Vue,"isClusteringRunning");async function Kue(){await Io.generateNatsConfig(!0),await mS.reloadNATSHub(),await mS.reloadNATSLeaf(),await Io.removeNatsConfig(rt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase()),await Io.removeNatsConfig(rt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())}a(Kue,"reloadClustering")});var gw={};Be(gw,{compactOnStart:()=>Yue,copyDb:()=>$$});async function Yue(){Ba.notify("Running compact on start"),console.log("Running compact on start");let e=(0,mw.get)(B.ROOTPATH),t=new Map,r=Xe();(0,Ew.updateConfigValue)(B.STORAGE_COMPACTONSTART,!1);try{for(let n in r){if(n==="system"||n.endsWith("-copy"))continue;let s;for(let l in r[n]){s=r[n][l].primaryStore.path;break}if(!s){console.log("Couldn't find any tables in database",n);continue}let i=(0,gS.join)(e,"backup",n+".mdb"),o=(0,gS.join)(e,lc,n+"-copy.mdb"),c=0;try{c=await H$(n),console.log("Database",n,"before compact has a total record count of",c)}catch(l){Ba.error("Error getting record count for database",n,l),console.error("Error getting record count for database",n,l)}t.set(n,{db_path:s,copy_dest:o,backup_dest:i,record_count:c}),await $$(n,o),console.log("Backing up",n,"to",i),await(0,Al.move)(s,i,{overwrite:!0})}try{Ru()}catch(n){Ba.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n)}for(let[n,{db_path:s,copy_dest:i}]of t)console.log("Moving copy compacted",n,"to",s),await(0,Al.move)(i,s,{overwrite:!0}),await(0,Al.remove)((0,gS.join)(e,lc,`${n}-copy.mdb-lock`));try{Ru()}catch(n){Ba.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n),process.exit(0)}}catch(n){Ba.error("Error compacting database, rolling back operation",n),console.error("Error compacting database, rolling back operation",n),(0,Ew.updateConfigValue)(B.STORAGE_COMPACTONSTART,!1);for(let[s,{db_path:i,backup_dest:o}]of t){console.error("Moving backup database",o,"back to",i);try{await(0,Al.move)(o,i,{overwrite:!0})}catch(c){console.error(c)}}throw Ru(),n}for(let[n,{backup_dest:s,record_count:i}]of t){let o=!0,c=await H$(n);if(console.log("Database",n,"after compact has a total record count of",c),i!==c){o=!1;let l=`There is a discrepancy between pre and post compact record count for database ${n}.
 Total record count before compaction: ${i}, total after: ${c}.
 Database backup has not been removed and can be found here: ${s}`;Ba.error(l),console.error(l)}(0,mw.get)(B.STORAGE_COMPACTONSTARTKEEPBACKUP)===!0||o===!1||(console.log("Removing backup",s),await(0,Al.remove)(s))}}async function H$(e){let t=await(0,q$.describeSchema)({database:e}),r=0;for(let n in t)r+=t[n].record_count;return r}async function $$(e,t){console.log("copyDb start");let r=Xe()[e],n;for(let d in r){n=r[d].primaryStore.rootStore;break}let s=n.dbisDb,i=n.auditStore,o=(0,k$.open)(new F$.default(t)),c=o.openDB(SS.INTERNAL_DBIS_NAME),l,u=0,f=s.useReadTransaction();try{for(let{key:h,value:_}of s.getRange({transaction:f})){let p=_.is_hash_attribute||_.isPrimaryKey,S,g;if(p&&(S=_.compression,g=xE(),g?_.compression=g:delete _.compression,S?.dictionary?.toString()===g?.dictionary?.toString()&&(S=null,g=null)),c.put(h,_),!(p||_.indexed))continue;let R=new G$.default(!p,p);R.encoding="binary",R.compression=S;let E=n.openDB(h,R);E.decoder=null,E.decoderCopies=!1,E.encoding="binary",R.compression=g;let T=o.openDB(h,R);T.encoder=null,console.log("copying",h,"from",e,"to",t),await d(E,T,p,f)}if(i){let h=n.openDB(SS.AUDIT_STORE_NAME,Uf);console.log("copying audit log for",e,"to",t),d(i,h,!1,f)}async function d(h,_,p,S){let g=0,R=0,E=1e7,T=null;for(;E-- >0;)try{for(let O of h.getKeys({start:T,transaction:S}))try{T=O;let{value:v,version:F}=h.getEntry(O,{transaction:S});l=_.put(O,v,p?F:void 0),g++,S.openTimer&&(S.openTimer=0),R+=(O?.length||10)+v.length,u++>5e3&&(await l,console.log("copied",g,"entries",R,"bytes"),u=0)}catch(v){console.error("Error copying record",typeof O=="symbol"?"symbol":O,"from",e,"to",t,v)}console.log("finish copying, copied",g,"entries",R,"bytes");return}catch{if(typeof T=="string"){if(T==="z")return console.error("Reached end of dbi",T,"for",e,"to",t);T=T.slice(0,-2)+"z"}else if(typeof T=="number")T++;else return console.error("Unknown key type",T,"for",e,"to",t)}}a(d,"copyDbi"),await l,console.log("copied database "+e+" to "+t)}finally{f.done(),o.close()}}var k$,gS,Al,mw,F$,G$,SS,q$,Ew,Ba,Sw=be(()=>{Ue();k$=require("lmdb"),gS=require("path"),Al=require("fs-extra"),mw=M(ce()),F$=M(Bf()),G$=M(xf()),SS=M(Ft());G();no();q$=M(_o()),Ew=M(Dt()),Ba=M(X());a(Yue,"compactOnStart");a(H$,"getTotalDBRecordCount");a($$,"copyDb")});var ud=P((TDe,Q$)=>{"use strict";var Wue=require("minimist"),{isMainThread:Aw,parentPort:wh,threadId:EDe}=require("worker_threads"),ot=(G(),D($)),xi=X(),Rw=oe(),AS=_S(),TS=gr(),gDe=Ct(),W$=Dt(),ti=Oh(),V$=Xu(),{compactOnStart:zue}=(Sw(),D(gw)),jue=uc(),{restartWorkers:RS,onMessageByType:Que}=st(),{handleHDBError:Jue,hdb_errors:Xue}=he(),{HTTP_STATUS_CODES:Zue}=Xue,Ih=ce(),{sendOperationToNode:K$,getThisNodeName:ede,monitorNodeCAs:tde}=(gs(),D(Na)),{getHDBNodeTable:SDe}=(ol(),D(MO));Ih.initSync();var Nh=`Restarting HarperDB. This may take up to ${ot.RESTART_TIMEOUT_MS/1e3} seconds.`,rde="Restart is not available from the CLI when running in non-pm2 mode. Either call restart from the API or stop and start HarperDB.",Y$="Clustering is not enabled so cannot be restarted",nde="Invalid service",ld,ys;Q$.exports={restart:z$,restartService:yw};Aw&&Que(ot.ITC_EVENT_TYPES.RESTART,async(e,t)=>{e.workerType?await yw({service:e.workerType}):z$({operation:"restart"}),t.postMessage({type:"restart-complete"})});async function z$(e){ys=Object.keys(e).length===0,ld=await ti.isServiceRegistered(ot.PROCESS_DESCRIPTORS.HDB);let t=Wue(process.argv);if(t.service){await yw(t);return}if(ys&&!ld){console.error(rde);return}if(ys&&console.log(Nh),ld){ti.enterPM2Mode(),xi.notify(Nh);let r=jue(Object.keys(ot.CONFIG_PARAM_MAP),!0);return Rw.isEmptyOrZeroLength(Object.keys(r))||W$.updateConfigValue(void 0,void 0,r,!0,!0),sde(),Nh}return Aw?(xi.notify(Nh),Ih.get(ot.CONFIG_PARAMS.STORAGE_COMPACTONSTART)&&await zue(),process.env.HARPER_EXIT_ON_RESTART&&process.exit(0),setTimeout(()=>{RS()},50)):wh.postMessage({type:ot.ITC_EVENT_TYPES.RESTART}),Nh}a(z$,"restart");async function yw(e){let{service:t}=e;if(ot.HDB_PROCESS_SERVICES[t]===void 0)throw Jue(new Error,nde,Zue.BAD_REQUEST,void 0,void 0,!0);if(ti.expectedRestartOfChildren(),ld=await ti.isServiceRegistered(ot.PROCESS_DESCRIPTORS.HDB),!Aw){e.replicated&&tde(),wh.postMessage({type:ot.ITC_EVENT_TYPES.RESTART,workerType:t}),wh.ref(),await new Promise(s=>{wh.on("message",i=>{i.type==="restart-complete"&&(s(),wh.unref())})});let n;if(e.replicated){e.replicated=!1,n=[];for(let s of server.nodes){if(s.name===ede())continue;let i;try{({job_id:i}=await K$(s,e))}catch(o){n.push({node:s.name,message:o.message});continue}n.push(await new Promise((o,c)=>{let u=2400,f=setInterval(async()=>{if(u--<=0){clearInterval(f);let _=new Error("Timed out waiting for restart job to complete");_.replicated=n,c(_)}let h=(await K$(s,{operation:"get_job",id:i})).results[0];if(h.status==="COMPLETE"&&(clearInterval(f),o({node:s.name,message:h.message})),h.status==="ERROR"){clearInterval(f);let _=new Error(h.message);_.replicated=n,c(_)}},250)}))}return{replicated:n}}return}let r;switch(t){case ot.HDB_PROCESS_SERVICES.clustering:if(!Ih.get(ot.CONFIG_PARAMS.CLUSTERING_ENABLED)){r=Y$;break}ys&&console.log("Restarting clustering"),xi.notify("Restarting clustering"),await j$();break;case ot.HDB_PROCESS_SERVICES.clustering_config:case ot.HDB_PROCESS_SERVICES["clustering config"]:if(!Ih.get(ot.CONFIG_PARAMS.CLUSTERING_ENABLED)){r=Y$;break}ys&&console.log("Restarting clustering_config"),xi.notify("Restarting clustering_config"),await ti.reloadClustering();break;case"custom_functions":case"custom functions":case ot.HDB_PROCESS_SERVICES.harperdb:case ot.HDB_PROCESS_SERVICES.http_workers:case ot.HDB_PROCESS_SERVICES.http:if(ys&&!ld){r=`Restart ${t} is not available from the CLI when running in non-pm2 mode. Either call restart ${t} from the API or stop and start HarperDB.`;break}ys&&console.log("Restarting http_workers"),xi.notify("Restarting http_workers"),ys?await ti.restart(ot.PROCESS_DESCRIPTORS.HDB):await RS("http");break;default:r=`Unrecognized service: ${t}`;break}return r?(xi.error(r),ys&&console.error(r),r):(t==="custom_functions"&&(t="Custom Functions"),`Restarting ${t}`)}a(yw,"restartService");async function sde(){await j$(),await ti.restart(ot.PROCESS_DESCRIPTORS.HDB),await Rw.async_set_timeout(2e3),Ih.get(ot.CONFIG_PARAMS.CLUSTERING_ENABLED)&&await Tw(),ys&&(await TS.closeConnection(),process.exit(0))}a(sde,"restartPM2Mode");async function j$(){if(!W$.getConfigFromFile(ot.CONFIG_PARAMS.CLUSTERING_ENABLED))return;if((await V$.getHDBProcessInfo()).clustering.length===0)xi.trace("Clustering not running, restart will start clustering services"),await AS.generateNatsConfig(!0),await ti.startClusteringProcesses(),await ti.startClusteringThreads(),await Tw(),ys&&await TS.closeConnection();else{await AS.generateNatsConfig(!0),ld?(xi.trace("Restart clustering restarting PM2 managed Hub and Leaf servers"),await ti.restart(ot.PROCESS_DESCRIPTORS.CLUSTERING_HUB),await ti.restart(ot.PROCESS_DESCRIPTORS.CLUSTERING_LEAF)):(await V$.getHDBProcessInfo()).clustering.forEach(s=>{xi.trace("Restart clustering killing process pid",s.pid),process.kill(s.pid)}),await Rw.async_set_timeout(3e3),await Tw(),await TS.updateLocalStreams(),ys&&await TS.closeConnection(),xi.trace("Restart clustering restarting ingest and reply service threads");let t=RS(ot.LAUNCH_SERVICE_SCRIPTS.NATS_INGEST_SERVICE),r=RS(ot.LAUNCH_SERVICE_SCRIPTS.NATS_REPLY_SERVICE);await t,await r}}a(j$,"restartClustering");async function Tw(){await AS.removeNatsConfig(ot.PROCESS_DESCRIPTORS.CLUSTERING_HUB),await AS.removeNatsConfig(ot.PROCESS_DESCRIPTORS.CLUSTERING_LEAF)}a(Tw,"removeNatsConfig")});var aV=P((yDe,oV)=>{"use strict";var RDe=require("lodash"),bn=(G(),D($)),{handleHDBError:J$,hdb_errors:ide}=he(),{HDB_ERROR_MSGS:ode,HTTP_STATUS_CODES:ade}=ide,bw=X();oV.exports={getRolePermissions:lde};var Rl=Object.create(null),cde=a(e=>({key:e,perms:{}}),"perms_template_obj"),tV=a((e=!1)=>({describe:e,tables:{}}),"schema_perms_template"),rV=a((e=!1,t=!1,r=!1,n=!1)=>({[bn.PERMS_CRUD_ENUM.READ]:e,[bn.PERMS_CRUD_ENUM.INSERT]:t,[bn.PERMS_CRUD_ENUM.UPDATE]:r,[bn.PERMS_CRUD_ENUM.DELETE]:n}),"permissions_template"),Ow=a((e=!1,t=!1,r=!1,n=!1,s=!1)=>({attribute_permissions:[],describe:e,...rV(t,r,n,s)}),"table_perms_template"),X$=a((e,t=rV())=>({attribute_name:e,describe:iV(t),[Ch]:t[Ch],[Nw]:t[Nw],[ww]:t[ww]}),"attr_perms_template"),Z$=a((e,t=!1)=>({attribute_name:e,describe:t,[Ch]:t}),"timestamp_attr_perms_template"),{READ:Ch,INSERT:Nw,UPDATE:ww}=bn.PERMS_CRUD_ENUM,nV=Object.values(bn.PERMS_CRUD_ENUM),sV=[Ch,Nw,ww];function lde(e){let t;try{if(e.permission.super_user||e.permission.cluster_user)return e.permission;let r={...global.hdb_schema};delete r[bn.SYSTEM_SCHEMA_NAME],t=e.role;let n=JSON.stringify([e.__updatedtime__,r]);if(Rl[t]&&Rl[t].key===n)return Rl[t].perms;let s=ude(e,r);return Rl[t]?Rl[t].key=n:Rl[t]=cde(n),Rl[t].perms=s,s}catch(r){if(!e[bn.TIME_STAMP_NAMES_ENUM.UPDATED_TIME]||e[bn.TIME_STAMP_NAMES_ENUM.UPDATED_TIME]<bn.PERMS_UPDATE_RELEASE_TIMESTAMP){let n=`Role permissions for role '${t}' must be updated to align with new structure from the 2.2.0 release.`;throw bw.error(n),bw.debug(r),J$(new Error,ode.OUTDATED_PERMS_TRANSLATION_ERROR,ade.BAD_REQUEST)}else{let n=`There was an error while translating role permissions for role: ${t}.