harperdb 4.5.40 → 4.5.41

package/launchServiceScripts/launchNatsReplyService.js

@@ -19,7 +19,7 @@ Caused by:`));else if(typeof u=="object")try{n+=JSON.stringify(u)}catch{n+="Obje
 				This can occur during early stages of install where the config file has not yet been created`);return}else throw nr.error(i),new Error(`Error reading HarperDB config file at ${r}`)}jZ(n,r),Cy(n);let s=n.toJSON();if(FZ.config=s,Dt=Eu(s),Dt.logging_rotation_rotate)for(let i in aU)Dt[i]&&nr.error(`Config ${aU[i]} has been deprecated. Please check https://docs.harperdb.io/docs/ for further details.`);nr.trace(GZ)}}a(Zp,"initConfig");function jZ(e,t){let r=e.getIn(["rootPath"]),n=!1;if(e.hasIn(["storage","path"])||(e.setIn(["storage","path"],Vn.join(r,"database")),n=!0),e.hasIn(["logging","rotation","path"])||(e.setIn(["logging","rotation","path"],Vn.join(r,"log")),n=!0),e.hasIn(["authentication"])||(e.addIn(["authentication"],{cacheTTL:3e4,enableSessions:!0,operationTokenTimeout:e.getIn(["operationsApi","authentication","operationTokenTimeout"])??"1d",refreshTokenTimeout:e.getIn(["operationsApi","authentication","refreshTokenTimeout"])??"30d"}),n=!0),e.hasIn(["analytics"])||(e.addIn(["analytics"],{aggregatePeriod:60}),n=!0),n){if(nr.trace("Updating config file with missing config params"),e.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${e.errors}`);jr.writeFileSync(t,String(e))}}a(jZ,"checkForUpdatedConfig");function Cy(e,t=!1){let r=e.toJSON();if(r.componentsRoot=r.componentsRoot??r?.customFunctions?.root,r?.http?.threads&&(r.threads=r?.http?.threads),r.http?.port&&r.http?.port===r.http?.securePort)throw pu.CONFIG_VALIDATION("http.port and http.securePort cannot be the same value");if(r.operationsApi?.network?.port&&r.operationsApi?.network?.port===r.operationsApi?.network?.securePort)throw pu.CONFIG_VALIDATION("operationsApi.network.port and operationsApi.network.securePort cannot be the same value");let n=UZ(r,t);if(n.error)throw pu.CONFIG_VALIDATION(n.error.message);typeof n.value.threads=="object"?e.setIn(["threads","count"],n.value.threads.count):e.setIn(["threads"],n.value.threads),e.setIn(["componentsRoot"],n.value.componentsRoot),e.setIn(["logging","root"],n.value.logging.root),e.setIn(["storage","path"],n.value.storage.path),e.setIn(["logging","rotation","path"],n.value.logging.rotation.path),e.setIn(["operationsApi","network","domainSocket"],n.value?.operationsApi?.network?.domainSocket),r?.clustering?.enabled&&e.setIn(["clustering","leafServer","streams","path"],n.value.clustering.leafServer.streams?.path)}a(Cy,"validateConfig");function QZ(e,t){Dt===void 0&&(Dt={});let r=Ks[e.toLowerCase()];if(r===void 0){nr.trace(`Unable to update config object because config param '${e}' does not exist`);return}Dt[r.toLowerCase()]=t}a(QZ,"updateConfigObject");function hU(e,t,r=void 0,n=!1,s=!1,i=!1){Dt===void 0&&Zp();let o=_U(Ks.hdb_root),c=Vn.join(o,ps.HDB_CONFIG_FILE),l=ma(c),u;if(r&&Dt){let _=!1;for(let h in r)if(r[h]!=Dt[h.toLowerCase()]){_=!0;break}if(!_){nr.trace("No changes detected in config parameters, skipping update");return}}if(r===void 0&&e.toLowerCase()===$n.DATABASES)u=t;else if(r===void 0){let _;if(i)_=e;else if(_=Ks[e.toLowerCase()],_===void 0)throw new Error(`Unable to update config, unrecognized config parameter: ${e}`);let h=_.split("_"),m=Iy(_,t);l.setIn([...h],m)}else for(let _ in r){let h=Ks[_.toLowerCase()];if(h===$n.HTTP_SECUREPORT&&r[_]===Dt[$n.HTTP_PORT]?.toString()&&l.setIn(["http","port"],null),h===$n.OPERATIONSAPI_NETWORK_SECUREPORT&&r[_]===Dt[$n.OPERATIONSAPI_NETWORK_PORT.toLowerCase()]?.toString()&&l.setIn(["operationsApi","network","port"],null),h===$n.DATABASES){u=r[_];continue}if(h?.startsWith("threads_")){let m=l.getIn(["threads"]);m>=0&&(l.deleteIn(["threads"]),l.setIn(["threads","count"],m))}if(!h&&(_.endsWith("_package")||_.endsWith("_port"))&&(h=_),h!==void 0){let m=h.split("_"),S=ps.LEGACY_CONFIG_PARAMS[_.toUpperCase()];S&&S.startsWith("customFunctions")&&l.hasIn(S.split("_"))&&(h=S,m=S.split("_"));let g=Iy(h,r[_]);h==="rootPath"&&g?.endsWith("/")&&(g=g.slice(0,-1));try{m.length>1&&typeof l.getIn(m.slice(0,-1))=="boolean"&&l.deleteIn(m.slice(0,-1)),l.setIn([...m],g)}catch(A){nr.error(A)}}}u&&fU(l,u),Cy(l);let f=l.getIn(["rootPath"]),d=Vn.join(f,ps.HDB_CONFIG_FILE);if(n===!0&&JZ(c,f),l.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${l.errors}`);jr.writeFileSync(d,String(l)),s&&(Dt=Eu(l.toJSON())),nr.trace(`Config parameter: ${e} updated with value: ${t}`)}a(hU,"updateConfigValue");function JZ(e,t){try{let r=Vn.join(t,"backup",`${new Date(Date.now()).toISOString().replaceAll(":","-")}-${ps.HDB_CONFIG_FILE}.bak`);jr.copySync(e,r),nr.trace(`Config file: ${e} backed up to: ${r}`)}catch(r){nr.error($Z),nr.error(r)}}a(JZ,"backupConfigFile");var XZ=["databases"];function Eu(e){return e.http&&Object.assign(e.http,e?.customFunctions?.network),e?.operationsApi?.network&&(e.operationsApi.network={...e.http,...e.operationsApi.network}),e?.operationsApi&&(e.operationsApi.tls={...e.tls,...e.operationsApi.tls}),Xp=e,r(e);function r(n){let s={};for(let i in n)if(n.hasOwnProperty(i)){if(typeof n[i]=="object"&&n[i]!==null&&!Array.isArray(n[i])&&!XZ.includes(i)){let o=r(n[i]);for(let c in o){if(!o.hasOwnProperty(c))continue;c!=="package"&&(i=i.toLowerCase());let l=i+"_"+c;!$n[l.toUpperCase()]&&Ks[l]&&(s[Ks[l].toLowerCase()]=o[c]),s[l]=o[c]}}n[i]!==void 0&&(s[i.toLowerCase()]=n[i])}return s}a(r,"squashObj")}a(Eu,"flattenConfig");function Iy(e,t){if(e===$n.CLUSTERING_NODENAME||e===$n.CLUSTERING_USER){if(t==null)return t;if(!isNaN(t))return t.toString();if(typeof t=="string"&&t.toLowerCase()==="true"||typeof t=="string"&&t.toLowerCase()==="false")return t}else{if(xZ(t))return parseFloat(t);if(t===!0||t===!1||Array.isArray(t)||Er.isObject(t)||t===null)return t;if(typeof t=="string"&&t.toLowerCase()==="true")return!0;if(typeof t=="string"&&t.toLowerCase()==="false")return!1}if(t===void 0||t.toLowerCase()==="undefined")return null;if(typeof t=="string"&&(t.startsWith("{")&&t.endsWith("}")||t.startsWith("[")&&t.endsWith("]")))try{return JSON.parse(t)}catch{}return Er.autoCast(t)}a(Iy,"castConfigValue");function ZZ(){let e=Er.getPropsFilePath(),t=Gc(e);return ma(t).toJSON()}a(ZZ,"getConfiguration");async function e8(e){let{operation:t,hdb_user:r,hdb_auth_header:n,...s}=e;try{return hU(void 0,void 0,s,!0),YZ}catch(i){throw typeof i=="string"||i instanceof String?HZ(i,i,kZ.BAD_REQUEST,void 0,void 0,!0):i}}a(e8,"setConfiguration");function Py(){let e=Er.getPropsFilePath();try{jr.accessSync(e,jr.constants.F_OK|jr.constants.R_OK)}catch(n){if(!Er.noBootFile())throw nr.error(n),new Error(`HarperDB properties file at path ${e} does not exist`)}let t=Gc(e);return ma(t).toJSON()}a(Py,"readConfigFile");function ma(e){return cU.parseDocument(jr.readFileSync(e,"utf8"),{simpleKeys:!0})}a(ma,"parseYamlDoc");function t8(){let e=Py(),t=e?.clustering?.hubServer?.cluster?.network?.routes;t=Er.isEmptyOrZeroLength(t)?[]:t;let r=oU(t);if(r)throw pu.CONFIG_VALIDATION(r.message);let n=e?.clustering?.leafServer?.network?.routes;n=Er.isEmptyOrZeroLength(n)?[]:n;let s=oU(n);if(s)throw pu.CONFIG_VALIDATION(s.message);if(!Er.isEmptyOrZeroLength(n)&&!Er.isEmptyOrZeroLength(t)){let i=t.filter(o=>n.some(c=>c.host===o.host&&c.port===o.port));if(!Er.isEmptyOrZeroLength(i)){let o=`Duplicate hub and leaf routes found ${JSON.stringify(i)}`;throw pu.CONFIG_VALIDATION(o)}}return{hub_routes:t,leaf_routes:n}}a(t8,"getClusteringRoutes");function mU(e){let t=lU(e);Dt={};for(let r in Ks){let n=t.get(r.toUpperCase());if(Er.isEmpty(n)||typeof n=="string"&&n.trim().length===0)continue;let s=Ks[r].toLowerCase();s===$n.LOGGING_ROOT?Dt[s]=Vn.dirname(n):Dt[s]=n}return Dt}a(mU,"initOldConfig");function r8(e){let t=Py();return BZ.get(t,e.replaceAll("_","."))}a(r8,"getConfigFromFile");async function n8(e,t){let r=ma(Gc());if(r.hasIn([e])?r.setIn([e],t):r.addIn([e],t),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);await jr.writeFile(Gc(),String(r))}a(n8,"addConfig");function s8(e){let t=Gc(Er.getPropsFilePath()),r=ma(t);r.deleteIn(e);let n=r.getIn(["rootPath"]),s=Vn.join(n,ps.HDB_CONFIG_FILE);jr.writeFileSync(s,String(r))}a(s8,"deleteConfigFromFile");function i8(){return Xp||(Zp(),Xp)}a(i8,"getConfigObj");function o8(){return Dt||Zp(),Dt}a(o8,"getFlatConfigObj")});var Kn=C((KOe,Nr)=>{"use strict";var SU="username is required",TU="nothing to update, must supply active, role or password to update",AU="password cannot be an empty string",RU="If role is specified, it cannot be empty.",yU="active must be true or false";Nr.exports.addUser=m8;Nr.exports.alterUser=p8;Nr.exports.dropUser=g8;Nr.exports.getSuperUser=y8;Nr.exports.userInfo=S8;Nr.exports.listUsers=tE;Nr.exports.listUsersExternal=T8;Nr.exports.setUsersWithRolesCache=$c;Nr.exports.findAndValidateUser=ky;Nr.exports.getClusterUser=b8;Nr.exports.getUsersWithRolesCache=R8;Nr.exports.USERNAME_REQUIRED=SU;Nr.exports.ALTERUSER_NOTHING_TO_UPDATE=TU;Nr.exports.EMPTY_PASSWORD=AU;Nr.exports.EMPTY_ROLE=RU;Nr.exports.ACTIVE_BOOLEAN=yU;var bU=Qr(),a8=_a(),u_=(jp(),P(zp)),OU=Qv(),d_=Wr(),Uy=po(),Pi=ie(),NU=require("validate.js"),xy=X(),{promisify:c8}=require("util"),By=ho(),Ly=(k(),P(q)),EU=lt(),l8=Lt(),u8=oe(),d8=uo(),{hdb_errors:f8,ClientError:Ys}=he(),{HTTP_STATUS_CODES:mo,AUTHENTICATION_ERROR_MSGS:Dy,HDB_ERROR_MSGS:gu}=f8,{UserEventMsg:Hy}=Ws(),My=require("lodash"),{server:eE}=(Mr(),P(ru)),_8=X();eE.getUser=(e,t)=>ky(e,t,t!=null);eE.authenticateUser=(e,t)=>ky(e,t);var wU={username:!0,active:!0,role:!0,password:!0},gU=new Map,h8=c8(a8.delete),vy=u8.get(Ly.CONFIG_PARAMS.AUTHENTICATION_HASHFUNCTION)??u_.HASH_FUNCTION.SHA256,Di;async function m8(e){let t=NU.cleanAttributes(e,wU),r=OU.addUserValidation(t);if(r)throw new Ys(r.message);let n=await d_.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["id","permission","role"]});if(!n||n.length<1)throw new Ys(gu.ROLE_NAME_NOT_FOUND(t.role),mo.NOT_FOUND);if(n.length>1)throw new Ys(gu.DUP_ROLES_FOUND(t.role),mo.CONFLICT);n[0].permission.cluster_user===!0&&(t.hash=By.encrypt(t.password)),t.password=await u_.hash(t.password,vy),t.hash_function=vy,t.role=n[0].id;let s=await bU.insert({operation:"insert",schema:"system",table:"hdb_user",records:[t]});if(xy.debug(s),await $c(),s.skipped_hashes.length===1)throw new Ys(gu.USER_ALREADY_EXISTS(t.username),mo.CONFLICT);return Uy.signalUserChange(new Hy(process.pid)),`${t.username} successfully added`}a(m8,"addUser");async function p8(e){let t=NU.cleanAttributes(e,wU);if(Pi.isEmptyOrZeroLength(t.username))throw new Error(SU);if(Pi.isEmptyOrZeroLength(t.password)&&Pi.isEmptyOrZeroLength(t.role)&&Pi.isEmptyOrZeroLength(t.active))throw new Error(TU);if(!Pi.isEmpty(t.password)&&Pi.isEmptyOrZeroLength(t.password.trim()))throw new Error(AU);if(!Pi.isEmpty(t.active)&&!Pi.isBoolean(t.active))throw new Error(yU);if(!Pi.isEmpty(t.password)&&!Pi.isEmptyOrZeroLength(t.password.trim())&&(E8(t.username)&&(t.hash=By.encrypt(t.password)),t.password=await u_.hash(t.password,vy)),t.role==="")throw new Error(RU);if(t.role){let n=await d_.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["*"]});if(!n||n.length===0)throw new Ys(gu.ALTER_USER_ROLE_NOT_FOUND(t.role),mo.NOT_FOUND);if(n.length>1)throw new Ys(gu.DUP_ROLES_FOUND(t.role),mo.CONFLICT);t.role=n[0].id}let r=await bU.update({operation:"update",schema:"system",table:"hdb_user",records:[t]});return await $c(),Uy.signalUserChange(new Hy(process.pid)),r}a(p8,"alterUser");function E8(e){let t=!1,r=Di.get(e);return r&&r.role.permission.cluster_user===!0&&(t=!0),t}a(E8,"isClusterUser");async function g8(e){let t=OU.dropUserValidation(e);if(t)throw new Ys(t.message);if(Di.get(e.username)===void 0)throw new Ys(gu.USER_NOT_EXIST(e.username),mo.NOT_FOUND);let r=await h8({table:"hdb_user",schema:"system",hash_values:[e.username]});return xy.debug(r),await $c(),Uy.signalUserChange(new Hy(process.pid)),`${e.username} successfully deleted`}a(g8,"dropUser");async function S8(e){let t={};if(!e||!e.hdb_user)return"There was no user info in the body";t=My.cloneDeep(e.hdb_user);let r=await d_.searchByHash({schema:"system",table:"hdb_role",hash_values:[t.role.id],get_attributes:["*"]});return t.role=r[0],delete t.password,delete t.refresh_token,delete t.hash,delete t.hash_function,t}a(S8,"userInfo");async function T8(){let e=await tE();return e.forEach(t=>{delete t.password,delete t.hash,delete t.refresh_token,delete t.hash_function}),[...e.values()]}a(T8,"listUsersExternal");async function tE(){let e=await d_.searchByValue({schema:"system",table:"hdb_role",search_value:"*",search_attribute:"role",get_attributes:["*"]}),t={};for(let s of e)t[s.id]=My.cloneDeep(s);if(Object.keys(t).length===0)return null;let r=await d_.searchByValue({schema:"system",table:"hdb_user",search_value:"*",search_attribute:"username",get_attributes:["*"]}),n=new Map;for(let s of r)s=My.cloneDeep(s),s.role=t[s.role],A8(s.role),n.set(s.username,s);return n}a(tE,"listUsers");function A8(e){if(!e){xy.error("invalid user role found.");return}e.permission.system||(e.permission.system={}),e.permission.system.tables||(e.permission.system.tables={});for(let t of Object.keys(d8)){let r={read:!!e.permission.super_user,insert:!1,update:!1,delete:!1,attribute_permissions:[]};e.permission.system.tables[t]=r}}a(A8,"appendSystemTablesToRole");async function $c(e=void 0){e?Di=e:Di=await tE()}a($c,"setUsersWithRolesCache");async function R8(){return Di||await $c(),Di}a(R8,"getUsersWithRolesCache");async function ky(e,t,r=!0){Di||await $c();let n=Di.get(e);if(!n){if(!r)return{username:e};throw new Ys(Dy.GENERIC_AUTH_FAIL,mo.UNAUTHORIZED)}if(n&&!n.active)throw new Ys(Dy.USER_INACTIVE,mo.UNAUTHORIZED);let s={active:n.active,username:n.username};if(n.refresh_token&&(s.refresh_token=n.refresh_token),n.role&&(s.role=n.role),r===!0){if(gU.get(t)===n.password)return s;{let i=u_.validate(n.password,t,n.hash_function||u_.HASH_FUNCTION.MD5);if(i?.then&&(i=await i),i===!0)gU.set(t,n.password);else throw new Ys(Dy.GENERIC_AUTH_FAIL,mo.UNAUTHORIZED)}}return s}a(ky,"findAndValidateUser");async function y8(){Di||await $c();for(let[,e]of Di)if(e.role.role==="super_user")return e}a(y8,"getSuperUser");async function b8(){let e=await tE(),t=l8.getConfigFromFile(Ly.CONFIG_PARAMS.CLUSTERING_USER),r=e.get(t);if(!(r==null||r?.role?.role!==Ly.ROLE_TYPES_ENUM.CLUSTER_USER))return r.decrypt_hash=By.decrypt(r.hash),r.uri_encoded_d_hash=encodeURIComponent(r.decrypt_hash),r.uri_encoded_name=encodeURIComponent(r.username),r.sys_name=r.username+EU.SERVER_SUFFIX.ADMIN,r.sys_name_encoded=r.uri_encoded_name+EU.SERVER_SUFFIX.ADMIN,r}a(b8,"getClusterUser");var IU=[];eE.invalidateUser=function(e){for(let t of IU)try{t(e)}catch(r){_8.error("Error invalidating user",r)}};eE.onInvalidatedUser=function(e){IU.push(e)}});var __=C((jOe,LU)=>{"use strict";var Vc=X(),Yn=(k(),P(q)),O8=KM(),WOe=ms(),zOe=Ii(),N8=Kn(),{validateEvent:CU}=Ws(),f_=Gn(),w8=require("process"),{resetDatabases:I8}=(xe(),P(ct)),C8={[Yn.ITC_EVENT_TYPES.SCHEMA]:P8,[Yn.ITC_EVENT_TYPES.USER]:DU};async function P8(e){let t=CU(e);if(t){Vc.error(t);return}Vc.trace("ITC schemaHandler received schema event:",e),await O8(e.message),await D8(e.message)}a(P8,"schemaHandler");async function D8(e){try{f_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME),f_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME),f_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME);let t=I8();e.table&&e.database&&await t[e.database][e.table].put(Symbol.for("write-verify"),null)}catch(t){Vc.error(t)}}a(D8,"syncSchemaMetadata");var PU=[];async function DU(e){try{try{f_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.USER_TABLE_NAME),f_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME)}catch(r){Vc.warn(r)}let t=CU(e);if(t){Vc.error(t);return}Vc.trace(`ITC userHandler ${Yn.HDB_ITC_CLIENT_PREFIX}${w8.pid} received user event:`,e),await N8.setUsersWithRolesCache();for(let r of PU)r()}catch(t){Vc.error(t)}}a(DU,"userHandler");DU.addListener=function(e){PU.push(e)};LU.exports=C8});var Ws=C((tNe,vU)=>{"use strict";var JOe=X(),Fy=ie(),L8=(k(),P(q)),{ITC_ERRORS:h_}=Un(),{parentPort:XOe,threadId:M8,isMainThread:v8,workerData:ZOe}=require("worker_threads"),{onMessageFromWorkers:U8,broadcast:eNe,broadcastWithAcknowledgement:x8}=et();vU.exports={sendItcEvent:B8,validateEvent:MU,SchemaEventMsg:H8,UserEventMsg:k8};var rE;U8(async(e,t)=>{rE=rE||__(),MU(e),rE[e.type]&&await rE[e.type](e),e.requestId&&t&&t.postMessage({type:"ack",id:e.requestId})});function B8(e){return!v8&&e.message&&(e.message.originator=M8),x8(e)}a(B8,"sendItcEvent");function MU(e){if(typeof e!="object")return h_.INVALID_ITC_DATA_TYPE;if(!e.hasOwnProperty("type")||Fy.isEmpty(e.type))return h_.MISSING_TYPE;if(!e.hasOwnProperty("message")||Fy.isEmpty(e.message))return h_.MISSING_MSG;if(!e.message.hasOwnProperty("originator")||Fy.isEmpty(e.message.originator))return h_.MISSING_ORIGIN;if(L8.ITC_EVENT_TYPES[e.type.toUpperCase()]===void 0)return h_.INVALID_EVENT(e.type)}a(MU,"validateEvent");function H8(e,t,r,n=void 0,s=void 0){this.originator=e,this.operation=t,this.schema=r,this.table=n,this.attribute=s}a(H8,"SchemaEventMsg");function k8(e){this.originator=e}a(k8,"UserEventMsg")});var po=C((sNe,HU)=>{"use strict";var UU=(k(),P(q)),nNe=ie(),nE=X(),xU=GM(),Su,{sendItcEvent:BU}=Ws();function F8(e){try{nE.info("signalSchemaChange called with message:",e),Su=Su||__();let t=new xU(UU.ITC_EVENT_TYPES.SCHEMA,e);return Su.schema(t),BU(t)}catch(t){nE.error(t)}}a(F8,"signalSchemaChange");function q8(e){try{nE.trace("signalUserChange called with message:",e),Su=Su||__();let t=new xU(UU.ITC_EVENT_TYPES.USER,e);return Su.user(t),BU(t)}catch(t){nE.error(t)}}a(q8,"signalUserChange");HU.exports={signalSchemaChange:F8,signalUserChange:q8}});var sE=C((oNe,FU)=>{"use strict";var kU=ie(),G8=(k(),P(q)),$8=X(),V8=kp(),K8=Hp(),Y8=po(),{SchemaEventMsg:W8}=Ws(),z8="already exists in";FU.exports=j8;async function j8(e,t,r){if(kU.isEmptyOrZeroLength(r))return r;let n=[];kU.isEmptyOrZeroLength(t.attributes)||t.attributes.forEach(i=>{n.push(i.attribute)});let s=r.filter(i=>n.indexOf(i)<0);return s.length===0||await Promise.all(s.map(async i=>{await Q8(e,t.schema,t.name,i)})),s}a(j8,"lmdbCheckForNewAttributes");async function Q8(e,t,r,n){let s=new K8(t,r,n,void 0,!0);e&&(s.hdb_auth_header=e);try{await J8(s)}catch(i){if(typeof i=="object"&&i.message!==void 0&&i.message.includes(z8))$8.warn(`attribute ${t}.${r}.${n} already exists`);else throw i}}a(Q8,"createNewAttribute");async function J8(e){let t;return t=await V8(e),Y8.signalSchemaChange(new W8(process.pid,G8.OPERATIONS_ENUM.CREATE_ATTRIBUTE,e.schema,e.table,e.attribute)),t}a(J8,"createAttribute")});var Tu=C((cNe,qU)=>{"use strict";var qy=class{static{a(this,"LMDBTransactionObject")}constructor(t,r,n,s,i=void 0){this.operation=t,this.user_name=r,this.timestamp=n,this.hash_values=s,this.origin=i}};qU.exports=qy});var $U=C((uNe,GU)=>{"use strict";var X8=Tu(),Z8=(k(),P(q)).OPERATIONS_ENUM,Gy=class extends X8{static{a(this,"LMDBInsertTransactionObject")}constructor(t,r,n,s,i=void 0){super(Z8.INSERT,r,n,s,i),this.records=t}};GU.exports=Gy});var KU=C((fNe,VU)=>{"use strict";var e5=Tu(),t5=(k(),P(q)).OPERATIONS_ENUM,$y=class extends e5{static{a(this,"LMDBUpdateTransactionObject")}constructor(t,r,n,s,i,o=void 0){super(t5.UPDATE,n,s,i,o),this.records=t,this.original_records=r}};VU.exports=$y});var WU=C((hNe,YU)=>{"use strict";var r5=Tu(),n5=(k(),P(q)).OPERATIONS_ENUM,Vy=class extends r5{static{a(this,"LMDBUpsertTransactionObject")}constructor(t,r,n,s,i,o=void 0){super(n5.UPSERT,n,s,i,o),this.records=t,this.original_records=r}};YU.exports=Vy});var jU=C((pNe,zU)=>{"use strict";var s5=Tu(),i5=(k(),P(q)).OPERATIONS_ENUM,Ky=class extends s5{static{a(this,"LMDBDeleteTransactionObject")}constructor(t,r,n,s,i=void 0){super(i5.DELETE,n,s,t,i),this.original_records=r}};zU.exports=Ky});var m_=C((SNe,ZU)=>{"use strict";var gNe=require("path"),QU=ht(),o5=$U(),a5=KU(),c5=WU(),l5=jU(),Au=Ft(),JU=ie(),{CONFIG_PARAMS:u5}=(k(),P(q)),XU=oe();XU.initSync();var iE=(k(),P(q)).OPERATIONS_ENUM,{getTransactionAuditStorePath:d5}=St();ZU.exports=f5;async function f5(e,t){if(XU.get(u5.LOGGING_AUDITLOG)===!1)return;let r=d5(e.schema,e.table),n=await QU.openEnvironment(r,e.table,!0),s=_5(e,t);if(!(s===void 0||s.hash_values.length===0)&&n!==void 0){QU.initializeDBIs(n,Au.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,Au.TRANSACTIONS_DBIS);let i=s.timestamp;return await n.dbis[Au.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP].ifNoExists(i,()=>{n.dbis[Au.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP].put(i,s),JU.isEmpty(s.user_name)||n.dbis[Au.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].put(s.user_name,i);for(let o=0;o<s.hash_values.length;o++)n.dbis[Au.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE].put(s.hash_values[o],i)})}}a(f5,"writeTransaction");function _5(e,t){let r=JU.isEmpty(e.hdb_user)?void 0:e.hdb_user?.username;if(e.operation===iE.INSERT)return new o5(e.records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===iE.UPDATE)return new a5(e.records,t.original_records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===iE.UPSERT)return new c5(e.records,t.original_records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===iE.DELETE)return new l5(t.deleted,t.original_records,r,t.txn_time,e.__origin)}a(_5,"createTransactionObject")});var Yy=C((RNe,e0)=>{"use strict";var h5=Xf(),ANe=bf(),p_=(k(),P(q)),m5=Of(),p5=Uc().insertRecords,E5=ht(),g5=X(),S5=sE(),{getSchemaPath:T5}=St(),A5=m_();e0.exports=R5;async function R5(e){try{let{schema_table:t,attributes:r}=h5(e);m5(e,r,t.hash_attribute),e.schema!==p_.SYSTEM_SCHEMA_NAME&&(r.includes(p_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||r.push(p_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),r.includes(p_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||r.push(p_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let n=await S5(e.hdb_auth_header,t,r),s=T5(e.schema,e.table),i=await E5.openEnvironment(s,e.table),o=await p5(i,t.hash_attribute,r,e.records,e.__origin?.timestamp);try{await A5(e,o)}catch(c){g5.error(`unable to write transaction due to ${c.message}`)}return{written_hashes:o.written_hashes,skipped_hashes:o.skipped_hashes,schema_table:t,new_attributes:n,txn_time:o.txn_time}}catch(t){throw t}}a(R5,"lmdbCreateRecords")});var n0=C((bNe,r0)=>{"use strict";var t0=(k(),P(q)),y5=Yy(),b5=bf(),O5=require("fs-extra"),{getSchemaPath:N5}=St();r0.exports=w5;async function w5(e){let t=[{name:e.schema,createddate:Date.now()}],r=new b5(t0.SYSTEM_SCHEMA_NAME,t0.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,void 0,t);await y5(r),await O5.mkdirp(N5(e.schema))}a(w5,"lmdbCreateSchema")});var i0=C((NNe,s0)=>{"use strict";var Wy=class{static{a(this,"DeleteRecordsResponseObject")}constructor(t=[],r=[],n=void 0,s=[]){this.deleted=t,this.skipped=r,this.txn_time=n,this.original_records=s}};s0.exports=Wy});var l0=C((DNe,c0)=>{"use strict";var o0=ht(),zy=dn(),jy=Un().LMDB_ERRORS_ENUM,I5=Ft(),a0=X(),INe=ie(),C5=require("lmdb"),P5=i0(),D5=(k(),P(q)),{OVERFLOW_MARKER:CNe,MAX_SEARCH_KEY_LENGTH:PNe}=I5,L5=D5.TIME_STAMP_NAMES_ENUM.UPDATED_TIME;async function M5(e,t,r,n){if(zy.validateEnv(e),t===void 0)throw new Error(jy.HASH_ATTRIBUTE_REQUIRED);if(!Array.isArray(r))throw r===void 0?new Error(jy.IDS_REQUIRED):new Error(jy.IDS_MUST_BE_ITERABLE);try{let s=o0.listDBIs(e);o0.initializeDBIs(e,t,s);let i=new P5,o,c=[],l=[];for(let _=0,h=r.length;_<h;_++)try{o=r[_];let m=e.dbis[t].get(o);if(!m||n&&m[L5]>n){i.skipped.push(o);continue}let S=e.dbis[t].ifVersion(o,C5.IF_EXISTS,()=>{e.dbis[t].remove(o);for(let g=0;g<s.length;g++){let A=s[g];if(!m.hasOwnProperty(A)||A===t)continue;let E=e.dbis[A],T=m[A];if(T!=null)try{let N=zy.getIndexedValues(T);if(N)for(let M=0,H=N.length;M<H;M++)E.remove(N[M],o)}catch{a0.warn(`cannot delete from attribute: ${A}, ${T}:${o}`)}}});c.push(S),l.push(o),i.original_records.push(m)}catch(m){a0.warn(m),i.skipped.push(o)}let u=[],f=await Promise.all(c);for(let _=0,h=f.length;_<h;_++)f[_]===!0?i.deleted.push(l[_]):(i.skipped.push(l[_]),u.push(_));let d=0;for(let _=0;_<u.length;_++){let h=u[_];i.original_records.splice(h-d,1),d++}return i.txn_time=zy.getNextMonotonicTime(),i}catch(s){throw s}}a(M5,"deleteRecords");c0.exports={deleteRecords:M5}});var E_=C((MNe,d0)=>{"use strict";var Ru=ie(),v5=l0(),U5=ht(),{getSchemaPath:x5}=St(),B5=m_(),H5=X();d0.exports=k5;async function k5(e,t=!0){let n=global.hdb_schema[e.schema][e.table].hash_attribute;if(Ru.isEmpty(n))throw new Error(`could not retrieve hash attribute for schema:${e.schema} and table ${e.table}`);try{if(Ru.isEmptyOrZeroLength(e.hash_values)&&!Ru.isEmptyOrZeroLength(e.records)){e.hash_values=[];for(let c=0;c<e.records.length;c++){let l=e.records[c][n];Ru.isEmpty(l)||e.hash_values.push(l)}}if(Ru.isEmptyOrZeroLength(e.hash_values))return u0([],[]);if(!Array.isArray(e.hash_values))throw new Error("hash_values must be an array");if(Ru.isEmptyOrZeroLength(e.records)){e.records=[];for(let c=0;c<e.hash_values.length;c++)e.records[c]={[n]:e.hash_values[c]}}let s=x5(e.schema,e.table),i=await U5.openEnvironment(s,e.table),o=await v5.deleteRecords(i,n,e.hash_values,e.__origin?.timestamp);try{t===!0&&await B5(e,o)}catch(c){H5.error(`unable to write transaction due to ${c.message}`)}return u0(o.deleted,o.skipped,o.txn_time)}catch(s){throw s}}a(k5,"lmdbDeleteRecords");function u0(e,t,r){let n=e.length+t.length,s=n===1?"record":"records";return{message:`${e.length} of ${n} ${s} successfully deleted`,deleted_hashes:e,skipped_hashes:t,txn_time:r}}a(u0,"createDeleteResponse")});var Jy=C((xNe,f0)=>{"use strict";var F5=(k(),P(q)),UNe=dn();function Qy(e,t){let r=Object.create(null);if(t.length===1&&F5.SEARCH_WILDCARDS.indexOf(t[0])>=0)Object.assign(r,e);else for(let n=0;n<t.length;n++){let s=t[n],i=e[s];r[s]=i===void 0?null:i}return r}a(Qy,"parseRow");function q5(e,t,r,n){let s=Qy(r,e);n.push(s)}a(q5,"searchAll");function G5(e,t,r,n){let s=Qy(r,e);n[t]=s}a(G5,"searchAllToMap");function $5(e,t,r){r[e]===void 0&&(r[e]=[]),r[e].push(t)}a($5,"iterateDBI");function Kc(e,t,r,n,s){let i=Object.create(null);i[s]=e;let o;n===s?o=e:(o=t,n!==void 0&&(i[n]=o)),r[0].push(o),r[1].push(i)}a(Kc,"pushResults");function V5(e,t,r,n,s,i){t.toString().endsWith(e)&&Kc(t,r,n,s,i)}a(V5,"endsWith");function K5(e,t,r,n,s,i){t.toString().includes(e)&&Kc(t,r,n,s,i)}a(K5,"contains");function Y5(e,t,r,n,s,i){t>e&&Kc(t,r,n,s,i)}a(Y5,"greaterThanCompare");function W5(e,t,r,n,s,i){t>=e&&Kc(t,r,n,s,i)}a(W5,"greaterThanEqualCompare");function z5(e,t,r,n,s,i){t<e&&Kc(t,r,n,s,i)}a(z5,"lessThanCompare");function j5(e,t,r,n,s,i){t<=e&&Kc(t,r,n,s,i)}a(j5,"lessThanEqualCompare");f0.exports={parseRow:Qy,searchAll:q5,searchAllToMap:G5,iterateDBI:$5,endsWith:V5,contains:K5,greaterThanCompare:Y5,greaterThanEqualCompare:W5,lessThanCompare:z5,lessThanEqualCompare:j5,pushResults:Kc}});var yu=C((qNe,S0)=>{"use strict";var pa=ht(),HNe=X(),Wn=dn(),oE=Ft(),jt=Un().LMDB_ERRORS_ENUM,kNe=ie(),Q5=(k(),P(q)),aE=Jy(),{parseRow:J5}=aE,FNe=require("lmdb"),{OVERFLOW_MARKER:_0,MAX_SEARCH_KEY_LENGTH:X5}=oE;function h0(e,t,r,n=!1,s=void 0,i=void 0){return Yc(e,t,r,(o,c)=>c.getRange({transaction:o,start:n?void 0:!1,end:n?!1:void 0,limit:s,offset:i,reverse:n}))}a(h0,"iterateFullIndex");function g_(e,t,r,n,s,i=!1,o=void 0,c=void 0,l=!1,u=!1){return Yc(e,t,r,(f,d,_,h)=>{let E={transaction:f,start:i===!0?s:n,end:i===!0?n:s,reverse:i,limit:o,offset:c,inclusiveEnd:i===!0?!l:!u,exclusiveStart:i===!0?u:l};return h===r?(E.values=!1,d.getRange(E).map(T=>({value:T}))):d.getRange(E)})}a(g_,"iterateRangeBetween");function Yc(e,t,r,n){let s=e.database||e,i=pa.openDBI(s,r);i[oE.DBI_DEFINITION_NAME].is_hash_attribute?t=r:t&&pa.openDBI(s,t);let o;e.database?o=e:(o=e.useReadTransaction(),o.database=e);let c=n(o,i,s,t);return c.transaction=o,e.database||(c.onDone=()=>{o.done()}),c}a(Yc,"setupTransaction");function m0(e,t,r,n){let s;return function(i,o){if(typeof i=="string"&&i.endsWith(_0)){if(!s)if(r)s=pa.openDBI(e,r);else{let l=pa.listDBIs(e);for(let u=0,f=l.length;u<f&&(s=pa.openDBI(e,l[u]),!s[oE.DBI_DEFINITION_NAME].is_hash_attribute);u++);}i=s.get(o,{transaction:t,lazy:!0})[n]}return i}}a(m0,"getOverflowCheck");function Z5(e,t,r,n=!1,s=void 0,i=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);return Yc(e,t,t,(o,c,l)=>(cE(r),r=S_(l,r),c.getRange({transaction:o,start:n?void 0:!1,end:n?!1:void 0,limit:s,offset:i,reverse:n}).map(u=>J5(u.value,r))))}a(Z5,"searchAll");function e9(e,t,r,n=!1,s=void 0,i=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);cE(r),r=S_(e.database||e,r);let o=new Map;for(let{key:c,value:l}of h0(e,t,t,n,s,i))o.set(c,aE.parseRow(l,r));return o}a(e9,"searchAllToMap");function t9(e,t,r=!1,n=void 0,s=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.ATTRIBUTE_REQUIRED);let i=Object.create(null),o=h0(e,void 0,t,r,n,s),c=o.transaction,l=m0(c.database,c,void 0,t);for(let{key:u,value:f}of o){let d=l(u,f);i[d]===void 0&&(i[d]=[]),i[d].push(f)}return i}a(t9,"iterateDBI");function r9(e,t){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);return pa.statDBI(e,t).entryCount}a(r9,"countAll");function n9(e,t,r,n,s=!1,i=void 0,o=void 0){return Ea(e,r,n),Yc(e,t,r,(c,l,u,f)=>(n=Wn.convertKeyValueToWrite(n),f===r?l.get(n,{transaction:c,lazy:!0})===void 0?[]:[{key:n,value:n}]:l.getValues(n,{transaction:c,reverse:s,limit:i,offset:o}).map(d=>({key:n,value:d}))))}a(n9,"equals");function s9(e,t,r){return Ea(e,t,r),pa.openDBI(e,t).getValuesCount(r)}a(s9,"count");function i9(e,t,r,n,s=!1,i=void 0,o=void 0){return Ea(e,r,n),Yc(e,null,r,(c,l)=>{n=Wn.convertKeyValueToWrite(n);let u=!0;typeof n=="number"&&(u=!1);let f;if(s===!0){let d;for(let _ of l.getKeys({transaction:c,start:n}))if(!_.startsWith(n)){d=_;break}return d!==void 0&&(Number.isInteger(o)?o++:i++),f=l.getRange({transaction:c,start:d,end:void 0,reverse:s,limit:i,offset:o}).map(_=>{let{key:h}=_;if(h!==d){if(h.toString().startsWith(n))return _;if(u===!0)return f.DONE}}),f.filter(_=>_)}else return f=l.getRange({transaction:c,start:n,reverse:s,limit:i,offset:o}).map(d=>{if(d.key.toString().startsWith(n))return d;if(u===!0)return f.DONE}),u?f:f.filter(d=>d)})}a(i9,"startsWith");function o9(e,t,r,n,s=!1,i=void 0,o=void 0){return p0(e,t,r,n,s,i,o,!0)}a(o9,"endsWith");function p0(e,t,r,n,s=!1,i=void 0,o=void 0,c=!1){return Ea(e,r,n),Yc(e,null,r,(l,u,f,d)=>{let _=m0(f,l,d,r);return o=Number.isInteger(o)?o:0,u.getKeys({transaction:l,end:s?!1:void 0,reverse:s}).flatMap(h=>{let m=h.toString();return m.endsWith(_0)?u.getValues(h,{transaction:l}).map(S=>{let g=_(h,S);if(c?g.endsWith(n):g.includes(n))return{key:g,value:S}}).filter(S=>S):(c?m.endsWith(n):m.includes(n))?u[oE.DBI_DEFINITION_NAME].is_hash_attribute?{key:h,value:h}:u.getValues(h,{transaction:l}).map(S=>({key:h,value:S})):[]}).slice(o,i===void 0?void 0:i+(o||0))})}a(p0,"contains");function a9(e,t,r,n,s=!1,i=void 0,o=void 0){Ea(e,r,n);let c=typeof n,l;return c==="string"?l="\uFFFF":c==="number"?l=1/0:c==="boolean"&&(l=!0),g_(e,t,r,n,l,s,i,o,!0,!1)}a(a9,"greaterThan");function c9(e,t,r,n,s=!1,i=void 0,o=void 0){Ea(e,r,n);let c=typeof n,l;return c==="string"?l="\uFFFF":c==="number"?l=1/0:c==="boolean"&&(l=!0),g_(e,t,r,n,l,s,i,o,!1,!1)}a(c9,"greaterThanEqual");function l9(e,t,r,n,s=!1,i=void 0,o=void 0){Ea(e,r,n);let c=typeof n,l;return c==="string"?l="\0":c==="number"?l=-1/0:c==="boolean"&&(l=!1),g_(e,t,r,l,n,s,i,o,!1,!0)}a(l9,"lessThan");function u9(e,t,r,n,s=!1,i=void 0,o=void 0){Ea(e,r,n);let c=typeof n,l;return c==="string"?l="\0":c==="number"?l=-1/0:c==="boolean"&&(l=!1),g_(e,t,r,l,n,s,i,o,!1,!1)}a(u9,"lessThanEqual");function d9(e,t,r,n,s,i=!1,o=void 0,c=void 0){if(Wn.validateEnv(e),r===void 0)throw new Error(jt.ATTRIBUTE_REQUIRED);if(n===void 0)throw new Error(jt.START_VALUE_REQUIRED);if(s===void 0)throw new Error(jt.END_VALUE_REQUIRED);if(n=Wn.convertKeyValueToWrite(n),s=Wn.convertKeyValueToWrite(s),n>s)throw new Error(jt.END_VALUE_MUST_BE_GREATER_THAN_START_VALUE);return g_(e,t,r,n,s,i,o,c)}a(d9,"between");function f9(e,t,r,n){Wn.validateEnv(e);let s=e.database||e,i=e.database?e:null;if(t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);if(cE(r),r=S_(s,r),n===void 0)throw new Error(jt.ID_REQUIRED);let o=null,c=s.dbis[t].get(n,{transaction:i,lazy:r.length<3});return c&&(o=aE.parseRow(c,r)),o}a(f9,"searchByHash");function _9(e,t,r){Wn.validateEnv(e);let n=e.database||e,s=e.database?e:null;if(t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);if(r===void 0)throw new Error(jt.ID_REQUIRED);let i=!0;return n.dbis[t].get(r,{transaction:s,lazy:!0})===void 0&&(i=!1),i}a(_9,"checkHashExists");function h9(e,t,r,n,s=[]){return g0(e,t,r,n,s),E0(e,t,r,n,s).map(i=>i[1])}a(h9,"batchSearchByHash");function m9(e,t,r,n,s=[]){g0(e,t,r,n,s);let i=new Map;for(let[o,c]of E0(e,t,r,n,s))i.set(o,c);return i}a(m9,"batchSearchByHashToMap");function E0(e,t,r,n,s=[]){return Yc(e,t,t,(i,o,c)=>{r=S_(c,r);let l=r.length<3;return n.map(u=>{let f=c.dbis[t].get(u,{transaction:i,lazy:l});if(f)return[u,aE.parseRow(f,r)];s.push(u)}).filter(u=>u)})}a(E0,"batchHashSearch");function g0(e,t,r,n,s){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.HASH_ATTRIBUTE_REQUIRED);if(cE(r),n==null)throw new Error(jt.IDS_REQUIRED);if(!n[Symbol.iterator])throw new Error(jt.IDS_MUST_BE_ITERABLE)}a(g0,"initializeBatchSearchByHash");function cE(e){if(!Array.isArray(e))throw e===void 0?new Error(jt.FETCH_ATTRIBUTES_REQUIRED):new Error(jt.FETCH_ATTRIBUTES_MUST_BE_ARRAY)}a(cE,"validateFetchAttributes");function Ea(e,t,r){if(Wn.validateEnv(e),t===void 0)throw new Error(jt.ATTRIBUTE_REQUIRED);if(r===void 0)throw new Error(jt.SEARCH_VALUE_REQUIRED);if(r?.length>X5)throw new Error(jt.SEARCH_VALUE_TOO_LARGE)}a(Ea,"validateComparisonFunctions");function S_(e,t){return t.length===1&&Q5.SEARCH_WILDCARDS.indexOf(t[0])>=0&&(t=pa.listDBIs(e)),t}a(S_,"setGetWholeRowAttributes");S0.exports={searchAll:Z5,searchAllToMap:e9,count:s9,countAll:r9,equals:n9,startsWith:i9,endsWith:o9,contains:p0,searchByHash:f9,setGetWholeRowAttributes:S_,batchSearchByHash:h9,batchSearchByHashToMap:m9,checkHashExists:_9,iterateDBI:t9,greaterThan:a9,greaterThanEqual:c9,lessThan:l9,lessThanEqual:u9,between:d9}});var bu=C(($Ne,b0)=>{var T0=require("lodash"),A0=tt(),Ge=require("joi"),p9=ie(),{hdb_schema_table:T_,checkValidTable:R0,hdb_table:y0,hdb_database:lE}=Oi(),{handleHDBError:E9,hdb_errors:g9}=he(),{getDatabases:S9}=(xe(),P(ct)),{HTTP_STATUS_CODES:T9}=g9,A9=Ge.object({database:lE,schema:lE,table:y0,search_attribute:T_,search_value:Ge.any().required(),get_attributes:Ge.array().min(1).items(Ge.alternatives(T_,Ge.object())).optional(),desc:Ge.bool(),limit:Ge.number().integer().min(1),offset:Ge.number().integer().min(0)}),R9=Ge.object({database:lE,schema:lE,table:y0,operator:Ge.string().valid("and","or").default("and").lowercase(),offset:Ge.number().integer().min(0),limit:Ge.number().integer().min(1),get_attributes:Ge.array().min(1).items(Ge.alternatives(T_,Ge.object())).optional(),sort:Ge.object({attribute:Ge.alternatives(T_,Ge.array().min(1)),descending:Ge.bool().optional()}).optional(),conditions:Ge.array().min(1).items(Ge.alternatives(Ge.object({operator:Ge.string().valid("and","or").default("and").lowercase(),conditions:Ge.array()}),Ge.object({search_attribute:Ge.alternatives(T_,Ge.array().min(1)),search_type:Ge.string().valid("equals","contains","starts_with","ends_with","greater_than","greater_than_equal","less_than","less_than_equal","between","not_equal").optional(),search_value:Ge.when("search_type",{switch:[{is:"equals",then:Ge.any()},{is:"between",then:Ge.array().items(Ge.alternatives([Ge.string(),Ge.number()])).length(2)}],otherwise:Ge.alternatives(Ge.string(),Ge.number())}).required()}))).required()});b0.exports=function(e,t){let r=null;switch(t){case"value":r=A0.validateBySchema(e,A9);break;case"hashes":let i=function(o){s?s+=". "+o:s=o};var n=i;a(i,"addError");let s;i(R0("database",e.schema)),i(R0("table",e.table)),e.hash_values?Array.isArray(e.hash_values)?e.hash_values.every(o=>typeof o=="string"||typeof o=="number")||i("'hash_values' must be strings or numbers"):i("'hash_values' must be an array"):i("'hash_values' is required"),e.get_attributes?Array.isArray(e.get_attributes)?e.get_attributes.length===0?i("'get_attributes' must contain at least 1 item"):e.get_attributes.every(o=>typeof o=="string"||typeof o=="number")||i("'get_attributes' must be strings or numbers"):i("'get_attributes' must be an array"):i("'get_attributes' is required"),s&&(r=new Error(s.trim()));break;case"conditions":r=A0.validateBySchema(e,R9);break;default:throw new Error(`Error validating search, unknown type: ${t}`)}if(!r&&e.schema!=="system"){let s=p9.checkGlobalSchemaTable(e.schema,e.table);if(s)return E9(new Error,s,T9.NOT_FOUND);let o=S9()[e.schema][e.table].attributes,c=e.get_attributes?[...e.get_attributes]:[];t==="value"&&c.push(e.search_attribute);let l=a(f=>{for(let d=0,_=f.conditions.length;d<_;d++){let h=f.conditions[d];h.conditions?l(h):c.push(h.search_attribute)}},"addConditions");t==="conditions"&&l(e);let u=T0.filter(c,f=>f!=="*"&&!f.startsWith?.("$")&&f.attribute!=="*"&&!Array.isArray(f)&&!f.name&&!T0.some(o,d=>d===f||d.attribute===f||d.attribute===f.attribute));if(u&&u.length>0){let f=u.join(", ");return f=f.replace(/,([^,]*)$/," and$1"),new Error(`unknown attribute '${f}'`)}}return r}});var Xy=C((KNe,O0)=>{"use strict";var y9=ht(),b9=bu(),{getSchemaPath:O9}=St();O0.exports=N9;function N9(e){let t=b9(e,"hashes");if(t)throw t;let r=O9(e.schema,e.table);return y9.openEnvironment(r,e.table)}a(N9,"initialize")});var Zy=C((WNe,N0)=>{"use strict";var w9=yu(),I9=Xy();N0.exports=C9;async function C9(e){let t=await I9(e),r=t.useReadTransaction();r.database=t;let n=global.hdb_schema[e.schema][e.table];try{return w9.batchSearchByHashToMap(r,n.hash_attribute,e.get_attributes,e.hash_values)}finally{r.done()}}a(C9,"lmdbGetDataByHash")});var Ou=C((jNe,w0)=>{"use strict";var eb=class{static{a(this,"SearchByHashObject")}constructor(t,r,n,s){this.schema=t,this.table=r,this.hash_values=n,this.get_attributes=s}};w0.exports=eb});var C0=C((XNe,I0)=>{"use strict";var JNe=Ou(),P9=yu(),D9=Xy();I0.exports=L9;async function L9(e){let t=await D9(e),r=global.hdb_schema[e.schema][e.table];return P9.batchSearchByHash(t,r.hash_attribute,e.get_attributes,e.hash_values)}a(L9,"lmdbSearchByHash")});var zs=C((ewe,P0)=>{"use strict";var tb=class{static{a(this,"SearchObject")}constructor(t,r,n,s,i,o,c,l=!1,u=void 0,f=void 0){this.schema=t,this.table=r,this.search_attribute=n,this.search_value=s,this.hash_attribute=i,this.get_attributes=o,this.end_value=c,this.reverse=l,this.limit=u,this.offset=f}};P0.exports=tb});var uE=C((rwe,x0)=>{"use strict";var Jr=yu(),M9=ht(),v9=ie(),$e=Ft(),Wc=(k(),P(q)),U9=uo(),D0=Un().LMDB_ERRORS_ENUM,{getSchemaPath:x9}=St(),Eo=Wc.SEARCH_WILDCARDS;async function B9(e,t,r){let n;e.schema===Wc.SYSTEM_SCHEMA_NAME?n=U9[e.table]:n=global.hdb_schema[e.schema][e.table];let s=U0(e,n.hash_attribute,r,t);return M0(e,s,n.hash_attribute,r)}a(B9,"prepSearch");async function M0(e,t,r,n){let s=x9(e.schema,e.table),i=await M9.openEnvironment(s,e.table),o=v0(i,e,t,r),c=o.transaction||i;if([$e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH,$e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP,$e.SEARCH_TYPES.SEARCH_ALL,$e.SEARCH_TYPES.SEARCH_ALL_TO_MAP].indexOf(t)>=0)return o;if(H9(e,r)===!1){let f=e.search_attribute;if(f===r)return n?L0(o,()=>!0):o.map(_=>({[r]:_.key}));let d=a(_=>({[r]:_.value,[f]:_.key}),"toObject");return n?L0(o,d):o.map(d)}let u=e.search_attribute===r?o.map(f=>f.key):o.map(f=>f.value);return n===!0?Jr.batchSearchByHashToMap(c,r,e.get_attributes,u):Jr.batchSearchByHash(c,r,e.get_attributes,u)}a(M0,"executeSearch");function v0(e,t,r,n){let s,i=n;t.get_attributes.indexOf(n)<0&&(i=void 0);let{reverse:o,limit:c,offset:l}=t;switch(o=typeof o=="boolean"?o:!1,c=Number.isInteger(c)?c:void 0,l=Number.isInteger(l)?l:void 0,r){case $e.SEARCH_TYPES.EQUALS:s=Jr.equals(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.CONTAINS:s=Jr.contains(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.ENDS_WITH:case $e.SEARCH_TYPES._ENDS_WITH:s=Jr.endsWith(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.STARTS_WITH:case $e.SEARCH_TYPES._STARTS_WITH:s=Jr.startsWith(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH:return Jr.batchSearchByHash(e,t.search_attribute,t.get_attributes,[t.search_value]);case $e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP:return Jr.batchSearchByHashToMap(e,t.search_attribute,t.get_attributes,[t.search_value]);case $e.SEARCH_TYPES.SEARCH_ALL:return Jr.searchAll(e,n,t.get_attributes,o,c,l);case $e.SEARCH_TYPES.SEARCH_ALL_TO_MAP:return Jr.searchAllToMap(e,n,t.get_attributes,o,c,l);case $e.SEARCH_TYPES.BETWEEN:s=Jr.between(e,i,t.search_attribute,t.search_value,t.end_value,o,c,l);break;case $e.SEARCH_TYPES.GREATER_THAN:case $e.SEARCH_TYPES._GREATER_THAN:s=Jr.greaterThan(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.GREATER_THAN_EQUAL:case $e.SEARCH_TYPES._GREATER_THAN_EQUAL:s=Jr.greaterThanEqual(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.LESS_THAN:case $e.SEARCH_TYPES._LESS_THAN:s=Jr.lessThan(e,i,t.search_attribute,t.search_value,o,c,l);break;case $e.SEARCH_TYPES.LESS_THAN_EQUAL:case $e.SEARCH_TYPES._LESS_THAN_EQUAL:s=Jr.lessThanEqual(e,i,t.search_attribute,t.search_value,o,c,l);break;default:return Object.create(null)}return s}a(v0,"searchByType");function L0(e,t){let r=new Map;for(let n of e)r.set(n.value,t(n));return r}a(L0,"createMapFromIterable");function H9(e,t){if(e.get_attributes.length===1&&e.get_attributes[0]==="*")return!0;let r=[e.search_attribute];e.get_attributes.indexOf(t)>=0&&r.push(t);let n=!1;for(let s=0;s<e.get_attributes.length;s++)if(r.indexOf(e.get_attributes[s])<0){n=!0;break}return n}a(H9,"checkToFetchMore");function U0(e,t,r,n){if(v9.isEmpty(n)){let s=e.search_value;typeof s=="object"?s=JSON.stringify(s):s=s.toString();let i=s.charAt(0),o=s.charAt(s.length-1),c=!1;if(e.search_attribute===t&&(c=!0),Eo.indexOf(s)>-1)return r===!0?$e.SEARCH_TYPES.SEARCH_ALL_TO_MAP:$e.SEARCH_TYPES.SEARCH_ALL;if(s.indexOf(Eo[0])<0&&s.indexOf(Eo[1])<0)return c===!0?r===!0?$e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP:$e.SEARCH_TYPES.BATCH_SEARCH_BY_HASH:$e.SEARCH_TYPES.EQUALS;if(Eo.indexOf(i)>=0&&Eo.indexOf(o)>=0)return e.search_value=e.search_value.slice(1,-1),$e.SEARCH_TYPES.CONTAINS;if(Eo.indexOf(i)>=0)return e.search_value=e.search_value.substr(1),$e.SEARCH_TYPES.ENDS_WITH;if(Eo.indexOf(o)>=0)return e.search_value=e.search_value.slice(0,-1),$e.SEARCH_TYPES.STARTS_WITH;if(s.includes(Eo[0])||s.includes(Eo[1]))return $e.SEARCH_TYPES.EQUALS;throw new Error(D0.UNKNOWN_SEARCH_TYPE)}else switch(n){case Wc.VALUE_SEARCH_COMPARATORS.BETWEEN:return $e.SEARCH_TYPES.BETWEEN;case Wc.VALUE_SEARCH_COMPARATORS.GREATER:return $e.SEARCH_TYPES.GREATER_THAN;case Wc.VALUE_SEARCH_COMPARATORS.GREATER_OR_EQ:return $e.SEARCH_TYPES.GREATER_THAN_EQUAL;case Wc.VALUE_SEARCH_COMPARATORS.LESS:return $e.SEARCH_TYPES.LESS_THAN;case Wc.VALUE_SEARCH_COMPARATORS.LESS_OR_EQ:return $e.SEARCH_TYPES.LESS_THAN_EQUAL;default:throw new Error(D0.UNKNOWN_SEARCH_TYPE)}}a(U0,"createSearchTypeFromSearchObject");x0.exports={executeSearch:M0,createSearchTypeFromSearchObject:U0,prepSearch:B9,searchByType:v0}});var H0=C((iwe,B0)=>{"use strict";var swe=zs(),k9=bu(),F9=ie(),q9=(k(),P(q)),G9=uE();B0.exports=$9;function $9(e,t){if(!F9.isEmpty(t)&&q9.VALUE_SEARCH_COMPARATORS_REVERSE_LOOKUP[t]===void 0)throw new Error(`Value search comparator - ${t} - is not valid`);let n=k9(e,"value");if(n)throw n;return G9.prepSearch(e,t,!0)}a($9,"lmdbGetDataByValue")});var A_=C((cwe,k0)=>{"use strict";var awe=zs(),V9=bu(),K9=ie(),Y9=(k(),P(q)),W9=uE();k0.exports=z9;async function z9(e,t){if(!K9.isEmpty(t)&&Y9.VALUE_SEARCH_COMPARATORS_REVERSE_LOOKUP[t]===void 0)throw new Error(`Value search comparator - ${t} - is not valid`);let n=V9(e,"value");if(n)throw n;return W9.prepSearch(e,t,!1)}a(z9,"lmdbSearchByValue")});var q0=C((dwe,F0)=>{"use strict";var uwe=Ft(),rb=class{static{a(this,"SearchByConditionsObject")}constructor(t,r,n,s,i=void 0,o=void 0,c="and"){this.schema=t,this.table=r,this.get_attributes=n,this.limit=i,this.offset=o,this.conditions=s,this.operator=c}},nb=class{static{a(this,"SearchCondition")}constructor(t,r,n){this.search_attribute=t,this.search_type=r,this.search_value=n}},sb=class{static{a(this,"SortAttribute")}constructor(t,r){this.attribute=t,this.desc=r}};F0.exports={SearchByConditionsObject:rb,SearchCondition:nb,SortAttribute:sb}});var Y0=C((mwe,K0)=>{"use strict";var _we=q0().SearchByConditionsObject,j9=zs(),Q9=bu(),ib=yu(),dE=Ft(),{Resource:hwe}=(sa(),P(JA)),V0=uE(),J9=Jy(),X9=require("lodash"),{getSchemaPath:Z9}=St(),G0=ht(),{handleHDBError:e7,hdb_errors:t7}=he(),{HTTP_STATUS_CODES:r7}=t7,n7=1e8;K0.exports=s7;async function s7(e){let t=Q9(e,"conditions");if(t)throw e7(t,t.message,r7.BAD_REQUEST,void 0,void 0,!0);e.operator=e.operator?e.operator.toLowerCase():void 0,e.offset=Number.isInteger(e.offset)?e.offset:0;let r=Z9(e.schema,e.table),n=await G0.openEnvironment(r,e.table),s=global.hdb_schema[e.schema][e.table];for(let u of e.conditions)G0.openDBI(n,u.search_attribute);let i=X9.sortBy(e.conditions,u=>{if(u.estimated_count===void 0){let f=u.search_type;f===dE.SEARCH_TYPES.EQUALS?u.estimated_count=ib.count(n,u.search_attribute,u.search_value):f===dE.SEARCH_TYPES.CONTAINS||f===dE.SEARCH_TYPES.ENDS_WITH?u.estimated_count=1/0:u.estimated_count=n7}return u.estimated_count}),o=n.useReadTransaction();o.database=n;let c=await $0(o,e,i[0],s.hash_attribute),l;if(!e.operator||e.operator.toLowerCase()==="and"){let u=n.dbis[s.hash_attribute],f=i.slice(1).map(V0.filterByType),d=f.length,_=ib.setGetWholeRowAttributes(n,e.get_attributes);l=c.map(h=>u.get(h,{transaction:o,lazy:!0})),d>0&&(l=l.filter(h=>{for(let m=0;m<d;m++)if(!f[m](h))return!1;return!0})),(e.offset||e.limit!==void 0)&&(l=l.slice(e.offset,e.limit!==void 0?(e.offset||0)+e.limit:void 0)),l=l.map(h=>J9.parseRow(h,_))}else{for(let d=1;d<i.length;d++){let _=i[d],h=await $0(o,e,_,s.hash_attribute);c=c.concat(h)}let u=new Set,f=e.offset||0;c=c.filter(d=>u.has(d)?!1:(u.add(d),!0)).slice(f,e.limit&&e.limit+f),l=ib.batchSearchByHash(o,s.hash_attribute,e.get_attributes,c)}return l.onDone=()=>{o.done()},l}a(s7,"lmdbSearchByConditions");async function $0(e,t,r,n){let s=new j9(t.schema,t.table,void 0,void 0,n,t.get_attributes),i=r.search_type;return s.search_attribute=r.search_attribute,i===dE.SEARCH_TYPES.BETWEEN?(s.search_value=r.search_value[0],s.end_value=r.search_value[1]):s.search_value=r.search_value,V0.searchByType(e,s,i,n).map(o=>o.value)}a($0,"executeConditionSearch")});var Nu=C((Ewe,W0)=>{"use strict";var i7=(k(),P(q)).OPERATIONS_ENUM,ob=class{static{a(this,"DeleteObject")}constructor(t,r,n,s=void 0){this.operation=i7.DELETE,this.schema=t,this.table=r,this.hash_values=n,this.__origin=s}};W0.exports=ob});var ab=C((Swe,tx)=>{"use strict";var J0=zs(),X0=Nu(),Z0=A_(),ex=E_(),Rn=(k(),P(q)),z0=ie(),j0=ht(),{getTransactionAuditStorePath:o7,getSchemaPath:a7}=St(),Q0=X();tx.exports=c7;async function c7(e){try{if(z0.isEmpty(global.hdb_schema[e.schema])||z0.isEmpty(global.hdb_schema[e.schema][e.table]))throw new Error(`unknown schema:${e.schema} and table ${e.table}`);await l7(e),await u7(e);let t=a7(e.schema,e.table);try{await j0.deleteEnvironment(t,e.table)}catch(r){if(r.message==="invalid environment")Q0.warn(`cannot delete environment for ${e.schema}.${e.table}, environment not found`);else throw r}try{let r=o7(e.schema,e.table);await j0.deleteEnvironment(r,e.table,!0)}catch(r){if(r.message==="invalid environment")Q0.warn(`cannot delete environment for ${e.schema}.${e.table}, environment not found`);else throw r}}catch(t){throw t}}a(c7,"lmdbDropTable");async function l7(e){let t=new J0(Rn.SYSTEM_SCHEMA_NAME,Rn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_TABLE_KEY,`${e.schema}.${e.table}`,void 0,[Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),r=Array.from(await Z0(t)),n=[];for(let i=0;i<r.length;i++){let o=r[i];n.push(o.id)}if(n.length===0)return;let s=new X0(Rn.SYSTEM_SCHEMA_NAME,Rn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,n);await ex(s)}a(l7,"deleteAttributesFromSystem");async function u7(e){let t=new J0(Rn.SYSTEM_SCHEMA_NAME,Rn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY,e.table,void 0,[Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY,Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_KEY,Rn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),r,n;try{r=Array.from(await Z0(t))}catch(i){throw i}for(let i=0;i<r.length;i++){let o=r[i];o.name===e.table&&o.schema===e.schema&&(n=o)}if(!n)throw new Error(`${e.schema}.${e.table} was not found`);let s=new X0(Rn.SYSTEM_SCHEMA_NAME,Rn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,[n.id]);try{await ex(s)}catch(i){throw i}}a(u7,"dropTableFromSystem")});var nx=C((Awe,rx)=>{"use strict";var d7=require("fs-extra"),f7=zs(),_7=Ou(),h7=Nu(),m7=ab(),p7=E_(),E7=Zy(),g7=A_(),go=(k(),P(q)),{getSchemaPath:S7}=St(),{handleHDBError:T7,hdb_errors:A7}=he(),{HDB_ERROR_MSGS:R7,HTTP_STATUS_CODES:y7}=A7;rx.exports=b7;async function b7(e){let t;try{t=await O7(e.schema);let r=new f7(go.SYSTEM_SCHEMA_NAME,go.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,go.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_KEY,t,void 0,[go.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY]),n=Array.from(await g7(r));for(let o=0;o<n.length;o++){let c={schema:t,table:n[o].name};try{await m7(c)}catch(l){if(l.message!=="invalid environment")throw l}}let s=new h7(go.SYSTEM_SCHEMA_NAME,go.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,[t]);await p7(s);let i=S7(t);await d7.remove(i)}catch(r){throw r}}a(b7,"lmdbDropSchema");async function O7(e){let t=new _7(go.SYSTEM_SCHEMA_NAME,go.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,[e],[go.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY]),r,n;try{r=Array.from(await E7(t))}catch(s){throw s}for(let[,s]of r)s.name===e&&(n=e);if(!n)throw T7(new Error,R7.SCHEMA_NOT_FOUND(e),y7.NOT_FOUND,void 0,void 0,!0);return n}a(O7,"validateDropSchema")});var wu=C((ywe,sx)=>{"use strict";var cb=class{static{a(this,"CreateTableObject")}constructor(t,r,n){this.schema=t,this.table=r,this.hash_attribute=n}};sx.exports=cb});var ub=C((Nwe,ix)=>{"use strict";var N7=require("fs-extra"),fE=ht(),{getTransactionAuditStorePath:w7}=St(),lb=Ft(),Owe=wu();ix.exports=I7;async function I7(e){let t;try{let r=w7(e.schema,e.table);await N7.mkdirp(r),t=await fE.createEnvironment(r,e.table,!0)}catch(r){throw r.message=`unable to create transactions audit environment for ${e.schema}.${e.table} due to: ${r.message}`,r}try{fE.createDBI(t,lb.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,!1,!0),fE.createDBI(t,lb.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE,!0,!1),fE.createDBI(t,lb.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME,!0,!1)}catch(r){throw r.message=`unable to create dbi for ${e.schema}.${e.table} due to: ${r.message}`,r}return t}a(I7,"createTransactionsAuditEnvironment")});var cx=C((Cwe,ax)=>{"use strict";var db=(k(),P(q)),ox=ht(),C7=Uc(),{getSystemSchemaPath:P7,getSchemaPath:D7}=St(),Iwe=uo(),L7=kp(),fb=Hp(),M7=X(),v7=ub();ax.exports=U7;async function U7(e,t){let r=D7(t.schema,t.table),n=new fb(t.schema,t.table,db.TIME_STAMP_NAMES_ENUM.CREATED_TIME,void 0,!0),s=new fb(t.schema,t.table,db.TIME_STAMP_NAMES_ENUM.UPDATED_TIME,void 0,!0),i=new fb(t.schema,t.table,t.hash_attribute,void 0,!1,!0);try{if(await ox.createEnvironment(r,t.table),e!==void 0){let o=await ox.openEnvironment(P7(),db.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME);await C7.insertRecords(o,HDB_TABLE_INFO.hash_attribute,hdb_table_attributes,[e]),n.skip_table_check=!0,s.skip_table_check=!0,i.skip_table_check=!0,await _b(n),await _b(s),await _b(i)}await v7(t)}catch(o){throw o}}a(U7,"lmdbCreateTable");async function _b(e){try{await L7(e)}catch(t){M7.warn(`failed to create attribute ${e.attribute} due to ${t.message}`)}}a(_b,"createAttribute")});var ux=C((Dwe,lx)=>{"use strict";var x7=Xf(),B7=Of(),H7=sE(),R_=(k(),P(q)),k7=Uc().updateRecords,F7=ht(),{getSchemaPath:q7}=St(),G7=m_(),$7=X();lx.exports=V7;async function V7(e){try{let{schema_table:t,attributes:r}=x7(e);B7(e,r,t.hash_attribute),e.schema!==R_.SYSTEM_SCHEMA_NAME&&(r.includes(R_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||r.push(R_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),r.includes(R_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||r.push(R_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let n=await H7(e.hdb_auth_header,t,r),s=q7(e.schema,e.table),i=await F7.openEnvironment(s,e.table),o=await k7(i,t.hash_attribute,r,e.records,e.__origin?.timestamp);try{await G7(e,o)}catch(c){$7.error(`unable to write transaction due to ${c.message}`)}return{written_hashes:o.written_hashes,skipped_hashes:o.skipped_hashes,schema_table:t,new_attributes:n,txn_time:o.txn_time}}catch(t){throw t}}a(V7,"lmdbUpdateRecords")});var fx=C((Mwe,dx)=>{"use strict";var K7=(k(),P(q)).OPERATIONS_ENUM,hb=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=K7.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};dx.exports=hb});var hx=C((xwe,_x)=>{"use strict";var Uwe=fx(),Y7=Xf(),W7=Of(),z7=sE(),y_=(k(),P(q)),j7=Uc().upsertRecords,Q7=ht(),{getSchemaPath:J7}=St(),X7=m_(),Z7=X(),{handleHDBError:eee,hdb_errors:tee}=he();_x.exports=ree;async function ree(e){let t;try{t=Y7(e)}catch(l){throw eee(l,l.message,tee.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0)}let{schema_table:r,attributes:n}=t;W7(e,n,r.hash_attribute),e.schema!==y_.SYSTEM_SCHEMA_NAME&&(n.includes(y_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||n.push(y_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),n.includes(y_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||n.push(y_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let s=await z7(e.hdb_auth_header,r,n),i=J7(e.schema,e.table),o=await Q7.openEnvironment(i,e.table),c=await j7(o,r.hash_attribute,n,e.records,e.__origin?.timestamp);try{await X7(e,c)}catch(l){Z7.error(`unable to write transaction due to ${l.message}`)}return{written_hashes:c.written_hashes,schema_table:r,new_attributes:s,txn_time:c.txn_time}}a(ree,"lmdbUpsertRecords")});var px=C((Hwe,mx)=>{"use strict";var mb=class{static{a(this,"DeleteBeforeObject")}constructor(t,r,n){this.schema=t,this.table=r,this.timestamp=n}};mx.exports=mb});var gx=C((Fwe,Ex)=>{"use strict";var pb=class{static{a(this,"DeleteAuditLogsBeforeResults")}constructor(t=void 0,r=void 0,n=0){this.start_timestamp=t,this.end_timestamp=r,this.transactions_deleted=n}};Ex.exports=pb});var Ax=C(($we,Tx)=>{"use strict";var Eb=ht(),{getTransactionAuditStorePath:nee}=St(),Gwe=px(),b_=Ft(),see=ie(),Sx=gx(),iee=require("util").promisify,oee=iee(setTimeout),aee=1e4,cee=100;Tx.exports=lee;async function lee(e){let t=nee(e.schema,e.table),r=await Eb.openEnvironment(t,e.table,!0),n=Eb.listDBIs(r);Eb.initializeDBIs(r,b_.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,n);let s,i=new Sx;do s=await uee(r,e.timestamp),i.start_timestamp===void 0&&(i.start_timestamp=s.start_timestamp),s.end_timestamp!==void 0&&(i.end_timestamp=s.end_timestamp),i.transactions_deleted+=s.transactions_deleted,await oee(cee);while(s.transactions_deleted>0);return i}a(lee,"deleteAuditLogsBefore");async function uee(e,t){let r=new Sx;try{let n=e.dbis[b_.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP],s;for(let{key:i,value:o}of n.getRange({start:!1})){if(i>=t)break;r.start_timestamp===void 0&&(r.start_timestamp=i),s=n.remove(i);let c=o[b_.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME];see.isEmpty(c)||(s=e.dbis[b_.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].remove(c,i));for(let l=0;l<o.hash_values.length;l++)s=e.dbis[b_.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE].remove(o.hash_values[l],i);if(r.transactions_deleted++,r.end_timestamp=i,r.transactions_deleted>aee)break}return await s,r}catch(n){throw n}}a(uee,"deleteTransactions")});var yx=C((Kwe,Rx)=>{"use strict";var gb=class{static{a(this,"DropAttributeObject")}constructor(t,r,n){this.schema=t,this.table=r,this.attribute=n}};Rx.exports=gb});var Ox=C((zwe,bx)=>{"use strict";var dee=zs(),fee=Nu(),Wwe=yx(),Li=(k(),P(q)),_ee=ie(),Sb=ht(),hee=uo(),mee=A_(),pee=E_(),{getSchemaPath:Eee}=St();bx.exports=gee;async function gee(e,t=!0){let r;e.schema===Li.SYSTEM_SCHEMA_NAME?r=hee[e.table]:r=global.hdb_schema[e.schema][e.table];let n=await Tee(e),s=Eee(e.schema,e.table),i=await Sb.openEnvironment(s,e.table);return t===!0&&await See(e,i,r.hash_attribute),Sb.dropDBI(i,e.attribute),n}a(gee,"lmdbDropAttribute");async function See(e,t,r){let n=Sb.openDBI(t,r),s,i=e.attribute;for(let{key:o,value:c,version:l}of n.getRange({start:!1,versions:!0})){let u={};for(let f in c)f!==i&&(u[f]=c[f]);s=t.dbis[r].put(o,u,l)}await s}a(See,"removeAttributeFromAllObjects");async function Tee(e){let t=new dee(Li.SYSTEM_SCHEMA_NAME,Li.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,Li.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_TABLE_KEY,`${e.schema}.${e.table}`,void 0,[Li.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY,Li.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ATTRIBUTE_KEY]),n=Array.from(await mee(t)).filter(o=>o[Li.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ATTRIBUTE_KEY]===e.attribute);if(_ee.isEmptyOrZeroLength(n))throw new Error(`Attribute '${e.attribute}' was not found in '${e.schema}.${e.table}'`);let s=n.map(o=>o[Li.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),i=new fee(Li.SYSTEM_SCHEMA_NAME,Li.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,s);return pee(i)}a(Tee,"dropAttributeFromSystem")});var Dx=C((Jwe,Px)=>{"use strict";var Tb=ht(),Iu=Ft(),Qwe=dn(),Ab=(k(),P(q)),Nx=ie(),{getTransactionAuditStorePath:Aee}=St(),Ree=yu(),_E=Tu(),yee=X();Px.exports=bee;async function bee(e){let t=Aee(e.schema,e.table),r=await Tb.openEnvironment(t,e.table,!0),n=Tb.listDBIs(r);Tb.initializeDBIs(r,Iu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,n);let s;switch(e.search_type){case Ab.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.TIMESTAMP:return wx(r,e.search_values);case Ab.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.HASH_VALUE:return s=global.hdb_schema[e.schema][e.table].hash_attribute,Nee(r,e.search_values,s);case Ab.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.USERNAME:return Oee(r,e.search_values);default:return wx(r)}}a(bee,"readAuditLog");function wx(e,t=[0,Date.now()]){Nx.isEmpty(t[0])&&(t[0]=0),Nx.isEmpty(t[1])&&(t[1]=Date.now());let r=e.dbis[Iu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP],n;for(let s of r.getKeys({start:t[1]}))if(s!==t[1]){n=s;break}return r.getRange({start:t[0],end:n}).map(({value:s})=>Object.assign(new _E,s))}a(wx,"searchTransactionsByTimestamp");function Oee(e,t=[]){let r=new Map;for(let n=0;n<t.length;n++){let s=t[n],i=[];for(let o of e.dbis[Iu.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].getValues(s))i.push(o);r.set(s,Cx(e,i))}return Object.fromEntries(r)}a(Oee,"searchTransactionsByUsername");function Nee(e,t,r){let n=new Map;for(let c=0,l=t.length;c<l;c++){let u=t[c],f=Ree.equals(e,Iu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,Iu.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE,u);for(let{value:d}of f){let _=Number(d);n.has(_)?n.get(_).push(u.toString()):n.set(_,[u.toString()])}}let s=Array.from(n.keys()),i=Cx(e,s),o=new Map;for(let c=0;c<i.length;c++){let l=i[c],u=l.timestamp,f=n.get(u);Ix(l,"records",r,f,o),Ix(l,"original_records",r,f,o)}return Object.fromEntries(o)}a(Nee,"searchTransactionsByHashValues");function Ix(e,t,r,n,s){let i=e.timestamp;if(e[t])for(let o=0;o<e[t].length;o++){let c=e[t][o],l=c[r].toString();if(n.indexOf(l)>=0)if(s.has(l)){let u=s.get(l),f=u[u.length-1];if(f.timestamp===i)f[t]=[c];else{let d=new _E(e.operation,e.user_name,i,void 0);d[t]=[c],u.push(d)}}else{let u=new _E(e.operation,e.user_name,i,void 0);u[t]=[c],s.set(l,[u])}}}a(Ix,"loopRecords");function Cx(e,t){let r=[];try{let n=e.dbis[Iu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP];for(let s=0;s<t.length;s++)try{let i=n.get(t[s]);if(i){let o=Object.assign(new _E,i);r.push(o)}}catch(i){yee.warn(i)}return r}catch(n){throw n}}a(Cx,"batchSearchTransactions")});var Mx=C((tIe,Lx)=>{"use strict";var{getSchemaPath:Zwe}=St(),eIe=ht(),{database:wee}=(xe(),P(ct));Lx.exports={writeTransaction:Iee};async function Iee(e,t,r){return wee({database:e,table:t}).transaction(r)}a(Iee,"writeTransaction")});var Bx=C((nIe,xx)=>{"use strict";var{getSchemaPath:vx}=St(),Ux=ht();xx.exports={flush:Cee,resetReadTxn:Pee};async function Cee(e,t){return(await Ux.openEnvironment(vx(e,t),t.toString())).flushed}a(Cee,"flush");async function Pee(e,t){try{(await Ux.openEnvironment(vx(e,t),t.toString())).resetReadTxn()}catch{}}a(Pee,"resetReadTxn")});var qx=C((iIe,Fx)=>{"use strict";var{Readable:Dee}=require("stream"),{getDatabases:Lee}=(xe(),P(ct)),{readSync:Mee,openSync:vee,createReadStream:Hx}=require("fs"),{open:Uee}=require("lmdb"),kx=Wf(),xee=zf(),{AUDIT_STORE_OPTIONS:Bee}=(Ai(),P(Gx)),{INTERNAL_DBIS_NAME:Hee,AUDIT_STORE_NAME:kee}=Ft();Fx.exports=qee;var Rb=32768,Fee=100;async function qee(e){let t=e.database||e.schema||"data",r=Lee()[t],n=new Date().toISOString(),s=e.tables||e.table&&[e.table];if(s){let u=r[s[0]];if(!u)throw new Error(`Can not find table ${s[0]}`);let f=u.dbisDB,d=Uee({noSync:!0,maxDbs:xee.MAX_DBS}),_,h=d.openDB(Hee,new kx(!1)),m=f.useReadTransaction(),S=0,g=a(async function(E,T){T.encoding="binary",T.encoder=void 0;let N=d.openDB(E,T),M=f.openDB(E,T);for(let{key:H,version:Z,value:W}of M.getRange({start:null,transaction:m,versions:M.useVersions}))_=N.put(H,W,Z),S++%Fee===0&&(await new Promise($=>setTimeout($,20)),m.openTimer&&(m.openTimer=0))},"copyDatabase");for(let{key:E,value:T}of f.getRange({transaction:m,start:!1}))if(s.some(N=>E.startsWith?.(N+"/"))){h.put(E,T);let[,N]=E.split("/"),M=!N,H=new kx(!M,M);await g(E,H)}e.include_audit&&await g(kee,{...Bee}),await _;let A=Hx(d.path);return A.headers=l(),A.on("close",()=>{m.done(),d.close()}),A}let o=r[Object.keys(r)[0]].primaryStore,c=vee(o.path);return o.transaction(()=>{let u=Buffer.alloc(Rb);Mee(c,u,0,Rb),o.resetReadTxn();let f=o.useReadTransaction();f.renew();let d=Hx(null,{fd:c,start:Rb}),_=new Dee.from(async function*(){yield u;for await(let h of d)f.openTimer&&(f.openTimer=0),yield h;f.done()}());return _.headers=l(),_});function l(){let u=new Map;return u.set("content-type","application/octet-stream"),u.set("content-disposition",`attachment; filename="${t}"`),u.set("date",n),u}}a(qee,"getBackup")});var Kx=C((aIe,Vx)=>{"use strict";var Gee=X(),{handleHDBError:$ee}=he(),Vee=rM(),Kee=kp(),Yee=Yy(),Wee=n0(),zee=E_(),jee=Zy(),Qee=C0(),Jee=H0(),Xee=A_(),Zee=Y0(),ete=nx(),tte=cx(),rte=ux(),nte=hx(),ste=Ax(),ite=ab(),ote=Ox(),ate=Dx(),cte=Mx(),$x=Bx(),lte=qx(),yb=class extends Vee{static{a(this,"LMDBBridge")}async searchByConditions(t){return Zee(t)}async getDataByHash(t){return await jee(t)}async searchByHash(t){return await Qee(t)}async getDataByValue(t,r){return await Jee(t,r)}async searchByValue(t){return await Xee(t)}async createSchema(t){return await Wee(t)}async dropSchema(t){return await ete(t)}async createTable(t,r){return await tte(t,r)}async dropTable(t){return await ite(t)}async createAttribute(t){return await Kee(t)}async createRecords(t){return await Yee(t)}async updateRecords(t){return await rte(t)}async upsertRecords(t){try{return await nte(t)}catch(r){throw $ee(r,null,null,Gee.ERR,r)}}async deleteRecords(t){return await zee(t)}async dropAttribute(t){return await ote(t)}async deleteAuditLogsBefore(t){return await ste(t)}async readAuditLog(t){return await ate(t)}writeTransaction(t,r,n){return cte.writeTransaction(t,r,n)}flush(t,r){return $x.flush(t,r)}resetReadTxn(t,r){return $x.resetReadTxn(t,r)}getBackup(t){return lte(t)}};Vx.exports=yb});var Ob={};Ue(Ob,{add:()=>hE,applyReverse:()=>Yx,getRecordAtTime:()=>bb,rebuildUpdateBefore:()=>mE});function hE(e,t,r){let n=e[t];typeof n=="bigint"?e[t]=n+BigInt(r.value):isNaN(e[t])?e[t]=r.value:e[t]=n+r.value}function mE(e,t,r){let n=null;for(let s in e)if(s in t){let i=t[s];if(i?.__op__){let o=e[s];if(o?.__op__)if(o.__op__===i.__op__)n||(n={}),n[s]=o;else throw new Error("Can not merge updates with different operations");else n||(n={}),n[s]=o,hE(n,s,i)}else r&&(n||(n={}),n[s]=i)}else n||(n={}),n[s]=e[s];return n}function Yx(e,t){for(let r in t){let n=t[r];if(n?.__op__){let s=ute[n.__op__]?.reverse;if(s)s(e,r,{value:n.value});else throw new Error(`Unsupported operation ${n.__op__}`)}else e[r]=Wx}}function bb(e,t,r){let n=r.rootStore.auditStore,s={...e.value},i=e.localTime;for(;i>t;){let l=n.get(i),u=Tt(l);switch(u.type){case"put":s=u.getValue(r);break;case"patch":Yx(s,u.getValue(r));break;case"delete":s=null}i=u.previousLocalTime}let o={},c=0;for(let l in s)s[l]===Wx&&(o[l]=!0,c++);for(;c>0&&i>0;){let l=n.get(i),u=Tt(l),f;switch(u.type){case"put":f=u.getValue(r);break;case"patch":f=u.getValue(r);break}for(let d in f)o[d]&&(s[d]=f[d],o[d]=!1,c--);i=u.previousLocalTime}if(c>0)for(let l in o)s[l]=null;return s}var ute,Wx,pE=Re(()=>{Ai();a(hE,"add");hE.reverse=function(e,t,r){let n=e[t];typeof n=="bigint"?e[t]=n-BigInt(r.value):isNaN(e[t])||(e[t]=n-r.value)};ute={add:hE};a(mE,"rebuildUpdateBefore");a(Yx,"applyReverse");Wx={};a(bb,"getRecordAtTime")});function yn(e){let t=e.getChanges();return t||(t=Object.create(null),e._setChanges(t)),t}function TE(e,t){let r=e.prototype,n={},s=t.attributes||t.properties||[];for(let c of s){let l=c.name,u,f;if(c.resolve)f={get(){return c.resolve(this,this.getContext?.())},set(d){return c.set(this,d)},configurable:!0};else{switch(c.type){case"String":u=a(function(d){if(!(typeof d=="string"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a string, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"ID":u=a(function(d){if(!(typeof d=="string"||d?.length>0&&d.every?.(_=>typeof _=="string")||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a string, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Float":case"Number":u=a(function(d){let _=d?.__op__?d.value:d;if(!(typeof _=="number"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a number, attempt to assign ${_}`);yn(this)[l]=d},"set");break;case"Int":u=a(function(d){let _=d?.__op__?d.value:d;if(!(_>>0===_||d==null&&c.nullable!==!1))if(typeof _=="number"&&Math.abs((_>>0)-_)<=1)_=Math.round(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be an integer between -2147483648 and 2147483647, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Long":u=a(function(d){let _=d?.__op__?d.value:d;if(!(Math.round(_)===d&&Math.abs(_)<=9007199254740992||d==null&&c.nullable!==!1))if(typeof _=="number"&&Math.abs(_)<=9007199254740992)_=Math.round(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be an integer between -9007199254740992 and 9007199254740992, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"BigInt":u=a(function(d){let _=d?.__op__?d.value:d;if(!(typeof _=="bigint"||d==null&&c.nullable!==!1))if(typeof _=="string"||typeof _=="number")_=BigInt(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be a number, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Boolean":u=a(function(d){if(!(typeof d=="boolean"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a boolean, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Date":u=a(function(d){if(!(d instanceof Date||d==null&&c.nullable!==!1))if(typeof d=="string"||typeof d=="number")d=new Date(d);else throw new zn.ClientError(`${l} must be a Date, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Bytes":u=a(function(d){if(!(d instanceof Uint8Array||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a Buffer or Uint8Array, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Blob":u=a(function(d){if(!(d instanceof Ti||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a Blob, attempt to assign ${d}`);yn(this)[l]=d},"set");break;case"Any":case void 0:u=a(function(d){yn(this)[l]=d},"set");break;default:u=a(function(d){if(!(typeof d=="object"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be an object, attempt to assign ${d}`);yn(this)[l]=d},"set")}f={get(){let d=this.getChanges?.();if(d&&l in d){let h=d[l];if(h?.__op__){let m=this.getRecord()?.[l];return h.update(m)}return h}let _=this.getRecord()?.[l];if(_&&typeof _=="object"){let h=Nb(_,c);if(h)return d||this._setChanges(d=Object.create(null)),d[l]=h}return _},set:u,enumerable:!0,configurable:!0}}f.get.isAttribute=!0,n[l]=f,(!(l in r)||Object.getOwnPropertyDescriptor(r,l)?.get?.isAttribute)&&Object.defineProperty(r,l,f)}i("getProperty",function(c){let l=n[c];if(l)return l.get.call(this);let u=this.getChanges();return u?.[c]!==void 0?u[c]:this.getRecord()?.[c]}),i("set",function(c,l){let u=n[c];if(u)return u.set.call(this,l);if(t.sealed)throw new zn.ClientError("Can not add a property to a sealed table schema");yn(this)[c]=l}),i("deleteProperty",function(c){yn(this)[c]=void 0}),i("toJSON",function(){let c=this.getChanges?.(),l;for(let f in c){l||(l={...this.getRecord()});let d=c[f];if(d?.__op__){let _=l[f];d=d.update(_)}l[f]=d}return Object.keys(this).length>0&&(l||(l={...this.getRecord()}),Object.assign(l,this)),l||this.getRecord()}),r.get||i("get",r.getProperty),r.delete||i("delete",r.deleteProperty),r.then||i("then",null);function i(c,l){Object.defineProperty(r,c,{value:l,configurable:!0})}a(i,"setMethod");let o=r;do{let c=Object.getPrototypeOf(o);if(c===Object.prototype){Object.setPrototypeOf(o,jx);break}o=c}while(o&&o!==jx)}function Nb(e,t){let r;switch(e.constructor){case Object:return t?(r=t.TrackedObject,r||(t.TrackedObject=r=class extends O_{static{a(this,"TrackedObject")}},TE(r,t)),new r(e)):new O_(e);case Array:let n=new gE(e.length,e);for(let s=0,i=e.length;s<i;s++){let o=e[s];o&&typeof o=="object"&&(o=Nb(o,t?.elements)),n[s]=o}return n;default:return e}}function AE(e){let t=e.getChanges?.(),r;for(let s in t){r||(r=e.getRecord?{...e.getRecord()}:{});let i=t[s];if(i&&typeof i=="object")if(i.__op__){let o=r[s];i=i.update(o)}else i=AE(i);r[s]=i}return Object.keys(e).length>0&&(r||(r=e.getRecord?{...e.getRecord()}:{}),Object.assign(r,e)),r||e.getRecord?.()||e}function Cu(e,t=e.getChanges?.()){let r;if(e.getRecord&&e.constructor===Array&&!Object.isFrozen(e)){r=e;for(let n=0,s=e.length;n<s;n++){let i=e[n];if(i&&typeof i=="object"){let o=Cu(i);o!==i&&r===e&&(r=e.slice(0)),i=o}r[n]=i}return Object.freeze(r)}for(let n in t){r||(r={...e.getRecord?.()});let s=t[n];if(s&&typeof s=="object")if(s.__op__){let i=Ob[s?.__op__];if(i)i(r,n,s);else throw new Error("Invalid CRDT operation "+s.__op__);continue}else s=Cu(s);r[n]=s}if(!Array.isArray(e))for(let n in e)dte.call(e,n)&&(r||(r={...e.getRecord?.()}),r[n]=e[n]);return r?Object.freeze(r):e.getRecord?.()??e}function EE(e){let t=e.getRecord?.();if(t===void 0)return!0;if(e.constructor===Array){if(!t||e[zc]||e.length!==t.length)return!0;for(let r=0,n=e.length;r<n;r++){let s=t[r],i=e[r];if(s&&i?.getRecord?.()===s){if(EE(i))return!0}else return!0}}else{let r=e.getChanges?.();if(r&&!t)return!0;for(let n in r){let s=r[n];if(s&&typeof s=="object"){let i=t[n];if(i&&s.getRecord?.()===i){if(EE(s))return!0}else return!0}else return!0}}return!1}var zn,zx,jx,O_,dte,zc,gE,SE,wb=Re(()=>{zn=v(he());pE();En();a(yn,"getChanges");a(TE,"assignTrackedAccessors");zx=Object.prototype,jx=new Proxy({},{get(e,t,r){if(typeof t=="string"){if(t==="then"||t==="getRecord"||t==="getChanges")return;if(zx[t])return zx[t];let n=r.getChanges?.();if(n&&t in n)return n[t];let s=r.getRecord?.()?.[t];if(s&&typeof s=="object"){let i=Nb(s);if(i)return n||(n=Object.create(null),r._setChanges(n)),n[t]=i,i}return s}}});a(Nb,"trackObject");O_=class{static{a(this,"GenericTrackedObject")}#e;#t;constructor(t){if(t?.getRecord)throw new Error("Can not track an already tracked object, check for circular references");this.#e=t}getRecord(){return this.#e}setRecord(t){this.#e=t}getChanges(){return this.#t}_setChanges(t){this.#t=t}};TE(O_,{});a(AE,"collapseData");dte=Object.prototype.hasOwnProperty;a(Cu,"updateAndFreeze");a(EE,"hasChanges");zc=Symbol.for("has-array-changes"),gE=class extends Array{static{a(this,"TrackedArray")}#e;[zc];constructor(t,r){super(t),this.#e=r}getRecord(){return this.#e}splice(...t){return this[zc]=!0,super.splice(...t)}push(...t){return this[zc]=!0,super.push(...t)}pop(){return this[zc]=!0,super.pop()}unshift(...t){return this[zc]=!0,super.unshift(...t)}shift(){return this[zc]=!0,super.shift()}};gE.prototype.constructor=Array;SE=class{constructor(t){this.value=t}static{a(this,"Addition")}__op__="add";update(t){return(+t||0)+this.value}}});var nB={};Ue(nB,{ResourceBridge:()=>Pb});function Db({get_attributes:e},t){if(e){if(e[0]==="*"){if(t.schemaDefined)return;e=t.attributes.map(r=>r.name)}return e.forceNulls=!0,e}}function Jx(e,t){let r=Mi(e),n=Db(e,r);if(!r)throw new js.ClientError(`Table ${e.table} not found`);let s;n&&r.attributes.length-n.length>2&&n.length<5&&(s=!0);let i={user:e.hdb_user,onlyIfCached:e.onlyIfCached,noCacheStore:e.noCacheStore,noCache:e.noCache,replicateFrom:e.replicateFrom},o;Ct(i,()=>new Promise(u=>o=u));let c=e.ids||e.hash_values,l=0;return{[Symbol.asyncIterator](){return{async next(){if(l<c.length){let u=c[l++],f;try{f=await r.get({id:u,lazy:s,select:n},i),f=f&&AE(f)}catch(d){f={message:d.toString()}}return t?{value:{key:u,value:f}}:{value:f}}else return o(),{done:!0}},return(u){return o(),{value:u,done:!0}},throw(u){return o(),{done:!0}}}}}}function Mi(e){let t=e.database||e.schema||_te,r=Xe()[t];if(!r)throw(0,js.handleHDBError)(new Error,fte.SCHEMA_NOT_FOUND(t),404);return r[e.table]}function Xx(e,t,r){let n=e.length+t.length,s=n===1?"record":"records";return{message:`${e.length} of ${n} ${s} successfully deleted`,deleted_hashes:e,skipped_hashes:t,txn_time:r}}async function*Zx(e,t,r,n){let s,i=0;for await(let o of e.getHistory(t,r)){let c=o.operation??o.type;c==="put"&&(c="upsert");let{id:l,version:u,value:f}=o;if(s?.timestamp===u)s.hash_values.push(l),s.records.push(f);else{if(s&&(yield s,i++,n&&n<=i)){s=void 0;break}s={operation:c,user_name:o.user,timestamp:u,hash_values:[l],records:[f]}}}s&&(yield s)}var eB,RE,js,tB,Ib,Cb,rB,fte,_te,hte,mte,Qx,Pb,sB=Re(()=>{"use strict";eB=v(Kx()),RE=v(bu()),js=v(he());xe();tB=v(Xf());k();Ib=v(po()),Cb=v(Ws()),rB=v(ie());gc();wb();({HDB_ERROR_MSGS:fte}=js.hdb_errors),_te="data",hte=1e4,mte=10,Pb=class extends eB.default{static{a(this,"ResourceBridge")}constructor(t){super(t),Qx=this}async searchByConditions(t){t.select!==void 0&&(t.get_attributes=t.select);for(let o of t.conditions||[])o?.attribute!==void 0&&(o.search_attribute=o.attribute),o?.comparator!==void 0&&(o.search_type=o.comparator),o?.value!==void 0&&(o.search_value=o.value);let r=(0,RE.default)(t,"conditions");if(r)throw(0,js.handleHDBError)(r,r.message,400,void 0,void 0,!0);let n=Mi(t);if(!n)throw new js.ClientError(`Table ${t.table} not found`);let s=t.conditions.map(i);function i(o){return o.conditions?(o.conditions=o.conditions.map(i),o):{attribute:o.search_attribute??o.attribute,comparator:o.search_type??o.comparator,value:o.search_value!==void 0?o.search_value:o.value}}return a(i,"mapCondition"),n.search({conditions:s,operator:t.operator?t.operator.toLowerCase():void 0,limit:t.limit,offset:t.offset,reverse:t.reverse,select:Db(t,n),sort:t.sort,allowFullScan:!0},{onlyIfCached:t.onlyIfCached,noCacheStore:t.noCacheStore,noCache:t.noCache,replicateFrom:t.replicateFrom})}async createTable(t,r){let n=r.attributes,s=!!n,i=r.primary_key||r.hash_attribute;if(n)for(let o of n)o.is_primary_key?(o.isPrimaryKey=!0,delete o.is_primary_key):o.name===i&&i&&(o.isPrimaryKey=!0);else{if(!i)throw new js.ClientError("A primary key must be specified with a `primary_key` property or with `attributes`");n=[{name:i,isPrimaryKey:!0},{name:"__createdtime__",indexed:!0},{name:"__updatedtime__",indexed:!0}]}_t({database:r.database??r.schema,table:r.table,attributes:n,schemaDefined:s,expiration:r.expiration,audit:r.audit})}async createAttribute(t){return await Mi(t).addAttributes([{name:t.attribute,indexed:t.indexed??!0}]),`attribute ${t.schema}.${t.table}.${t.attribute} successfully created.`}async dropAttribute(t){let r=Mi(t);if(await r.removeAttributes([t.attribute]),!r.schemaDefined){let n=t.attribute,s,i=a((o,c,l)=>(c={...c},delete c[n],r.primaryStore.ifVersion(o,l,()=>r.primaryStore.put(o,c,l)).then(u=>{if(!u){let{value:f,version:d}=r.primaryStore.getEntry(o);return i(o,f,d)}})),"deleteRecord");for(let{key:o,value:c,version:l}of r.primaryStore.getRange({start:!0,versions:!0}))s=i(o,c,l),await new Promise(u=>setImmediate(u));await s}return`successfully deleted ${t.schema}.${t.table}.${t.attribute}`}dropTable(t){Mi(t).dropTable()}createSchema(t){return Pu({database:t.schema,table:null}),Ib.signalSchemaChange(new Cb.SchemaEventMsg(process.pid,Wt.CREATE_SCHEMA,t.schema))}async dropSchema(t){await Lb(t.schema),Ib.signalSchemaChange(new Cb.SchemaEventMsg(process.pid,Wt.DROP_SCHEMA,t.schema))}async updateRecords(t){return t.requires_existing=!0,this.upsertRecords(t)}async createRecords(t){return t.requires_no_existing=!0,Qx.upsertRecords(t)}async upsertRecords(t){let{schema_table:r,attributes:n}=(0,tB.default)(t),s,i=Xe()[t.schema][t.table],o={user:t.hdb_user,expiresAt:t.expiresAt,originatingOperation:t.operation};return t.replicateTo&&(o.replicateTo=t.replicateTo),t.replicatedConfirmation&&(o.replicatedConfirmation=t.replicatedConfirmation),Ct(o,async c=>{if(!i.schemaDefined){s=[];for(let f of n)i.attributes.find(_=>_.name==f)||s.push(f);s.length>0&&await i.addAttributes(s.map(f=>({name:f,indexed:!0})))}let l=[],u=[];for(let f of t.records){let d=f[i.primaryKey],_=d!=null&&await i.get(d,o);if(t.requires_existing&&!_||t.requires_no_existing&&_){u.push(f[i.primaryKey]);continue}_&&(_=AE(_));for(let h in f)if(Object.prototype.hasOwnProperty.call(f,h)){let m=f[h];if(typeof m=="function")try{let S=m([[_]]);Array.isArray(S)&&(m=S[0].func_val,f[h]=m)}catch(S){throw S.message+="Trying to set key "+h+" on object"+JSON.stringify(f),S}}if(_)for(let h in _)Object.prototype.hasOwnProperty.call(f,h)||(f[h]=_[h]);await(d==null?i.create(f,o):i.put(f,o)),l.push(f[i.primaryKey])}return{txn_time:c.timestamp,written_hashes:l,new_attributes:s,skipped_hashes:u}})}async deleteRecords(t){let r=Xe()[t.schema][t.table],n={user:t.hdb_user};return t.replicateTo&&(n.replicateTo=t.replicateTo),t.replicatedConfirmation&&(n.replicatedConfirmation=t.replicatedConfirmation),Ct(n,async s=>{let i=t.hash_values||t.records.map(l=>l[r.primaryKey]),o=[],c=[];for(let l of i)await r.delete(l,n)?o.push(l):c.push(l);return Xx(o,c,s.timestamp)})}async deleteRecordsBefore(t){let r=Xe()[t.schema][t.table];if(!r.createdTimeProperty)throw new js.ClientError("Table must have a '__createdtime__' attribute or @createdTime timestamp defined to perform this operation");let n=await r.search({conditions:[{attribute:r.createdTimeProperty.name,value:Date.parse(t.date),comparator:$m.LESS}]}),s=!1,i=[],o=[],c=0,l=[],u=a(async()=>{let f=await this.deleteRecords({schema:t.schema,table:t.table,hash_values:l});i.push(...f.deleted_hashes),o.push(...f.skipped_hashes),await(0,rB.async_set_timeout)(mte),l=[],s=!0},"chunkDelete");for await(let f of n)l.push(f[r.primaryKey]),c++,c%hte===0&&await u();return l.length>0&&await u(),s?Xx(i,o,void 0):{message:"No records found to delete"}}searchByHash(t){t.select!==void 0&&(t.get_attributes=t.select);let r=(0,RE.default)(t,"hashes");if(r)throw r;return Jx(t)}async getDataByHash(t){let r=new Map;t._returnKeyValue=!0;for await(let{key:n,value:s}of Jx(t,!0))r.set(n,s);return r}searchByValue(t,r){if(r&&PA[r]===void 0)throw new Error(`Value search comparator - ${r} - is not valid`);t.select!==void 0&&(t.get_attributes=t.select),t.attribute!==void 0&&(t.search_attribute=condition.attribute),t.value!==void 0&&(t.search_value=condition.value);let n=(0,RE.default)(t,"value");if(n)throw n;let s=Mi(t);if(!s)throw new js.ClientError(`Table ${t.table} not found`);let i=t.search_value;i.includes?.("*")&&(i.startsWith("*")?i.endsWith("*")?i!=="*"&&(r="contains",i=i.slice(1,-1)):(r="ends_with",i=i.slice(1)):i.endsWith("*")&&(r="starts_with",i=i.slice(0,-1))),r===$m.BETWEEN&&(i=[i,t.end_value]);let o=i==="*"?[]:[{attribute:t.search_attribute,value:i,comparator:r}];return s.search({conditions:o,allowFullScan:!0,limit:t.limit,offset:t.offset,reverse:t.reverse,sort:t.sort,select:Db(t,s)},{onlyIfCached:t.onlyIfCached,noCacheStore:t.noCacheStore,noCache:t.noCache,replicateFrom:t.replicateFrom})}async getDataByValue(t,r){let n=new Map,s=Mi(t);t.get_attributes&&!t.get_attributes.includes(s.primaryKey)&&t.get_attributes[0]!=="*"&&t.get_attributes.push(s.primaryKey);for await(let i of this.searchByValue(t,r))n.set(i[s.primaryKey],i);return n}resetReadTxn(t,r){Mi({schema:t,table:r})?.primaryStore.resetReadTxn()}async deleteAuditLogsBefore(t){return Mi(t).deleteHistory(t.timestamp,t.cleanup_deleted_records)}async readAuditLog(t){let r=Mi(t),n={};switch(t.search_type){case Vm.HASH_VALUE:for(let i of t.search_values)n[i]=(await r.getHistoryOfRecord(i)).map(o=>{let c=o.operation??o.type;return c==="put"&&(c="upsert"),{operation:c,timestamp:o.version,user_name:o.user,hash_values:[i],records:[o.value]}});return n;case Vm.USERNAME:let s=t.search_values;for await(let i of Zx(r))s.includes(i.user_name)&&(n[i.user_name]||(n[i.user_name]=[])).push(i);return n;default:return Zx(r,t.search_values?.[0],t.search_values?.[1],t.limit)}}};a(Db,"getSelect");a(Jx,"getRecords");a(Mi,"getTable");a(Xx,"createDeleteResponse");a(Zx,"groupRecordsInHistory")});var Gn=C((TIe,iB)=>{"use strict";var{ResourceBridge:pte}=(sB(),P(nB)),Ete=oe();Ete.initSync();var yE;function gte(){return yE||(yE=new pte,yE)}a(gte,"getBridge");iB.exports=gte()});var Qr=C((RIe,lB)=>{"use strict";var OE=AR(),xr=ie(),Ste=require("util"),NE=Gn(),Tte=ms(),oB=X(),{handleHDBError:jc,hdb_errors:Ate}=he(),{HTTP_STATUS_CODES:Qc}=Ate,Rte=Ste.promisify(Tte.getTableSchema),yte="updated",aB="inserted",cB="upserted";lB.exports={insert:Ote,update:Nte,upsert:wte,validation:bte,flush:Ite};async function bte(e){if(xr.isEmpty(e))throw new Error("invalid update parameters defined.");if(xr.isEmptyOrZeroLength(e.schema))throw new Error("invalid database specified.");if(xr.isEmptyOrZeroLength(e.table))throw new Error("invalid table specified.");let t=await Rte(e.schema,e.table),r=OE(e);if(r)throw r;if(!Array.isArray(e.records))throw new Error("records must be an array");let n=t.hash_attribute,s=new Set,i={},o=!1;return e.operation==="update"&&(o=!0),e.records.forEach(c=>{if(o&&xr.isEmptyOrZeroLength(c[n]))throw oB.error("a valid hash attribute must be provided with update record:",c),new Error("a valid hash attribute must be provided with update record");if(!xr.isEmptyOrZeroLength(c[n])&&(c[n]==="null"||c[n]==="undefined"))throw oB.error(`a valid hash value must be provided with ${e.operation} record:`,c),new Error(`"${c[n]}" is not a valid hash attribute value`);!xr.isEmpty(c[n])&&c[n]!==""&&s.has(xr.autoCast(c[n]))&&(c.skip=!0),s.add(xr.autoCast(c[n]));for(let l in c)i[l]=1}),i[n]=1,{schema_table:t,hashes:Array.from(s),attributes:Object.keys(i)}}a(bte,"validation");async function Ote(e){if(e.operation!=="insert")throw new Error("invalid operation, must be insert");let t=OE(e);if(t)throw jc(new Error,t.message,Qc.BAD_REQUEST);xr.transformReq(e);let r=xr.checkSchemaTableExist(e.schema,e.table);if(r)throw jc(new Error,r,Qc.BAD_REQUEST);let n=await NE.createRecords(e);return bE(aB,n.written_hashes,e,n.skipped_hashes,n.new_attributes,n.txn_time)}a(Ote,"insertData");async function Nte(e){if(e.operation!=="update")throw new Error("invalid operation, must be update");let t=OE(e);if(t)throw jc(new Error,t.message,Qc.BAD_REQUEST);xr.transformReq(e);let r=xr.checkSchemaTableExist(e.schema,e.table);if(r)throw jc(new Error,r,Qc.BAD_REQUEST);let n=await NE.updateRecords(e);return xr.isEmpty(n.existing_rows)?bE(yte,n.written_hashes,e,n.skipped_hashes,n.new_attributes,n.txn_time):bE(n.update_action,[],e,n.hashes,void 0,n.txn_time)}a(Nte,"updateData");async function wte(e){if(e.operation!=="upsert")throw jc(new Error,"invalid operation, must be upsert",Qc.INTERNAL_SERVER_ERROR);let t=OE(e);if(t)throw jc(new Error,t.message,Qc.BAD_REQUEST);xr.transformReq(e);let r=xr.checkSchemaTableExist(e.schema,e.table);if(r)throw jc(new Error,r,Qc.BAD_REQUEST);let n=await NE.upsertRecords(e);return bE(cB,n.written_hashes,e,[],n.new_attributes,n.txn_time)}a(wte,"upsertData");function bE(e,t,r,n,s,i){let o={message:`${e} ${t.length} of ${t.length+n.length} records`,new_attributes:s,txn_time:i};return e===aB?(o.inserted_hashes=t,o.skipped_hashes=n,o):e===cB?(o.upserted_hashes=t,o):(o.update_hashes=t,o.skipped_hashes=n,o)}a(bE,"returnObject");function Ite(e){return xr.transformReq(e),NE.flush(e.schema,e.table)}a(Ite,"flush")});var mB=C((bIe,hB)=>{var Du=require("validate.js"),dB=tt(),Lu=(k(),P(q)),{handleHDBError:Cte,hdb_errors:Pte}=he(),{HDB_ERROR_MSGS:Qt,HTTP_STATUS_CODES:Dte}=Pte,Mb=a(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),Lte={STRUCTURE_USER:"structure_user"},uB=Object.values(Lu.ROLE_TYPES_ENUM),Mte="attribute_permissions",vte="attribute_name",{PERMS_CRUD_ENUM:Mu}=Lu,Ute=[Mte,...Object.values(Mu)],fB=[Mu.READ,Mu.INSERT,Mu.UPDATE],xte=[vte,...fB];function Bte(e){let t=Mb();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,_B(e,t)}a(Bte,"addRoleValidation");function Hte(e){let t=Mb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,_B(e,t)}a(Hte,"alterRoleValidation");function kte(e){let t=Mb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,dB.validateObject(e,t)}a(kte,"dropRoleValidation");var Fte=["operation","role","id","permission","hdb_user","access"];function _B(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let o=0,c=n.length;o<c;o++)Fte.includes(n[o])||s.push(n[o]);s.length>0&&sr(Qt.INVALID_ROLE_JSON_KEYS(s),r);let i=dB.validateObject(e,t);if(i&&i.message.split(",").forEach(o=>{sr(o,r)}),e.permission){let o=qte(e);o&&sr(o,r),uB.forEach(c=>{e.permission[c]&&!Du.isBoolean(e.permission[c])&&sr(Qt.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let o in e.permission)if(uB.indexOf(o)<0){if(o===Lte.STRUCTURE_USER){let l=e.permission[o];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,f=l.length;u<f;u++){let d=l[u];global.hdb_schema[d]||sr(Qt.SCHEMA_NOT_FOUND(d),r)}continue}sr(Qt.STRUCTURE_USER_ROLE_TYPE_ERROR(o),r);continue}let c=e.permission[o];if(!o||!global.hdb_schema[o]){sr(Qt.SCHEMA_NOT_FOUND(o),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[o][l]){sr(Qt.TABLE_NOT_FOUND(o,l),r);continue}if(Object.keys(u).forEach(f=>{Ute.includes(f)||sr(Qt.INVALID_PERM_KEY(f),r,o,l)}),Object.values(Mu).forEach(f=>{Du.isDefined(u[f])?Du.isBoolean(u[f])||sr(Qt.TABLE_PERM_NOT_BOOLEAN(f),r,o,l):sr(Qt.TABLE_PERM_MISSING(f),r,o,l)}),u.attribute_permissions===void 0){sr(Qt.ATTR_PERMS_ARRAY_MISSING,r,o,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){sr(Qt.ATTR_PERMS_NOT_ARRAY,r,o,l);continue}if(u.attribute_permissions){let f=global.hdb_schema[o][l].attributes.map(({attribute:_})=>_),d={read:!1,insert:!1,update:!1};for(let _ in u.attribute_permissions){let h=u.attribute_permissions[_];if(Object.keys(h).forEach(S=>{!xte.includes(S)&&S!==Mu.DELETE&&sr(Qt.INVALID_ATTR_PERM_KEY(S),r,o,l)}),!Du.isDefined(h.attribute_name)){sr(Qt.ATTR_PERM_MISSING_NAME,r,o,l);continue}let m=h.attribute_name;if(!f.includes(m)){sr(Qt.INVALID_ATTRIBUTE_IN_PERMS(m),r,o,l);continue}fB.forEach(S=>{Du.isDefined(h[S])?Du.isBoolean(h[S])||sr(Qt.ATTR_PERM_NOT_BOOLEAN(S,m),r,o,l):sr(Qt.ATTR_PERM_MISSING(S,m),r,o,l)}),!d.read&&h.read===!0&&(d.read=!0),!d.insert&&h.insert===!0&&(d.insert=!0),!d.update&&h.update===!0&&(d.update=!0)}if(u.read===!1&&d.read===!0||u.insert===!1&&d.insert===!0||u.update===!1&&d.update===!0){let _=`${o}.${l}`;sr(Qt.MISMATCHED_TABLE_ATTR_PERMS(_),r,o,l)}}}}return Gte(r)}a(_B,"customValidate");hB.exports={addRoleValidation:Bte,alterRoleValidation:Hte,dropRoleValidation:kte};function qte(e){let{operation:t,permission:r}=e;if(t===Lu.OPERATIONS_ENUM.ADD_ROLE||t===Lu.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return Qt.SU_CU_ROLE_COMBINED_ERROR;{let o=r.super_user?Lu.ROLE_TYPES_ENUM.SUPER_USER:Lu.ROLE_TYPES_ENUM.CLUSTER_USER;return Qt.SU_CU_ROLE_NO_PERMS_ALLOWED(o)}}}return null}a(qte,"validateNoSUPerms");function Gte(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:Qt.ROLE_PERMS_ERROR,...e};return Cte(new Error,n,Dte.BAD_REQUEST)}else return null}a(Gte,"generateRolePermResponse");function sr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}a(sr,"addPermError")});var w_=C((wIe,SB)=>{"use strict";var pB=Qr(),EB=Wr(),$te=_a(),Ub=mB(),xb=po(),NIe=require("uuid").v4,Vte=require("util"),wE=(k(),P(q)),Kte=ie(),Bb=EB.searchByValue,Yte=EB.searchByHash,Wte=Vte.promisify($te.delete),zte=zs(),jte=Ou(),{hdb_errors:Qte,handleHDBError:Jc}=he(),{HDB_ERROR_MSGS:gB,HTTP_STATUS_CODES:N_}=Qte,{UserEventMsg:Hb}=Ws();SB.exports={addRole:Jte,alterRole:Xte,dropRole:Zte,listRoles:ere};function vb(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}a(vb,"scrubRoleDetails");async function Jte(e){let t=Ub.addRoleValidation(e);if(t)throw t;e=vb(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await Bb(r)||[])}catch(i){throw Jc(i)}if(n&&n.length>0)throw Jc(new Error,gB.ROLE_ALREADY_EXISTS(e.role),N_.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await pB.insert(s),xb.signalUserChange(new Hb(process.pid)),e=vb(e),e}a(Jte,"addRole");async function Xte(e){let t=Ub.alterRoleValidation(e);if(t)throw t;e=vb(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await pB.update(r)}catch(s){throw Jc(s)}if(n&&n?.message==="updated 0 of 1 records")throw Jc(new Error,"Invalid role id",N_.BAD_REQUEST,void 0,void 0,!0);return await xb.signalUserChange(new Hb(process.pid)),e}a(Xte,"alterRole");async function Zte(e){let t=Ub.dropRoleValidation(e);if(t)throw Jc(new Error,t,N_.BAD_REQUEST,void 0,void 0,!0);let r=new jte(wE.SYSTEM_SCHEMA_NAME,wE.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await Yte(r));if(n.length===0)throw Jc(new Error,gB.ROLE_NOT_FOUND,N_.NOT_FOUND,void 0,void 0,!0);let s=new zte(wE.SYSTEM_SCHEMA_NAME,wE.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await Bb(s)),o=!1;if(Kte.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){o=!0;break}}if(o===!0)throw Jc(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,N_.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await Wte(c),xb.signalUserChange(new Hb(process.pid)),`${n[0].role} successfully deleted`}a(Zte,"dropRole");async function ere(){return Bb({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}a(ere,"listRoles")});var kb={};Ue(kb,{start:()=>RB,startOnMainThread:()=>nre});function RB({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,TB.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let o in i.permission){if(tre.includes(o))continue;let c=i.permission[o];c.tables||(i.permission[o]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let f=[];for(let d in u.attributes){let _=u.attributes[d];_.attribute_name=d,f.push(_)}u.attribute_permissions=f,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let f of u.attribute_permissions)f.read=!!f.read,f.insert=!!f.insert,f.update=!!f.update}else u.attribute_permissions=null}}i.role=i.id=s,await rre(i)}}}async function rre(e){let t=Xe().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,AB.isEqual)(i,e)?void 0:(e.id=r.id,(0,IE.alterRole)(e))}return(0,IE.addRole)(e)}var IE,TB,AB,tre,nre,yB=Re(()=>{xe();IE=v(w_()),TB=require("yaml"),AB=require("lodash"),tre=["super_user","cluster_user","structure_user"];a(RB,"start");a(rre,"ensureRole");nre=RB});async function CE(e){let t=(0,NB.pathToFileURL)(e).toString();if(sre)return I_||(I_=ire(are)),(await(await I_).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function ire(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),I_=new Compartment({console,Math,Date,fetch:ore,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,OB.extname)(r)||(r+=".js"),r)},importHook:a(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){Object.assign(s,{Resource:Kr,tables:jn,databases:We})}};let n=await(0,bB.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),I_}function ore(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function are(){return{Resource:Kr,tables:jn}}var bB,OB,NB,sre,I_,Fb=Re(()=>{sa();xe();bB=require("fs/promises"),OB=require("path"),NB=require("url"),sre=!1;a(CE,"secureImport");a(ire,"getCompartment");a(ore,"secureOnlyFetch");a(are,"getGlobalVars")});var Gb={};Ue(Gb,{handleFile:()=>cre});async function cre(e,t,r,n){let s=new Map,i=await CE(r);c(i.default)&&n.set((0,qb.dirname)(t),i.default),o(i,(0,qb.dirname)(t));function o(l,u){for(let f in l){let d=l[f];c(d)?n.set(u+"/"+f,d):typeof d=="object"&&o(d,u+"/"+f)}}a(o,"recurseForResources");function c(l){return typeof l=="function"&&(l.get||l.put||l.post||l.delete)}return a(c,"isResource"),s}var qb,wB=Re(()=>{Fb();qb=require("path");a(cre,"handleFile")});var Vb={};Ue(Vb,{start:()=>lre});function lre({resources:e}){e.set("login",$b),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var $b,IB=Re(()=>{sa();a(lre,"start");$b=class extends Kr{static{a(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:o}=r;return{data:await n.login(s,i)}}}});var v_={};Ue(v_,{addAnalyticsListener:()=>M_,calculateCPUUtilization:()=>WB,diffResourceUsage:()=>zB,recordAction:()=>Mt,recordActionBinary:()=>Qn,setAnalyticsEnabled:()=>ure});function ure(e){GB=e}function dre(e,t){if(typeof e=="number"){let r=t.values,n=r.index++;if(n>=r.length){let s=r;t.values=r=new Float32Array(n*2),r.set(s),r.index=n+1}r[n]=e,t.total+=e}else if(typeof e=="boolean")e&&t.total++,t.count++;else if(typeof e=="function")t.count++;else throw new TypeError("Invalid metric value type "+typeof e)}function fre(e,t,r,n,s,i){let o={};if(typeof t=="number")o.total=t,o.values=new Float32Array(4),o.values.index=1,o.values[0]=t,o.total=t;else if(typeof t=="boolean")o.total=t?1:0,o.count=1;else if(typeof t=="function")o.count=1,o.callback=t;else throw new TypeError("Invalid metric value type "+typeof t);o.description={metric:r,path:n,method:s,type:i},DE.set(e,o)}function Mt(e,t,r,n,s){if(!GB)return;let i=t+(r?"-"+r:"");n!==void 0&&(i+="-"+n),s!==void 0&&(i+="-"+s);let o=DE.get(i);o?dre(e,o):fre(i,e,t,r,n,s),PE||_re()}function Qn(e,t,r,n,s){Mt(!!e,t,r,n,s)}function M_(e){KB.push(e)}function _re(){PE=performance.now(),setTimeout(async()=>{let e=performance.now()-PE;PE=0;let t=[],r={time:Date.now(),period:e,threadId:Xc.threadId,metrics:t};for(let[s,i]of DE){if(i.values){let o=i.values.subarray(0,i.values.index);o.sort();let c=o.length,l=0,u=[],f;for(let d of YB){let _=Math.floor(c*d),h=o[_-1];if(_>l){let m=_-l;if(h===f){let S=u[u.length-1];typeof S=="number"?u[u.length-1]={value:S,count:1+m}:S.count+=m}else u.push(m>1?{value:h,count:m}:h),f=h;l=_}}t.push(Object.assign(i.description,{mean:i.total/c,distribution:u,count:c}))}else i.callback?t.push(Object.assign(i.description,i.callback(i))):t.push(Object.assign(i.description,{total:i.total,count:i.count}));await jB()}let n=process.memoryUsage();t.push({metric:"memory",threadId:Xc.threadId,byThread:!0,...n});for(let s of KB)s(t);DE=new Map,Xc.parentPort?Xc.parentPort.postMessage({type:VB,report:r}):XB({report:r})},$B).unref()}function LE(e,t,r){let n={id:(0,D_.getNextMonotonicTime)(),metric:t,...r};e.primaryStore.put(n.id,n,{append:!0}).then(s=>{s||e.primaryStore.put(n.id,n)})}function WB(e,t){let r=e.userCPUTime+e.systemCPUTime;return Math.round(r/t*100)/100}function zB(e,t){return{userCPUTime:t.userCPUTime/1e3-(e?.userCPUTime??0),systemCPUTime:t.systemCPUTime/1e3-(e?.systemCPUTime??0),minorPageFault:t.minorPageFault-(e?.minorPageFault??0),majorPageFault:t.majorPageFault-(e?.majorPageFault??0),fsRead:t.fsRead-(e?.fsRead??0),fsWrite:t.fsWrite-(e?.fsWrite??0),voluntaryContextSwitches:t.voluntaryContextSwitches-(e?.voluntaryContextSwitches??0),involuntaryContextSwitches:t.involuntaryContextSwitches-(e?.involuntaryContextSwitches??0)}}function hre(e,t,r){let n=0;for(let[s,i]of Object.entries(r)){let o=`${t}.${s}`,c=i.getSize(),l={database:t,table:s,size:c};LE(e,"table-size",l),Zc.trace?.(`table ${o} size metric: ${JSON.stringify(l)}`),n+=c}return n}function CB(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getAuditSize();if(!i)return;let o=qB.default.statSync(s.primaryStore.env.path).size,c=hre(e,r,n),l=o-c,u={database:r,size:o,used:c,free:l,audit:i};LE(e,"database-size",u),Zc.trace?.(`database ${r} size metric: ${JSON.stringify(u)}`)}catch(s){Zc.warn?.("Error getting DB size metrics",s)}}function PB(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getStorageStats();if(!i)return;let o={database:r,...i};LE(e,"storage-volume",o),Zc.trace?.(`db ${r} storage volume metrics: ${JSON.stringify(o)}`)}catch(s){Zc.warn?.("Error getting DB volume metrics",s)}}async function mre(e,t=6e4){let r=Yb(),n=QB(),s=new Promise(E=>{let T=performance.now();setImmediate(()=>{let N=performance.now();N-T>5e3&&Zc.warn?.("Unusually high event queue latency on the main thread of "+Math.round(N-T)+"ms"),T=performance.now()}),n.primaryStore.prefetch([1],()=>{let N=performance.now();N-T>5e3&&Zc.warn?.("Unusually high task queue latency on the main thread of "+Math.round(N-T)+"ms"),E(N-T)})}),i;for(let E of n.primaryStore.getRange({start:1/0,end:!1,reverse:!0}))if(E.value?.time){i=E.value.time;break}if(Date.now()-t<i)return;let o,c=new Map,l=new Map,u=[],f;for(let{key:E,value:T}of r.primaryStore.getRange({start:i||!1,exclusiveStart:!0,end:1/0})){if(!T)continue;if(o){if(E>o+t)break}else o=E;f=E;let{metrics:N,threadId:M}=T;for(let H of N||[]){let{path:Z,method:W,type:$,metric:se,count:z,total:fe,distribution:ue,threads:ee,...Ae}=H;z||(z=1);let me=se+(Z?"-"+Z:"");W!==void 0&&(me+="-"+W),$!==void 0&&(me+="-"+$);let ye=c.get(me);if(ye){if(ye.threads){let ft=ye.threads[M];if(ft)ye=ft;else{ye.threads[M]={...Ae};continue}}ye.count||(ye.count=1);let Ht=ye.count;for(let ft in Ae){let Ln=Ae[ft];typeof Ln=="number"&&(ye[ft]=(ye[ft]*Ht+Ln*z)/(Ht+z))}ye.count+=z,fe>=0&&(ye.total+=fe,ye.ratio=ye.total/ye.count)}else ye={period:t,...H},delete ye.distribution,c.set(me,ye),ye.byThread&&(ye.threads=[],ye.threads[M]={...Ae},u.push(ye));if(ue){ue=ue.map(ft=>typeof ft=="number"?{value:ft,count:1}:ft);let Ht=l.get(me);Ht?Ht.push(...ue):l.set(me,ue)}}await jB()}for(let E of u){let{path:T,method:N,type:M,metric:H,count:Z,total:W,distribution:$,threads:se,...z}=E;se=se.filter(fe=>fe);for(let fe in z){if(typeof E[fe]!="number")continue;let ue=0;for(let ee of se){let Ae=ee[fe];typeof Ae=="number"&&(ue+=Ae)}E[fe]=ue}E.count=se.length,delete E.threads,delete E.byThread}for(let[E,T]of l){let N=c.get(E);T.sort((ft,Ln)=>ft.value>Ln.value?1:-1);let M=N.count-1,H=[],Z=0,W=0,$;for(let ft of YB){let Ln=M*ft;for(;Z<Ln;)$=T[W++],Z+=$.count,W===1&&Z--;let Vr=T[W>1?W-2:0];$||($=T[0]),H.push($.value-($.value-Vr.value)*(Z-Ln)/$.count)}let[se,z,fe,ue,ee,Ae,me,ye,Ht]=H;Object.assign(N,{p1:se,p10:z,p25:fe,median:ue,p75:ee,p90:Ae,p95:me,p99:ye,p999:Ht})}let d;for(let[E,T]of c)T.id=(0,D_.getNextMonotonicTime)(),T.time=f,n.primaryStore.put(T.id,T,{append:!0}).then(N=>{N||n.primaryStore.put(T.id,T)}),d=!0;let _=Date.now(),{idle:h,active:m}=performance.eventLoopUtilization();if(d||m*10>h){let E=(0,D_.getNextMonotonicTime)(),T={id:E,metric:"main-thread-utilization",idle:h-DB,active:m-LB,taskQueueLatency:await s,time:_,...process.memoryUsage()};n.primaryStore.put(E,T,{append:!0}).then(N=>{N||n.primaryStore.put(E,T)})}DB=h,LB=m;let S=process.resourceUsage(),g=zB(C_,S);g.time=_,g.period=C_.time?_-C_.time:t,g.cpuUtilization=WB(C_,g.period),LE(n,"resource-usage",g),C_=g;let A=Xe();CB(n,A),CB(n,{system:A.system}),PB(n,A),PB(n,{system:A.system})}async function MB(e,t){let r=Date.now()-t;for(let n of e.primaryStore.getKeys({start:!1,end:r}))e.primaryStore.remove(n)}function Yb(){return vB||(vB=_t({table:"hdb_raw_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"action"},{name:"metrics"}]}))}function QB(){return UB||(UB=_t({table:"hdb_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"metric"},{name:"path"},{name:"method"},{name:"type"}]}))}function gre(){JB=!0;let e=(0,L_.get)(x.ANALYTICS_AGGREGATEPERIOD)*1e3;e&&setInterval(async()=>{await mre($B,e),await MB(Yb(),pre),await MB(QB(),Ere)},Math.min(e/2,2147483647)).unref()}function XB(e,t){let r=e.report;r.threadId=t?.threadId||Xc.threadId;for(let n of r.metrics)n.metric==="bytes-sent"&&(xB+=n.mean*n.count);r.totalBytesProcessed=xB,t&&(r.metrics.push({metric:"utilization",...t.performance.eventLoopUtilization(BB.get(t))}),BB.set(t,t.performance.eventLoopUtilization())),r.id=(0,D_.getNextMonotonicTime)(),Yb().primaryStore.put(r.id,r),JB||gre(),Sre&&(ZB=Are(r))}async function Are(e){if(await ZB,!ga){let r=(0,P_.dirname)((0,kB.getLogFilePath)());try{ga=await(0,Kb.open)((0,P_.join)(r,"analytics.log"),"r+")}catch{ga=await(0,Kb.open)((0,P_.join)(r,"analytics.log"),"w+")}}let t=(await ga.stat()).size;if(t>Tre){let r=Buffer.alloc(t);await ga.read(r,{position:0}),r=r.subarray(r.indexOf(10,r.length/2)+1),await ga.write(r,{position:0}),await ga.truncate(r.length),t=r.length}await ga.write(JSON.stringify(e)+`
 `,t)}var Xc,HB,kB,FB,P_,Kb,D_,L_,qB,Zc,DE,GB,PE,$B,VB,KB,YB,DB,LB,C_,jB,pre,Ere,vB,UB,JB,xB,BB,Sre,ZB,ga,Tre,vi=Re(()=>{Xc=require("worker_threads"),HB=v(et());xe();kB=v(X()),FB=v(qs()),P_=require("path"),Kb=require("fs/promises"),D_=v(dn()),L_=v(oe());k();Mr();qB=v(require("node:fs")),Zc=(0,FB.loggerWithTag)("analytics");(0,L_.initSync)();DE=new Map,GB=(0,L_.get)(x.ANALYTICS_AGGREGATEPERIOD)>-1;a(ure,"setAnalyticsEnabled");a(dre,"recordExistingAction");a(fre,"recordNewAction");a(Mt,"recordAction");Ye.recordAnalytics=Mt;a(Qn,"recordActionBinary");PE=0,$B=1e3,VB="analytics-report",KB=[];a(M_,"addAnalyticsListener");YB=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];a(_re,"sendAnalytics");a(LE,"storeMetric");a(WB,"calculateCPUUtilization");a(zB,"diffResourceUsage");a(hre,"storeTableSizeMetrics");a(CB,"storeDBSizeMetrics");a(PB,"storeVolumeMetrics");a(mre,"aggregation");DB=0,LB=0,C_={},jB=a(()=>new Promise(setImmediate),"rest");a(MB,"cleanup");pre=36e5,Ere=31536e6;a(Yb,"getRawAnalyticsTable");a(QB,"getAnalyticsTable");(0,HB.setChildListenerByType)(VB,XB);a(gre,"startScheduledTasks");xB=0,BB=new Map,Sre=!1;a(XB,"recordAnalytics");Tre=1e6;a(Are,"logAnalytics")});var eH={};Ue(eH,{Headers:()=>So,appendHeader:()=>ME,mergeHeaders:()=>Wb});function ME(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function Wb(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new So(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var So,U_=Re(()=>{So=class extends Map{static{a(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let o=i[1];if(n)r=(typeof o=="string"?o:o.join(", "))+", "+r;else if(typeof o=="string")r=[o,r];else{o.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};a(ME,"appendHeader");a(Wb,"mergeHeaders")});function iH(e){let t={openapi:Rre,info:{title:"HarperDB HTTP REST interface",version:sH.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:o,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},f=[];if(o)for(let{type:T,name:N,elements:M,relationship:H,definition:Z}of o){if(H)T==="array"?u[N]={type:"array",items:{$ref:Sa+M.type}}:u[N]={$ref:Sa+T};else{let W=Z??M?.definition;if(W){if(!t.components.schemas[W.type]){let $={};W.properties.forEach(se=>{$[se.name]=new Jb(zb[se.type],se.type)}),t.components.schemas[W.type]=new nH($)}T==="array"?u[N]={type:"array",items:{$ref:Sa+W.type}}:u[N]={$ref:Sa+W.type}}else T==="array"?M.type==="Any"||M.type=="ID"?u[N]={type:"array",items:{format:M.type}}:u[N]={type:"array",items:new Jb(zb[M.type],M.type)}:T==="Any"||T=="ID"?u[N]={format:T}:u[N]=new Jb(zb[T],T)}f.push(new Xb(N,"query",u[N]))}let d=Object.keys(u),_=new Xb(c,"path",{format:"ID"});_.required=!0,_.description="primary key of record";let h=new Xb("property","path",{enum:d});h.required=!0,t.components.schemas[i]=new nH(u);let m=l.post!==Resource.prototype.post||l.update,S=typeof l.put=="function",g=typeof l.get=="function",A=typeof l.delete=="function",E="/"+s+"/";m&&(t.paths[E]={},t.paths[E].post=new yre(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[E]||(t.paths[E]={}),t.paths[E].get=new jb(f,r,{200:new Qb({$ref:Sa+i})},"search for records by the specified property name and value pairs")),A&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new rH(f,r,"delete all the records that match the provided query",{204:new tH})),E="/"+s+"/{"+c+"}",g&&(t.paths[E]={},t.paths[E].get=new jb([_],r,{200:new Qb({$ref:Sa+i})},"retrieve a record by its primary key")),S&&(t.paths[E]||(t.paths[E]={}),t.paths[E].put=new bre([_],r,i,"create or update the record with the URL path that maps to the record's primary key")),A&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new rH([_],r,"delete a record with the given primary key",{204:new tH})),g&&h.schema.enum.length>0&&(E="/"+s+"/{"+c+"}.{property}",t.paths[E]={},t.paths[E].get=new jb([_,h],r,{200:new Qb({enum:d})},"used to retrieve the specified property of the specified record"))}return t}function yre(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:Sa+e}}}},this.security=t,this.responses={200:{description:Zb,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function jb(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function Qb(e){this.description=Zb,this.content={"application/json":{schema:e}}}function tH(){this.description="successfully processed request, no content returned to client"}function bre(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:Sa+r}}}},this.responses={200:{description:Zb}}}function rH(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function nH(e){this.type="object",this.properties=e}function Jb(e,t){this.type=e,this.format=t}function Xb(e,t,r){this.name=e,this.in=t,this.schema=r}var sH,Rre,zb,Sa,Zb,oH=Re(()=>{sH=v(gt()),Rre="3.0.3",zb={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},Sa="#/components/schemas/",Zb="successful operation";a(iH,"generateJsonApi");a(yre,"Post");a(jb,"Get");a(Qb,"Response200");a(tH,"Response204");a(bre,"Put");a(rH,"Delete");a(nH,"ResourceSchema");a(Jb,"Type");a(Xb,"Parameter")});var cH={};Ue(cH,{Request:()=>x_,createReuseportFd:()=>vE});var aH,x_,eO,tO,vE,UE=Re(()=>{aH=require("os"),x_=class{static{a(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new tO(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new eO(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},eO=class{static{a(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},tO=class{constructor(t){this.asObject=t}static{a(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,aH.platform)()!="win32"&&(vE=require("node-unix-socket").createReuseportFd)});var BE={};Ue(BE,{parseHeaderValue:()=>nO,start:()=>wre});async function Nre(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&ap(e);let i=new So;try{e.responseHeaders=i;let o=e.url.slice(1),c,l;if(o!==lH){let g=xE.getMatch(o,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new Sc(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let A=nO(g);for(let E of A)switch(E.name){case"max-age":e.expiresAt=E.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=nO(u).map(A=>(A.next?.name==="confirm"&&A.next.value>=0&&(e.replicatedConfirmation=+A.next.value),A.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let d=await Ct(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=co(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new vu.ClientError(g,400)}if(e.authorize=!0,o===lH&&s==="GET"){if(e?.user?.role?.permission?.super_user)return iH(xE);throw new vu.ServerError("Forbidden",403)}switch(s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new vu.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new vu.ServerError(`Method ${s} is not recognized`,501)}}),_=200,h;if(d==null)_=s==="GET"||s==="HEAD"?404:204,rO.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(d.status>0&&d.headers){let g=Wb(d.headers,i);return d.headers!==g&&(d.headers=g),d.data!==void 0&&(d.body=Ff(d.data,e,d)),d}else if(h=e.lastModified){Ore[0]=h;let g=String.fromCharCode(34,(Br[0]&63)+62,(Br[0]>>6)+(Br[1]<<2&63)+62,(Br[1]>>4)+(Br[2]<<4&63)+62,(Br[2]>>2)+62,(Br[3]&63)+62,(Br[3]>>6)+(Br[4]<<2&63)+62,(Br[4]>>4)+(Br[5]<<4&63)+62,(Br[5]>>2)+62,(Br[6]&63)+62,(Br[6]>>6)+(Br[7]<<2&63)+62,34),A=r["if-none-match"];A&&g==A?(d?.onDone&&d.onDone(),_=304,d=void 0):i.setIfNone("ETag",g),rO.lastModified&&i.setIfNone("Last-Modified",new Date(h).toUTCString())}e.createdResource&&(_=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let m={status:_,headers:i,body:void 0},S=d?.wasLoadedFromSource?.();return S!==void 0&&(m.wasCacheMiss=S,!S&&h&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||h))/1e3))),d!==void 0&&(m.body=Ff(d,e,m),s==="HEAD"&&(m.body=void 0)),m}catch(o){o.statusCode?o.statusCode===500?Ui.warn(o):Ui.info(o):Ui.error(o),o.statusCode===405&&(o.method&&(o.message+=` to handle HTTP method ${o.method.toUpperCase()||""}`),o.allow&&(o.allow.push("trace","head","options"),i.setIfNone("Allow",o.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:o.statusCode||500,headers:i,body:void 0};return c.body=Ff(o.contentType?o:o.toString(),e,c),c}}function wre(e){rO=e,e.includeExpensiveRecordCountEstimates&&(x_.prototype.includeExpensiveRecordCountEstimates=!0),!uH&&(uH=!0,xE=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return Nre(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{B_++;let s=new xn;dH||(dH=!0,M_(l=>{B_>0&&l.push({metric:"ws-connections",connections:B_,byThread:!0})}));let i;t.on("error",l=>{i=!0,Ui.warn(l)});let o;t.on("message",a(function(u){o||(o=co(r.requestedContentType??r.headers.asObject["content-type"],!1));let f=o(u);Mt(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(f)},"message"));let c;t.on("close",()=>{B_--,Qn(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=xE.getMatch(l,"ws");if(Qn(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,Mt(m=>({count:m.count,total:B_}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let f=new Sc(u.relativeURL),d=u.Resource;c=(await Ct(r,()=>d.connect(f,s,r)))[Symbol.asyncIterator]();let h;for(;!(h=await c.next()).done;){let m=await ca(h.value,r);t.send(m),Mt(m.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(S=>t._socket.once("drain",S))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Ui.warn(l):Ui.info(l):Ui.error(l),t.close(Ire[l.statusCode]||1011,l.toString())}t.close()},e))}function nO(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,o]=s.trim().split("=");i=i.trim(),o&&(o=o.trim()),r={name:i.toLowerCase(),value:o,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Ui,vu,Br,Ore,rO,lH,uH,xE,dH,B_,Ire,fH=Re(()=>{io();vi();Ui=v(X()),vu=v(he());Pf();Jl();gc();U_();oH();Pf();UE();Br=new Uint8Array(8),Ore=new Float64Array(Br.buffer,0,1),rO={},lH="openapi";a(Nre,"http");B_=0;a(wre,"start");Ire={401:3e3,403:3003};a(nO,"parseHeaderValue")});var sO=C((sCe,hH)=>{var{recordAction:HE,recordActionBinary:_H}=(vi(),P(v_)),Cre=require("fastify-plugin"),Pre=200;hH.exports=Cre(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let o=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,f,d;l.config?.isOperation?(u=n.body?.operation,f="operation"):(u=l.url,f="fastify-route",d=l.method),HE(o,"duration",u,d,f),_H(s.raw.statusCode<400,"success",u,d,f),_H(1,"response_"+s.raw.statusCode,u,d,f);let _=Pre;i?.pipe?(i.on("data",g=>{_+=g.length}),i.on("end",()=>{HE(performance.now()-c,"transfer",u,d,f),HE(_,"bytes-sent",u,d,f)})):(_+=i?.length||0,HE(_,"bytes-sent",u,d,f));let h=o.toFixed(3),m=s.getHeader("Server-Timing"),S=`db;dur=${h}`;s.header("Server-Timing",m?`${m}, ${S}`:S)}),r()},{name:"hdb-request-time"})});var pH=C((iCe,mH)=>{var Dre=tt(),Lre={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};mH.exports=function(e){return Dre.validateObject(e,Lre)}});var H_=C((oCe,EH)=>{"use strict";var Mre=(k(),P(q)).OPERATIONS_ENUM,iO=class{static{a(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=Mre.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};EH.exports=iO});var q_={};Ue(q_,{createTokens:()=>Ure,getJWTRSAKeys:()=>$E,refreshOperationToken:()=>xre,validateOperationToken:()=>cO,validateRefreshToken:()=>VE});async function $E(){if(kE)return kE;try{let e=k_.default.join(F_.default.getHdbBasePath(),wA),t=await FE.default.readFile(k_.default.join(e,hf.JWT_PASSPHRASE_NAME),"utf8"),r=await FE.default.readFile(k_.default.join(e,hf.JWT_PRIVATE_KEY_NAME),"utf8");return kE={publicKey:await FE.default.readFile(k_.default.join(e,hf.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},kE}catch(e){throw GE.default.error(e),new Qs.ClientError(xu.NO_ENCRYPTION_KEYS,Uu.INTERNAL_SERVER_ERROR)}}async function Ure(e){let t=(0,oO.validateBySchema)(e,xi.default.object({username:xi.default.string().optional(),password:xi.default.string().optional(),role:xi.default.string().optional(),expires_in:xi.default.alternatives(xi.default.string(),xi.default.number()).optional()}));if(t)throw new Qs.ClientError(t.message);let r;try{let d=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,d=!1),r=await(0,aO.findAndValidateUser)(e.username,e.password,d)}catch(d){throw GE.default.error(d),new Qs.ClientError(xu.INVALID_CREDENTIALS,Uu.UNAUTHORIZED)}if(!r)throw new Qs.ClientError(xu.INVALID_CREDENTIALS,Uu.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let o=await $E(),c=await Bu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:e.expires_in??RH,algorithm:qE,subject:"operation"}),l=await Bu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:vre,algorithm:qE,subject:"refresh"}),u=Ty(l,"sha256");if((await(0,gH.update)(new SH.default(_f,jl.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new Qs.ClientError(xu.REFRESH_TOKEN_SAVE_FAILED,Uu.INTERNAL_SERVER_ERROR);return TH.default.signalUserChange(new AH.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function xre(e){let t=(0,oO.validateBySchema)(e,xi.default.object({refresh_token:xi.default.string().required()}).required());if(t)throw new Qs.ClientError(t.message);let{refresh_token:r}=e;await VE(r);let n=await $E(),s=await Bu.default.decode(r);return{operation_token:await Bu.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:RH,algorithm:qE,subject:"operation"})}}async function cO(e){return yH(e,"operation")}async function VE(e){return yH(e,"refresh")}async function yH(e,t){try{let r=await $E(),n=await Bu.default.verify(e,r.publicKey,{algorithms:qE,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,aO.findAndValidateUser)(n.username,void 0,!1);if(t==="refresh"&&!Ay(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw GE.default.warn(r),r?.name==="TokenExpiredError"?new Qs.ClientError(xu.TOKEN_EXPIRED,Uu.FORBIDDEN):new Qs.ClientError(xu.INVALID_TOKEN,Uu.UNAUTHORIZED)}}var Bu,FE,k_,xi,oO,Qs,GE,aO,gH,SH,TH,AH,F_,Uu,xu,RH,vre,qE,kE,Hu=Re(()=>{Bu=v(require("jsonwebtoken")),FE=v(require("fs-extra")),k_=v(require("node:path")),xi=v(require("joi")),oO=v(tt());k();Qs=v(he()),GE=v(X());jp();aO=v(Kn()),gH=v(Qr()),SH=v(H_()),TH=v(po()),AH=v(Ws()),F_=v(oe()),{HTTP_STATUS_CODES:Uu,AUTHENTICATION_ERROR_MSGS:xu}=Qs.hdb_errors;F_.default.initSync();RH=F_.default.get(x.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",vre=F_.default.get(x.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",qE="RS256";a($E,"getJWTRSAKeys");a(Ure,"createTokens");a(xre,"refreshOperationToken");a(cO,"validateOperationToken");a(VE,"validateRefreshToken");a(yH,"validateToken")});var lO=C((dCe,NH)=>{"use strict";var Bre=pH(),ku=require("passport"),Hre=require("passport-local").Strategy,kre=require("passport-http").BasicStrategy,Fre=require("util"),qre=Kn(),OH=Fre.callbackify(qre.findAndValidateUser),uCe=Un(),Gre=(k(),P(q)),bH=(Hu(),P(q_));ku.use(new Hre(function(e,t,r){OH(e,t,r)}));ku.use(new kre(function(e,t,r){OH(e,t,r)}));ku.serializeUser(function(e,t){t(null,e)});ku.deserializeUser(function(e,t){t(null,e)});function $re(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let o=e.headers.authorization.split(" ");n=o[0],s=o[1]}function i(o,c){return o?r(o):c?r(null,c):r("Must login")}switch(a(i,"handleResponse"),n){case"Basic":ku.authenticate("basic",{session:!1},(o,c)=>{i(o,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===Gre.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?bH.validateRefreshToken(s).then(o=>{e.body.refresh_token=s,r(null,o)}).catch(o=>{r(o)}):bH.validateOperationToken(s).then(o=>{r(null,o)}).catch(o=>{r(o)});break;default:ku.authenticate("local",{session:!1},function(o,c){i(o,c)})(e,t,r);break}}a($re,"authorize");function Vre(e,t){let r=Bre(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let o=i[e.schema].tables[e.table].attribute_permissions;for(let c in o)e.attributes.indexOf(o[c].attribute_name)>-1&&!o[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${o[c].attribute_name} `))}return t(null,n)}a(Vre,"checkPermissions");NH.exports={authorize:$re,checkPermissions:Vre}});var KE=C((_Ce,wH)=>{"use strict";var Kre=Gn();wH.exports={writeTransaction:Yre};function Yre(e,t,r){return Kre.writeTransaction(e,t,r)}a(Yre,"writeTransaction")});var DH=C((pCe,PH)=>{"use strict";var Wre=Wr(),zre=ms(),IH=X(),jre=Qr(),mCe=KE(),Qre=require("clone"),dO=require("alasql"),Jre=qp(),CH=require("util"),Xre=CH.promisify(zre.getTableSchema),Zre=CH.promisify(Wre.search),ene=(k(),P(q)),uO=ie();Jre(dO);PH.exports={update:rne};var tne="There was a problem performing this update. Please check the logs and try again.";async function rne({statement:e,hdb_user:t}){let r=await Xre(e.table.databaseid,e.table.tableid),n=nne(e.columns);uO.backtickASTSchemaItems(e);let{table:s,where:i}=e,o=Qre(s),c=uO.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=dO.parse(l).statements[0],f=await Zre(u),d=sne(n,f);return ine(o,d,t)}a(rne,"update");function nne(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=dO.compile(`SELECT ${r.expression.toString()} AS [${ene.FUNC_VAL}] FROM ?`)}),t}catch(t){throw IH.error(t),new Error(tne)}}a(nne,"createUpdateRecord");function sne(e,t){return uO.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}a(sne,"buildUpdateRecords");async function ine(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await jre.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){IH.error(`Error delete new_attributes from update response: ${i}`)}return s}a(ine,"updateRecords")});var MH=C((TCe,LH)=>{var one=require("alasql"),ane=Wr(),cne=X(),lne=Gn(),_O=require("util"),fO=ie(),une=(k(),P(q)),dne=ms(),gCe=KE(),SCe=Qr(),fne="record",_ne="successfully deleted",hne=_O.callbackify(gne),mne=_O.promisify(ane.search),pne=_O.promisify(dne.getTableSchema);LH.exports={convertDelete:hne};function Ene(e){return`${e.deleted_hashes.length} ${fne}${e.deleted_hashes.length===1?"":"s"} ${_ne}`}a(Ene,"generateReturnMessage");async function gne({statement:e,hdb_user:t}){let r=await pne(e.table.databaseid,e.table.tableid);fO.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=fO.isEmpty(s)?"":` WHERE  ${s.toString()}`,o=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=one.parse(o).statements[0],l={operation:une.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await mne(c);let u=await lne.deleteRecords(l);return fO.isEmptyOrZeroLength(u.message)&&(u.message=Ene(u)),delete u.txn_time,u}catch(u){throw cne.error(u),u.hdb_code?u.message:u}}a(gne,"convertDelete")});var HH=C((RCe,BH)=>{"use strict";var Sne=Ii(),{hdb_errors:vH}=he(),{getDatabases:UH}=(xe(),P(ct));BH.exports={checkSchemaExists:xH,checkSchemaTableExists:Tne,schema_describe:Sne};async function xH(e){if(!UH()[e])return vH.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(xH,"checkSchemaExists");async function Tne(e,t){let r=await xH(e);if(r)return r;if(!UH()[e][t])return vH.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(Tne,"checkSchemaTableExists")});var gO=C((wCe,QH)=>{"use strict";var{decode:Ane}=require("msgpackr"),{isMainThread:bCe,parentPort:OCe,threadId:NCe}=require("worker_threads"),zE=qt(),Fu=lt(),pO=(k(),P(q)),Xr=X(),mO=oe(),Rne=(k(),P(q)),{onMessageByType:yne}=et(),GH=ho(),{recordAction:kH,recordActionBinary:bne}=(vi(),P(v_)),{publishToStream:One}=zE,{ConsumerEvents:FH}=require("nats"),Nne=Wr(),{promisify:wne}=require("util"),{decodeBlobsWithWrites:Ine}=(En(),P(uu)),$H=wne(setTimeout),jE=1e4,QE,WE,Cne,Pne,VH,G_=new Map,qu=new Map;QH.exports={initialize:KH,ingestConsumer:EO,setSubscription:Dne,setIgnoreOrigin:vne,getDatabaseSubscriptions:Mne,updateConsumer:YH};async function KH(){yne(pO.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await YH(n)}),VH=!0,Xr.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await zE.getNATSReferences();QE=e,WE=e.info.server_name,Cne=t,Pne=r}a(KH,"initialize");async function YH(e){if(e.status==="start"){let{js:t,jsm:r}=await WH(e.node_domain_name);EO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=G_.get(e.stream_name+e.node_domain_name);t&&(Xr.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),G_.set(e.stream_name+e.node_domain_name,"close")),qu.get(e.node_domain_name)==="failed"&&qu.set(e.node_domain_name,"close")}}a(YH,"updateConsumer");var JE=new Map;function Dne(e,t,r){let n=JE.get(e);n||JE.set(e,n=new Map),n.set(t,r),VH||KH().then(Lne)}a(Dne,"setSubscription");async function Lne(){let e=await Nne.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+Fu.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await WH(r),!n))break;let{schema:o,table:c}=i,l=GH.createNatsTableStreamName(o,c);EO(l,n,s,r)}}}a(Lne,"accessConsumers");async function WH(e){let t,r,n=1;for(;!r;)try{t=await QE.jetstream({domain:e}),r=await QE.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(qu.get(e)==="close")break;qu.set(e,"failed"),n%10===1&&Xr.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<jE?n++*100:jE;await $H(i)}return{js:t,jsm:r}}a(WH,"connectToRemoteJS");function Mne(){return JE}a(Mne,"getDatabaseSubscriptions");var zH;function vne(e){zH=e}a(vne,"setIgnoreOrigin");var jH=100,qH=new Array(jH),YE=0;async function EO(e,t,r,n){let{connection:s}=await zE.getNATSReferences();QE=s,WE=s.info.server_name;let i,o=1;for(;!i;)try{i=await t.consumers.get(e,WE),Xr.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(qu.get(n)==="close")break;o%10===1&&Xr.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(Xr.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await zE.createConsumer(r,e,WE,new Date(Date.now()).toISOString()));let f=o++*100<jE?o++*100:jE;await $H(f)}let c=!1,l;for(;!c;){if(G_.get(e+n)==="close"||qu.get(n)==="close"){G_.delete(e+n),c=!0;continue}l=await i.consume({max_messages:mO.get(pO.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),G_.set(e+n,l);let u=!1;(async()=>{for await(let f of await l.status())if(f.type===FH.ConsumerDeleted&&(await l.close(),c=!0),f.type===FH.HeartbeatsMissed){let d=f.data;Xr.trace(`${d} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),d===100&&(Xr.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let f of l)await qH[YE],qH[YE]=Une(f).catch(d=>{Xr.error(d)}),++YE>=jH&&(YE=0)}catch(f){f.message==="consumer deleted"?(Xr.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):Xr.error("Error consuming clustering ingest, restarting consumer",f)}}}a(EO,"ingestConsumer");async function Une(e){let t;await Ine(()=>{t=Ane(e.data)}),kH(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),Xr.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=mO.get(pO.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has(Fu.MSG_HEADERS.TRANSACTED_NODES)&&r.values(Fu.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get(Fu.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!zH),bne(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append(Fu.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:o,schema:c,next:l,table:u,records:f,hash_values:d,__origin:_,expiresAt:h}=t;Xr.trace("processing message:",o,c,u,(f?"records: "+f.map(M=>M?.id):"")+(d?"ids: "+d:""),"with sequence:",e.seq),Xr.trace(`messageProcessor nats msg id: ${e.headers.get(Fu.MSG_HEADERS.NATS_MSG_ID)}`);let m;f||(f=d);let S=new Promise(M=>m=M),{timestamp:g,user:A,node_name:E}=_||{},T=JE.get(c)?.get(u);if(!T)throw new Error(`Missing table for replication message: ${u}`);if(o==="define_schema")t.type=o,t.onCommit=m,T.send(t);else if(f.length===1&&!l)T.send({type:hO(o),value:f[0],id:d?.[0],expiresAt:h,timestamp:g,table:u,onCommit:m,user:A,nodeName:E});else{let M=f.map((H,Z)=>({type:hO(o),value:H,expiresAt:h,id:d?.[Z],table:u}));for(;l;)M.push({type:hO(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;T.send({type:"transaction",writes:M,table:u,timestamp:g,onCommit:m,user:A,nodeName:E})}mO.get(Rne.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&One(e.subject.split(".").slice(0,-1).join("."),GH.createNatsTableStreamName(c,u),e.headers,e.data),await S;let N=Date.now()-g;g&&kH(N,"replication-latency",e.subject,o,"ingest")}catch(o){Xr.error(o)}e.ack()}a(Une,"messageProcessor");function hO(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}a(hO,"convertOperation")});var qt=C((vCe,_k)=>{"use strict";var wr=oe();wr.initSync();var xne=require("fs-extra"),Bne=require("semver"),K_=require("path"),{monotonicFactory:Hne}=require("ulidx"),XH=Hne(),kne=require("util"),ZH=require("child_process"),Fne=kne.promisify(ZH.exec),qne=ZH.spawn,Hr=lt(),ze=(k(),P(q)),{packageJson:Gne,PACKAGE_ROOT:$ne}=gt(),XE=ie(),Js=X(),ZE=ho(),Vne=KE(),$_=Lt(),{broadcast:Kne,onMessageByType:Yne,getWorkerIndex:Wne}=et(),{isMainThread:ek}=require("worker_threads"),{Encoder:zne,decode:RO}=require("msgpackr"),tk=new zne,{isEmpty:nl}=XE,rk=Kn(),CCe=48*36e11;ek&&Yne(ze.ITC_EVENT_TYPES.RESTART,()=>{Zr=void 0,rl=void 0});var{connect:jne,StorageType:Qne,RetentionPolicy:Jne,AckPolicy:yO,DeliverPolicy:bO,DiscardPolicy:Xne,NatsConnection:PCe,JetStreamManager:DCe,JetStreamClient:LCe,StringCodec:MCe,JSONCodec:Zne,createInbox:OO,headers:ese,ErrorCode:JH}=require("nats"),{recordAction:tse}=(vi(),P(v_)),{encodeBlobsAsBuffers:rse}=(En(),P(uu)),nk=Zne(),nse="clustering",sse=Gne.engines[Hr.NATS_SERVER_NAME],ise=K_.join($ne,"dependencies"),AO=K_.join(ise,`${process.platform}-${process.arch}`,Hr.NATS_BINARY_NAME),SO,TO,V_,el,tl;_k.exports={runCommand:sk,checkNATSServerInstalled:ose,createConnection:NO,getConnection:Y_,getJetStreamManager:W_,getJetStream:ok,getNATSReferences:Bi,getServerList:cse,createLocalStream:wO,listStreams:ak,deleteLocalStream:lse,getServerConfig:Gu,listRemoteStreams:use,viewStream:dse,viewStreamIterator:fse,publishToStream:_se,request:pse,reloadNATS:IO,reloadNATSHub:Ese,reloadNATSLeaf:gse,extractServerName:mse,requestErrorHandler:Sse,createLocalTableStream:dk,createTableStreams:Rse,purgeTableStream:fk,purgeSchemaTableStreams:yse,getStreamInfo:bse,updateLocalStreams:Nse,closeConnection:ase,getJsmServerName:eg,addNatsMsgHeader:ck,clearClientCache:ik,updateRemoteConsumer:Tse,createConsumer:lk,updateConsumerIterator:Ase};async function sk(e,t=void 0){let{stdout:r,stderr:n}=await Fne(e,{cwd:t});if(n)throw new Error(n.replace(`
 `,""));return r.replace(`
-`,"")}a(sk,"runCommand");async function ose(){try{await xne.access(AO)}catch{return!1}let e=await sk(`${AO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return Bne.eq(t,sse)}a(ose,"checkNATSServerInstalled");async function NO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await rk.getClusterUser();if(nl(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}Js.trace("create nats connection called");let i=await jne({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),Js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&Js.error("Error with Nats client connection, connection closed",o),i===Zr&&ik()}),i}a(NO,"createConnection");function ik(){Zr=void 0,el=void 0,tl=void 0,rl=void 0}a(ik,"clearClientCache");async function ase(){Zr&&(await Zr.drain(),Zr=void 0,el=void 0,tl=void 0,rl=void 0)}a(ase,"closeConnection");var Zr,rl;async function Y_(){return rl||(rl=NO(wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),Zr=await rl),Zr||rl}a(Y_,"getConnection");async function W_(){if(el)return el;nl(Zr)&&await Y_();let{domain:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(nl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return el=await Zr.jetstreamManager({domain:e,timeout:6e4}),el}a(W_,"getJetStreamManager");async function ok(){if(tl)return tl;nl(Zr)&&await Y_();let{domain:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(nl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return tl=Zr.jetstream({domain:e,timeout:6e4}),tl}a(ok,"getJetStream");async function Bi(){let e=Zr||await Y_(),t=el||await W_(),r=tl||await ok();return{connection:e,jsm:t,js:r}}a(Bi,"getNATSReferences");async function cse(e){let t=wr.get(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await rk.getClusterUser(),s=await NO(t,r,n),i=OO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=nk.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await XE.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(cse,"getServerList");async function wO(e,t){let{jsm:r}=await Bi(),n=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:Qne.File,retention:Jne.Limits,subjects:t,discard:Xne.Old,max_msgs:s,max_bytes:i,max_age:n})}a(wO,"createLocalStream");async function ak(){let{jsm:e}=await Bi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(ak,"listStreams");async function lse(e){let{jsm:t}=await Bi();await t.streams.delete(e)}a(lse,"deleteLocalStream");async function use(e){let{connection:t}=await Bi(),r=[],n=OO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(nk.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(use,"listRemoteStreams");async function dse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Bi(),i=XH(),o={durable_name:i,ack_policy:yO.Explicit};t&&(o.deliver_policy=bO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=RO(f.data),_={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(_.origin=f.headers.get(Hr.MSG_HEADERS.ORIGIN)),u.push(_),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(dse,"viewStream");async function*fse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Bi(),i=XH(),o={durable_name:i,ack_policy:yO.Explicit};t&&(o.deliver_policy=bO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=RO(u.data);f[0]||(f=[f]);for(let d of f){let _={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(_.origin=u.headers.get(Hr.MSG_HEADERS.ORIGIN)),yield _}if(u.ack(),u.info.pending===0)break}await c.delete()}a(fse,"viewStreamIterator");async function _se(e,t,r,n){Js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=ck(n,r);let{js:s}=await Bi(),i=await eg(),o=`${e}.${i}`,c=await rse(()=>n instanceof Uint8Array?n:tk.encode(n));try{Js.trace(`publishToStream publishing to subject: ${o}`),tse(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return uk(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){Js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await wO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(_se,"publishToStream");function ck(e,t){t===void 0&&(t=ese());let r=wr.get(ze.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Hr.MSG_HEADERS.ORIGIN)&&r&&t.append(Hr.MSG_HEADERS.ORIGIN,r),t}a(ck,"addNatsMsgHeader");function Gu(e){e=e.toLowerCase();let t=K_.join(wr.get(ze.CONFIG_PARAMS.ROOTPATH),nse);if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return nl(TO)&&(TO={port:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.HUB,config_file:Hr.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:K_.join(t,Hr.PID_FILES.HUB),hdb_nats_path:t}),TO;if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return nl(SO)&&(SO={port:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.LEAF,config_file:Hr.NATS_CONFIG_FILES.LEAF_SERVER,domain:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.LEAF,pid_file_path:K_.join(t,Hr.PID_FILES.LEAF),hdb_nats_path:t}),SO;Js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(Gu,"getServerConfig");async function lk(e,t,r,n){try{await e.consumers.add(t,{ack_policy:yO.Explicit,durable_name:r,deliver_policy:bO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(lk,"createConsumer");async function hse(e,t,r){await e.consumers.delete(t,r)}a(hse,"removeConsumer");function mse(e){return e.split(".")[1]}a(mse,"extractServerName");async function pse(e,t,r=6e4,n=OO()){if(!XE.isObject(t))throw new Error("data param must be an object");let s=tk.encode(t),{connection:i}=await Bi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return RO(c.data)}a(pse,"request");function IO(e){return new Promise(async(t,r)=>{let n=qne(AO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(IO,"reloadNATS");async function Ese(){let{pid_file_path:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await IO(e)}a(Ese,"reloadNATSHub");async function gse(){let{pid_file_path:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await IO(e)}a(gse,"reloadNATSLeaf");function Sse(e,t,r){let n;switch(e.code){case JH.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case JH.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(Sse,"requestErrorHandler");async function Tse(e,t){let r=t+Hr.SERVER_SUFFIX.LEAF,{connection:n}=await Bi(),{jsm:s}=await Ise(r),{schema:i,table:o}=e,c=ZE.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await uk(async()=>{if(e.subscribe===!0)await lk(s,c,n.info.server_name,l);else try{await hse(s,c,n.info.server_name)}catch(u){Js.trace(u)}})}a(Tse,"updateRemoteConsumer");async function Ase(e,t,r,n){let s=ZE.createNatsTableStreamName(e,t),i=r+Hr.SERVER_SUFFIX.LEAF,o={type:ze.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!ek&&Wne()<wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=gO();await c(o)}await Kne(o),n==="stop"&&await XE.async_set_timeout(1e3)}a(Ase,"updateConsumerIterator");function uk(e){return Vne.writeTransaction(ze.SYSTEM_SCHEMA_NAME,ze.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(uk,"exclusiveLock");async function dk(e,t){let r=ZE.createNatsTableStreamName(e,t),n=await eg(),s=Ose(e,t,n);await wO(r,[s])}a(dk,"createLocalTableStream");async function Rse(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await dk(n,s)}}a(Rse,"createTableStreams");async function fk(e,t,r=void 0){if(wr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=ZE.createNatsTableStreamName(e,t),{domain:s}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await Y_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")Js.warn(n);else throw n}}a(fk,"purgeTableStream");async function yse(e,t){if(wr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await fk(e,t[r])}a(yse,"purgeSchemaTableStreams");async function bse(e){return(await W_()).streams.info(e)}a(bse,"getStreamInfo");function Ose(e,t,r){return`${Hr.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Ose,"createSubjectName");async function eg(){if(V_)return V_;if(V_=(await W_())?.nc?.info?.server_name,V_===void 0)throw new Error("Unable to get jetstream manager server name");return V_}a(eg,"getJsmServerName");async function Nse(){let e=await W_(),t=await eg(),r=await ak();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=wse(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");Js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(Nse,"updateLocalStreams");function wse(e){let{config:t}=e,r=!1,n=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(wse,"updateStreamLimits");async function Ise(e){let t,r;try{t=await Zr.jetstream({domain:e}),r=await Zr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw Js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(Ise,"connectToRemoteJS")});function CO(e){let t=e.get(tg),r=t?(0,$u.unpack)(t):null;r||(r={remoteNameToId:{}});let n=rt(),s=!1;r.nodeName=rt();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:j_(e)??1,nodes:[]})})}i[n]=0,e.putSync(tg,(0,$u.pack)(r))}return r}function z_(e){return CO(e).remoteNameToId}function mk(e,t){let r=CO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(tg,(0,$u.pack)(r)),s}function rg(e,t){let r=CO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(tg,(0,$u.pack)(r))}return hk.trace?.("The remote node name map",e,n,s),s}var hk,$u,tg,PO=Re(()=>{hk=v(qs());Es();$u=require("msgpackr"),tg=Symbol.for("remote-ids");a(CO,"getIdMappingRecord");a(z_,"exportIdMapping");a(mk,"remoteToLocalNodeId");a(rg,"getIdOfRemoteNode")});var DO={};Ue(DO,{commits_awaiting_replication:()=>Vu,getHDBNodeTable:()=>ir,getReplicationSharedStatus:()=>ng,iterateRoutes:()=>J_,shouldReplicateToNode:()=>Q_,subscribeToNodeUpdates:()=>Ku});function ir(){return pk||(pk=_t({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function ng(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Ku(e){ir().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;Tk.debug?.("adding node",n,"on  node",rt()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==rt()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of ir().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function Q_(e,t){let r=Ta.default.get(x.REPLICATION_DATABASES);return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&(r==="*"||r?.find?.(n=>(typeof n=="string"?n:n.name)===t&&(!n.sharded||e.shard===Ta.default.get(x.REPLICATION_SHARD))))&&ir().primaryStore.get(rt())?.replicates||e.subscriptions?.some(n=>(n.database||n.schema)===t&&n.subscribe)}function Cse(){Ku(e=>{Aa({},(t,r)=>{let n=e.name,s=Ek.get(n);if(s||Ek.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=ng(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of Vu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*J_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=Ta.default.get(x.REPLICATION_SECUREPORT)??(!Ta.default.get(x.REPLICATION_PORT)&&Ta.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||Ta.default.get(x.REPLICATION_PORT)||Ta.default.get(x.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){gk.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var gk,Sk,Ta,Tk,pk,Ek,Vu,sl=Re(()=>{xe();Es();sp();gk=require("worker_threads"),Sk=v(he()),Ta=v(oe());k();Tk=v(qs());server.nodes=[];a(ir,"getHDBNodeTable");a(ng,"getReplicationSharedStatus");a(Ku,"subscribeToNodeUpdates");a(Q_,"shouldReplicateToNode");Ek=new Map;QD((e,t,r)=>{if(r>server.nodes.length)throw new Sk.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);Vu||(Vu=new Map,Cse());let n=Vu.get(e);return n||(n=[],Vu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(Cse,"startSubscriptionToReplications");a(J_,"iterateRoutes")});var yk={};Ue(yk,{connectedToNode:()=>il,disconnectedFromNode:()=>Wu,ensureNode:()=>To,requestClusterStatus:()=>Rk,startOnMainThread:()=>MO});async function MO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){sg.set(i,j_(l.auditStore));break}}}ki.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of J_(e))try{let c=!o.subscriptions;if(c){let u=rt(),f=ir().primaryStore.get(u);if(f!==null){let d=e.url??Ra();(f===void 0||f.url!==d||f.shard!==e.shard)&&await To(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Ku(s)});let n;function s(i,o=i?.name){let c=rt()&&o===rt()||Ra()&&i?.url===Ra();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let _ of ir().search([]))_.replicates&&_.name!==o&&s(_,_.name);n=d}if(it.trace("Setting up node replication for",i),!i){for(let[d,_]of Hi){let h;for(let[m,{worker:S,nodes:g}]of _){let A=g[0];if(A&&A.name==o){h=!0;for(let[E,{worker:T}]of _)_.delete(E),it.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(h){Hi.get(d).iterator.remove(),Hi.delete(d);return}}return}if(c)return;if(!i.url){it.info(`Node ${i.name} is missing url`);return}let l=Hi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(it.info(`Added node ${i.name} at ${i.url} for process ${rt()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,_]of Yu)if(i.url===_.url){Yu.delete(d);break}Yu.set(i.name,i)}let u=Xe();if(l||(l=new Map,Hi.set(i.url,l)),l.iterator=Aa(e,(d,_,h)=>{h?f(_,!0):f(_,!1)}),i.subscriptions)for(let d of i.subscriptions){let _=d.database||d.schema;u[_]||(it.warn(`Database ${_} not found for node ${i.name}, making a subscription anyway`),f(_,!1))}function f(d,_){it.trace("Setting up replication for database",d,"on node",i.name);let h=l.get(d),m,S=[{replicateByDefault:_,...i}];sg.has(d)&&X_.default.get(x.REPLICATION_FAILOVER)&&(S.push({replicateByDefault:_,name:rt(),start_time:sg.get(d),end_time:Date.now(),replicates:!0}),sg.delete(d));let g=Q_(i,d),A=ki.workers.filter(E=>E.name==="http");if(h?(m=h.worker,h.nodes=S):g&&(t=t%A.length,m=A[t++],l.set(d,{worker:m,nodes:S,url:i.url}),m?.on("exit",()=>{l.get(d)?.worker===m&&(l.delete(d),f(d,_))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};m?m.postMessage(E):Z_(E)},Pse);else{it.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],ir().primaryStore.get(rt())?.replicates),ir().primaryStore.get(rt())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};m?m.postMessage(E):og(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Wu=a(function(i){try{it.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(Yu.keys()),c=o.sort(),l=c.indexOf(i.name||Xs(i.url));if(l===-1){it.warn("Disconnected node not found in node map",i.name,o);return}let u=Hi.get(i.url),f=u?.get(i.database);if(!f){it.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished||!X_.default.get(x.REPLICATION_FAILOVER))return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let _=d.shard,h=(l+1)%c.length;for(;l!==h;){let m=c[h],S=Yu.get(m);u=Hi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==_){h=(h+1)%c.length;continue}let{worker:A,nodes:E}=g,T=!1;for(let N of f.nodes){if(E.some(M=>M.name===N.name)){it.info(`Disconnected node is already failing over to ${m} for ${i.database}`);continue}N.end_time<Date.now()||(E.push(N),T=!0)}if(f.nodes=[f.nodes[0]],!T){it.info(`Disconnected node ${i.name} has no nodes to fail over to ${m}`);return}it.info(`Failing over ${i.database} from ${i.name} to ${m}`),A?A.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):Z_({database:i.database,nodes:E});return}it.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){it.error("Error failing over node",o)}},"disconnectedFromNode"),il=a(function(i){let o=Hi.get(i.url),c=o?.get(i.database);if(!c){it.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){it.info("Connected node has no nodes",i.database,c);return}if(!l.name){it.debug("Connected node is not named yet",i.database,c);return}if(!X_.default.get(x.REPLICATION_FAILOVER))return;c.nodes=[l];let u=!1;for(let f of Hi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:_,nodes:h,connected:m}=d;if(h)if(m===!1&&h[0].shard===l.shard)u=!0,c.nodes.push(h[0]);else{let S=h.filter(g=>g.name!==l.name);S.length<h.length&&(d.nodes=S,_.postMessage({type:"subscribe-to-node",database:i.database,nodes:h}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,ki.onMessageByType)("disconnected-from-node",Wu),(0,ki.onMessageByType)("connected-to-node",il),(0,ki.onMessageByType)("request-cluster-status",Rk)}function Rk(e,t){let r=[];for(let[n,s]of Yu)try{let i=Hi.get(s.url);it.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:_}]of i)o.push({database:l,connected:f,latency:_,thread_id:u?.threadId,nodes:d.filter(h=>!(h.end_time<Date.now())).map(h=>h.name)});let c=(0,LO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){it.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function To(e,t){let r=ir();e=e??Xs(t.url),t.name=e;try{if(t.ca){let s=new Ak.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){it.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(it.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!X_.default.get(x.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,LO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}it.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var ki,ig,it,LO,X_,Ak,Pse,Hi,Wu,il,Yu,sg,eh=Re(()=>{xe();ki=v(et());Es();ig=require("worker_threads");sl();it=v(X()),LO=require("lodash"),X_=v(oe());k();Ak=require("crypto"),Pse=200,Hi=new Map,Yu=new Map,sg=new Map;a(MO,"startOnMainThread");a(Rk,"requestClusterStatus");ig.parentPort&&(Wu=a(e=>{ig.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),il=a(e=>{ig.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,ki.onMessageByType)("subscribe-to-node",e=>{Z_(e)}),(0,ki.onMessageByType)("unsubscribe-from-node",e=>{og(e)}));a(To,"ensureNode")});var ti=C(Kk=>{"use strict";var or=require("path"),{watch:Ck}=require("chokidar"),bn=require("fs-extra"),zu=require("node-forge"),Pk=require("net"),{generateKeyPair:UO,X509Certificate:Ao,createPrivateKey:Dk}=require("crypto"),Dse=require("util");UO=Dse.promisify(UO);var Ot=zu.pki,Zs=require("joi"),{v4:Lk}=require("uuid"),{validateBySchema:kO}=tt(),bt=X(),Jn=oe(),gs=(k(),P(q)),{CONFIG_PARAMS:al}=gs,ei=by(),{ClientError:ba}=he(),cg=require("node:tls"),{relative:Mk,join:Lse}=require("node:path"),{CERT_PREFERENCE_APP:JCe,CERTIFICATE_VALUES:bk}=ei,Mse=pc(),ag=Lt(),{table:vse,getDatabases:Use,databases:vO}=(xe(),P(ct)),{getJWTRSAKeys:Ok}=(Hu(),P(q_));Object.assign(Kk,{generateKeys:$O,updateConfigCert:kk,createCsr:$se,signCertificate:Vse,setCertTable:ju,loadCertificates:GO,reviewSelfSignedCert:KO,createTLSSelector:qk,listCertificates:$k,addCertificate:Qse,removeCertificate:Xse,createNatsCerts:Wse,generateCertsKeys:Yse,getReplicationCert:rh,getReplicationCertAuth:qse,renewSelfSigned:zse,hostnamesFromCert:YO,getKey:Zse});var{urlToNodeName:vk,getThisNodeUrl:xse,getThisNodeName:fg,clearThisNodeName:Bse}=(Es(),P(wa)),{readFileSync:Hse,statSync:Uk}=require("node:fs"),XCe=oe(),{getTicketKeys:kse,onMessageFromWorkers:Fse}=et(),ya=X(),{isMainThread:xO}=require("worker_threads"),{TLSSocket:xk,createSecureContext:ZCe}=require("node:tls"),FO=3650,th=["127.0.0.1","localhost","::1"],qO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];Fse(async e=>{e.type===gs.ITC_EVENT_TYPES.RESTART&&(Jn.initSync(!0),await KO())});var kr;function Na(){return kr||(kr=Use().system.hdb_certificate,kr||(kr=vse({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),kr}a(Na,"getCertTable");async function rh(){let e=qk("replication"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(fg());if(!r)return;let n=new Ao(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(rh,"getReplicationCert");async function qse(){Na();let e=(await rh()).options.cert,r=new Ao(e).issuer.match(/CN=(.*)/)?.[1];return kr.get(r)}a(qse,"getReplicationCertAuth");var BO,Oa=new Map,lg=[],Nk;function GO(){if(BO)return;if(BO=!0,!Nk&&xO){let n=ag.getConfigFilePath();Nk=Ck(n,{persistent:!1}).on("change",()=>{logger.warn?.("Config file changed, reloading certificates"),Gse()})}let e=[{configKey:al.TLS},{configKey:al.OPERATIONSAPI_TLS}];Na();let t=or.dirname(ag.getConfigFilePath()),r;for(let{configKey:n}of e){let s=ag.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&Mk(Lse(t,"keys"),o);if(c){let l=wk(o,u=>{Oa.set(c,u)},"private key");l&&lg.push(l)}for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&xO){let f=wk(u,d=>{if(bk.cert===d)return;let _=i.hostname??i.hostnames??i.host??i.hosts;_&&!Array.isArray(_)&&(_=[_]);let h=Fk(u),m=new Ao(h),S;try{S=!l&&i.name||Vk(x509Cert)}catch(M){logger.error("error extracting host name from certificate",M);return}if(S==null){logger.error("No host name found on certificate");return}if(m.checkIssued(new Ao(bk.cert)))return;let g=kr.primaryStore.get(S),A=Uk(u).mtimeMs,E=!g||g.is_self_signed?1:g.fileTimestamp??g.__updatedtime__,T=i.uses??["https",...n.includes("operations")?["operations"]:[]],N=g&&A===E&&(JSON.stringify(g.uses)!==JSON.stringify(T)||g.ciphers!==i.ciphers||JSON.stringify(g.hostnames)!==JSON.stringify(_));if(E&&A<=E&&!N){A<E&&logger.info?.(`Certificate ${S} at ${u} is older (${new Date(A)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}N&&logger.info?.(`Config values changed for certificate ${S}, updating record`),r=kr.put({name:S,uses:i.uses??["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:h,private_key_name:c,is_authority:l,hostnames:_,file_timestamp:A,details:{issuer:m.issuer.replace(/\n/g," "),subject:m.subject?.replace(/\n/g," "),subject_alt_name:m.subjectAltName,serial_number:m.serialNumber,valid_from:m.validFrom,valid_to:m.validTo}})},l?"certificate authority":"certificate");f&&lg.push(f)}}}}}return r}a(GO,"loadCertificates");function Gse(){for(let e of lg)e.close();lg.length=0,BO=!1,GO()}a(Gse,"reloadCertificates");function wk(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&xO&&bt.warn(`Reloading ${r}:`,i),n=c,t(Fk(i)))}catch(c){bt.error(`Error loading ${r}:`,i,c)}},"loadFile");return bn.existsSync(e)?s(e,Uk(e)):bt.error?.(`${r} file not found:`,e),Ck(e,{persistent:!1}).on("change",s)}a(wk,"loadAndWatch");function ug(){let e=xse();if(e==null){let t=th[0];return bt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return vk(e)}a(ug,"getHost");function dg(){let e=fg();if(e==null){let t=th[0];return bt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(dg,"getCommonName");async function $se(){let e=await rh(),t=Ot.certificateFromPem(e.options.cert),r=Ot.privateKeyFromPem(e.options.key);bt.info("Creating CSR with cert named:",e.name);let n=Ot.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:dg()},...qO];bt.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:Bk()}];return bt.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),zu.pki.certificationRequestToPem(n)}a($se,"createCsr");function Bk(){let e=th.includes(dg())?th:[...th,dg()];return e.includes(ug())||e.push(ug()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>Pk.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(Bk,"certExtensions");async function Vse(e){let t={},r=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;Na();for await(let f of kr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(Oa.has(f.private_key_name)){n=Oa.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await bn.exists(or.join(r,f.private_key_name))){n=bn.readFile(or.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await HO();s=f.ca,n=f.private_key}n=Ot.privateKeyFromPem(n),t.signingCA=s.certificate;let i=Ot.certificateFromPem(s.certificate);bt.info("Signing CSR with cert named",s.name);let o=Ot.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return bt.error(f),new Error("Error verifying CSR: "+f.message)}let c=zu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+FO),bt.info("sign cert setting validity:",c.validity),bt.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),bt.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;bt.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,zu.md.sha256.create()),t.certificate=Ot.certificateToPem(c)}else bt.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(Vse,"signCertificate");async function Kse(e,t){await ju({name:fg(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await ju({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:Ot.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Kse,"createCertificateTable");async function ju(e){let t=new Ao(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},Na(),await kr.patch(e)}a(ju,"setCertTable");async function $O(){let e=await UO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:Ot.publicKeyFromPem(e.publicKey),private_key:Ot.privateKeyFromPem(e.privateKey)}}a($O,"generateKeys");async function VO(e,t,r){let n=Ot.createCertificate();if(!t){let o=await rh();t=Ot.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+FO);let i=[{name:"commonName",value:dg()},...qO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(Bk()),n.sign(e,zu.md.sha256.create()),Ot.certificateToPem(n)}a(VO,"generateCertificates");async function HO(){let e=await $k(),t;for(let r of e){if(!r.is_authority)continue;let n=await Gk(r.private_key_name);if(r.private_key_name&&n&&new Ao(r.certificate).checkPrivateKey(Dk(n))){bt.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;bt.trace("No CA found with matching private key")}a(HO,"getCertAuthority");async function Hk(e,t,r=!0){let n=Ot.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+FO);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Jn.get(al.REPLICATION_HOSTNAME)??vk(Jn.get(al.REPLICATION_URL))??Lk().split("-")[0]}`},...qO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,zu.md.sha256.create());let o=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),c=or.join(o,ei.PRIVATEKEY_PEM_NAME);return r&&await bn.writeFile(c,Ot.privateKeyToPem(e)),n}a(Hk,"generateCertAuthority");async function Yse(){let{private_key:e,public_key:t}=await $O(),r=await Hk(e,t),n=await VO(e,t,r);await Kse(n,r),kk()}a(Yse,"generateCertsKeys");async function Wse(){let e=await VO(Ot.privateKeyFromPem(ei.CERTIFICATE_VALUES.key),void 0,Ot.certificateFromPem(ei.CERTIFICATE_VALUES.cert)),t=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),r=or.join(t,ei.NATS_CERTIFICATE_PEM_NAME);await bn.exists(r)||await bn.writeFile(r,e);let n=or.join(t,ei.NATS_CA_PEM_NAME);await bn.exists(n)||await bn.writeFile(n,ei.CERTIFICATE_VALUES.cert)}a(Wse,"createNatsCerts");async function zse(){Na();for await(let e of kr.search([{attribute:"is_self_signed",value:!0}]))await kr.delete(e.name);await KO()}a(zse,"renewSelfSigned");async function KO(){Bse(),await GO(),Na();let e=await HO();if(!e){bt.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:Ot.privateKeyFromPem(bn.readFileSync(u)),keyPath:u}}catch(f){return bt.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Jn.get(al.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Jn.get(al.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),c=Mk(o,i);s||(bt.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await $O(),bn.existsSync(or.join(o,ei.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${Lk().split("-")[0]}.pem`),await bn.writeFile(or.join(o,c),Ot.privateKeyToPem(s)));let l=await Hk(s,Ot.setRsaPublicKey(s.n,s.e),!1);await ju({name:l.subject.getField("CN").value,uses:["https"],certificate:Ot.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await rh()){let r=fg();bt.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await HO();let n=Ot.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await VO(Ot.privateKeyFromPem(e.private_key),s,n);await ju({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(KO,"reviewSelfSignedCert");function kk(){let e=Mse(Object.keys(gs.CONFIG_PARAM_MAP),!0),t=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),r=or.join(t,ei.PRIVATEKEY_PEM_NAME),n=or.join(t,ei.NATS_CERTIFICATE_PEM_NAME),s=or.join(t,ei.NATS_CA_PEM_NAME),i=gs.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),ag.updateConfigValue(void 0,void 0,o,!1,!0)}a(kk,"updateConfigCert");function Fk(e){return e.startsWith("-----BEGIN")?e:Hse(e,"utf8")}a(Fk,"readPEM");var Ik=cg.createSecureContext;cg.createSecureContext=function(e){if(!e.cert||!e.key)return Ik(e);let t={...e};delete t.key,delete t.cert;let r=Ik(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var jse=xk.prototype._init;xk.prototype._init=function(e,t){jse.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var ol=new Map;function qk(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),ol.clear();let f=0;for await(let d of vO.system.hdb_certificate.search([])){let _=d.certificate,h=new Ao(_);d.is_authority&&(h.asString=_,ol.set(h.subject,_))}for await(let d of vO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let _=e==="operations-api",h=d.is_self_signed?1:2;d.uses?.includes(e)&&(h+=1);let m=await Gk(d.private_key_name),S=d.certificate,g=new Ao(S);if(ol.has(g.issuer)&&(S+=`
+`,"")}a(sk,"runCommand");async function ose(){try{await xne.access(AO)}catch{return!1}let e=await sk(`${AO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return Bne.eq(t,sse)}a(ose,"checkNATSServerInstalled");async function NO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await rk.getClusterUser();if(nl(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}Js.trace("create nats connection called");let i=await jne({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:wr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),Js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&Js.error("Error with Nats client connection, connection closed",o),i===Zr&&ik()}),i}a(NO,"createConnection");function ik(){Zr=void 0,el=void 0,tl=void 0,rl=void 0}a(ik,"clearClientCache");async function ase(){Zr&&(await Zr.drain(),Zr=void 0,el=void 0,tl=void 0,rl=void 0)}a(ase,"closeConnection");var Zr,rl;async function Y_(){return rl||(rl=NO(wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),Zr=await rl),Zr||rl}a(Y_,"getConnection");async function W_(){if(el)return el;nl(Zr)&&await Y_();let{domain:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(nl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return el=await Zr.jetstreamManager({domain:e,timeout:6e4}),el}a(W_,"getJetStreamManager");async function ok(){if(tl)return tl;nl(Zr)&&await Y_();let{domain:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(nl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return tl=Zr.jetstream({domain:e,timeout:6e4}),tl}a(ok,"getJetStream");async function Bi(){let e=Zr||await Y_(),t=el||await W_(),r=tl||await ok();return{connection:e,jsm:t,js:r}}a(Bi,"getNATSReferences");async function cse(e){let t=wr.get(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await rk.getClusterUser(),s=await NO(t,r,n),i=OO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=nk.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await XE.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(cse,"getServerList");async function wO(e,t){let{jsm:r}=await Bi(),n=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:Qne.File,retention:Jne.Limits,subjects:t,discard:Xne.Old,max_msgs:s,max_bytes:i,max_age:n})}a(wO,"createLocalStream");async function ak(){let{jsm:e}=await Bi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(ak,"listStreams");async function lse(e){let{jsm:t}=await Bi();await t.streams.delete(e)}a(lse,"deleteLocalStream");async function use(e){let{connection:t}=await Bi(),r=[],n=OO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(nk.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(use,"listRemoteStreams");async function dse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Bi(),i=XH(),o={durable_name:i,ack_policy:yO.Explicit};t&&(o.deliver_policy=bO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=RO(f.data),_={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(_.origin=f.headers.get(Hr.MSG_HEADERS.ORIGIN)),u.push(_),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(dse,"viewStream");async function*fse(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Bi(),i=XH(),o={durable_name:i,ack_policy:yO.Explicit};t&&(o.deliver_policy=bO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=RO(u.data);f[0]||(f=[f]);for(let d of f){let _={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(_.origin=u.headers.get(Hr.MSG_HEADERS.ORIGIN)),yield _}if(u.ack(),u.info.pending===0)break}await c.delete()}a(fse,"viewStreamIterator");async function _se(e,t,r,n){Js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=ck(n,r);let{js:s}=await Bi(),i=await eg(),o=`${e}.${i}`,c=await rse(()=>n instanceof Uint8Array?n:tk.encode(n));try{Js.trace(`publishToStream publishing to subject: ${o}`),tse(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return uk(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){Js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await wO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(_se,"publishToStream");function ck(e,t){t===void 0&&(t=ese());let r=wr.get(ze.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Hr.MSG_HEADERS.ORIGIN)&&r&&t.append(Hr.MSG_HEADERS.ORIGIN,r),t}a(ck,"addNatsMsgHeader");function Gu(e){e=e.toLowerCase();let t=K_.join(wr.get(ze.CONFIG_PARAMS.ROOTPATH),nse);if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return nl(TO)&&(TO={port:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.HUB,config_file:Hr.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:K_.join(t,Hr.PID_FILES.HUB),hdb_nats_path:t}),TO;if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return nl(SO)&&(SO={port:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.LEAF,config_file:Hr.NATS_CONFIG_FILES.LEAF_SERVER,domain:$_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Hr.SERVER_SUFFIX.LEAF,pid_file_path:K_.join(t,Hr.PID_FILES.LEAF),hdb_nats_path:t}),SO;Js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(Gu,"getServerConfig");async function lk(e,t,r,n){try{await e.consumers.add(t,{ack_policy:yO.Explicit,durable_name:r,deliver_policy:bO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(lk,"createConsumer");async function hse(e,t,r){await e.consumers.delete(t,r)}a(hse,"removeConsumer");function mse(e){return e.split(".")[1]}a(mse,"extractServerName");async function pse(e,t,r=6e4,n=OO()){if(!XE.isObject(t))throw new Error("data param must be an object");let s=tk.encode(t),{connection:i}=await Bi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return RO(c.data)}a(pse,"request");function IO(e){return new Promise(async(t,r)=>{let n=qne(AO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(IO,"reloadNATS");async function Ese(){let{pid_file_path:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await IO(e)}a(Ese,"reloadNATSHub");async function gse(){let{pid_file_path:e}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await IO(e)}a(gse,"reloadNATSLeaf");function Sse(e,t,r){let n;switch(e.code){case JH.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case JH.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(Sse,"requestErrorHandler");async function Tse(e,t){let r=t+Hr.SERVER_SUFFIX.LEAF,{connection:n}=await Bi(),{jsm:s}=await Ise(r),{schema:i,table:o}=e,c=ZE.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await uk(async()=>{if(e.subscribe===!0)await lk(s,c,n.info.server_name,l);else try{await hse(s,c,n.info.server_name)}catch(u){Js.trace(u)}})}a(Tse,"updateRemoteConsumer");async function Ase(e,t,r,n){let s=ZE.createNatsTableStreamName(e,t),i=r+Hr.SERVER_SUFFIX.LEAF,o={type:ze.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!ek&&Wne()<wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=gO();await c(o)}await Kne(o),n==="stop"&&await XE.async_set_timeout(1e3)}a(Ase,"updateConsumerIterator");function uk(e){return Vne.writeTransaction(ze.SYSTEM_SCHEMA_NAME,ze.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(uk,"exclusiveLock");async function dk(e,t){let r=ZE.createNatsTableStreamName(e,t),n=await eg(),s=Ose(e,t,n);await wO(r,[s])}a(dk,"createLocalTableStream");async function Rse(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await dk(n,s)}}a(Rse,"createTableStreams");async function fk(e,t,r=void 0){if(wr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=ZE.createNatsTableStreamName(e,t),{domain:s}=Gu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await Y_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")Js.warn(n);else throw n}}a(fk,"purgeTableStream");async function yse(e,t){if(wr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await fk(e,t[r])}a(yse,"purgeSchemaTableStreams");async function bse(e){return(await W_()).streams.info(e)}a(bse,"getStreamInfo");function Ose(e,t,r){return`${Hr.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Ose,"createSubjectName");async function eg(){if(V_)return V_;if(V_=(await W_())?.nc?.info?.server_name,V_===void 0)throw new Error("Unable to get jetstream manager server name");return V_}a(eg,"getJsmServerName");async function Nse(){let e=await W_(),t=await eg(),r=await ak();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=wse(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");Js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(Nse,"updateLocalStreams");function wse(e){let{config:t}=e,r=!1,n=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=wr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(wse,"updateStreamLimits");async function Ise(e){let t,r;try{t=await Zr.jetstream({domain:e}),r=await Zr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw Js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(Ise,"connectToRemoteJS")});function CO(e){let t=e.get(tg),r=t?(0,$u.unpack)(t):null;r||(r={remoteNameToId:{}});let n=rt(),s=!1;r.nodeName=rt();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:j_(e)??1,nodes:[]})})}i[n]=0,e.putSync(tg,(0,$u.pack)(r))}return r}function z_(e){return CO(e).remoteNameToId}function mk(e,t){let r=CO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(tg,(0,$u.pack)(r)),s}function rg(e,t){let r=CO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(tg,(0,$u.pack)(r))}return hk.trace?.("The remote node name map",e,n,s),s}var hk,$u,tg,PO=Re(()=>{hk=v(qs());Es();$u=require("msgpackr"),tg=Symbol.for("remote-ids");a(CO,"getIdMappingRecord");a(z_,"exportIdMapping");a(mk,"remoteToLocalNodeId");a(rg,"getIdOfRemoteNode")});var DO={};Ue(DO,{commits_awaiting_replication:()=>Vu,getHDBNodeTable:()=>ir,getReplicationSharedStatus:()=>ng,iterateRoutes:()=>J_,shouldReplicateToNode:()=>Q_,subscribeToNodeUpdates:()=>Ku});function ir(){return pk||(pk=_t({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function ng(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Ku(e){ir().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;Tk.debug?.("adding node",n,"on  node",rt()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==rt()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of ir().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function Q_(e,t){let r=Ta.default.get(x.REPLICATION_DATABASES);return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&(r==="*"||r?.find?.(n=>(typeof n=="string"?n:n.name)===t&&(!n.sharded||e.shard===Ta.default.get(x.REPLICATION_SHARD))))&&ir().primaryStore.get(rt())?.replicates||e.subscriptions?.some(n=>(n.database||n.schema)===t&&n.subscribe)}function Cse(){Ku(e=>{Aa({},(t,r)=>{let n=e.name,s=Ek.get(n);if(s||Ek.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=ng(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of Vu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*J_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=Ta.default.get(x.REPLICATION_SECUREPORT)??(!Ta.default.get(x.REPLICATION_PORT)&&Ta.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||Ta.default.get(x.REPLICATION_PORT)||Ta.default.get(x.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){gk.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var gk,Sk,Ta,Tk,pk,Ek,Vu,sl=Re(()=>{xe();Es();sp();gk=require("worker_threads"),Sk=v(he()),Ta=v(oe());k();Tk=v(qs());server.nodes=[];a(ir,"getHDBNodeTable");a(ng,"getReplicationSharedStatus");a(Ku,"subscribeToNodeUpdates");a(Q_,"shouldReplicateToNode");Ek=new Map;QD((e,t,r)=>{if(r>server.nodes.length)throw new Sk.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);Vu||(Vu=new Map,Cse());let n=Vu.get(e);return n||(n=[],Vu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(Cse,"startSubscriptionToReplications");a(J_,"iterateRoutes")});var yk={};Ue(yk,{connectedToNode:()=>il,disconnectedFromNode:()=>Wu,ensureNode:()=>To,requestClusterStatus:()=>Rk,startOnMainThread:()=>MO});async function MO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){sg.set(i,j_(l.auditStore));break}}}ki.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of J_(e))try{let c=!o.subscriptions;if(c){let u=rt(),f=ir().primaryStore.get(u);if(f!==null){let d=e.url??Ra();(f===void 0||f.url!==d||f.shard!==e.shard)&&await To(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Ku(s)});let n;function s(i,o=i?.name){let c=rt()&&o===rt()||Ra()&&i?.url===Ra();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let _ of ir().search([]))_.replicates&&_.name!==o&&s(_,_.name);n=d}if(it.trace("Setting up node replication for",i),!i){for(let[d,_]of Hi){let h;for(let[m,{worker:S,nodes:g}]of _){let A=g[0];if(A&&A.name==o){h=!0;for(let[E,{worker:T}]of _)_.delete(E),it.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(h){Hi.get(d).iterator.remove(),Hi.delete(d);return}}return}if(c)return;if(!i.url){it.info(`Node ${i.name} is missing url`);return}let l=Hi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(it.info(`Added node ${i.name} at ${i.url} for process ${rt()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,_]of Yu)if(i.url===_.url){Yu.delete(d);break}Yu.set(i.name,i)}let u=Xe();if(l||(l=new Map,Hi.set(i.url,l)),l.iterator=Aa(e,(d,_,h)=>{h?f(_,!0):f(_,!1)}),i.subscriptions)for(let d of i.subscriptions){let _=d.database||d.schema;u[_]||(it.warn(`Database ${_} not found for node ${i.name}, making a subscription anyway`),f(_,!1))}function f(d,_){it.trace("Setting up replication for database",d,"on node",i.name);let h=l.get(d),m,S=[{replicateByDefault:_,...i}];sg.has(d)&&X_.default.get(x.REPLICATION_FAILOVER)&&(S.push({replicateByDefault:_,name:rt(),start_time:sg.get(d),end_time:Date.now(),replicates:!0}),sg.delete(d));let g=Q_(i,d),A=ki.workers.filter(E=>E.name==="http");if(h?(m=h.worker,h.nodes=S):g&&(t=t%A.length,m=A[t++],l.set(d,{worker:m,nodes:S,url:i.url}),m?.on("exit",()=>{l.get(d)?.worker===m&&(l.delete(d),f(d,_))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};m?m.postMessage(E):Z_(E)},Pse);else{it.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],ir().primaryStore.get(rt())?.replicates),ir().primaryStore.get(rt())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};m?m.postMessage(E):og(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Wu=a(function(i){try{it.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(Yu.keys()),c=o.sort(),l=c.indexOf(i.name||Xs(i.url));if(l===-1){it.warn("Disconnected node not found in node map",i.name,o);return}let u=Hi.get(i.url),f=u?.get(i.database);if(!f){it.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished||!X_.default.get(x.REPLICATION_FAILOVER))return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let _=d.shard,h=(l+1)%c.length;for(;l!==h;){let m=c[h],S=Yu.get(m);u=Hi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==_){h=(h+1)%c.length;continue}let{worker:A,nodes:E}=g,T=!1;for(let N of f.nodes){if(E.some(M=>M.name===N.name)){it.info(`Disconnected node is already failing over to ${m} for ${i.database}`);continue}N.end_time<Date.now()||(E.push(N),T=!0)}if(f.nodes=[f.nodes[0]],!T){it.info(`Disconnected node ${i.name} has no nodes to fail over to ${m}`);return}it.info(`Failing over ${i.database} from ${i.name} to ${m}`),A?A.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):Z_({database:i.database,nodes:E});return}it.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){it.error("Error failing over node",o)}},"disconnectedFromNode"),il=a(function(i){let o=Hi.get(i.url),c=o?.get(i.database);if(!c){it.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){it.info("Connected node has no nodes",i.database,c);return}if(!l.name){it.debug("Connected node is not named yet",i.database,c);return}if(!X_.default.get(x.REPLICATION_FAILOVER))return;c.nodes=[l];let u=!1;for(let f of Hi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:_,nodes:h,connected:m}=d;if(h)if(m===!1&&h[0].shard===l.shard)u=!0,c.nodes.push(h[0]);else{let S=h.filter(g=>g.name!==l.name);S.length<h.length&&(d.nodes=S,_.postMessage({type:"subscribe-to-node",database:i.database,nodes:h}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,ki.onMessageByType)("disconnected-from-node",Wu),(0,ki.onMessageByType)("connected-to-node",il),(0,ki.onMessageByType)("request-cluster-status",Rk)}function Rk(e,t){let r=[];for(let[n,s]of Yu)try{let i=Hi.get(s.url);it.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:_}]of i)o.push({database:l,connected:f,latency:_,thread_id:u?.threadId,nodes:d.filter(h=>!(h.end_time<Date.now())).map(h=>h.name)});let c=(0,LO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){it.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function To(e,t){let r=ir();e=e??Xs(t.url),t.name=e;try{if(t.ca){let s=new Ak.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){it.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(it.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!X_.default.get(x.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,LO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}it.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var ki,ig,it,LO,X_,Ak,Pse,Hi,Wu,il,Yu,sg,eh=Re(()=>{xe();ki=v(et());Es();ig=require("worker_threads");sl();it=v(X()),LO=require("lodash"),X_=v(oe());k();Ak=require("crypto"),Pse=200,Hi=new Map,Yu=new Map,sg=new Map;a(MO,"startOnMainThread");a(Rk,"requestClusterStatus");ig.parentPort&&(Wu=a(e=>{ig.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),il=a(e=>{ig.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,ki.onMessageByType)("subscribe-to-node",e=>{Z_(e)}),(0,ki.onMessageByType)("unsubscribe-from-node",e=>{og(e)}));a(To,"ensureNode")});var ti=C(Kk=>{"use strict";var or=require("path"),{watch:Ck}=require("chokidar"),bn=require("fs-extra"),zu=require("node-forge"),Pk=require("net"),{generateKeyPair:UO,X509Certificate:Ao,createPrivateKey:Dk}=require("crypto"),Dse=require("util");UO=Dse.promisify(UO);var Ot=zu.pki,Zs=require("joi"),{v4:Lk}=require("uuid"),{validateBySchema:kO}=tt(),bt=X(),Jn=oe(),gs=(k(),P(q)),{CONFIG_PARAMS:al}=gs,ei=by(),{ClientError:ba}=he(),cg=require("node:tls"),{relative:Mk,join:Lse}=require("node:path"),{CERT_PREFERENCE_APP:JCe,CERTIFICATE_VALUES:bk}=ei,Mse=pc(),ag=Lt(),{table:vse,getDatabases:Use,databases:vO}=(xe(),P(ct)),{getJWTRSAKeys:Ok}=(Hu(),P(q_));Object.assign(Kk,{generateKeys:$O,updateConfigCert:kk,createCsr:$se,signCertificate:Vse,setCertTable:ju,loadCertificates:GO,reviewSelfSignedCert:KO,createTLSSelector:qk,listCertificates:$k,addCertificate:Qse,removeCertificate:Xse,createNatsCerts:Wse,generateCertsKeys:Yse,getReplicationCert:rh,getReplicationCertAuth:qse,renewSelfSigned:zse,hostnamesFromCert:YO,getKey:Zse});var{urlToNodeName:vk,getThisNodeUrl:xse,getThisNodeName:fg,clearThisNodeName:Bse}=(Es(),P(wa)),{readFileSync:Hse,statSync:Uk}=require("node:fs"),XCe=oe(),{getTicketKeys:kse,onMessageFromWorkers:Fse}=et(),ya=X(),{isMainThread:xO}=require("worker_threads"),{TLSSocket:xk,createSecureContext:ZCe}=require("node:tls"),FO=3650,th=["127.0.0.1","localhost","::1"],qO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];Fse(async e=>{e.type===gs.ITC_EVENT_TYPES.RESTART&&(Jn.initSync(!0),await KO())});var kr;function Na(){return kr||(kr=Use().system.hdb_certificate,kr||(kr=vse({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),kr}a(Na,"getCertTable");async function rh(){let e=qk("replication"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(fg());if(!r)return;let n=new Ao(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(rh,"getReplicationCert");async function qse(){Na();let e=(await rh()).options.cert,r=new Ao(e).issuer.match(/CN=(.*)/)?.[1];return kr.get(r)}a(qse,"getReplicationCertAuth");var BO,Oa=new Map,lg=[],Nk;function GO(){if(BO)return;if(BO=!0,!Nk&&xO){let n=ag.getConfigFilePath();Nk=Ck(n,{persistent:!1}).on("change",()=>{logger.warn?.("Config file changed, reloading certificates"),Gse()})}let e=[{configKey:al.TLS},{configKey:al.OPERATIONSAPI_TLS}];Na();let t=or.dirname(ag.getConfigFilePath()),r;for(let{configKey:n}of e){let s=ag.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&Mk(Lse(t,"keys"),o);if(c){let l=wk(o,u=>{Oa.set(c,u)},"private key");l&&lg.push(l)}for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&xO){let f=wk(u,d=>{if(bk.cert===d)return;let _=i.hostname??i.hostnames??i.host??i.hosts;_&&!Array.isArray(_)&&(_=[_]);let h=Fk(u),m=new Ao(h),S;try{S=!l&&i.name||Vk(m)}catch(M){logger.error("error extracting host name from certificate",M);return}if(S==null){logger.error("No host name found on certificate");return}if(m.checkIssued(new Ao(bk.cert)))return;let g=kr.primaryStore.get(S),A=Uk(u).mtimeMs,E=!g||g.is_self_signed?1:g.fileTimestamp??g.__updatedtime__,T=i.uses??["https",...n.includes("operations")?["operations"]:[]],N=g&&A===E&&(JSON.stringify(g.uses)!==JSON.stringify(T)||g.ciphers!==i.ciphers||JSON.stringify(g.hostnames)!==JSON.stringify(_));if(E&&A<=E&&!N){A<E&&logger.info?.(`Certificate ${S} at ${u} is older (${new Date(A)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}N&&logger.info?.(`Config values changed for certificate ${S}, updating record`),r=kr.put({name:S,uses:i.uses??["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:h,private_key_name:c,is_authority:l,hostnames:_,file_timestamp:A,details:{issuer:m.issuer.replace(/\n/g," "),subject:m.subject?.replace(/\n/g," "),subject_alt_name:m.subjectAltName,serial_number:m.serialNumber,valid_from:m.validFrom,valid_to:m.validTo}})},l?"certificate authority":"certificate");f&&lg.push(f)}}}}}return r}a(GO,"loadCertificates");function Gse(){for(let e of lg)e.close();lg.length=0,BO=!1,GO()}a(Gse,"reloadCertificates");function wk(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&xO&&bt.warn(`Reloading ${r}:`,i),n=c,t(Fk(i)))}catch(c){bt.error(`Error loading ${r}:`,i,c)}},"loadFile");return bn.existsSync(e)?s(e,Uk(e)):bt.error?.(`${r} file not found:`,e),Ck(e,{persistent:!1}).on("change",s)}a(wk,"loadAndWatch");function ug(){let e=xse();if(e==null){let t=th[0];return bt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return vk(e)}a(ug,"getHost");function dg(){let e=fg();if(e==null){let t=th[0];return bt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(dg,"getCommonName");async function $se(){let e=await rh(),t=Ot.certificateFromPem(e.options.cert),r=Ot.privateKeyFromPem(e.options.key);bt.info("Creating CSR with cert named:",e.name);let n=Ot.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:dg()},...qO];bt.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:Bk()}];return bt.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),zu.pki.certificationRequestToPem(n)}a($se,"createCsr");function Bk(){let e=th.includes(dg())?th:[...th,dg()];return e.includes(ug())||e.push(ug()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>Pk.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(Bk,"certExtensions");async function Vse(e){let t={},r=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;Na();for await(let f of kr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(Oa.has(f.private_key_name)){n=Oa.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await bn.exists(or.join(r,f.private_key_name))){n=bn.readFile(or.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await HO();s=f.ca,n=f.private_key}n=Ot.privateKeyFromPem(n),t.signingCA=s.certificate;let i=Ot.certificateFromPem(s.certificate);bt.info("Signing CSR with cert named",s.name);let o=Ot.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return bt.error(f),new Error("Error verifying CSR: "+f.message)}let c=zu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+FO),bt.info("sign cert setting validity:",c.validity),bt.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),bt.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;bt.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,zu.md.sha256.create()),t.certificate=Ot.certificateToPem(c)}else bt.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(Vse,"signCertificate");async function Kse(e,t){await ju({name:fg(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await ju({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:Ot.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Kse,"createCertificateTable");async function ju(e){let t=new Ao(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},Na(),await kr.patch(e)}a(ju,"setCertTable");async function $O(){let e=await UO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:Ot.publicKeyFromPem(e.publicKey),private_key:Ot.privateKeyFromPem(e.privateKey)}}a($O,"generateKeys");async function VO(e,t,r){let n=Ot.createCertificate();if(!t){let o=await rh();t=Ot.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+FO);let i=[{name:"commonName",value:dg()},...qO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(Bk()),n.sign(e,zu.md.sha256.create()),Ot.certificateToPem(n)}a(VO,"generateCertificates");async function HO(){let e=await $k(),t;for(let r of e){if(!r.is_authority)continue;let n=await Gk(r.private_key_name);if(r.private_key_name&&n&&new Ao(r.certificate).checkPrivateKey(Dk(n))){bt.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;bt.trace("No CA found with matching private key")}a(HO,"getCertAuthority");async function Hk(e,t,r=!0){let n=Ot.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+FO);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Jn.get(al.REPLICATION_HOSTNAME)??vk(Jn.get(al.REPLICATION_URL))??Lk().split("-")[0]}`},...qO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,zu.md.sha256.create());let o=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),c=or.join(o,ei.PRIVATEKEY_PEM_NAME);return r&&await bn.writeFile(c,Ot.privateKeyToPem(e)),n}a(Hk,"generateCertAuthority");async function Yse(){let{private_key:e,public_key:t}=await $O(),r=await Hk(e,t),n=await VO(e,t,r);await Kse(n,r),kk()}a(Yse,"generateCertsKeys");async function Wse(){let e=await VO(Ot.privateKeyFromPem(ei.CERTIFICATE_VALUES.key),void 0,Ot.certificateFromPem(ei.CERTIFICATE_VALUES.cert)),t=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),r=or.join(t,ei.NATS_CERTIFICATE_PEM_NAME);await bn.exists(r)||await bn.writeFile(r,e);let n=or.join(t,ei.NATS_CA_PEM_NAME);await bn.exists(n)||await bn.writeFile(n,ei.CERTIFICATE_VALUES.cert)}a(Wse,"createNatsCerts");async function zse(){Na();for await(let e of kr.search([{attribute:"is_self_signed",value:!0}]))await kr.delete(e.name);await KO()}a(zse,"renewSelfSigned");async function KO(){Bse(),await GO(),Na();let e=await HO();if(!e){bt.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:Ot.privateKeyFromPem(bn.readFileSync(u)),keyPath:u}}catch(f){return bt.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Jn.get(al.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Jn.get(al.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),c=Mk(o,i);s||(bt.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await $O(),bn.existsSync(or.join(o,ei.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${Lk().split("-")[0]}.pem`),await bn.writeFile(or.join(o,c),Ot.privateKeyToPem(s)));let l=await Hk(s,Ot.setRsaPublicKey(s.n,s.e),!1);await ju({name:l.subject.getField("CN").value,uses:["https"],certificate:Ot.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await rh()){let r=fg();bt.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await HO();let n=Ot.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await VO(Ot.privateKeyFromPem(e.private_key),s,n);await ju({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(KO,"reviewSelfSignedCert");function kk(){let e=Mse(Object.keys(gs.CONFIG_PARAM_MAP),!0),t=or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME),r=or.join(t,ei.PRIVATEKEY_PEM_NAME),n=or.join(t,ei.NATS_CERTIFICATE_PEM_NAME),s=or.join(t,ei.NATS_CA_PEM_NAME),i=gs.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),ag.updateConfigValue(void 0,void 0,o,!1,!0)}a(kk,"updateConfigCert");function Fk(e){return e.startsWith("-----BEGIN")?e:Hse(e,"utf8")}a(Fk,"readPEM");var Ik=cg.createSecureContext;cg.createSecureContext=function(e){if(!e.cert||!e.key)return Ik(e);let t={...e};delete t.key,delete t.cert;let r=Ik(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var jse=xk.prototype._init;xk.prototype._init=function(e,t){jse.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var ol=new Map;function qk(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),ol.clear();let f=0;for await(let d of vO.system.hdb_certificate.search([])){let _=d.certificate,h=new Ao(_);d.is_authority&&(h.asString=_,ol.set(h.subject,_))}for await(let d of vO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let _=e==="operations-api",h=d.is_self_signed?1:2;d.uses?.includes(e)&&(h+=1);let m=await Gk(d.private_key_name),S=d.certificate,g=new Ao(S);if(ol.has(g.issuer)&&(S+=`
 `+ol.get(g.issuer)),!m||!S)throw new Error("Missing private key or certificate for secure server");let A={ciphers:d.ciphers,ticketKeys:kse(),availableCAs:ol,ca:t&&Array.from(ol.values()),cert:S,key:m,key_file:d.private_key_name,is_self_signed:d.is_self_signed};o&&(A.sessionIdContext=o.sessionIdContext);let E=d.hostnames??YO(g);Array.isArray(E)||(E=[E]);for(let M of E)M===ug()&&(h+=.1);let T=cg.createSecureContext(A);T.name=d.name,T.options=A,T.quality=h,T.certificateAuthorities=Array.from(ol),T.certStart=S.toString().slice(0,100),Array.isArray(E)||(E=[E]);let N;for(let M of E)if(M){M[0]==="*"&&(s=!0,M=M.slice(1)),M===ug()&&(h+=2),Pk.isIP(M)&&(N=!0);let H=r.get(M)?.quality??0;h>H&&r.set(M,T)}else ya.error("No hostname found for certificate at",cg.certificate);ya.trace("Adding TLS",T.name,"for",o.ports||"client","cert named",d.name,"hostnames",E,"quality",h,"best quality",f),h>f&&(i.defaultContext=n=T,f=h,o&&(o.defaultContext=T))}catch(_){ya.error("Error applying TLS for",d.name,_)}o?.secureContextsListeners.forEach(d=>d()),c(n)}catch(f){l(f)}}a(u,"updateTLS"),vO.system.hdb_certificate.subscribe({listener:a(()=>setTimeout(()=>u(),1500).unref(),"listener"),omitCurrent:!0}),u()})),i;function i(o,c){ya.info("TLS requested for",o||"(no SNI)");let l=o;for(;;){let f=r.get(l);if(f)return ya.debug("Found certificate for",o,f.certStart),f.updatedContext&&(f=f.updatedContext),c(null,f);if(s&&l){let d=l.indexOf(".",1);d<0?l="":l=l.slice(d)}else break}o?ya.debug("No certificate found to match",o,"using the default certificate"):ya.debug("No SNI, using the default certificate",n?.name);let u=n;u?u.updatedContext&&(u=u.updatedContext):ya.info("No default certificate found"),c(null,u)}a(i,"SNICallback")}a(qk,"createTLSSelector");async function Gk(e){let t=Oa.get(e);return!t&&e?await bn.readFile(or.join(Jn.get(al.ROOTPATH),gs.LICENSE_KEY_DIR_NAME,e),"utf8"):t}a(Gk,"getPrivateKeyByName");async function $k(){Na();let e=[];for await(let t of kr.search([]))e.push(t);return e}a($k,"listCertificates");async function Qse(e){let t=kO(e,Zs.object({name:Zs.string().required(),certificate:Zs.string().required(),is_authority:Zs.boolean().required(),private_key:Zs.string(),hosts:Zs.array(),uses:Zs.array()}));if(t)throw new ba(t.message);let{name:r,certificate:n,private_key:s,is_authority:i}=e,o=new Ao(n),c=!1,l=!1,u;for(let[h,m]of Oa)!s&&!c&&o.checkPrivateKey(Dk(m))&&(c=!0,u=h),s&&s===m&&(l=!0,u=h);if(!i&&!s&&!c)throw new ba("A suitable private key was not found for this certificate");let f;if(!r){try{f=Vk(o)}catch(h){bt.error(h)}if(f==null)throw new ba("Error extracting certificate common name, please provide a name parameter")}let d=Jse(r??f);s&&!c&&!l&&(await bn.writeFile(or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME,d+".pem"),s),Oa.set(d,s));let _={name:r??f,certificate:n,is_authority:i,hosts:e.hosts,uses:e.uses};return(!i||i&&u||i&&s)&&(_.private_key_name=u??d+".pem"),e.ciphers&&(_.ciphers=e.ciphers),await ju(_),"Successfully added certificate: "+d}a(Qse,"addCertificate");function Jse(e){return e.replace(/[^a-z0-9.]/gi,"-")}a(Jse,"sanitizeName");async function Xse(e){let t=kO(e,Zs.object({name:Zs.string().required()}));if(t)throw new ba(t.message);let{name:r}=e;Na();let n=await kr.get(r);if(!n)throw new ba(r+" not found");let{private_key_name:s}=n;if(s){let i=Array.from(await kr.search([{attribute:"private_key_name",value:s}]));i.length===1&&i[0].name===r&&(bt.info("Removing private key named",s),await bn.remove(or.join(Jn.getHdbBasePath(),gs.LICENSE_KEY_DIR_NAME,s)))}return await kr.delete(r),"Successfully removed "+r}a(Xse,"removeCertificate");function Vk(e){let t=e.subject?.match(/CN=(.*)/)?.[1];return t||YO(e)[0]}a(Vk,"getPrimaryHostName");function YO(e){if(e.subjectAltName)return e.subjectAltName.split(",").map(r=>{let n=r.indexOf(":");if(r=r.slice(n+1),r=r.trim(),r[0]==='"')try{r=JSON.parse(r)}catch{}return r.indexOf("=")>-1?r.match(/CN=([^,]*)/)?.[1]:r}).filter(r=>r);let t=certObj.subject?.match(/CN=(.*)/)?.[1];return t?[t]:[]}a(YO,"hostnamesFromCert");async function Zse(e){if(e.bypass_auth!==!0)throw new ba("Unauthorized","401");let t=kO(e,Zs.object({name:Zs.string().required()}));if(t)throw new ba(t.message);let{name:r}=e;if(r===".jwtPrivate")return(await Ok()).privateKey;if(r===".jwtPublic")return(await Ok()).publicKey;if(Oa.get(r))return Oa.get(e.name);throw new ba("Key not found")}a(Zse,"getKey")});var fF={};Ue(fF,{CONFIRMATION_STATUS_POSITION:()=>uF,NodeReplicationConnection:()=>Ju,OPERATION_REQUEST:()=>QO,RECEIVED_TIME_POSITION:()=>Tg,RECEIVED_VERSION_POSITION:()=>Sg,RECEIVING_STATUS_POSITION:()=>Ag,RECEIVING_STATUS_RECEIVING:()=>dF,RECEIVING_STATUS_WAITING:()=>JO,SENDING_TIME_POSITION:()=>nh,createWebSocket:()=>yg,database_subscriptions:()=>Ca,replicateOverWS:()=>sh,table_update_listeners:()=>ZO});async function yg(e,t){let{authorization:r,rejectUnauthorized:n}=t||{},s=rt(),i;if(e==null)throw new TypeError(`Invalid URL: Expected a string URL for node "${s}" but received ${e}`);if(e.includes("wss://")){if(!zO){let l=(0,oF.createTLSSelector)("replication"),u={secureContexts:null};await l.initialize(u),zO=u.secureContexts}if(i=zO.get(s),i&&le.debug?.("Creating web socket for URL",e,"with certificate named:",i.name),!i&&n!==!1)throw new Error("Unable to find a valid certificate to use for replication to connect to "+e)}let o={};r&&(o.Authorization=r);let c={headers:o,localAddress:s?.startsWith("127.0")?s:void 0,servername:(0,cF.isIP)(t?.serverName)?void 0:t?.serverName,noDelay:!0,highWaterMark:128*1024,rejectUnauthorized:n!==!1,secureContext:void 0};return i&&(gg?.caCount!==Ro.size&&(gg=aF.createSecureContext({...i.options,ca:[...Ro,...i.options.availableCAs.values()]}),gg.caCount=Ro.size),c.secureContext=gg),new sF.WebSocket(e,"harperdb-replication-v1",c)}function sh(e,t,r){let n=t.port||t.securePort,s=cl.pid%1e3+"-"+iF.threadId+(n?"s:"+n:"c:"+t.url?.slice(-4))+" "+Math.random().toString().slice(2,3),i=0,o=Buffer.allocUnsafeSlow(1024),c=0,l=new DataView(o.buffer,0,1024),u=t.database,f=t.databaseSubscriptions||Ca,d,_,h=!1,m=t.subscription;m?.then&&m.then(R=>m=R);let S=t.tables||u&&Xe()[u];if(!r){le.error?.("No authorization provided"),ln(1008,"Unauthorized");return}let g=new Map,A=[],E=r.name;E&&t.connection&&(t.connection.nodeName=E);let T,N,M,H,Z,W,$,se=6e4,z,fe=0,ue=0,ee=0,Ae=nF.default.get(x.REPLICATION_BLOBTIMEOUT)??12e4,me=new Map,ye=[],Ht=0,ft;if(t.url){let R=a(()=>{Z&&ue===e._socket?.bytesRead&&ee===e._socket?.bytesWritten?e.terminate():(Z=performance.now(),e.ping(),ue=e._socket?.bytesRead,ee=e._socket?.bytesWritten)},"send_ping");M=setInterval(R,tF).unref(),R()}else Ln();e._socket?.setMaxListeners(200);function Ln(){clearTimeout(H),ue=e._socket?.bytesRead,ee=e._socket?.bytesWritten,H=setTimeout(()=>{ue===e._socket?.bytesRead&&ee===e._socket?.bytesWritten&&(le.warn?.(`Timeout waiting for ping from ${E}, terminating connection and reconnecting`),e.terminate())},tF*2).unref()}a(Ln,"resetPingTimer");function Vr(){if(!(!E||!u||!d))return _||(_=ng(d,u,E)),_}a(Vr,"getSharedStatus"),u&&Jo(u);let Cr,tf,lc=[],mA=[],pA,kt=[],rf=[],nf=[],EA=150,xm=25,sf=0,Ce=0,of=!1,Zi,Pr,Mn,uc;e.on("message",R=>{fe=performance.now();try{let y=R.dataView=new ll(R.buffer,R.byteOffset,R.byteLength);if(R[0]>127){let B=(0,Ze.decode)(R),[w,D,G]=B;switch(w){case Wk:{if(D){if(E){if(E!==D){le.error?.(s,`Node name mismatch, expecting to connect to ${E}, but peer reported name as ${D}, disconnecting`),e.send((0,Ze.encode)([Qu])),ln(1008,"Node name mismatch");return}}else if(E=D,t.connection?.tentativeNode){let ae=t.connection.tentativeNode;ae.name=E,t.connection.tentativeNode=null,To(E,ae)}if(t.connection&&(t.connection.nodeName=E),le.debug?.(s,"received node name:",E,"db:",u),!u)try{Jo(u=B[2]),u==="system"&&(Cr=Aa(t,(ae,V)=>{Qo(V)&&lf(V)}),e.on("close",()=>{Cr?.remove()}))}catch(ae){le.warn?.(s,"Error setting database",ae),e.send((0,Ze.encode)([Qu])),ln(1008,ae.message);return}jo()}break}case Zk:{le.debug?.(s,"Received table definitions for",D.map(ae=>ae.table));for(let ae of D){let V=B[2];ae.database=V;let J;Qo(V)&&(V==="system"?We[V]?.[ae.table]||(J=L(ae,We[V]?.[ae.table])):J=L(ae,We[V]?.[ae.table]),d||(d=J?.auditStore),S||(S=Xe()?.[V]))}break}case Qu:ln();break;case QO:try{let ae=r?.replicates||r?.subscribers||r?.name;server.operation(D,{user:r},!ae).then(V=>{Array.isArray(V)&&(V={results:V}),V.requestId=D.requestId,e.send((0,Ze.encode)([hg,V]))},V=>{e.send((0,Ze.encode)([hg,{requestId:D.requestId,error:V instanceof Error?V.toString():V}]))})}catch(ae){e.send((0,Ze.encode)([hg,{requestId:D.requestId,error:ae instanceof Error?ae.toString():ae}]))}break;case hg:let{resolve:Q,reject:j}=g.get(D.requestId);D.error?j(new Error(D.error)):Q(D),g.delete(D.requestId);break;case WO:let F=B[3];S||(u?le.error?.(s,"No tables found for",u):le.error?.(s,"Database name never received"));let ve=S[F];ve=L({table:F,database:u,attributes:D.attributes,schemaDefined:D.schemaDefined},ve),lc[G]={name:F,decoder:new Ze.Packr({useBigIntExtension:!0,randomAccessStructure:!0,freezeData:!0,typedStructs:D.typedStructs,structures:D.structures}),getEntry(ae){return ve.primaryStore.getEntry(ae)},rootStore:ve.primaryStore.rootStore};break;case zk:uc=d?mk(D,d):new Map,pA=B[2],le.debug?.(s,`Acknowledged subscription request, receiving messages for nodes: ${pA}`);break;case jk:let Ee=G;nf[Ee]=D;break;case Xk:Vr()[uF]=D,le.trace?.(s,"received and broadcasting committed update",D),Vr().buffer.notify();break;case Jk:T=D,m.send({type:"end_txn",localTime:T,remoteNodeIds:A}),Vr(),_[Sg]=T,_[Tg]=Date.now(),_[Ag]=JO;break;case mg:{let ae=B[1],{fileId:V,size:J,finished:de,error:pe}=ae,ce=me.get(V);le.debug?.("Received blob",V,"has stream",!!ce,"connectedToBlob",!!ce?.connectedToBlob,"length",B[2].length,"finished",de),ce||(ce=new jO.PassThrough,ce.expectedSize=J,me.set(V,ce)),ce.lastChunk=Date.now();let Ie=B[2];Mt(Ie.byteLength,"bytes-received",`${E}.${u}`,"replication","blob");try{de?(pe?(ce.on("error",()=>{}),ce.destroy(new Error("Blob error: "+pe+" for record "+(ce.recordId??"unknown")+" from "+E))):ce.end(Ie),ce.connectedToBlob&&me.delete(V)):ce.write(Ie)}catch(He){le.error?.(`Error receiving blob for ${ce.recordId} from ${E} and streaming to storage`,He),me.delete(V)}break}case Qk:{let ae=D,V;try{let J=B[3],de=mA[G]||(mA[G]=S[B[4]]);if(!de)return le.warn?.("Unknown table id trying to handle record request",G);let pe=de.primaryStore.getBinaryFast(Symbol.for("structures")),ce=pe?.length;if(ce>0&&ce!==Ce){Ce=ce;let He=(0,Ze.decode)(pe);e.send((0,Ze.encode)([WO,{typedStructs:He.typed,structures:He.named},G,de.tableName]))}let Ie=de.primaryStore.getBinaryFast(J);if(Ie){let He=de.primaryStore.decoder.decode(Ie,{valueAsBuffer:!0}),De=He.value;He[Cc]&Ur&&(De=Buffer.from(De),xf(()=>de.primaryStore.decoder.decode(Ie),st=>dc(st,J),de.primaryStore.rootStore)),V=(0,Ze.encode)([_g,ae,{value:De,expiresAt:He.expiresAt,version:He.version,residencyId:He.residencyId,nodeId:He.nodeId,user:He.user}])}else V=(0,Ze.encode)([_g,ae])}catch(J){V=(0,Ze.encode)([_g,ae,{error:J.message}])}e.send(V);break}case _g:{let{resolve:ae,reject:V,tableId:J,key:de}=g.get(B[1]),pe=B[2];if(pe?.error)V(new Error(pe.error));else if(pe){let ce;Tp(()=>{let Ie=lc[J].decoder.decode(pe.value);pe.value=Ie,pe.key=de,ae(pe)||ce&&setTimeout(()=>ce.forEach(Ep),6e4).unref()},d?.rootStore,Ie=>{let He=af(Ie,de);return ce||(ce=[]),ce.push(He),He})}else ae();g.delete(B[1]);break}case Yk:{Mn=D;let ae,V,J=!1;if(m){if(u!==m.databaseName&&!m.then){le.error?.("Subscription request for wrong database",u,m.databaseName);return}}else m=f.get(u);if(le.debug?.(s,"received subscription request for",u,"at",Mn),!m){let Oe;m=new Promise(Rr=>{le.debug?.("Waiting for subscription to database "+u),Oe=Rr}),m.ready=Oe,Ca.set(u,m)}if(r.name)V=ir().subscribe(r.name),V.then(async Oe=>{ae=Oe;for await(let Rr of ae){let wt=Rr.value;if(!(wt?.replicates===!0||wt?.replicates?.receives||wt?.subscriptions?.some(yr=>(yr.database||yr.schema)===u&&yr.publish!==!1))){J=!0,e.send((0,Ze.encode)([Qu])),ln(1008,`Unauthorized database subscription to ${u}`);return}}},Oe=>{le.error?.(s,"Error subscribing to HDB nodes",Oe)});else if(!(r?.role?.permission?.super_user||r.replicates)){e.send((0,Ze.encode)([Qu])),ln(1008,`Unauthorized database subscription to ${u}`);return}if(Pr&&(le.debug?.(s,"stopping previous subscription",u),Pr.emit("close")),Mn.length===0)return;let de=Mn[0],pe=a(Oe=>{if(Oe&&(de.replicateByDefault?!de.tables.includes(Oe.tableName):de.tables.includes(Oe.tableName)))return{table:Oe}},"tableToTableEntry"),ce={txnTime:0},Ie,He,De=1/0,st,vn=a((Oe,Rr)=>{if(Oe.type==="end_txn"){ce.txnTime&&(o[i]!==66&&le.error?.("Invalid encoding of message"),eo(9),eo(Rg),p(st=Rr),fi()),i=c,ce.txnTime=0;return}let wt=Oe.nodeId,yr=Oe.tableId,Rt=He[yr];if(!Rt&&(Rt=He[yr]=pe(m.tableById[yr]),!Rt))return le.debug?.("Not subscribed to table",yr);let ls=Rt.table,It=ls.primaryStore,xs=It.encoder;(Oe.extendedType&Cp||!xs.typedStructs)&&(xs._mergeStructures(xs.getStructures()),xs.typedStructs&&(xs.lastTypedStructuresLength=xs.typedStructs.length));let zl=Ie[wt];if(!(zl&&zl.startTime<Rr&&(!zl.endTime||zl.endTime>Rr)))return Eg&&le.trace?.(s,"skipping replication update",Oe.recordId,"to:",E,"from:",wt,"subscribed:",Ie),vP();Eg&&le.trace?.(s,"sending replication update",Oe.recordId,"to:",E,"from:",wt,"subscribed:",Ie);let gA=Oe.version,hc=Oe.residencyId,SA=cf(hc,ls),Hm;if(SA&&!SA.includes(E)){let Bs=cf(Oe.previousResidencyId,ls);if(Bs&&!Bs.includes(E)&&(Oe.type==="put"||Oe.type==="patch")||ls.getResidencyById)return vP();let uf=Oe.recordId;le.trace?.(s,"sending invalidation",uf,E,"from",wt);let df=0;hc&&(df|=Lc),Oe.previousResidencyId&&(df|=Mc);let RA,km=null;for(let UP in ls.indices){if(!km){if(RA=Oe.getValue(It,!0),!RA)break;km={}}km[UP]=RA[UP]}Hm=Pc(Oe.version,yr,uf,null,wt,Oe.user,Oe.type==="put"||Oe.type==="patch"?"invalidate":Oe.type,xs.encode(km),df,hc,Oe.previousResidencyId,Oe.expiresAt)}function vP(){return le.trace?.(s,"skipping audit record",Oe.recordId),W||(W=setTimeout(()=>{W=null,(st||0)+eF/2<De&&(Eg&&le.trace?.(s,"sending skipped sequence update",De),e.send((0,Ze.encode)([Jk,De])))},eF).unref()),new Promise(setImmediate)}a(vP,"skipAuditRecord");let TA=xs.typedStructs,AA=xs.structures;if((TA?.length!=Rt.typed_length||AA?.length!=Rt.structure_length)&&(Rt.typed_length=TA?.length,Rt.structure_length=AA.length,le.debug?.(s,"send table struct",Rt.typed_length,Rt.structure_length),Rt.sentName||(Rt.sentName=!0),e.send((0,Ze.encode)([WO,{typedStructs:TA,structures:AA,attributes:ls.attributes,schemaDefined:ls.schemaDefined},yr,Rt.table.tableName]))),hc&&!rf[hc]&&(e.send((0,Ze.encode)([jk,SA,hc])),rf[hc]=!0),ce.txnTime!==gA&&(ce.txnTime&&(Eg&&le.trace?.(s,"new txn time, sending queued txn",ce.txnTime),o[i]!==66&&le.error?.("Invalid encoding of message"),fi()),ce.txnTime=gA,i=c,p(gA)),Hm)eo(Hm.length),K(Hm);else{let Bs=Oe.encoded;Oe.extendedType&Ur&&xf(()=>Oe.getValue(It),df=>dc(df,Oe.recordId),It.rootStore);let uf=Bs[0]===66?8:0;eo(Bs.length-uf),K(Bs,uf),le.trace?.("wrote record",Oe.recordId,"length:",Bs.length)}return e._socket.writableNeedDrain?new Promise(Bs=>{le.debug?.(`Waiting for remote node ${E} to allow more commits ${e._socket.writableNeedDrain?"due to network backlog":"due to requested flow directive"}`),e._socket.once("drain",Bs)}):Ht>xm?new Promise(Bs=>{ft=Bs}):new Promise(setImmediate)},"sendAuditRecord"),fi=a(()=>{c-i>8?(e.send(o.subarray(i,c)),le.debug?.(s,"Sent message, size:",c-i),Mt(c-i,"bytes-sent",`${E}.${u}`,"replication","egress")):le.debug?.(s,"skipping empty transaction")},"sendQueuedData");Pr=new XO.EventEmitter,Pr.once("close",()=>{J=!0,ae?.end()});for(let{startTime:Oe}of Mn)Oe<De&&(De=Oe);(V||Promise.resolve()).then(async()=>{m=await m,d=m.auditStore,He=m.tableById.map(pe),Ie=[];for(let{name:Rr,startTime:wt,endTime:yr}of Mn){let Rt=rg(Rr,d);le.debug?.("subscription to",Rr,"using local id",Rt,"starting",wt),Ie[Rt]={startTime:wt,endTime:yr}}lf(u),Cr||(Cr=ul(Rr=>{Rr.databaseName===u&&lf(u)}),tf=ih(Rr=>{Rr===u&&(e.send((0,Ze.encode)([Qu])),ln())}),e.on("close",()=>{Cr?.remove(),tf?.remove()})),e.send((0,Ze.encode)([zk,z_(m.auditStore),Mn.map(({name:Rr})=>Rr)]));let Oe=!0;do{isFinite(De)||(le.warn?.("Invalid sequence id "+De),ln(1008,"Invalid sequence id"+De));let Rr;if(Oe&&!J&&(Oe=!1,De===0)){let wt=De,yr=bg(d);for(let Rt in S){if(!pe(Rt))continue;let ls=S[Rt];le.warn?.(`Fully copying ${Rt} table to ${E}`);for(let It of ls.primaryStore.getRange({snapshot:!1,versions:!0})){if(J)return;if(It.localTime>=De){le.trace?.(s,"Copying record from",u,Rt,It.key,It.localTime),wt=Math.max(It.localTime,wt),Vr()[nh]=1;let xs=Pc(It.version,ls.tableId,It.key,null,yr,null,"put",xf(()=>ls.primaryStore.encoder.encode(It.value),zl=>dc(zl,It.key)),It.metadataFlags&-256,It.residencyId,null,It.expiresAt);await vn({recordId:It.key,tableId:ls.tableId,type:"put",getValue(){return It.value},encoded:xs,version:It.version,residencyId:It.residencyId,nodeId:yr,extendedType:It.metadataFlags},It.localTime)}}}c-i>8&&vn({type:"end_txn"},De),Vr()[nh]=0,De=wt}for(let{key:wt,value:yr}of d.getRange({start:De||1,exclusiveStart:!0,snapshot:!1})){if(J)return;let Rt=Tt(yr);le.debug?.("sending audit record",new Date(wt)),Vr()[nh]=wt,De=wt,await vn(Rt,wt),Pr.startTime=wt}c-i>8&&vn({type:"end_txn"},De),Vr()[nh]=0,await _F(d)}while(!J)}).catch(Oe=>{le.error?.(s,"Error handling subscription to node",Oe),ln(1008,"Error handling subscription to node")});break}}return}y.position=8;let I=!0,b,U;do{Vr();let B=y.readInt();if(B===9&&y.getUint8(y.position)==Rg){y.position++,T=U=y.readFloat64(),_[Sg]=T,_[Tg]=Date.now(),_[Ag]=JO,le.trace?.("received remote sequence update",T,u);break}let w=y.position,D=Tt(R,w,w+B),G=lc[D.tableId];G||le.error?.(`No table found with an id of ${D.tableId}`);let Q;D.residencyId&&(Q=nf[D.residencyId],le.trace?.(s,"received residency list",Q,D.type,D.recordId));try{let j=D.recordId;Tp(()=>{b={table:G.name,id:j,type:D.type,nodeId:uc.get(D.nodeId),residencyList:Q,timestamp:D.version,value:D.getValue(G),user:D.user,beginTxn:I,expiresAt:D.expiresAt}},d?.rootStore,F=>af(F,j))}catch(j){throw j.message+="typed structures for current decoder"+JSON.stringify(G.decoder.typedStructs),j}I=!1,le.trace?.(s,"received replication message",D.type,"id",b.id,"version",new Date(D.version),"nodeId",b.nodeId),_[Sg]=D.version,_[Tg]=Date.now(),_[Ag]=dF,m.send(b),y.position=w+B}while(y.position<R.byteLength);sf++,Mt(R.byteLength,"bytes-received",`${E}.${u}.${b?.table||"unknown_table"}`,"replication","ingest"),sf>EA&&!of&&(of=!0,e.pause(),le.debug?.(`Commit backlog causing replication back-pressure, requesting that ${E} pause replication`)),m.send({type:"end_txn",localTime:T,remoteNodeIds:A,async onCommit(){if(b){let B=Date.now()-b.timestamp;Mt(B,"replication-latency",E+"."+u+"."+b.table,b.type,"ingest")}sf--,of&&(of=!1,e.resume(),le.debug?.(`Replication resuming ${E}`)),ye.length>0&&await Promise.all(ye),le.trace?.("All blobs finished"),!N&&U&&(le.trace?.(s,"queuing confirmation of a commit at",U),setTimeout(()=>{e.send((0,Ze.encode)([Xk,N])),le.trace?.(s,"sent confirmation of a commit at",N),N=null},tie)),N=U,le.debug?.("last sequence committed",new Date(U),u)}})}catch(y){le.error?.(s,"Error handling incoming replication message",y)}}),e.on("ping",Ln),e.on("pong",()=>{t.connection&&(t.connection.latency=performance.now()-Z,t.isSubscriptionConnection&&il({name:E,database:u,url:t.url,latency:t.connection.latency})),Z=null}),e.on("close",(R,y)=>{clearInterval(M),clearTimeout(H),clearInterval($),Pr&&Pr.emit("close"),Zi&&Zi.end();for(let[I,{reject:b}]of g)b(new Error(`Connection closed ${y?.toString()} ${R}`));le.debug?.(s,"closed",R,y?.toString())});function ln(R,y){e.isFinished=!0,e.close(R,y),t.connection?.emit("finished")}a(ln,"close");let Dr=new Set;async function dc(R,y){let I=gp(R);if(Dr.has(I)){le.debug?.("Blob already being sent",I);return}Dr.add(I);try{let b;Ht++;for await(let U of R.stream())b&&(le.debug?.("Sending blob chunk",I,"length",b.length),e.send((0,Ze.encode)([mg,{fileId:I,size:R.size},b]))),b=U,e._socket.writableNeedDrain&&(le.debug?.("draining",I),await new Promise(B=>e._socket.once("drain",B)),le.debug?.("drained",I)),Mt(U.length,"bytes-sent",`${E}.${u}`,"replication","blob");le.debug?.("Sending final blob chunk",I,"length",b.length),e.send((0,Ze.encode)([mg,{fileId:I,size:R.size,finished:!0},b]))}catch(b){le.warn?.("Error sending blob",b,"blob id",I,"for record",y),e.send((0,Ze.encode)([mg,{fileId:I,finished:!0,error:b.toString()},Buffer.alloc(0)]))}finally{Dr.delete(I),Ht--,Ht<xm&&ft?.()}}a(dc,"sendBlobs");function af(R,y){let I=gp(R),b=me.get(I);le.debug?.("Received transaction for record",y,"with blob",I,"has stream",!!b,"ended",!!b?.writableEnded),b?b.writableEnded&&me.delete(I):(b=new jO.PassThrough,me.set(I,b)),b.connectedToBlob=!0,b.lastChunk=Date.now(),b.recordId=y,R.size===void 0&&b.expectedSize&&(R.size=b.expectedSize);let U=b.blob??createBlob(b,R);b.blob=U;let B=so(()=>Uf(U).saving,m.auditStore?.rootStore);return B&&(B.blobId=I,ye.push(B),B.finally(()=>{le.debug?.(`Finished receiving blob stream ${I}`),ye.splice(ye.indexOf(B),1)})),U}a(af,"receiveBlobs");function jo(){if(h||(h=!0,t.connection?.on("subscriptions-updated",jo)),t.connection?.isFinished)throw new Error("Can not make a subscription request on a connection that is already closed");let R=new Map;d||(d=m?.auditStore);try{for(let b of m?.dbisDB?.getRange({start:Symbol.for("seq"),end:[Symbol.for("seq"),Buffer.from([255])]})||[])for(let U of b.value.nodes||[])U.lastTxnTime>(R.get(U.id)??0)&&R.set(U.id,U.lastTxnTime)}catch(b){if(!b.message.includes("Can not re"))throw b}let y=t.connection?.nodeSubscriptions?.[0];A=[];let I=t.connection?.nodeSubscriptions?.map((b,U)=>{let B=[],{replicateByDefault:w}=b;if(b.subscriptions){for(let j of b.subscriptions)if(j.subscribe&&(j.schema||j.database)===u){let F=j.table;S?.[F]?.replicate!==!1&&B.push(F)}w=!1}else for(let j in S)(w?S[j].replicate===!1:S[j].replicate)&&B.push(j);let D=d&&rg(b.name,d),G=m?.dbisDB?.get([Symbol.for("seq"),D])??1,Q=Math.max(G?.seqId??1,(typeof b.start_time=="string"?new Date(b.start_time).getTime():b.start_time)??1);if(le.debug?.("Starting time recorded in db",b.name,D,u,G?.seqId,"start time:",Q,new Date(Q)),y!==b){let j=d&&rg(y.name,d),F=m?.dbisDB?.get([Symbol.for("seq"),j])??1;for(let ve of F?.nodes||[])ve.name===b.name&&(Q=ve.seqId,le.debug?.("Using sequence id from proxy node",y.name,Q))}if(D===void 0?le.warn("Starting subscription request from node",b,"but no node id found"):A.push(D),R.get(D)>Q&&(Q=R.get(D),le.debug?.("Updating start time from more recent txn recorded",y.name,Q)),Q===1&&pg)try{new URL(pg).hostname===b.name&&E===b.name?(le.warn?.(`Requesting full copy of database ${u} from ${pg}`),Q=0):Q=Date.now()-6e4}catch(j){le.error?.("Error parsing leader URL",pg,j)}return le.trace?.(s,"defining subscription request",b.name,u,new Date(Q)),{name:b.name,replicateByDefault:w,tables:B,startTime:Q,endTime:b.end_time}});if(I)if(le.debug?.(s,"sending subscription request",I,m?.dbisDB?.path),clearTimeout(z),I.length>0)e.send((0,Ze.encode)([Yk,I]));else{let b=a(()=>{let U=performance.now();z=setTimeout(()=>{fe<=U?ln(1008,"Connection has no subscriptions and is no longer used"):b()},se).unref()},"schedule_close");b()}}a(jo,"sendSubscriptionRequestUpdate");function cf(R,y){if(!R)return;let I=kt[R];return I||(I=y.getResidencyRecord(R),kt[R]=I),I}a(cf,"getResidence");function Qo(R){return!(Ia&&Ia!="*"&&!Ia[R]&&!Ia.includes?.(R)&&!Ia.some?.(y=>y.name===R))}a(Qo,"checkDatabaseAccess");function Jo(R){if(m=m||f.get(R),!Qo(R))throw new Error(`Access to database "${R}" is not permitted`);m||le.warn?.(`No database named "${R}" was declared and registered`),d=m?.auditStore,S||(S=Xe()?.[R]);let y=rt();if(y===E)throw y?new Error("Should not connect to self",y):new Error("Node name not defined");return Bm(y,R),!0}a(Jo,"setDatabase");function Bm(R,y){let I=Xe()?.[y],b=[];for(let U in I){let B=I[U];b.push({table:U,schemaDefined:B.schemaDefined,attributes:B.attributes.map(w=>({name:w.name,type:w.type,isPrimaryKey:w.isPrimaryKey}))})}le.trace?.("Sending database info for node",R,"database name",y),e.send((0,Ze.encode)([Wk,R,y,b]))}a(Bm,"sendNodeDBName");function lf(R){let y=Xe()?.[R],I=[];for(let b in y){if(Mn&&!Mn.some(B=>B.replicateByDefault?!B.tables.includes(b):B.tables.includes(b)))continue;let U=y[b];I.push({table:b,schemaDefined:U.schemaDefined,attributes:U.attributes.map(B=>({name:B.name,type:B.type,isPrimaryKey:B.isPrimaryKey}))})}e.send((0,Ze.encode)([Zk,I,R]))}a(lf,"sendDBSchema"),$=setInterval(()=>{for(let[R,y]of me)y.lastChunk+Ae<Date.now()&&(le.warn?.(`Timeout waiting for blob stream to finish ${R} for record ${y.recordId??"unknown"} from ${E}`),me.delete(R),y.end())},Ae).unref();let fc=1,_c=[];return{end(){Zi&&Zi.end(),Pr&&Pr.emit("close")},getRecord(R){let y=fc++;return new Promise((I,b)=>{let U=[Qk,y,R.table.tableId,R.id];_c[R.table.tableId]||(U.push(R.table.tableName),_c[R.table.tableId]=!0),e.send((0,Ze.encode)(U)),fe=performance.now(),g.set(y,{tableId:R.table.tableId,key:R.id,resolve(B){let{table:w,entry:D}=R;if(I(B),B)return w._recordRelocate(D,B)},reject:b})})},sendOperation(R){let y=fc++;return R.requestId=y,e.send((0,Ze.encode)([QO,R])),new Promise((I,b)=>{g.set(y,{resolve:I,reject:b})})}};function eo(R){O(5),R<128?o[c++]=R:R<16384?(l.setUint16(c,R|32768),c+=2):R<1056964608?(l.setUint32(c,R|3221225472),c+=4):(o[c]=255,l.setUint32(c+1,R),c+=5)}function K(R,y=0,I=R.length){let b=I-y;O(b),R.copy(o,c,y,I),c+=b}function p(R){O(8),l.setFloat64(c,R),c+=8}function O(R){if(R+16>o.length-c){let y=Buffer.allocUnsafeSlow(c+R-i+65536>>10<<11);o.copy(y,0,i,c),c=c-i,i=0,o=y,l=new DataView(o.buffer,0,o.length)}}function L(R,y){let I=R.database??"data";if(I!=="data"&&!We[I]){le.warn?.("Database not found",R.database);return}y||(y={});let b=y.schemaDefined,U=!1,B=R.schemaDefined,w=y.attributes||[];for(let D=0;D<R.attributes?.length;D++){let G=R.attributes[D],Q=w.find(j=>j.name===G.name);(!Q||Q.type!==G.type)&&(b?le.error?.(`Schema for '${u}.${R.table}' is defined locally, but attribute '${G.name}: ${G.type}' from '${E}' does not match local attribute ${Q?"'"+Q.name+": "+Q.type+"'":"which does not exist"}`):(U=!0,B||(G.indexed=!0),Q?w[w.indexOf(Q)]=G:w.push(G)))}return U?(le.debug?.("(Re)creating",R),_t({table:R.table,database:R.database,schemaDefined:R.schemaDefined,attributes:w,...y})):y}}var nF,Ze,sF,iF,le,XO,oF,aF,cl,cF,jO,lF,Yk,Wk,zk,Qu,jk,WO,Qk,_g,QO,hg,Jk,Xk,Zk,mg,uF,Sg,Tg,nh,Ag,JO,dF,eie,pg,ZO,Ca,Eg,eF,tie,tF,zO,gg,rF,Ju,eN=Re(()=>{xe();Ai();PO();tN();Es();nF=v(oe());k();fu();Ze=require("msgpackr"),sF=require("ws"),iF=require("worker_threads"),le=v(qs());eh();XO=require("events"),oF=v(ti()),aF=v(require("node:tls"));sl();cl=v(require("node:process")),cF=require("node:net");vi();En();jO=require("node:stream"),lF=v(require("minimist")),Yk=129,Wk=140,zk=141,Qu=142,jk=130,WO=132,Qk=133,_g=134,QO=136,hg=137,Jk=143,Xk=144,Zk=145,mg=146,uF=0,Sg=1,Tg=2,nh=3,Ag=4,JO=0,dF=1,eie=(0,lF.default)(cl.argv),pg=eie.HDB_LEADER_URL??cl.env.HDB_LEADER_URL,ZO=new Map,Ca=new Map,Eg=!0,eF=300,tie=2,tF=3e4;a(yg,"createWebSocket");rF=500,Ju=class extends XO.EventEmitter{constructor(r,n,s,i,o){super();this.url=r;this.subscription=n;this.databaseName=s;this.nodeName=i;this.authorization=o;this.nodeName=this.nodeName??Xs(r)}static{a(this,"NodeReplicationConnection")}socket;startTime;retryTime=rF;retries=0;isConnected=!0;isFinished=!1;nodeSubscriptions;latency=0;replicateTablesByDefault;session;sessionResolve;sessionReject;async connect(){this.session||this.resetSession();let r=[];this.socket=await yg(this.url,{serverName:this.nodeName,authorization:this.authorization});let n;le.debug?.(`Connecting to ${this.url}, db: ${this.databaseName}, process ${cl.pid}`),this.socket.on("open",()=>{this.socket._socket.unref(),le[this.isConnected?"info":"warn"]?.(`Connected to ${this.url}, db: ${this.databaseName}`),this.retries=0,this.retryTime=rF,this.nodeSubscriptions&&il({name:this.nodeName,database:this.databaseName,url:this.url}),this.isConnected=!0,n=sh(this.socket,{database:this.databaseName,subscription:this.subscription,url:this.url,connection:this,isSubscriptionConnection:this.nodeSubscriptions!==void 0},{replicates:!0}),this.sessionResolve(n)}),this.socket.on("error",s=>{s.code==="SELF_SIGNED_CERT_IN_CHAIN"?(le.warn?.(`Can not connect to ${this.url}, this server does not have a certificate authority for the certificate provided by ${this.url}`),s.isHandled=!0):s.code!=="ECONNREFUSED"&&(s.code==="UNABLE_TO_VERIFY_LEAF_SIGNATURE"?le.error?.(`Can not connect to ${this.url}, the certificate provided by ${this.url} is not trusted, this node needs to be added to the cluster, or a certificate authority needs to be added`):le.error?.(`Error in connection to ${this.url} due to ${s.message}`)),this.sessionReject(s)}),this.socket.on("close",(s,i)=>{if(this.isConnected&&(this.nodeSubscriptions&&Wu({name:this.nodeName,database:this.databaseName,url:this.url,finished:this.socket.isFinished}),this.isConnected=!1),this.removeAllListeners("subscriptions-updated"),this.socket.isFinished){this.isFinished=!0,n?.end(),this.emit("finished");return}if(++this.retries%20===1){let o=i?.toString();le.warn?.(`${n?"Disconnected from":"Failed to connect to"} ${this.url} (db: "${this.databaseName}"), due to ${o?'"'+o+'" ':""}(code: ${s})`)}n=null,this.resetSession(),setTimeout(()=>{this.connect()},this.retryTime).unref(),this.retryTime+=this.retryTime>>8})}resetSession(){this.session=new Promise((r,n)=>{this.sessionResolve=r,this.sessionReject=n})}subscribe(r,n){this.nodeSubscriptions=r,this.replicateTablesByDefault=n,this.emit("subscriptions-updated",r)}unsubscribe(){this.socket.isFinished=!0,this.socket.close(1008,"No longer subscribed")}getRecord(r){return this.session.then(n=>n.getRecord(r))}};a(sh,"replicateOverWS")});var wa={};Ue(wa,{clearThisNodeName:()=>uie,disableReplication:()=>iie,enabled_databases:()=>Ia,forEachReplicatedDatabase:()=>Aa,getThisNodeId:()=>bg,getThisNodeName:()=>rt,getThisNodeUrl:()=>Ra,hostnameToUrl:()=>Cg,lastTimeInAuditStore:()=>j_,monitorNodeCAs:()=>AF,replicateOperation:()=>fie,replication_certificate_authorities:()=>Ro,sendOperationToNode:()=>oh,servers:()=>nie,setReplicator:()=>yF,start:()=>sie,startOnMainThread:()=>MO,subscribeToNode:()=>Z_,unsubscribeFromNode:()=>og,urlToNodeName:()=>Xs});function sie(e){if(!e.port&&!e.securePort&&(e.port=Ss.default.get(x.OPERATIONSAPI_NETWORK_PORT),e.securePort=Ss.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),!rt())throw new Error("Can not load replication without a url (see replication.url in the config)");let t=new Map;for(let s of J_(e))t.set(Xs(s.url),s);oie(e),e={mtls:!0,usageType:"replication",maxPayload:10*1024*1024*1024,...e};let r=Ye.ws(async(s,i,o,c)=>{if(i.headers.get("sec-websocket-protocol")!=="harperdb-replication-v1")return c(s,i,o);await o,s._socket.unref(),sh(s,e,i?.user),s.on("error",l=>{l.code!=="ECONNREFUSED"&&ar.error("Error in connection to "+this.url,l.message)})},e);e.runFirst=!0,Ye.http((s,i)=>{if(s.isWebSocket&&s.headers.get("Sec-WebSocket-Protocol")==="harperdb-replication-v1"){!s.authorized&&s._nodeRequest.socket.authorizationError&&ar.error(`Incoming client connection from ${s.ip} did not have valid certificate, you may need turn on enableRootCAs in the config if you are using a publicly signed certificate, or add the CA to the server's trusted CAs`,s._nodeRequest.socket.authorizationError);let o=ir().primaryStore;if(s.authorized&&s.peerCertificate.subject){let c=s.peerCertificate.subject,l=c&&(o.get(c.CN)||t.get(c.CN));if(l)if(l?.revoked_certificates?.includes(s.peerCertificate.serialNumber)){ar.warn("Revoked certificate used in attempt to connect to node",l.name,"certificate serial number",s.peerCertificate.serialNumber);return}else s.user=l;else ar.warn(`No node found for certificate common name ${c.CN}, available nodes are ${Array.from(o.getRange({}).filter(({value:u})=>u).map(({key:u})=>u)).join(", ")} and routes ${Array.from(t.keys()).join(", ")}, connection will require credentials.`)}else{let c=o.get(s.ip)||t.get(s.ip);c?s.user=c:ar.warn(`No node found for IP address ${s.ip}, available nodes are ${Array.from(new Set([...o.getKeys(),...t.keys()])).join(", ")}, connection will require credentials.`)}}return i(s)},e);let n=[];for(let s of r)if(s.secureContexts){let i=a(()=>{let o=new Set(s.secureContexts.values());s.defaultContext&&o.add(s.defaultContext);for(let c of o)try{let l=Array.from(Ro);c.options.availableCAs&&l.push(...c.options.availableCAs.values());let u={...c.options,ca:l};c.updatedContext=Ig.createSecureContext(u)}catch(l){ar.error("Error creating replication TLS config",l)}},"updateContexts");s.secureContextsListeners.push(i),n.push(i),Ss.default.get(x.REPLICATION_ENABLEROOTCAS)!==!1&&i()}AF(()=>{for(let s of n)s()})}function AF(e){let t=0;Ku(r=>{r?.ca&&(Ro.add(r.ca),Ro.size!==t&&(t=Ro.size,e?.()))})}function iie(e=!0){TF=e}function oie(e){TF||(Xe(),Ia=e.databases,Aa(e,(t,r)=>{if(!t){let n=e.databaseSubscriptions||Ca;for(let[s,i]of Ng){let o=i.get(r);o&&(o.subscribe([],!1),i.delete(r))}n.delete(r);return}for(let n in t){let s=t[n];yF(r,s,e),ZO.get(s)?.forEach(i=>i(s))}}))}function yF(e,t,r){if(!t)return console.error(`Attempt to replicate non-existent table ${t.name} from database ${e}`);if(t.replicate===!1||t.sources?.some(s=>s.isReplicator))return;let n;t.sourcedFrom(class RF extends Kr{static{a(this,"Replicator")}static connection;static subscription;static async subscribe(){let i=r.databaseSubscriptions||Ca,o=i.get(e),c=o?.tableById||[];c[t.tableId]=t;let l=o?.ready;if(ar.trace("Setting up replicator subscription to database",e),!o?.auditStore)return this.subscription=o=new xn,i.set(e,o),o.tableById=c,o.auditStore=t.auditStore,o.dbisDB=t.dbisDB,o.databaseName=e,l&&l(o),o;this.subscription=o}static subscribeOnThisThread(i,o){return!0}static async load(i){if(i){let o=i.residencyId,c=i.residency||t.dbisDB.get([Symbol.for("residency_by_id"),o]);if(c){let l,u=new Set;do{let f;for(let _ of c){if(_===Ye.hostname)continue;let h=cie(_,RF.subscription,e);h?.isConnected&&!u.has(h)&&(!f||h.latency<f.latency)&&(f=h)}if(!f)throw l||new gF.ServerError("No connection to any other nodes are available",502);let d={requestId:rie++,table:t,entry:i,id:i.key};u.add(f);try{return await f.getRecord(d)}catch(_){if(f.isConnected)throw _;ar.warn("Error in load from node",wg,_),l||(l=_)}}while(!0)}}}static isReplicator=!0},{intermediateSource:!0})}function aie(e,t,r,n,s){let i=Ng.get(e);i||(i=new Map,Ng.set(e,i));let o=i.get(r);if(o)return o;if(t)return i.set(r,o=new Ju(e,t,r,n,s)),o.connect(),o.once("finished",()=>i.delete(r)),o}function cie(e,t,r){let n=hF.get(e);n||(n=new Map,hF.set(e,n));let s=n.get(r);if(s)return s;let i=ir().primaryStore.get(e);return i?.url&&(s=new Ju(i.url,t,r,e,i.authorization),n.set(r,s),s.connect(),s.once("finished",()=>n.delete(r))),s}async function oh(e,t,r){r||(r={}),r.serverName=e.name;let n=await yg(e.url,r),s=sh(n,{},{});return new Promise((i,o)=>{n.on("open",()=>{i(s.sendOperation(t))}),n.on("error",c=>{o(c)}),n.on("close",c=>{ar.info("Sending operation connection to "+e.url+" closed",c)})}).finally(()=>{n.close()})}function Z_(e){try{SF.isMainThread&&ar.trace("Subscribing on main thread (should not happen in multi-threaded instance)",e.nodes[0].url,e.database);let t=Ca.get(e.database);if(!t){let n;t=new Promise(s=>{ar.info("Waiting for subscription to database "+e.database),n=s}),t.ready=n,Ca.set(e.database,t)}let r=aie(e.nodes[0].url,t,e.database,e.nodes[0].name,e.nodes[0].authorization);e.nodes[0].name===void 0?r.tentativeNode=e.nodes[0]:r.nodeName=e.nodes[0].name,r.subscribe(e.nodes.filter(n=>Q_(n,e.database)),e.replicateByDefault)}catch(t){ar.error("Error in subscription to node",e.nodes[0]?.url,t)}}async function og({name:e,url:t,database:r}){ar.trace("Unsubscribing from node",e,t,r,"nodes",Array.from(ir().primaryStore.getRange({})));let n=Ng.get(t);if(n){let s=n.get(r);s&&(s.unsubscribe(),n.delete(r))}}function lie(){if(rN!==void 0)return rN;let e=Ss.default.get(x.OPERATIONSAPI_TLS_CERTIFICATE)||Ss.default.get(x.TLS_CERTIFICATE);if(e)return rN=new pF.X509Certificate((0,EF.readFileSync)(e)).subject?.match(/CN=(.*)/)?.[1]??null}function rt(){return wg||(wg=Ss.default.get("replication_hostname")??Xs(Ss.default.get("replication_url"))??lie()??mF("operationsapi_network_secureport")??mF("operationsapi_network_port")??"127.0.0.1")}function uie(){wg=void 0}function mF(e){let t=Ss.default.get(e),r=t?.lastIndexOf?.(":");if(r>0)return t.slice(0,r)}function Og(e){let t=Ss.default.get(e),r=t?.lastIndexOf?.(":");return r>0?+t.slice(r+1).replace(/[[\]]/g,""):+t}function bg(e){return z_(e)?.[rt()]}function Ra(){let e=Ss.default.get("replication_url");return e||Cg(rt())}function Cg(e){let t=Og("replication_port");if(t)return`ws://${e}:${t}`;if(t=Og("replication_secureport"),t)return`wss://${e}:${t}`;if(t=Og("operationsapi_network_port"),t)return`ws://${e}:${t}`;if(t=Og("operationsapi_network_secureport"),t)return`wss://${e}:${t}`}function Xs(e){if(e)return new URL(e).hostname}function Aa(e,t){for(let n of Object.getOwnPropertyNames(We))r(n);return ih(n=>{r(n)}),ul((n,s)=>{r(n.databaseName)});function r(n){let s=We[n];ar.trace("Checking replication status of ",n,e?.databases),e?.databases===void 0||e.databases==="*"||e.databases.includes(n)||e.databases.some?.(i=>i.name===n)||!s?t(s,n,!0):die(n)&&t(s,n,!1)}a(r,"forDatabase")}function die(e){let t=We[e];for(let r in t)if(t[r].replicate)return!0}function j_(e){for(let t of e.getKeys({limit:1,reverse:!0}))return t}async function fie(e){let t={message:""};if(e.replicated){e.replicated=!1,ar.trace?.("Replicating operation",e.operation,"to nodes",Ye.nodes.map(n=>n.name));let r=await Promise.allSettled(Ye.nodes.map(n=>oh(n,e)));t.replicated=r.map((n,s)=>{let i=n.status==="rejected"?{status:"failed",reason:n.reason.toString()}:n.value;return i.node=Ye.nodes[s]?.name,i})}return t}var Ss,ar,pF,EF,Ig,gF,SF,TF,rie,nie,Ro,Ia,Ng,hF,rN,wg,Es=Re(()=>{xe();sa();Jl();eN();Mr();Ss=v(oe()),ar=v(X()),pF=require("crypto"),EF=require("fs");eh();sl();k();PO();Ig=v(require("node:tls")),gF=v(he()),SF=require("worker_threads"),rie=1,nie=[],Ro=Ss.default.get(x.REPLICATION_ENABLEROOTCAS)!==!1?new Set(Ig.rootCertificates):new Set;a(sie,"start");a(AF,"monitorNodeCAs");a(iie,"disableReplication");a(oie,"assignReplicationSource");a(yF,"setReplicator");Ng=new Map;a(aie,"getSubscriptionConnection");hF=new Map;a(cie,"getRetrievalConnectionByName");a(oh,"sendOperationToNode");a(Z_,"subscribeToNode");a(og,"unsubscribeFromNode");a(lie,"getCommonNameFromCert");a(rt,"getThisNodeName");a(uie,"clearThisNodeName");Object.defineProperty(Ye,"hostname",{get(){return rt()}});a(mF,"getHostFromListeningPort");a(Og,"getPortFromListeningPort");a(bg,"getThisNodeId");Ye.replication={getThisNodeId:bg,exportIdMapping:z_};a(Ra,"getThisNodeUrl");a(Cg,"hostnameToUrl");a(Xs,"urlToNodeName");a(Aa,"forEachReplicatedDatabase");a(die,"hasExplicitlyReplicatedTable");a(j_,"lastTimeInAuditStore");a(fie,"replicateOperation")});var rd=C((NPe,IF)=>{"use strict";var Xu=HH(),{validateBySchema:ah}=tt(),{common_validators:Zu,schema_regex:nN}=Oi(),cr=require("joi"),_ie=X(),hie=require("uuid").v4,Lg=po(),ed=(k(),P(q)),mie=require("util"),Pa=Gn(),{handleHDBError:yo,hdb_errors:pie,ClientError:dl}=he(),{HDB_ERROR_MSGS:Pg,HTTP_STATUS_CODES:bo}=pie,{SchemaEventMsg:Mg}=Ws(),bF=qt(),{getDatabases:Eie}=(xe(),P(ct)),{transformReq:td}=ie(),{replicateOperation:OF}=(Es(),P(wa)),{cleanupOrphans:OPe}=(En(),P(uu)),Dg=cr.string().min(1).max(Zu.schema_length.maximum).pattern(nN).messages({"string.pattern.base":"{:#label} "+Zu.schema_format.message}),gie=cr.string().min(1).max(Zu.schema_length.maximum).pattern(nN).messages({"string.pattern.base":"{:#label} "+Zu.schema_format.message}).required(),Sie=cr.string().min(1).max(Zu.schema_length.maximum).pattern(nN).messages({"string.pattern.base":"{:#label} "+Zu.schema_format.message,"any.required":"'primary_key' is required","string.base":"'primary_key' must be a string"}).required();IF.exports={createSchema:Tie,createSchemaStructure:NF,createTable:Aie,createTableStructure:wF,createAttribute:Nie,dropSchema:Rie,dropTable:yie,dropAttribute:bie,getBackup:wie,cleanupOrphanBlobs:Iie};async function Tie(e){let t=await NF(e);return Lg.signalSchemaChange(new Mg(process.pid,e.operation,e.schema)),t}a(Tie,"createSchema");async function NF(e){let t=ah(e,cr.object({database:Dg,schema:Dg}));if(t)throw new dl(t.message);if(td(e),!await Xu.checkSchemaExists(e.schema))throw yo(new Error,Pg.SCHEMA_EXISTS_ERR(e.schema),bo.BAD_REQUEST,ed.LOG_LEVELS.ERROR,Pg.SCHEMA_EXISTS_ERR(e.schema),!0);return await Pa.createSchema(e),`database '${e.schema}' successfully created`}a(NF,"createSchemaStructure");async function Aie(e){return td(e),e.hash_attribute=e.primary_key??e.hash_attribute,await wF(e)}a(Aie,"createTable");async function wF(e){let t=ah(e,cr.object({database:Dg,schema:Dg,table:gie,residence:cr.array().items(cr.string().min(1)).optional(),hash_attribute:Sie}));if(t)throw new dl(t.message);if(!await Xu.checkSchemaTableExists(e.schema,e.table))throw yo(new Error,Pg.TABLE_EXISTS_ERR(e.schema,e.table),bo.BAD_REQUEST,ed.LOG_LEVELS.ERROR,Pg.TABLE_EXISTS_ERR(e.schema,e.table),!0);let n={name:e.table,schema:e.schema,id:hie(),hash_attribute:e.hash_attribute};try{if(e.residence)if(global.clustering_on)n.residence=e.residence,await Pa.createTable(n,e);else throw yo(new Error,"Clustering does not appear to be enabled. Cannot insert table with property 'residence'.",bo.BAD_REQUEST);else await Pa.createTable(n,e);return`table '${e.schema}.${e.table}' successfully created.`}catch(s){throw s}}a(wF,"createTableStructure");async function Rie(e){let t=ah(e,cr.object({database:cr.string(),schema:cr.string()}).or("database","schema").messages({"object.missing":"'database' is required"}));if(t)throw new dl(t.message);td(e);let r=await Xu.checkSchemaExists(e.schema);if(r)throw yo(new Error,r,bo.NOT_FOUND,ed.LOG_LEVELS.ERROR,r,!0);let n=await Xu.schema_describe.describeSchema({schema:e.schema}),s=Object.keys(global.hdb_schema[e.schema]);await Pa.dropSchema(e),Lg.signalSchemaChange(new Mg(process.pid,e.operation,e.schema)),await bF.purgeSchemaTableStreams(e.schema,s);let i=await OF(e);return i.message=`successfully deleted '${e.schema}'`,i}a(Rie,"dropSchema");async function yie(e){let t=ah(e,cr.object({database:cr.string(),schema:cr.string(),table:cr.string().required()}));if(t)throw new dl(t.message);td(e);let r=await Xu.checkSchemaTableExists(e.schema,e.table);if(r)throw yo(new Error,r,bo.NOT_FOUND,ed.LOG_LEVELS.ERROR,r,!0);await Pa.dropTable(e),await bF.purgeTableStream(e.schema,e.table);let n=await OF(e);return n.message=`successfully deleted table '${e.schema}.${e.table}'`,n}a(yie,"dropTable");async function bie(e){let t=ah(e,cr.object({database:cr.string(),schema:cr.string(),table:cr.string().required(),attribute:cr.string().required()}));if(t)throw new dl(t.message);td(e);let r=await Xu.checkSchemaTableExists(e.schema,e.table);if(r)throw yo(new Error,r,bo.NOT_FOUND,ed.LOG_LEVELS.ERROR,r,!0);if(e.attribute===global.hdb_schema[e.schema][e.table].hash_attribute)throw yo(new Error,"You cannot drop a hash attribute",bo.BAD_REQUEST,void 0,void 0,!0);if(ed.TIME_STAMP_NAMES.indexOf(e.attribute)>=0)throw yo(new Error,`cannot drop internal timestamp attribute: ${e.attribute}`,bo.BAD_REQUEST,void 0,void 0,!0);try{return await Pa.dropAttribute(e),Oie(e),Lg.signalSchemaChange(new Mg(process.pid,e.operation,e.schema,e.table,e.attribute)),`successfully deleted attribute '${e.attribute}'`}catch(n){throw _ie.error(`Got an error deleting attribute ${mie.inspect(e)}.`),n}}a(bie,"dropAttribute");function Oie(e){let t=Object.values(global.hdb_schema[e.schema][e.table].attributes);for(let r=0;r<t.length;r++)t[r].attribute===e.attribute&&global.hdb_schema[e.schema][e.table].attributes.splice(r,1)}a(Oie,"dropAttributeFromGlobal");async function Nie(e){td(e);let t=Eie()[e.schema][e.table].attributes;for(let{name:r}of t)if(r===e.attribute)throw yo(new Error,`attribute '${e.attribute}' already exists in ${e.schema}.${e.table}`,bo.BAD_REQUEST,void 0,void 0,!0);return await Pa.createAttribute(e),Lg.signalSchemaChange(new Mg(process.pid,e.operation,e.schema,e.table,e.attribute)),`attribute '${e.schema}.${e.table}.${e.attribute}' successfully created.`}a(Nie,"createAttribute");function wie(e){return Pa.getBackup(e)}a(wie,"getBackup");function Iie(e){if(!e.database)throw new dl('Must provide "database" name for search for orphaned blobs');if(!databases[e.database])throw new dl(`Unknown database '${e.database}'`);let{cleanupOrphans:r}=(En(),P(uu));return r(databases[e.database],e.database),{message:"Orphaned blobs cleanup started, check logs for progress"}}a(Iie,"cleanupOrphanBlobs")});var PF=C((IPe,CF)=>{"use strict";var{OPERATIONS_ENUM:Cie}=(k(),P(q)),sN=class{static{a(this,"ReadAuditLogObject")}constructor(t,r,n=void 0,s=void 0){this.operation=Cie.READ_AUDIT_LOG,this.schema=t,this.table=r,this.search_type=n,this.search_values=s}};CF.exports=sN});var iN=C((DPe,UF)=>{"use strict";var Pie=Gn(),PPe=PF(),vg=ie(),Ug=(k(),P(q)),Die=oe(),{handleHDBError:DF,hdb_errors:Lie}=he(),{HDB_ERROR_MSGS:LF,HTTP_STATUS_CODES:MF}=Lie,Mie=Object.values(Ug.READ_AUDIT_LOG_SEARCH_TYPES_ENUM),vF="To use this operation audit log must be enabled in harperdb-config.yaml";UF.exports=vie;async function vie(e){if(vg.isEmpty(e.schema))throw new Error(LF.SCHEMA_REQUIRED_ERR);if(vg.isEmpty(e.table))throw new Error(LF.TABLE_REQUIRED_ERR);if(!Die.get(Ug.CONFIG_PARAMS.LOGGING_AUDITLOG))throw DF(new Error,vF,MF.BAD_REQUEST,Ug.LOG_LEVELS.ERROR,vF,!0);let t=vg.checkSchemaTableExist(e.schema,e.table);if(t)throw DF(new Error,t,MF.NOT_FOUND,Ug.LOG_LEVELS.ERROR,t,!0);if(!vg.isEmpty(e.search_type)&&Mie.indexOf(e.search_type)<0)throw new Error(`Invalid search_type '${e.search_type}'`);return await Pie.readAuditLog(e)}a(vie,"readAuditLog")});var BF=C((MPe,xF)=>{"use strict";var{OPERATIONS_ENUM:Uie}=(k(),P(q)),oN=class{static{a(this,"GetBackupObject")}constructor(t,r,n=void 0,s=void 0){this.operation=Uie.GET_BACKUP,this.schema=t,this.table=r}};xF.exports=oN});var FF=C((BPe,kF)=>{"use strict";var xie=Gn(),UPe=BF(),aN=ie(),Bie=(k(),P(q)),xPe=oe(),{handleHDBError:Hie,hdb_errors:kie}=he(),{HDB_ERROR_MSGS:HF,HTTP_STATUS_CODES:Fie}=kie;kF.exports=qie;async function qie(e){if(aN.isEmpty(e.schema))throw new Error(HF.SCHEMA_REQUIRED_ERR);if(aN.isEmpty(e.table))throw new Error(HF.TABLE_REQUIRED_ERR);let t=aN.checkSchemaTableExist(e.schema,e.table);if(t)throw Hie(new Error,t,Fie.NOT_FOUND,Bie.LOG_LEVELS.ERROR,t,!0);return await xie.getBackup(read_audit_log_object)}a(qie,"getBackup")});var VF=C((kPe,$F)=>{"use strict";var Gie=oe(),Da=require("joi"),$ie=tt(),qF=require("moment"),Vie=require("fs-extra"),cN=require("path"),Kie=require("lodash"),ch=(k(),P(q)),{LOG_LEVELS:fl}=(k(),P(q)),Yie="YYYY-MM-DD hh:mm:ss",Wie=cN.resolve(__dirname,"../logs");$F.exports=function(e){return $ie.validateBySchema(e,zie)};var zie=Da.object({from:Da.custom(GF),until:Da.custom(GF),level:Da.valid(fl.NOTIFY,fl.FATAL,fl.ERROR,fl.WARN,fl.INFO,fl.DEBUG,fl.TRACE),order:Da.valid("asc","desc"),limit:Da.number().min(1),start:Da.number().min(0),log_name:Da.custom(jie)});function GF(e,t){if(qF(e,qF.ISO_8601).format(Yie)==="Invalid date")return t.message(`'${t.state.path[0]}' date '${e}' is invalid.`)}a(GF,"validateDatetime");function jie(e,t){if(Kie.invert(ch.LOG_NAMES)[e]===void 0)return t.message(`'log_name' '${e}' is invalid.`);let n=Gie.get(ch.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e===void 0?ch.LOG_NAMES.HDB:e,i=s===ch.LOG_NAMES.INSTALL?cN.join(Wie,ch.LOG_NAMES.INSTALL):cN.join(n,s);return Vie.existsSync(i)?null:t.message(`'log_name' '${e}' does not exist.`)}a(jie,"validateReadLogPath")});var uN=C((qPe,YF)=>{"use strict";var xg=(k(),P(q)),Qie=X(),Jie=oe(),Xie=VF(),lN=require("path"),KF=require("fs-extra"),{once:Zie}=require("events"),{handleHDBError:eoe,hdb_errors:toe}=he(),{PACKAGE_ROOT:roe}=gt(),noe=lN.join(roe,"logs"),soe=1e3,ioe=200;YF.exports=ooe;async function ooe(e){let t=Xie(e);if(t)throw eoe(t,t.message,toe.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0);let r=Jie.get(xg.HDB_SETTINGS_NAMES.LOG_PATH_KEY),n=e.log_name===void 0?xg.LOG_NAMES.HDB:e.log_name,s=n===xg.LOG_NAMES.INSTALL?lN.join(noe,xg.LOG_NAMES.INSTALL):lN.join(r,n),i=e.level!==void 0,o=i?e.level:void 0,c=e.from!==void 0,l=c?new Date(e.from):void 0,u=e.until!==void 0,f=u?new Date(e.until):void 0,d=e.limit===void 0?soe:e.limit,_=e.order===void 0?void 0:e.order,h=e.start===void 0?0:e.start,m=h+d,S=0;_==="desc"&&!l&&!f&&(S=Math.max(KF.statSync(s).size-(m+5)*ioe,0));let g=KF.createReadStream(s,{start:S});g.on("error",H=>{Qie.error(H)});let A=0,E=[],T="",N;g.on("data",H=>{let Z=/(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d\.]+Z) \[(.+?)]: /g;H=T+H;let W=0,$;for(;($=Z.exec(H))&&!g.destroyed;){N&&(N.message=H.slice(W,$.index),M(N));let[se,z,fe]=$,ue=fe.split("] ["),ee=ue[0],Ae=ue[1];ue.splice(0,2),N={timestamp:z,thread:ee,level:Ae,tags:ue,message:""},W=$.index+se.length}T=H.slice(W)}),g.on("end",H=>{g.destroyed||N&&(N.message=T.trim(),M(N))}),g.resume();function M(H){let Z,W,$;switch(!0){case(i&&c&&u):Z=new Date(H.timestamp),W=new Date(l),$=new Date(f),H.level===o&&Z>=W&&Z<=$&&A<h?A++:H.level===o&&Z>=W&&Z<=$&&(La(H,_,E),A++,A===m&&g.destroy());break;case(i&&c):Z=new Date(H.timestamp),W=new Date(l),H.level===o&&Z>=W&&A<h?A++:H.level===o&&Z>=W&&(La(H,_,E),A++,A===m&&g.destroy());break;case(i&&u):Z=new Date(H.timestamp),$=new Date(f),H.level===o&&Z<=$&&A<h?A++:H.level===o&&Z<=$&&(La(H,_,E),A++,A===m&&g.destroy());break;case(c&&u):Z=new Date(H.timestamp),W=new Date(l),$=new Date(f),Z>=W&&Z<=$&&A<h?A++:Z>=W&&Z<=$&&(La(H,_,E),A++,A===m&&g.destroy());break;case i:H.level===o&&A<h?A++:H.level===o&&(La(H,_,E),A++,A===m&&g.destroy());break;case c:Z=new Date(H.timestamp),W=new Date(l),Z>=W&&A<h?A++:Z>=W&&A>=h&&(La(H,_,E),A++,A===m&&g.destroy());break;case u:Z=new Date(H.timestamp),$=new Date(f),Z<=$&&A<h?A++:Z<=$&&A>=h&&(La(H,_,E),A++,A===m&&g.destroy());break;default:A<h?A++:(La(H,_,E),A++,A===m&&g.destroy())}}return a(M,"onLogMessage"),await Zie(g,"close"),E}a(ooe,"readLog");function La(e,t,r){t==="desc"?aoe(e,r):t==="asc"?coe(e,r):r.push(e)}a(La,"pushLineToResult");function aoe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)>r?n=i+1:s=i}t.splice(n,0,e)}a(aoe,"insertDescending");function coe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)<r?n=i+1:s=i}t.splice(n,0,e)}a(coe,"insertAscending")});var Bg=C((WPe,QF)=>{"use strict";var dN=require("joi"),{string:nd,boolean:WF,date:loe}=dN.types(),uoe=tt(),{validateSchemaExists:$Pe,validateTableExists:VPe,validateSchemaName:KPe}=Oi(),doe=(k(),P(q)),foe=lt(),zF=oe();zF.initSync();var YPe=nd.invalid(zF.get(doe.CONFIG_PARAMS.CLUSTERING_NODENAME)??"node_name").pattern(foe.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),jF={operation:nd.valid("add_node","update_node","set_node_replication"),node_name:nd.optional(),subscriptions:dN.array().items({table:nd.optional(),schema:nd.optional(),database:nd.optional(),subscribe:WF.required(),publish:WF.required().custom(hoe),start_time:loe.iso()})};function _oe(e){return uoe.validateBySchema(e,dN.object(jF))}a(_oe,"addUpdateNodeValidator");function hoe(e,t){if(t.state.ancestors[2].operation==="add_node"&&e===!1&&t.state.ancestors[0].subscribe===!1)return t.message(`'subscriptions[${t.state.path[1]}]' subscribe and/or publish must be set to true when adding a node`)}a(hoe,"checkForFalsy");QF.exports={addUpdateNodeValidator:_oe,validation_schema:jF}});var Ma=C((jPe,JF)=>{"use strict";var fN=class{static{a(this,"Node")}constructor(t,r,n){this.name=t,this.subscriptions=r,this.system_info=n}},_N=class{static{a(this,"NodeSubscription")}constructor(t,r,n,s){this.schema=t,this.table=r,this.publish=n,this.subscribe=s}};JF.exports={Node:fN,NodeSubscription:_N}});var ZF=C((JPe,XF)=>{"use strict";var moe=(k(),P(q)).OPERATIONS_ENUM,hN=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=moe.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};XF.exports=hN});var lh=C((ZPe,eq)=>{"use strict";var mN=class{static{a(this,"RemotePayloadObject")}constructor(t,r,n,s){this.operation=t,this.node_name=r,this.subscriptions=n,this.system_info=s}},pN=class{static{a(this,"RemotePayloadSubscription")}constructor(t,r,n,s,i,o,c){this.schema=t,this.table=r,this.hash_attribute=n,this.publish=s,this.subscribe=i,this.start_time=o,c!==void 0&&(this.attributes=c)}};eq.exports={RemotePayloadObject:mN,RemotePayloadSubscription:pN}});var rq=C((tDe,tq)=>{"use strict";var EN=class{static{a(this,"TableSizeObject")}constructor(t,r,n=0,s=0,i=0,o=0){this.schema=t,this.table=r,this.table_size=n,this.record_count=s,this.transaction_log_size=i,this.transaction_log_record_count=o}};tq.exports=EN});var sq=C((aDe,nq)=>{"use strict";var poe=rq(),nDe=Ft(),sDe=ht(),Eoe=X(),{getSchemaPath:iDe,getTransactionAuditStorePath:oDe}=St(),{getDatabases:goe}=(xe(),P(ct));nq.exports=Soe;async function Soe(e){let t=new poe;try{let r=goe()[e.schema]?.[e.name],n=r.primaryStore.getStats(),s=r.auditStore?.getStats();t.schema=e.schema,t.table=e.name,t.record_count=n.entryCount,t.transaction_log_record_count=s.entryCount}catch(r){Eoe.warn(`unable to stat table dbi due to ${r}`)}return t}a(Soe,"lmdbGetTableSize")});var oq=C((lDe,iq)=>{"use strict";var gN=class{static{a(this,"SystemInformationObject")}constructor(t,r,n,s,i,o,c){this.system=t,this.time=r,this.cpu=n,this.memory=s,this.disk=i,this.network=o,this.harperdb_processes=c}};iq.exports=gN});var id=C((mDe,uq)=>{"use strict";var Toe=require("fs-extra"),Aoe=require("path"),en=require("systeminformation"),va=X(),aq=qt(),dDe=lt(),sd=(k(),P(q)),Roe=sq(),yoe=Ii(),{getThreadInfo:cq}=et(),uh=oe();uh.initSync();var boe=oq(),{openEnvironment:fDe}=ht(),{getSchemaPath:_De}=St(),{database:hDe,databases:SN}=(xe(),P(ct)),Hg;uq.exports={getHDBProcessInfo:yN,getNetworkInfo:ON,getDiskInfo:bN,getMemoryInfo:RN,getCPUInfo:AN,getTimeInfo:TN,getSystemInformation:NN,systemInformation:Ooe,getTableSize:wN,getMetrics:IN};function TN(){return en.time()}a(TN,"getTimeInfo");async function AN(){try{let{family:e,model:t,stepping:r,revision:n,voltage:s,speedmin:i,speedmax:o,governor:c,socket:l,cache:u,...f}=await en.cpu();f.cpu_speed=await en.cpuCurrentSpeed();let{raw_currentload:d,raw_currentload_idle:_,raw_currentload_irq:h,raw_currentload_nice:m,raw_currentload_system:S,raw_currentload_user:g,cpus:A,...E}=await en.currentLoad();return E.cpus=[],A.forEach(T=>{let{raw_load:N,raw_load_idle:M,raw_load_irq:H,raw_load_nice:Z,raw_load_system:W,raw_load_user:$,...se}=T;E.cpus.push(se)}),f.current_load=E,f}catch(e){return va.error(`error in getCPUInfo: ${e}`),{}}}a(AN,"getCPUInfo");async function RN(){try{let{buffers:e,cached:t,slab:r,buffcache:n,...s}=await en.mem();return Object.assign(s,process.memoryUsage())}catch(e){return va.error(`error in getMemoryInfo: ${e}`),{}}}a(RN,"getMemoryInfo");async function yN(){let e={core:[],clustering:[]};try{let t=await en.processes(),r;try{r=Number.parseInt(await Toe.readFile(Aoe.join(uh.get(sd.CONFIG_PARAMS.ROOTPATH),sd.HDB_PID_FILE),"utf8"))}catch(n){if(n.code===sd.NODE_ERROR_CODES.ENOENT)va.warn("Unable to locate 'hdb.pid' file, try stopping and starting HarperDB. This could be because HarperDB is not running.");else throw n}t.list.forEach(n=>{n.pid===r?e.core.push(n):n.name==="nats-server"&&e.clustering.push(n)});for(let n of e.core)for(let s of t.list)s.pid===n.parentPid&&(s.name==="PM2"||s.command==="PM2")&&(n.parent="PM2");return e}catch(t){return va.error(`error in getHDBProcessInfo: ${t}`),e}}a(yN,"getHDBProcessInfo");async function bN(){let e={};try{if(!uh.get(sd.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_DISK))return e;let{rIO_sec:t,wIO_sec:r,tIO_sec:n,ms:s,...i}=await en.disksIO();e.io=i;let{rx_sec:o,tx_sec:c,wx_sec:l,...u}=await en.fsStats();return e.read_write=u,e.size=await en.fsSize(),e}catch(t){return va.error(`error in getDiskInfo: ${t}`),e}}a(bN,"getDiskInfo");async function ON(){let e={default_interface:null,latency:{},interfaces:[],stats:[],connections:[]};try{return uh.get(sd.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_NETWORK)&&(e.default_interface=await en.networkInterfaceDefault(),e.latency=await en.inetChecksite("google.com"),(await en.networkInterfaces()).forEach(n=>{let{internal:s,virtual:i,mtu:o,dhcp:c,dnsSuffix:l,ieee8021xAuth:u,ieee8021xState:f,carrier_changes:d,..._}=n;e.interfaces.push(_)}),(await en.networkStats()).forEach(n=>{let{rx_sec:s,tx_sec:i,ms:o,...c}=n;e.stats.push(c)})),e}catch(t){return va.error(`error in getNetworkInfo: ${t}`),e}}a(ON,"getNetworkInfo");async function NN(){if(Hg!==void 0)return Hg;let e={};try{let{codepage:t,logofile:r,serial:n,build:s,servicepack:i,uefi:o,...c}=await en.osInfo();e=c;let l=await en.versions("node, npm");return e.node_version=l.node,e.npm_version=l.npm,Hg=e,Hg}catch(t){return va.error(`error in getSystemInformation: ${t}`),e}}a(NN,"getSystemInformation");async function wN(){let e=[],t=await yoe.describeAll();for(let r of Object.values(t))for(let n of Object.values(r))e.push(await Roe(n));return e}a(wN,"getTableSize");async function IN(){let e={};for(let t in SN){let r=e[t]={},n=r.tables={};for(let s in SN[t])try{let i=SN[t][s];if(!r.readers&&(Object.assign(r,i.primaryStore.rootStore.getStats()),delete r.root,r.readers=i.primaryStore.rootStore.readerList().split(/\n\s+/).slice(1).map(l=>{let[u,f,d]=l.trim().split(" ");return{pid:u,thread:f,txnid:d}}),i.auditStore)){let{treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:_}=i.auditStore.getStats();r.audit={treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:_}}let o=i.primaryStore.getStats(),c={};for(let l of["treeDepth","treeBranchPageCount","treeLeafPageCount","entryCount","overflowPages"])c[l]=o[l];n[s]=c}catch(i){va.notify(`Error getting stats for table ${s}: ${i}`)}}return e}a(IN,"getMetrics");async function lq(){if(uh.get(sd.CONFIG_PARAMS.CLUSTERING_ENABLED)){let{jsm:e}=await aq.getNATSReferences(),t=await aq.listStreams(),r=[];for(let n of t){let s=[],i=await e.consumers.list(n.config.name);for await(let c of i)s.push({name:c.name,created:c.created,num_ack_pending:c.num_ack_pending,num_redelivered:c.num_redelivered,num_waiting:c.num_waiting,num_pending:c.num_pending});let o={stream_name:n.config.name,database:n.config.subjects[0].split(".")[1],table:n.config.subjects[0].split(".")[2],state:n.state,consumers:s};r.push(o)}return r}}a(lq,"getNatsStreamInfo");async function Ooe(e){let t=new boe;if(!Array.isArray(e.attributes)||e.attributes.length===0)return t.system=await NN(),t.time=TN(),t.cpu=await AN(),t.memory=await RN(),t.disk=await bN(),t.network=await ON(),t.harperdb_processes=await yN(),t.table_size=await wN(),t.metrics=await IN(),t.threads=await cq(),t.replication=await lq(),t;for(let r=0;r<e.attributes.length;r++)switch(e.attributes[r]){case"system":t.system=await NN();break;case"time":t.time=TN();break;case"cpu":t.cpu=await AN();break;case"memory":t.memory=await RN();break;case"disk":t.disk=await bN();break;case"network":t.network=await ON();break;case"harperdb_processes":t.harperdb_processes=await yN();break;case"table_size":t.table_size=await wN();break;case"database_metrics":case"metrics":t.metrics=await IN();break;case"threads":t.threads=await cq();break;case"replication":t.replication=await lq();break;default:break}return t}a(Ooe,"systemInformation")});var Ts=C((TDe,hq)=>{"use strict";var Noe=Qr(),CN=ie(),woe=require("util"),_l=(k(),P(q)),dq=oe();dq.initSync();var Ioe=lO(),fq=Wr(),{Node:EDe,NodeSubscription:gDe}=Ma(),Coe=Ou(),Poe=ZF(),{RemotePayloadObject:Doe,RemotePayloadSubscription:Loe}=lh(),{handleHDBError:Moe,hdb_errors:voe}=he(),{HTTP_STATUS_CODES:Uoe,HDB_ERROR_MSGS:xoe}=voe,Boe=zs(),Hoe=id(),{packageJson:koe}=gt(),{getDatabases:Foe}=(xe(),P(ct)),SDe=woe.promisify(Ioe.authorize),qoe=fq.searchByHash,Goe=fq.searchByValue;hq.exports={isEmpty:$oe,getNodeRecord:Voe,upsertNodeRecord:Koe,buildNodePayloads:Yoe,checkClusteringEnabled:Woe,getAllNodeRecords:zoe,getSystemInfo:joe,reverseSubscription:_q};function $oe(e){return e==null}a($oe,"isEmpty");async function Voe(e){let t=new Coe(_l.SYSTEM_SCHEMA_NAME,_l.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e],["*"]);return qoe(t)}a(Voe,"getNodeRecord");async function Koe(e){let t=new Poe(_l.SYSTEM_SCHEMA_NAME,_l.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e]);return Noe.upsert(t)}a(Koe,"upsertNodeRecord");function _q(e){if(CN.isEmpty(e.subscribe)||CN.isEmpty(e.publish))throw new Error("Received invalid subscription object");let{schema:t,table:r,hash_attribute:n}=e,s={schema:t,table:r,hash_attribute:n};return e.subscribe===!0&&e.publish===!1?(s.subscribe=!1,s.publish=!0):e.subscribe===!1&&e.publish===!0?(s.subscribe=!0,s.publish=!1):(s.subscribe=e.subscribe,s.publish=e.publish),s}a(_q,"reverseSubscription");function Yoe(e,t,r,n){let s=[];for(let i=0,o=e.length;i<o;i++){let c=e[i],{schema:l,table:u}=c,f=CN.getTableHashAttribute(l,u),{subscribe:d,publish:_}=_q(c),h=Foe()[l]?.[u],m=new Loe(l,u,f,_,d,c.start_time,h.schemaDefined?h.attributes:void 0);s.push(m)}return new Doe(r,t,s,n)}a(Yoe,"buildNodePayloads");function Woe(){if(!dq.get(_l.CONFIG_PARAMS.CLUSTERING_ENABLED))throw Moe(new Error,xoe.CLUSTERING_NOT_ENABLED,Uoe.BAD_REQUEST,void 0,void 0,!0)}a(Woe,"checkClusteringEnabled");async function zoe(){let e=new Boe(_l.SYSTEM_SCHEMA_NAME,_l.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,"name","*",void 0,["*"]);return Array.from(await Goe(e))}a(zoe,"getAllNodeRecords");async function joe(){let e=await Hoe.getSystemInformation();return{hdb_version:koe.version,node_version:e.node_version,platform:e.platform}}a(joe,"getSystemInfo")});var PN=C((RDe,Rq)=>{"use strict";var kg=qt(),mq=ie(),pq=lt(),Eq=(k(),P(q)),Fg=X(),gq=rd(),Qoe=wu(),{RemotePayloadObject:Joe}=lh(),{handleHDBError:Sq,hdb_errors:Xoe}=he(),{HTTP_STATUS_CODES:Tq}=Xoe,{NodeSubscription:Aq}=Ma();Rq.exports=Zoe;async function Zoe(e,t){let r;try{r=await kg.request(`${t}.${pq.REQUEST_SUFFIX}`,new Joe(Eq.OPERATIONS_ENUM.DESCRIBE_ALL,t,void 0,void 0)),Fg.trace("Response from remote describe all request:",r)}catch(o){Fg.error(`addNode received error from describe all request to remote node: ${o}`);let c=kg.requestErrorHandler(o,"add_node",t);throw Sq(new Error,c,Tq.INTERNAL_SERVER_ERROR,"error",c)}if(r.status===pq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let o=`Error returned from remote node ${t}: ${r.message}`;throw Sq(new Error,o,Tq.INTERNAL_SERVER_ERROR,"error",o)}let n=r.message,s=[],i=[];for(let o of e){let{table:c}=o,l=o.database??o.schema??"data";if(l===Eq.SYSTEM_SCHEMA_NAME){await kg.createLocalTableStream(l,c);let m=new Aq(l,c,o.publish,o.subscribe);m.start_time=o.start_time,i.push(m);continue}let u=mq.doesSchemaExist(l),f=n[l]!==void 0,d=c?mq.doesTableExist(l,c):!0,_=c?n?.[l]?.[c]!==void 0:!0;if(!u&&!f||!d&&!_){s.push(o);continue}if(!u&&f&&(Fg.trace(`addNode creating schema: ${l}`),await gq.createSchema({operation:"create_schema",schema:l})),!d&&_){Fg.trace(`addNode creating table: ${c} in schema: ${l} with attributes ${JSON.stringify(n[l][c].attributes)}`);let m=new Qoe(l,c,n[l][c].hash_attribute);n[l][c].attributes&&(m.attributes=n[l][c].attributes),await gq.createTable(m)}await kg.createLocalTableStream(l,c);let h=new Aq(l,c,o.publish,o.subscribe);h.start_time=o.start_time,i.push(h)}return{added:i,skipped:s}}a(Zoe,"reviewSubscriptions")});var hl={};Ue(hl,{addNodeBack:()=>sae,removeNodeBack:()=>iae,setNode:()=>nae});async function nae(e){e.node_name&&!e.hostname&&(e.hostname=e.node_name),e.verify_tls!==void 0&&(e.rejectUnauthorized=e.verify_tls);let{url:t,hostname:r}=e;t?r||(r=e.hostname=Xs(t)):t=Cg(r);let n=(0,bq.validateBySchema)(e,rae);if(n)throw(0,Oo.handleHDBError)(n,n.message,tae.BAD_REQUEST,void 0,void 0,!0);if(e.operation==="remove_node"){if(!t&&!r)throw new Oo.ClientError("url or hostname is required for remove_node operation");let h=r,m=ir(),S=await m.get(h);if(!S)throw new Oo.ClientError(h+" does not exist");try{await oh({url:S.url},{operation:Wt.REMOVE_NODE_BACK,name:S?.subscriptions?.length>0?rt():h},void 0)}catch(g){Xn.warn(`Error removing node from target node ${h}, if it is offline and we be online in the future, you may need to clean up this node manually, or retry:`,g)}return await m.delete(h),`Successfully removed '${h}' from cluster`}if(!t)throw new Oo.ClientError("url required for this operation");let s=Ra();if(s==null)throw new Oo.ClientError("replication url is missing from harperdb-config.yaml");let i,o,c;if(t?.startsWith("wss:")){i=await(0,As.getReplicationCert)();let h=await(0,As.getReplicationCertAuth)();if(!i)throw new Error("Unable to find a certificate to use for replication");i.options.is_self_signed||e.force_signing?(o=await(0,As.createCsr)(),Xn.info("Sending CSR to target node:",t)):h&&(c=h.certificate,Xn.info("Sending CA named",h.name,"to target node",t))}let l={operation:Wt.ADD_NODE_BACK,hostname:(0,xa.get)(x.REPLICATION_HOSTNAME),target_hostname:r,url:s,csr:o,cert_auth:c,authorization:e.retain_authorization?e.authorization:null};if((0,xa.get)(x.REPLICATION_SHARD)!==void 0&&(l.shard=(0,xa.get)(x.REPLICATION_SHARD)),e.subscriptions?l.subscriptions=e.subscriptions.map(yq):l.subscriptions=null,e.hasOwnProperty("subscribe")||e.hasOwnProperty("publish")){let h=yq(e);l.subscribe=h.subscribe,l.publish=h.publish}e?.authorization?.username&&e?.authorization?.password&&(e.authorization="Basic "+Buffer.from(e.authorization.username+":"+e.authorization.password).toString("base64"));let u,f;try{u=await oh({url:t},l,e)}catch(h){h.message=`Error returned from ${t}: `+h.message,Xn.warn("Error adding node:",t,"to cluster:",h),f=h}if(o&&(!u?.certificate||!u?.certificate?.includes?.("BEGIN CERTIFICATE")))throw f?(f.message+=" and connection was required to sign certificate",f):new Error(`Unexpected certificate signature response from node ${t} response: ${JSON.stringify(u)}`);o&&(Xn.info("CSR response received from node:",t,"saving certificate and CA in hdb_certificate"),await(0,As.setCertTable)({name:eae.certificateFromPem(u.signingCA).issuer.getField("CN").value,certificate:u.signingCA,is_authority:!0}),u.certificate&&await(0,As.setCertTable)({name:rt()+"-replication",uses:["replication"],certificate:u.certificate,private_key_name:i?.options?.key_file,is_authority:!1,is_self_signed:!1}),c=u.signingCA);let d={url:t,ca:u?.usingCA};if(e.hostname&&(d.name=e.hostname),e.subscriptions?d.subscriptions=e.subscriptions:d.replicates=!0,e.start_time&&(d.start_time=typeof e.start_time=="string"?new Date(e.start_time).getTime():e.start_time),e.retain_authorization&&(d.authorization=e.authorization),e.revoked_certificates&&(d.revoked_certificates=e.revoked_certificates),u?.shard!==void 0?d.shard=u.shard:e.shard!==void 0&&(d.shard=e.shard),d.replicates){let h={url:s,ca:c,replicates:!0,subscriptions:null};(0,xa.get)(x.REPLICATION_SHARD)!==void 0&&(h.shard=(0,xa.get)(x.REPLICATION_SHARD)),e.retain_authorization&&(h.authorization=e.authorization),e.start_time&&(h.start_time=e.start_time),await To(rt(),h)}await To(u?u.nodeName:d.name??Xs(t),d);let _;return e.operation==="update_node"?_=`Successfully updated '${t}'`:_=`Successfully added '${t}' to cluster`,f&&(_+=" but there was an error updating target node: "+f.message),_}async function sae(e){Xn.trace("addNodeBack received request:",e);let t=await(0,As.signCertificate)(e),r;e.csr?(r=t.signingCA,Xn.info("addNodeBack received CSR from node:",e.url,"this node will use and respond with CA that was used to issue CSR")):(r=e?.cert_auth,Xn.info("addNodeBack received CA from node:",e.url));let n={url:e.url,ca:r};e.subscriptions?n.subscriptions=e.subscriptions:(n.replicates=!0,n.subscriptions=null),e.start_time&&(n.start_time=e.start_time),e.authorization&&(n.authorization=e.authorization),e.shard!==void 0&&(n.shard=e.shard);let s=await(0,As.getReplicationCertAuth)();if(n.replicates){let i={url:Ra(),ca:s?.certificate,replicates:!0,subscriptions:null};(0,xa.get)(x.REPLICATION_SHARD)!==void 0&&(i.shard=(0,xa.get)(x.REPLICATION_SHARD),t.shard=i.shard),e.start_time&&(i.start_time=e.start_time),e.authorization&&(i.authorization=e.authorization),await To(rt(),i)}return await To(e.hostname,n),t.nodeName=rt(),t.usingCA=s?.certificate,Xn.info("addNodeBack responding to:",e.url,"with CA named:",s?.name),t}async function iae(e){Xn.trace("removeNodeBack received request:",e),await ir().delete(e.name)}function yq(e){let{subscribe:t,publish:r}=e;return{...e,subscribe:r,publish:t}}var As,bq,Ua,xa,Xn,Oo,eae,tae,rae,ml=Re(()=>{As=v(ti()),bq=v(tt()),Ua=v(require("joi")),xa=v(oe());k();eh();sl();Es();Xn=v(X()),Oo=v(he()),{pki:eae}=require("node-forge"),{HTTP_STATUS_CODES:tae}=Oo.hdb_errors,rae=Ua.default.object({hostname:Ua.default.string(),verify_tls:Ua.default.boolean(),replicates:Ua.default.boolean(),subscriptions:Ua.default.array(),revoked_certificates:Ua.default.array(),shard:Ua.default.number()});a(nae,"setNode");a(sae,"addNodeBack");a(iae,"removeNodeBack");a(yq,"reverseSubscription")});var Kg=C((DDe,Nq)=>{"use strict";var{handleHDBError:qg,hdb_errors:oae}=he(),{HTTP_STATUS_CODES:Gg}=oae,{addUpdateNodeValidator:aae}=Bg(),$g=X(),Vg=(k(),P(q)),Oq=lt(),cae=ie(),dh=qt(),fh=Ts(),DN=oe(),lae=PN(),{Node:uae,NodeSubscription:dae}=Ma(),{broadcast:fae}=et(),{setNode:_ae}=(ml(),P(hl)),CDe=oe(),PDe=(k(),P(q)),hae="Unable to create subscriptions due to schema and/or tables not existing on the local or remote node",mae="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",pae=DN.get(Vg.CONFIG_PARAMS.CLUSTERING_NODENAME);Nq.exports=Eae;async function Eae(e,t=!1){if($g.trace("addNode called with:",e),DN.get(Vg.CONFIG_PARAMS.REPLICATION_URL)||DN.get(Vg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return _ae(e);fh.checkClusteringEnabled();let r=aae(e);if(r)throw qg(r,r.message,Gg.BAD_REQUEST,void 0,void 0,!0);let n=e.node_name;if(!t){let d=await fh.getNodeRecord(n);if(!cae.isEmptyOrZeroLength(d))throw qg(new Error,`Node '${n}' has already been added, perform update_node to proceed.`,Gg.BAD_REQUEST,void 0,void 0,!0)}let{added:s,skipped:i}=await lae(e.subscriptions,n),o={message:void 0,added:s,skipped:i};if(s.length===0)return o.message=hae,o;let c=fh.buildNodePayloads(s,pae,Vg.OPERATIONS_ENUM.ADD_NODE,await fh.getSystemInfo()),l=[];for(let d=0,_=s.length;d<_;d++){let h=s[d];s[d].start_time===void 0&&delete s[d].start_time,l.push(new dae(h.schema,h.table,h.publish,h.subscribe))}$g.trace("addNode sending remote payload:",c);let u;try{u=await dh.request(`${n}.${Oq.REQUEST_SUFFIX}`,c)}catch(d){$g.error(`addNode received error from request: ${d}`);for(let h=0,m=s.length;h<m;h++){let S=s[h];S.publish=!1,S.subscribe=!1,await dh.updateRemoteConsumer(S,n)}let _=dh.requestErrorHandler(d,"add_node",n);throw qg(new Error,_,Gg.INTERNAL_SERVER_ERROR,"error",_)}if(u.status===Oq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let d=`Error returned from remote node ${n}: ${u.message}`;throw qg(new Error,d,Gg.INTERNAL_SERVER_ERROR,"error",d)}$g.trace(u);for(let d=0,_=s.length;d<_;d++){let h=s[d];await dh.updateRemoteConsumer(h,n),h.subscribe===!0&&await dh.updateConsumerIterator(h.schema,h.table,n,"start")}let f=new uae(n,l,u.system_info);return await fh.upsertNodeRecord(f),fae({type:"nats_update"}),i.length>0?o.message=mae:o.message=`Successfully added '${n}' to manifest`,o}a(Eae,"addNode")});var UN=C((vDe,Iq)=>{"use strict";var{handleHDBError:LN,hdb_errors:gae}=he(),{HTTP_STATUS_CODES:MN}=gae,{addUpdateNodeValidator:Sae}=Bg(),_h=X(),Yg=(k(),P(q)),wq=lt(),MDe=ie(),hh=qt(),mh=Ts(),vN=oe(),{cloneDeep:Tae}=require("lodash"),Aae=PN(),{Node:Rae,NodeSubscription:yae}=Ma(),{broadcast:bae}=et(),{setNode:Oae}=(ml(),P(hl)),Nae="Unable to update subscriptions due to schema and/or tables not existing on the local or remote node",wae="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",Iae=vN.get(Yg.CONFIG_PARAMS.CLUSTERING_NODENAME);Iq.exports=Cae;async function Cae(e){if(_h.trace("updateNode called with:",e),vN.get(Yg.CONFIG_PARAMS.REPLICATION_URL)??vN.get(Yg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Oae(e);mh.checkClusteringEnabled();let t=Sae(e);if(t)throw LN(t,t.message,MN.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n,s=await mh.getNodeRecord(r);s.length>0&&(n=Tae(s));let{added:i,skipped:o}=await Aae(e.subscriptions,r),c={message:void 0,updated:i,skipped:o};if(i.length===0)return c.message=Nae,c;let l=mh.buildNodePayloads(i,Iae,Yg.OPERATIONS_ENUM.UPDATE_NODE,await mh.getSystemInfo());for(let f=0,d=i.length;f<d;f++){let _=i[f];_h.trace(`updateNode updating work stream for node: ${r} subscription:`,_),i[f].start_time===void 0&&delete i[f].start_time}_h.trace("updateNode sending remote payload:",l);let u;try{u=await hh.request(`${r}.${wq.REQUEST_SUFFIX}`,l)}catch(f){_h.error(`updateNode received error from request: ${f}`);let d=hh.requestErrorHandler(f,"update_node",r);throw LN(new Error,d,MN.INTERNAL_SERVER_ERROR,"error",d)}if(u.status===wq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let f=`Error returned from remote node ${r}: ${u.message}`;throw LN(new Error,f,MN.INTERNAL_SERVER_ERROR,"error",f)}_h.trace(u);for(let f=0,d=i.length;f<d;f++){let _=i[f];await hh.updateRemoteConsumer(_,r),_.subscribe===!0?await hh.updateConsumerIterator(_.schema,_.table,r,"start"):await hh.updateConsumerIterator(_.schema,_.table,r,"stop")}return n||(n=[new Rae(r,[],u.system_info)]),await Pae(n[0],i,u.system_info),o.length>0?c.message=wae:c.message=`Successfully updated '${r}'`,c}a(Cae,"updateNode");async function Pae(e,t,r){let n=e;for(let s=0,i=t.length;s<i;s++){let o=t[s],c=!1;for(let l=0,u=e.subscriptions.length;l<u;l++){let f=n.subscriptions[l];if(f.schema===o.schema&&f.table===o.table){f.publish=o.publish,f.subscribe=o.subscribe,c=!0;break}}c||n.subscriptions.push(new yae(o.schema,o.table,o.publish,o.subscribe))}n.system_info=r,await mh.upsertNodeRecord(n),bae({type:"nats_update"})}a(Pae,"updateNodeTable")});var Mq=C((xDe,Lq)=>{"use strict";var Dq=require("joi"),{string:Cq}=Dq.types(),Dae=tt(),Pq=(k(),P(q)),Lae=oe(),Mae=lt();Lq.exports=vae;function vae(e){let t=Cq.invalid(Lae.get(Pq.CONFIG_PARAMS.CLUSTERING_NODENAME)).pattern(Mae.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),r=Dq.object({operation:Cq.valid(Pq.OPERATIONS_ENUM.REMOVE_NODE).required(),node_name:t});return Dae.validateBySchema(e,r)}a(vae,"removeNodeValidator")});var Wg=C((HDe,Hq)=>{"use strict";var{handleHDBError:vq,hdb_errors:Uae}=he(),{HTTP_STATUS_CODES:Uq}=Uae,xae=Mq(),ph=X(),xq=Ts(),Bae=ie(),od=(k(),P(q)),Bq=lt(),xN=qt(),BN=oe(),{RemotePayloadObject:Hae}=lh(),{NodeSubscription:kae}=Ma(),Fae=Nu(),qae=_a(),{broadcast:Gae}=et(),{setNode:$ae}=(ml(),P(hl)),Vae=BN.get(od.CONFIG_PARAMS.CLUSTERING_NODENAME);Hq.exports=Kae;async function Kae(e){if(ph.trace("removeNode called with:",e),BN.get(od.CONFIG_PARAMS.REPLICATION_URL)??BN.get(od.CONFIG_PARAMS.REPLICATION_HOSTNAME))return $ae(e);xq.checkClusteringEnabled();let t=xae(e);if(t)throw vq(t,t.message,Uq.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n=await xq.getNodeRecord(r);if(Bae.isEmptyOrZeroLength(n))throw vq(new Error,`Node '${r}' was not found.`,Uq.BAD_REQUEST,void 0,void 0,!0);n=n[0];let s=new Hae(od.OPERATIONS_ENUM.REMOVE_NODE,Vae,[]),i,o=!1;for(let l=0,u=n.subscriptions.length;l<u;l++){let f=n.subscriptions[l];f.subscribe===!0&&await xN.updateConsumerIterator(f.schema,f.table,r,"stop");try{await xN.updateRemoteConsumer(new kae(f.schema,f.table,!1,!1),r)}catch(d){ph.error(d)}}try{i=await xN.request(`${r}.${Bq.REQUEST_SUFFIX}`,s),ph.trace("Remove node reply from remote node:",r,i)}catch(l){ph.error("removeNode received error from request:",l),o=!0}let c=new Fae(od.SYSTEM_SCHEMA_NAME,od.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[r]);return await qae.deleteRecord(c),Gae({type:"nats_update"}),i?.status===Bq.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR||o?(ph.error("Error returned from remote node:",r,i?.message),`Successfully removed '${r}' from local manifest, however there was an error reaching remote node. Check the logs for more details.`):`Successfully removed '${r}' from manifest`}a(Kae,"removeNode")});var qq=C((FDe,Fq)=>{"use strict";var kq=require("joi"),{string:Yae,array:Wae}=kq.types(),zae=tt(),jae=Bg();Fq.exports=Qae;function Qae(e){let t=kq.object({operation:Yae.valid("configure_cluster").required(),connections:Wae.items(jae.validation_schema).required()});return zae.validateBySchema(e,t)}a(Qae,"configureClusterValidator")});var HN=C((GDe,Yq)=>{"use strict";var Gq=(k(),P(q)),zg=X(),Jae=ie(),Xae=oe(),Zae=Wg(),ece=Kg(),tce=Ts(),rce=qq(),{handleHDBError:$q,hdb_errors:nce}=he(),{HTTP_STATUS_CODES:Vq}=nce,sce="Configure cluster complete.",ice="Failed to configure the cluster. Check the logs for more details.",oce="Configure cluster was partially successful. Errors occurred when attempting to configure the following nodes. Check the logs for more details.";Yq.exports=ace;async function ace(e){zg.trace("configure cluster called with:",e);let t=rce(e);if(t)throw $q(t,t.message,Vq.BAD_REQUEST,void 0,void 0,!0);let r=await tce.getAllNodeRecords(),n=[];if(Xae.get(Gq.CONFIG_PARAMS.CLUSTERING_ENABLED)){for(let f=0,d=r.length;f<d;f++){let _=await Kq(Zae,{operation:Gq.OPERATIONS_ENUM.REMOVE_NODE,node_name:r[f].name},r[f].name);n.push(_)}zg.trace("All results from configure_cluster remove node:",n)}let s=[],i=e.connections.length;for(let f=0;f<i;f++){let d=e.connections[f],_=await Kq(ece,d,d.node_name);s.push(_)}zg.trace("All results from configure_cluster add node:",s);let o=[],c=[],l=!1,u=n.concat(s);for(let f=0,d=u.length;f<d;f++){let _=u[f];_.status==="rejected"&&(zg.error(_.node_name,_?.error?.message,_?.error?.stack),o.includes(_.node_name)||o.push(_.node_name)),(_?.result?.message?.includes?.("Successfully")||_?.result?.includes?.("Successfully"))&&(l=!0),!(typeof _.result=="string"&&_.result.includes("Successfully removed")||_.status==="rejected")&&c.push({node_name:_?.node_name,response:_?.result})}if(Jae.isEmptyOrZeroLength(o))return{message:sce,connections:c};if(l)return{message:oce,failed_nodes:o,connections:c};throw $q(new Error,ice,Vq.INTERNAL_SERVER_ERROR,void 0,void 0,!0)}a(ace,"configureCluster");async function Kq(e,t,r){try{return{node_name:r,result:await e(t)}}catch(n){return{node_name:r,error:n,status:"rejected"}}}a(Kq,"functionWrapper")});var Qq=C((VDe,jq)=>{"use strict";var Eh=require("joi"),cce=tt(),{validateSchemaExists:Wq,validateTableExists:lce,validateSchemaName:zq}=Oi(),uce=Eh.object({operation:Eh.string().valid("purge_stream"),schema:Eh.string().custom(Wq).custom(zq).optional(),database:Eh.string().custom(Wq).custom(zq).optional(),table:Eh.string().custom(lce).required()});function dce(e){return cce.validateBySchema(e,uce)}a(dce,"purgeStreamValidator");jq.exports=dce});var kN=C((YDe,Jq)=>{"use strict";var{handleHDBError:fce,hdb_errors:_ce}=he(),{HTTP_STATUS_CODES:hce}=_ce,mce=Qq(),pce=qt(),Ece=Ts();Jq.exports=gce;async function gce(e){e.schema=e.schema??e.database;let t=mce(e);if(t)throw fce(t,t.message,hce.BAD_REQUEST,void 0,void 0,!0);Ece.checkClusteringEnabled();let{schema:r,table:n,options:s}=e;return await pce.purgeTableStream(r,n,s),`Successfully purged table '${r}.${n}'`}a(gce,"purgeStream")});var GN=C((zDe,sG)=>{"use strict";var qN=Ts(),Sce=qt(),Qg=oe(),ad=(k(),P(q)),pl=lt(),Tce=ie(),FN=X(),{RemotePayloadObject:Ace}=lh(),{ErrorCode:Xq}=require("nats"),{parentPort:Zq}=require("worker_threads"),{onMessageByType:Rce}=et(),{getThisNodeName:yce}=(Es(),P(wa)),{requestClusterStatus:bce}=(eh(),P(yk)),{getReplicationSharedStatus:Oce,getHDBNodeTable:Nce}=(sl(),P(DO)),{CONFIRMATION_STATUS_POSITION:wce,RECEIVED_VERSION_POSITION:Ice,RECEIVED_TIME_POSITION:Cce,SENDING_TIME_POSITION:Pce,RECEIVING_STATUS_POSITION:Dce,RECEIVING_STATUS_RECEIVING:Lce}=(eN(),P(fF)),eG=Qg.get(ad.CONFIG_PARAMS.CLUSTERING_ENABLED),tG=Qg.get(ad.CONFIG_PARAMS.CLUSTERING_NODENAME);sG.exports={clusterStatus:Mce,buildNodeStatus:nG};var rG;Rce("cluster-status",async e=>{rG(e)});async function Mce(){if(Qg.get(ad.CONFIG_PARAMS.REPLICATION_URL)||Qg.get(ad.CONFIG_PARAMS.REPLICATION_HOSTNAME)){let n;if(Zq){Zq.postMessage({type:"request-cluster-status"}),n=await new Promise(i=>{rG=i});for(let i of n.connections){let o=i.name;for(let c of i.database_sockets){let l=c.database,u;for(let d of Object.values(databases[l]||{}))if(u=d.auditStore,u)break;if(!u)continue;let f=Oce(u,l,o);c.lastCommitConfirmed=jg(f[wce]),c.lastReceivedRemoteTime=jg(f[Ice]),c.lastReceivedLocalTime=jg(f[Cce]),c.sendingMessage=jg(f[Pce]),c.lastReceivedStatus=f[Dce]===Lce?"Receiving":"Waiting"}}}else n=bce();n.node_name=yce();let s=Nce().primaryStore.get(n.node_name);return s?.shard&&(n.shard=s.shard),s?.url&&(n.url=s.url),n.is_enabled=!0,n}let e={node_name:tG,is_enabled:eG,connections:[]};if(!eG)return e;let t=await qN.getAllNodeRecords();if(Tce.isEmptyOrZeroLength(t))return e;let r=[];for(let n=0,s=t.length;n<s;n++)r.push(nG(t[n],e.connections));return await Promise.allSettled(r),e}a(Mce,"clusterStatus");function jg(e){return e?e===1?"Copying":new Date(e).toUTCString():void 0}a(jg,"asDate");async function nG(e,t){let r=e.name,n=new Ace(ad.OPERATIONS_ENUM.CLUSTER_STATUS,tG,void 0,await qN.getSystemInfo()),s,i,o=pl.CLUSTER_STATUS_STATUSES.OPEN;try{let l=Date.now();s=await Sce.request(pl.REQUEST_SUBJECT(r),n),i=Date.now()-l,s.status===pl.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR&&(o=pl.CLUSTER_STATUS_STATUSES.CLOSED,FN.error(`Error getting node status from ${r} `,s))}catch(l){FN.warn(`Error getting node status from ${r}`,l),l.code===Xq.NoResponders?o=pl.CLUSTER_STATUS_STATUSES.NO_RESPONDERS:l.code===Xq.Timeout?o=pl.CLUSTER_STATUS_STATUSES.TIMEOUT:o=pl.CLUSTER_STATUS_STATUSES.CLOSED}let c=new vce(r,o,s?.message?.ports?.clustering,s?.message?.ports?.operations_api,i,s?.message?.uptime,e.subscriptions,s?.message?.system_info);try{let l={name:r,system_info:s?.message?.system_info};e.system_info?.hdb_version!==ad.PRE_4_0_0_VERSION&&await qN.upsertNodeRecord(l)}catch(l){FN.error("Cluster status encountered an error updating system info for node:",r,l)}t.push(c)}a(nG,"buildNodeStatus");function vce(e,t,r,n,s,i,o,c){this.node_name=e,this.status=t,this.ports={clustering:r,operations_api:n},this.latency_ms=s,this.uptime=i,this.subscriptions=o,this.system_info=c}a(vce,"NodeStatusObject")});var VN=C((QDe,iG)=>{"use strict";var{handleHDBError:Uce,hdb_errors:xce}=he(),{HTTP_STATUS_CODES:Bce}=xce,Hce=qt(),kce=Ts(),$N=ie(),Jg=require("joi"),Fce=tt(),qce=2e3,Gce=Jg.object({timeout:Jg.number().min(1),connected_nodes:Jg.boolean(),routes:Jg.boolean()});iG.exports=$ce;async function $ce(e){kce.checkClusteringEnabled();let t=Fce.validateBySchema(e,Gce);if(t)throw Uce(t,t.message,Bce.BAD_REQUEST,void 0,void 0,!0);let{timeout:r,connected_nodes:n,routes:s}=e,i=n===void 0||$N.autoCastBoolean(n),o=s===void 0||$N.autoCastBoolean(s),c={nodes:[]},l=await Hce.getServerList(r??qce),u={};if(i)for(let f=0,d=l.length;f<d;f++){let _=l[f].statsz;_&&(u[l[f].server.name]=_.routes)}for(let f=0,d=l.length;f<d;f++){if(l[f].statsz)continue;let _=l[f].server,h=l[f].data;if(_.name.endsWith("-hub")){let m={name:_.name.slice(0,-4),response_time:l[f].response_time};i&&(m.connected_nodes=[],u[_.name]&&u[_.name].forEach(S=>{m.connected_nodes.includes(S.name.slice(0,-4))||m.connected_nodes.push(S.name.slice(0,-4))})),o&&(m.routes=h.cluster?.urls?h.cluster?.urls.map(S=>({host:S.split(":")[0],port:$N.autoCast(S.split(":")[1])})):[]),c.nodes.push(m)}}return c}a($ce,"clusterNetwork")});var lG=C((XDe,cG)=>{"use strict";var KN=require("joi"),oG=tt(),{route_constraints:aG}=Ny();cG.exports={setRoutesValidator:Vce,deleteRoutesValidator:Kce};function Vce(e){let t=KN.object({server:KN.valid("hub","leaf"),routes:aG.required()});return oG.validateBySchema(e,t)}a(Vce,"setRoutesValidator");function Kce(e){let t=KN.object({routes:aG.required()});return oG.validateBySchema(e,t)}a(Kce,"deleteRoutesValidator")});var Xg=C((eLe,pG)=>{"use strict";var No=Lt(),YN=ie(),Rs=(k(),P(q)),cd=oe(),uG=lG(),{handleHDBError:dG,hdb_errors:Yce}=he(),{HTTP_STATUS_CODES:fG}=Yce,_G="cluster routes successfully set",hG="cluster routes successfully deleted";pG.exports={setRoutes:zce,getRoutes:jce,deleteRoutes:Qce};function Wce(e){let t=No.getClusteringRoutes(),r=e.server==="hub"?t.hub_routes:t.leaf_routes,n=e.server==="hub"?t.leaf_routes:t.hub_routes,s=[],i=[];for(let o=0,c=e.routes.length;o<c;o++){let l=e.routes[o];l.port=YN.autoCast(l.port);let u=r.some(d=>d.host===l.host&&d.port===l.port),f=n.some(d=>d.host===l.host&&d.port===l.port);u||f?s.push(l):(r.push(l),i.push(l))}return e.server==="hub"?No.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r):No.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,r),{message:_G,set:i,skipped:s}}a(Wce,"setRoutesNats");function zce(e){let t=uG.setRoutesValidator(e);if(t)throw dG(t,t.message,fG.BAD_REQUEST,void 0,void 0,!0);if(cd.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return Wce(e);let r=[],n=[],s=cd.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[];return e.routes.forEach(i=>{mG(s,i)?n.push(i):(s.push(i),r.push(i))}),No.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,s),{message:_G,set:r,skipped:n}}a(zce,"setRoutes");function mG(e,t){return typeof t=="string"?e.includes(t):typeof t=="object"&&t!==null?e.some(r=>(r.host===t.host||r.hostname===t.hostname)&&r.port===t.port):!1}a(mG,"existsInArray");function jce(){if(cd.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED)){let e=No.getClusteringRoutes();return{hub:e.hub_routes,leaf:e.leaf_routes}}else return cd.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[]}a(jce,"getRoutes");function Qce(e){let t=uG.deleteRoutesValidator(e);if(t)throw dG(t,t.message,fG.BAD_REQUEST,void 0,void 0,!0);if(cd.get(Rs.CONFIG_PARAMS.CLUSTERING_ENABLED))return Jce(e);let r=[],n=[],s=cd.get(Rs.CONFIG_PARAMS.REPLICATION_ROUTES)??[],i=[];return s.forEach(o=>{mG(e.routes,o)?r.push(o):(i.push(o),n.push(o))}),No.updateConfigValue(Rs.CONFIG_PARAMS.REPLICATION_ROUTES,i),{message:hG,deleted:r,skipped:n}}a(Qce,"deleteRoutes");function Jce(e){let t=No.getClusteringRoutes(),r=t.hub_routes,n=t.leaf_routes,s=[],i=[],o=!1,c=!1;for(let l=0,u=e.routes.length;l<u;l++){let f=e.routes[l],d=!1;for(let _=0,h=r.length;_<h;_++){let m=r[_];if(f.host===m.host&&f.port===m.port){r.splice(_,1),d=!0,o=!0,s.push(f);break}}if(!d){let _=!0;for(let h=0,m=n.length;h<m;h++){let S=n[h];if(f.host===S.host&&f.port===S.port){n.splice(h,1),c=!0,_=!1,s.push(f);break}}_&&i.push(f)}}return o&&(r=YN.isEmptyOrZeroLength(r)?null:r,No.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r)),c&&(n=YN.isEmptyOrZeroLength(n)?null:n,No.updateConfigValue(Rs.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,n)),{message:hG,deleted:s,skipped:i}}a(Jce,"deleteRoutesNats")});var gG=C((rLe,EG)=>{"use strict";var gh=require("alasql"),El=require("recursive-iterator"),ri=X(),Xce=ie(),Sh=(k(),P(q)),WN=class{static{a(this,"sql_statement_bucket")}constructor(t){this.ast=t,this.affected_attributes=new Map,this.table_lookup=new Map,this.schema_lookup=new Map,this.table_to_schema_lookup=new Map,ele(this.ast,this.affected_attributes,this.table_lookup,this.schema_lookup,this.table_to_schema_lookup)}getAttributesBySchemaTableName(t,r){if(!t||!r||!this.affected_attributes)return[];if(this.affected_attributes.has(t))return!this.affected_attributes.get(t).has(r)&&(r=this.table_lookup.get(r),!r)?[]:this.affected_attributes.get(t).get(r)}getAllTables(){let t=[];if(!this.affected_attributes)return t;for(let r of this.affected_attributes.keys())t.push(Array.from(this.affected_attributes.get(r).keys()));return t}getTablesBySchemaName(t){return!t||!this.affected_attributes?[]:Array.from(this.affected_attributes.get(t).keys())}getSchemas(){return this.affected_attributes?Array.from(this.affected_attributes.keys()):[]}getAst(){return this.ast}updateAttributeWildcardsForRolePerms(t){let r=this.ast.columns.filter(s=>Sh.SEARCH_WILDCARDS.includes(s.columnid));if(r.length===0)return this.ast;let n=this.ast.from[0].databaseid;return this.ast.columns=this.ast.columns.filter(s=>!Sh.SEARCH_WILDCARDS.includes(s.columnid)),r.forEach(s=>{let i=this.table_to_schema_lookup.has(s.tableid)?this.table_to_schema_lookup.get(s.tableid):n,o=this.table_lookup.has(s.tableid)?this.table_lookup.get(s.tableid):this.ast.from[0].tableid;if(t[i]&&t[i].tables[o]&&t[i].tables[o][Sh.PERMS_CRUD_ENUM.READ]){let c;t[i].tables[o].attribute_permissions.length>0?c=Zce(t[i].tables[o].attribute_permissions):c=global.hdb_schema[i][o].attributes.map(u=>({attribute_name:u.attribute}));let l=this.affected_attributes.get(i).get(o).filter(u=>!Sh.SEARCH_WILDCARDS.includes(u));c.forEach(({attribute_name:u})=>{let f=new gh.yy.Column({columnid:u});s.tableid&&(f.tableid=s.tableid),this.ast.columns.push(f),l.includes(u)||l.push(u)}),this.affected_attributes.get(i).set(o,l)}}),this.ast}};function Zce(e){return e.filter(t=>t[Sh.PERMS_CRUD_ENUM.READ])}a(Zce,"filterReadRestrictedAttrs");function ele(e,t,r,n,s){tle(e,t,r,n,s)}a(ele,"interpretAST");function Th(e,t,r,n,s){if(!(!e||!e.databaseid)&&(t.has(e.databaseid)||t.set(e.databaseid,new Map),t.get(e.databaseid).has(e.tableid)||t.get(e.databaseid).set(e.tableid,[]),e.as&&(r.has(e.as)||r.set(e.as,e.tableid),n&&!n.has(e.as)&&n.set(e.as,e.databaseid)),s)){let i=e.databaseid,o=e.tableid;e.as&&(o=e.as),s.set(o,i)}}a(Th,"addSchemaTableToMap");function tle(e,t,r,n,s){if(!e){ri.info("getRecordAttributesAST: invalid SQL syntax tree");return}e instanceof gh.yy.Insert?ile(e,t,r):e instanceof gh.yy.Select?rle(e,t,r,n,s):e instanceof gh.yy.Update?nle(e,t,r):e instanceof gh.yy.Delete?sle(e,t,r):ri.error("AST in getRecordAttributesAST() is not a valid SQL type.")}a(tle,"getRecordAttributesAST");function rle(e,t,r,n,s){if(!e){ri.info("getSelectAttributes: invalid SQL syntax tree");return}if(!e.from||e.from[0]===void 0)return;let i=e.from[0].databaseid;if(Xce.isEmptyOrZeroLength(i)){ri.error("No schema specified");return}e.from.forEach(c=>{Th(c,t,r,n,s)}),e.joins&&e.joins.forEach(c=>{c.as&&(c.table.as=c.as),Th(c.table,t,r,n,s)});let o=new El(e.columns);for(let{node:c}of o)if(c&&c.columnid){let l=c.tableid,u=n.has(l)?n.get(l):i;if(l||(l=e.from[0].tableid),!t.get(u).has(l))if(r.has(l))l=r.get(l);else{ri.info(`table specified as ${l} not found.`);return}t.get(u).get(l).indexOf(c.columnid)<0&&t.get(u).get(l).push(c.columnid)}if(e.where){let c=new El(e.where),l=e.from[0].tableid;for(let{node:u}of c)if(u&&u.columnid){let f=u.tableid?u.tableid:l;if(!t.get(i).has(f))if(r.has(f))f=r.get(f);else{ri.info(`table specified as ${f} not found.`);continue}t.get(i).get(f).indexOf(u.columnid)<0&&t.get(i).get(f).push(u.columnid)}}if(e.joins&&e.joins.forEach(c=>{let l=new El(c.on);for(let{node:u}of l)if(u&&u.columnid){let f=u.tableid,d=s.get(f);if(!t.get(d).has(f))if(r.has(f))f=r.get(f);else{ri.info(`table specified as ${f} not found.`);continue}t.get(d).get(f).indexOf(u.columnid)<0&&t.get(d).get(f).push(u.columnid)}}),e.order){let c=new El(e.order);for(let{node:l}of c)if(l&&l.columnid){let u=l.tableid,f=n.has(u)?n.get(u):i;if(u||(u=e.from[0].tableid),!t.get(f).has(u))if(r.has(u))u=r.get(u);else{ri.info(`table specified as ${u} not found.`);return}t.get(f).get(u).indexOf(l.columnid)<0&&t.get(f).get(u).push(l.columnid)}}}a(rle,"getSelectAttributes");function nle(e,t,r){if(!e){ri.info("getUpdateAttributes: invalid SQL syntax tree");return}let n=new El(e.columns),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&zN(e.table.tableid,s,i.columnid,t,r)}a(nle,"getUpdateAttributes");function sle(e,t,r){if(!e){ri.info("getDeleteAttributes: invalid SQL syntax tree");return}let n=new El(e.where),s=e.table.databaseid;Th(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&zN(e.table.tableid,s,i.columnid,t,r)}a(sle,"getDeleteAttributes");function ile(e,t,r){if(!e){ri.info("getInsertAttributes: invalid SQL syntax tree");return}let n=new El(e.columns),s=e.into.databaseid;Th(e.into,t,r);for(let{node:i}of n)i&&i.columnid&&zN(e.into.tableid,s,i.columnid,t,r)}a(ile,"getInsertAttributes");function zN(e,t,r,n,s){if(!n.get(t))return;let i=e;n.get(t).has(i)||(i=s.get(i)),n.get(t).get(i).push(r)}a(zN,"pushAttribute");EG.exports=WN});var TG=C((sLe,SG)=>{"use strict";var Zg=(k(),P(q)),eS=class{static{a(this,"BaseLicense")}constructor(t=0,r=Zg.RAM_ALLOCATION_ENUM.DEFAULT,n=Zg.LICENSE_VALUES.VERSION_DEFAULT,s){this.exp_date=t,this.ram_allocation=r,this.version=n,this.fingerprint=s}},jN=class extends eS{static{a(this,"ExtendedLicense")}constructor(t=0,r=Zg.RAM_ALLOCATION_ENUM.DEFAULT,n=Zg.LICENSE_VALUES.VERSION_DEFAULT,s,i=!1){super(t,r,n,s),this.enterprise=i}};SG.exports={BaseLicense:eS,ExtendedLicense:jN}});var dd=C((oLe,NG)=>{"use strict";var ud=require("fs-extra"),tS=(jp(),P(zp)),RG=require("crypto"),ole=require("moment"),ale=require("uuid").v4,tn=X(),JN=require("path"),cle=ie(),gl=(k(),P(q)),{totalmem:AG}=require("os"),lle=TG().ExtendedLicense,ld="invalid license key format",ule="061183",dle="mofi25",fle="aes-256-cbc",_le=16,hle=32,yG=oe(),{resolvePath:bG}=Lt();yG.initSync();var QN;NG.exports={validateLicense:OG,generateFingerPrint:ple,licenseSearch:ew,getLicense:Sle,checkMemoryLimit:Tle};function XN(){return JN.join(yG.getHdbBasePath(),gl.LICENSE_KEY_DIR_NAME,gl.LICENSE_FILE_NAME)}a(XN,"getLicenseDirPath");function mle(){let e=XN();return bG(JN.join(e,gl.LICENSE_FILE_NAME))}a(mle,"getLicenseFilePath");function ZN(){let e=XN();return bG(JN.join(e,gl.REG_KEY_FILE_NAME))}a(ZN,"getFingerPrintFilePath");async function ple(){let e=ZN();try{return await ud.readFile(e,"utf8")}catch(t){if(t.code==="ENOENT")return await Ele();throw tn.error(`Error writing fingerprint file to ${e}`),tn.error(t),new Error("There was an error generating the fingerprint")}}a(ple,"generateFingerPrint");async function Ele(){let e=ale(),t=tS.hash(e,tS.HASH_FUNCTION.MD5),r=ZN();try{await ud.mkdirp(XN()),await ud.writeFile(r,t)}catch(n){if(n.code==="EEXIST")return t;throw tn.error(`Error writing fingerprint file to ${r}`),tn.error(n),new Error("There was an error generating the fingerprint")}return t}a(Ele,"writeFingerprint");function OG(e,t){let r={valid_license:!1,valid_date:!1,valid_machine:!1,exp_date:null,ram_allocation:gl.RAM_ALLOCATION_ENUM.DEFAULT,version:gl.LICENSE_VALUES.VERSION_DEFAULT};if(!e)return tn.error("empty license key passed to validate."),r;let n=ZN(),s=!1;try{s=ud.statSync(n)}catch(i){tn.error(i)}if(s){let i;try{i=ud.readFileSync(n,"utf8")}catch{tn.error("error validating this machine in the license"),r.valid_machine=!1;return}let o=e.split(dle),c=o[1];c=Buffer.concat([Buffer.from(c)],_le);let l=Buffer.concat([Buffer.from(i)],hle),u=RG.createDecipheriv(fle,l,c);r.valid_date=!0,r.valid_license=!0,r.valid_machine=!0;let f=null;try{f=u.update(o[0],"hex","utf8"),f.trim(),f+=u.final("utf8")}catch{let h=gle(o[0],i);if(h)f=h;else throw r.valid_license=!1,r.valid_machine=!1,console.error(ld),tn.error(ld),new Error(ld)}let d;if(isNaN(f))try{d=JSON.parse(f),r.version=d.version,r.exp_date=d.exp_date,isNaN(r.exp_date)&&(r.exp_date=new Date(r.exp_date).getTime()),d.ram_allocation&&(r.ram_allocation=d.ram_allocation)}catch{throw console.error(ld),tn.error(ld),new Error(ld)}else r.exp_date=f;r.exp_date<ole().valueOf()&&(r.valid_date=!1),tS.validate(o[1],`${ule}${i}${t}`,tS.HASH_FUNCTION.MD5)||(r.valid_license=!1)}else r.valid_license=!1,r.valid_machine=!1;return r.valid_license&&r.valid_machine&&r.valid_date||tn.error("Invalid licence"),r}a(OG,"validateLicense");function gle(e,t){try{let r=RG.createDecipher("aes192",t),n=r.update(e,"hex","utf8");return n.trim(),n+=r.final("utf8"),n}catch{tn.warn("Check old license failed")}}a(gle,"checkOldLicense");function ew(){let e=new lle,t=[];try{t=ud.readFileSync(mle(),"utf-8").split(`\r
 `)}catch(r){r.code==="ENOENT"?tn.debug("no license file found"):tn.error(`could not search for licenses due to: '${r.message}`)}for(let r=0;r<t.length;++r){let n=t[r];try{if(cle.isEmptyOrZeroLength(n))continue;let s=JSON.parse(n),i=OG(s.license_key,s.company);i.valid_machine===!0&&i.valid_date===!0&&i.valid_machine===!0&&(e.exp_date=i.exp_date>e.exp_date?i.exp_date:e.exp_date,e.ram_allocation=i.ram_allocation,e.enterprise=!0)}catch(s){tn.error("There was an error parsing the license string."),tn.error(s),e.ram_allocation=gl.RAM_ALLOCATION_ENUM.DEFAULT,e.enterprise=!1}}return QN=e,e}a(ew,"licenseSearch");async function Sle(){return QN||await ew(),QN}a(Sle,"getLicense");function Tle(){let e=ew().ram_allocation,t=process.constrainedMemory?.()||AG();if(t=Math.round(Math.min(t,AG())/2**20),t>e)return`This server has more memory (${t}MB) than HarperDB is licensed for (${e}MB), this should only be used for educational and development purposes.`}a(Tle,"checkMemoryLimit")});var nw=C((cLe,PG)=>{var rS=dd(),wG=require("chalk"),Zn=X(),IG=require("prompt"),{promisify:Ale}=require("util"),tw=(k(),P(q)),Rle=require("fs-extra"),yle=require("path"),ble=ie(),{packageJson:Ole}=gt(),CG=oe();CG.initSync();var Nle=require("moment"),wle=Ale(IG.get),Ile=yle.join(CG.getHdbBasePath(),tw.LICENSE_KEY_DIR_NAME,tw.LICENSE_FILE_NAME,tw.LICENSE_FILE_NAME);PG.exports={getFingerprint:Ple,setLicense:Cle,parseLicense:rw,register:Dle,getRegistrationInfo:Mle};async function Cle(e){if(e&&e.key&&e.company){try{Zn.info(`parsing license key: ${e.key} and `);let t=e.company.toString();await rw(e.key.trim(),t.trim())}catch(t){let r="There was an error parsing the license key.";throw Zn.error(r),Zn.error(t),new Error(r)}return"Wrote license key file.  Registration successful."}throw new Error("Invalid key or company specified for license file.")}a(Cle,"setLicense");async function Ple(){let e={};try{e=await rS.generateFingerPrint()}catch(t){let r="Error generating fingerprint.";throw Zn.error(r),Zn.error(t),new Error(r)}return e}a(Ple,"getFingerprint");async function rw(e,t){if(!e||!t)throw new Error("Invalid entries for License Key and Customer Company");Zn.info("Validating license input...");let r=rS.validateLicense(e,t);if(Zn.info("checking for valid license..."),!r.valid_license)throw new Error("Invalid license found.");if(Zn.info("checking valid license date..."),!r.valid_date)throw new Error("This License has expired.");if(Zn.info(`checking for valid machine license ${r.valid_machine}`),!r.valid_machine)throw new Error("This license is in use on another machine.");try{Zn.info("writing license to disk"),await Rle.writeFile(Ile,JSON.stringify({license_key:e,company:t}))}catch(n){throw Zn.error("Failed to write License"),n}return"Registration successful."}a(rw,"parseLicense");async function Dle(){let e=await Lle();return rw(e.HDB_LICENSE,e.CUSTOMER_COMPANY)}a(Dle,"register");async function Lle(){let e=await rS.generateFingerPrint(),t={properties:{CUSTOMER_COMPANY:{description:wG.magenta("[COMPANY] Please enter your company name"),required:!0},HDB_LICENSE:{description:wG.magenta(`[HDB_LICENSE] Your fingerprint is ${e} Please enter your license key`),required:!0}}};try{IG.start()}catch(n){Zn.error(n)}let r;try{r=await wle(t)}catch(n){throw console.error("There was a problem prompting for registration input.  Exiting."),n}return r}a(Lle,"promptForRegistration");async function Mle(){let e={registered:!1,version:null,ram_allocation:null,license_expiration_date:null},t;try{t=await rS.getLicense()}catch(r){throw Zn.error(`There was an error when searching licenses due to: ${r.message}`),r}if(ble.isEmptyOrZeroLength(t))throw new Error("There were no licenses found.");if(e.registered=t.enterprise,e.version=Ole.version,e.ram_allocation=t.ram_allocation,isNaN(t.exp_date))e.license_expiration_date=t.enterprise?t.exp_date:null;else{let r=Nle.utc(t.exp_date).format("YYYY-MM-DD");e.license_expiration_date=t.enterprise?r:null}return e}a(Mle,"getRegistrationInfo")});var LG=C((uLe,DG)=>{"use strict";var vle=lt(),sw=class{static{a(this,"HubConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d,_,h,m){this.port=t,o===null&&(o=void 0),this.server_name=r+vle.SERVER_SUFFIX.HUB,this.pid_file=n,this.max_payload=67108864,this.reconnect_error_reports=100,this.jetstream={enabled:!1},this.tls={cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l},this.leafnodes={port:u,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c}},this.cluster={name:f,port:d,routes:_,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l}},this.accounts={SYS:{users:h},HDB:{users:m}},this.system_account="SYS"}};DG.exports=sw});var UG=C((fLe,vG)=>{"use strict";var MG=lt(),iw=class{static{a(this,"LeafConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d){this.port=t,d===null&&(d=void 0),this.server_name=r+MG.SERVER_SUFFIX.LEAF,this.pid_file=n,this.max_payload=67108864,this.jetstream={enabled:!0,store_dir:s,domain:r+MG.SERVER_SUFFIX.LEAF},this.tls={cert_file:u,key_file:f,ca_file:d,insecure:!0},this.leafnodes={remotes:[{tls:{ca_file:d,insecure:!0},urls:i,account:"SYS"},{tls:{ca_file:d,insecure:!0},urls:o,account:"HDB"}]},this.accounts={SYS:{users:c},HDB:{users:l,jetstream:"enabled"}},this.system_account="SYS"}};vG.exports=iw});var BG=C((hLe,xG)=>{"use strict";var ow=class{static{a(this,"HdbUserObject")}constructor(t,r){this.user=t,this.password=r}};xG.exports=ow});var kG=C((pLe,HG)=>{"use strict";var Ule=lt(),aw=class{static{a(this,"SysUserObject")}constructor(t,r){this.user=t+Ule.SERVER_SUFFIX.ADMIN,this.password=r}};HG.exports=aw});var oS=C((gLe,GG)=>{"use strict";var Sl=require("path"),Tl=require("fs-extra"),xle=LG(),Ble=UG(),Hle=BG(),kle=kG(),cw=Kn(),_d=ie(),On=Lt(),sS=(k(),P(q)),Ah=lt(),{CONFIG_PARAMS:Jt}=sS,hd=X(),Rh=oe(),FG=ho(),lw=qt(),Fle=ti(),fd="clustering",qle=1e4,qG=50;GG.exports={generateNatsConfig:$le,removeNatsConfig:Vle,getHubConfigPath:Gle};function Gle(){let e=Rh.get(Jt.ROOTPATH);return Sl.join(e,fd,Ah.NATS_CONFIG_FILES.HUB_SERVER)}a(Gle,"getHubConfigPath");async function $le(e=!1,t=void 0){let r=Rh.get(Jt.ROOTPATH);Tl.ensureDirSync(Sl.join(r,"clustering","leaf")),Rh.initSync();let n=On.getConfigFromFile(Jt.CLUSTERING_TLS_CERT_AUTH),s=On.getConfigFromFile(Jt.CLUSTERING_TLS_PRIVATEKEY),i=On.getConfigFromFile(Jt.CLUSTERING_TLS_CERTIFICATE);!await Tl.exists(i)&&!await Tl.exists(!n)&&await Fle.createNatsCerts();let o=Sl.join(r,fd,Ah.PID_FILES.HUB),c=Sl.join(r,fd,Ah.PID_FILES.LEAF),l=On.getConfigFromFile(Jt.CLUSTERING_LEAFSERVER_STREAMS_PATH),u=Sl.join(r,fd,Ah.NATS_CONFIG_FILES.HUB_SERVER),f=Sl.join(r,fd,Ah.NATS_CONFIG_FILES.LEAF_SERVER),d=On.getConfigFromFile(Jt.CLUSTERING_TLS_INSECURE),_=On.getConfigFromFile(Jt.CLUSTERING_TLS_VERIFY),h=On.getConfigFromFile(Jt.CLUSTERING_NODENAME),m=On.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT);await lw.checkNATSServerInstalled()||iS("nats-server dependency is either missing or the wrong version. Run 'npm install' to fix");let S=await cw.listUsers(),g=On.getConfigFromFile(Jt.CLUSTERING_USER),A=await cw.getClusterUser();(_d.isEmpty(A)||A.active!==!0)&&iS(`Invalid cluster user '${g}'. A valid user with the role 'cluster_user' must be defined under clustering.user in harperdb-config.yaml`),e||(await nS(Jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),await nS(Jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT),await nS(Jt.CLUSTERING_HUBSERVER_NETWORK_PORT),await nS(Jt.CLUSTERING_LEAFSERVER_NETWORK_PORT));let E=[],T=[];for(let[se,z]of S.entries())z.role?.role===sS.ROLE_TYPES_ENUM.CLUSTER_USER&&z.active&&(E.push(new kle(z.username,FG.decrypt(z.hash))),T.push(new Hle(z.username,FG.decrypt(z.hash))));let N=[],{hub_routes:M}=On.getClusteringRoutes();if(!_d.isEmptyOrZeroLength(M))for(let se of M)N.push(`tls://${A.sys_name_encoded}:${A.uri_encoded_d_hash}@${se.host}:${se.port}`);let H=new xle(On.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_NETWORK_PORT),h,o,i,s,n,d,_,m,On.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_CLUSTER_NAME),On.getConfigFromFile(Jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),N,E,T);n==null&&(delete H.tls.ca_file,delete H.leafnodes.tls.ca_file),t=_d.isEmpty(t)?void 0:t.toLowerCase(),(t===void 0||t===sS.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())&&(await Tl.writeJson(u,H),hd.trace(`Hub server config written to ${u}`));let Z=`tls://${A.sys_name_encoded}:${A.uri_encoded_d_hash}@0.0.0.0:${m}`,W=`tls://${A.uri_encoded_name}:${A.uri_encoded_d_hash}@0.0.0.0:${m}`,$=new Ble(On.getConfigFromFile(Jt.CLUSTERING_LEAFSERVER_NETWORK_PORT),h,c,l,[Z],[W],E,T,i,s,n,d);n==null&&delete $.tls.ca_file,(t===void 0||t===sS.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())&&(await Tl.writeJson(f,$),hd.trace(`Leaf server config written to ${f}`))}a($le,"generateNatsConfig");async function nS(e){let t=Rh.get(e);return _d.isEmpty(t)&&iS(`port undefined for '${e}'`),await _d.isPortTaken(t)&&iS(`'${e}' port '${t}' is is in use by another process, check to see if HarperDB is already running or another process is using this port.`),!0}a(nS,"isPortAvailable");function iS(e){let t=`Error generating clustering config: ${e}`;hd.error(t),console.error(t),process.exit(1)}a(iS,"generateNatsConfigError");async function Vle(e){let{port:t,config_file:r}=lw.getServerConfig(e),{username:n,decrypt_hash:s}=await cw.getClusterUser(),i=0,o=2e3;for(;i<qG;){try{let f=await lw.createConnection(t,n,s,!1);if(f.protocol.connected===!0){f.close();break}}catch(f){hd.trace(`removeNatsConfig waiting for ${e}. Caught and swallowed error ${f}`)}if(i++,i>=qG)throw new Error(`Operations API timed out attempting to connect to ${e}. This is commonly caused by incorrect clustering config. Check hdb.log for further details.`);let u=o*(i*2);u>3e4&&hd.notify("Operations API waiting for Nats server connection. This could be caused by large Nats streams or incorrect clustering config."),await _d.async_set_timeout(u)}let c="0".repeat(qle),l=Sl.join(Rh.get(Jt.ROOTPATH),fd,r);await Tl.writeFile(l,c),await Tl.remove(l),hd.notify(e,"started.")}a(Vle,"removeNatsConfig")});var zG=C((TLe,WG)=>{"use strict";var es=oe(),Kle=dd(),Ve=(k(),P(q)),yh=lt(),wo=require("path"),{PACKAGE_ROOT:cS}=gt(),$G=oe(),aS=ie(),md="/dev/null",Yle=wo.join(cS,"launchServiceScripts"),VG=wo.join(cS,"utility/scripts"),Wle=wo.join(VG,Ve.HDB_RESTART_SCRIPT),KG=wo.resolve(cS,"dependencies",`${process.platform}-${process.arch}`,yh.NATS_BINARY_NAME);function YG(){let t=Kle.licenseSearch().ram_allocation||Ve.RAM_ALLOCATION_ENUM.DEFAULT,r=Ve.MEM_SETTING_KEY+t,n={[Ve.PROCESS_NAME_ENV_PROP]:Ve.PROCESS_DESCRIPTORS.HDB,IS_SCRIPTED_SERVICE:!0};return aS.noBootFile()&&(n[Ve.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=aS.getEnvCliRootPath()),{name:Ve.PROCESS_DESCRIPTORS.HDB,script:Ve.LAUNCH_SERVICE_SCRIPTS.MAIN,exec_mode:"fork",env:n,node_args:r,cwd:cS}}a(YG,"generateMainServerConfig");var zle=9930;function jle(){es.initSync(!0);let e=es.get(Ve.CONFIG_PARAMS.ROOTPATH),t=wo.join(e,"clustering",yh.NATS_CONFIG_FILES.HUB_SERVER),r=wo.join(es.get(Ve.HDB_SETTINGS_NAMES.LOG_PATH_KEY),Ve.LOG_NAMES.HDB),n=$G.get(Ve.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),s=yh.LOG_LEVEL_FLAGS[es.get(Ve.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:Ve.PROCESS_DESCRIPTORS.CLUSTERING_HUB+(n!==zle?"-"+n:""),script:KG,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[Ve.PROCESS_NAME_ENV_PROP]:Ve.PROCESS_DESCRIPTORS.CLUSTERING_HUB},merge_logs:!0,out_file:r,error_file:r,instances:1};return es.get(Ve.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=md,i.error_file=md),i}a(jle,"generateNatsHubServerConfig");var Qle=9940;function Jle(){es.initSync(!0);let e=es.get(Ve.CONFIG_PARAMS.ROOTPATH),t=wo.join(e,"clustering",yh.NATS_CONFIG_FILES.LEAF_SERVER),r=wo.join(es.get(Ve.HDB_SETTINGS_NAMES.LOG_PATH_KEY),Ve.LOG_NAMES.HDB),n=$G.get(Ve.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),s=yh.LOG_LEVEL_FLAGS[es.get(Ve.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:Ve.PROCESS_DESCRIPTORS.CLUSTERING_LEAF+(n!==Qle?"-"+n:""),script:KG,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[Ve.PROCESS_NAME_ENV_PROP]:Ve.PROCESS_DESCRIPTORS.CLUSTERING_LEAF},merge_logs:!0,out_file:r,error_file:r,instances:1};return es.get(Ve.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=md,i.error_file=md),i}a(Jle,"generateNatsLeafServerConfig");function Xle(){es.initSync();let e=wo.join(es.get(Ve.CONFIG_PARAMS.LOGGING_ROOT),Ve.LOG_NAMES.HDB),t={name:Ve.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0,script:Ve.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,exec_mode:"fork",env:{[Ve.PROCESS_NAME_ENV_PROP]:Ve.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0},merge_logs:!0,out_file:e,error_file:e,instances:1,cwd:Yle,autorestart:!1};return es.get(Ve.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(t.out_file=md,t.error_file=md),t}a(Xle,"generateClusteringUpgradeV4ServiceConfig");function Zle(){let e={[Ve.PROCESS_NAME_ENV_PROP]:Ve.PROCESS_DESCRIPTORS.RESTART_HDB};return aS.noBootFile()&&(e[Ve.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=aS.getEnvCliRootPath()),{...{name:Ve.PROCESS_DESCRIPTORS.RESTART_HDB,exec_mode:"fork",env:e,instances:1,autorestart:!1,cwd:VG},script:Wle}}a(Zle,"generateRestart");function eue(){return{apps:[YG()]}}a(eue,"generateAllServiceConfigs");WG.exports={generateAllServiceConfigs:eue,generateMainServerConfig:YG,generateRestart:Zle,generateNatsHubServerConfig:jle,generateNatsLeafServerConfig:Jle,generateClusteringUpgradeV4ServiceConfig:Xle}});var Oh=C((yLe,c$)=>{"use strict";var nt=(k(),P(q)),tue=ie(),Co=oS(),lS=qt(),Io=lt(),Ba=zG(),uS=oe(),Al=X(),rue=Ts(),{startWorker:jG,onMessageFromWorkers:nue}=et(),sue=id(),RLe=require("util"),iue=require("child_process"),oue=require("fs"),{execFile:aue}=iue,je;c$.exports={enterPM2Mode:cue,start:Ha,stop:uw,reload:JG,restart:XG,list:dw,describe:t$,connect:Po,kill:_ue,startAllServices:hue,startService:fw,getUniqueServicesList:r$,restartAllServices:mue,isServiceRegistered:n$,reloadStopStart:s$,restartHdb:e$,deleteProcess:due,startClusteringProcesses:o$,startClusteringThreads:a$,isHdbRestartRunning:fue,isClusteringRunning:Eue,stopClustering:pue,reloadClustering:gue,expectedRestartOfChildren:ZG};var bh=!1;nue(e=>{e.type==="restart"&&uS.initSync(!0)});function cue(){bh=!0}a(cue,"enterPM2Mode");function Po(){return je||(je=require("pm2")),new Promise((e,t)=>{je.connect((r,n)=>{r&&t(r),e(n)})})}a(Po,"connect");var rn,lue=10,QG;function Ha(e,t=!1){if(bh)return uue(e);let r=aue(e.script,e.args.split(" "),e);r.name=e.name,r.config=e,r.on("exit",async i=>{let o=rn.indexOf(r);o>-1&&rn.splice(o,1),!QG&&i!==0&&(e.restarts=(e.restarts||0)+1,e.restarts<lue&&(oue.existsSync(Co.getHubConfigPath())?Ha(e):(await Co.generateNatsConfig(!0),Ha(e),await new Promise(c=>setTimeout(c,3e3)),await Co.removeNatsConfig(nt.PROCESS_DESCRIPTORS.CLUSTERING_HUB),await Co.removeNatsConfig(nt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF))))});let n={serviceName:e.name.replace(/ /g,"-")};function s(i){let o=uS.get(nt.CONFIG_PARAMS.CLUSTERING_LOGLEVEL),c=/\[\d+][^\[]+\[(\w+)]/g,l,u=0,f;for(;l=c.exec(i);){if(l.index&&Io.LOG_LEVEL_HIERARCHY[o]>=Io.LOG_LEVEL_HIERARCHY[f||"info"]){let h=f===Io.LOG_LEVELS.ERR||f===Io.LOG_LEVELS.WRN?Al.OUTPUTS.STDERR:Al.OUTPUTS.STDOUT;Al.logCustomLevel(f||"info",h,n,i.slice(u,l.index).trim())}let[d,_]=l;u=l.index+d.length,f=Io.LOG_LEVELS[_]}if(Io.LOG_LEVEL_HIERARCHY[o]>=Io.LOG_LEVEL_HIERARCHY[f||"info"]){let d=f===Io.LOG_LEVELS.ERR||f===Io.LOG_LEVELS.WRN?Al.OUTPUTS.STDERR:Al.OUTPUTS.STDOUT;Al.logCustomLevel(f||"info",d,n,i.slice(u).trim())}}if(a(s,"extractMessages"),r.stdout.on("data",s),r.stderr.on("data",s),r.unref(),!rn&&(rn=[],!t)){let i=a(()=>{QG=!0,rn&&(rn.map(o=>o.kill()),process.exit(0))},"kill_children");process.on("exit",i),process.on("SIGINT",i),process.on("SIGQUIT",i),process.on("SIGTERM",i)}rn.push(r)}a(Ha,"start");function uue(e){return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.start(e,(n,s)=>{n&&(je.disconnect(),r(n)),je.disconnect(),t(s)})})}a(uue,"startWithPM2");function uw(e){if(!bh){for(let t of rn||[])t.name===e&&(rn.splice(rn.indexOf(t),1),t.kill());return}return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.stop(e,async(n,s)=>{n&&(je.disconnect(),r(n)),je.delete(e,(i,o)=>{i&&(je.disconnect(),r(n)),je.disconnect(),t(o)})})})}a(uw,"stop");function JG(e){return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.reload(e,(n,s)=>{n&&(je.disconnect(),r(n)),je.disconnect(),t(s)})})}a(JG,"reload");function XG(e){if(!bh){ZG();for(let t of rn||[])t.name===e&&t.kill()}return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.restart(e,(n,s)=>{je.disconnect(),t(s)})})}a(XG,"restart");function ZG(){for(let e of rn||[])e.config&&(e.config.restarts=0)}a(ZG,"expectedRestartOfChildren");function due(e){return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.delete(e,(n,s)=>{n&&(je.disconnect(),r(n)),je.disconnect(),t(s)})})}a(due,"deleteProcess");async function e$(){await Ha(Ba.generateRestart())}a(e$,"restartHdb");async function fue(){let e=await dw();for(let t in e)if(e[t].name===nt.PROCESS_DESCRIPTORS.RESTART_HDB)return!0;return!1}a(fue,"isHdbRestartRunning");function dw(){return new Promise(async(e,t)=>{try{await Po()}catch(r){t(r)}je.list((r,n)=>{r&&(je.disconnect(),t(r)),je.disconnect(),e(n)})})}a(dw,"list");function t$(e){return new Promise(async(t,r)=>{try{await Po()}catch(n){r(n)}je.describe(e,(n,s)=>{n&&(je.disconnect(),r(n)),je.disconnect(),t(s)})})}a(t$,"describe");function _ue(){if(!bh){for(let e of rn||[])e.kill();rn=[];return}return new Promise(async(e,t)=>{try{await Po()}catch(r){t(r)}je.killDaemon((r,n)=>{r&&(je.disconnect(),t(r)),je.disconnect(),e(n)})})}a(_ue,"kill");async function hue(){try{await o$(),await a$(),await Ha(Ba.generateAllServiceConfigs())}catch(e){throw je?.disconnect(),e}}a(hue,"startAllServices");async function fw(e,t=!1){try{let r;switch(e=e.toLowerCase(),e){case nt.PROCESS_DESCRIPTORS.HDB.toLowerCase():r=Ba.generateMainServerConfig();break;case nt.PROCESS_DESCRIPTORS.CLUSTERING_INGEST_SERVICE.toLowerCase():r=Ba.generateNatsIngestServiceConfig();break;case nt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE.toLowerCase():r=Ba.generateNatsReplyServiceConfig();break;case nt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase():r=Ba.generateNatsHubServerConfig(),await Ha(r,t),await Co.removeNatsConfig(e);return;case nt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase():r=Ba.generateNatsLeafServerConfig(),await Ha(r,t),await Co.removeNatsConfig(e);return;case nt.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0.toLowerCase():r=Ba.generateClusteringUpgradeV4ServiceConfig();break;default:throw new Error(`Start service called with unknown service config: ${e}`)}await Ha(r)}catch(r){throw je?.disconnect(),r}}a(fw,"startService");async function r$(){try{let e=await dw(),t={};for(let r=0,n=e.length;r<n;r++){let s=e[r];t[s.name]===void 0&&(t[s.name]={name:s.name,exec_mode:s.pm2_env.exec_mode})}return t}catch(e){throw je?.disconnect(),e}}a(r$,"getUniqueServicesList");async function mue(e=[]){try{let t=!1,r=await r$();for(let n=0,s=Object.values(r).length;n<s;n++){let o=Object.values(r)[n].name;e.includes(o)||(o===nt.PROCESS_DESCRIPTORS.HDB?t=!0:await XG(o))}t&&await s$(nt.PROCESS_DESCRIPTORS.HDB)}catch(t){throw je?.disconnect(),t}}a(mue,"restartAllServices");async function n$(e){if(rn?.find(r=>r.name===e))return!0;let t=await sue.getHDBProcessInfo();return t.core.length&&t.core[0]?.parent==="PM2"}a(n$,"isServiceRegistered");async function s$(e){let t=uS.get(nt.CONFIG_PARAMS.THREADS_COUNT)??uS.get(nt.CONFIG_PARAMS.THREADS),r=await t$(e),n=tue.isEmptyOrZeroLength(r)?0:r.length;t!==n?(await uw(e),await fw(e)):e===nt.PROCESS_DESCRIPTORS.HDB?await e$():await JG(e)}a(s$,"reloadStopStart");var i$;async function o$(e=!1){for(let t in nt.CLUSTERING_PROCESSES){let r=nt.CLUSTERING_PROCESSES[t];await fw(r,e)}}a(o$,"startClusteringProcesses");async function a$(){i$=jG(nt.LAUNCH_SERVICE_SCRIPTS.NATS_REPLY_SERVICE,{name:nt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE});try{await lS.deleteLocalStream("__HARPERDB_WORK_QUEUE__")}catch{}await lS.updateLocalStreams();let e=await rue.getAllNodeRecords();for(let t=0,r=e.length;t<r;t++)if(e[t].system_info?.hdb_version===nt.PRE_4_0_0_VERSION){Al.info("Starting clustering upgrade 4.0.0 process"),jG(nt.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,{name:"Upgrade-4-0-0"});break}}a(a$,"startClusteringThreads");async function pue(){for(let e in nt.CLUSTERING_PROCESSES)if(e!==nt.CLUSTERING_PROCESSES.CLUSTERING_INGEST_PROC_DESCRIPTOR)if(e===nt.CLUSTERING_PROCESSES.CLUSTERING_REPLY_SERVICE_DESCRIPTOR)await i$.terminate();else{let t=nt.CLUSTERING_PROCESSES[e];await uw(t)}}a(pue,"stopClustering");async function Eue(){for(let e in nt.CLUSTERING_PROCESSES){let t=nt.CLUSTERING_PROCESSES[e];if(await n$(t)===!1)return!1}return!0}a(Eue,"isClusteringRunning");async function gue(){await Co.generateNatsConfig(!0),await lS.reloadNATSHub(),await lS.reloadNATSLeaf(),await Co.removeNatsConfig(nt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase()),await Co.removeNatsConfig(nt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())}a(gue,"reloadClustering")});var mw={};Ue(mw,{compactOnStart:()=>Sue,copyDb:()=>h$});async function Sue(){ka.notify("Running compact on start"),console.log("Running compact on start");let e=(0,_w.get)(x.ROOTPATH),t=new Map,r=Xe();(0,hw.updateConfigValue)(x.STORAGE_COMPACTONSTART,!1);try{for(let n in r){if(n==="system"||n.endsWith("-copy"))continue;let s;for(let l in r[n]){s=r[n][l].primaryStore.path;break}if(!s){console.log("Couldn't find any tables in database",n);continue}let i=(0,dS.join)(e,"backup",n+".mdb"),o=(0,dS.join)(e,mc,n+"-copy.mdb"),c=0;try{c=await l$(n),console.log("Database",n,"before compact has a total record count of",c)}catch(l){ka.error("Error getting record count for database",n,l),console.error("Error getting record count for database",n,l)}t.set(n,{db_path:s,copy_dest:o,backup_dest:i,record_count:c}),await h$(n,o),console.log("Backing up",n,"to",i),await(0,Rl.move)(s,i,{overwrite:!0}),console.log("Moving copy compacted",n,"to",s),await(0,Rl.move)(o,s,{overwrite:!0}),await(0,Rl.remove)((0,dS.join)(e,mc,`${n}-copy.mdb-lock`))}try{Ed()}catch(n){ka.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n)}try{Ed()}catch(n){ka.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n),process.exit(0)}}catch(n){ka.error("Error compacting database, rolling back operation",n),console.error("Error compacting database, rolling back operation",n),(0,hw.updateConfigValue)(x.STORAGE_COMPACTONSTART,!1);for(let[s,{db_path:i,backup_dest:o}]of t){console.error("Moving backup database",o,"back to",i);try{await(0,Rl.move)(o,i,{overwrite:!0})}catch(c){console.error(c)}}throw Ed(),n}for(let[n,{backup_dest:s,record_count:i}]of t){let o=await l$(n);if(console.log("Database",n,"after compact has a total record count of",o),i!==o){let c=`There is a discrepancy between pre and post compact record count for database ${n}.
 Total record count before compaction: ${i}, total after: ${o}.