harperdb 4.5.40 → 4.5.41

package/server/threads/threadServer.js

@@ -19,7 +19,7 @@ Caused by:`));else if(typeof u=="object")try{n+=JSON.stringify(u)}catch{n+="Obje
 				This can occur during early stages of install where the config file has not yet been created`);return}else throw rr.error(i),new Error(`Error reading HarperDB config file at ${r}`)}V6(n,r),fy(n);let s=n.toJSON();if(U6.config=s,Pt=cu(s),Pt.logging_rotation_rotate)for(let i in Dv)Pt[i]&&rr.error(`Config ${Dv[i]} has been deprecated. Please check https://docs.harperdb.io/docs/ for further details.`);rr.trace(B6)}}a(kp,"initConfig");function V6(e,t){let r=e.getIn(["rootPath"]),n=!1;if(e.hasIn(["storage","path"])||(e.setIn(["storage","path"],Vn.join(r,"database")),n=!0),e.hasIn(["logging","rotation","path"])||(e.setIn(["logging","rotation","path"],Vn.join(r,"log")),n=!0),e.hasIn(["authentication"])||(e.addIn(["authentication"],{cacheTTL:3e4,enableSessions:!0,operationTokenTimeout:e.getIn(["operationsApi","authentication","operationTokenTimeout"])??"1d",refreshTokenTimeout:e.getIn(["operationsApi","authentication","refreshTokenTimeout"])??"30d"}),n=!0),e.hasIn(["analytics"])||(e.addIn(["analytics"],{aggregatePeriod:60}),n=!0),n){if(rr.trace("Updating config file with missing config params"),e.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${e.errors}`);Qr.writeFileSync(t,String(e))}}a(V6,"checkForUpdatedConfig");function fy(e,t=!1){let r=e.toJSON();if(r.componentsRoot=r.componentsRoot??r?.customFunctions?.root,r?.http?.threads&&(r.threads=r?.http?.threads),r.http?.port&&r.http?.port===r.http?.securePort)throw au.CONFIG_VALIDATION("http.port and http.securePort cannot be the same value");if(r.operationsApi?.network?.port&&r.operationsApi?.network?.port===r.operationsApi?.network?.securePort)throw au.CONFIG_VALIDATION("operationsApi.network.port and operationsApi.network.securePort cannot be the same value");let n=P6(r,t);if(n.error)throw au.CONFIG_VALIDATION(n.error.message);typeof n.value.threads=="object"?e.setIn(["threads","count"],n.value.threads.count):e.setIn(["threads"],n.value.threads),e.setIn(["componentsRoot"],n.value.componentsRoot),e.setIn(["logging","root"],n.value.logging.root),e.setIn(["storage","path"],n.value.storage.path),e.setIn(["logging","rotation","path"],n.value.logging.rotation.path),e.setIn(["operationsApi","network","domainSocket"],n.value?.operationsApi?.network?.domainSocket),r?.clustering?.enabled&&e.setIn(["clustering","leafServer","streams","path"],n.value.clustering.leafServer.streams?.path)}a(fy,"validateConfig");function K6(e,t){Pt===void 0&&(Pt={});let r=Vs[e.toLowerCase()];if(r===void 0){rr.trace(`Unable to update config object because config param '${e}' does not exist`);return}Pt[r.toLowerCase()]=t}a(K6,"updateConfigObject");function Hv(e,t,r=void 0,n=!1,s=!1,i=!1){Pt===void 0&&kp();let o=Bv(Vs.hdb_root),c=Vn.join(o,ms.HDB_CONFIG_FILE),l=fa(c),u;if(r&&Pt){let _=!1;for(let h in r)if(r[h]!=Pt[h.toLowerCase()]){_=!0;break}if(!_){rr.trace("No changes detected in config parameters, skipping update");return}}if(r===void 0&&e.toLowerCase()===$n.DATABASES)u=t;else if(r===void 0){let _;if(i)_=e;else if(_=Vs[e.toLowerCase()],_===void 0)throw new Error(`Unable to update config, unrecognized config parameter: ${e}`);let h=_.split("_"),m=dy(_,t);l.setIn([...h],m)}else for(let _ in r){let h=Vs[_.toLowerCase()];if(h===$n.HTTP_SECUREPORT&&r[_]===Pt[$n.HTTP_PORT]?.toString()&&l.setIn(["http","port"],null),h===$n.OPERATIONSAPI_NETWORK_SECUREPORT&&r[_]===Pt[$n.OPERATIONSAPI_NETWORK_PORT.toLowerCase()]?.toString()&&l.setIn(["operationsApi","network","port"],null),h===$n.DATABASES){u=r[_];continue}if(h?.startsWith("threads_")){let m=l.getIn(["threads"]);m>=0&&(l.deleteIn(["threads"]),l.setIn(["threads","count"],m))}if(!h&&(_.endsWith("_package")||_.endsWith("_port"))&&(h=_),h!==void 0){let m=h.split("_"),S=ms.LEGACY_CONFIG_PARAMS[_.toUpperCase()];S&&S.startsWith("customFunctions")&&l.hasIn(S.split("_"))&&(h=S,m=S.split("_"));let g=dy(h,r[_]);h==="rootPath"&&g?.endsWith("/")&&(g=g.slice(0,-1));try{m.length>1&&typeof l.getIn(m.slice(0,-1))=="boolean"&&l.deleteIn(m.slice(0,-1)),l.setIn([...m],g)}catch(R){rr.error(R)}}}u&&xv(l,u),fy(l);let f=l.getIn(["rootPath"]),d=Vn.join(f,ms.HDB_CONFIG_FILE);if(n===!0&&Y6(c,f),l.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${l.errors}`);Qr.writeFileSync(d,String(l)),s&&(Pt=cu(l.toJSON())),rr.trace(`Config parameter: ${e} updated with value: ${t}`)}a(Hv,"updateConfigValue");function Y6(e,t){try{let r=Vn.join(t,"backup",`${new Date(Date.now()).toISOString().replaceAll(":","-")}-${ms.HDB_CONFIG_FILE}.bak`);Qr.copySync(e,r),rr.trace(`Config file: ${e} backed up to: ${r}`)}catch(r){rr.error(H6),rr.error(r)}}a(Y6,"backupConfigFile");var W6=["databases"];function cu(e){return e.http&&Object.assign(e.http,e?.customFunctions?.network),e?.operationsApi?.network&&(e.operationsApi.network={...e.http,...e.operationsApi.network}),e?.operationsApi&&(e.operationsApi.tls={...e.tls,...e.operationsApi.tls}),Hp=e,r(e);function r(n){let s={};for(let i in n)if(n.hasOwnProperty(i)){if(typeof n[i]=="object"&&n[i]!==null&&!Array.isArray(n[i])&&!W6.includes(i)){let o=r(n[i]);for(let c in o){if(!o.hasOwnProperty(c))continue;c!=="package"&&(i=i.toLowerCase());let l=i+"_"+c;!$n[l.toUpperCase()]&&Vs[l]&&(s[Vs[l].toLowerCase()]=o[c]),s[l]=o[c]}}n[i]!==void 0&&(s[i.toLowerCase()]=n[i])}return s}a(r,"squashObj")}a(cu,"flattenConfig");function dy(e,t){if(e===$n.CLUSTERING_NODENAME||e===$n.CLUSTERING_USER){if(t==null)return t;if(!isNaN(t))return t.toString();if(typeof t=="string"&&t.toLowerCase()==="true"||typeof t=="string"&&t.toLowerCase()==="false")return t}else{if(D6(t))return parseFloat(t);if(t===!0||t===!1||Array.isArray(t)||mr.isObject(t)||t===null)return t;if(typeof t=="string"&&t.toLowerCase()==="true")return!0;if(typeof t=="string"&&t.toLowerCase()==="false")return!1}if(t===void 0||t.toLowerCase()==="undefined")return null;if(typeof t=="string"&&(t.startsWith("{")&&t.endsWith("}")||t.startsWith("[")&&t.endsWith("]")))try{return JSON.parse(t)}catch{}return mr.autoCast(t)}a(dy,"castConfigValue");function z6(){let e=mr.getPropsFilePath(),t=kc(e);return fa(t).toJSON()}a(z6,"getConfiguration");async function Q6(e){let{operation:t,hdb_user:r,hdb_auth_header:n,...s}=e;try{return Hv(void 0,void 0,s,!0),G6}catch(i){throw typeof i=="string"||i instanceof String?M6(i,i,v6.BAD_REQUEST,void 0,void 0,!0):i}}a(Q6,"setConfiguration");function _y(){let e=mr.getPropsFilePath();try{Qr.accessSync(e,Qr.constants.F_OK|Qr.constants.R_OK)}catch(n){if(!mr.noBootFile())throw rr.error(n),new Error(`HarperDB properties file at path ${e} does not exist`)}let t=kc(e);return fa(t).toJSON()}a(_y,"readConfigFile");function fa(e){return Lv.parseDocument(Qr.readFileSync(e,"utf8"),{simpleKeys:!0})}a(fa,"parseYamlDoc");function j6(){let e=_y(),t=e?.clustering?.hubServer?.cluster?.network?.routes;t=mr.isEmptyOrZeroLength(t)?[]:t;let r=Pv(t);if(r)throw au.CONFIG_VALIDATION(r.message);let n=e?.clustering?.leafServer?.network?.routes;n=mr.isEmptyOrZeroLength(n)?[]:n;let s=Pv(n);if(s)throw au.CONFIG_VALIDATION(s.message);if(!mr.isEmptyOrZeroLength(n)&&!mr.isEmptyOrZeroLength(t)){let i=t.filter(o=>n.some(c=>c.host===o.host&&c.port===o.port));if(!mr.isEmptyOrZeroLength(i)){let o=`Duplicate hub and leaf routes found ${JSON.stringify(i)}`;throw au.CONFIG_VALIDATION(o)}}return{hub_routes:t,leaf_routes:n}}a(j6,"getClusteringRoutes");function kv(e){let t=Mv(e);Pt={};for(let r in Vs){let n=t.get(r.toUpperCase());if(mr.isEmpty(n)||typeof n=="string"&&n.trim().length===0)continue;let s=Vs[r].toLowerCase();s===$n.LOGGING_ROOT?Pt[s]=Vn.dirname(n):Pt[s]=n}return Pt}a(kv,"initOldConfig");function J6(e){let t=_y();return L6.get(t,e.replaceAll("_","."))}a(J6,"getConfigFromFile");async function X6(e,t){let r=fa(kc());if(r.hasIn([e])?r.setIn([e],t):r.addIn([e],t),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);await Qr.writeFile(kc(),String(r))}a(X6,"addConfig");function Z6(e){let t=kc(mr.getPropsFilePath()),r=fa(t);r.deleteIn(e);let n=r.getIn(["rootPath"]),s=Vn.join(n,ms.HDB_CONFIG_FILE);Qr.writeFileSync(s,String(r))}a(Z6,"deleteConfigFromFile");function e8(){return Hp||(kp(),Hp)}a(e8,"getConfigObj");function t8(){return Pt||kp(),Pt}a(t8,"getFlatConfigObj")});var Kn=C((rbe,Or)=>{"use strict";var $v="username is required",Vv="nothing to update, must supply active, role or password to update",Kv="password cannot be an empty string",Yv="If role is specified, it cannot be empty.",Wv="active must be true or false";Or.exports.addUser=u8;Or.exports.alterUser=d8;Or.exports.dropUser=_8;Or.exports.getSuperUser=g8;Or.exports.userInfo=h8;Or.exports.listUsers=Gp;Or.exports.listUsersExternal=m8;Or.exports.setUsersWithRolesCache=Fc;Or.exports.findAndValidateUser=Ry;Or.exports.getClusterUser=S8;Or.exports.getUsersWithRolesCache=E8;Or.exports.USERNAME_REQUIRED=$v;Or.exports.ALTERUSER_NOTHING_TO_UPDATE=Vv;Or.exports.EMPTY_PASSWORD=Kv;Or.exports.EMPTY_ROLE=Yv;Or.exports.ACTIVE_BOOLEAN=Wv;var zv=Sn(),r8=Bc(),e_=(Up(),P(vp)),Qv=Tv(),t_=Wr(),gy=ho(),Ni=ie(),jv=require("validate.js"),Sy=ee(),{promisify:n8}=require("util"),Ty=uo(),my=(k(),P(q)),Gv=Ct(),s8=Dt(),i8=le(),o8=ao(),{hdb_errors:a8,ClientError:Ks}=he(),{HTTP_STATUS_CODES:_o,AUTHENTICATION_ERROR_MSGS:hy,HDB_ERROR_MSGS:lu}=a8,{UserEventMsg:Ay}=Ys(),py=require("lodash"),{server:Fp}=(Mr(),P(Zl)),c8=ee();Fp.getUser=(e,t)=>Ry(e,t,t!=null);Fp.authenticateUser=(e,t)=>Ry(e,t);var Jv={username:!0,active:!0,role:!0,password:!0},qv=new Map,l8=n8(r8.delete),Ey=i8.get(my.CONFIG_PARAMS.AUTHENTICATION_HASHFUNCTION)??e_.HASH_FUNCTION.SHA256,wi;async function u8(e){let t=jv.cleanAttributes(e,Jv),r=Qv.addUserValidation(t);if(r)throw new Ks(r.message);let n=await t_.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["id","permission","role"]});if(!n||n.length<1)throw new Ks(lu.ROLE_NAME_NOT_FOUND(t.role),_o.NOT_FOUND);if(n.length>1)throw new Ks(lu.DUP_ROLES_FOUND(t.role),_o.CONFLICT);n[0].permission.cluster_user===!0&&(t.hash=Ty.encrypt(t.password)),t.password=await e_.hash(t.password,Ey),t.hash_function=Ey,t.role=n[0].id;let s=await zv.insert({operation:"insert",schema:"system",table:"hdb_user",records:[t]});if(Sy.debug(s),await Fc(),s.skipped_hashes.length===1)throw new Ks(lu.USER_ALREADY_EXISTS(t.username),_o.CONFLICT);return gy.signalUserChange(new Ay(process.pid)),`${t.username} successfully added`}a(u8,"addUser");async function d8(e){let t=jv.cleanAttributes(e,Jv);if(Ni.isEmptyOrZeroLength(t.username))throw new Error($v);if(Ni.isEmptyOrZeroLength(t.password)&&Ni.isEmptyOrZeroLength(t.role)&&Ni.isEmptyOrZeroLength(t.active))throw new Error(Vv);if(!Ni.isEmpty(t.password)&&Ni.isEmptyOrZeroLength(t.password.trim()))throw new Error(Kv);if(!Ni.isEmpty(t.active)&&!Ni.isBoolean(t.active))throw new Error(Wv);if(!Ni.isEmpty(t.password)&&!Ni.isEmptyOrZeroLength(t.password.trim())&&(f8(t.username)&&(t.hash=Ty.encrypt(t.password)),t.password=await e_.hash(t.password,Ey)),t.role==="")throw new Error(Yv);if(t.role){let n=await t_.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["*"]});if(!n||n.length===0)throw new Ks(lu.ALTER_USER_ROLE_NOT_FOUND(t.role),_o.NOT_FOUND);if(n.length>1)throw new Ks(lu.DUP_ROLES_FOUND(t.role),_o.CONFLICT);t.role=n[0].id}let r=await zv.update({operation:"update",schema:"system",table:"hdb_user",records:[t]});return await Fc(),gy.signalUserChange(new Ay(process.pid)),r}a(d8,"alterUser");function f8(e){let t=!1,r=wi.get(e);return r&&r.role.permission.cluster_user===!0&&(t=!0),t}a(f8,"isClusterUser");async function _8(e){let t=Qv.dropUserValidation(e);if(t)throw new Ks(t.message);if(wi.get(e.username)===void 0)throw new Ks(lu.USER_NOT_EXIST(e.username),_o.NOT_FOUND);let r=await l8({table:"hdb_user",schema:"system",hash_values:[e.username]});return Sy.debug(r),await Fc(),gy.signalUserChange(new Ay(process.pid)),`${e.username} successfully deleted`}a(_8,"dropUser");async function h8(e){let t={};if(!e||!e.hdb_user)return"There was no user info in the body";t=py.cloneDeep(e.hdb_user);let r=await t_.searchByHash({schema:"system",table:"hdb_role",hash_values:[t.role.id],get_attributes:["*"]});return t.role=r[0],delete t.password,delete t.refresh_token,delete t.hash,delete t.hash_function,t}a(h8,"userInfo");async function m8(){let e=await Gp();return e.forEach(t=>{delete t.password,delete t.hash,delete t.refresh_token,delete t.hash_function}),[...e.values()]}a(m8,"listUsersExternal");async function Gp(){let e=await t_.searchByValue({schema:"system",table:"hdb_role",search_value:"*",search_attribute:"role",get_attributes:["*"]}),t={};for(let s of e)t[s.id]=py.cloneDeep(s);if(Object.keys(t).length===0)return null;let r=await t_.searchByValue({schema:"system",table:"hdb_user",search_value:"*",search_attribute:"username",get_attributes:["*"]}),n=new Map;for(let s of r)s=py.cloneDeep(s),s.role=t[s.role],p8(s.role),n.set(s.username,s);return n}a(Gp,"listUsers");function p8(e){if(!e){Sy.error("invalid user role found.");return}e.permission.system||(e.permission.system={}),e.permission.system.tables||(e.permission.system.tables={});for(let t of Object.keys(o8)){let r={read:!!e.permission.super_user,insert:!1,update:!1,delete:!1,attribute_permissions:[]};e.permission.system.tables[t]=r}}a(p8,"appendSystemTablesToRole");async function Fc(e=void 0){e?wi=e:wi=await Gp()}a(Fc,"setUsersWithRolesCache");async function E8(){return wi||await Fc(),wi}a(E8,"getUsersWithRolesCache");async function Ry(e,t,r=!0){wi||await Fc();let n=wi.get(e);if(!n){if(!r)return{username:e};throw new Ks(hy.GENERIC_AUTH_FAIL,_o.UNAUTHORIZED)}if(n&&!n.active)throw new Ks(hy.USER_INACTIVE,_o.UNAUTHORIZED);let s={active:n.active,username:n.username};if(n.refresh_token&&(s.refresh_token=n.refresh_token),n.role&&(s.role=n.role),r===!0){if(qv.get(t)===n.password)return s;{let i=e_.validate(n.password,t,n.hash_function||e_.HASH_FUNCTION.MD5);if(i?.then&&(i=await i),i===!0)qv.set(t,n.password);else throw new Ks(hy.GENERIC_AUTH_FAIL,_o.UNAUTHORIZED)}}return s}a(Ry,"findAndValidateUser");async function g8(){wi||await Fc();for(let[,e]of wi)if(e.role.role==="super_user")return e}a(g8,"getSuperUser");async function S8(){let e=await Gp(),t=s8.getConfigFromFile(my.CONFIG_PARAMS.CLUSTERING_USER),r=e.get(t);if(!(r==null||r?.role?.role!==my.ROLE_TYPES_ENUM.CLUSTER_USER))return r.decrypt_hash=Ty.decrypt(r.hash),r.uri_encoded_d_hash=encodeURIComponent(r.decrypt_hash),r.uri_encoded_name=encodeURIComponent(r.username),r.sys_name=r.username+Gv.SERVER_SUFFIX.ADMIN,r.sys_name_encoded=r.uri_encoded_name+Gv.SERVER_SUFFIX.ADMIN,r}a(S8,"getClusterUser");var Xv=[];Fp.invalidateUser=function(e){for(let t of Xv)try{t(e)}catch(r){c8.error("Error invalidating user",r)}};Fp.onInvalidatedUser=function(e){Xv.push(e)}});var n_=C((obe,rU)=>{"use strict";var Gc=ee(),Yn=(k(),P(q)),T8=mM(),sbe=$s(),ibe=fo(),A8=Kn(),{validateEvent:Zv}=Ys(),r_=qn(),R8=require("process"),{resetDatabases:y8}=(xe(),P(ct)),b8={[Yn.ITC_EVENT_TYPES.SCHEMA]:O8,[Yn.ITC_EVENT_TYPES.USER]:tU};async function O8(e){let t=Zv(e);if(t){Gc.error(t);return}Gc.trace("ITC schemaHandler received schema event:",e),await T8(e.message),await N8(e.message)}a(O8,"schemaHandler");async function N8(e){try{r_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME),r_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME),r_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME);let t=y8();e.table&&e.database&&await t[e.database][e.table].put(Symbol.for("write-verify"),null)}catch(t){Gc.error(t)}}a(N8,"syncSchemaMetadata");var eU=[];async function tU(e){try{try{r_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.USER_TABLE_NAME),r_.resetReadTxn(Yn.SYSTEM_SCHEMA_NAME,Yn.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME)}catch(r){Gc.warn(r)}let t=Zv(e);if(t){Gc.error(t);return}Gc.trace(`ITC userHandler ${Yn.HDB_ITC_CLIENT_PREFIX}${R8.pid} received user event:`,e),await A8.setUsersWithRolesCache();for(let r of eU)r()}catch(t){Gc.error(t)}}a(tU,"userHandler");tU.addListener=function(e){eU.push(e)};rU.exports=b8});var Ys=C((fbe,sU)=>{"use strict";var cbe=ee(),yy=ie(),w8=(k(),P(q)),{ITC_ERRORS:s_}=Un(),{parentPort:lbe,threadId:I8,isMainThread:C8,workerData:ube}=require("worker_threads"),{onMessageFromWorkers:P8,broadcast:dbe,broadcastWithAcknowledgement:D8}=it();sU.exports={sendItcEvent:L8,validateEvent:nU,SchemaEventMsg:M8,UserEventMsg:v8};var qp;P8(async(e,t)=>{qp=qp||n_(),nU(e),qp[e.type]&&await qp[e.type](e),e.requestId&&t&&t.postMessage({type:"ack",id:e.requestId})});function L8(e){return!C8&&e.message&&(e.message.originator=I8),D8(e)}a(L8,"sendItcEvent");function nU(e){if(typeof e!="object")return s_.INVALID_ITC_DATA_TYPE;if(!e.hasOwnProperty("type")||yy.isEmpty(e.type))return s_.MISSING_TYPE;if(!e.hasOwnProperty("message")||yy.isEmpty(e.message))return s_.MISSING_MSG;if(!e.message.hasOwnProperty("originator")||yy.isEmpty(e.message.originator))return s_.MISSING_ORIGIN;if(w8.ITC_EVENT_TYPES[e.type.toUpperCase()]===void 0)return s_.INVALID_EVENT(e.type)}a(nU,"validateEvent");function M8(e,t,r,n=void 0,s=void 0){this.originator=e,this.operation=t,this.schema=r,this.table=n,this.attribute=s}a(M8,"SchemaEventMsg");function v8(e){this.originator=e}a(v8,"UserEventMsg")});var ho=C((mbe,cU)=>{"use strict";var iU=(k(),P(q)),hbe=ie(),$p=ee(),oU=fM(),uu,{sendItcEvent:aU}=Ys();function U8(e){try{$p.info("signalSchemaChange called with message:",e),uu=uu||n_();let t=new oU(iU.ITC_EVENT_TYPES.SCHEMA,e);return uu.schema(t),aU(t)}catch(t){$p.error(t)}}a(U8,"signalSchemaChange");function x8(e){try{$p.trace("signalUserChange called with message:",e),uu=uu||n_();let t=new oU(iU.ITC_EVENT_TYPES.USER,e);return uu.user(t),aU(t)}catch(t){$p.error(t)}}a(x8,"signalUserChange");cU.exports={signalSchemaChange:U8,signalUserChange:x8}});var Vp=C((Ebe,uU)=>{"use strict";var lU=ie(),B8=(k(),P(q)),H8=ee(),k8=Op(),F8=bp(),G8=ho(),{SchemaEventMsg:q8}=Ys(),$8="already exists in";uU.exports=V8;async function V8(e,t,r){if(lU.isEmptyOrZeroLength(r))return r;let n=[];lU.isEmptyOrZeroLength(t.attributes)||t.attributes.forEach(i=>{n.push(i.attribute)});let s=r.filter(i=>n.indexOf(i)<0);return s.length===0||await Promise.all(s.map(async i=>{await K8(e,t.schema,t.name,i)})),s}a(V8,"lmdbCheckForNewAttributes");async function K8(e,t,r,n){let s=new F8(t,r,n,void 0,!0);e&&(s.hdb_auth_header=e);try{await Y8(s)}catch(i){if(typeof i=="object"&&i.message!==void 0&&i.message.includes($8))H8.warn(`attribute ${t}.${r}.${n} already exists`);else throw i}}a(K8,"createNewAttribute");async function Y8(e){let t;return t=await k8(e),G8.signalSchemaChange(new q8(process.pid,B8.OPERATIONS_ENUM.CREATE_ATTRIBUTE,e.schema,e.table,e.attribute)),t}a(Y8,"createAttribute")});var du=C((Sbe,dU)=>{"use strict";var by=class{static{a(this,"LMDBTransactionObject")}constructor(t,r,n,s,i=void 0){this.operation=t,this.user_name=r,this.timestamp=n,this.hash_values=s,this.origin=i}};dU.exports=by});var _U=C((Abe,fU)=>{"use strict";var W8=du(),z8=(k(),P(q)).OPERATIONS_ENUM,Oy=class extends W8{static{a(this,"LMDBInsertTransactionObject")}constructor(t,r,n,s,i=void 0){super(z8.INSERT,r,n,s,i),this.records=t}};fU.exports=Oy});var mU=C((ybe,hU)=>{"use strict";var Q8=du(),j8=(k(),P(q)).OPERATIONS_ENUM,Ny=class extends Q8{static{a(this,"LMDBUpdateTransactionObject")}constructor(t,r,n,s,i,o=void 0){super(j8.UPDATE,n,s,i,o),this.records=t,this.original_records=r}};hU.exports=Ny});var EU=C((Obe,pU)=>{"use strict";var J8=du(),X8=(k(),P(q)).OPERATIONS_ENUM,wy=class extends J8{static{a(this,"LMDBUpsertTransactionObject")}constructor(t,r,n,s,i,o=void 0){super(X8.UPSERT,n,s,i,o),this.records=t,this.original_records=r}};pU.exports=wy});var SU=C((wbe,gU)=>{"use strict";var Z8=du(),eZ=(k(),P(q)).OPERATIONS_ENUM,Iy=class extends Z8{static{a(this,"LMDBDeleteTransactionObject")}constructor(t,r,n,s,i=void 0){super(eZ.DELETE,n,s,t,i),this.original_records=r}};gU.exports=Iy});var i_=C((Pbe,yU)=>{"use strict";var Cbe=require("path"),TU=_t(),tZ=_U(),rZ=mU(),nZ=EU(),sZ=SU(),fu=Ft(),AU=ie(),{CONFIG_PARAMS:iZ}=(k(),P(q)),RU=le();RU.initSync();var Kp=(k(),P(q)).OPERATIONS_ENUM,{getTransactionAuditStorePath:oZ}=gt();yU.exports=aZ;async function aZ(e,t){if(RU.get(iZ.LOGGING_AUDITLOG)===!1)return;let r=oZ(e.schema,e.table),n=await TU.openEnvironment(r,e.table,!0),s=cZ(e,t);if(!(s===void 0||s.hash_values.length===0)&&n!==void 0){TU.initializeDBIs(n,fu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,fu.TRANSACTIONS_DBIS);let i=s.timestamp;return await n.dbis[fu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP].ifNoExists(i,()=>{n.dbis[fu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP].put(i,s),AU.isEmpty(s.user_name)||n.dbis[fu.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].put(s.user_name,i);for(let o=0;o<s.hash_values.length;o++)n.dbis[fu.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE].put(s.hash_values[o],i)})}}a(aZ,"writeTransaction");function cZ(e,t){let r=AU.isEmpty(e.hdb_user)?void 0:e.hdb_user?.username;if(e.operation===Kp.INSERT)return new tZ(e.records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===Kp.UPDATE)return new rZ(e.records,t.original_records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===Kp.UPSERT)return new nZ(e.records,t.original_records,r,t.txn_time,t.written_hashes,e.__origin);if(e.operation===Kp.DELETE)return new sZ(t.deleted,t.original_records,r,t.txn_time,e.__origin)}a(cZ,"createTransactionObject")});var Cy=C((Mbe,bU)=>{"use strict";var lZ=qf(),Lbe=gf(),o_=(k(),P(q)),uZ=Sf(),dZ=Dc().insertRecords,fZ=_t(),_Z=ee(),hZ=Vp(),{getSchemaPath:mZ}=gt(),pZ=i_();bU.exports=EZ;async function EZ(e){try{let{schema_table:t,attributes:r}=lZ(e);uZ(e,r,t.hash_attribute),e.schema!==o_.SYSTEM_SCHEMA_NAME&&(r.includes(o_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||r.push(o_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),r.includes(o_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||r.push(o_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let n=await hZ(e.hdb_auth_header,t,r),s=mZ(e.schema,e.table),i=await fZ.openEnvironment(s,e.table),o=await dZ(i,t.hash_attribute,r,e.records,e.__origin?.timestamp);try{await pZ(e,o)}catch(c){_Z.error(`unable to write transaction due to ${c.message}`)}return{written_hashes:o.written_hashes,skipped_hashes:o.skipped_hashes,schema_table:t,new_attributes:n,txn_time:o.txn_time}}catch(t){throw t}}a(EZ,"lmdbCreateRecords")});var wU=C((Ube,NU)=>{"use strict";var OU=(k(),P(q)),gZ=Cy(),SZ=gf(),TZ=require("fs-extra"),{getSchemaPath:AZ}=gt();NU.exports=RZ;async function RZ(e){let t=[{name:e.schema,createddate:Date.now()}],r=new SZ(OU.SYSTEM_SCHEMA_NAME,OU.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,void 0,t);await gZ(r),await TZ.mkdirp(AZ(e.schema))}a(RZ,"lmdbCreateSchema")});var CU=C((Bbe,IU)=>{"use strict";var Py=class{static{a(this,"DeleteRecordsResponseObject")}constructor(t=[],r=[],n=void 0,s=[]){this.deleted=t,this.skipped=r,this.txn_time=n,this.original_records=s}};IU.exports=Py});var MU=C((qbe,LU)=>{"use strict";var PU=_t(),Dy=un(),Ly=Un().LMDB_ERRORS_ENUM,yZ=Ft(),DU=ee(),kbe=ie(),bZ=require("lmdb"),OZ=CU(),NZ=(k(),P(q)),{OVERFLOW_MARKER:Fbe,MAX_SEARCH_KEY_LENGTH:Gbe}=yZ,wZ=NZ.TIME_STAMP_NAMES_ENUM.UPDATED_TIME;async function IZ(e,t,r,n){if(Dy.validateEnv(e),t===void 0)throw new Error(Ly.HASH_ATTRIBUTE_REQUIRED);if(!Array.isArray(r))throw r===void 0?new Error(Ly.IDS_REQUIRED):new Error(Ly.IDS_MUST_BE_ITERABLE);try{let s=PU.listDBIs(e);PU.initializeDBIs(e,t,s);let i=new OZ,o,c=[],l=[];for(let _=0,h=r.length;_<h;_++)try{o=r[_];let m=e.dbis[t].get(o);if(!m||n&&m[wZ]>n){i.skipped.push(o);continue}let S=e.dbis[t].ifVersion(o,bZ.IF_EXISTS,()=>{e.dbis[t].remove(o);for(let g=0;g<s.length;g++){let R=s[g];if(!m.hasOwnProperty(R)||R===t)continue;let E=e.dbis[R],T=m[R];if(T!=null)try{let N=Dy.getIndexedValues(T);if(N)for(let M=0,H=N.length;M<H;M++)E.remove(N[M],o)}catch{DU.warn(`cannot delete from attribute: ${R}, ${T}:${o}`)}}});c.push(S),l.push(o),i.original_records.push(m)}catch(m){DU.warn(m),i.skipped.push(o)}let u=[],f=await Promise.all(c);for(let _=0,h=f.length;_<h;_++)f[_]===!0?i.deleted.push(l[_]):(i.skipped.push(l[_]),u.push(_));let d=0;for(let _=0;_<u.length;_++){let h=u[_];i.original_records.splice(h-d,1),d++}return i.txn_time=Dy.getNextMonotonicTime(),i}catch(s){throw s}}a(IZ,"deleteRecords");LU.exports={deleteRecords:IZ}});var a_=C((Vbe,UU)=>{"use strict";var _u=ie(),CZ=MU(),PZ=_t(),{getSchemaPath:DZ}=gt(),LZ=i_(),MZ=ee();UU.exports=vZ;async function vZ(e,t=!0){let n=global.hdb_schema[e.schema][e.table].hash_attribute;if(_u.isEmpty(n))throw new Error(`could not retrieve hash attribute for schema:${e.schema} and table ${e.table}`);try{if(_u.isEmptyOrZeroLength(e.hash_values)&&!_u.isEmptyOrZeroLength(e.records)){e.hash_values=[];for(let c=0;c<e.records.length;c++){let l=e.records[c][n];_u.isEmpty(l)||e.hash_values.push(l)}}if(_u.isEmptyOrZeroLength(e.hash_values))return vU([],[]);if(!Array.isArray(e.hash_values))throw new Error("hash_values must be an array");if(_u.isEmptyOrZeroLength(e.records)){e.records=[];for(let c=0;c<e.hash_values.length;c++)e.records[c]={[n]:e.hash_values[c]}}let s=DZ(e.schema,e.table),i=await PZ.openEnvironment(s,e.table),o=await CZ.deleteRecords(i,n,e.hash_values,e.__origin?.timestamp);try{t===!0&&await LZ(e,o)}catch(c){MZ.error(`unable to write transaction due to ${c.message}`)}return vU(o.deleted,o.skipped,o.txn_time)}catch(s){throw s}}a(vZ,"lmdbDeleteRecords");function vU(e,t,r){let n=e.length+t.length,s=n===1?"record":"records";return{message:`${e.length} of ${n} ${s} successfully deleted`,deleted_hashes:e,skipped_hashes:t,txn_time:r}}a(vU,"createDeleteResponse")});var vy=C((Wbe,xU)=>{"use strict";var UZ=(k(),P(q)),Ybe=un();function My(e,t){let r=Object.create(null);if(t.length===1&&UZ.SEARCH_WILDCARDS.indexOf(t[0])>=0)Object.assign(r,e);else for(let n=0;n<t.length;n++){let s=t[n],i=e[s];r[s]=i===void 0?null:i}return r}a(My,"parseRow");function xZ(e,t,r,n){let s=My(r,e);n.push(s)}a(xZ,"searchAll");function BZ(e,t,r,n){let s=My(r,e);n[t]=s}a(BZ,"searchAllToMap");function HZ(e,t,r){r[e]===void 0&&(r[e]=[]),r[e].push(t)}a(HZ,"iterateDBI");function qc(e,t,r,n,s){let i=Object.create(null);i[s]=e;let o;n===s?o=e:(o=t,n!==void 0&&(i[n]=o)),r[0].push(o),r[1].push(i)}a(qc,"pushResults");function kZ(e,t,r,n,s,i){t.toString().endsWith(e)&&qc(t,r,n,s,i)}a(kZ,"endsWith");function FZ(e,t,r,n,s,i){t.toString().includes(e)&&qc(t,r,n,s,i)}a(FZ,"contains");function GZ(e,t,r,n,s,i){t>e&&qc(t,r,n,s,i)}a(GZ,"greaterThanCompare");function qZ(e,t,r,n,s,i){t>=e&&qc(t,r,n,s,i)}a(qZ,"greaterThanEqualCompare");function $Z(e,t,r,n,s,i){t<e&&qc(t,r,n,s,i)}a($Z,"lessThanCompare");function VZ(e,t,r,n,s,i){t<=e&&qc(t,r,n,s,i)}a(VZ,"lessThanEqualCompare");xU.exports={parseRow:My,searchAll:xZ,searchAllToMap:BZ,iterateDBI:HZ,endsWith:kZ,contains:FZ,greaterThanCompare:GZ,greaterThanEqualCompare:qZ,lessThanCompare:$Z,lessThanEqualCompare:VZ,pushResults:qc}});var hu=C((Xbe,$U)=>{"use strict";var _a=_t(),Qbe=ee(),Wn=un(),Yp=Ft(),zt=Un().LMDB_ERRORS_ENUM,jbe=ie(),KZ=(k(),P(q)),Wp=vy(),{parseRow:YZ}=Wp,Jbe=require("lmdb"),{OVERFLOW_MARKER:BU,MAX_SEARCH_KEY_LENGTH:WZ}=Yp;function HU(e,t,r,n=!1,s=void 0,i=void 0){return $c(e,t,r,(o,c)=>c.getRange({transaction:o,start:n?void 0:!1,end:n?!1:void 0,limit:s,offset:i,reverse:n}))}a(HU,"iterateFullIndex");function c_(e,t,r,n,s,i=!1,o=void 0,c=void 0,l=!1,u=!1){return $c(e,t,r,(f,d,_,h)=>{let E={transaction:f,start:i===!0?s:n,end:i===!0?n:s,reverse:i,limit:o,offset:c,inclusiveEnd:i===!0?!l:!u,exclusiveStart:i===!0?u:l};return h===r?(E.values=!1,d.getRange(E).map(T=>({value:T}))):d.getRange(E)})}a(c_,"iterateRangeBetween");function $c(e,t,r,n){let s=e.database||e,i=_a.openDBI(s,r);i[Yp.DBI_DEFINITION_NAME].is_hash_attribute?t=r:t&&_a.openDBI(s,t);let o;e.database?o=e:(o=e.useReadTransaction(),o.database=e);let c=n(o,i,s,t);return c.transaction=o,e.database||(c.onDone=()=>{o.done()}),c}a($c,"setupTransaction");function kU(e,t,r,n){let s;return function(i,o){if(typeof i=="string"&&i.endsWith(BU)){if(!s)if(r)s=_a.openDBI(e,r);else{let l=_a.listDBIs(e);for(let u=0,f=l.length;u<f&&(s=_a.openDBI(e,l[u]),!s[Yp.DBI_DEFINITION_NAME].is_hash_attribute);u++);}i=s.get(o,{transaction:t,lazy:!0})[n]}return i}}a(kU,"getOverflowCheck");function zZ(e,t,r,n=!1,s=void 0,i=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);return $c(e,t,t,(o,c,l)=>(zp(r),r=l_(l,r),c.getRange({transaction:o,start:n?void 0:!1,end:n?!1:void 0,limit:s,offset:i,reverse:n}).map(u=>YZ(u.value,r))))}a(zZ,"searchAll");function QZ(e,t,r,n=!1,s=void 0,i=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);zp(r),r=l_(e.database||e,r);let o=new Map;for(let{key:c,value:l}of HU(e,t,t,n,s,i))o.set(c,Wp.parseRow(l,r));return o}a(QZ,"searchAllToMap");function jZ(e,t,r=!1,n=void 0,s=void 0){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.ATTRIBUTE_REQUIRED);let i=Object.create(null),o=HU(e,void 0,t,r,n,s),c=o.transaction,l=kU(c.database,c,void 0,t);for(let{key:u,value:f}of o){let d=l(u,f);i[d]===void 0&&(i[d]=[]),i[d].push(f)}return i}a(jZ,"iterateDBI");function JZ(e,t){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);return _a.statDBI(e,t).entryCount}a(JZ,"countAll");function XZ(e,t,r,n,s=!1,i=void 0,o=void 0){return ha(e,r,n),$c(e,t,r,(c,l,u,f)=>(n=Wn.convertKeyValueToWrite(n),f===r?l.get(n,{transaction:c,lazy:!0})===void 0?[]:[{key:n,value:n}]:l.getValues(n,{transaction:c,reverse:s,limit:i,offset:o}).map(d=>({key:n,value:d}))))}a(XZ,"equals");function ZZ(e,t,r){return ha(e,t,r),_a.openDBI(e,t).getValuesCount(r)}a(ZZ,"count");function e5(e,t,r,n,s=!1,i=void 0,o=void 0){return ha(e,r,n),$c(e,null,r,(c,l)=>{n=Wn.convertKeyValueToWrite(n);let u=!0;typeof n=="number"&&(u=!1);let f;if(s===!0){let d;for(let _ of l.getKeys({transaction:c,start:n}))if(!_.startsWith(n)){d=_;break}return d!==void 0&&(Number.isInteger(o)?o++:i++),f=l.getRange({transaction:c,start:d,end:void 0,reverse:s,limit:i,offset:o}).map(_=>{let{key:h}=_;if(h!==d){if(h.toString().startsWith(n))return _;if(u===!0)return f.DONE}}),f.filter(_=>_)}else return f=l.getRange({transaction:c,start:n,reverse:s,limit:i,offset:o}).map(d=>{if(d.key.toString().startsWith(n))return d;if(u===!0)return f.DONE}),u?f:f.filter(d=>d)})}a(e5,"startsWith");function t5(e,t,r,n,s=!1,i=void 0,o=void 0){return FU(e,t,r,n,s,i,o,!0)}a(t5,"endsWith");function FU(e,t,r,n,s=!1,i=void 0,o=void 0,c=!1){return ha(e,r,n),$c(e,null,r,(l,u,f,d)=>{let _=kU(f,l,d,r);return o=Number.isInteger(o)?o:0,u.getKeys({transaction:l,end:s?!1:void 0,reverse:s}).flatMap(h=>{let m=h.toString();return m.endsWith(BU)?u.getValues(h,{transaction:l}).map(S=>{let g=_(h,S);if(c?g.endsWith(n):g.includes(n))return{key:g,value:S}}).filter(S=>S):(c?m.endsWith(n):m.includes(n))?u[Yp.DBI_DEFINITION_NAME].is_hash_attribute?{key:h,value:h}:u.getValues(h,{transaction:l}).map(S=>({key:h,value:S})):[]}).slice(o,i===void 0?void 0:i+(o||0))})}a(FU,"contains");function r5(e,t,r,n,s=!1,i=void 0,o=void 0){ha(e,r,n);let c=typeof n,l;return c==="string"?l="\uFFFF":c==="number"?l=1/0:c==="boolean"&&(l=!0),c_(e,t,r,n,l,s,i,o,!0,!1)}a(r5,"greaterThan");function n5(e,t,r,n,s=!1,i=void 0,o=void 0){ha(e,r,n);let c=typeof n,l;return c==="string"?l="\uFFFF":c==="number"?l=1/0:c==="boolean"&&(l=!0),c_(e,t,r,n,l,s,i,o,!1,!1)}a(n5,"greaterThanEqual");function s5(e,t,r,n,s=!1,i=void 0,o=void 0){ha(e,r,n);let c=typeof n,l;return c==="string"?l="\0":c==="number"?l=-1/0:c==="boolean"&&(l=!1),c_(e,t,r,l,n,s,i,o,!1,!0)}a(s5,"lessThan");function i5(e,t,r,n,s=!1,i=void 0,o=void 0){ha(e,r,n);let c=typeof n,l;return c==="string"?l="\0":c==="number"?l=-1/0:c==="boolean"&&(l=!1),c_(e,t,r,l,n,s,i,o,!1,!1)}a(i5,"lessThanEqual");function o5(e,t,r,n,s,i=!1,o=void 0,c=void 0){if(Wn.validateEnv(e),r===void 0)throw new Error(zt.ATTRIBUTE_REQUIRED);if(n===void 0)throw new Error(zt.START_VALUE_REQUIRED);if(s===void 0)throw new Error(zt.END_VALUE_REQUIRED);if(n=Wn.convertKeyValueToWrite(n),s=Wn.convertKeyValueToWrite(s),n>s)throw new Error(zt.END_VALUE_MUST_BE_GREATER_THAN_START_VALUE);return c_(e,t,r,n,s,i,o,c)}a(o5,"between");function a5(e,t,r,n){Wn.validateEnv(e);let s=e.database||e,i=e.database?e:null;if(t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);if(zp(r),r=l_(s,r),n===void 0)throw new Error(zt.ID_REQUIRED);let o=null,c=s.dbis[t].get(n,{transaction:i,lazy:r.length<3});return c&&(o=Wp.parseRow(c,r)),o}a(a5,"searchByHash");function c5(e,t,r){Wn.validateEnv(e);let n=e.database||e,s=e.database?e:null;if(t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);if(r===void 0)throw new Error(zt.ID_REQUIRED);let i=!0;return n.dbis[t].get(r,{transaction:s,lazy:!0})===void 0&&(i=!1),i}a(c5,"checkHashExists");function l5(e,t,r,n,s=[]){return qU(e,t,r,n,s),GU(e,t,r,n,s).map(i=>i[1])}a(l5,"batchSearchByHash");function u5(e,t,r,n,s=[]){qU(e,t,r,n,s);let i=new Map;for(let[o,c]of GU(e,t,r,n,s))i.set(o,c);return i}a(u5,"batchSearchByHashToMap");function GU(e,t,r,n,s=[]){return $c(e,t,t,(i,o,c)=>{r=l_(c,r);let l=r.length<3;return n.map(u=>{let f=c.dbis[t].get(u,{transaction:i,lazy:l});if(f)return[u,Wp.parseRow(f,r)];s.push(u)}).filter(u=>u)})}a(GU,"batchHashSearch");function qU(e,t,r,n,s){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.HASH_ATTRIBUTE_REQUIRED);if(zp(r),n==null)throw new Error(zt.IDS_REQUIRED);if(!n[Symbol.iterator])throw new Error(zt.IDS_MUST_BE_ITERABLE)}a(qU,"initializeBatchSearchByHash");function zp(e){if(!Array.isArray(e))throw e===void 0?new Error(zt.FETCH_ATTRIBUTES_REQUIRED):new Error(zt.FETCH_ATTRIBUTES_MUST_BE_ARRAY)}a(zp,"validateFetchAttributes");function ha(e,t,r){if(Wn.validateEnv(e),t===void 0)throw new Error(zt.ATTRIBUTE_REQUIRED);if(r===void 0)throw new Error(zt.SEARCH_VALUE_REQUIRED);if(r?.length>WZ)throw new Error(zt.SEARCH_VALUE_TOO_LARGE)}a(ha,"validateComparisonFunctions");function l_(e,t){return t.length===1&&KZ.SEARCH_WILDCARDS.indexOf(t[0])>=0&&(t=_a.listDBIs(e)),t}a(l_,"setGetWholeRowAttributes");$U.exports={searchAll:zZ,searchAllToMap:QZ,count:ZZ,countAll:JZ,equals:XZ,startsWith:e5,endsWith:t5,contains:FU,searchByHash:a5,setGetWholeRowAttributes:l_,batchSearchByHash:l5,batchSearchByHashToMap:u5,checkHashExists:c5,iterateDBI:jZ,greaterThan:r5,greaterThanEqual:n5,lessThan:s5,lessThanEqual:i5,between:o5}});var mu=C((eOe,zU)=>{var VU=require("lodash"),KU=ot(),Ge=require("joi"),d5=ie(),{hdb_schema_table:u_,checkValidTable:YU,hdb_table:WU,hdb_database:Qp}=Ai(),{handleHDBError:f5,hdb_errors:_5}=he(),{getDatabases:h5}=(xe(),P(ct)),{HTTP_STATUS_CODES:m5}=_5,p5=Ge.object({database:Qp,schema:Qp,table:WU,search_attribute:u_,search_value:Ge.any().required(),get_attributes:Ge.array().min(1).items(Ge.alternatives(u_,Ge.object())).optional(),desc:Ge.bool(),limit:Ge.number().integer().min(1),offset:Ge.number().integer().min(0)}),E5=Ge.object({database:Qp,schema:Qp,table:WU,operator:Ge.string().valid("and","or").default("and").lowercase(),offset:Ge.number().integer().min(0),limit:Ge.number().integer().min(1),get_attributes:Ge.array().min(1).items(Ge.alternatives(u_,Ge.object())).optional(),sort:Ge.object({attribute:Ge.alternatives(u_,Ge.array().min(1)),descending:Ge.bool().optional()}).optional(),conditions:Ge.array().min(1).items(Ge.alternatives(Ge.object({operator:Ge.string().valid("and","or").default("and").lowercase(),conditions:Ge.array()}),Ge.object({search_attribute:Ge.alternatives(u_,Ge.array().min(1)),search_type:Ge.string().valid("equals","contains","starts_with","ends_with","greater_than","greater_than_equal","less_than","less_than_equal","between","not_equal").optional(),search_value:Ge.when("search_type",{switch:[{is:"equals",then:Ge.any()},{is:"between",then:Ge.array().items(Ge.alternatives([Ge.string(),Ge.number()])).length(2)}],otherwise:Ge.alternatives(Ge.string(),Ge.number())}).required()}))).required()});zU.exports=function(e,t){let r=null;switch(t){case"value":r=KU.validateBySchema(e,p5);break;case"hashes":let i=function(o){s?s+=". "+o:s=o};var n=i;a(i,"addError");let s;i(YU("database",e.schema)),i(YU("table",e.table)),e.hash_values?Array.isArray(e.hash_values)?e.hash_values.every(o=>typeof o=="string"||typeof o=="number")||i("'hash_values' must be strings or numbers"):i("'hash_values' must be an array"):i("'hash_values' is required"),e.get_attributes?Array.isArray(e.get_attributes)?e.get_attributes.length===0?i("'get_attributes' must contain at least 1 item"):e.get_attributes.every(o=>typeof o=="string"||typeof o=="number")||i("'get_attributes' must be strings or numbers"):i("'get_attributes' must be an array"):i("'get_attributes' is required"),s&&(r=new Error(s.trim()));break;case"conditions":r=KU.validateBySchema(e,E5);break;default:throw new Error(`Error validating search, unknown type: ${t}`)}if(!r&&e.schema!=="system"){let s=d5.checkGlobalSchemaTable(e.schema,e.table);if(s)return f5(new Error,s,m5.NOT_FOUND);let o=h5()[e.schema][e.table].attributes,c=e.get_attributes?[...e.get_attributes]:[];t==="value"&&c.push(e.search_attribute);let l=a(f=>{for(let d=0,_=f.conditions.length;d<_;d++){let h=f.conditions[d];h.conditions?l(h):c.push(h.search_attribute)}},"addConditions");t==="conditions"&&l(e);let u=VU.filter(c,f=>f!=="*"&&!f.startsWith?.("$")&&f.attribute!=="*"&&!Array.isArray(f)&&!f.name&&!VU.some(o,d=>d===f||d.attribute===f||d.attribute===f.attribute));if(u&&u.length>0){let f=u.join(", ");return f=f.replace(/,([^,]*)$/," and$1"),new Error(`unknown attribute '${f}'`)}}return r}});var Uy=C((rOe,QU)=>{"use strict";var g5=_t(),S5=mu(),{getSchemaPath:T5}=gt();QU.exports=A5;function A5(e){let t=S5(e,"hashes");if(t)throw t;let r=T5(e.schema,e.table);return g5.openEnvironment(r,e.table)}a(A5,"initialize")});var xy=C((sOe,jU)=>{"use strict";var R5=hu(),y5=Uy();jU.exports=b5;async function b5(e){let t=await y5(e),r=t.useReadTransaction();r.database=t;let n=global.hdb_schema[e.schema][e.table];try{return R5.batchSearchByHashToMap(r,n.hash_attribute,e.get_attributes,e.hash_values)}finally{r.done()}}a(b5,"lmdbGetDataByHash")});var pu=C((oOe,JU)=>{"use strict";var By=class{static{a(this,"SearchByHashObject")}constructor(t,r,n,s){this.schema=t,this.table=r,this.hash_values=n,this.get_attributes=s}};JU.exports=By});var ZU=C((lOe,XU)=>{"use strict";var cOe=pu(),O5=hu(),N5=Uy();XU.exports=w5;async function w5(e){let t=await N5(e),r=global.hdb_schema[e.schema][e.table];return O5.batchSearchByHash(t,r.hash_attribute,e.get_attributes,e.hash_values)}a(w5,"lmdbSearchByHash")});var Ws=C((dOe,e0)=>{"use strict";var Hy=class{static{a(this,"SearchObject")}constructor(t,r,n,s,i,o,c,l=!1,u=void 0,f=void 0){this.schema=t,this.table=r,this.search_attribute=n,this.search_value=s,this.hash_attribute=i,this.get_attributes=o,this.end_value=c,this.reverse=l,this.limit=u,this.offset=f}};e0.exports=Hy});var jp=C((_Oe,o0)=>{"use strict";var jr=hu(),I5=_t(),C5=ie(),qe=Ft(),Vc=(k(),P(q)),P5=ao(),t0=Un().LMDB_ERRORS_ENUM,{getSchemaPath:D5}=gt(),mo=Vc.SEARCH_WILDCARDS;async function L5(e,t,r){let n;e.schema===Vc.SYSTEM_SCHEMA_NAME?n=P5[e.table]:n=global.hdb_schema[e.schema][e.table];let s=i0(e,n.hash_attribute,r,t);return n0(e,s,n.hash_attribute,r)}a(L5,"prepSearch");async function n0(e,t,r,n){let s=D5(e.schema,e.table),i=await I5.openEnvironment(s,e.table),o=s0(i,e,t,r),c=o.transaction||i;if([qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH,qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP,qe.SEARCH_TYPES.SEARCH_ALL,qe.SEARCH_TYPES.SEARCH_ALL_TO_MAP].indexOf(t)>=0)return o;if(M5(e,r)===!1){let f=e.search_attribute;if(f===r)return n?r0(o,()=>!0):o.map(_=>({[r]:_.key}));let d=a(_=>({[r]:_.value,[f]:_.key}),"toObject");return n?r0(o,d):o.map(d)}let u=e.search_attribute===r?o.map(f=>f.key):o.map(f=>f.value);return n===!0?jr.batchSearchByHashToMap(c,r,e.get_attributes,u):jr.batchSearchByHash(c,r,e.get_attributes,u)}a(n0,"executeSearch");function s0(e,t,r,n){let s,i=n;t.get_attributes.indexOf(n)<0&&(i=void 0);let{reverse:o,limit:c,offset:l}=t;switch(o=typeof o=="boolean"?o:!1,c=Number.isInteger(c)?c:void 0,l=Number.isInteger(l)?l:void 0,r){case qe.SEARCH_TYPES.EQUALS:s=jr.equals(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.CONTAINS:s=jr.contains(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.ENDS_WITH:case qe.SEARCH_TYPES._ENDS_WITH:s=jr.endsWith(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.STARTS_WITH:case qe.SEARCH_TYPES._STARTS_WITH:s=jr.startsWith(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH:return jr.batchSearchByHash(e,t.search_attribute,t.get_attributes,[t.search_value]);case qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP:return jr.batchSearchByHashToMap(e,t.search_attribute,t.get_attributes,[t.search_value]);case qe.SEARCH_TYPES.SEARCH_ALL:return jr.searchAll(e,n,t.get_attributes,o,c,l);case qe.SEARCH_TYPES.SEARCH_ALL_TO_MAP:return jr.searchAllToMap(e,n,t.get_attributes,o,c,l);case qe.SEARCH_TYPES.BETWEEN:s=jr.between(e,i,t.search_attribute,t.search_value,t.end_value,o,c,l);break;case qe.SEARCH_TYPES.GREATER_THAN:case qe.SEARCH_TYPES._GREATER_THAN:s=jr.greaterThan(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.GREATER_THAN_EQUAL:case qe.SEARCH_TYPES._GREATER_THAN_EQUAL:s=jr.greaterThanEqual(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.LESS_THAN:case qe.SEARCH_TYPES._LESS_THAN:s=jr.lessThan(e,i,t.search_attribute,t.search_value,o,c,l);break;case qe.SEARCH_TYPES.LESS_THAN_EQUAL:case qe.SEARCH_TYPES._LESS_THAN_EQUAL:s=jr.lessThanEqual(e,i,t.search_attribute,t.search_value,o,c,l);break;default:return Object.create(null)}return s}a(s0,"searchByType");function r0(e,t){let r=new Map;for(let n of e)r.set(n.value,t(n));return r}a(r0,"createMapFromIterable");function M5(e,t){if(e.get_attributes.length===1&&e.get_attributes[0]==="*")return!0;let r=[e.search_attribute];e.get_attributes.indexOf(t)>=0&&r.push(t);let n=!1;for(let s=0;s<e.get_attributes.length;s++)if(r.indexOf(e.get_attributes[s])<0){n=!0;break}return n}a(M5,"checkToFetchMore");function i0(e,t,r,n){if(C5.isEmpty(n)){let s=e.search_value;typeof s=="object"?s=JSON.stringify(s):s=s.toString();let i=s.charAt(0),o=s.charAt(s.length-1),c=!1;if(e.search_attribute===t&&(c=!0),mo.indexOf(s)>-1)return r===!0?qe.SEARCH_TYPES.SEARCH_ALL_TO_MAP:qe.SEARCH_TYPES.SEARCH_ALL;if(s.indexOf(mo[0])<0&&s.indexOf(mo[1])<0)return c===!0?r===!0?qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH_TO_MAP:qe.SEARCH_TYPES.BATCH_SEARCH_BY_HASH:qe.SEARCH_TYPES.EQUALS;if(mo.indexOf(i)>=0&&mo.indexOf(o)>=0)return e.search_value=e.search_value.slice(1,-1),qe.SEARCH_TYPES.CONTAINS;if(mo.indexOf(i)>=0)return e.search_value=e.search_value.substr(1),qe.SEARCH_TYPES.ENDS_WITH;if(mo.indexOf(o)>=0)return e.search_value=e.search_value.slice(0,-1),qe.SEARCH_TYPES.STARTS_WITH;if(s.includes(mo[0])||s.includes(mo[1]))return qe.SEARCH_TYPES.EQUALS;throw new Error(t0.UNKNOWN_SEARCH_TYPE)}else switch(n){case Vc.VALUE_SEARCH_COMPARATORS.BETWEEN:return qe.SEARCH_TYPES.BETWEEN;case Vc.VALUE_SEARCH_COMPARATORS.GREATER:return qe.SEARCH_TYPES.GREATER_THAN;case Vc.VALUE_SEARCH_COMPARATORS.GREATER_OR_EQ:return qe.SEARCH_TYPES.GREATER_THAN_EQUAL;case Vc.VALUE_SEARCH_COMPARATORS.LESS:return qe.SEARCH_TYPES.LESS_THAN;case Vc.VALUE_SEARCH_COMPARATORS.LESS_OR_EQ:return qe.SEARCH_TYPES.LESS_THAN_EQUAL;default:throw new Error(t0.UNKNOWN_SEARCH_TYPE)}}a(i0,"createSearchTypeFromSearchObject");o0.exports={executeSearch:n0,createSearchTypeFromSearchObject:i0,prepSearch:L5,searchByType:s0}});var c0=C((pOe,a0)=>{"use strict";var mOe=Ws(),v5=mu(),U5=ie(),x5=(k(),P(q)),B5=jp();a0.exports=H5;function H5(e,t){if(!U5.isEmpty(t)&&x5.VALUE_SEARCH_COMPARATORS_REVERSE_LOOKUP[t]===void 0)throw new Error(`Value search comparator - ${t} - is not valid`);let n=v5(e,"value");if(n)throw n;return B5.prepSearch(e,t,!0)}a(H5,"lmdbGetDataByValue")});var d_=C((SOe,l0)=>{"use strict";var gOe=Ws(),k5=mu(),F5=ie(),G5=(k(),P(q)),q5=jp();l0.exports=$5;async function $5(e,t){if(!F5.isEmpty(t)&&G5.VALUE_SEARCH_COMPARATORS_REVERSE_LOOKUP[t]===void 0)throw new Error(`Value search comparator - ${t} - is not valid`);let n=k5(e,"value");if(n)throw n;return q5.prepSearch(e,t,!1)}a($5,"lmdbSearchByValue")});var d0=C((ROe,u0)=>{"use strict";var AOe=Ft(),ky=class{static{a(this,"SearchByConditionsObject")}constructor(t,r,n,s,i=void 0,o=void 0,c="and"){this.schema=t,this.table=r,this.get_attributes=n,this.limit=i,this.offset=o,this.conditions=s,this.operator=c}},Fy=class{static{a(this,"SearchCondition")}constructor(t,r,n){this.search_attribute=t,this.search_type=r,this.search_value=n}},Gy=class{static{a(this,"SortAttribute")}constructor(t,r){this.attribute=t,this.desc=r}};u0.exports={SearchByConditionsObject:ky,SearchCondition:Fy,SortAttribute:Gy}});var p0=C((NOe,m0)=>{"use strict";var bOe=d0().SearchByConditionsObject,V5=Ws(),K5=mu(),qy=hu(),Jp=Ft(),{Resource:OOe}=(na(),P(GA)),h0=jp(),Y5=vy(),W5=require("lodash"),{getSchemaPath:z5}=gt(),f0=_t(),{handleHDBError:Q5,hdb_errors:j5}=he(),{HTTP_STATUS_CODES:J5}=j5,X5=1e8;m0.exports=Z5;async function Z5(e){let t=K5(e,"conditions");if(t)throw Q5(t,t.message,J5.BAD_REQUEST,void 0,void 0,!0);e.operator=e.operator?e.operator.toLowerCase():void 0,e.offset=Number.isInteger(e.offset)?e.offset:0;let r=z5(e.schema,e.table),n=await f0.openEnvironment(r,e.table),s=global.hdb_schema[e.schema][e.table];for(let u of e.conditions)f0.openDBI(n,u.search_attribute);let i=W5.sortBy(e.conditions,u=>{if(u.estimated_count===void 0){let f=u.search_type;f===Jp.SEARCH_TYPES.EQUALS?u.estimated_count=qy.count(n,u.search_attribute,u.search_value):f===Jp.SEARCH_TYPES.CONTAINS||f===Jp.SEARCH_TYPES.ENDS_WITH?u.estimated_count=1/0:u.estimated_count=X5}return u.estimated_count}),o=n.useReadTransaction();o.database=n;let c=await _0(o,e,i[0],s.hash_attribute),l;if(!e.operator||e.operator.toLowerCase()==="and"){let u=n.dbis[s.hash_attribute],f=i.slice(1).map(h0.filterByType),d=f.length,_=qy.setGetWholeRowAttributes(n,e.get_attributes);l=c.map(h=>u.get(h,{transaction:o,lazy:!0})),d>0&&(l=l.filter(h=>{for(let m=0;m<d;m++)if(!f[m](h))return!1;return!0})),(e.offset||e.limit!==void 0)&&(l=l.slice(e.offset,e.limit!==void 0?(e.offset||0)+e.limit:void 0)),l=l.map(h=>Y5.parseRow(h,_))}else{for(let d=1;d<i.length;d++){let _=i[d],h=await _0(o,e,_,s.hash_attribute);c=c.concat(h)}let u=new Set,f=e.offset||0;c=c.filter(d=>u.has(d)?!1:(u.add(d),!0)).slice(f,e.limit&&e.limit+f),l=qy.batchSearchByHash(o,s.hash_attribute,e.get_attributes,c)}return l.onDone=()=>{o.done()},l}a(Z5,"lmdbSearchByConditions");async function _0(e,t,r,n){let s=new V5(t.schema,t.table,void 0,void 0,n,t.get_attributes),i=r.search_type;return s.search_attribute=r.search_attribute,i===Jp.SEARCH_TYPES.BETWEEN?(s.search_value=r.search_value[0],s.end_value=r.search_value[1]):s.search_value=r.search_value,h0.searchByType(e,s,i,n).map(o=>o.value)}a(_0,"executeConditionSearch")});var f_=C((IOe,E0)=>{"use strict";var e9=(k(),P(q)).OPERATIONS_ENUM,$y=class{static{a(this,"DeleteObject")}constructor(t,r,n,s=void 0){this.operation=e9.DELETE,this.schema=t,this.table=r,this.hash_values=n,this.__origin=s}};E0.exports=$y});var Vy=C((POe,O0)=>{"use strict";var A0=Ws(),R0=f_(),y0=d_(),b0=a_(),Tn=(k(),P(q)),g0=ie(),S0=_t(),{getTransactionAuditStorePath:t9,getSchemaPath:r9}=gt(),T0=ee();O0.exports=n9;async function n9(e){try{if(g0.isEmpty(global.hdb_schema[e.schema])||g0.isEmpty(global.hdb_schema[e.schema][e.table]))throw new Error(`unknown schema:${e.schema} and table ${e.table}`);await s9(e),await i9(e);let t=r9(e.schema,e.table);try{await S0.deleteEnvironment(t,e.table)}catch(r){if(r.message==="invalid environment")T0.warn(`cannot delete environment for ${e.schema}.${e.table}, environment not found`);else throw r}try{let r=t9(e.schema,e.table);await S0.deleteEnvironment(r,e.table,!0)}catch(r){if(r.message==="invalid environment")T0.warn(`cannot delete environment for ${e.schema}.${e.table}, environment not found`);else throw r}}catch(t){throw t}}a(n9,"lmdbDropTable");async function s9(e){let t=new A0(Tn.SYSTEM_SCHEMA_NAME,Tn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_TABLE_KEY,`${e.schema}.${e.table}`,void 0,[Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),r=Array.from(await y0(t)),n=[];for(let i=0;i<r.length;i++){let o=r[i];n.push(o.id)}if(n.length===0)return;let s=new R0(Tn.SYSTEM_SCHEMA_NAME,Tn.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,n);await b0(s)}a(s9,"deleteAttributesFromSystem");async function i9(e){let t=new A0(Tn.SYSTEM_SCHEMA_NAME,Tn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY,e.table,void 0,[Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY,Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_KEY,Tn.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),r,n;try{r=Array.from(await y0(t))}catch(i){throw i}for(let i=0;i<r.length;i++){let o=r[i];o.name===e.table&&o.schema===e.schema&&(n=o)}if(!n)throw new Error(`${e.schema}.${e.table} was not found`);let s=new R0(Tn.SYSTEM_SCHEMA_NAME,Tn.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,[n.id]);try{await b0(s)}catch(i){throw i}}a(i9,"dropTableFromSystem")});var w0=C((LOe,N0)=>{"use strict";var o9=require("fs-extra"),a9=Ws(),c9=pu(),l9=f_(),u9=Vy(),d9=a_(),f9=xy(),_9=d_(),po=(k(),P(q)),{getSchemaPath:h9}=gt(),{handleHDBError:m9,hdb_errors:p9}=he(),{HDB_ERROR_MSGS:E9,HTTP_STATUS_CODES:g9}=p9;N0.exports=S9;async function S9(e){let t;try{t=await T9(e.schema);let r=new a9(po.SYSTEM_SCHEMA_NAME,po.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME,po.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_KEY,t,void 0,[po.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY]),n=Array.from(await _9(r));for(let o=0;o<n.length;o++){let c={schema:t,table:n[o].name};try{await u9(c)}catch(l){if(l.message!=="invalid environment")throw l}}let s=new l9(po.SYSTEM_SCHEMA_NAME,po.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,[t]);await d9(s);let i=h9(t);await o9.remove(i)}catch(r){throw r}}a(S9,"lmdbDropSchema");async function T9(e){let t=new c9(po.SYSTEM_SCHEMA_NAME,po.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME,[e],[po.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_NAME_KEY]),r,n;try{r=Array.from(await f9(t))}catch(s){throw s}for(let[,s]of r)s.name===e&&(n=e);if(!n)throw m9(new Error,E9.SCHEMA_NOT_FOUND(e),g9.NOT_FOUND,void 0,void 0,!0);return n}a(T9,"validateDropSchema")});var __=C((vOe,I0)=>{"use strict";var Ky=class{static{a(this,"CreateTableObject")}constructor(t,r,n){this.schema=t,this.table=r,this.hash_attribute=n}};I0.exports=Ky});var Wy=C((BOe,C0)=>{"use strict";var A9=require("fs-extra"),Xp=_t(),{getTransactionAuditStorePath:R9}=gt(),Yy=Ft(),xOe=__();C0.exports=y9;async function y9(e){let t;try{let r=R9(e.schema,e.table);await A9.mkdirp(r),t=await Xp.createEnvironment(r,e.table,!0)}catch(r){throw r.message=`unable to create transactions audit environment for ${e.schema}.${e.table} due to: ${r.message}`,r}try{Xp.createDBI(t,Yy.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,!1,!0),Xp.createDBI(t,Yy.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE,!0,!1),Xp.createDBI(t,Yy.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME,!0,!1)}catch(r){throw r.message=`unable to create dbi for ${e.schema}.${e.table} due to: ${r.message}`,r}return t}a(y9,"createTransactionsAuditEnvironment")});var L0=C((FOe,D0)=>{"use strict";var zy=(k(),P(q)),P0=_t(),b9=Dc(),{getSystemSchemaPath:O9,getSchemaPath:N9}=gt(),kOe=ao(),w9=Op(),Qy=bp(),I9=ee(),C9=Wy();D0.exports=P9;async function P9(e,t){let r=N9(t.schema,t.table),n=new Qy(t.schema,t.table,zy.TIME_STAMP_NAMES_ENUM.CREATED_TIME,void 0,!0),s=new Qy(t.schema,t.table,zy.TIME_STAMP_NAMES_ENUM.UPDATED_TIME,void 0,!0),i=new Qy(t.schema,t.table,t.hash_attribute,void 0,!1,!0);try{if(await P0.createEnvironment(r,t.table),e!==void 0){let o=await P0.openEnvironment(O9(),zy.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME);await b9.insertRecords(o,HDB_TABLE_INFO.hash_attribute,hdb_table_attributes,[e]),n.skip_table_check=!0,s.skip_table_check=!0,i.skip_table_check=!0,await jy(n),await jy(s),await jy(i)}await C9(t)}catch(o){throw o}}a(P9,"lmdbCreateTable");async function jy(e){try{await w9(e)}catch(t){I9.warn(`failed to create attribute ${e.attribute} due to ${t.message}`)}}a(jy,"createAttribute")});var v0=C((qOe,M0)=>{"use strict";var D9=qf(),L9=Sf(),M9=Vp(),h_=(k(),P(q)),v9=Dc().updateRecords,U9=_t(),{getSchemaPath:x9}=gt(),B9=i_(),H9=ee();M0.exports=k9;async function k9(e){try{let{schema_table:t,attributes:r}=D9(e);L9(e,r,t.hash_attribute),e.schema!==h_.SYSTEM_SCHEMA_NAME&&(r.includes(h_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||r.push(h_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),r.includes(h_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||r.push(h_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let n=await M9(e.hdb_auth_header,t,r),s=x9(e.schema,e.table),i=await U9.openEnvironment(s,e.table),o=await v9(i,t.hash_attribute,r,e.records,e.__origin?.timestamp);try{await B9(e,o)}catch(c){H9.error(`unable to write transaction due to ${c.message}`)}return{written_hashes:o.written_hashes,skipped_hashes:o.skipped_hashes,schema_table:t,new_attributes:n,txn_time:o.txn_time}}catch(t){throw t}}a(k9,"lmdbUpdateRecords")});var x0=C((VOe,U0)=>{"use strict";var F9=(k(),P(q)).OPERATIONS_ENUM,Jy=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=F9.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};U0.exports=Jy});var H0=C((WOe,B0)=>{"use strict";var YOe=x0(),G9=qf(),q9=Sf(),$9=Vp(),m_=(k(),P(q)),V9=Dc().upsertRecords,K9=_t(),{getSchemaPath:Y9}=gt(),W9=i_(),z9=ee(),{handleHDBError:Q9,hdb_errors:j9}=he();B0.exports=J9;async function J9(e){let t;try{t=G9(e)}catch(l){throw Q9(l,l.message,j9.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0)}let{schema_table:r,attributes:n}=t;q9(e,n,r.hash_attribute),e.schema!==m_.SYSTEM_SCHEMA_NAME&&(n.includes(m_.TIME_STAMP_NAMES_ENUM.CREATED_TIME)||n.push(m_.TIME_STAMP_NAMES_ENUM.CREATED_TIME),n.includes(m_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME)||n.push(m_.TIME_STAMP_NAMES_ENUM.UPDATED_TIME));let s=await $9(e.hdb_auth_header,r,n),i=Y9(e.schema,e.table),o=await K9.openEnvironment(i,e.table),c=await V9(o,r.hash_attribute,n,e.records,e.__origin?.timestamp);try{await W9(e,c)}catch(l){z9.error(`unable to write transaction due to ${l.message}`)}return{written_hashes:c.written_hashes,schema_table:r,new_attributes:s,txn_time:c.txn_time}}a(J9,"lmdbUpsertRecords")});var F0=C((QOe,k0)=>{"use strict";var Xy=class{static{a(this,"DeleteBeforeObject")}constructor(t,r,n){this.schema=t,this.table=r,this.timestamp=n}};k0.exports=Xy});var q0=C((JOe,G0)=>{"use strict";var Zy=class{static{a(this,"DeleteAuditLogsBeforeResults")}constructor(t=void 0,r=void 0,n=0){this.start_timestamp=t,this.end_timestamp=r,this.transactions_deleted=n}};G0.exports=Zy});var K0=C((eNe,V0)=>{"use strict";var eb=_t(),{getTransactionAuditStorePath:X9}=gt(),ZOe=F0(),p_=Ft(),Z9=ie(),$0=q0(),e7=require("util").promisify,t7=e7(setTimeout),r7=1e4,n7=100;V0.exports=s7;async function s7(e){let t=X9(e.schema,e.table),r=await eb.openEnvironment(t,e.table,!0),n=eb.listDBIs(r);eb.initializeDBIs(r,p_.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,n);let s,i=new $0;do s=await i7(r,e.timestamp),i.start_timestamp===void 0&&(i.start_timestamp=s.start_timestamp),s.end_timestamp!==void 0&&(i.end_timestamp=s.end_timestamp),i.transactions_deleted+=s.transactions_deleted,await t7(n7);while(s.transactions_deleted>0);return i}a(s7,"deleteAuditLogsBefore");async function i7(e,t){let r=new $0;try{let n=e.dbis[p_.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP],s;for(let{key:i,value:o}of n.getRange({start:!1})){if(i>=t)break;r.start_timestamp===void 0&&(r.start_timestamp=i),s=n.remove(i);let c=o[p_.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME];Z9.isEmpty(c)||(s=e.dbis[p_.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].remove(c,i));for(let l=0;l<o.hash_values.length;l++)s=e.dbis[p_.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE].remove(o.hash_values[l],i);if(r.transactions_deleted++,r.end_timestamp=i,r.transactions_deleted>r7)break}return await s,r}catch(n){throw n}}a(i7,"deleteTransactions")});var W0=C((rNe,Y0)=>{"use strict";var tb=class{static{a(this,"DropAttributeObject")}constructor(t,r,n){this.schema=t,this.table=r,this.attribute=n}};Y0.exports=tb});var Q0=C((iNe,z0)=>{"use strict";var o7=Ws(),a7=f_(),sNe=W0(),Ii=(k(),P(q)),c7=ie(),rb=_t(),l7=ao(),u7=d_(),d7=a_(),{getSchemaPath:f7}=gt();z0.exports=_7;async function _7(e,t=!0){let r;e.schema===Ii.SYSTEM_SCHEMA_NAME?r=l7[e.table]:r=global.hdb_schema[e.schema][e.table];let n=await m7(e),s=f7(e.schema,e.table),i=await rb.openEnvironment(s,e.table);return t===!0&&await h7(e,i,r.hash_attribute),rb.dropDBI(i,e.attribute),n}a(_7,"lmdbDropAttribute");async function h7(e,t,r){let n=rb.openDBI(t,r),s,i=e.attribute;for(let{key:o,value:c,version:l}of n.getRange({start:!1,versions:!0})){let u={};for(let f in c)f!==i&&(u[f]=c[f]);s=t.dbis[r].put(o,u,l)}await s}a(h7,"removeAttributeFromAllObjects");async function m7(e){let t=new o7(Ii.SYSTEM_SCHEMA_NAME,Ii.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,Ii.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_SCHEMA_TABLE_KEY,`${e.schema}.${e.table}`,void 0,[Ii.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY,Ii.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ATTRIBUTE_KEY]),n=Array.from(await u7(t)).filter(o=>o[Ii.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ATTRIBUTE_KEY]===e.attribute);if(c7.isEmptyOrZeroLength(n))throw new Error(`Attribute '${e.attribute}' was not found in '${e.schema}.${e.table}'`);let s=n.map(o=>o[Ii.SYSTEM_DEFAULT_ATTRIBUTE_NAMES.ATTR_ID_KEY]),i=new a7(Ii.SYSTEM_SCHEMA_NAME,Ii.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME,s);return d7(i)}a(m7,"dropAttributeFromSystem")});var tx=C((cNe,ex)=>{"use strict";var nb=_t(),Eu=Ft(),aNe=un(),sb=(k(),P(q)),j0=ie(),{getTransactionAuditStorePath:p7}=gt(),E7=hu(),Zp=du(),g7=ee();ex.exports=S7;async function S7(e){let t=p7(e.schema,e.table),r=await nb.openEnvironment(t,e.table,!0),n=nb.listDBIs(r);nb.initializeDBIs(r,Eu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,n);let s;switch(e.search_type){case sb.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.TIMESTAMP:return J0(r,e.search_values);case sb.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.HASH_VALUE:return s=global.hdb_schema[e.schema][e.table].hash_attribute,A7(r,e.search_values,s);case sb.READ_AUDIT_LOG_SEARCH_TYPES_ENUM.USERNAME:return T7(r,e.search_values);default:return J0(r)}}a(S7,"readAuditLog");function J0(e,t=[0,Date.now()]){j0.isEmpty(t[0])&&(t[0]=0),j0.isEmpty(t[1])&&(t[1]=Date.now());let r=e.dbis[Eu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP],n;for(let s of r.getKeys({start:t[1]}))if(s!==t[1]){n=s;break}return r.getRange({start:t[0],end:n}).map(({value:s})=>Object.assign(new Zp,s))}a(J0,"searchTransactionsByTimestamp");function T7(e,t=[]){let r=new Map;for(let n=0;n<t.length;n++){let s=t[n],i=[];for(let o of e.dbis[Eu.TRANSACTIONS_DBI_NAMES_ENUM.USER_NAME].getValues(s))i.push(o);r.set(s,Z0(e,i))}return Object.fromEntries(r)}a(T7,"searchTransactionsByUsername");function A7(e,t,r){let n=new Map;for(let c=0,l=t.length;c<l;c++){let u=t[c],f=E7.equals(e,Eu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP,Eu.TRANSACTIONS_DBI_NAMES_ENUM.HASH_VALUE,u);for(let{value:d}of f){let _=Number(d);n.has(_)?n.get(_).push(u.toString()):n.set(_,[u.toString()])}}let s=Array.from(n.keys()),i=Z0(e,s),o=new Map;for(let c=0;c<i.length;c++){let l=i[c],u=l.timestamp,f=n.get(u);X0(l,"records",r,f,o),X0(l,"original_records",r,f,o)}return Object.fromEntries(o)}a(A7,"searchTransactionsByHashValues");function X0(e,t,r,n,s){let i=e.timestamp;if(e[t])for(let o=0;o<e[t].length;o++){let c=e[t][o],l=c[r].toString();if(n.indexOf(l)>=0)if(s.has(l)){let u=s.get(l),f=u[u.length-1];if(f.timestamp===i)f[t]=[c];else{let d=new Zp(e.operation,e.user_name,i,void 0);d[t]=[c],u.push(d)}}else{let u=new Zp(e.operation,e.user_name,i,void 0);u[t]=[c],s.set(l,[u])}}}a(X0,"loopRecords");function Z0(e,t){let r=[];try{let n=e.dbis[Eu.TRANSACTIONS_DBI_NAMES_ENUM.TIMESTAMP];for(let s=0;s<t.length;s++)try{let i=n.get(t[s]);if(i){let o=Object.assign(new Zp,i);r.push(o)}}catch(i){g7.warn(i)}return r}catch(n){throw n}}a(Z0,"batchSearchTransactions")});var nx=C((fNe,rx)=>{"use strict";var{getSchemaPath:uNe}=gt(),dNe=_t(),{database:R7}=(xe(),P(ct));rx.exports={writeTransaction:y7};async function y7(e,t,r){return R7({database:e,table:t}).transaction(r)}a(y7,"writeTransaction")});var ax=C((hNe,ox)=>{"use strict";var{getSchemaPath:sx}=gt(),ix=_t();ox.exports={flush:b7,resetReadTxn:O7};async function b7(e,t){return(await ix.openEnvironment(sx(e,t),t.toString())).flushed}a(b7,"flush");async function O7(e,t){try{(await ix.openEnvironment(sx(e,t),t.toString())).resetReadTxn()}catch{}}a(O7,"resetReadTxn")});var dx=C((pNe,ux)=>{"use strict";var{Readable:N7}=require("stream"),{getDatabases:w7}=(xe(),P(ct)),{readSync:I7,openSync:C7,createReadStream:cx}=require("fs"),{open:P7}=require("lmdb"),lx=Bf(),D7=Hf(),{AUDIT_STORE_OPTIONS:L7}=(Ri(),P(fx)),{INTERNAL_DBIS_NAME:M7,AUDIT_STORE_NAME:v7}=Ft();ux.exports=x7;var ib=32768,U7=100;async function x7(e){let t=e.database||e.schema||"data",r=w7()[t],n=new Date().toISOString(),s=e.tables||e.table&&[e.table];if(s){let u=r[s[0]];if(!u)throw new Error(`Can not find table ${s[0]}`);let f=u.dbisDB,d=P7({noSync:!0,maxDbs:D7.MAX_DBS}),_,h=d.openDB(M7,new lx(!1)),m=f.useReadTransaction(),S=0,g=a(async function(E,T){T.encoding="binary",T.encoder=void 0;let N=d.openDB(E,T),M=f.openDB(E,T);for(let{key:H,version:X,value:W}of M.getRange({start:null,transaction:m,versions:M.useVersions}))_=N.put(H,W,X),S++%U7===0&&(await new Promise($=>setTimeout($,20)),m.openTimer&&(m.openTimer=0))},"copyDatabase");for(let{key:E,value:T}of f.getRange({transaction:m,start:!1}))if(s.some(N=>E.startsWith?.(N+"/"))){h.put(E,T);let[,N]=E.split("/"),M=!N,H=new lx(!M,M);await g(E,H)}e.include_audit&&await g(v7,{...L7}),await _;let R=cx(d.path);return R.headers=l(),R.on("close",()=>{m.done(),d.close()}),R}let o=r[Object.keys(r)[0]].primaryStore,c=C7(o.path);return o.transaction(()=>{let u=Buffer.alloc(ib);I7(c,u,0,ib),o.resetReadTxn();let f=o.useReadTransaction();f.renew();let d=cx(null,{fd:c,start:ib}),_=new N7.from(async function*(){yield u;for await(let h of d)f.openTimer&&(f.openTimer=0),yield h;f.done()}());return _.headers=l(),_});function l(){let u=new Map;return u.set("content-type","application/octet-stream"),u.set("content-disposition",`attachment; filename="${t}"`),u.set("date",n),u}}a(x7,"getBackup")});var mx=C((gNe,hx)=>{"use strict";var B7=ee(),{handleHDBError:H7}=he(),k7=NL(),F7=Op(),G7=Cy(),q7=wU(),$7=a_(),V7=xy(),K7=ZU(),Y7=c0(),W7=d_(),z7=p0(),Q7=w0(),j7=L0(),J7=v0(),X7=H0(),Z7=K0(),eee=Vy(),tee=Q0(),ree=tx(),nee=nx(),_x=ax(),see=dx(),ob=class extends k7{static{a(this,"LMDBBridge")}async searchByConditions(t){return z7(t)}async getDataByHash(t){return await V7(t)}async searchByHash(t){return await K7(t)}async getDataByValue(t,r){return await Y7(t,r)}async searchByValue(t){return await W7(t)}async createSchema(t){return await q7(t)}async dropSchema(t){return await Q7(t)}async createTable(t,r){return await j7(t,r)}async dropTable(t){return await eee(t)}async createAttribute(t){return await F7(t)}async createRecords(t){return await G7(t)}async updateRecords(t){return await J7(t)}async upsertRecords(t){try{return await X7(t)}catch(r){throw H7(r,null,null,B7.ERR,r)}}async deleteRecords(t){return await $7(t)}async dropAttribute(t){return await tee(t)}async deleteAuditLogsBefore(t){return await Z7(t)}async readAuditLog(t){return await ree(t)}writeTransaction(t,r,n){return nee.writeTransaction(t,r,n)}flush(t,r){return _x.flush(t,r)}resetReadTxn(t,r){return _x.resetReadTxn(t,r)}getBackup(t){return see(t)}};hx.exports=ob});var cb={};Ue(cb,{add:()=>eE,applyReverse:()=>px,getRecordAtTime:()=>ab,rebuildUpdateBefore:()=>tE});function eE(e,t,r){let n=e[t];typeof n=="bigint"?e[t]=n+BigInt(r.value):isNaN(e[t])?e[t]=r.value:e[t]=n+r.value}function tE(e,t,r){let n=null;for(let s in e)if(s in t){let i=t[s];if(i?.__op__){let o=e[s];if(o?.__op__)if(o.__op__===i.__op__)n||(n={}),n[s]=o;else throw new Error("Can not merge updates with different operations");else n||(n={}),n[s]=o,eE(n,s,i)}else r&&(n||(n={}),n[s]=i)}else n||(n={}),n[s]=e[s];return n}function px(e,t){for(let r in t){let n=t[r];if(n?.__op__){let s=iee[n.__op__]?.reverse;if(s)s(e,r,{value:n.value});else throw new Error(`Unsupported operation ${n.__op__}`)}else e[r]=Ex}}function ab(e,t,r){let n=r.rootStore.auditStore,s={...e.value},i=e.localTime;for(;i>t;){let l=n.get(i),u=St(l);switch(u.type){case"put":s=u.getValue(r);break;case"patch":px(s,u.getValue(r));break;case"delete":s=null}i=u.previousLocalTime}let o={},c=0;for(let l in s)s[l]===Ex&&(o[l]=!0,c++);for(;c>0&&i>0;){let l=n.get(i),u=St(l),f;switch(u.type){case"put":f=u.getValue(r);break;case"patch":f=u.getValue(r);break}for(let d in f)o[d]&&(s[d]=f[d],o[d]=!1,c--);i=u.previousLocalTime}if(c>0)for(let l in o)s[l]=null;return s}var iee,Ex,rE=Re(()=>{Ri();a(eE,"add");eE.reverse=function(e,t,r){let n=e[t];typeof n=="bigint"?e[t]=n-BigInt(r.value):isNaN(e[t])||(e[t]=n-r.value)};iee={add:eE};a(tE,"rebuildUpdateBefore");a(px,"applyReverse");Ex={};a(ab,"getRecordAtTime")});function An(e){let t=e.getChanges();return t||(t=Object.create(null),e._setChanges(t)),t}function oE(e,t){let r=e.prototype,n={},s=t.attributes||t.properties||[];for(let c of s){let l=c.name,u,f;if(c.resolve)f={get(){return c.resolve(this,this.getContext?.())},set(d){return c.set(this,d)},configurable:!0};else{switch(c.type){case"String":u=a(function(d){if(!(typeof d=="string"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a string, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"ID":u=a(function(d){if(!(typeof d=="string"||d?.length>0&&d.every?.(_=>typeof _=="string")||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a string, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Float":case"Number":u=a(function(d){let _=d?.__op__?d.value:d;if(!(typeof _=="number"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a number, attempt to assign ${_}`);An(this)[l]=d},"set");break;case"Int":u=a(function(d){let _=d?.__op__?d.value:d;if(!(_>>0===_||d==null&&c.nullable!==!1))if(typeof _=="number"&&Math.abs((_>>0)-_)<=1)_=Math.round(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be an integer between -2147483648 and 2147483647, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Long":u=a(function(d){let _=d?.__op__?d.value:d;if(!(Math.round(_)===d&&Math.abs(_)<=9007199254740992||d==null&&c.nullable!==!1))if(typeof _=="number"&&Math.abs(_)<=9007199254740992)_=Math.round(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be an integer between -9007199254740992 and 9007199254740992, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"BigInt":u=a(function(d){let _=d?.__op__?d.value:d;if(!(typeof _=="bigint"||d==null&&c.nullable!==!1))if(typeof _=="string"||typeof _=="number")_=BigInt(_),d?.__op__?d.value=_:d=_;else throw new zn.ClientError(`${l} must be a number, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Boolean":u=a(function(d){if(!(typeof d=="boolean"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a boolean, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Date":u=a(function(d){if(!(d instanceof Date||d==null&&c.nullable!==!1))if(typeof d=="string"||typeof d=="number")d=new Date(d);else throw new zn.ClientError(`${l} must be a Date, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Bytes":u=a(function(d){if(!(d instanceof Uint8Array||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a Buffer or Uint8Array, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Blob":u=a(function(d){if(!(d instanceof gi||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be a Blob, attempt to assign ${d}`);An(this)[l]=d},"set");break;case"Any":case void 0:u=a(function(d){An(this)[l]=d},"set");break;default:u=a(function(d){if(!(typeof d=="object"||d==null&&c.nullable!==!1))throw new zn.ClientError(`${l} must be an object, attempt to assign ${d}`);An(this)[l]=d},"set")}f={get(){let d=this.getChanges?.();if(d&&l in d){let h=d[l];if(h?.__op__){let m=this.getRecord()?.[l];return h.update(m)}return h}let _=this.getRecord()?.[l];if(_&&typeof _=="object"){let h=lb(_,c);if(h)return d||this._setChanges(d=Object.create(null)),d[l]=h}return _},set:u,enumerable:!0,configurable:!0}}f.get.isAttribute=!0,n[l]=f,(!(l in r)||Object.getOwnPropertyDescriptor(r,l)?.get?.isAttribute)&&Object.defineProperty(r,l,f)}i("getProperty",function(c){let l=n[c];if(l)return l.get.call(this);let u=this.getChanges();return u?.[c]!==void 0?u[c]:this.getRecord()?.[c]}),i("set",function(c,l){let u=n[c];if(u)return u.set.call(this,l);if(t.sealed)throw new zn.ClientError("Can not add a property to a sealed table schema");An(this)[c]=l}),i("deleteProperty",function(c){An(this)[c]=void 0}),i("toJSON",function(){let c=this.getChanges?.(),l;for(let f in c){l||(l={...this.getRecord()});let d=c[f];if(d?.__op__){let _=l[f];d=d.update(_)}l[f]=d}return Object.keys(this).length>0&&(l||(l={...this.getRecord()}),Object.assign(l,this)),l||this.getRecord()}),r.get||i("get",r.getProperty),r.delete||i("delete",r.deleteProperty),r.then||i("then",null);function i(c,l){Object.defineProperty(r,c,{value:l,configurable:!0})}a(i,"setMethod");let o=r;do{let c=Object.getPrototypeOf(o);if(c===Object.prototype){Object.setPrototypeOf(o,Sx);break}o=c}while(o&&o!==Sx)}function lb(e,t){let r;switch(e.constructor){case Object:return t?(r=t.TrackedObject,r||(t.TrackedObject=r=class extends E_{static{a(this,"TrackedObject")}},oE(r,t)),new r(e)):new E_(e);case Array:let n=new sE(e.length,e);for(let s=0,i=e.length;s<i;s++){let o=e[s];o&&typeof o=="object"&&(o=lb(o,t?.elements)),n[s]=o}return n;default:return e}}function aE(e){let t=e.getChanges?.(),r;for(let s in t){r||(r=e.getRecord?{...e.getRecord()}:{});let i=t[s];if(i&&typeof i=="object")if(i.__op__){let o=r[s];i=i.update(o)}else i=aE(i);r[s]=i}return Object.keys(e).length>0&&(r||(r=e.getRecord?{...e.getRecord()}:{}),Object.assign(r,e)),r||e.getRecord?.()||e}function gu(e,t=e.getChanges?.()){let r;if(e.getRecord&&e.constructor===Array&&!Object.isFrozen(e)){r=e;for(let n=0,s=e.length;n<s;n++){let i=e[n];if(i&&typeof i=="object"){let o=gu(i);o!==i&&r===e&&(r=e.slice(0)),i=o}r[n]=i}return Object.freeze(r)}for(let n in t){r||(r={...e.getRecord?.()});let s=t[n];if(s&&typeof s=="object")if(s.__op__){let i=cb[s?.__op__];if(i)i(r,n,s);else throw new Error("Invalid CRDT operation "+s.__op__);continue}else s=gu(s);r[n]=s}if(!Array.isArray(e))for(let n in e)oee.call(e,n)&&(r||(r={...e.getRecord?.()}),r[n]=e[n]);return r?Object.freeze(r):e.getRecord?.()??e}function nE(e){let t=e.getRecord?.();if(t===void 0)return!0;if(e.constructor===Array){if(!t||e[Kc]||e.length!==t.length)return!0;for(let r=0,n=e.length;r<n;r++){let s=t[r],i=e[r];if(s&&i?.getRecord?.()===s){if(nE(i))return!0}else return!0}}else{let r=e.getChanges?.();if(r&&!t)return!0;for(let n in r){let s=r[n];if(s&&typeof s=="object"){let i=t[n];if(i&&s.getRecord?.()===i){if(nE(s))return!0}else return!0}else return!0}}return!1}var zn,gx,Sx,E_,oee,Kc,sE,iE,ub=Re(()=>{zn=v(he());rE();hn();a(An,"getChanges");a(oE,"assignTrackedAccessors");gx=Object.prototype,Sx=new Proxy({},{get(e,t,r){if(typeof t=="string"){if(t==="then"||t==="getRecord"||t==="getChanges")return;if(gx[t])return gx[t];let n=r.getChanges?.();if(n&&t in n)return n[t];let s=r.getRecord?.()?.[t];if(s&&typeof s=="object"){let i=lb(s);if(i)return n||(n=Object.create(null),r._setChanges(n)),n[t]=i,i}return s}}});a(lb,"trackObject");E_=class{static{a(this,"GenericTrackedObject")}#e;#t;constructor(t){if(t?.getRecord)throw new Error("Can not track an already tracked object, check for circular references");this.#e=t}getRecord(){return this.#e}setRecord(t){this.#e=t}getChanges(){return this.#t}_setChanges(t){this.#t=t}};oE(E_,{});a(aE,"collapseData");oee=Object.prototype.hasOwnProperty;a(gu,"updateAndFreeze");a(nE,"hasChanges");Kc=Symbol.for("has-array-changes"),sE=class extends Array{static{a(this,"TrackedArray")}#e;[Kc];constructor(t,r){super(t),this.#e=r}getRecord(){return this.#e}splice(...t){return this[Kc]=!0,super.splice(...t)}push(...t){return this[Kc]=!0,super.push(...t)}pop(){return this[Kc]=!0,super.pop()}unshift(...t){return this[Kc]=!0,super.unshift(...t)}shift(){return this[Kc]=!0,super.shift()}};sE.prototype.constructor=Array;iE=class{constructor(t){this.value=t}static{a(this,"Addition")}__op__="add";update(t){return(+t||0)+this.value}}});var wx={};Ue(wx,{ResourceBridge:()=>_b});function hb({get_attributes:e},t){if(e){if(e[0]==="*"){if(t.schemaDefined)return;e=t.attributes.map(r=>r.name)}return e.forceNulls=!0,e}}function Ax(e,t){let r=Ci(e),n=hb(e,r);if(!r)throw new zs.ClientError(`Table ${e.table} not found`);let s;n&&r.attributes.length-n.length>2&&n.length<5&&(s=!0);let i={user:e.hdb_user,onlyIfCached:e.onlyIfCached,noCacheStore:e.noCacheStore,noCache:e.noCache,replicateFrom:e.replicateFrom},o;It(i,()=>new Promise(u=>o=u));let c=e.ids||e.hash_values,l=0;return{[Symbol.asyncIterator](){return{async next(){if(l<c.length){let u=c[l++],f;try{f=await r.get({id:u,lazy:s,select:n},i),f=f&&aE(f)}catch(d){f={message:d.toString()}}return t?{value:{key:u,value:f}}:{value:f}}else return o(),{done:!0}},return(u){return o(),{value:u,done:!0}},throw(u){return o(),{done:!0}}}}}}function Ci(e){let t=e.database||e.schema||cee,r=Xe()[t];if(!r)throw(0,zs.handleHDBError)(new Error,aee.SCHEMA_NOT_FOUND(t),404);return r[e.table]}function Rx(e,t,r){let n=e.length+t.length,s=n===1?"record":"records";return{message:`${e.length} of ${n} ${s} successfully deleted`,deleted_hashes:e,skipped_hashes:t,txn_time:r}}async function*yx(e,t,r,n){let s,i=0;for await(let o of e.getHistory(t,r)){let c=o.operation??o.type;c==="put"&&(c="upsert");let{id:l,version:u,value:f}=o;if(s?.timestamp===u)s.hash_values.push(l),s.records.push(f);else{if(s&&(yield s,i++,n&&n<=i)){s=void 0;break}s={operation:c,user_name:o.user,timestamp:u,hash_values:[l],records:[f]}}}s&&(yield s)}var bx,cE,zs,Ox,db,fb,Nx,aee,cee,lee,uee,Tx,_b,Ix=Re(()=>{"use strict";bx=v(mx()),cE=v(mu()),zs=v(he());xe();Ox=v(qf());k();db=v(ho()),fb=v(Ys()),Nx=v(ie());mc();ub();({HDB_ERROR_MSGS:aee}=zs.hdb_errors),cee="data",lee=1e4,uee=10,_b=class extends bx.default{static{a(this,"ResourceBridge")}constructor(t){super(t),Tx=this}async searchByConditions(t){t.select!==void 0&&(t.get_attributes=t.select);for(let o of t.conditions||[])o?.attribute!==void 0&&(o.search_attribute=o.attribute),o?.comparator!==void 0&&(o.search_type=o.comparator),o?.value!==void 0&&(o.search_value=o.value);let r=(0,cE.default)(t,"conditions");if(r)throw(0,zs.handleHDBError)(r,r.message,400,void 0,void 0,!0);let n=Ci(t);if(!n)throw new zs.ClientError(`Table ${t.table} not found`);let s=t.conditions.map(i);function i(o){return o.conditions?(o.conditions=o.conditions.map(i),o):{attribute:o.search_attribute??o.attribute,comparator:o.search_type??o.comparator,value:o.search_value!==void 0?o.search_value:o.value}}return a(i,"mapCondition"),n.search({conditions:s,operator:t.operator?t.operator.toLowerCase():void 0,limit:t.limit,offset:t.offset,reverse:t.reverse,select:hb(t,n),sort:t.sort,allowFullScan:!0},{onlyIfCached:t.onlyIfCached,noCacheStore:t.noCacheStore,noCache:t.noCache,replicateFrom:t.replicateFrom})}async createTable(t,r){let n=r.attributes,s=!!n,i=r.primary_key||r.hash_attribute;if(n)for(let o of n)o.is_primary_key?(o.isPrimaryKey=!0,delete o.is_primary_key):o.name===i&&i&&(o.isPrimaryKey=!0);else{if(!i)throw new zs.ClientError("A primary key must be specified with a `primary_key` property or with `attributes`");n=[{name:i,isPrimaryKey:!0},{name:"__createdtime__",indexed:!0},{name:"__updatedtime__",indexed:!0}]}ft({database:r.database??r.schema,table:r.table,attributes:n,schemaDefined:s,expiration:r.expiration,audit:r.audit})}async createAttribute(t){return await Ci(t).addAttributes([{name:t.attribute,indexed:t.indexed??!0}]),`attribute ${t.schema}.${t.table}.${t.attribute} successfully created.`}async dropAttribute(t){let r=Ci(t);if(await r.removeAttributes([t.attribute]),!r.schemaDefined){let n=t.attribute,s,i=a((o,c,l)=>(c={...c},delete c[n],r.primaryStore.ifVersion(o,l,()=>r.primaryStore.put(o,c,l)).then(u=>{if(!u){let{value:f,version:d}=r.primaryStore.getEntry(o);return i(o,f,d)}})),"deleteRecord");for(let{key:o,value:c,version:l}of r.primaryStore.getRange({start:!0,versions:!0}))s=i(o,c,l),await new Promise(u=>setImmediate(u));await s}return`successfully deleted ${t.schema}.${t.table}.${t.attribute}`}dropTable(t){Ci(t).dropTable()}createSchema(t){return Su({database:t.schema,table:null}),db.signalSchemaChange(new fb.SchemaEventMsg(process.pid,Yt.CREATE_SCHEMA,t.schema))}async dropSchema(t){await mb(t.schema),db.signalSchemaChange(new fb.SchemaEventMsg(process.pid,Yt.DROP_SCHEMA,t.schema))}async updateRecords(t){return t.requires_existing=!0,this.upsertRecords(t)}async createRecords(t){return t.requires_no_existing=!0,Tx.upsertRecords(t)}async upsertRecords(t){let{schema_table:r,attributes:n}=(0,Ox.default)(t),s,i=Xe()[t.schema][t.table],o={user:t.hdb_user,expiresAt:t.expiresAt,originatingOperation:t.operation};return t.replicateTo&&(o.replicateTo=t.replicateTo),t.replicatedConfirmation&&(o.replicatedConfirmation=t.replicatedConfirmation),It(o,async c=>{if(!i.schemaDefined){s=[];for(let f of n)i.attributes.find(_=>_.name==f)||s.push(f);s.length>0&&await i.addAttributes(s.map(f=>({name:f,indexed:!0})))}let l=[],u=[];for(let f of t.records){let d=f[i.primaryKey],_=d!=null&&await i.get(d,o);if(t.requires_existing&&!_||t.requires_no_existing&&_){u.push(f[i.primaryKey]);continue}_&&(_=aE(_));for(let h in f)if(Object.prototype.hasOwnProperty.call(f,h)){let m=f[h];if(typeof m=="function")try{let S=m([[_]]);Array.isArray(S)&&(m=S[0].func_val,f[h]=m)}catch(S){throw S.message+="Trying to set key "+h+" on object"+JSON.stringify(f),S}}if(_)for(let h in _)Object.prototype.hasOwnProperty.call(f,h)||(f[h]=_[h]);await(d==null?i.create(f,o):i.put(f,o)),l.push(f[i.primaryKey])}return{txn_time:c.timestamp,written_hashes:l,new_attributes:s,skipped_hashes:u}})}async deleteRecords(t){let r=Xe()[t.schema][t.table],n={user:t.hdb_user};return t.replicateTo&&(n.replicateTo=t.replicateTo),t.replicatedConfirmation&&(n.replicatedConfirmation=t.replicatedConfirmation),It(n,async s=>{let i=t.hash_values||t.records.map(l=>l[r.primaryKey]),o=[],c=[];for(let l of i)await r.delete(l,n)?o.push(l):c.push(l);return Rx(o,c,s.timestamp)})}async deleteRecordsBefore(t){let r=Xe()[t.schema][t.table];if(!r.createdTimeProperty)throw new zs.ClientError("Table must have a '__createdtime__' attribute or @createdTime timestamp defined to perform this operation");let n=await r.search({conditions:[{attribute:r.createdTimeProperty.name,value:Date.parse(t.date),comparator:Um.LESS}]}),s=!1,i=[],o=[],c=0,l=[],u=a(async()=>{let f=await this.deleteRecords({schema:t.schema,table:t.table,hash_values:l});i.push(...f.deleted_hashes),o.push(...f.skipped_hashes),await(0,Nx.async_set_timeout)(uee),l=[],s=!0},"chunkDelete");for await(let f of n)l.push(f[r.primaryKey]),c++,c%lee===0&&await u();return l.length>0&&await u(),s?Rx(i,o,void 0):{message:"No records found to delete"}}searchByHash(t){t.select!==void 0&&(t.get_attributes=t.select);let r=(0,cE.default)(t,"hashes");if(r)throw r;return Ax(t)}async getDataByHash(t){let r=new Map;t._returnKeyValue=!0;for await(let{key:n,value:s}of Ax(t,!0))r.set(n,s);return r}searchByValue(t,r){if(r&&TA[r]===void 0)throw new Error(`Value search comparator - ${r} - is not valid`);t.select!==void 0&&(t.get_attributes=t.select),t.attribute!==void 0&&(t.search_attribute=condition.attribute),t.value!==void 0&&(t.search_value=condition.value);let n=(0,cE.default)(t,"value");if(n)throw n;let s=Ci(t);if(!s)throw new zs.ClientError(`Table ${t.table} not found`);let i=t.search_value;i.includes?.("*")&&(i.startsWith("*")?i.endsWith("*")?i!=="*"&&(r="contains",i=i.slice(1,-1)):(r="ends_with",i=i.slice(1)):i.endsWith("*")&&(r="starts_with",i=i.slice(0,-1))),r===Um.BETWEEN&&(i=[i,t.end_value]);let o=i==="*"?[]:[{attribute:t.search_attribute,value:i,comparator:r}];return s.search({conditions:o,allowFullScan:!0,limit:t.limit,offset:t.offset,reverse:t.reverse,sort:t.sort,select:hb(t,s)},{onlyIfCached:t.onlyIfCached,noCacheStore:t.noCacheStore,noCache:t.noCache,replicateFrom:t.replicateFrom})}async getDataByValue(t,r){let n=new Map,s=Ci(t);t.get_attributes&&!t.get_attributes.includes(s.primaryKey)&&t.get_attributes[0]!=="*"&&t.get_attributes.push(s.primaryKey);for await(let i of this.searchByValue(t,r))n.set(i[s.primaryKey],i);return n}resetReadTxn(t,r){Ci({schema:t,table:r})?.primaryStore.resetReadTxn()}async deleteAuditLogsBefore(t){return Ci(t).deleteHistory(t.timestamp,t.cleanup_deleted_records)}async readAuditLog(t){let r=Ci(t),n={};switch(t.search_type){case xm.HASH_VALUE:for(let i of t.search_values)n[i]=(await r.getHistoryOfRecord(i)).map(o=>{let c=o.operation??o.type;return c==="put"&&(c="upsert"),{operation:c,timestamp:o.version,user_name:o.user,hash_values:[i],records:[o.value]}});return n;case xm.USERNAME:let s=t.search_values;for await(let i of yx(r))s.includes(i.user_name)&&(n[i.user_name]||(n[i.user_name]=[])).push(i);return n;default:return yx(r,t.search_values?.[0],t.search_values?.[1],t.limit)}}};a(hb,"getSelect");a(Ax,"getRecords");a(Ci,"getTable");a(Rx,"createDeleteResponse");a(yx,"groupRecordsInHistory")});var qn=C((DNe,Cx)=>{"use strict";var{ResourceBridge:dee}=(Ix(),P(wx)),fee=le();fee.initSync();var lE;function _ee(){return lE||(lE=new dee,lE)}a(_ee,"getBridge");Cx.exports=_ee()});var Sn=C((MNe,Mx)=>{"use strict";var dE=sR(),Ur=ie(),hee=require("util"),fE=qn(),mee=$s(),Px=ee(),{handleHDBError:Yc,hdb_errors:pee}=he(),{HTTP_STATUS_CODES:Wc}=pee,Eee=hee.promisify(mee.getTableSchema),gee="updated",Dx="inserted",Lx="upserted";Mx.exports={insert:Tee,update:Aee,upsert:Ree,validation:See,flush:yee};async function See(e){if(Ur.isEmpty(e))throw new Error("invalid update parameters defined.");if(Ur.isEmptyOrZeroLength(e.schema))throw new Error("invalid database specified.");if(Ur.isEmptyOrZeroLength(e.table))throw new Error("invalid table specified.");let t=await Eee(e.schema,e.table),r=dE(e);if(r)throw r;if(!Array.isArray(e.records))throw new Error("records must be an array");let n=t.hash_attribute,s=new Set,i={},o=!1;return e.operation==="update"&&(o=!0),e.records.forEach(c=>{if(o&&Ur.isEmptyOrZeroLength(c[n]))throw Px.error("a valid hash attribute must be provided with update record:",c),new Error("a valid hash attribute must be provided with update record");if(!Ur.isEmptyOrZeroLength(c[n])&&(c[n]==="null"||c[n]==="undefined"))throw Px.error(`a valid hash value must be provided with ${e.operation} record:`,c),new Error(`"${c[n]}" is not a valid hash attribute value`);!Ur.isEmpty(c[n])&&c[n]!==""&&s.has(Ur.autoCast(c[n]))&&(c.skip=!0),s.add(Ur.autoCast(c[n]));for(let l in c)i[l]=1}),i[n]=1,{schema_table:t,hashes:Array.from(s),attributes:Object.keys(i)}}a(See,"validation");async function Tee(e){if(e.operation!=="insert")throw new Error("invalid operation, must be insert");let t=dE(e);if(t)throw Yc(new Error,t.message,Wc.BAD_REQUEST);Ur.transformReq(e);let r=Ur.checkSchemaTableExist(e.schema,e.table);if(r)throw Yc(new Error,r,Wc.BAD_REQUEST);let n=await fE.createRecords(e);return uE(Dx,n.written_hashes,e,n.skipped_hashes,n.new_attributes,n.txn_time)}a(Tee,"insertData");async function Aee(e){if(e.operation!=="update")throw new Error("invalid operation, must be update");let t=dE(e);if(t)throw Yc(new Error,t.message,Wc.BAD_REQUEST);Ur.transformReq(e);let r=Ur.checkSchemaTableExist(e.schema,e.table);if(r)throw Yc(new Error,r,Wc.BAD_REQUEST);let n=await fE.updateRecords(e);return Ur.isEmpty(n.existing_rows)?uE(gee,n.written_hashes,e,n.skipped_hashes,n.new_attributes,n.txn_time):uE(n.update_action,[],e,n.hashes,void 0,n.txn_time)}a(Aee,"updateData");async function Ree(e){if(e.operation!=="upsert")throw Yc(new Error,"invalid operation, must be upsert",Wc.INTERNAL_SERVER_ERROR);let t=dE(e);if(t)throw Yc(new Error,t.message,Wc.BAD_REQUEST);Ur.transformReq(e);let r=Ur.checkSchemaTableExist(e.schema,e.table);if(r)throw Yc(new Error,r,Wc.BAD_REQUEST);let n=await fE.upsertRecords(e);return uE(Lx,n.written_hashes,e,[],n.new_attributes,n.txn_time)}a(Ree,"upsertData");function uE(e,t,r,n,s,i){let o={message:`${e} ${t.length} of ${t.length+n.length} records`,new_attributes:s,txn_time:i};return e===Dx?(o.inserted_hashes=t,o.skipped_hashes=n,o):e===Lx?(o.upserted_hashes=t,o):(o.update_hashes=t,o.skipped_hashes=n,o)}a(uE,"returnObject");function yee(e){return Ur.transformReq(e),fE.flush(e.schema,e.table)}a(yee,"flush")});var kx=C((UNe,Hx)=>{var Tu=require("validate.js"),Ux=ot(),Au=(k(),P(q)),{handleHDBError:bee,hdb_errors:Oee}=he(),{HDB_ERROR_MSGS:Qt,HTTP_STATUS_CODES:Nee}=Oee,pb=a(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),wee={STRUCTURE_USER:"structure_user"},vx=Object.values(Au.ROLE_TYPES_ENUM),Iee="attribute_permissions",Cee="attribute_name",{PERMS_CRUD_ENUM:Ru}=Au,Pee=[Iee,...Object.values(Ru)],xx=[Ru.READ,Ru.INSERT,Ru.UPDATE],Dee=[Cee,...xx];function Lee(e){let t=pb();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,Bx(e,t)}a(Lee,"addRoleValidation");function Mee(e){let t=pb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,Bx(e,t)}a(Mee,"alterRoleValidation");function vee(e){let t=pb();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,Ux.validateObject(e,t)}a(vee,"dropRoleValidation");var Uee=["operation","role","id","permission","hdb_user","access"];function Bx(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let o=0,c=n.length;o<c;o++)Uee.includes(n[o])||s.push(n[o]);s.length>0&&nr(Qt.INVALID_ROLE_JSON_KEYS(s),r);let i=Ux.validateObject(e,t);if(i&&i.message.split(",").forEach(o=>{nr(o,r)}),e.permission){let o=xee(e);o&&nr(o,r),vx.forEach(c=>{e.permission[c]&&!Tu.isBoolean(e.permission[c])&&nr(Qt.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let o in e.permission)if(vx.indexOf(o)<0){if(o===wee.STRUCTURE_USER){let l=e.permission[o];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,f=l.length;u<f;u++){let d=l[u];global.hdb_schema[d]||nr(Qt.SCHEMA_NOT_FOUND(d),r)}continue}nr(Qt.STRUCTURE_USER_ROLE_TYPE_ERROR(o),r);continue}let c=e.permission[o];if(!o||!global.hdb_schema[o]){nr(Qt.SCHEMA_NOT_FOUND(o),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[o][l]){nr(Qt.TABLE_NOT_FOUND(o,l),r);continue}if(Object.keys(u).forEach(f=>{Pee.includes(f)||nr(Qt.INVALID_PERM_KEY(f),r,o,l)}),Object.values(Ru).forEach(f=>{Tu.isDefined(u[f])?Tu.isBoolean(u[f])||nr(Qt.TABLE_PERM_NOT_BOOLEAN(f),r,o,l):nr(Qt.TABLE_PERM_MISSING(f),r,o,l)}),u.attribute_permissions===void 0){nr(Qt.ATTR_PERMS_ARRAY_MISSING,r,o,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){nr(Qt.ATTR_PERMS_NOT_ARRAY,r,o,l);continue}if(u.attribute_permissions){let f=global.hdb_schema[o][l].attributes.map(({attribute:_})=>_),d={read:!1,insert:!1,update:!1};for(let _ in u.attribute_permissions){let h=u.attribute_permissions[_];if(Object.keys(h).forEach(S=>{!Dee.includes(S)&&S!==Ru.DELETE&&nr(Qt.INVALID_ATTR_PERM_KEY(S),r,o,l)}),!Tu.isDefined(h.attribute_name)){nr(Qt.ATTR_PERM_MISSING_NAME,r,o,l);continue}let m=h.attribute_name;if(!f.includes(m)){nr(Qt.INVALID_ATTRIBUTE_IN_PERMS(m),r,o,l);continue}xx.forEach(S=>{Tu.isDefined(h[S])?Tu.isBoolean(h[S])||nr(Qt.ATTR_PERM_NOT_BOOLEAN(S,m),r,o,l):nr(Qt.ATTR_PERM_MISSING(S,m),r,o,l)}),!d.read&&h.read===!0&&(d.read=!0),!d.insert&&h.insert===!0&&(d.insert=!0),!d.update&&h.update===!0&&(d.update=!0)}if(u.read===!1&&d.read===!0||u.insert===!1&&d.insert===!0||u.update===!1&&d.update===!0){let _=`${o}.${l}`;nr(Qt.MISMATCHED_TABLE_ATTR_PERMS(_),r,o,l)}}}}return Bee(r)}a(Bx,"customValidate");Hx.exports={addRoleValidation:Lee,alterRoleValidation:Mee,dropRoleValidation:vee};function xee(e){let{operation:t,permission:r}=e;if(t===Au.OPERATIONS_ENUM.ADD_ROLE||t===Au.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return Qt.SU_CU_ROLE_COMBINED_ERROR;{let o=r.super_user?Au.ROLE_TYPES_ENUM.SUPER_USER:Au.ROLE_TYPES_ENUM.CLUSTER_USER;return Qt.SU_CU_ROLE_NO_PERMS_ALLOWED(o)}}}return null}a(xee,"validateNoSUPerms");function Bee(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:Qt.ROLE_PERMS_ERROR,...e};return bee(new Error,n,Nee.BAD_REQUEST)}else return null}a(Bee,"generateRolePermResponse");function nr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}a(nr,"addPermError")});var S_=C((HNe,$x)=>{"use strict";var Fx=Sn(),Gx=Wr(),Hee=Bc(),gb=kx(),Sb=ho(),BNe=require("uuid").v4,kee=require("util"),_E=(k(),P(q)),Fee=ie(),Tb=Gx.searchByValue,Gee=Gx.searchByHash,qee=kee.promisify(Hee.delete),$ee=Ws(),Vee=pu(),{hdb_errors:Kee,handleHDBError:zc}=he(),{HDB_ERROR_MSGS:qx,HTTP_STATUS_CODES:g_}=Kee,{UserEventMsg:Ab}=Ys();$x.exports={addRole:Yee,alterRole:Wee,dropRole:zee,listRoles:Qee};function Eb(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}a(Eb,"scrubRoleDetails");async function Yee(e){let t=gb.addRoleValidation(e);if(t)throw t;e=Eb(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await Tb(r)||[])}catch(i){throw zc(i)}if(n&&n.length>0)throw zc(new Error,qx.ROLE_ALREADY_EXISTS(e.role),g_.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await Fx.insert(s),Sb.signalUserChange(new Ab(process.pid)),e=Eb(e),e}a(Yee,"addRole");async function Wee(e){let t=gb.alterRoleValidation(e);if(t)throw t;e=Eb(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await Fx.update(r)}catch(s){throw zc(s)}if(n&&n?.message==="updated 0 of 1 records")throw zc(new Error,"Invalid role id",g_.BAD_REQUEST,void 0,void 0,!0);return await Sb.signalUserChange(new Ab(process.pid)),e}a(Wee,"alterRole");async function zee(e){let t=gb.dropRoleValidation(e);if(t)throw zc(new Error,t,g_.BAD_REQUEST,void 0,void 0,!0);let r=new Vee(_E.SYSTEM_SCHEMA_NAME,_E.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await Gee(r));if(n.length===0)throw zc(new Error,qx.ROLE_NOT_FOUND,g_.NOT_FOUND,void 0,void 0,!0);let s=new $ee(_E.SYSTEM_SCHEMA_NAME,_E.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await Tb(s)),o=!1;if(Fee.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){o=!0;break}}if(o===!0)throw zc(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,g_.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await qee(c),Sb.signalUserChange(new Ab(process.pid)),`${n[0].role} successfully deleted`}a(zee,"dropRole");async function Qee(){return Tb({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}a(Qee,"listRoles")});var Rb={};Ue(Rb,{start:()=>Yx,startOnMainThread:()=>Xee});function Yx({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,Vx.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let o in i.permission){if(jee.includes(o))continue;let c=i.permission[o];c.tables||(i.permission[o]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let f=[];for(let d in u.attributes){let _=u.attributes[d];_.attribute_name=d,f.push(_)}u.attribute_permissions=f,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let f of u.attribute_permissions)f.read=!!f.read,f.insert=!!f.insert,f.update=!!f.update}else u.attribute_permissions=null}}i.role=i.id=s,await Jee(i)}}}async function Jee(e){let t=Xe().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,Kx.isEqual)(i,e)?void 0:(e.id=r.id,(0,hE.alterRole)(e))}return(0,hE.addRole)(e)}var hE,Vx,Kx,jee,Xee,Wx=Re(()=>{xe();hE=v(S_()),Vx=require("yaml"),Kx=require("lodash"),jee=["super_user","cluster_user","structure_user"];a(Yx,"start");a(Jee,"ensureRole");Xee=Yx});async function mE(e){let t=(0,jx.pathToFileURL)(e).toString();if(Zee)return T_||(T_=ete(rte)),(await(await T_).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function ete(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),T_=new Compartment({console,Math,Date,fetch:tte,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,Qx.extname)(r)||(r+=".js"),r)},importHook:a(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){Object.assign(s,{Resource:Kr,tables:Qn,databases:We})}};let n=await(0,zx.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),T_}function tte(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function rte(){return{Resource:Kr,tables:Qn}}var zx,Qx,jx,Zee,T_,yb=Re(()=>{na();xe();zx=require("fs/promises"),Qx=require("path"),jx=require("url"),Zee=!1;a(mE,"secureImport");a(ete,"getCompartment");a(tte,"secureOnlyFetch");a(rte,"getGlobalVars")});var Ob={};Ue(Ob,{handleFile:()=>nte});async function nte(e,t,r,n){let s=new Map,i=await mE(r);c(i.default)&&n.set((0,bb.dirname)(t),i.default),o(i,(0,bb.dirname)(t));function o(l,u){for(let f in l){let d=l[f];c(d)?n.set(u+"/"+f,d):typeof d=="object"&&o(d,u+"/"+f)}}a(o,"recurseForResources");function c(l){return typeof l=="function"&&(l.get||l.put||l.post||l.delete)}return a(c,"isResource"),s}var bb,Jx=Re(()=>{yb();bb=require("path");a(nte,"handleFile")});var wb={};Ue(wb,{start:()=>ste});function ste({resources:e}){e.set("login",Nb),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var Nb,Xx=Re(()=>{na();a(ste,"start");Nb=class extends Kr{static{a(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:o}=r;return{data:await n.login(s,i)}}}});var N_={};Ue(N_,{addAnalyticsListener:()=>O_,calculateCPUUtilization:()=>EB,diffResourceUsage:()=>gB,recordAction:()=>Lt,recordActionBinary:()=>jn,setAnalyticsEnabled:()=>ite});function ite(e){fB=e}function ote(e,t){if(typeof e=="number"){let r=t.values,n=r.index++;if(n>=r.length){let s=r;t.values=r=new Float32Array(n*2),r.set(s),r.index=n+1}r[n]=e,t.total+=e}else if(typeof e=="boolean")e&&t.total++,t.count++;else if(typeof e=="function")t.count++;else throw new TypeError("Invalid metric value type "+typeof e)}function ate(e,t,r,n,s,i){let o={};if(typeof t=="number")o.total=t,o.values=new Float32Array(4),o.values.index=1,o.values[0]=t,o.total=t;else if(typeof t=="boolean")o.total=t?1:0,o.count=1;else if(typeof t=="function")o.count=1,o.callback=t;else throw new TypeError("Invalid metric value type "+typeof t);o.description={metric:r,path:n,method:s,type:i},EE.set(e,o)}function Lt(e,t,r,n,s){if(!fB)return;let i=t+(r?"-"+r:"");n!==void 0&&(i+="-"+n),s!==void 0&&(i+="-"+s);let o=EE.get(i);o?ote(e,o):ate(i,e,t,r,n,s),pE||cte()}function jn(e,t,r,n,s){Lt(!!e,t,r,n,s)}function O_(e){mB.push(e)}function cte(){pE=performance.now(),setTimeout(async()=>{let e=performance.now()-pE;pE=0;let t=[],r={time:Date.now(),period:e,threadId:Qc.threadId,metrics:t};for(let[s,i]of EE){if(i.values){let o=i.values.subarray(0,i.values.index);o.sort();let c=o.length,l=0,u=[],f;for(let d of pB){let _=Math.floor(c*d),h=o[_-1];if(_>l){let m=_-l;if(h===f){let S=u[u.length-1];typeof S=="number"?u[u.length-1]={value:S,count:1+m}:S.count+=m}else u.push(m>1?{value:h,count:m}:h),f=h;l=_}}t.push(Object.assign(i.description,{mean:i.total/c,distribution:u,count:c}))}else i.callback?t.push(Object.assign(i.description,i.callback(i))):t.push(Object.assign(i.description,{total:i.total,count:i.count}));await SB()}let n=process.memoryUsage();t.push({metric:"memory",threadId:Qc.threadId,byThread:!0,...n});for(let s of mB)s(t);EE=new Map,Qc.parentPort?Qc.parentPort.postMessage({type:hB,report:r}):RB({report:r})},_B).unref()}function gE(e,t,r){let n={id:(0,y_.getNextMonotonicTime)(),metric:t,...r};e.primaryStore.put(n.id,n,{append:!0}).then(s=>{s||e.primaryStore.put(n.id,n)})}function EB(e,t){let r=e.userCPUTime+e.systemCPUTime;return Math.round(r/t*100)/100}function gB(e,t){return{userCPUTime:t.userCPUTime/1e3-(e?.userCPUTime??0),systemCPUTime:t.systemCPUTime/1e3-(e?.systemCPUTime??0),minorPageFault:t.minorPageFault-(e?.minorPageFault??0),majorPageFault:t.majorPageFault-(e?.majorPageFault??0),fsRead:t.fsRead-(e?.fsRead??0),fsWrite:t.fsWrite-(e?.fsWrite??0),voluntaryContextSwitches:t.voluntaryContextSwitches-(e?.voluntaryContextSwitches??0),involuntaryContextSwitches:t.involuntaryContextSwitches-(e?.involuntaryContextSwitches??0)}}function lte(e,t,r){let n=0;for(let[s,i]of Object.entries(r)){let o=`${t}.${s}`,c=i.getSize(),l={database:t,table:s,size:c};gE(e,"table-size",l),jc.trace?.(`table ${o} size metric: ${JSON.stringify(l)}`),n+=c}return n}function Zx(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getAuditSize();if(!i)return;let o=dB.default.statSync(s.primaryStore.env.path).size,c=lte(e,r,n),l=o-c,u={database:r,size:o,used:c,free:l,audit:i};gE(e,"database-size",u),jc.trace?.(`database ${r} size metric: ${JSON.stringify(u)}`)}catch(s){jc.warn?.("Error getting DB size metrics",s)}}function eB(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getStorageStats();if(!i)return;let o={database:r,...i};gE(e,"storage-volume",o),jc.trace?.(`db ${r} storage volume metrics: ${JSON.stringify(o)}`)}catch(s){jc.warn?.("Error getting DB volume metrics",s)}}async function ute(e,t=6e4){let r=Cb(),n=TB(),s=new Promise(E=>{let T=performance.now();setImmediate(()=>{let N=performance.now();N-T>5e3&&jc.warn?.("Unusually high event queue latency on the main thread of "+Math.round(N-T)+"ms"),T=performance.now()}),n.primaryStore.prefetch([1],()=>{let N=performance.now();N-T>5e3&&jc.warn?.("Unusually high task queue latency on the main thread of "+Math.round(N-T)+"ms"),E(N-T)})}),i;for(let E of n.primaryStore.getRange({start:1/0,end:!1,reverse:!0}))if(E.value?.time){i=E.value.time;break}if(Date.now()-t<i)return;let o,c=new Map,l=new Map,u=[],f;for(let{key:E,value:T}of r.primaryStore.getRange({start:i||!1,exclusiveStart:!0,end:1/0})){if(!T)continue;if(o){if(E>o+t)break}else o=E;f=E;let{metrics:N,threadId:M}=T;for(let H of N||[]){let{path:X,method:W,type:$,metric:se,count:z,total:fe,distribution:ue,threads:Z,...Ae}=H;z||(z=1);let me=se+(X?"-"+X:"");W!==void 0&&(me+="-"+W),$!==void 0&&(me+="-"+$);let ye=c.get(me);if(ye){if(ye.threads){let dt=ye.threads[M];if(dt)ye=dt;else{ye.threads[M]={...Ae};continue}}ye.count||(ye.count=1);let Ht=ye.count;for(let dt in Ae){let Ln=Ae[dt];typeof Ln=="number"&&(ye[dt]=(ye[dt]*Ht+Ln*z)/(Ht+z))}ye.count+=z,fe>=0&&(ye.total+=fe,ye.ratio=ye.total/ye.count)}else ye={period:t,...H},delete ye.distribution,c.set(me,ye),ye.byThread&&(ye.threads=[],ye.threads[M]={...Ae},u.push(ye));if(ue){ue=ue.map(dt=>typeof dt=="number"?{value:dt,count:1}:dt);let Ht=l.get(me);Ht?Ht.push(...ue):l.set(me,ue)}}await SB()}for(let E of u){let{path:T,method:N,type:M,metric:H,count:X,total:W,distribution:$,threads:se,...z}=E;se=se.filter(fe=>fe);for(let fe in z){if(typeof E[fe]!="number")continue;let ue=0;for(let Z of se){let Ae=Z[fe];typeof Ae=="number"&&(ue+=Ae)}E[fe]=ue}E.count=se.length,delete E.threads,delete E.byThread}for(let[E,T]of l){let N=c.get(E);T.sort((dt,Ln)=>dt.value>Ln.value?1:-1);let M=N.count-1,H=[],X=0,W=0,$;for(let dt of pB){let Ln=M*dt;for(;X<Ln;)$=T[W++],X+=$.count,W===1&&X--;let Vr=T[W>1?W-2:0];$||($=T[0]),H.push($.value-($.value-Vr.value)*(X-Ln)/$.count)}let[se,z,fe,ue,Z,Ae,me,ye,Ht]=H;Object.assign(N,{p1:se,p10:z,p25:fe,median:ue,p75:Z,p90:Ae,p95:me,p99:ye,p999:Ht})}let d;for(let[E,T]of c)T.id=(0,y_.getNextMonotonicTime)(),T.time=f,n.primaryStore.put(T.id,T,{append:!0}).then(N=>{N||n.primaryStore.put(T.id,T)}),d=!0;let _=Date.now(),{idle:h,active:m}=performance.eventLoopUtilization();if(d||m*10>h){let E=(0,y_.getNextMonotonicTime)(),T={id:E,metric:"main-thread-utilization",idle:h-tB,active:m-rB,taskQueueLatency:await s,time:_,...process.memoryUsage()};n.primaryStore.put(E,T,{append:!0}).then(N=>{N||n.primaryStore.put(E,T)})}tB=h,rB=m;let S=process.resourceUsage(),g=gB(A_,S);g.time=_,g.period=A_.time?_-A_.time:t,g.cpuUtilization=EB(A_,g.period),gE(n,"resource-usage",g),A_=g;let R=Xe();Zx(n,R),Zx(n,{system:R.system}),eB(n,R),eB(n,{system:R.system})}async function nB(e,t){let r=Date.now()-t;for(let n of e.primaryStore.getKeys({start:!1,end:r}))e.primaryStore.remove(n)}function Cb(){return sB||(sB=ft({table:"hdb_raw_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"action"},{name:"metrics"}]}))}function TB(){return iB||(iB=ft({table:"hdb_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"metric"},{name:"path"},{name:"method"},{name:"type"}]}))}function _te(){AB=!0;let e=(0,b_.get)(x.ANALYTICS_AGGREGATEPERIOD)*1e3;e&&setInterval(async()=>{await ute(_B,e),await nB(Cb(),dte),await nB(TB(),fte)},Math.min(e/2,2147483647)).unref()}function RB(e,t){let r=e.report;r.threadId=t?.threadId||Qc.threadId;for(let n of r.metrics)n.metric==="bytes-sent"&&(oB+=n.mean*n.count);r.totalBytesProcessed=oB,t&&(r.metrics.push({metric:"utilization",...t.performance.eventLoopUtilization(aB.get(t))}),aB.set(t,t.performance.eventLoopUtilization())),r.id=(0,y_.getNextMonotonicTime)(),Cb().primaryStore.put(r.id,r),AB||_te(),hte&&(yB=pte(r))}async function pte(e){if(await yB,!ma){let r=(0,R_.dirname)((0,lB.getLogFilePath)());try{ma=await(0,Ib.open)((0,R_.join)(r,"analytics.log"),"r+")}catch{ma=await(0,Ib.open)((0,R_.join)(r,"analytics.log"),"w+")}}let t=(await ma.stat()).size;if(t>mte){let r=Buffer.alloc(t);await ma.read(r,{position:0}),r=r.subarray(r.indexOf(10,r.length/2)+1),await ma.write(r,{position:0}),await ma.truncate(r.length),t=r.length}await ma.write(JSON.stringify(e)+`
 `,t)}var Qc,cB,lB,uB,R_,Ib,y_,b_,dB,jc,EE,fB,pE,_B,hB,mB,pB,tB,rB,A_,SB,dte,fte,sB,iB,AB,oB,aB,hte,yB,ma,mte,Pi=Re(()=>{Qc=require("worker_threads"),cB=v(it());xe();lB=v(ee()),uB=v(ks()),R_=require("path"),Ib=require("fs/promises"),y_=v(un()),b_=v(le());k();Mr();dB=v(require("node:fs")),jc=(0,uB.loggerWithTag)("analytics");(0,b_.initSync)();EE=new Map,fB=(0,b_.get)(x.ANALYTICS_AGGREGATEPERIOD)>-1;a(ite,"setAnalyticsEnabled");a(ote,"recordExistingAction");a(ate,"recordNewAction");a(Lt,"recordAction");Ye.recordAnalytics=Lt;a(jn,"recordActionBinary");pE=0,_B=1e3,hB="analytics-report",mB=[];a(O_,"addAnalyticsListener");pB=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];a(cte,"sendAnalytics");a(gE,"storeMetric");a(EB,"calculateCPUUtilization");a(gB,"diffResourceUsage");a(lte,"storeTableSizeMetrics");a(Zx,"storeDBSizeMetrics");a(eB,"storeVolumeMetrics");a(ute,"aggregation");tB=0,rB=0,A_={},SB=a(()=>new Promise(setImmediate),"rest");a(nB,"cleanup");dte=36e5,fte=31536e6;a(Cb,"getRawAnalyticsTable");a(TB,"getAnalyticsTable");(0,cB.setChildListenerByType)(hB,RB);a(_te,"startScheduledTasks");oB=0,aB=new Map,hte=!1;a(RB,"recordAnalytics");mte=1e6;a(pte,"logAnalytics")});var bB={};Ue(bB,{Headers:()=>Eo,appendHeader:()=>SE,mergeHeaders:()=>Pb});function SE(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function Pb(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new Eo(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var Eo,w_=Re(()=>{Eo=class extends Map{static{a(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let o=i[1];if(n)r=(typeof o=="string"?o:o.join(", "))+", "+r;else if(typeof o=="string")r=[o,r];else{o.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};a(SE,"appendHeader");a(Pb,"mergeHeaders")});function CB(e){let t={openapi:Ete,info:{title:"HarperDB HTTP REST interface",version:IB.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:o,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},f=[];if(o)for(let{type:T,name:N,elements:M,relationship:H,definition:X}of o){if(H)T==="array"?u[N]={type:"array",items:{$ref:pa+M.type}}:u[N]={$ref:pa+T};else{let W=X??M?.definition;if(W){if(!t.components.schemas[W.type]){let $={};W.properties.forEach(se=>{$[se.name]=new vb(Db[se.type],se.type)}),t.components.schemas[W.type]=new wB($)}T==="array"?u[N]={type:"array",items:{$ref:pa+W.type}}:u[N]={$ref:pa+W.type}}else T==="array"?M.type==="Any"||M.type=="ID"?u[N]={type:"array",items:{format:M.type}}:u[N]={type:"array",items:new vb(Db[M.type],M.type)}:T==="Any"||T=="ID"?u[N]={format:T}:u[N]=new vb(Db[T],T)}f.push(new Ub(N,"query",u[N]))}let d=Object.keys(u),_=new Ub(c,"path",{format:"ID"});_.required=!0,_.description="primary key of record";let h=new Ub("property","path",{enum:d});h.required=!0,t.components.schemas[i]=new wB(u);let m=l.post!==Resource.prototype.post||l.update,S=typeof l.put=="function",g=typeof l.get=="function",R=typeof l.delete=="function",E="/"+s+"/";m&&(t.paths[E]={},t.paths[E].post=new gte(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[E]||(t.paths[E]={}),t.paths[E].get=new Lb(f,r,{200:new Mb({$ref:pa+i})},"search for records by the specified property name and value pairs")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new NB(f,r,"delete all the records that match the provided query",{204:new OB})),E="/"+s+"/{"+c+"}",g&&(t.paths[E]={},t.paths[E].get=new Lb([_],r,{200:new Mb({$ref:pa+i})},"retrieve a record by its primary key")),S&&(t.paths[E]||(t.paths[E]={}),t.paths[E].put=new Ste([_],r,i,"create or update the record with the URL path that maps to the record's primary key")),R&&(t.paths[E]||(t.paths[E]={}),t.paths[E].delete=new NB([_],r,"delete a record with the given primary key",{204:new OB})),g&&h.schema.enum.length>0&&(E="/"+s+"/{"+c+"}.{property}",t.paths[E]={},t.paths[E].get=new Lb([_,h],r,{200:new Mb({enum:d})},"used to retrieve the specified property of the specified record"))}return t}function gte(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:pa+e}}}},this.security=t,this.responses={200:{description:xb,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function Lb(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function Mb(e){this.description=xb,this.content={"application/json":{schema:e}}}function OB(){this.description="successfully processed request, no content returned to client"}function Ste(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:pa+r}}}},this.responses={200:{description:xb}}}function NB(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function wB(e){this.type="object",this.properties=e}function vb(e,t){this.type=e,this.format=t}function Ub(e,t,r){this.name=e,this.in=t,this.schema=r}var IB,Ete,Db,pa,xb,PB=Re(()=>{IB=v(Et()),Ete="3.0.3",Db={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},pa="#/components/schemas/",xb="successful operation";a(CB,"generateJsonApi");a(gte,"Post");a(Lb,"Get");a(Mb,"Response200");a(OB,"Response204");a(Ste,"Put");a(NB,"Delete");a(wB,"ResourceSchema");a(vb,"Type");a(Ub,"Parameter")});var LB={};Ue(LB,{Request:()=>I_,createReuseportFd:()=>TE});var DB,I_,Bb,Hb,TE,AE=Re(()=>{DB=require("os"),I_=class{static{a(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new Hb(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new Bb(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},Bb=class{static{a(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},Hb=class{constructor(t){this.asObject=t}static{a(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,DB.platform)()!="win32"&&(TE=require("node-unix-socket").createReuseportFd)});var yE={};Ue(yE,{parseHeaderValue:()=>Fb,start:()=>Rte});async function Ate(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&Zm(e);let i=new Eo;try{e.responseHeaders=i;let o=e.url.slice(1),c,l;if(o!==MB){let g=RE.getMatch(o,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new pc(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let R=Fb(g);for(let E of R)switch(E.name){case"max-age":e.expiresAt=E.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=Fb(u).map(R=>(R.next?.name==="confirm"&&R.next.value>=0&&(e.replicatedConfirmation=+R.next.value),R.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let d=await It(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=no(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new yu.ClientError(g,400)}if(e.authorize=!0,o===MB&&s==="GET"){if(e?.user?.role?.permission?.super_user)return CB(RE);throw new yu.ServerError("Forbidden",403)}switch(s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new yu.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new yu.ServerError(`Method ${s} is not recognized`,501)}}),_=200,h;if(d==null)_=s==="GET"||s==="HEAD"?404:204,kb.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(d.status>0&&d.headers){let g=Pb(d.headers,i);return d.headers!==g&&(d.headers=g),d.data!==void 0&&(d.body=Pf(d.data,e,d)),d}else if(h=e.lastModified){Tte[0]=h;let g=String.fromCharCode(34,(xr[0]&63)+62,(xr[0]>>6)+(xr[1]<<2&63)+62,(xr[1]>>4)+(xr[2]<<4&63)+62,(xr[2]>>2)+62,(xr[3]&63)+62,(xr[3]>>6)+(xr[4]<<2&63)+62,(xr[4]>>4)+(xr[5]<<4&63)+62,(xr[5]>>2)+62,(xr[6]&63)+62,(xr[6]>>6)+(xr[7]<<2&63)+62,34),R=r["if-none-match"];R&&g==R?(d?.onDone&&d.onDone(),_=304,d=void 0):i.setIfNone("ETag",g),kb.lastModified&&i.setIfNone("Last-Modified",new Date(h).toUTCString())}e.createdResource&&(_=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let m={status:_,headers:i,body:void 0},S=d?.wasLoadedFromSource?.();return S!==void 0&&(m.wasCacheMiss=S,!S&&h&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||h))/1e3))),d!==void 0&&(m.body=Pf(d,e,m),s==="HEAD"&&(m.body=void 0)),m}catch(o){o.statusCode?o.statusCode===500?Di.warn(o):Di.info(o):Di.error(o),o.statusCode===405&&(o.method&&(o.message+=` to handle HTTP method ${o.method.toUpperCase()||""}`),o.allow&&(o.allow.push("trace","head","options"),i.setIfNone("Allow",o.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:o.statusCode||500,headers:i,body:void 0};return c.body=Pf(o.contentType?o:o.toString(),e,c),c}}function Rte(e){kb=e,e.includeExpensiveRecordCountEstimates&&(I_.prototype.includeExpensiveRecordCountEstimates=!0),!vB&&(vB=!0,RE=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return Ate(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{C_++;let s=new xn;UB||(UB=!0,O_(l=>{C_>0&&l.push({metric:"ws-connections",connections:C_,byThread:!0})}));let i;t.on("error",l=>{i=!0,Di.warn(l)});let o;t.on("message",a(function(u){o||(o=no(r.requestedContentType??r.headers.asObject["content-type"],!1));let f=o(u);Lt(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(f)},"message"));let c;t.on("close",()=>{C_--,jn(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=RE.getMatch(l,"ws");if(jn(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,Lt(m=>({count:m.count,total:C_}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let f=new pc(u.relativeURL),d=u.Resource;c=(await It(r,()=>d.connect(f,s,r)))[Symbol.asyncIterator]();let h;for(;!(h=await c.next()).done;){let m=await ia(h.value,r);t.send(m),Lt(m.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(S=>t._socket.once("drain",S))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Di.warn(l):Di.info(l):Di.error(l),t.close(yte[l.statusCode]||1011,l.toString())}t.close()},e))}function Fb(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,o]=s.trim().split("=");i=i.trim(),o&&(o=o.trim()),r={name:i.toLowerCase(),value:o,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Di,yu,xr,Tte,kb,MB,vB,RE,UB,C_,yte,xB=Re(()=>{so();Pi();Di=v(ee()),yu=v(he());bf();zl();mc();w_();PB();bf();AE();xr=new Uint8Array(8),Tte=new Float64Array(xr.buffer,0,1),kb={},MB="openapi";a(Ate,"http");C_=0;a(Rte,"start");yte={401:3e3,403:3003};a(Fb,"parseHeaderValue")});var Gb=C((mwe,HB)=>{var{recordAction:bE,recordActionBinary:BB}=(Pi(),P(N_)),bte=require("fastify-plugin"),Ote=200;HB.exports=bte(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let o=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,f,d;l.config?.isOperation?(u=n.body?.operation,f="operation"):(u=l.url,f="fastify-route",d=l.method),bE(o,"duration",u,d,f),BB(s.raw.statusCode<400,"success",u,d,f),BB(1,"response_"+s.raw.statusCode,u,d,f);let _=Ote;i?.pipe?(i.on("data",g=>{_+=g.length}),i.on("end",()=>{bE(performance.now()-c,"transfer",u,d,f),bE(_,"bytes-sent",u,d,f)})):(_+=i?.length||0,bE(_,"bytes-sent",u,d,f));let h=o.toFixed(3),m=s.getHeader("Server-Timing"),S=`db;dur=${h}`;s.header("Server-Timing",m?`${m}, ${S}`:S)}),r()},{name:"hdb-request-time"})});var FB=C((pwe,kB)=>{var Nte=ot(),wte={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};kB.exports=function(e){return Nte.validateObject(e,wte)}});var OE=C((Ewe,GB)=>{"use strict";var Ite=(k(),P(q)).OPERATIONS_ENUM,qb=class{static{a(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=Ite.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};GB.exports=qb});var L_={};Ue(L_,{createTokens:()=>Pte,getJWTRSAKeys:()=>PE,refreshOperationToken:()=>Dte,validateOperationToken:()=>Kb,validateRefreshToken:()=>DE});async function PE(){if(NE)return NE;try{let e=P_.default.join(D_.default.getHdbBasePath(),EA),t=await wE.default.readFile(P_.default.join(e,cf.JWT_PASSPHRASE_NAME),"utf8"),r=await wE.default.readFile(P_.default.join(e,cf.JWT_PRIVATE_KEY_NAME),"utf8");return NE={publicKey:await wE.default.readFile(P_.default.join(e,cf.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},NE}catch(e){throw CE.default.error(e),new Qs.ClientError(Ou.NO_ENCRYPTION_KEYS,bu.INTERNAL_SERVER_ERROR)}}async function Pte(e){let t=(0,$b.validateBySchema)(e,Li.default.object({username:Li.default.string().optional(),password:Li.default.string().optional(),role:Li.default.string().optional(),expires_in:Li.default.alternatives(Li.default.string(),Li.default.number()).optional()}));if(t)throw new Qs.ClientError(t.message);let r;try{let d=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,d=!1),r=await(0,Vb.findAndValidateUser)(e.username,e.password,d)}catch(d){throw CE.default.error(d),new Qs.ClientError(Ou.INVALID_CREDENTIALS,bu.UNAUTHORIZED)}if(!r)throw new Qs.ClientError(Ou.INVALID_CREDENTIALS,bu.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let o=await PE(),c=await Nu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:e.expires_in??YB,algorithm:IE,subject:"operation"}),l=await Nu.default.sign(i,{key:o.privateKey,passphrase:o.passphrase},{expiresIn:Cte,algorithm:IE,subject:"refresh"}),u=ny(l,"sha256");if((await(0,qB.update)(new $B.default(af,Yl.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new Qs.ClientError(Ou.REFRESH_TOKEN_SAVE_FAILED,bu.INTERNAL_SERVER_ERROR);return VB.default.signalUserChange(new KB.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function Dte(e){let t=(0,$b.validateBySchema)(e,Li.default.object({refresh_token:Li.default.string().required()}).required());if(t)throw new Qs.ClientError(t.message);let{refresh_token:r}=e;await DE(r);let n=await PE(),s=await Nu.default.decode(r);return{operation_token:await Nu.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:YB,algorithm:IE,subject:"operation"})}}async function Kb(e){return WB(e,"operation")}async function DE(e){return WB(e,"refresh")}async function WB(e,t){try{let r=await PE(),n=await Nu.default.verify(e,r.publicKey,{algorithms:IE,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,Vb.findAndValidateUser)(n.username,void 0,!1);if(t==="refresh"&&!sy(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw CE.default.warn(r),r?.name==="TokenExpiredError"?new Qs.ClientError(Ou.TOKEN_EXPIRED,bu.FORBIDDEN):new Qs.ClientError(Ou.INVALID_TOKEN,bu.UNAUTHORIZED)}}var Nu,wE,P_,Li,$b,Qs,CE,Vb,qB,$B,VB,KB,D_,bu,Ou,YB,Cte,IE,NE,wu=Re(()=>{Nu=v(require("jsonwebtoken")),wE=v(require("fs-extra")),P_=v(require("node:path")),Li=v(require("joi")),$b=v(ot());k();Qs=v(he()),CE=v(ee());Up();Vb=v(Kn()),qB=v(Sn()),$B=v(OE()),VB=v(ho()),KB=v(Ys()),D_=v(le()),{HTTP_STATUS_CODES:bu,AUTHENTICATION_ERROR_MSGS:Ou}=Qs.hdb_errors;D_.default.initSync();YB=D_.default.get(x.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",Cte=D_.default.get(x.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",IE="RS256";a(PE,"getJWTRSAKeys");a(Pte,"createTokens");a(Dte,"refreshOperationToken");a(Kb,"validateOperationToken");a(DE,"validateRefreshToken");a(WB,"validateToken")});var Yb=C((Rwe,jB)=>{"use strict";var Lte=FB(),Iu=require("passport"),Mte=require("passport-local").Strategy,vte=require("passport-http").BasicStrategy,Ute=require("util"),xte=Kn(),QB=Ute.callbackify(xte.findAndValidateUser),Awe=Un(),Bte=(k(),P(q)),zB=(wu(),P(L_));Iu.use(new Mte(function(e,t,r){QB(e,t,r)}));Iu.use(new vte(function(e,t,r){QB(e,t,r)}));Iu.serializeUser(function(e,t){t(null,e)});Iu.deserializeUser(function(e,t){t(null,e)});function Hte(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let o=e.headers.authorization.split(" ");n=o[0],s=o[1]}function i(o,c){return o?r(o):c?r(null,c):r("Must login")}switch(a(i,"handleResponse"),n){case"Basic":Iu.authenticate("basic",{session:!1},(o,c)=>{i(o,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===Bte.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?zB.validateRefreshToken(s).then(o=>{e.body.refresh_token=s,r(null,o)}).catch(o=>{r(o)}):zB.validateOperationToken(s).then(o=>{r(null,o)}).catch(o=>{r(o)});break;default:Iu.authenticate("local",{session:!1},function(o,c){i(o,c)})(e,t,r);break}}a(Hte,"authorize");function kte(e,t){let r=Lte(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let o=i[e.schema].tables[e.table].attribute_permissions;for(let c in o)e.attributes.indexOf(o[c].attribute_name)>-1&&!o[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${o[c].attribute_name} `))}return t(null,n)}a(kte,"checkPermissions");jB.exports={authorize:Hte,checkPermissions:kte}});var LE=C((bwe,JB)=>{"use strict";var Fte=qn();JB.exports={writeTransaction:Gte};function Gte(e,t,r){return Fte.writeTransaction(e,t,r)}a(Gte,"writeTransaction")});var tH=C((wwe,eH)=>{"use strict";var qte=Wr(),$te=$s(),XB=ee(),Vte=Sn(),Nwe=LE(),Kte=require("clone"),zb=require("alasql"),Yte=wp(),ZB=require("util"),Wte=ZB.promisify($te.getTableSchema),zte=ZB.promisify(qte.search),Qte=(k(),P(q)),Wb=ie();Yte(zb);eH.exports={update:Jte};var jte="There was a problem performing this update. Please check the logs and try again.";async function Jte({statement:e,hdb_user:t}){let r=await Wte(e.table.databaseid,e.table.tableid),n=Xte(e.columns);Wb.backtickASTSchemaItems(e);let{table:s,where:i}=e,o=Kte(s),c=Wb.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=zb.parse(l).statements[0],f=await zte(u),d=Zte(n,f);return ere(o,d,t)}a(Jte,"update");function Xte(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=zb.compile(`SELECT ${r.expression.toString()} AS [${Qte.FUNC_VAL}] FROM ?`)}),t}catch(t){throw XB.error(t),new Error(jte)}}a(Xte,"createUpdateRecord");function Zte(e,t){return Wb.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}a(Zte,"buildUpdateRecords");async function ere(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await Vte.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){XB.error(`Error delete new_attributes from update response: ${i}`)}return s}a(ere,"updateRecords")});var nH=C((Dwe,rH)=>{var tre=require("alasql"),rre=Wr(),nre=ee(),sre=qn(),jb=require("util"),Qb=ie(),ire=(k(),P(q)),ore=$s(),Cwe=LE(),Pwe=Sn(),are="record",cre="successfully deleted",lre=jb.callbackify(_re),ure=jb.promisify(rre.search),dre=jb.promisify(ore.getTableSchema);rH.exports={convertDelete:lre};function fre(e){return`${e.deleted_hashes.length} ${are}${e.deleted_hashes.length===1?"":"s"} ${cre}`}a(fre,"generateReturnMessage");async function _re({statement:e,hdb_user:t}){let r=await dre(e.table.databaseid,e.table.tableid);Qb.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=Qb.isEmpty(s)?"":` WHERE  ${s.toString()}`,o=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=tre.parse(o).statements[0],l={operation:ire.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await ure(c);let u=await sre.deleteRecords(l);return Qb.isEmptyOrZeroLength(u.message)&&(u.message=fre(u)),delete u.txn_time,u}catch(u){throw nre.error(u),u.hdb_code?u.message:u}}a(_re,"convertDelete")});var cH=C((Mwe,aH)=>{"use strict";var hre=fo(),{hdb_errors:sH}=he(),{getDatabases:iH}=(xe(),P(ct));aH.exports={checkSchemaExists:oH,checkSchemaTableExists:mre,schema_describe:hre};async function oH(e){if(!iH()[e])return sH.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}a(oH,"checkSchemaExists");async function mre(e,t){let r=await oH(e);if(r)return r;if(!iH()[e][t])return sH.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}a(mre,"checkSchemaTableExists")});var tO=C((Hwe,TH)=>{"use strict";var{decode:pre}=require("msgpackr"),{isMainThread:Uwe,parentPort:xwe,threadId:Bwe}=require("worker_threads"),UE=pr(),Cu=Ct(),Zb=(k(),P(q)),Jr=ee(),Xb=le(),Ere=(k(),P(q)),{onMessageByType:gre}=it(),fH=uo(),{recordAction:lH,recordActionBinary:Sre}=(Pi(),P(N_)),{publishToStream:Tre}=UE,{ConsumerEvents:uH}=require("nats"),Are=Wr(),{promisify:Rre}=require("util"),{decodeBlobsWithWrites:yre}=(hn(),P(Du)),_H=Rre(setTimeout),xE=1e4,BE,vE,bre,Ore,hH,M_=new Map,Pu=new Map;TH.exports={initialize:mH,ingestConsumer:eO,setSubscription:Nre,setIgnoreOrigin:Cre,getDatabaseSubscriptions:Ire,updateConsumer:pH};async function mH(){gre(Zb.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await pH(n)}),hH=!0,Jr.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await UE.getNATSReferences();BE=e,vE=e.info.server_name,bre=t,Ore=r}a(mH,"initialize");async function pH(e){if(e.status==="start"){let{js:t,jsm:r}=await EH(e.node_domain_name);eO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=M_.get(e.stream_name+e.node_domain_name);t&&(Jr.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),M_.set(e.stream_name+e.node_domain_name,"close")),Pu.get(e.node_domain_name)==="failed"&&Pu.set(e.node_domain_name,"close")}}a(pH,"updateConsumer");var HE=new Map;function Nre(e,t,r){let n=HE.get(e);n||HE.set(e,n=new Map),n.set(t,r),hH||mH().then(wre)}a(Nre,"setSubscription");async function wre(){let e=await Are.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+Cu.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await EH(r),!n))break;let{schema:o,table:c}=i,l=fH.createNatsTableStreamName(o,c);eO(l,n,s,r)}}}a(wre,"accessConsumers");async function EH(e){let t,r,n=1;for(;!r;)try{t=await BE.jetstream({domain:e}),r=await BE.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(Pu.get(e)==="close")break;Pu.set(e,"failed"),n%10===1&&Jr.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<xE?n++*100:xE;await _H(i)}return{js:t,jsm:r}}a(EH,"connectToRemoteJS");function Ire(){return HE}a(Ire,"getDatabaseSubscriptions");var gH;function Cre(e){gH=e}a(Cre,"setIgnoreOrigin");var SH=100,dH=new Array(SH),ME=0;async function eO(e,t,r,n){let{connection:s}=await UE.getNATSReferences();BE=s,vE=s.info.server_name;let i,o=1;for(;!i;)try{i=await t.consumers.get(e,vE),Jr.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(Pu.get(n)==="close")break;o%10===1&&Jr.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(Jr.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await UE.createConsumer(r,e,vE,new Date(Date.now()).toISOString()));let f=o++*100<xE?o++*100:xE;await _H(f)}let c=!1,l;for(;!c;){if(M_.get(e+n)==="close"||Pu.get(n)==="close"){M_.delete(e+n),c=!0;continue}l=await i.consume({max_messages:Xb.get(Zb.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),M_.set(e+n,l);let u=!1;(async()=>{for await(let f of await l.status())if(f.type===uH.ConsumerDeleted&&(await l.close(),c=!0),f.type===uH.HeartbeatsMissed){let d=f.data;Jr.trace(`${d} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),d===100&&(Jr.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let f of l)await dH[ME],dH[ME]=Pre(f).catch(d=>{Jr.error(d)}),++ME>=SH&&(ME=0)}catch(f){f.message==="consumer deleted"?(Jr.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):Jr.error("Error consuming clustering ingest, restarting consumer",f)}}}a(eO,"ingestConsumer");async function Pre(e){let t;await yre(()=>{t=pre(e.data)}),lH(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),Jr.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=Xb.get(Zb.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has(Cu.MSG_HEADERS.TRANSACTED_NODES)&&r.values(Cu.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get(Cu.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!gH),Sre(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append(Cu.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:o,schema:c,next:l,table:u,records:f,hash_values:d,__origin:_,expiresAt:h}=t;Jr.trace("processing message:",o,c,u,(f?"records: "+f.map(M=>M?.id):"")+(d?"ids: "+d:""),"with sequence:",e.seq),Jr.trace(`messageProcessor nats msg id: ${e.headers.get(Cu.MSG_HEADERS.NATS_MSG_ID)}`);let m;f||(f=d);let S=new Promise(M=>m=M),{timestamp:g,user:R,node_name:E}=_||{},T=HE.get(c)?.get(u);if(!T)throw new Error(`Missing table for replication message: ${u}`);if(o==="define_schema")t.type=o,t.onCommit=m,T.send(t);else if(f.length===1&&!l)T.send({type:Jb(o),value:f[0],id:d?.[0],expiresAt:h,timestamp:g,table:u,onCommit:m,user:R,nodeName:E});else{let M=f.map((H,X)=>({type:Jb(o),value:H,expiresAt:h,id:d?.[X],table:u}));for(;l;)M.push({type:Jb(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;T.send({type:"transaction",writes:M,table:u,timestamp:g,onCommit:m,user:R,nodeName:E})}Xb.get(Ere.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&Tre(e.subject.split(".").slice(0,-1).join("."),fH.createNatsTableStreamName(c,u),e.headers,e.data),await S;let N=Date.now()-g;g&&lH(N,"replication-latency",e.subject,o,"ingest")}catch(o){Jr.error(o)}e.ack()}a(Pre,"messageProcessor");function Jb(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}a(Jb,"convertOperation")});var pr=C((Kwe,BH)=>{"use strict";var Nr=le();Nr.initSync();var Dre=require("fs-extra"),Lre=require("semver"),x_=require("path"),{monotonicFactory:Mre}=require("ulidx"),RH=Mre(),vre=require("util"),yH=require("child_process"),Ure=vre.promisify(yH.exec),xre=yH.spawn,Br=Ct(),ze=(k(),P(q)),{packageJson:Bre,PACKAGE_ROOT:Hre}=Et(),kE=ie(),js=ee(),FE=uo(),kre=LE(),v_=Dt(),{broadcast:Fre,onMessageByType:Gre,getWorkerIndex:qre}=it(),{isMainThread:bH}=require("worker_threads"),{Encoder:$re,decode:iO}=require("msgpackr"),OH=new $re,{isEmpty:el}=kE,NH=Kn(),Fwe=48*36e11;bH&&Gre(ze.ITC_EVENT_TYPES.RESTART,()=>{Xr=void 0,Zc=void 0});var{connect:Vre,StorageType:Kre,RetentionPolicy:Yre,AckPolicy:oO,DeliverPolicy:aO,DiscardPolicy:Wre,NatsConnection:Gwe,JetStreamManager:qwe,JetStreamClient:$we,StringCodec:Vwe,JSONCodec:zre,createInbox:cO,headers:Qre,ErrorCode:AH}=require("nats"),{recordAction:jre}=(Pi(),P(N_)),{encodeBlobsAsBuffers:Jre}=(hn(),P(Du)),wH=zre(),Xre="clustering",Zre=Bre.engines[Br.NATS_SERVER_NAME],ene=x_.join(Hre,"dependencies"),sO=x_.join(ene,`${process.platform}-${process.arch}`,Br.NATS_BINARY_NAME),rO,nO,U_,Jc,Xc;BH.exports={runCommand:IH,checkNATSServerInstalled:tne,createConnection:lO,getConnection:B_,getJetStreamManager:H_,getJetStream:PH,getNATSReferences:Mi,getServerList:nne,createLocalStream:uO,listStreams:DH,deleteLocalStream:sne,getServerConfig:Lu,listRemoteStreams:ine,viewStream:one,viewStreamIterator:ane,publishToStream:cne,request:dne,reloadNATS:dO,reloadNATSHub:fne,reloadNATSLeaf:_ne,extractServerName:une,requestErrorHandler:hne,createLocalTableStream:UH,createTableStreams:Ene,purgeTableStream:xH,purgeSchemaTableStreams:gne,getStreamInfo:Sne,updateLocalStreams:Ane,closeConnection:rne,getJsmServerName:GE,addNatsMsgHeader:LH,clearClientCache:CH,updateRemoteConsumer:mne,createConsumer:MH,updateConsumerIterator:pne};async function IH(e,t=void 0){let{stdout:r,stderr:n}=await Ure(e,{cwd:t});if(n)throw new Error(n.replace(`
 `,""));return r.replace(`
-`,"")}a(IH,"runCommand");async function tne(){try{await Dre.access(sO)}catch{return!1}let e=await IH(`${sO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return Lre.eq(t,Zre)}a(tne,"checkNATSServerInstalled");async function lO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await NH.getClusterUser();if(el(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}js.trace("create nats connection called");let i=await Vre({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&js.error("Error with Nats client connection, connection closed",o),i===Xr&&CH()}),i}a(lO,"createConnection");function CH(){Xr=void 0,Jc=void 0,Xc=void 0,Zc=void 0}a(CH,"clearClientCache");async function rne(){Xr&&(await Xr.drain(),Xr=void 0,Jc=void 0,Xc=void 0,Zc=void 0)}a(rne,"closeConnection");var Xr,Zc;async function B_(){return Zc||(Zc=lO(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),Xr=await Zc),Xr||Zc}a(B_,"getConnection");async function H_(){if(Jc)return Jc;el(Xr)&&await B_();let{domain:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(el(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Jc=await Xr.jetstreamManager({domain:e,timeout:6e4}),Jc}a(H_,"getJetStreamManager");async function PH(){if(Xc)return Xc;el(Xr)&&await B_();let{domain:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(el(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Xc=Xr.jetstream({domain:e,timeout:6e4}),Xc}a(PH,"getJetStream");async function Mi(){let e=Xr||await B_(),t=Jc||await H_(),r=Xc||await PH();return{connection:e,jsm:t,js:r}}a(Mi,"getNATSReferences");async function nne(e){let t=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await NH.getClusterUser(),s=await lO(t,r,n),i=cO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=wH.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await kE.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(nne,"getServerList");async function uO(e,t){let{jsm:r}=await Mi(),n=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:Kre.File,retention:Yre.Limits,subjects:t,discard:Wre.Old,max_msgs:s,max_bytes:i,max_age:n})}a(uO,"createLocalStream");async function DH(){let{jsm:e}=await Mi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(DH,"listStreams");async function sne(e){let{jsm:t}=await Mi();await t.streams.delete(e)}a(sne,"deleteLocalStream");async function ine(e){let{connection:t}=await Mi(),r=[],n=cO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(wH.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(ine,"listRemoteStreams");async function one(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=RH(),o={durable_name:i,ack_policy:oO.Explicit};t&&(o.deliver_policy=aO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=iO(f.data),_={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(_.origin=f.headers.get(Br.MSG_HEADERS.ORIGIN)),u.push(_),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(one,"viewStream");async function*ane(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=RH(),o={durable_name:i,ack_policy:oO.Explicit};t&&(o.deliver_policy=aO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=iO(u.data);f[0]||(f=[f]);for(let d of f){let _={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(_.origin=u.headers.get(Br.MSG_HEADERS.ORIGIN)),yield _}if(u.ack(),u.info.pending===0)break}await c.delete()}a(ane,"viewStreamIterator");async function cne(e,t,r,n){js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=LH(n,r);let{js:s}=await Mi(),i=await GE(),o=`${e}.${i}`,c=await Jre(()=>n instanceof Uint8Array?n:OH.encode(n));try{js.trace(`publishToStream publishing to subject: ${o}`),jre(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return vH(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await uO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(cne,"publishToStream");function LH(e,t){t===void 0&&(t=Qre());let r=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Br.MSG_HEADERS.ORIGIN)&&r&&t.append(Br.MSG_HEADERS.ORIGIN,r),t}a(LH,"addNatsMsgHeader");function Lu(e){e=e.toLowerCase();let t=x_.join(Nr.get(ze.CONFIG_PARAMS.ROOTPATH),Xre);if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return el(nO)&&(nO={port:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.HUB,config_file:Br.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:x_.join(t,Br.PID_FILES.HUB),hdb_nats_path:t}),nO;if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return el(rO)&&(rO={port:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.LEAF,config_file:Br.NATS_CONFIG_FILES.LEAF_SERVER,domain:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.LEAF,pid_file_path:x_.join(t,Br.PID_FILES.LEAF),hdb_nats_path:t}),rO;js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(Lu,"getServerConfig");async function MH(e,t,r,n){try{await e.consumers.add(t,{ack_policy:oO.Explicit,durable_name:r,deliver_policy:aO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(MH,"createConsumer");async function lne(e,t,r){await e.consumers.delete(t,r)}a(lne,"removeConsumer");function une(e){return e.split(".")[1]}a(une,"extractServerName");async function dne(e,t,r=6e4,n=cO()){if(!kE.isObject(t))throw new Error("data param must be an object");let s=OH.encode(t),{connection:i}=await Mi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return iO(c.data)}a(dne,"request");function dO(e){return new Promise(async(t,r)=>{let n=xre(sO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(dO,"reloadNATS");async function fne(){let{pid_file_path:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await dO(e)}a(fne,"reloadNATSHub");async function _ne(){let{pid_file_path:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await dO(e)}a(_ne,"reloadNATSLeaf");function hne(e,t,r){let n;switch(e.code){case AH.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case AH.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(hne,"requestErrorHandler");async function mne(e,t){let r=t+Br.SERVER_SUFFIX.LEAF,{connection:n}=await Mi(),{jsm:s}=await yne(r),{schema:i,table:o}=e,c=FE.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await vH(async()=>{if(e.subscribe===!0)await MH(s,c,n.info.server_name,l);else try{await lne(s,c,n.info.server_name)}catch(u){js.trace(u)}})}a(mne,"updateRemoteConsumer");async function pne(e,t,r,n){let s=FE.createNatsTableStreamName(e,t),i=r+Br.SERVER_SUFFIX.LEAF,o={type:ze.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!bH&&qre()<Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=tO();await c(o)}await Fre(o),n==="stop"&&await kE.async_set_timeout(1e3)}a(pne,"updateConsumerIterator");function vH(e){return kre.writeTransaction(ze.SYSTEM_SCHEMA_NAME,ze.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(vH,"exclusiveLock");async function UH(e,t){let r=FE.createNatsTableStreamName(e,t),n=await GE(),s=Tne(e,t,n);await uO(r,[s])}a(UH,"createLocalTableStream");async function Ene(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await UH(n,s)}}a(Ene,"createTableStreams");async function xH(e,t,r=void 0){if(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=FE.createNatsTableStreamName(e,t),{domain:s}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await B_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")js.warn(n);else throw n}}a(xH,"purgeTableStream");async function gne(e,t){if(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await xH(e,t[r])}a(gne,"purgeSchemaTableStreams");async function Sne(e){return(await H_()).streams.info(e)}a(Sne,"getStreamInfo");function Tne(e,t,r){return`${Br.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Tne,"createSubjectName");async function GE(){if(U_)return U_;if(U_=(await H_())?.nc?.info?.server_name,U_===void 0)throw new Error("Unable to get jetstream manager server name");return U_}a(GE,"getJsmServerName");async function Ane(){let e=await H_(),t=await GE(),r=await DH();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=Rne(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(Ane,"updateLocalStreams");function Rne(e){let{config:t}=e,r=!1,n=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(Rne,"updateStreamLimits");async function yne(e){let t,r;try{t=await Xr.jetstream({domain:e}),r=await Xr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(yne,"connectToRemoteJS")});function fO(e){let t=e.get(qE),r=t?(0,Mu.unpack)(t):null;r||(r={remoteNameToId:{}});let n=et(),s=!1;r.nodeName=et();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:F_(e)??1,nodes:[]})})}i[n]=0,e.putSync(qE,(0,Mu.pack)(r))}return r}function k_(e){return fO(e).remoteNameToId}function kH(e,t){let r=fO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(qE,(0,Mu.pack)(r)),s}function $E(e,t){let r=fO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(qE,(0,Mu.pack)(r))}return HH.trace?.("The remote node name map",e,n,s),s}var HH,Mu,qE,_O=Re(()=>{HH=v(ks());ps();Mu=require("msgpackr"),qE=Symbol.for("remote-ids");a(fO,"getIdMappingRecord");a(k_,"exportIdMapping");a(kH,"remoteToLocalNodeId");a($E,"getIdOfRemoteNode")});var hO={};Ue(hO,{commits_awaiting_replication:()=>vu,getHDBNodeTable:()=>sr,getReplicationSharedStatus:()=>VE,iterateRoutes:()=>q_,shouldReplicateToNode:()=>G_,subscribeToNodeUpdates:()=>Uu});function sr(){return FH||(FH=ft({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function VE(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Uu(e){sr().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;VH.debug?.("adding node",n,"on  node",et()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==et()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of sr().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function G_(e,t){let r=Ea.default.get(x.REPLICATION_DATABASES);return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&(r==="*"||r?.find?.(n=>(typeof n=="string"?n:n.name)===t&&(!n.sharded||e.shard===Ea.default.get(x.REPLICATION_SHARD))))&&sr().primaryStore.get(et())?.replicates||e.subscriptions?.some(n=>(n.database||n.schema)===t&&n.subscribe)}function bne(){Uu(e=>{ga({},(t,r)=>{let n=e.name,s=GH.get(n);if(s||GH.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=VE(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of vu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*q_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=Ea.default.get(x.REPLICATION_SECUREPORT)??(!Ea.default.get(x.REPLICATION_PORT)&&Ea.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||Ea.default.get(x.REPLICATION_PORT)||Ea.default.get(x.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){qH.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var qH,$H,Ea,VH,FH,GH,vu,tl=Re(()=>{xe();ps();jm();qH=require("worker_threads"),$H=v(he()),Ea=v(le());k();VH=v(ks());server.nodes=[];a(sr,"getHDBNodeTable");a(VE,"getReplicationSharedStatus");a(Uu,"subscribeToNodeUpdates");a(G_,"shouldReplicateToNode");GH=new Map;DD((e,t,r)=>{if(r>server.nodes.length)throw new $H.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);vu||(vu=new Map,bne());let n=vu.get(e);return n||(n=[],vu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(bne,"startSubscriptionToReplications");a(q_,"iterateRoutes")});var WH={};Ue(WH,{connectedToNode:()=>rl,disconnectedFromNode:()=>Bu,ensureNode:()=>go,requestClusterStatus:()=>YH,startOnMainThread:()=>pO});async function pO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){KE.set(i,F_(l.auditStore));break}}}Ui.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of q_(e))try{let c=!o.subscriptions;if(c){let u=et(),f=sr().primaryStore.get(u);if(f!==null){let d=e.url??Sa();(f===void 0||f.url!==d||f.shard!==e.shard)&&await go(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Uu(s)});let n;function s(i,o=i?.name){let c=et()&&o===et()||Sa()&&i?.url===Sa();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let _ of sr().search([]))_.replicates&&_.name!==o&&s(_,_.name);n=d}if(nt.trace("Setting up node replication for",i),!i){for(let[d,_]of vi){let h;for(let[m,{worker:S,nodes:g}]of _){let R=g[0];if(R&&R.name==o){h=!0;for(let[E,{worker:T}]of _)_.delete(E),nt.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(h){vi.get(d).iterator.remove(),vi.delete(d);return}}return}if(c)return;if(!i.url){nt.info(`Node ${i.name} is missing url`);return}let l=vi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(nt.info(`Added node ${i.name} at ${i.url} for process ${et()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,_]of xu)if(i.url===_.url){xu.delete(d);break}xu.set(i.name,i)}let u=Xe();if(l||(l=new Map,vi.set(i.url,l)),l.iterator=ga(e,(d,_,h)=>{h?f(_,!0):f(_,!1)}),i.subscriptions)for(let d of i.subscriptions){let _=d.database||d.schema;u[_]||(nt.warn(`Database ${_} not found for node ${i.name}, making a subscription anyway`),f(_,!1))}function f(d,_){nt.trace("Setting up replication for database",d,"on node",i.name);let h=l.get(d),m,S=[{replicateByDefault:_,...i}];KE.has(d)&&$_.default.get(x.REPLICATION_FAILOVER)&&(S.push({replicateByDefault:_,name:et(),start_time:KE.get(d),end_time:Date.now(),replicates:!0}),KE.delete(d));let g=G_(i,d),R=Ui.workers.filter(E=>E.name==="http");if(h?(m=h.worker,h.nodes=S):g&&(t=t%R.length,m=R[t++],l.set(d,{worker:m,nodes:S,url:i.url}),m?.on("exit",()=>{l.get(d)?.worker===m&&(l.delete(d),f(d,_))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};m?m.postMessage(E):V_(E)},One);else{nt.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],sr().primaryStore.get(et())?.replicates),sr().primaryStore.get(et())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};m?m.postMessage(E):WE(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Bu=a(function(i){try{nt.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(xu.keys()),c=o.sort(),l=c.indexOf(i.name||Js(i.url));if(l===-1){nt.warn("Disconnected node not found in node map",i.name,o);return}let u=vi.get(i.url),f=u?.get(i.database);if(!f){nt.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished||!$_.default.get(x.REPLICATION_FAILOVER))return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let _=d.shard,h=(l+1)%c.length;for(;l!==h;){let m=c[h],S=xu.get(m);u=vi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==_){h=(h+1)%c.length;continue}let{worker:R,nodes:E}=g,T=!1;for(let N of f.nodes){if(E.some(M=>M.name===N.name)){nt.info(`Disconnected node is already failing over to ${m} for ${i.database}`);continue}N.end_time<Date.now()||(E.push(N),T=!0)}if(f.nodes=[f.nodes[0]],!T){nt.info(`Disconnected node ${i.name} has no nodes to fail over to ${m}`);return}nt.info(`Failing over ${i.database} from ${i.name} to ${m}`),R?R.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):V_({database:i.database,nodes:E});return}nt.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){nt.error("Error failing over node",o)}},"disconnectedFromNode"),rl=a(function(i){let o=vi.get(i.url),c=o?.get(i.database);if(!c){nt.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){nt.info("Connected node has no nodes",i.database,c);return}if(!l.name){nt.debug("Connected node is not named yet",i.database,c);return}if(!$_.default.get(x.REPLICATION_FAILOVER))return;c.nodes=[l];let u=!1;for(let f of vi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:_,nodes:h,connected:m}=d;if(h)if(m===!1&&h[0].shard===l.shard)u=!0,c.nodes.push(h[0]);else{let S=h.filter(g=>g.name!==l.name);S.length<h.length&&(d.nodes=S,_.postMessage({type:"subscribe-to-node",database:i.database,nodes:h}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,Ui.onMessageByType)("disconnected-from-node",Bu),(0,Ui.onMessageByType)("connected-to-node",rl),(0,Ui.onMessageByType)("request-cluster-status",YH)}function YH(e,t){let r=[];for(let[n,s]of xu)try{let i=vi.get(s.url);nt.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:_}]of i)o.push({database:l,connected:f,latency:_,thread_id:u?.threadId,nodes:d.filter(h=>!(h.end_time<Date.now())).map(h=>h.name)});let c=(0,mO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){nt.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function go(e,t){let r=sr();e=e??Js(t.url),t.name=e;try{if(t.ca){let s=new KH.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){nt.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(nt.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!$_.default.get(x.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,mO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}nt.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var Ui,YE,nt,mO,$_,KH,One,vi,Bu,rl,xu,KE,K_=Re(()=>{xe();Ui=v(it());ps();YE=require("worker_threads");tl();nt=v(ee()),mO=require("lodash"),$_=v(le());k();KH=require("crypto"),One=200,vi=new Map,xu=new Map,KE=new Map;a(pO,"startOnMainThread");a(YH,"requestClusterStatus");YE.parentPort&&(Bu=a(e=>{YE.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),rl=a(e=>{YE.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,Ui.onMessageByType)("subscribe-to-node",e=>{V_(e)}),(0,Ui.onMessageByType)("unsubscribe-from-node",e=>{WE(e)}));a(go,"ensureNode")});var ei=C(mk=>{"use strict";var ir=require("path"),{watch:ZH}=require("chokidar"),Rn=require("fs-extra"),Hu=require("node-forge"),ek=require("net"),{generateKeyPair:gO,X509Certificate:So,createPrivateKey:tk}=require("crypto"),Nne=require("util");gO=Nne.promisify(gO);var bt=Hu.pki,Xs=require("joi"),{v4:rk}=require("uuid"),{validateBySchema:RO}=ot(),yt=ee(),Jn=le(),Es=(k(),P(q)),{CONFIG_PARAMS:sl}=Es,Zs=ay(),{ClientError:Aa}=he(),QE=require("node:tls"),{relative:nk,join:wne}=require("node:path"),{CERT_PREFERENCE_APP:cIe,CERTIFICATE_VALUES:zH}=Zs,Ine=_c(),zE=Dt(),{table:Cne,getDatabases:Pne,databases:EO}=(xe(),P(ct)),{getJWTRSAKeys:QH}=(wu(),P(L_));Object.assign(mk,{generateKeys:NO,updateConfigCert:lk,createCsr:Hne,signCertificate:kne,setCertTable:ku,loadCertificates:OO,reviewSelfSignedCert:IO,createTLSSelector:dk,listCertificates:_k,addCertificate:Kne,removeCertificate:Wne,createNatsCerts:qne,generateCertsKeys:Gne,getReplicationCert:W_,getReplicationCertAuth:xne,renewSelfSigned:$ne,hostnamesFromCert:CO,getKey:zne});var{urlToNodeName:sk,getThisNodeUrl:Dne,getThisNodeName:ZE,clearThisNodeName:Lne}=(ps(),P(ba)),{readFileSync:Mne,statSync:ik}=require("node:fs"),lIe=le(),{getTicketKeys:vne,onMessageFromWorkers:Une}=it(),Ta=ee(),{isMainThread:SO}=require("worker_threads"),{TLSSocket:ok,createSecureContext:uIe}=require("node:tls"),yO=3650,Y_=["127.0.0.1","localhost","::1"],bO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];Une(async e=>{e.type===Es.ITC_EVENT_TYPES.RESTART&&(Jn.initSync(!0),await IO())});var Hr;function ya(){return Hr||(Hr=Pne().system.hdb_certificate,Hr||(Hr=Cne({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),Hr}a(ya,"getCertTable");async function W_(){let e=dk("replication"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(ZE());if(!r)return;let n=new So(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(W_,"getReplicationCert");async function xne(){ya();let e=(await W_()).options.cert,r=new So(e).issuer.match(/CN=(.*)/)?.[1];return Hr.get(r)}a(xne,"getReplicationCertAuth");var TO,Ra=new Map,jE=[],jH;function OO(){if(TO)return;if(TO=!0,!jH&&SO){let n=zE.getConfigFilePath();jH=ZH(n,{persistent:!1}).on("change",()=>{logger.warn?.("Config file changed, reloading certificates"),Bne()})}let e=[{configKey:sl.TLS},{configKey:sl.OPERATIONSAPI_TLS}];ya();let t=ir.dirname(zE.getConfigFilePath()),r;for(let{configKey:n}of e){let s=zE.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&nk(wne(t,"keys"),o);if(c){let l=JH(o,u=>{Ra.set(c,u)},"private key");l&&jE.push(l)}for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&SO){let f=JH(u,d=>{if(zH.cert===d)return;let _=i.hostname??i.hostnames??i.host??i.hosts;_&&!Array.isArray(_)&&(_=[_]);let h=uk(u),m=new So(h),S;try{S=!l&&i.name||hk(x509Cert)}catch(M){logger.error("error extracting host name from certificate",M);return}if(S==null){logger.error("No host name found on certificate");return}if(m.checkIssued(new So(zH.cert)))return;let g=Hr.primaryStore.get(S),R=ik(u).mtimeMs,E=!g||g.is_self_signed?1:g.fileTimestamp??g.__updatedtime__,T=i.uses??["https",...n.includes("operations")?["operations"]:[]],N=g&&R===E&&(JSON.stringify(g.uses)!==JSON.stringify(T)||g.ciphers!==i.ciphers||JSON.stringify(g.hostnames)!==JSON.stringify(_));if(E&&R<=E&&!N){R<E&&logger.info?.(`Certificate ${S} at ${u} is older (${new Date(R)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}N&&logger.info?.(`Config values changed for certificate ${S}, updating record`),r=Hr.put({name:S,uses:i.uses??["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:h,private_key_name:c,is_authority:l,hostnames:_,file_timestamp:R,details:{issuer:m.issuer.replace(/\n/g," "),subject:m.subject?.replace(/\n/g," "),subject_alt_name:m.subjectAltName,serial_number:m.serialNumber,valid_from:m.validFrom,valid_to:m.validTo}})},l?"certificate authority":"certificate");f&&jE.push(f)}}}}}return r}a(OO,"loadCertificates");function Bne(){for(let e of jE)e.close();jE.length=0,TO=!1,OO()}a(Bne,"reloadCertificates");function JH(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&SO&&yt.warn(`Reloading ${r}:`,i),n=c,t(uk(i)))}catch(c){yt.error(`Error loading ${r}:`,i,c)}},"loadFile");return Rn.existsSync(e)?s(e,ik(e)):yt.error?.(`${r} file not found:`,e),ZH(e,{persistent:!1}).on("change",s)}a(JH,"loadAndWatch");function JE(){let e=Dne();if(e==null){let t=Y_[0];return yt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return sk(e)}a(JE,"getHost");function XE(){let e=ZE();if(e==null){let t=Y_[0];return yt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(XE,"getCommonName");async function Hne(){let e=await W_(),t=bt.certificateFromPem(e.options.cert),r=bt.privateKeyFromPem(e.options.key);yt.info("Creating CSR with cert named:",e.name);let n=bt.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:XE()},...bO];yt.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:ak()}];return yt.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),Hu.pki.certificationRequestToPem(n)}a(Hne,"createCsr");function ak(){let e=Y_.includes(XE())?Y_:[...Y_,XE()];return e.includes(JE())||e.push(JE()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>ek.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(ak,"certExtensions");async function kne(e){let t={},r=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;ya();for await(let f of Hr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(Ra.has(f.private_key_name)){n=Ra.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await Rn.exists(ir.join(r,f.private_key_name))){n=Rn.readFile(ir.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await AO();s=f.ca,n=f.private_key}n=bt.privateKeyFromPem(n),t.signingCA=s.certificate;let i=bt.certificateFromPem(s.certificate);yt.info("Signing CSR with cert named",s.name);let o=bt.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return yt.error(f),new Error("Error verifying CSR: "+f.message)}let c=Hu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+yO),yt.info("sign cert setting validity:",c.validity),yt.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),yt.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;yt.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,Hu.md.sha256.create()),t.certificate=bt.certificateToPem(c)}else yt.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(kne,"signCertificate");async function Fne(e,t){await ku({name:ZE(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await ku({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:bt.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Fne,"createCertificateTable");async function ku(e){let t=new So(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},ya(),await Hr.patch(e)}a(ku,"setCertTable");async function NO(){let e=await gO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:bt.publicKeyFromPem(e.publicKey),private_key:bt.privateKeyFromPem(e.privateKey)}}a(NO,"generateKeys");async function wO(e,t,r){let n=bt.createCertificate();if(!t){let o=await W_();t=bt.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+yO);let i=[{name:"commonName",value:XE()},...bO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(ak()),n.sign(e,Hu.md.sha256.create()),bt.certificateToPem(n)}a(wO,"generateCertificates");async function AO(){let e=await _k(),t;for(let r of e){if(!r.is_authority)continue;let n=await fk(r.private_key_name);if(r.private_key_name&&n&&new So(r.certificate).checkPrivateKey(tk(n))){yt.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;yt.trace("No CA found with matching private key")}a(AO,"getCertAuthority");async function ck(e,t,r=!0){let n=bt.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+yO);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Jn.get(sl.REPLICATION_HOSTNAME)??sk(Jn.get(sl.REPLICATION_URL))??rk().split("-")[0]}`},...bO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,Hu.md.sha256.create());let o=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),c=ir.join(o,Zs.PRIVATEKEY_PEM_NAME);return r&&await Rn.writeFile(c,bt.privateKeyToPem(e)),n}a(ck,"generateCertAuthority");async function Gne(){let{private_key:e,public_key:t}=await NO(),r=await ck(e,t),n=await wO(e,t,r);await Fne(n,r),lk()}a(Gne,"generateCertsKeys");async function qne(){let e=await wO(bt.privateKeyFromPem(Zs.CERTIFICATE_VALUES.key),void 0,bt.certificateFromPem(Zs.CERTIFICATE_VALUES.cert)),t=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),r=ir.join(t,Zs.NATS_CERTIFICATE_PEM_NAME);await Rn.exists(r)||await Rn.writeFile(r,e);let n=ir.join(t,Zs.NATS_CA_PEM_NAME);await Rn.exists(n)||await Rn.writeFile(n,Zs.CERTIFICATE_VALUES.cert)}a(qne,"createNatsCerts");async function $ne(){ya();for await(let e of Hr.search([{attribute:"is_self_signed",value:!0}]))await Hr.delete(e.name);await IO()}a($ne,"renewSelfSigned");async function IO(){Lne(),await OO(),ya();let e=await AO();if(!e){yt.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:bt.privateKeyFromPem(Rn.readFileSync(u)),keyPath:u}}catch(f){return yt.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Jn.get(sl.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Jn.get(sl.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),c=nk(o,i);s||(yt.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await NO(),Rn.existsSync(ir.join(o,Zs.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${rk().split("-")[0]}.pem`),await Rn.writeFile(ir.join(o,c),bt.privateKeyToPem(s)));let l=await ck(s,bt.setRsaPublicKey(s.n,s.e),!1);await ku({name:l.subject.getField("CN").value,uses:["https"],certificate:bt.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await W_()){let r=ZE();yt.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await AO();let n=bt.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await wO(bt.privateKeyFromPem(e.private_key),s,n);await ku({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(IO,"reviewSelfSignedCert");function lk(){let e=Ine(Object.keys(Es.CONFIG_PARAM_MAP),!0),t=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),r=ir.join(t,Zs.PRIVATEKEY_PEM_NAME),n=ir.join(t,Zs.NATS_CERTIFICATE_PEM_NAME),s=ir.join(t,Zs.NATS_CA_PEM_NAME),i=Es.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),zE.updateConfigValue(void 0,void 0,o,!1,!0)}a(lk,"updateConfigCert");function uk(e){return e.startsWith("-----BEGIN")?e:Mne(e,"utf8")}a(uk,"readPEM");var XH=QE.createSecureContext;QE.createSecureContext=function(e){if(!e.cert||!e.key)return XH(e);let t={...e};delete t.key,delete t.cert;let r=XH(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var Vne=ok.prototype._init;ok.prototype._init=function(e,t){Vne.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var nl=new Map;function dk(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),nl.clear();let f=0;for await(let d of EO.system.hdb_certificate.search([])){let _=d.certificate,h=new So(_);d.is_authority&&(h.asString=_,nl.set(h.subject,_))}for await(let d of EO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let _=e==="operations-api",h=d.is_self_signed?1:2;d.uses?.includes(e)&&(h+=1);let m=await fk(d.private_key_name),S=d.certificate,g=new So(S);if(nl.has(g.issuer)&&(S+=`
+`,"")}a(IH,"runCommand");async function tne(){try{await Dre.access(sO)}catch{return!1}let e=await IH(`${sO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return Lre.eq(t,Zre)}a(tne,"checkNATSServerInstalled");async function lO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let o=await NH.getClusterUser();if(el(o))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=o.username,r=o.decrypt_hash}js.trace("create nats connection called");let i=await Vre({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:Nr.get(ze.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),js.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(o=>{o&&js.error("Error with Nats client connection, connection closed",o),i===Xr&&CH()}),i}a(lO,"createConnection");function CH(){Xr=void 0,Jc=void 0,Xc=void 0,Zc=void 0}a(CH,"clearClientCache");async function rne(){Xr&&(await Xr.drain(),Xr=void 0,Jc=void 0,Xc=void 0,Zc=void 0)}a(rne,"closeConnection");var Xr,Zc;async function B_(){return Zc||(Zc=lO(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),Xr=await Zc),Xr||Zc}a(B_,"getConnection");async function H_(){if(Jc)return Jc;el(Xr)&&await B_();let{domain:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(el(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Jc=await Xr.jetstreamManager({domain:e,timeout:6e4}),Jc}a(H_,"getJetStreamManager");async function PH(){if(Xc)return Xc;el(Xr)&&await B_();let{domain:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(el(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Xc=Xr.jetstream({domain:e,timeout:6e4}),Xc}a(PH,"getJetStream");async function Mi(){let e=Xr||await B_(),t=Jc||await H_(),r=Xc||await PH();return{connection:e,jsm:t,js:r}}a(Mi,"getNATSReferences");async function nne(e){let t=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await NH.getClusterUser(),s=await lO(t,r,n),i=cO(),o=s.subscribe(i),c=[],l,u=(async()=>{for await(let f of o){let d=wH.decode(f.data);d.response_time=Date.now()-l,c.push(d)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await kE.async_set_timeout(e),await o.drain(),await s.close(),await u,c}a(nne,"getServerList");async function uO(e,t){let{jsm:r}=await Mi(),n=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:Kre.File,retention:Yre.Limits,subjects:t,discard:Wre.Old,max_msgs:s,max_bytes:i,max_age:n})}a(uO,"createLocalStream");async function DH(){let{jsm:e}=await Mi(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}a(DH,"listStreams");async function sne(e){let{jsm:t}=await Mi();await t.streams.delete(e)}a(sne,"deleteLocalStream");async function ine(e){let{connection:t}=await Mi(),r=[],n=cO(),s=t.subscribe(n),i=(async()=>{for await(let o of s)r.push(wH.decode(o.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}a(ine,"listRemoteStreams");async function one(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=RH(),o={durable_name:i,ack_policy:oO.Explicit};t&&(o.deliver_policy=aO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let f of l){let d=iO(f.data),_={nats_timestamp:f.info.timestampNanos,nats_sequence:f.info.streamSequence,entry:d};if(f.headers&&(_.origin=f.headers.get(Br.MSG_HEADERS.ORIGIN)),u.push(_),f.ack(),f.info.pending===0)break}return await c.delete(),u}a(one,"viewStream");async function*ane(e,t=void 0,r=void 0){let{jsm:n,js:s}=await Mi(),i=RH(),o={durable_name:i,ack_policy:oO.Explicit};t&&(o.deliver_policy=aO.StartTime,o.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,o);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let f=iO(u.data);f[0]||(f=[f]);for(let d of f){let _={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:d};u.headers&&(_.origin=u.headers.get(Br.MSG_HEADERS.ORIGIN)),yield _}if(u.ack(),u.info.pending===0)break}await c.delete()}a(ane,"viewStreamIterator");async function cne(e,t,r,n){js.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=LH(n,r);let{js:s}=await Mi(),i=await GE(),o=`${e}.${i}`,c=await Jre(()=>n instanceof Uint8Array?n:OH.encode(n));try{js.trace(`publishToStream publishing to subject: ${o}`),jre(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(o,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return vH(async()=>{try{await s.publish(o,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){js.trace(`publishToStream creating stream: ${t}`);let f=o.split(".");f[2]="*",await uO(t,[o]),await s.publish(o,c,{headers:r})}else throw l}});throw l}}a(cne,"publishToStream");function LH(e,t){t===void 0&&(t=Qre());let r=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Br.MSG_HEADERS.ORIGIN)&&r&&t.append(Br.MSG_HEADERS.ORIGIN,r),t}a(LH,"addNatsMsgHeader");function Lu(e){e=e.toLowerCase();let t=x_.join(Nr.get(ze.CONFIG_PARAMS.ROOTPATH),Xre);if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return el(nO)&&(nO={port:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.HUB,config_file:Br.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:x_.join(t,Br.PID_FILES.HUB),hdb_nats_path:t}),nO;if(e===ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return el(rO)&&(rO={port:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.LEAF,config_file:Br.NATS_CONFIG_FILES.LEAF_SERVER,domain:v_.getConfigFromFile(ze.CONFIG_PARAMS.CLUSTERING_NODENAME)+Br.SERVER_SUFFIX.LEAF,pid_file_path:x_.join(t,Br.PID_FILES.LEAF),hdb_nats_path:t}),rO;js.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}a(Lu,"getServerConfig");async function MH(e,t,r,n){try{await e.consumers.add(t,{ack_policy:oO.Explicit,durable_name:r,deliver_policy:aO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}a(MH,"createConsumer");async function lne(e,t,r){await e.consumers.delete(t,r)}a(lne,"removeConsumer");function une(e){return e.split(".")[1]}a(une,"extractServerName");async function dne(e,t,r=6e4,n=cO()){if(!kE.isObject(t))throw new Error("data param must be an object");let s=OH.encode(t),{connection:i}=await Mi(),o={timeout:r};n&&(o.reply=n,o.noMux=!0);let c=await i.request(e,s,o);return iO(c.data)}a(dne,"request");function dO(e){return new Promise(async(t,r)=>{let n=xre(sO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",o=>{r(o)}),n.stdout.on("data",o=>{i+=o.toString()}),n.stderr.on("data",o=>{s+=o.toString()}),n.stderr.on("close",o=>{s&&r(s),t(i)})})}a(dO,"reloadNATS");async function fne(){let{pid_file_path:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await dO(e)}a(fne,"reloadNATSHub");async function _ne(){let{pid_file_path:e}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await dO(e)}a(_ne,"reloadNATSLeaf");function hne(e,t,r){let n;switch(e.code){case AH.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case AH.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}a(hne,"requestErrorHandler");async function mne(e,t){let r=t+Br.SERVER_SUFFIX.LEAF,{connection:n}=await Mi(),{jsm:s}=await yne(r),{schema:i,table:o}=e,c=FE.createNatsTableStreamName(i,o),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await vH(async()=>{if(e.subscribe===!0)await MH(s,c,n.info.server_name,l);else try{await lne(s,c,n.info.server_name)}catch(u){js.trace(u)}})}a(mne,"updateRemoteConsumer");async function pne(e,t,r,n){let s=FE.createNatsTableStreamName(e,t),i=r+Br.SERVER_SUFFIX.LEAF,o={type:ze.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!bH&&qre()<Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=tO();await c(o)}await Fre(o),n==="stop"&&await kE.async_set_timeout(1e3)}a(pne,"updateConsumerIterator");function vH(e){return kre.writeTransaction(ze.SYSTEM_SCHEMA_NAME,ze.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}a(vH,"exclusiveLock");async function UH(e,t){let r=FE.createNatsTableStreamName(e,t),n=await GE(),s=Tne(e,t,n);await uO(r,[s])}a(UH,"createLocalTableStream");async function Ene(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await UH(n,s)}}a(Ene,"createTableStreams");async function xH(e,t,r=void 0){if(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=FE.createNatsTableStreamName(e,t),{domain:s}=Lu(ze.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await B_()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")js.warn(n);else throw n}}a(xH,"purgeTableStream");async function gne(e,t){if(Nr.get(ze.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await xH(e,t[r])}a(gne,"purgeSchemaTableStreams");async function Sne(e){return(await H_()).streams.info(e)}a(Sne,"getStreamInfo");function Tne(e,t,r){return`${Br.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}a(Tne,"createSubjectName");async function GE(){if(U_)return U_;if(U_=(await H_())?.nc?.info?.server_name,U_===void 0)throw new Error("Unable to get jetstream manager server name");return U_}a(GE,"getJsmServerName");async function Ane(){let e=await H_(),t=await GE(),r=await DH();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let o=Rne(n),c=i.split(".");if(c[c.length-1]===t&&!o||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let f=u.join(".");js.trace(`Updating stream subject name from: ${i} to: ${f}`),s.subjects[0]=f,await e.streams.update(s.name,s)}}a(Ane,"updateLocalStreams");function Rne(e){let{config:t}=e,r=!1,n=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=Nr.get(ze.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}a(Rne,"updateStreamLimits");async function yne(e){let t,r;try{t=await Xr.jetstream({domain:e}),r=await Xr.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw js.error("Unable to connect to:",e),n}return{js:t,jsm:r}}a(yne,"connectToRemoteJS")});function fO(e){let t=e.get(qE),r=t?(0,Mu.unpack)(t):null;r||(r={remoteNameToId:{}});let n=et(),s=!1;r.nodeName=et();let i=r.remoteNameToId;if(i[n]!==0){let o=0,c;for(let l in i){let u=i[l];u===0?c=l:u>o&&(o=u)}if(c){o++,i[c]=o;let l=[Symbol.for("seq"),o];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:F_(e)??1,nodes:[]})})}i[n]=0,e.putSync(qE,(0,Mu.pack)(r))}return r}function k_(e){return fO(e).remoteNameToId}function kH(e,t){let r=fO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let o in e){let c=e[o],l=n[o];if(l==null){let u=0;for(let f in n){let d=n[f];d>u&&(u=d)}l=u+1,n[o]=l,i=!0}s.set(c,l)}return i&&t.putSync(qE,(0,Mu.pack)(r)),s}function $E(e,t){let r=fO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let o in n){let c=n[o];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(qE,(0,Mu.pack)(r))}return HH.trace?.("The remote node name map",e,n,s),s}var HH,Mu,qE,_O=Re(()=>{HH=v(ks());ps();Mu=require("msgpackr"),qE=Symbol.for("remote-ids");a(fO,"getIdMappingRecord");a(k_,"exportIdMapping");a(kH,"remoteToLocalNodeId");a($E,"getIdOfRemoteNode")});var hO={};Ue(hO,{commits_awaiting_replication:()=>vu,getHDBNodeTable:()=>sr,getReplicationSharedStatus:()=>VE,iterateRoutes:()=>q_,shouldReplicateToNode:()=>G_,subscribeToNodeUpdates:()=>Uu});function sr(){return FH||(FH=ft({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function VE(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Uu(e){sr().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;VH.debug?.("adding node",n,"on  node",et()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==et()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of sr().search({}))if(i.shard!=null){let o=s.get(i.shard);o||s.set(i.shard,o=[]),o.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function G_(e,t){let r=Ea.default.get(x.REPLICATION_DATABASES);return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&(r==="*"||r?.find?.(n=>(typeof n=="string"?n:n.name)===t&&(!n.sharded||e.shard===Ea.default.get(x.REPLICATION_SHARD))))&&sr().primaryStore.get(et())?.replicates||e.subscriptions?.some(n=>(n.database||n.schema)===t&&n.subscribe)}function bne(){Uu(e=>{ga({},(t,r)=>{let n=e.name,s=GH.get(n);if(s||GH.set(n,s=new Map),s.has(r))return;let i;for(let o in t)if(i=t[o].auditStore,i)break;if(i){let o=VE(i,r,n,()=>{let c=o[0],l=o.lastTime;for(let{txnTime:u,onConfirm:f}of vu.get(r)||[])u>l&&u<=c&&f();o.lastTime=c});o.lastTime=0,s.set(r,o)}})})}function*q_(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=Ea.default.get(x.REPLICATION_SECUREPORT)??(!Ea.default.get(x.REPLICATION_PORT)&&Ea.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||Ea.default.get(x.REPLICATION_PORT)||Ea.default.get(x.OPERATIONSAPI_NETWORK_PORT);let o=i?.lastIndexOf?.(":");o>0&&(i=+i.slice(o+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){qH.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,start_time:t.startTime,revoked_certificates:t.revokedCertificates}}}var qH,$H,Ea,VH,FH,GH,vu,tl=Re(()=>{xe();ps();jm();qH=require("worker_threads"),$H=v(he()),Ea=v(le());k();VH=v(ks());server.nodes=[];a(sr,"getHDBNodeTable");a(VE,"getReplicationSharedStatus");a(Uu,"subscribeToNodeUpdates");a(G_,"shouldReplicateToNode");GH=new Map;DD((e,t,r)=>{if(r>server.nodes.length)throw new $H.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);vu||(vu=new Map,bne());let n=vu.get(e);return n||(n=[],vu.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:a(()=>{++i===r&&s()},"onConfirm")})})});a(bne,"startSubscriptionToReplications");a(q_,"iterateRoutes")});var WH={};Ue(WH,{connectedToNode:()=>rl,disconnectedFromNode:()=>Bu,ensureNode:()=>go,requestClusterStatus:()=>YH,startOnMainThread:()=>pO});async function pO(e){let t=0,r=Xe();for(let i of Object.getOwnPropertyNames(r)){let o=r[i];for(let c in o){let l=o[c];if(l.auditStore){KE.set(i,F_(l.auditStore));break}}}Ui.whenThreadsStarted.then(async()=>{let i=[];for await(let o of r.system.hdb_nodes?.search([])||[])i.push(o);for(let o of q_(e))try{let c=!o.subscriptions;if(c){let u=et(),f=sr().primaryStore.get(u);if(f!==null){let d=e.url??Sa();(f===void 0||f.url!==d||f.shard!==e.shard)&&await go(u,{name:u,url:d,shard:e.shard,replicates:!0})}}let l=o.trusted!==!1;if(c&&o.replicates==null&&(o.replicates=!0),i.find(u=>u.url===o.url))continue;s(o)}catch(c){console.error(c)}Uu(s)});let n;function s(i,o=i?.name){let c=et()&&o===et()||Sa()&&i?.url===Sa();if(c){let d=!!i?.replicates;if(n!==void 0&&n!==d)for(let _ of sr().search([]))_.replicates&&_.name!==o&&s(_,_.name);n=d}if(nt.trace("Setting up node replication for",i),!i){for(let[d,_]of vi){let h;for(let[m,{worker:S,nodes:g}]of _){let R=g[0];if(R&&R.name==o){h=!0;for(let[E,{worker:T}]of _)_.delete(E),nt.warn("Node was deleted, unsubscribing from node",o,E,d),T?.postMessage({type:"unsubscribe-from-node",node:o,database:E,url:d});break}}if(h){vi.get(d).iterator.remove(),vi.delete(d);return}}return}if(c)return;if(!i.url){nt.info(`Node ${i.name} is missing url`);return}let l=vi.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(nt.info(`Added node ${i.name} at ${i.url} for process ${et()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[d,_]of xu)if(i.url===_.url){xu.delete(d);break}xu.set(i.name,i)}let u=Xe();if(l||(l=new Map,vi.set(i.url,l)),l.iterator=ga(e,(d,_,h)=>{h?f(_,!0):f(_,!1)}),i.subscriptions)for(let d of i.subscriptions){let _=d.database||d.schema;u[_]||(nt.warn(`Database ${_} not found for node ${i.name}, making a subscription anyway`),f(_,!1))}function f(d,_){nt.trace("Setting up replication for database",d,"on node",i.name);let h=l.get(d),m,S=[{replicateByDefault:_,...i}];KE.has(d)&&$_.default.get(x.REPLICATION_FAILOVER)&&(S.push({replicateByDefault:_,name:et(),start_time:KE.get(d),end_time:Date.now(),replicates:!0}),KE.delete(d));let g=G_(i,d),R=Ui.workers.filter(E=>E.name==="http");if(h?(m=h.worker,h.nodes=S):g&&(t=t%R.length,m=R[t++],l.set(d,{worker:m,nodes:S,url:i.url}),m?.on("exit",()=>{l.get(d)?.worker===m&&(l.delete(d),f(d,_))})),g)setTimeout(()=>{let E={type:"subscribe-to-node",database:d,nodes:S};m?m.postMessage(E):V_(E)},One);else{nt.info("Node no longer should be used, unsubscribing from node",i.replicates,!!u[d],sr().primaryStore.get(et())?.replicates),sr().primaryStore.get(et())?.replicates||(n=!1);let E={type:"unsubscribe-from-node",database:d,url:i.url,name:i.name};m?m.postMessage(E):WE(E)}}a(f,"onDatabase")}a(s,"onNodeUpdate"),Bu=a(function(i){try{nt.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let o=Array.from(xu.keys()),c=o.sort(),l=c.indexOf(i.name||Js(i.url));if(l===-1){nt.warn("Disconnected node not found in node map",i.name,o);return}let u=vi.get(i.url),f=u?.get(i.database);if(!f){nt.warn("Disconnected node not found in replication map",i.database,u);return}if(f.connected=!1,i.finished||!$_.default.get(x.REPLICATION_FAILOVER))return;let d=f.nodes[0];if(!(d.replicates===!0||d.replicates?.sends||d.subscriptions?.length))return;let _=d.shard,h=(l+1)%c.length;for(;l!==h;){let m=c[h],S=xu.get(m);u=vi.get(S.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==_){h=(h+1)%c.length;continue}let{worker:R,nodes:E}=g,T=!1;for(let N of f.nodes){if(E.some(M=>M.name===N.name)){nt.info(`Disconnected node is already failing over to ${m} for ${i.database}`);continue}N.end_time<Date.now()||(E.push(N),T=!0)}if(f.nodes=[f.nodes[0]],!T){nt.info(`Disconnected node ${i.name} has no nodes to fail over to ${m}`);return}nt.info(`Failing over ${i.database} from ${i.name} to ${m}`),R?R.postMessage({type:"subscribe-to-node",database:i.database,nodes:E}):V_({database:i.database,nodes:E});return}nt.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(o){nt.error("Error failing over node",o)}},"disconnectedFromNode"),rl=a(function(i){let o=vi.get(i.url),c=o?.get(i.database);if(!c){nt.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,o);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){nt.info("Connected node has no nodes",i.database,c);return}if(!l.name){nt.debug("Connected node is not named yet",i.database,c);return}if(!$_.default.get(x.REPLICATION_FAILOVER))return;c.nodes=[l];let u=!1;for(let f of vi.values()){let d=f.get(i.database);if(!d||d==c)continue;let{worker:_,nodes:h,connected:m}=d;if(h)if(m===!1&&h[0].shard===l.shard)u=!0,c.nodes.push(h[0]);else{let S=h.filter(g=>g.name!==l.name);S.length<h.length&&(d.nodes=S,_.postMessage({type:"subscribe-to-node",database:i.database,nodes:h}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,Ui.onMessageByType)("disconnected-from-node",Bu),(0,Ui.onMessageByType)("connected-to-node",rl),(0,Ui.onMessageByType)("request-cluster-status",YH)}function YH(e,t){let r=[];for(let[n,s]of xu)try{let i=vi.get(s.url);nt.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let o=[];if(i){for(let[l,{worker:u,connected:f,nodes:d,latency:_}]of i)o.push({database:l,connected:f,latency:_,thread_id:u?.threadId,nodes:d.filter(h=>!(h.end_time<Date.now())).map(h=>h.name)});let c=(0,mO.cloneDeep)(s);c.database_sockets=o,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){nt.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function go(e,t){let r=sr();e=e??Js(t.url),t.name=e;try{if(t.ca){let s=new KH.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subject_alt_name:s.subjectAltName,serial_number:s.serialNumber,valid_from:s.validFrom,valid_to:s.validTo}}}catch(s){nt.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(nt.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!$_.default.get(x.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],o=(0,mO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of o)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...o,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}nt.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var Ui,YE,nt,mO,$_,KH,One,vi,Bu,rl,xu,KE,K_=Re(()=>{xe();Ui=v(it());ps();YE=require("worker_threads");tl();nt=v(ee()),mO=require("lodash"),$_=v(le());k();KH=require("crypto"),One=200,vi=new Map,xu=new Map,KE=new Map;a(pO,"startOnMainThread");a(YH,"requestClusterStatus");YE.parentPort&&(Bu=a(e=>{YE.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),rl=a(e=>{YE.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,Ui.onMessageByType)("subscribe-to-node",e=>{V_(e)}),(0,Ui.onMessageByType)("unsubscribe-from-node",e=>{WE(e)}));a(go,"ensureNode")});var ei=C(mk=>{"use strict";var ir=require("path"),{watch:ZH}=require("chokidar"),Rn=require("fs-extra"),Hu=require("node-forge"),ek=require("net"),{generateKeyPair:gO,X509Certificate:So,createPrivateKey:tk}=require("crypto"),Nne=require("util");gO=Nne.promisify(gO);var bt=Hu.pki,Xs=require("joi"),{v4:rk}=require("uuid"),{validateBySchema:RO}=ot(),yt=ee(),Jn=le(),Es=(k(),P(q)),{CONFIG_PARAMS:sl}=Es,Zs=ay(),{ClientError:Aa}=he(),QE=require("node:tls"),{relative:nk,join:wne}=require("node:path"),{CERT_PREFERENCE_APP:cIe,CERTIFICATE_VALUES:zH}=Zs,Ine=_c(),zE=Dt(),{table:Cne,getDatabases:Pne,databases:EO}=(xe(),P(ct)),{getJWTRSAKeys:QH}=(wu(),P(L_));Object.assign(mk,{generateKeys:NO,updateConfigCert:lk,createCsr:Hne,signCertificate:kne,setCertTable:ku,loadCertificates:OO,reviewSelfSignedCert:IO,createTLSSelector:dk,listCertificates:_k,addCertificate:Kne,removeCertificate:Wne,createNatsCerts:qne,generateCertsKeys:Gne,getReplicationCert:W_,getReplicationCertAuth:xne,renewSelfSigned:$ne,hostnamesFromCert:CO,getKey:zne});var{urlToNodeName:sk,getThisNodeUrl:Dne,getThisNodeName:ZE,clearThisNodeName:Lne}=(ps(),P(ba)),{readFileSync:Mne,statSync:ik}=require("node:fs"),lIe=le(),{getTicketKeys:vne,onMessageFromWorkers:Une}=it(),Ta=ee(),{isMainThread:SO}=require("worker_threads"),{TLSSocket:ok,createSecureContext:uIe}=require("node:tls"),yO=3650,Y_=["127.0.0.1","localhost","::1"],bO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];Une(async e=>{e.type===Es.ITC_EVENT_TYPES.RESTART&&(Jn.initSync(!0),await IO())});var Hr;function ya(){return Hr||(Hr=Pne().system.hdb_certificate,Hr||(Hr=Cne({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),Hr}a(ya,"getCertTable");async function W_(){let e=dk("replication"),t={secureContexts:null,setSecureContext:a(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(ZE());if(!r)return;let n=new So(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}a(W_,"getReplicationCert");async function xne(){ya();let e=(await W_()).options.cert,r=new So(e).issuer.match(/CN=(.*)/)?.[1];return Hr.get(r)}a(xne,"getReplicationCertAuth");var TO,Ra=new Map,jE=[],jH;function OO(){if(TO)return;if(TO=!0,!jH&&SO){let n=zE.getConfigFilePath();jH=ZH(n,{persistent:!1}).on("change",()=>{logger.warn?.("Config file changed, reloading certificates"),Bne()})}let e=[{configKey:sl.TLS},{configKey:sl.OPERATIONSAPI_TLS}];ya();let t=ir.dirname(zE.getConfigFilePath()),r;for(let{configKey:n}of e){let s=zE.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let o=i.privateKey,c=o&&nk(wne(t,"keys"),o);if(c){let l=JH(o,u=>{Ra.set(c,u)},"private key");l&&jE.push(l)}for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&SO){let f=JH(u,d=>{if(zH.cert===d)return;let _=i.hostname??i.hostnames??i.host??i.hosts;_&&!Array.isArray(_)&&(_=[_]);let h=uk(u),m=new So(h),S;try{S=!l&&i.name||hk(m)}catch(M){logger.error("error extracting host name from certificate",M);return}if(S==null){logger.error("No host name found on certificate");return}if(m.checkIssued(new So(zH.cert)))return;let g=Hr.primaryStore.get(S),R=ik(u).mtimeMs,E=!g||g.is_self_signed?1:g.fileTimestamp??g.__updatedtime__,T=i.uses??["https",...n.includes("operations")?["operations"]:[]],N=g&&R===E&&(JSON.stringify(g.uses)!==JSON.stringify(T)||g.ciphers!==i.ciphers||JSON.stringify(g.hostnames)!==JSON.stringify(_));if(E&&R<=E&&!N){R<E&&logger.info?.(`Certificate ${S} at ${u} is older (${new Date(R)}) than the certificate in the database (${E>1?new Date(E):"only self signed certificate available"})`);return}N&&logger.info?.(`Config values changed for certificate ${S}, updating record`),r=Hr.put({name:S,uses:i.uses??["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:h,private_key_name:c,is_authority:l,hostnames:_,file_timestamp:R,details:{issuer:m.issuer.replace(/\n/g," "),subject:m.subject?.replace(/\n/g," "),subject_alt_name:m.subjectAltName,serial_number:m.serialNumber,valid_from:m.validFrom,valid_to:m.validTo}})},l?"certificate authority":"certificate");f&&jE.push(f)}}}}}return r}a(OO,"loadCertificates");function Bne(){for(let e of jE)e.close();jE.length=0,TO=!1,OO()}a(Bne,"reloadCertificates");function JH(e,t,r){let n,s=a((i,o)=>{try{let c=o.mtimeMs;c&&c!==n&&(n&&SO&&yt.warn(`Reloading ${r}:`,i),n=c,t(uk(i)))}catch(c){yt.error(`Error loading ${r}:`,i,c)}},"loadFile");return Rn.existsSync(e)?s(e,ik(e)):yt.error?.(`${r} file not found:`,e),ZH(e,{persistent:!1}).on("change",s)}a(JH,"loadAndWatch");function JE(){let e=Dne();if(e==null){let t=Y_[0];return yt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return sk(e)}a(JE,"getHost");function XE(){let e=ZE();if(e==null){let t=Y_[0];return yt.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}a(XE,"getCommonName");async function Hne(){let e=await W_(),t=bt.certificateFromPem(e.options.cert),r=bt.privateKeyFromPem(e.options.key);yt.info("Creating CSR with cert named:",e.name);let n=bt.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:XE()},...bO];yt.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:ak()}];return yt.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),Hu.pki.certificationRequestToPem(n)}a(Hne,"createCsr");function ak(){let e=Y_.includes(XE())?Y_:[...Y_,XE()];return e.includes(JE())||e.push(JE()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>ek.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}a(ak,"certExtensions");async function kne(e){let t={},r=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;ya();for await(let f of Hr.search([]))if(f.is_authority&&!f.details.issuer.includes("HarperDB-Certificate-Authority")){if(Ra.has(f.private_key_name)){n=Ra.get(f.private_key_name),s=f;break}else if(f.private_key_name&&await Rn.exists(ir.join(r,f.private_key_name))){n=Rn.readFile(ir.join(r,f.private_key_name)),s=f;break}}if(!n){let f=await AO();s=f.ca,n=f.private_key}n=bt.privateKeyFromPem(n),t.signingCA=s.certificate;let i=bt.certificateFromPem(s.certificate);yt.info("Signing CSR with cert named",s.name);let o=bt.certificationRequestFromPem(e.csr);try{o.verify()}catch(f){return yt.error(f),new Error("Error verifying CSR: "+f.message)}let c=Hu.pki.createCertificate();c.serialNumber=Math.random().toString().slice(2,10),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+yO),yt.info("sign cert setting validity:",c.validity),yt.info("sign cert setting subject from CSR:",o.subject.attributes),c.setSubject(o.subject.attributes),yt.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=o.getAttribute({name:"extensionRequest"}).extensions;yt.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=o.publicKey,c.sign(n,Hu.md.sha256.create()),t.certificate=bt.certificateToPem(c)}else yt.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}a(kne,"signCertificate");async function Fne(e,t){await ku({name:ZE(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await ku({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:bt.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}a(Fne,"createCertificateTable");async function ku(e){let t=new So(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},ya(),await Hr.patch(e)}a(ku,"setCertTable");async function NO(){let e=await gO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{public_key:bt.publicKeyFromPem(e.publicKey),private_key:bt.privateKeyFromPem(e.privateKey)}}a(NO,"generateKeys");async function wO(e,t,r){let n=bt.createCertificate();if(!t){let o=await W_();t=bt.certificateFromPem(o.options.cert).publicKey}n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+yO);let i=[{name:"commonName",value:XE()},...bO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(ak()),n.sign(e,Hu.md.sha256.create()),bt.certificateToPem(n)}a(wO,"generateCertificates");async function AO(){let e=await _k(),t;for(let r of e){if(!r.is_authority)continue;let n=await fk(r.private_key_name);if(r.private_key_name&&n&&new So(r.certificate).checkPrivateKey(tk(n))){yt.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;yt.trace("No CA found with matching private key")}a(AO,"getCertAuthority");async function ck(e,t,r=!0){let n=bt.createCertificate();n.publicKey=t,n.serialNumber=Math.random().toString().slice(2,10),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+yO);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${Jn.get(sl.REPLICATION_HOSTNAME)??sk(Jn.get(sl.REPLICATION_URL))??rk().split("-")[0]}`},...bO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,Hu.md.sha256.create());let o=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),c=ir.join(o,Zs.PRIVATEKEY_PEM_NAME);return r&&await Rn.writeFile(c,bt.privateKeyToPem(e)),n}a(ck,"generateCertAuthority");async function Gne(){let{private_key:e,public_key:t}=await NO(),r=await ck(e,t),n=await wO(e,t,r);await Fne(n,r),lk()}a(Gne,"generateCertsKeys");async function qne(){let e=await wO(bt.privateKeyFromPem(Zs.CERTIFICATE_VALUES.key),void 0,bt.certificateFromPem(Zs.CERTIFICATE_VALUES.cert)),t=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),r=ir.join(t,Zs.NATS_CERTIFICATE_PEM_NAME);await Rn.exists(r)||await Rn.writeFile(r,e);let n=ir.join(t,Zs.NATS_CA_PEM_NAME);await Rn.exists(n)||await Rn.writeFile(n,Zs.CERTIFICATE_VALUES.cert)}a(qne,"createNatsCerts");async function $ne(){ya();for await(let e of Hr.search([{attribute:"is_self_signed",value:!0}]))await Hr.delete(e.name);await IO()}a($ne,"renewSelfSigned");async function IO(){Lne(),await OO(),ya();let e=await AO();if(!e){yt.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=a(u=>{try{return{key:bt.privateKeyFromPem(Rn.readFileSync(u)),keyPath:u}}catch(f){return yt.warn(`Failed to parse private key from ${u}:`,f.message),{key:null,keyPath:u}}},"tryToParseKey"),n=Jn.get(sl.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let f=r(u.privateKey);if(s=f.key,i=f.keyPath,f.key)break}}else{let u=Jn.get(sl.TLS_PRIVATEKEY),f=r(u);s=f.key,i=f.keyPath}let o=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),c=nk(o,i);s||(yt.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{private_key:s}=await NO(),Rn.existsSync(ir.join(o,Zs.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${rk().split("-")[0]}.pem`),await Rn.writeFile(ir.join(o,c),bt.privateKeyToPem(s)));let l=await ck(s,bt.setRsaPublicKey(s.n,s.e),!1);await ku({name:l.subject.getField("CN").value,uses:["https"],certificate:bt.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await W_()){let r=ZE();yt.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await AO();let n=bt.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await wO(bt.privateKeyFromPem(e.private_key),s,n);await ku({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}a(IO,"reviewSelfSignedCert");function lk(){let e=Ine(Object.keys(Es.CONFIG_PARAM_MAP),!0),t=ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME),r=ir.join(t,Zs.PRIVATEKEY_PEM_NAME),n=ir.join(t,Zs.NATS_CERTIFICATE_PEM_NAME),s=ir.join(t,Zs.NATS_CA_PEM_NAME),i=Es.CONFIG_PARAMS,o={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(o[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(o[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(o[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,o[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,o[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),zE.updateConfigValue(void 0,void 0,o,!1,!0)}a(lk,"updateConfigCert");function uk(e){return e.startsWith("-----BEGIN")?e:Mne(e,"utf8")}a(uk,"readPEM");var XH=QE.createSecureContext;QE.createSecureContext=function(e){if(!e.cert||!e.key)return XH(e);let t={...e};delete t.key,delete t.cert;let r=XH(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var Vne=ok.prototype._init;ok.prototype._init=function(e,t){Vne.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,o)=>{this.sni_context=o?.context||o,this.certCbDone()})}};var nl=new Map;function dk(e,t){let r=new Map,n,s=!1;return i.initialize=o=>i.ready?i.ready:(o&&(o.secureContexts=r,o.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),nl.clear();let f=0;for await(let d of EO.system.hdb_certificate.search([])){let _=d.certificate,h=new So(_);d.is_authority&&(h.asString=_,nl.set(h.subject,_))}for await(let d of EO.system.hdb_certificate.search([]))try{if(d.is_authority)continue;let _=e==="operations-api",h=d.is_self_signed?1:2;d.uses?.includes(e)&&(h+=1);let m=await fk(d.private_key_name),S=d.certificate,g=new So(S);if(nl.has(g.issuer)&&(S+=`
 `+nl.get(g.issuer)),!m||!S)throw new Error("Missing private key or certificate for secure server");let R={ciphers:d.ciphers,ticketKeys:vne(),availableCAs:nl,ca:t&&Array.from(nl.values()),cert:S,key:m,key_file:d.private_key_name,is_self_signed:d.is_self_signed};o&&(R.sessionIdContext=o.sessionIdContext);let E=d.hostnames??CO(g);Array.isArray(E)||(E=[E]);for(let M of E)M===JE()&&(h+=.1);let T=QE.createSecureContext(R);T.name=d.name,T.options=R,T.quality=h,T.certificateAuthorities=Array.from(nl),T.certStart=S.toString().slice(0,100),Array.isArray(E)||(E=[E]);let N;for(let M of E)if(M){M[0]==="*"&&(s=!0,M=M.slice(1)),M===JE()&&(h+=2),ek.isIP(M)&&(N=!0);let H=r.get(M)?.quality??0;h>H&&r.set(M,T)}else Ta.error("No hostname found for certificate at",QE.certificate);Ta.trace("Adding TLS",T.name,"for",o.ports||"client","cert named",d.name,"hostnames",E,"quality",h,"best quality",f),h>f&&(i.defaultContext=n=T,f=h,o&&(o.defaultContext=T))}catch(_){Ta.error("Error applying TLS for",d.name,_)}o?.secureContextsListeners.forEach(d=>d()),c(n)}catch(f){l(f)}}a(u,"updateTLS"),EO.system.hdb_certificate.subscribe({listener:a(()=>setTimeout(()=>u(),1500).unref(),"listener"),omitCurrent:!0}),u()})),i;function i(o,c){Ta.info("TLS requested for",o||"(no SNI)");let l=o;for(;;){let f=r.get(l);if(f)return Ta.debug("Found certificate for",o,f.certStart),f.updatedContext&&(f=f.updatedContext),c(null,f);if(s&&l){let d=l.indexOf(".",1);d<0?l="":l=l.slice(d)}else break}o?Ta.debug("No certificate found to match",o,"using the default certificate"):Ta.debug("No SNI, using the default certificate",n?.name);let u=n;u?u.updatedContext&&(u=u.updatedContext):Ta.info("No default certificate found"),c(null,u)}a(i,"SNICallback")}a(dk,"createTLSSelector");async function fk(e){let t=Ra.get(e);return!t&&e?await Rn.readFile(ir.join(Jn.get(sl.ROOTPATH),Es.LICENSE_KEY_DIR_NAME,e),"utf8"):t}a(fk,"getPrivateKeyByName");async function _k(){ya();let e=[];for await(let t of Hr.search([]))e.push(t);return e}a(_k,"listCertificates");async function Kne(e){let t=RO(e,Xs.object({name:Xs.string().required(),certificate:Xs.string().required(),is_authority:Xs.boolean().required(),private_key:Xs.string(),hosts:Xs.array(),uses:Xs.array()}));if(t)throw new Aa(t.message);let{name:r,certificate:n,private_key:s,is_authority:i}=e,o=new So(n),c=!1,l=!1,u;for(let[h,m]of Ra)!s&&!c&&o.checkPrivateKey(tk(m))&&(c=!0,u=h),s&&s===m&&(l=!0,u=h);if(!i&&!s&&!c)throw new Aa("A suitable private key was not found for this certificate");let f;if(!r){try{f=hk(o)}catch(h){yt.error(h)}if(f==null)throw new Aa("Error extracting certificate common name, please provide a name parameter")}let d=Yne(r??f);s&&!c&&!l&&(await Rn.writeFile(ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME,d+".pem"),s),Ra.set(d,s));let _={name:r??f,certificate:n,is_authority:i,hosts:e.hosts,uses:e.uses};return(!i||i&&u||i&&s)&&(_.private_key_name=u??d+".pem"),e.ciphers&&(_.ciphers=e.ciphers),await ku(_),"Successfully added certificate: "+d}a(Kne,"addCertificate");function Yne(e){return e.replace(/[^a-z0-9.]/gi,"-")}a(Yne,"sanitizeName");async function Wne(e){let t=RO(e,Xs.object({name:Xs.string().required()}));if(t)throw new Aa(t.message);let{name:r}=e;ya();let n=await Hr.get(r);if(!n)throw new Aa(r+" not found");let{private_key_name:s}=n;if(s){let i=Array.from(await Hr.search([{attribute:"private_key_name",value:s}]));i.length===1&&i[0].name===r&&(yt.info("Removing private key named",s),await Rn.remove(ir.join(Jn.getHdbBasePath(),Es.LICENSE_KEY_DIR_NAME,s)))}return await Hr.delete(r),"Successfully removed "+r}a(Wne,"removeCertificate");function hk(e){let t=e.subject?.match(/CN=(.*)/)?.[1];return t||CO(e)[0]}a(hk,"getPrimaryHostName");function CO(e){if(e.subjectAltName)return e.subjectAltName.split(",").map(r=>{let n=r.indexOf(":");if(r=r.slice(n+1),r=r.trim(),r[0]==='"')try{r=JSON.parse(r)}catch{}return r.indexOf("=")>-1?r.match(/CN=([^,]*)/)?.[1]:r}).filter(r=>r);let t=certObj.subject?.match(/CN=(.*)/)?.[1];return t?[t]:[]}a(CO,"hostnamesFromCert");async function zne(e){if(e.bypass_auth!==!0)throw new Aa("Unauthorized","401");let t=RO(e,Xs.object({name:Xs.string().required()}));if(t)throw new Aa(t.message);let{name:r}=e;if(r===".jwtPrivate")return(await QH()).privateKey;if(r===".jwtPublic")return(await QH()).publicKey;if(Ra.get(r))return Ra.get(e.name);throw new Aa("Key not found")}a(zne,"getKey")});var xk={};Ue(xk,{CONFIRMATION_STATUS_POSITION:()=>vk,NodeReplicationConnection:()=>Gu,OPERATION_REQUEST:()=>MO,RECEIVED_TIME_POSITION:()=>ag,RECEIVED_VERSION_POSITION:()=>og,RECEIVING_STATUS_POSITION:()=>cg,RECEIVING_STATUS_RECEIVING:()=>Uk,RECEIVING_STATUS_WAITING:()=>vO,SENDING_TIME_POSITION:()=>z_,createWebSocket:()=>fg,database_subscriptions:()=>Na,replicateOverWS:()=>j_,table_update_listeners:()=>xO});async function fg(e,t){let{authorization:r,rejectUnauthorized:n}=t||{},s=et(),i;if(e==null)throw new TypeError(`Invalid URL: Expected a string URL for node "${s}" but received ${e}`);if(e.includes("wss://")){if(!DO){let l=(0,Pk.createTLSSelector)("replication"),u={secureContexts:null};await l.initialize(u),DO=u.secureContexts}if(i=DO.get(s),i&&ce.debug?.("Creating web socket for URL",e,"with certificate named:",i.name),!i&&n!==!1)throw new Error("Unable to find a valid certificate to use for replication to connect to "+e)}let o={};r&&(o.Authorization=r);let c={headers:o,localAddress:s?.startsWith("127.0")?s:void 0,servername:(0,Lk.isIP)(t?.serverName)?void 0:t?.serverName,noDelay:!0,highWaterMark:128*1024,rejectUnauthorized:n!==!1,secureContext:void 0};return i&&(ig?.caCount!==To.size&&(ig=Dk.createSecureContext({...i.options,ca:[...To,...i.options.availableCAs.values()]}),ig.caCount=To.size),c.secureContext=ig),new Ik.WebSocket(e,"harperdb-replication-v1",c)}function j_(e,t,r){let n=t.port||t.securePort,s=il.pid%1e3+"-"+Ck.threadId+(n?"s:"+n:"c:"+t.url?.slice(-4))+" "+Math.random().toString().slice(2,3),i=0,o=Buffer.allocUnsafeSlow(1024),c=0,l=new DataView(o.buffer,0,1024),u=t.database,f=t.databaseSubscriptions||Na,d,_,h=!1,m=t.subscription;m?.then&&m.then(A=>m=A);let S=t.tables||u&&Xe()[u];if(!r){ce.error?.("No authorization provided"),cn(1008,"Unauthorized");return}let g=new Map,R=[],E=r.name;E&&t.connection&&(t.connection.nodeName=E);let T,N,M,H,X,W,$,se=6e4,z,fe=0,ue=0,Z=0,Ae=wk.default.get(x.REPLICATION_BLOBTIMEOUT)??12e4,me=new Map,ye=[],Ht=0,dt;if(t.url){let A=a(()=>{X&&ue===e._socket?.bytesRead&&Z===e._socket?.bytesWritten?e.terminate():(X=performance.now(),e.ping(),ue=e._socket?.bytesRead,Z=e._socket?.bytesWritten)},"send_ping");M=setInterval(A,Ok).unref(),A()}else Ln();e._socket?.setMaxListeners(200);function Ln(){clearTimeout(H),ue=e._socket?.bytesRead,Z=e._socket?.bytesWritten,H=setTimeout(()=>{ue===e._socket?.bytesRead&&Z===e._socket?.bytesWritten&&(ce.warn?.(`Timeout waiting for ping from ${E}, terminating connection and reconnecting`),e.terminate())},Ok*2).unref()}a(Ln,"resetPingTimer");function Vr(){if(!(!E||!u||!d))return _||(_=VE(d,u,E)),_}a(Vr,"getSharedStatus"),u&&jo(u);let Cr,Qd,oc=[],sA=[],iA,kt=[],jd=[],Jd=[],oA=150,Im=25,Xd=0,Ce=0,Zd=!1,Ji,Pr,Mn,ac;e.on("message",A=>{fe=performance.now();try{let y=A.dataView=new ol(A.buffer,A.byteOffset,A.byteLength);if(A[0]>127){let B=(0,Ze.decode)(A),[w,D,G]=B;switch(w){case Ek:{if(D){if(E){if(E!==D){ce.error?.(s,`Node name mismatch, expecting to connect to ${E}, but peer reported name as ${D}, disconnecting`),e.send((0,Ze.encode)([Fu])),cn(1008,"Node name mismatch");return}}else if(E=D,t.connection?.tentativeNode){let oe=t.connection.tentativeNode;oe.name=E,t.connection.tentativeNode=null,go(E,oe)}if(t.connection&&(t.connection.nodeName=E),ce.debug?.(s,"received node name:",E,"db:",u),!u)try{jo(u=B[2]),u==="system"&&(Cr=ga(t,(oe,V)=>{Qo(V)&&rf(V)}),e.on("close",()=>{Cr?.remove()}))}catch(oe){ce.warn?.(s,"Error setting database",oe),e.send((0,Ze.encode)([Fu])),cn(1008,oe.message);return}zo()}break}case yk:{ce.debug?.(s,"Received table definitions for",D.map(oe=>oe.table));for(let oe of D){let V=B[2];oe.database=V;let J;Qo(V)&&(V==="system"?We[V]?.[oe.table]||(J=L(oe,We[V]?.[oe.table])):J=L(oe,We[V]?.[oe.table]),d||(d=J?.auditStore),S||(S=Xe()?.[V]))}break}case Fu:cn();break;case MO:try{let oe=r?.replicates||r?.subscribers||r?.name;server.operation(D,{user:r},!oe).then(V=>{Array.isArray(V)&&(V={results:V}),V.requestId=D.requestId,e.send((0,Ze.encode)([tg,V]))},V=>{e.send((0,Ze.encode)([tg,{requestId:D.requestId,error:V instanceof Error?V.toString():V}]))})}catch(oe){e.send((0,Ze.encode)([tg,{requestId:D.requestId,error:oe instanceof Error?oe.toString():oe}]))}break;case tg:let{resolve:j,reject:Q}=g.get(D.requestId);D.error?Q(new Error(D.error)):j(D),g.delete(D.requestId);break;case PO:let F=B[3];S||(u?ce.error?.(s,"No tables found for",u):ce.error?.(s,"Database name never received"));let ve=S[F];ve=L({table:F,database:u,attributes:D.attributes,schemaDefined:D.schemaDefined},ve),oc[G]={name:F,decoder:new Ze.Packr({useBigIntExtension:!0,randomAccessStructure:!0,freezeData:!0,typedStructs:D.typedStructs,structures:D.structures}),getEntry(oe){return ve.primaryStore.getEntry(oe)},rootStore:ve.primaryStore.rootStore};break;case gk:ac=d?kH(D,d):new Map,iA=B[2],ce.debug?.(s,`Acknowledged subscription request, receiving messages for nodes: ${iA}`);break;case Sk:let Ee=G;Jd[Ee]=D;break;case Rk:Vr()[vk]=D,ce.trace?.(s,"received and broadcasting committed update",D),Vr().buffer.notify();break;case Ak:T=D,m.send({type:"end_txn",localTime:T,remoteNodeIds:R}),Vr(),_[og]=T,_[ag]=Date.now(),_[cg]=vO;break;case rg:{let oe=B[1],{fileId:V,size:J,finished:de,error:pe}=oe,ae=me.get(V);ce.debug?.("Received blob",V,"has stream",!!ae,"connectedToBlob",!!ae?.connectedToBlob,"length",B[2].length,"finished",de),ae||(ae=new LO.PassThrough,ae.expectedSize=J,me.set(V,ae)),ae.lastChunk=Date.now();let Ie=B[2];Lt(Ie.byteLength,"bytes-received",`${E}.${u}`,"replication","blob");try{de?(pe?(ae.on("error",()=>{}),ae.destroy(new Error("Blob error: "+pe+" for record "+(ae.recordId??"unknown")+" from "+E))):ae.end(Ie),ae.connectedToBlob&&me.delete(V)):ae.write(Ie)}catch(He){ce.error?.(`Error receiving blob for ${ae.recordId} from ${E} and streaming to storage`,He),me.delete(V)}break}case Tk:{let oe=D,V;try{let J=B[3],de=sA[G]||(sA[G]=S[B[4]]);if(!de)return ce.warn?.("Unknown table id trying to handle record request",G);let pe=de.primaryStore.getBinaryFast(Symbol.for("structures")),ae=pe?.length;if(ae>0&&ae!==Ce){Ce=ae;let He=(0,Ze.decode)(pe);e.send((0,Ze.encode)([PO,{typedStructs:He.typed,structures:He.named},G,de.tableName]))}let Ie=de.primaryStore.getBinaryFast(J);if(Ie){let He=de.primaryStore.decoder.decode(Ie,{valueAsBuffer:!0}),De=He.value;He[bc]&vr&&(De=Buffer.from(De),Q_(()=>de.primaryStore.decoder.decode(Ie),rt=>cc(rt,J),de.primaryStore.rootStore)),V=(0,Ze.encode)([eg,oe,{value:De,expiresAt:He.expiresAt,version:He.version,residencyId:He.residencyId,nodeId:He.nodeId,user:He.user}])}else V=(0,Ze.encode)([eg,oe])}catch(J){V=(0,Ze.encode)([eg,oe,{error:J.message}])}e.send(V);break}case eg:{let{resolve:oe,reject:V,tableId:J,key:de}=g.get(B[1]),pe=B[2];if(pe?.error)V(new Error(pe.error));else if(pe){let ae;dg(()=>{let Ie=oc[J].decoder.decode(pe.value);pe.value=Ie,pe.key=de,oe(pe)||ae&&setTimeout(()=>ae.forEach(hg),6e4).unref()},d?.rootStore,Ie=>{let He=ef(Ie,de);return ae||(ae=[]),ae.push(He),He})}else oe();g.delete(B[1]);break}case pk:{Mn=D;let oe,V,J=!1;if(m){if(u!==m.databaseName&&!m.then){ce.error?.("Subscription request for wrong database",u,m.databaseName);return}}else m=f.get(u);if(ce.debug?.(s,"received subscription request for",u,"at",Mn),!m){let Oe;m=new Promise(Rr=>{ce.debug?.("Waiting for subscription to database "+u),Oe=Rr}),m.ready=Oe,Na.set(u,m)}if(r.name)V=sr().subscribe(r.name),V.then(async Oe=>{oe=Oe;for await(let Rr of oe){let Nt=Rr.value;if(!(Nt?.replicates===!0||Nt?.replicates?.receives||Nt?.subscriptions?.some(yr=>(yr.database||yr.schema)===u&&yr.publish!==!1))){J=!0,e.send((0,Ze.encode)([Fu])),cn(1008,`Unauthorized database subscription to ${u}`);return}}},Oe=>{ce.error?.(s,"Error subscribing to HDB nodes",Oe)});else if(!(r?.role?.permission?.super_user||r.replicates)){e.send((0,Ze.encode)([Fu])),cn(1008,`Unauthorized database subscription to ${u}`);return}if(Pr&&(ce.debug?.(s,"stopping previous subscription",u),Pr.emit("close")),Mn.length===0)return;let de=Mn[0],pe=a(Oe=>{if(Oe&&(de.replicateByDefault?!de.tables.includes(Oe.tableName):de.tables.includes(Oe.tableName)))return{table:Oe}},"tableToTableEntry"),ae={txnTime:0},Ie,He,De=1/0,rt,vn=a((Oe,Rr)=>{if(Oe.type==="end_txn"){ae.txnTime&&(o[i]!==66&&ce.error?.("Invalid encoding of message"),Xi(9),Xi(lg),p(rt=Rr),di()),i=c,ae.txnTime=0;return}let Nt=Oe.nodeId,yr=Oe.tableId,At=He[yr];if(!At&&(At=He[yr]=pe(m.tableById[yr]),!At))return ce.debug?.("Not subscribed to table",yr);let ls=At.table,wt=ls.primaryStore,vs=wt.encoder;(Oe.extendedType&mp||!vs.typedStructs)&&(vs._mergeStructures(vs.getStructures()),vs.typedStructs&&(vs.lastTypedStructuresLength=vs.typedStructs.length));let Kl=Ie[Nt];if(!(Kl&&Kl.startTime<Rr&&(!Kl.endTime||Kl.endTime>Rr)))return sg&&ce.trace?.(s,"skipping replication update",Oe.recordId,"to:",E,"from:",Nt,"subscribed:",Ie),hP();sg&&ce.trace?.(s,"sending replication update",Oe.recordId,"to:",E,"from:",Nt,"subscribed:",Ie);let aA=Oe.version,dc=Oe.residencyId,cA=tf(dc,ls),Pm;if(cA&&!cA.includes(E)){let Us=tf(Oe.previousResidencyId,ls);if(Us&&!Us.includes(E)&&(Oe.type==="put"||Oe.type==="patch")||ls.getResidencyById)return hP();let nf=Oe.recordId;ce.trace?.(s,"sending invalidation",nf,E,"from",Nt);let sf=0;dc&&(sf|=Ic),Oe.previousResidencyId&&(sf|=Cc);let dA,Dm=null;for(let mP in ls.indices){if(!Dm){if(dA=Oe.getValue(wt,!0),!dA)break;Dm={}}Dm[mP]=dA[mP]}Pm=Oc(Oe.version,yr,nf,null,Nt,Oe.user,Oe.type==="put"||Oe.type==="patch"?"invalidate":Oe.type,vs.encode(Dm),sf,dc,Oe.previousResidencyId,Oe.expiresAt)}function hP(){return ce.trace?.(s,"skipping audit record",Oe.recordId),W||(W=setTimeout(()=>{W=null,(rt||0)+bk/2<De&&(sg&&ce.trace?.(s,"sending skipped sequence update",De),e.send((0,Ze.encode)([Ak,De])))},bk).unref()),new Promise(setImmediate)}a(hP,"skipAuditRecord");let lA=vs.typedStructs,uA=vs.structures;if((lA?.length!=At.typed_length||uA?.length!=At.structure_length)&&(At.typed_length=lA?.length,At.structure_length=uA.length,ce.debug?.(s,"send table struct",At.typed_length,At.structure_length),At.sentName||(At.sentName=!0),e.send((0,Ze.encode)([PO,{typedStructs:lA,structures:uA,attributes:ls.attributes,schemaDefined:ls.schemaDefined},yr,At.table.tableName]))),dc&&!jd[dc]&&(e.send((0,Ze.encode)([Sk,cA,dc])),jd[dc]=!0),ae.txnTime!==aA&&(ae.txnTime&&(sg&&ce.trace?.(s,"new txn time, sending queued txn",ae.txnTime),o[i]!==66&&ce.error?.("Invalid encoding of message"),di()),ae.txnTime=aA,i=c,p(aA)),Pm)Xi(Pm.length),K(Pm);else{let Us=Oe.encoded;Oe.extendedType&vr&&Q_(()=>Oe.getValue(wt),sf=>cc(sf,Oe.recordId),wt.rootStore);let nf=Us[0]===66?8:0;Xi(Us.length-nf),K(Us,nf),ce.trace?.("wrote record",Oe.recordId,"length:",Us.length)}return e._socket.writableNeedDrain?new Promise(Us=>{ce.debug?.(`Waiting for remote node ${E} to allow more commits ${e._socket.writableNeedDrain?"due to network backlog":"due to requested flow directive"}`),e._socket.once("drain",Us)}):Ht>Im?new Promise(Us=>{dt=Us}):new Promise(setImmediate)},"sendAuditRecord"),di=a(()=>{c-i>8?(e.send(o.subarray(i,c)),ce.debug?.(s,"Sent message, size:",c-i),Lt(c-i,"bytes-sent",`${E}.${u}`,"replication","egress")):ce.debug?.(s,"skipping empty transaction")},"sendQueuedData");Pr=new UO.EventEmitter,Pr.once("close",()=>{J=!0,oe?.end()});for(let{startTime:Oe}of Mn)Oe<De&&(De=Oe);(V||Promise.resolve()).then(async()=>{m=await m,d=m.auditStore,He=m.tableById.map(pe),Ie=[];for(let{name:Rr,startTime:Nt,endTime:yr}of Mn){let At=$E(Rr,d);ce.debug?.("subscription to",Rr,"using local id",At,"starting",Nt),Ie[At]={startTime:Nt,endTime:yr}}rf(u),Cr||(Cr=al(Rr=>{Rr.databaseName===u&&rf(u)}),Qd=J_(Rr=>{Rr===u&&(e.send((0,Ze.encode)([Fu])),cn())}),e.on("close",()=>{Cr?.remove(),Qd?.remove()})),e.send((0,Ze.encode)([gk,k_(m.auditStore),Mn.map(({name:Rr})=>Rr)]));let Oe=!0;do{isFinite(De)||(ce.warn?.("Invalid sequence id "+De),cn(1008,"Invalid sequence id"+De));let Rr;if(Oe&&!J&&(Oe=!1,De===0)){let Nt=De,yr=_g(d);for(let At in S){if(!pe(At))continue;let ls=S[At];ce.warn?.(`Fully copying ${At} table to ${E}`);for(let wt of ls.primaryStore.getRange({snapshot:!1,versions:!0})){if(J)return;if(wt.localTime>=De){ce.trace?.(s,"Copying record from",u,At,wt.key,wt.localTime),Nt=Math.max(wt.localTime,Nt),Vr()[z_]=1;let vs=Oc(wt.version,ls.tableId,wt.key,null,yr,null,"put",Q_(()=>ls.primaryStore.encoder.encode(wt.value),Kl=>cc(Kl,wt.key)),wt.metadataFlags&-256,wt.residencyId,null,wt.expiresAt);await vn({recordId:wt.key,tableId:ls.tableId,type:"put",getValue(){return wt.value},encoded:vs,version:wt.version,residencyId:wt.residencyId,nodeId:yr,extendedType:wt.metadataFlags},wt.localTime)}}}c-i>8&&vn({type:"end_txn"},De),Vr()[z_]=0,De=Nt}for(let{key:Nt,value:yr}of d.getRange({start:De||1,exclusiveStart:!0,snapshot:!1})){if(J)return;let At=St(yr);ce.debug?.("sending audit record",new Date(Nt)),Vr()[z_]=Nt,De=Nt,await vn(At,Nt),Pr.startTime=Nt}c-i>8&&vn({type:"end_txn"},De),Vr()[z_]=0,await Bk(d)}while(!J)}).catch(Oe=>{ce.error?.(s,"Error handling subscription to node",Oe),cn(1008,"Error handling subscription to node")});break}}return}y.position=8;let I=!0,b,U;do{Vr();let B=y.readInt();if(B===9&&y.getUint8(y.position)==lg){y.position++,T=U=y.readFloat64(),_[og]=T,_[ag]=Date.now(),_[cg]=vO,ce.trace?.("received remote sequence update",T,u);break}let w=y.position,D=St(A,w,w+B),G=oc[D.tableId];G||ce.error?.(`No table found with an id of ${D.tableId}`);let j;D.residencyId&&(j=Jd[D.residencyId],ce.trace?.(s,"received residency list",j,D.type,D.recordId));try{let Q=D.recordId;dg(()=>{b={table:G.name,id:Q,type:D.type,nodeId:ac.get(D.nodeId),residencyList:j,timestamp:D.version,value:D.getValue(G),user:D.user,beginTxn:I,expiresAt:D.expiresAt}},d?.rootStore,F=>ef(F,Q))}catch(Q){throw Q.message+="typed structures for current decoder"+JSON.stringify(G.decoder.typedStructs),Q}I=!1,ce.trace?.(s,"received replication message",D.type,"id",b.id,"version",new Date(D.version),"nodeId",b.nodeId),_[og]=D.version,_[ag]=Date.now(),_[cg]=Uk,m.send(b),y.position=w+B}while(y.position<A.byteLength);Xd++,Lt(A.byteLength,"bytes-received",`${E}.${u}.${b?.table||"unknown_table"}`,"replication","ingest"),Xd>oA&&!Zd&&(Zd=!0,e.pause(),ce.debug?.(`Commit backlog causing replication back-pressure, requesting that ${E} pause replication`)),m.send({type:"end_txn",localTime:T,remoteNodeIds:R,async onCommit(){if(b){let B=Date.now()-b.timestamp;Lt(B,"replication-latency",E+"."+u+"."+b.table,b.type,"ingest")}Xd--,Zd&&(Zd=!1,e.resume(),ce.debug?.(`Replication resuming ${E}`)),ye.length>0&&await Promise.all(ye),ce.trace?.("All blobs finished"),!N&&U&&(ce.trace?.(s,"queuing confirmation of a commit at",U),setTimeout(()=>{e.send((0,Ze.encode)([Rk,N])),ce.trace?.(s,"sent confirmation of a commit at",N),N=null},jne)),N=U,ce.debug?.("last sequence committed",new Date(U),u)}})}catch(y){ce.error?.(s,"Error handling incoming replication message",y)}}),e.on("ping",Ln),e.on("pong",()=>{t.connection&&(t.connection.latency=performance.now()-X,t.isSubscriptionConnection&&rl({name:E,database:u,url:t.url,latency:t.connection.latency})),X=null}),e.on("close",(A,y)=>{clearInterval(M),clearTimeout(H),clearInterval($),Pr&&Pr.emit("close"),Ji&&Ji.end();for(let[I,{reject:b}]of g)b(new Error(`Connection closed ${y?.toString()} ${A}`));ce.debug?.(s,"closed",A,y?.toString())});function cn(A,y){e.isFinished=!0,e.close(A,y),t.connection?.emit("finished")}a(cn,"close");let Dr=new Set;async function cc(A,y){let I=ug(A);if(Dr.has(I)){ce.debug?.("Blob already being sent",I);return}Dr.add(I);try{let b;Ht++;for await(let U of A.stream())b&&(ce.debug?.("Sending blob chunk",I,"length",b.length),e.send((0,Ze.encode)([rg,{fileId:I,size:A.size},b]))),b=U,e._socket.writableNeedDrain&&(ce.debug?.("draining",I),await new Promise(B=>e._socket.once("drain",B)),ce.debug?.("drained",I)),Lt(U.length,"bytes-sent",`${E}.${u}`,"replication","blob");ce.debug?.("Sending final blob chunk",I,"length",b.length),e.send((0,Ze.encode)([rg,{fileId:I,size:A.size,finished:!0},b]))}catch(b){ce.warn?.("Error sending blob",b,"blob id",I,"for record",y),e.send((0,Ze.encode)([rg,{fileId:I,finished:!0,error:b.toString()},Buffer.alloc(0)]))}finally{Dr.delete(I),Ht--,Ht<Im&&dt?.()}}a(cc,"sendBlobs");function ef(A,y){let I=ug(A),b=me.get(I);ce.debug?.("Received transaction for record",y,"with blob",I,"has stream",!!b,"ended",!!b?.writableEnded),b?b.writableEnded&&me.delete(I):(b=new LO.PassThrough,me.set(I,b)),b.connectedToBlob=!0,b.lastChunk=Date.now(),b.recordId=y,A.size===void 0&&b.expectedSize&&(A.size=b.expectedSize);let U=b.blob??createBlob(b,A);b.blob=U;let B=io(()=>X_(U).saving,m.auditStore?.rootStore);return B&&(B.blobId=I,ye.push(B),B.finally(()=>{ce.debug?.(`Finished receiving blob stream ${I}`),ye.splice(ye.indexOf(B),1)})),U}a(ef,"receiveBlobs");function zo(){if(h||(h=!0,t.connection?.on("subscriptions-updated",zo)),t.connection?.isFinished)throw new Error("Can not make a subscription request on a connection that is already closed");let A=new Map;d||(d=m?.auditStore);try{for(let b of m?.dbisDB?.getRange({start:Symbol.for("seq"),end:[Symbol.for("seq"),Buffer.from([255])]})||[])for(let U of b.value.nodes||[])U.lastTxnTime>(A.get(U.id)??0)&&A.set(U.id,U.lastTxnTime)}catch(b){if(!b.message.includes("Can not re"))throw b}let y=t.connection?.nodeSubscriptions?.[0];R=[];let I=t.connection?.nodeSubscriptions?.map((b,U)=>{let B=[],{replicateByDefault:w}=b;if(b.subscriptions){for(let Q of b.subscriptions)if(Q.subscribe&&(Q.schema||Q.database)===u){let F=Q.table;S?.[F]?.replicate!==!1&&B.push(F)}w=!1}else for(let Q in S)(w?S[Q].replicate===!1:S[Q].replicate)&&B.push(Q);let D=d&&$E(b.name,d),G=m?.dbisDB?.get([Symbol.for("seq"),D])??1,j=Math.max(G?.seqId??1,(typeof b.start_time=="string"?new Date(b.start_time).getTime():b.start_time)??1);if(ce.debug?.("Starting time recorded in db",b.name,D,u,G?.seqId,"start time:",j,new Date(j)),y!==b){let Q=d&&$E(y.name,d),F=m?.dbisDB?.get([Symbol.for("seq"),Q])??1;for(let ve of F?.nodes||[])ve.name===b.name&&(j=ve.seqId,ce.debug?.("Using sequence id from proxy node",y.name,j))}if(D===void 0?ce.warn("Starting subscription request from node",b,"but no node id found"):R.push(D),A.get(D)>j&&(j=A.get(D),ce.debug?.("Updating start time from more recent txn recorded",y.name,j)),j===1&&ng)try{new URL(ng).hostname===b.name&&E===b.name?(ce.warn?.(`Requesting full copy of database ${u} from ${ng}`),j=0):j=Date.now()-6e4}catch(Q){ce.error?.("Error parsing leader URL",ng,Q)}return ce.trace?.(s,"defining subscription request",b.name,u,new Date(j)),{name:b.name,replicateByDefault:w,tables:B,startTime:j,endTime:b.end_time}});if(I)if(ce.debug?.(s,"sending subscription request",I,m?.dbisDB?.path),clearTimeout(z),I.length>0)e.send((0,Ze.encode)([pk,I]));else{let b=a(()=>{let U=performance.now();z=setTimeout(()=>{fe<=U?cn(1008,"Connection has no subscriptions and is no longer used"):b()},se).unref()},"schedule_close");b()}}a(zo,"sendSubscriptionRequestUpdate");function tf(A,y){if(!A)return;let I=kt[A];return I||(I=y.getResidencyRecord(A),kt[A]=I),I}a(tf,"getResidence");function Qo(A){return!(Oa&&Oa!="*"&&!Oa[A]&&!Oa.includes?.(A)&&!Oa.some?.(y=>y.name===A))}a(Qo,"checkDatabaseAccess");function jo(A){if(m=m||f.get(A),!Qo(A))throw new Error(`Access to database "${A}" is not permitted`);m||ce.warn?.(`No database named "${A}" was declared and registered`),d=m?.auditStore,S||(S=Xe()?.[A]);let y=et();if(y===E)throw y?new Error("Should not connect to self",y):new Error("Node name not defined");return Cm(y,A),!0}a(jo,"setDatabase");function Cm(A,y){let I=Xe()?.[y],b=[];for(let U in I){let B=I[U];b.push({table:U,schemaDefined:B.schemaDefined,attributes:B.attributes.map(w=>({name:w.name,type:w.type,isPrimaryKey:w.isPrimaryKey}))})}ce.trace?.("Sending database info for node",A,"database name",y),e.send((0,Ze.encode)([Ek,A,y,b]))}a(Cm,"sendNodeDBName");function rf(A){let y=Xe()?.[A],I=[];for(let b in y){if(Mn&&!Mn.some(B=>B.replicateByDefault?!B.tables.includes(b):B.tables.includes(b)))continue;let U=y[b];I.push({table:b,schemaDefined:U.schemaDefined,attributes:U.attributes.map(B=>({name:B.name,type:B.type,isPrimaryKey:B.isPrimaryKey}))})}e.send((0,Ze.encode)([yk,I,A]))}a(rf,"sendDBSchema"),$=setInterval(()=>{for(let[A,y]of me)y.lastChunk+Ae<Date.now()&&(ce.warn?.(`Timeout waiting for blob stream to finish ${A} for record ${y.recordId??"unknown"} from ${E}`),me.delete(A),y.end())},Ae).unref();let lc=1,uc=[];return{end(){Ji&&Ji.end(),Pr&&Pr.emit("close")},getRecord(A){let y=lc++;return new Promise((I,b)=>{let U=[Tk,y,A.table.tableId,A.id];uc[A.table.tableId]||(U.push(A.table.tableName),uc[A.table.tableId]=!0),e.send((0,Ze.encode)(U)),fe=performance.now(),g.set(y,{tableId:A.table.tableId,key:A.id,resolve(B){let{table:w,entry:D}=A;if(I(B),B)return w._recordRelocate(D,B)},reject:b})})},sendOperation(A){let y=lc++;return A.requestId=y,e.send((0,Ze.encode)([MO,A])),new Promise((I,b)=>{g.set(y,{resolve:I,reject:b})})}};function Xi(A){O(5),A<128?o[c++]=A:A<16384?(l.setUint16(c,A|32768),c+=2):A<1056964608?(l.setUint32(c,A|3221225472),c+=4):(o[c]=255,l.setUint32(c+1,A),c+=5)}function K(A,y=0,I=A.length){let b=I-y;O(b),A.copy(o,c,y,I),c+=b}function p(A){O(8),l.setFloat64(c,A),c+=8}function O(A){if(A+16>o.length-c){let y=Buffer.allocUnsafeSlow(c+A-i+65536>>10<<11);o.copy(y,0,i,c),c=c-i,i=0,o=y,l=new DataView(o.buffer,0,o.length)}}function L(A,y){let I=A.database??"data";if(I!=="data"&&!We[I]){ce.warn?.("Database not found",A.database);return}y||(y={});let b=y.schemaDefined,U=!1,B=A.schemaDefined,w=y.attributes||[];for(let D=0;D<A.attributes?.length;D++){let G=A.attributes[D],j=w.find(Q=>Q.name===G.name);(!j||j.type!==G.type)&&(b?ce.error?.(`Schema for '${u}.${A.table}' is defined locally, but attribute '${G.name}: ${G.type}' from '${E}' does not match local attribute ${j?"'"+j.name+": "+j.type+"'":"which does not exist"}`):(U=!0,B||(G.indexed=!0),j?w[w.indexOf(j)]=G:w.push(G)))}return U?(ce.debug?.("(Re)creating",A),ft({table:A.table,database:A.database,schemaDefined:A.schemaDefined,attributes:w,...y})):y}}var wk,Ze,Ik,Ck,ce,UO,Pk,Dk,il,Lk,LO,Mk,pk,Ek,gk,Fu,Sk,PO,Tk,eg,MO,tg,Ak,Rk,yk,rg,vk,og,ag,z_,cg,vO,Uk,Qne,ng,xO,Na,sg,bk,jne,Ok,DO,ig,Nk,Gu,BO=Re(()=>{xe();Ri();_O();HO();ps();wk=v(le());k();nu();Ze=require("msgpackr"),Ik=require("ws"),Ck=require("worker_threads"),ce=v(ks());K_();UO=require("events"),Pk=v(ei()),Dk=v(require("node:tls"));tl();il=v(require("node:process")),Lk=require("node:net");Pi();hn();LO=require("node:stream"),Mk=v(require("minimist")),pk=129,Ek=140,gk=141,Fu=142,Sk=130,PO=132,Tk=133,eg=134,MO=136,tg=137,Ak=143,Rk=144,yk=145,rg=146,vk=0,og=1,ag=2,z_=3,cg=4,vO=0,Uk=1,Qne=(0,Mk.default)(il.argv),ng=Qne.HDB_LEADER_URL??il.env.HDB_LEADER_URL,xO=new Map,Na=new Map,sg=!0,bk=300,jne=2,Ok=3e4;a(fg,"createWebSocket");Nk=500,Gu=class extends UO.EventEmitter{constructor(r,n,s,i,o){super();this.url=r;this.subscription=n;this.databaseName=s;this.nodeName=i;this.authorization=o;this.nodeName=this.nodeName??Js(r)}static{a(this,"NodeReplicationConnection")}socket;startTime;retryTime=Nk;retries=0;isConnected=!0;isFinished=!1;nodeSubscriptions;latency=0;replicateTablesByDefault;session;sessionResolve;sessionReject;async connect(){this.session||this.resetSession();let r=[];this.socket=await fg(this.url,{serverName:this.nodeName,authorization:this.authorization});let n;ce.debug?.(`Connecting to ${this.url}, db: ${this.databaseName}, process ${il.pid}`),this.socket.on("open",()=>{this.socket._socket.unref(),ce[this.isConnected?"info":"warn"]?.(`Connected to ${this.url}, db: ${this.databaseName}`),this.retries=0,this.retryTime=Nk,this.nodeSubscriptions&&rl({name:this.nodeName,database:this.databaseName,url:this.url}),this.isConnected=!0,n=j_(this.socket,{database:this.databaseName,subscription:this.subscription,url:this.url,connection:this,isSubscriptionConnection:this.nodeSubscriptions!==void 0},{replicates:!0}),this.sessionResolve(n)}),this.socket.on("error",s=>{s.code==="SELF_SIGNED_CERT_IN_CHAIN"?(ce.warn?.(`Can not connect to ${this.url}, this server does not have a certificate authority for the certificate provided by ${this.url}`),s.isHandled=!0):s.code!=="ECONNREFUSED"&&(s.code==="UNABLE_TO_VERIFY_LEAF_SIGNATURE"?ce.error?.(`Can not connect to ${this.url}, the certificate provided by ${this.url} is not trusted, this node needs to be added to the cluster, or a certificate authority needs to be added`):ce.error?.(`Error in connection to ${this.url} due to ${s.message}`)),this.sessionReject(s)}),this.socket.on("close",(s,i)=>{if(this.isConnected&&(this.nodeSubscriptions&&Bu({name:this.nodeName,database:this.databaseName,url:this.url,finished:this.socket.isFinished}),this.isConnected=!1),this.removeAllListeners("subscriptions-updated"),this.socket.isFinished){this.isFinished=!0,n?.end(),this.emit("finished");return}if(++this.retries%20===1){let o=i?.toString();ce.warn?.(`${n?"Disconnected from":"Failed to connect to"} ${this.url} (db: "${this.databaseName}"), due to ${o?'"'+o+'" ':""}(code: ${s})`)}n=null,this.resetSession(),setTimeout(()=>{this.connect()},this.retryTime).unref(),this.retryTime+=this.retryTime>>8})}resetSession(){this.session=new Promise((r,n)=>{this.sessionResolve=r,this.sessionReject=n})}subscribe(r,n){this.nodeSubscriptions=r,this.replicateTablesByDefault=n,this.emit("subscriptions-updated",r)}unsubscribe(){this.socket.isFinished=!0,this.socket.close(1008,"No longer subscribed")}getRecord(r){return this.session.then(n=>n.getRecord(r))}};a(j_,"replicateOverWS")});var ba={};Ue(ba,{clearThisNodeName:()=>ise,disableReplication:()=>ese,enabled_databases:()=>Oa,forEachReplicatedDatabase:()=>ga,getThisNodeId:()=>_g,getThisNodeName:()=>et,getThisNodeUrl:()=>Sa,hostnameToUrl:()=>Sg,lastTimeInAuditStore:()=>F_,monitorNodeCAs:()=>Kk,replicateOperation:()=>ase,replication_certificate_authorities:()=>To,sendOperationToNode:()=>Z_,servers:()=>Xne,setReplicator:()=>Wk,start:()=>Zne,startOnMainThread:()=>pO,subscribeToNode:()=>V_,unsubscribeFromNode:()=>WE,urlToNodeName:()=>Js});function Zne(e){if(!e.port&&!e.securePort&&(e.port=gs.default.get(x.OPERATIONSAPI_NETWORK_PORT),e.securePort=gs.default.get(x.OPERATIONSAPI_NETWORK_SECUREPORT)),!et())throw new Error("Can not load replication without a url (see replication.url in the config)");let t=new Map;for(let s of q_(e))t.set(Js(s.url),s);tse(e),e={mtls:!0,usageType:"replication",maxPayload:10*1024*1024*1024,...e};let r=Ye.ws(async(s,i,o,c)=>{if(i.headers.get("sec-websocket-protocol")!=="harperdb-replication-v1")return c(s,i,o);await o,s._socket.unref(),j_(s,e,i?.user),s.on("error",l=>{l.code!=="ECONNREFUSED"&&or.error("Error in connection to "+this.url,l.message)})},e);e.runFirst=!0,Ye.http((s,i)=>{if(s.isWebSocket&&s.headers.get("Sec-WebSocket-Protocol")==="harperdb-replication-v1"){!s.authorized&&s._nodeRequest.socket.authorizationError&&or.error(`Incoming client connection from ${s.ip} did not have valid certificate, you may need turn on enableRootCAs in the config if you are using a publicly signed certificate, or add the CA to the server's trusted CAs`,s._nodeRequest.socket.authorizationError);let o=sr().primaryStore;if(s.authorized&&s.peerCertificate.subject){let c=s.peerCertificate.subject,l=c&&(o.get(c.CN)||t.get(c.CN));if(l)if(l?.revoked_certificates?.includes(s.peerCertificate.serialNumber)){or.warn("Revoked certificate used in attempt to connect to node",l.name,"certificate serial number",s.peerCertificate.serialNumber);return}else s.user=l;else or.warn(`No node found for certificate common name ${c.CN}, available nodes are ${Array.from(o.getRange({}).filter(({value:u})=>u).map(({key:u})=>u)).join(", ")} and routes ${Array.from(t.keys()).join(", ")}, connection will require credentials.`)}else{let c=o.get(s.ip)||t.get(s.ip);c?s.user=c:or.warn(`No node found for IP address ${s.ip}, available nodes are ${Array.from(new Set([...o.getKeys(),...t.keys()])).join(", ")}, connection will require credentials.`)}}return i(s)},e);let n=[];for(let s of r)if(s.secureContexts){let i=a(()=>{let o=new Set(s.secureContexts.values());s.defaultContext&&o.add(s.defaultContext);for(let c of o)try{let l=Array.from(To);c.options.availableCAs&&l.push(...c.options.availableCAs.values());let u={...c.options,ca:l};c.updatedContext=gg.createSecureContext(u)}catch(l){or.error("Error creating replication TLS config",l)}},"updateContexts");s.secureContextsListeners.push(i),n.push(i),gs.default.get(x.REPLICATION_ENABLEROOTCAS)!==!1&&i()}Kk(()=>{for(let s of n)s()})}function Kk(e){let t=0;Uu(r=>{r?.ca&&(To.add(r.ca),To.size!==t&&(t=To.size,e?.()))})}function ese(e=!0){Vk=e}function tse(e){Vk||(Xe(),Oa=e.databases,ga(e,(t,r)=>{if(!t){let n=e.databaseSubscriptions||Na;for(let[s,i]of pg){let o=i.get(r);o&&(o.subscribe([],!1),i.delete(r))}n.delete(r);return}for(let n in t){let s=t[n];Wk(r,s,e),xO.get(s)?.forEach(i=>i(s))}}))}function Wk(e,t,r){if(!t)return console.error(`Attempt to replicate non-existent table ${t.name} from database ${e}`);if(t.replicate===!1||t.sources?.some(s=>s.isReplicator))return;let n;t.sourcedFrom(class Yk extends Kr{static{a(this,"Replicator")}static connection;static subscription;static async subscribe(){let i=r.databaseSubscriptions||Na,o=i.get(e),c=o?.tableById||[];c[t.tableId]=t;let l=o?.ready;if(or.trace("Setting up replicator subscription to database",e),!o?.auditStore)return this.subscription=o=new xn,i.set(e,o),o.tableById=c,o.auditStore=t.auditStore,o.dbisDB=t.dbisDB,o.databaseName=e,l&&l(o),o;this.subscription=o}static subscribeOnThisThread(i,o){return!0}static async load(i){if(i){let o=i.residencyId,c=i.residency||t.dbisDB.get([Symbol.for("residency_by_id"),o]);if(c){let l,u=new Set;do{let f;for(let _ of c){if(_===Ye.hostname)continue;let h=nse(_,Yk.subscription,e);h?.isConnected&&!u.has(h)&&(!f||h.latency<f.latency)&&(f=h)}if(!f)throw l||new qk.ServerError("No connection to any other nodes are available",502);let d={requestId:Jne++,table:t,entry:i,id:i.key};u.add(f);try{return await f.getRecord(d)}catch(_){if(f.isConnected)throw _;or.warn("Error in load from node",Eg,_),l||(l=_)}}while(!0)}}}static isReplicator=!0},{intermediateSource:!0})}function rse(e,t,r,n,s){let i=pg.get(e);i||(i=new Map,pg.set(e,i));let o=i.get(r);if(o)return o;if(t)return i.set(r,o=new Gu(e,t,r,n,s)),o.connect(),o.once("finished",()=>i.delete(r)),o}function nse(e,t,r){let n=Hk.get(e);n||(n=new Map,Hk.set(e,n));let s=n.get(r);if(s)return s;let i=sr().primaryStore.get(e);return i?.url&&(s=new Gu(i.url,t,r,e,i.authorization),n.set(r,s),s.connect(),s.once("finished",()=>n.delete(r))),s}async function Z_(e,t,r){r||(r={}),r.serverName=e.name;let n=await fg(e.url,r),s=j_(n,{},{});return new Promise((i,o)=>{n.on("open",()=>{i(s.sendOperation(t))}),n.on("error",c=>{o(c)}),n.on("close",c=>{or.info("Sending operation connection to "+e.url+" closed",c)})}).finally(()=>{n.close()})}function V_(e){try{$k.isMainThread&&or.trace("Subscribing on main thread (should not happen in multi-threaded instance)",e.nodes[0].url,e.database);let t=Na.get(e.database);if(!t){let n;t=new Promise(s=>{or.info("Waiting for subscription to database "+e.database),n=s}),t.ready=n,Na.set(e.database,t)}let r=rse(e.nodes[0].url,t,e.database,e.nodes[0].name,e.nodes[0].authorization);e.nodes[0].name===void 0?r.tentativeNode=e.nodes[0]:r.nodeName=e.nodes[0].name,r.subscribe(e.nodes.filter(n=>G_(n,e.database)),e.replicateByDefault)}catch(t){or.error("Error in subscription to node",e.nodes[0]?.url,t)}}async function WE({name:e,url:t,database:r}){or.trace("Unsubscribing from node",e,t,r,"nodes",Array.from(sr().primaryStore.getRange({})));let n=pg.get(t);if(n){let s=n.get(r);s&&(s.unsubscribe(),n.delete(r))}}function sse(){if(kO!==void 0)return kO;let e=gs.default.get(x.OPERATIONSAPI_TLS_CERTIFICATE)||gs.default.get(x.TLS_CERTIFICATE);if(e)return kO=new Fk.X509Certificate((0,Gk.readFileSync)(e)).subject?.match(/CN=(.*)/)?.[1]??null}function et(){return Eg||(Eg=gs.default.get("replication_hostname")??Js(gs.default.get("replication_url"))??sse()??kk("operationsapi_network_secureport")??kk("operationsapi_network_port")??"127.0.0.1")}function ise(){Eg=void 0}function kk(e){let t=gs.default.get(e),r=t?.lastIndexOf?.(":");if(r>0)return t.slice(0,r)}function mg(e){let t=gs.default.get(e),r=t?.lastIndexOf?.(":");return r>0?+t.slice(r+1).replace(/[[\]]/g,""):+t}function _g(e){return k_(e)?.[et()]}function Sa(){let e=gs.default.get("replication_url");return e||Sg(et())}function Sg(e){let t=mg("replication_port");if(t)return`ws://${e}:${t}`;if(t=mg("replication_secureport"),t)return`wss://${e}:${t}`;if(t=mg("operationsapi_network_port"),t)return`ws://${e}:${t}`;if(t=mg("operationsapi_network_secureport"),t)return`wss://${e}:${t}`}function Js(e){if(e)return new URL(e).hostname}function ga(e,t){for(let n of Object.getOwnPropertyNames(We))r(n);return J_(n=>{r(n)}),al((n,s)=>{r(n.databaseName)});function r(n){let s=We[n];or.trace("Checking replication status of ",n,e?.databases),e?.databases===void 0||e.databases==="*"||e.databases.includes(n)||e.databases.some?.(i=>i.name===n)||!s?t(s,n,!0):ose(n)&&t(s,n,!1)}a(r,"forDatabase")}function ose(e){let t=We[e];for(let r in t)if(t[r].replicate)return!0}function F_(e){for(let t of e.getKeys({limit:1,reverse:!0}))return t}async function ase(e){let t={message:""};if(e.replicated){e.replicated=!1,or.trace?.("Replicating operation",e.operation,"to nodes",Ye.nodes.map(n=>n.name));let r=await Promise.allSettled(Ye.nodes.map(n=>Z_(n,e)));t.replicated=r.map((n,s)=>{let i=n.status==="rejected"?{status:"failed",reason:n.reason.toString()}:n.value;return i.node=Ye.nodes[s]?.name,i})}return t}var gs,or,Fk,Gk,gg,qk,$k,Vk,Jne,Xne,To,Oa,pg,Hk,kO,Eg,ps=Re(()=>{xe();na();zl();BO();Mr();gs=v(le()),or=v(ee()),Fk=require("crypto"),Gk=require("fs");K_();tl();k();_O();gg=v(require("node:tls")),qk=v(he()),$k=require("worker_threads"),Jne=1,Xne=[],To=gs.default.get(x.REPLICATION_ENABLEROOTCAS)!==!1?new Set(gg.rootCertificates):new Set;a(Zne,"start");a(Kk,"monitorNodeCAs");a(ese,"disableReplication");a(tse,"assignReplicationSource");a(Wk,"setReplicator");pg=new Map;a(rse,"getSubscriptionConnection");Hk=new Map;a(nse,"getRetrievalConnectionByName");a(Z_,"sendOperationToNode");a(V_,"subscribeToNode");a(WE,"unsubscribeFromNode");a(sse,"getCommonNameFromCert");a(et,"getThisNodeName");a(ise,"clearThisNodeName");Object.defineProperty(Ye,"hostname",{get(){return et()}});a(kk,"getHostFromListeningPort");a(mg,"getPortFromListeningPort");a(_g,"getThisNodeId");Ye.replication={getThisNodeId:_g,exportIdMapping:k_};a(Sa,"getThisNodeUrl");a(Sg,"hostnameToUrl");a(Js,"urlToNodeName");a(ga,"forEachReplicatedDatabase");a(ose,"hasExplicitlyReplicatedTable");a(F_,"lastTimeInAuditStore");a(ase,"replicateOperation")});var th=C((BIe,Xk)=>{"use strict";var qu=cH(),{validateBySchema:eh}=ot(),{common_validators:$u,schema_regex:FO}=Ai(),ar=require("joi"),cse=ee(),lse=require("uuid").v4,Rg=ho(),Vu=(k(),P(q)),use=require("util"),wa=qn(),{handleHDBError:Ao,hdb_errors:dse,ClientError:cl}=he(),{HDB_ERROR_MSGS:Tg,HTTP_STATUS_CODES:Ro}=dse,{SchemaEventMsg:yg}=Ys(),zk=pr(),{getDatabases:fse}=(xe(),P(ct)),{transformReq:Ku}=ie(),{replicateOperation:Qk}=(ps(),P(ba)),{cleanupOrphans:xIe}=(hn(),P(Du)),Ag=ar.string().min(1).max($u.schema_length.maximum).pattern(FO).messages({"string.pattern.base":"{:#label} "+$u.schema_format.message}),_se=ar.string().min(1).max($u.schema_length.maximum).pattern(FO).messages({"string.pattern.base":"{:#label} "+$u.schema_format.message}).required(),hse=ar.string().min(1).max($u.schema_length.maximum).pattern(FO).messages({"string.pattern.base":"{:#label} "+$u.schema_format.message,"any.required":"'primary_key' is required","string.base":"'primary_key' must be a string"}).required();Xk.exports={createSchema:mse,createSchemaStructure:jk,createTable:pse,createTableStructure:Jk,createAttribute:Ase,dropSchema:Ese,dropTable:gse,dropAttribute:Sse,getBackup:Rse,cleanupOrphanBlobs:yse};async function mse(e){let t=await jk(e);return Rg.signalSchemaChange(new yg(process.pid,e.operation,e.schema)),t}a(mse,"createSchema");async function jk(e){let t=eh(e,ar.object({database:Ag,schema:Ag}));if(t)throw new cl(t.message);if(Ku(e),!await qu.checkSchemaExists(e.schema))throw Ao(new Error,Tg.SCHEMA_EXISTS_ERR(e.schema),Ro.BAD_REQUEST,Vu.LOG_LEVELS.ERROR,Tg.SCHEMA_EXISTS_ERR(e.schema),!0);return await wa.createSchema(e),`database '${e.schema}' successfully created`}a(jk,"createSchemaStructure");async function pse(e){return Ku(e),e.hash_attribute=e.primary_key??e.hash_attribute,await Jk(e)}a(pse,"createTable");async function Jk(e){let t=eh(e,ar.object({database:Ag,schema:Ag,table:_se,residence:ar.array().items(ar.string().min(1)).optional(),hash_attribute:hse}));if(t)throw new cl(t.message);if(!await qu.checkSchemaTableExists(e.schema,e.table))throw Ao(new Error,Tg.TABLE_EXISTS_ERR(e.schema,e.table),Ro.BAD_REQUEST,Vu.LOG_LEVELS.ERROR,Tg.TABLE_EXISTS_ERR(e.schema,e.table),!0);let n={name:e.table,schema:e.schema,id:lse(),hash_attribute:e.hash_attribute};try{if(e.residence)if(global.clustering_on)n.residence=e.residence,await wa.createTable(n,e);else throw Ao(new Error,"Clustering does not appear to be enabled. Cannot insert table with property 'residence'.",Ro.BAD_REQUEST);else await wa.createTable(n,e);return`table '${e.schema}.${e.table}' successfully created.`}catch(s){throw s}}a(Jk,"createTableStructure");async function Ese(e){let t=eh(e,ar.object({database:ar.string(),schema:ar.string()}).or("database","schema").messages({"object.missing":"'database' is required"}));if(t)throw new cl(t.message);Ku(e);let r=await qu.checkSchemaExists(e.schema);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Vu.LOG_LEVELS.ERROR,r,!0);let n=await qu.schema_describe.describeSchema({schema:e.schema}),s=Object.keys(global.hdb_schema[e.schema]);await wa.dropSchema(e),Rg.signalSchemaChange(new yg(process.pid,e.operation,e.schema)),await zk.purgeSchemaTableStreams(e.schema,s);let i=await Qk(e);return i.message=`successfully deleted '${e.schema}'`,i}a(Ese,"dropSchema");async function gse(e){let t=eh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required()}));if(t)throw new cl(t.message);Ku(e);let r=await qu.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Vu.LOG_LEVELS.ERROR,r,!0);await wa.dropTable(e),await zk.purgeTableStream(e.schema,e.table);let n=await Qk(e);return n.message=`successfully deleted table '${e.schema}.${e.table}'`,n}a(gse,"dropTable");async function Sse(e){let t=eh(e,ar.object({database:ar.string(),schema:ar.string(),table:ar.string().required(),attribute:ar.string().required()}));if(t)throw new cl(t.message);Ku(e);let r=await qu.checkSchemaTableExists(e.schema,e.table);if(r)throw Ao(new Error,r,Ro.NOT_FOUND,Vu.LOG_LEVELS.ERROR,r,!0);if(e.attribute===global.hdb_schema[e.schema][e.table].hash_attribute)throw Ao(new Error,"You cannot drop a hash attribute",Ro.BAD_REQUEST,void 0,void 0,!0);if(Vu.TIME_STAMP_NAMES.indexOf(e.attribute)>=0)throw Ao(new Error,`cannot drop internal timestamp attribute: ${e.attribute}`,Ro.BAD_REQUEST,void 0,void 0,!0);try{return await wa.dropAttribute(e),Tse(e),Rg.signalSchemaChange(new yg(process.pid,e.operation,e.schema,e.table,e.attribute)),`successfully deleted attribute '${e.attribute}'`}catch(n){throw cse.error(`Got an error deleting attribute ${use.inspect(e)}.`),n}}a(Sse,"dropAttribute");function Tse(e){let t=Object.values(global.hdb_schema[e.schema][e.table].attributes);for(let r=0;r<t.length;r++)t[r].attribute===e.attribute&&global.hdb_schema[e.schema][e.table].attributes.splice(r,1)}a(Tse,"dropAttributeFromGlobal");async function Ase(e){Ku(e);let t=fse()[e.schema][e.table].attributes;for(let{name:r}of t)if(r===e.attribute)throw Ao(new Error,`attribute '${e.attribute}' already exists in ${e.schema}.${e.table}`,Ro.BAD_REQUEST,void 0,void 0,!0);return await wa.createAttribute(e),Rg.signalSchemaChange(new yg(process.pid,e.operation,e.schema,e.table,e.attribute)),`attribute '${e.schema}.${e.table}.${e.attribute}' successfully created.`}a(Ase,"createAttribute");function Rse(e){return wa.getBackup(e)}a(Rse,"getBackup");function yse(e){if(!e.database)throw new cl('Must provide "database" name for search for orphaned blobs');if(!databases[e.database])throw new cl(`Unknown database '${e.database}'`);let{cleanupOrphans:r}=(hn(),P(Du));return r(databases[e.database],e.database),{message:"Orphaned blobs cleanup started, check logs for progress"}}a(yse,"cleanupOrphanBlobs")});var eF=C((kIe,Zk)=>{"use strict";var{OPERATIONS_ENUM:bse}=(k(),P(q)),GO=class{static{a(this,"ReadAuditLogObject")}constructor(t,r,n=void 0,s=void 0){this.operation=bse.READ_AUDIT_LOG,this.schema=t,this.table=r,this.search_type=n,this.search_values=s}};Zk.exports=GO});var qO=C((qIe,iF)=>{"use strict";var Ose=qn(),GIe=eF(),bg=ie(),Og=(k(),P(q)),Nse=le(),{handleHDBError:tF,hdb_errors:wse}=he(),{HDB_ERROR_MSGS:rF,HTTP_STATUS_CODES:nF}=wse,Ise=Object.values(Og.READ_AUDIT_LOG_SEARCH_TYPES_ENUM),sF="To use this operation audit log must be enabled in harperdb-config.yaml";iF.exports=Cse;async function Cse(e){if(bg.isEmpty(e.schema))throw new Error(rF.SCHEMA_REQUIRED_ERR);if(bg.isEmpty(e.table))throw new Error(rF.TABLE_REQUIRED_ERR);if(!Nse.get(Og.CONFIG_PARAMS.LOGGING_AUDITLOG))throw tF(new Error,sF,nF.BAD_REQUEST,Og.LOG_LEVELS.ERROR,sF,!0);let t=bg.checkSchemaTableExist(e.schema,e.table);if(t)throw tF(new Error,t,nF.NOT_FOUND,Og.LOG_LEVELS.ERROR,t,!0);if(!bg.isEmpty(e.search_type)&&Ise.indexOf(e.search_type)<0)throw new Error(`Invalid search_type '${e.search_type}'`);return await Ose.readAuditLog(e)}a(Cse,"readAuditLog")});var aF=C((VIe,oF)=>{"use strict";var{OPERATIONS_ENUM:Pse}=(k(),P(q)),$O=class{static{a(this,"GetBackupObject")}constructor(t,r,n=void 0,s=void 0){this.operation=Pse.GET_BACKUP,this.schema=t,this.table=r}};oF.exports=$O});var uF=C((zIe,lF)=>{"use strict";var Dse=qn(),YIe=aF(),VO=ie(),Lse=(k(),P(q)),WIe=le(),{handleHDBError:Mse,hdb_errors:vse}=he(),{HDB_ERROR_MSGS:cF,HTTP_STATUS_CODES:Use}=vse;lF.exports=xse;async function xse(e){if(VO.isEmpty(e.schema))throw new Error(cF.SCHEMA_REQUIRED_ERR);if(VO.isEmpty(e.table))throw new Error(cF.TABLE_REQUIRED_ERR);let t=VO.checkSchemaTableExist(e.schema,e.table);if(t)throw Mse(new Error,t,Use.NOT_FOUND,Lse.LOG_LEVELS.ERROR,t,!0);return await Dse.getBackup(read_audit_log_object)}a(xse,"getBackup")});var hF=C((jIe,_F)=>{"use strict";var Bse=le(),Ia=require("joi"),Hse=ot(),dF=require("moment"),kse=require("fs-extra"),KO=require("path"),Fse=require("lodash"),rh=(k(),P(q)),{LOG_LEVELS:ll}=(k(),P(q)),Gse="YYYY-MM-DD hh:mm:ss",qse=KO.resolve(__dirname,"../logs");_F.exports=function(e){return Hse.validateBySchema(e,$se)};var $se=Ia.object({from:Ia.custom(fF),until:Ia.custom(fF),level:Ia.valid(ll.NOTIFY,ll.FATAL,ll.ERROR,ll.WARN,ll.INFO,ll.DEBUG,ll.TRACE),order:Ia.valid("asc","desc"),limit:Ia.number().min(1),start:Ia.number().min(0),log_name:Ia.custom(Vse)});function fF(e,t){if(dF(e,dF.ISO_8601).format(Gse)==="Invalid date")return t.message(`'${t.state.path[0]}' date '${e}' is invalid.`)}a(fF,"validateDatetime");function Vse(e,t){if(Fse.invert(rh.LOG_NAMES)[e]===void 0)return t.message(`'log_name' '${e}' is invalid.`);let n=Bse.get(rh.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e===void 0?rh.LOG_NAMES.HDB:e,i=s===rh.LOG_NAMES.INSTALL?KO.join(qse,rh.LOG_NAMES.INSTALL):KO.join(n,s);return kse.existsSync(i)?null:t.message(`'log_name' '${e}' does not exist.`)}a(Vse,"validateReadLogPath")});var WO=C((XIe,pF)=>{"use strict";var Ng=(k(),P(q)),Kse=ee(),Yse=le(),Wse=hF(),YO=require("path"),mF=require("fs-extra"),{once:zse}=require("events"),{handleHDBError:Qse,hdb_errors:jse}=he(),{PACKAGE_ROOT:Jse}=Et(),Xse=YO.join(Jse,"logs"),Zse=1e3,eie=200;pF.exports=tie;async function tie(e){let t=Wse(e);if(t)throw Qse(t,t.message,jse.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0);let r=Yse.get(Ng.HDB_SETTINGS_NAMES.LOG_PATH_KEY),n=e.log_name===void 0?Ng.LOG_NAMES.HDB:e.log_name,s=n===Ng.LOG_NAMES.INSTALL?YO.join(Xse,Ng.LOG_NAMES.INSTALL):YO.join(r,n),i=e.level!==void 0,o=i?e.level:void 0,c=e.from!==void 0,l=c?new Date(e.from):void 0,u=e.until!==void 0,f=u?new Date(e.until):void 0,d=e.limit===void 0?Zse:e.limit,_=e.order===void 0?void 0:e.order,h=e.start===void 0?0:e.start,m=h+d,S=0;_==="desc"&&!l&&!f&&(S=Math.max(mF.statSync(s).size-(m+5)*eie,0));let g=mF.createReadStream(s,{start:S});g.on("error",H=>{Kse.error(H)});let R=0,E=[],T="",N;g.on("data",H=>{let X=/(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d\.]+Z) \[(.+?)]: /g;H=T+H;let W=0,$;for(;($=X.exec(H))&&!g.destroyed;){N&&(N.message=H.slice(W,$.index),M(N));let[se,z,fe]=$,ue=fe.split("] ["),Z=ue[0],Ae=ue[1];ue.splice(0,2),N={timestamp:z,thread:Z,level:Ae,tags:ue,message:""},W=$.index+se.length}T=H.slice(W)}),g.on("end",H=>{g.destroyed||N&&(N.message=T.trim(),M(N))}),g.resume();function M(H){let X,W,$;switch(!0){case(i&&c&&u):X=new Date(H.timestamp),W=new Date(l),$=new Date(f),H.level===o&&X>=W&&X<=$&&R<h?R++:H.level===o&&X>=W&&X<=$&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case(i&&c):X=new Date(H.timestamp),W=new Date(l),H.level===o&&X>=W&&R<h?R++:H.level===o&&X>=W&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case(i&&u):X=new Date(H.timestamp),$=new Date(f),H.level===o&&X<=$&&R<h?R++:H.level===o&&X<=$&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case(c&&u):X=new Date(H.timestamp),W=new Date(l),$=new Date(f),X>=W&&X<=$&&R<h?R++:X>=W&&X<=$&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case i:H.level===o&&R<h?R++:H.level===o&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case c:X=new Date(H.timestamp),W=new Date(l),X>=W&&R<h?R++:X>=W&&R>=h&&(Ca(H,_,E),R++,R===m&&g.destroy());break;case u:X=new Date(H.timestamp),$=new Date(f),X<=$&&R<h?R++:X<=$&&R>=h&&(Ca(H,_,E),R++,R===m&&g.destroy());break;default:R<h?R++:(Ca(H,_,E),R++,R===m&&g.destroy())}}return a(M,"onLogMessage"),await zse(g,"close"),E}a(tie,"readLog");function Ca(e,t,r){t==="desc"?rie(e,r):t==="asc"?nie(e,r):r.push(e)}a(Ca,"pushLineToResult");function rie(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)>r?n=i+1:s=i}t.splice(n,0,e)}a(rie,"insertDescending");function nie(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)<r?n=i+1:s=i}t.splice(n,0,e)}a(nie,"insertAscending")});var wg=C((sCe,TF)=>{"use strict";var zO=require("joi"),{string:Yu,boolean:EF,date:sie}=zO.types(),iie=ot(),{validateSchemaExists:eCe,validateTableExists:tCe,validateSchemaName:rCe}=Ai(),oie=(k(),P(q)),aie=Ct(),gF=le();gF.initSync();var nCe=Yu.invalid(gF.get(oie.CONFIG_PARAMS.CLUSTERING_NODENAME)??"node_name").pattern(aie.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),SF={operation:Yu.valid("add_node","update_node","set_node_replication"),node_name:Yu.optional(),subscriptions:zO.array().items({table:Yu.optional(),schema:Yu.optional(),database:Yu.optional(),subscribe:EF.required(),publish:EF.required().custom(lie),start_time:sie.iso()})};function cie(e){return iie.validateBySchema(e,zO.object(SF))}a(cie,"addUpdateNodeValidator");function lie(e,t){if(t.state.ancestors[2].operation==="add_node"&&e===!1&&t.state.ancestors[0].subscribe===!1)return t.message(`'subscriptions[${t.state.path[1]}]' subscribe and/or publish must be set to true when adding a node`)}a(lie,"checkForFalsy");TF.exports={addUpdateNodeValidator:cie,validation_schema:SF}});var Wu=C((oCe,AF)=>{"use strict";var QO=class{static{a(this,"Node")}constructor(t,r,n){this.name=t,this.subscriptions=r,this.system_info=n}},jO=class{static{a(this,"NodeSubscription")}constructor(t,r,n,s){this.schema=t,this.table=r,this.publish=n,this.subscribe=s}};AF.exports={Node:QO,NodeSubscription:jO}});var yF=C((cCe,RF)=>{"use strict";var uie=(k(),P(q)).OPERATIONS_ENUM,JO=class{static{a(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=uie.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};RF.exports=JO});var nh=C((uCe,bF)=>{"use strict";var XO=class{static{a(this,"RemotePayloadObject")}constructor(t,r,n,s){this.operation=t,this.node_name=r,this.subscriptions=n,this.system_info=s}},ZO=class{static{a(this,"RemotePayloadSubscription")}constructor(t,r,n,s,i,o,c){this.schema=t,this.table=r,this.hash_attribute=n,this.publish=s,this.subscribe=i,this.start_time=o,c!==void 0&&(this.attributes=c)}};bF.exports={RemotePayloadObject:XO,RemotePayloadSubscription:ZO}});var NF=C((fCe,OF)=>{"use strict";var eN=class{static{a(this,"TableSizeObject")}constructor(t,r,n=0,s=0,i=0,o=0){this.schema=t,this.table=r,this.table_size=n,this.record_count=s,this.transaction_log_size=i,this.transaction_log_record_count=o}};OF.exports=eN});var IF=C((gCe,wF)=>{"use strict";var die=NF(),hCe=Ft(),mCe=_t(),fie=ee(),{getSchemaPath:pCe,getTransactionAuditStorePath:ECe}=gt(),{getDatabases:_ie}=(xe(),P(ct));wF.exports=hie;async function hie(e){let t=new die;try{let r=_ie()[e.schema]?.[e.name],n=r.primaryStore.getStats(),s=r.auditStore?.getStats();t.schema=e.schema,t.table=e.name,t.record_count=n.entryCount,t.transaction_log_record_count=s.entryCount}catch(r){fie.warn(`unable to stat table dbi due to ${r}`)}return t}a(hie,"lmdbGetTableSize")});var PF=C((TCe,CF)=>{"use strict";var tN=class{static{a(this,"SystemInformationObject")}constructor(t,r,n,s,i,o,c){this.system=t,this.time=r,this.cpu=n,this.memory=s,this.disk=i,this.network=o,this.harperdb_processes=c}};CF.exports=tN});var Qu=C((NCe,vF)=>{"use strict";var mie=require("fs-extra"),pie=require("path"),Zr=require("systeminformation"),Pa=ee(),DF=pr(),RCe=Ct(),zu=(k(),P(q)),Eie=IF(),gie=fo(),{getThreadInfo:LF}=it(),sh=le();sh.initSync();var Sie=PF(),{openEnvironment:yCe}=_t(),{getSchemaPath:bCe}=gt(),{database:OCe,databases:rN}=(xe(),P(ct)),Ig;vF.exports={getHDBProcessInfo:oN,getNetworkInfo:cN,getDiskInfo:aN,getMemoryInfo:iN,getCPUInfo:sN,getTimeInfo:nN,getSystemInformation:lN,systemInformation:Tie,getTableSize:uN,getMetrics:dN};function nN(){return Zr.time()}a(nN,"getTimeInfo");async function sN(){try{let{family:e,model:t,stepping:r,revision:n,voltage:s,speedmin:i,speedmax:o,governor:c,socket:l,cache:u,...f}=await Zr.cpu();f.cpu_speed=await Zr.cpuCurrentSpeed();let{raw_currentload:d,raw_currentload_idle:_,raw_currentload_irq:h,raw_currentload_nice:m,raw_currentload_system:S,raw_currentload_user:g,cpus:R,...E}=await Zr.currentLoad();return E.cpus=[],R.forEach(T=>{let{raw_load:N,raw_load_idle:M,raw_load_irq:H,raw_load_nice:X,raw_load_system:W,raw_load_user:$,...se}=T;E.cpus.push(se)}),f.current_load=E,f}catch(e){return Pa.error(`error in getCPUInfo: ${e}`),{}}}a(sN,"getCPUInfo");async function iN(){try{let{buffers:e,cached:t,slab:r,buffcache:n,...s}=await Zr.mem();return Object.assign(s,process.memoryUsage())}catch(e){return Pa.error(`error in getMemoryInfo: ${e}`),{}}}a(iN,"getMemoryInfo");async function oN(){let e={core:[],clustering:[]};try{let t=await Zr.processes(),r;try{r=Number.parseInt(await mie.readFile(pie.join(sh.get(zu.CONFIG_PARAMS.ROOTPATH),zu.HDB_PID_FILE),"utf8"))}catch(n){if(n.code===zu.NODE_ERROR_CODES.ENOENT)Pa.warn("Unable to locate 'hdb.pid' file, try stopping and starting HarperDB. This could be because HarperDB is not running.");else throw n}t.list.forEach(n=>{n.pid===r?e.core.push(n):n.name==="nats-server"&&e.clustering.push(n)});for(let n of e.core)for(let s of t.list)s.pid===n.parentPid&&(s.name==="PM2"||s.command==="PM2")&&(n.parent="PM2");return e}catch(t){return Pa.error(`error in getHDBProcessInfo: ${t}`),e}}a(oN,"getHDBProcessInfo");async function aN(){let e={};try{if(!sh.get(zu.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_DISK))return e;let{rIO_sec:t,wIO_sec:r,tIO_sec:n,ms:s,...i}=await Zr.disksIO();e.io=i;let{rx_sec:o,tx_sec:c,wx_sec:l,...u}=await Zr.fsStats();return e.read_write=u,e.size=await Zr.fsSize(),e}catch(t){return Pa.error(`error in getDiskInfo: ${t}`),e}}a(aN,"getDiskInfo");async function cN(){let e={default_interface:null,latency:{},interfaces:[],stats:[],connections:[]};try{return sh.get(zu.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_NETWORK)&&(e.default_interface=await Zr.networkInterfaceDefault(),e.latency=await Zr.inetChecksite("google.com"),(await Zr.networkInterfaces()).forEach(n=>{let{internal:s,virtual:i,mtu:o,dhcp:c,dnsSuffix:l,ieee8021xAuth:u,ieee8021xState:f,carrier_changes:d,..._}=n;e.interfaces.push(_)}),(await Zr.networkStats()).forEach(n=>{let{rx_sec:s,tx_sec:i,ms:o,...c}=n;e.stats.push(c)})),e}catch(t){return Pa.error(`error in getNetworkInfo: ${t}`),e}}a(cN,"getNetworkInfo");async function lN(){if(Ig!==void 0)return Ig;let e={};try{let{codepage:t,logofile:r,serial:n,build:s,servicepack:i,uefi:o,...c}=await Zr.osInfo();e=c;let l=await Zr.versions("node, npm");return e.node_version=l.node,e.npm_version=l.npm,Ig=e,Ig}catch(t){return Pa.error(`error in getSystemInformation: ${t}`),e}}a(lN,"getSystemInformation");async function uN(){let e=[],t=await gie.describeAll();for(let r of Object.values(t))for(let n of Object.values(r))e.push(await Eie(n));return e}a(uN,"getTableSize");async function dN(){let e={};for(let t in rN){let r=e[t]={},n=r.tables={};for(let s in rN[t])try{let i=rN[t][s];if(!r.readers&&(Object.assign(r,i.primaryStore.rootStore.getStats()),delete r.root,r.readers=i.primaryStore.rootStore.readerList().split(/\n\s+/).slice(1).map(l=>{let[u,f,d]=l.trim().split(" ");return{pid:u,thread:f,txnid:d}}),i.auditStore)){let{treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:_}=i.auditStore.getStats();r.audit={treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:f,entryCount:d,overflowPages:_}}let o=i.primaryStore.getStats(),c={};for(let l of["treeDepth","treeBranchPageCount","treeLeafPageCount","entryCount","overflowPages"])c[l]=o[l];n[s]=c}catch(i){Pa.notify(`Error getting stats for table ${s}: ${i}`)}}return e}a(dN,"getMetrics");async function MF(){if(sh.get(zu.CONFIG_PARAMS.CLUSTERING_ENABLED)){let{jsm:e}=await DF.getNATSReferences(),t=await DF.listStreams(),r=[];for(let n of t){let s=[],i=await e.consumers.list(n.config.name);for await(let c of i)s.push({name:c.name,created:c.created,num_ack_pending:c.num_ack_pending,num_redelivered:c.num_redelivered,num_waiting:c.num_waiting,num_pending:c.num_pending});let o={stream_name:n.config.name,database:n.config.subjects[0].split(".")[1],table:n.config.subjects[0].split(".")[2],state:n.state,consumers:s};r.push(o)}return r}}a(MF,"getNatsStreamInfo");async function Tie(e){let t=new Sie;if(!Array.isArray(e.attributes)||e.attributes.length===0)return t.system=await lN(),t.time=nN(),t.cpu=await sN(),t.memory=await iN(),t.disk=await aN(),t.network=await cN(),t.harperdb_processes=await oN(),t.table_size=await uN(),t.metrics=await dN(),t.threads=await LF(),t.replication=await MF(),t;for(let r=0;r<e.attributes.length;r++)switch(e.attributes[r]){case"system":t.system=await lN();break;case"time":t.time=nN();break;case"cpu":t.cpu=await sN();break;case"memory":t.memory=await iN();break;case"disk":t.disk=await aN();break;case"network":t.network=await cN();break;case"harperdb_processes":t.harperdb_processes=await oN();break;case"table_size":t.table_size=await uN();break;case"database_metrics":case"metrics":t.metrics=await dN();break;case"threads":t.threads=await LF();break;case"replication":t.replication=await MF();break;default:break}return t}a(Tie,"systemInformation")});var yo=C((DCe,HF)=>{"use strict";var Aie=Sn(),fN=ie(),Rie=require("util"),ul=(k(),P(q)),UF=le();UF.initSync();var yie=Yb(),xF=Wr(),{Node:ICe,NodeSubscription:CCe}=Wu(),bie=pu(),Oie=yF(),{RemotePayloadObject:Nie,RemotePayloadSubscription:wie}=nh(),{handleHDBError:Iie,hdb_errors:Cie}=he(),{HTTP_STATUS_CODES:Pie,HDB_ERROR_MSGS:Die}=Cie,Lie=Ws(),Mie=Qu(),{packageJson:vie}=Et(),{getDatabases:Uie}=(xe(),P(ct)),PCe=Rie.promisify(yie.authorize),xie=xF.searchByHash,Bie=xF.searchByValue;HF.exports={isEmpty:Hie,getNodeRecord:kie,upsertNodeRecord:Fie,buildNodePayloads:Gie,checkClusteringEnabled:qie,getAllNodeRecords:$ie,getSystemInfo:Vie,reverseSubscription:BF};function Hie(e){return e==null}a(Hie,"isEmpty");async function kie(e){let t=new bie(ul.SYSTEM_SCHEMA_NAME,ul.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e],["*"]);return xie(t)}a(kie,"getNodeRecord");async function Fie(e){let t=new Oie(ul.SYSTEM_SCHEMA_NAME,ul.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e]);return Aie.upsert(t)}a(Fie,"upsertNodeRecord");function BF(e){if(fN.isEmpty(e.subscribe)||fN.isEmpty(e.publish))throw new Error("Received invalid subscription object");let{schema:t,table:r,hash_attribute:n}=e,s={schema:t,table:r,hash_attribute:n};return e.subscribe===!0&&e.publish===!1?(s.subscribe=!1,s.publish=!0):e.subscribe===!1&&e.publish===!0?(s.subscribe=!0,s.publish=!1):(s.subscribe=e.subscribe,s.publish=e.publish),s}a(BF,"reverseSubscription");function Gie(e,t,r,n){let s=[];for(let i=0,o=e.length;i<o;i++){let c=e[i],{schema:l,table:u}=c,f=fN.getTableHashAttribute(l,u),{subscribe:d,publish:_}=BF(c),h=Uie()[l]?.[u],m=new wie(l,u,f,_,d,c.start_time,h.schemaDefined?h.attributes:void 0);s.push(m)}return new Nie(r,t,s,n)}a(Gie,"buildNodePayloads");function qie(){if(!UF.get(ul.CONFIG_PARAMS.CLUSTERING_ENABLED))throw Iie(new Error,Die.CLUSTERING_NOT_ENABLED,Pie.BAD_REQUEST,void 0,void 0,!0)}a(qie,"checkClusteringEnabled");async function $ie(){let e=new Lie(ul.SYSTEM_SCHEMA_NAME,ul.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,"name","*",void 0,["*"]);return Array.from(await Bie(e))}a($ie,"getAllNodeRecords");async function Vie(){let e=await Mie.getSystemInformation();return{hdb_version:vie.version,node_version:e.node_version,platform:e.platform}}a(Vie,"getSystemInfo")});var _N=C((MCe,YF)=>{"use strict";var Cg=pr(),kF=ie(),FF=Ct(),GF=(k(),P(q)),Pg=ee(),qF=th(),Kie=__(),{RemotePayloadObject:Yie}=nh(),{handleHDBError:$F,hdb_errors:Wie}=he(),{HTTP_STATUS_CODES:VF}=Wie,{NodeSubscription:KF}=Wu();YF.exports=zie;async function zie(e,t){let r;try{r=await Cg.request(`${t}.${FF.REQUEST_SUFFIX}`,new Yie(GF.OPERATIONS_ENUM.DESCRIBE_ALL,t,void 0,void 0)),Pg.trace("Response from remote describe all request:",r)}catch(o){Pg.error(`addNode received error from describe all request to remote node: ${o}`);let c=Cg.requestErrorHandler(o,"add_node",t);throw $F(new Error,c,VF.INTERNAL_SERVER_ERROR,"error",c)}if(r.status===FF.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let o=`Error returned from remote node ${t}: ${r.message}`;throw $F(new Error,o,VF.INTERNAL_SERVER_ERROR,"error",o)}let n=r.message,s=[],i=[];for(let o of e){let{table:c}=o,l=o.database??o.schema??"data";if(l===GF.SYSTEM_SCHEMA_NAME){await Cg.createLocalTableStream(l,c);let m=new KF(l,c,o.publish,o.subscribe);m.start_time=o.start_time,i.push(m);continue}let u=kF.doesSchemaExist(l),f=n[l]!==void 0,d=c?kF.doesTableExist(l,c):!0,_=c?n?.[l]?.[c]!==void 0:!0;if(!u&&!f||!d&&!_){s.push(o);continue}if(!u&&f&&(Pg.trace(`addNode creating schema: ${l}`),await qF.createSchema({operation:"create_schema",schema:l})),!d&&_){Pg.trace(`addNode creating table: ${c} in schema: ${l} with attributes ${JSON.stringify(n[l][c].attributes)}`);let m=new Kie(l,c,n[l][c].hash_attribute);n[l][c].attributes&&(m.attributes=n[l][c].attributes),await qF.createTable(m)}await Cg.createLocalTableStream(l,c);let h=new KF(l,c,o.publish,o.subscribe);h.start_time=o.start_time,i.push(h)}return{added:i,skipped:s}}a(zie,"reviewSubscriptions")});var dl={};Ue(dl,{addNodeBack:()=>Zie,removeNodeBack:()=>eoe,setNode:()=>Xie});async function Xie(e){e.node_name&&!e.hostname&&(e.hostname=e.node_name),e.verify_tls!==void 0&&(e.rejectUnauthorized=e.verify_tls);let{url:t,hostname:r}=e;t?r||(r=e.hostname=Js(t)):t=Sg(r);let n=(0,zF.validateBySchema)(e,Jie);if(n)throw(0,bo.handleHDBError)(n,n.message,jie.BAD_REQUEST,void 0,void 0,!0);if(e.operation==="remove_node"){if(!t&&!r)throw new bo.ClientError("url or hostname is required for remove_node operation");let h=r,m=sr(),S=await m.get(h);if(!S)throw new bo.ClientError(h+" does not exist");try{await Z_({url:S.url},{operation:Yt.REMOVE_NODE_BACK,name:S?.subscriptions?.length>0?et():h},void 0)}catch(g){Xn.warn(`Error removing node from target node ${h}, if it is offline and we be online in the future, you may need to clean up this node manually, or retry:`,g)}return await m.delete(h),`Successfully removed '${h}' from cluster`}if(!t)throw new bo.ClientError("url required for this operation");let s=Sa();if(s==null)throw new bo.ClientError("replication url is missing from harperdb-config.yaml");let i,o,c;if(t?.startsWith("wss:")){i=await(0,Ss.getReplicationCert)();let h=await(0,Ss.getReplicationCertAuth)();if(!i)throw new Error("Unable to find a certificate to use for replication");i.options.is_self_signed||e.force_signing?(o=await(0,Ss.createCsr)(),Xn.info("Sending CSR to target node:",t)):h&&(c=h.certificate,Xn.info("Sending CA named",h.name,"to target node",t))}let l={operation:Yt.ADD_NODE_BACK,hostname:(0,La.get)(x.REPLICATION_HOSTNAME),target_hostname:r,url:s,csr:o,cert_auth:c,authorization:e.retain_authorization?e.authorization:null};if((0,La.get)(x.REPLICATION_SHARD)!==void 0&&(l.shard=(0,La.get)(x.REPLICATION_SHARD)),e.subscriptions?l.subscriptions=e.subscriptions.map(WF):l.subscriptions=null,e.hasOwnProperty("subscribe")||e.hasOwnProperty("publish")){let h=WF(e);l.subscribe=h.subscribe,l.publish=h.publish}e?.authorization?.username&&e?.authorization?.password&&(e.authorization="Basic "+Buffer.from(e.authorization.username+":"+e.authorization.password).toString("base64"));let u,f;try{u=await Z_({url:t},l,e)}catch(h){h.message=`Error returned from ${t}: `+h.message,Xn.warn("Error adding node:",t,"to cluster:",h),f=h}if(o&&(!u?.certificate||!u?.certificate?.includes?.("BEGIN CERTIFICATE")))throw f?(f.message+=" and connection was required to sign certificate",f):new Error(`Unexpected certificate signature response from node ${t} response: ${JSON.stringify(u)}`);o&&(Xn.info("CSR response received from node:",t,"saving certificate and CA in hdb_certificate"),await(0,Ss.setCertTable)({name:Qie.certificateFromPem(u.signingCA).issuer.getField("CN").value,certificate:u.signingCA,is_authority:!0}),u.certificate&&await(0,Ss.setCertTable)({name:et()+"-replication",uses:["replication"],certificate:u.certificate,private_key_name:i?.options?.key_file,is_authority:!1,is_self_signed:!1}),c=u.signingCA);let d={url:t,ca:u?.usingCA};if(e.hostname&&(d.name=e.hostname),e.subscriptions?d.subscriptions=e.subscriptions:d.replicates=!0,e.start_time&&(d.start_time=typeof e.start_time=="string"?new Date(e.start_time).getTime():e.start_time),e.retain_authorization&&(d.authorization=e.authorization),e.revoked_certificates&&(d.revoked_certificates=e.revoked_certificates),u?.shard!==void 0?d.shard=u.shard:e.shard!==void 0&&(d.shard=e.shard),d.replicates){let h={url:s,ca:c,replicates:!0,subscriptions:null};(0,La.get)(x.REPLICATION_SHARD)!==void 0&&(h.shard=(0,La.get)(x.REPLICATION_SHARD)),e.retain_authorization&&(h.authorization=e.authorization),e.start_time&&(h.start_time=e.start_time),await go(et(),h)}await go(u?u.nodeName:d.name??Js(t),d);let _;return e.operation==="update_node"?_=`Successfully updated '${t}'`:_=`Successfully added '${t}' to cluster`,f&&(_+=" but there was an error updating target node: "+f.message),_}async function Zie(e){Xn.trace("addNodeBack received request:",e);let t=await(0,Ss.signCertificate)(e),r;e.csr?(r=t.signingCA,Xn.info("addNodeBack received CSR from node:",e.url,"this node will use and respond with CA that was used to issue CSR")):(r=e?.cert_auth,Xn.info("addNodeBack received CA from node:",e.url));let n={url:e.url,ca:r};e.subscriptions?n.subscriptions=e.subscriptions:(n.replicates=!0,n.subscriptions=null),e.start_time&&(n.start_time=e.start_time),e.authorization&&(n.authorization=e.authorization),e.shard!==void 0&&(n.shard=e.shard);let s=await(0,Ss.getReplicationCertAuth)();if(n.replicates){let i={url:Sa(),ca:s?.certificate,replicates:!0,subscriptions:null};(0,La.get)(x.REPLICATION_SHARD)!==void 0&&(i.shard=(0,La.get)(x.REPLICATION_SHARD),t.shard=i.shard),e.start_time&&(i.start_time=e.start_time),e.authorization&&(i.authorization=e.authorization),await go(et(),i)}return await go(e.hostname,n),t.nodeName=et(),t.usingCA=s?.certificate,Xn.info("addNodeBack responding to:",e.url,"with CA named:",s?.name),t}async function eoe(e){Xn.trace("removeNodeBack received request:",e),await sr().delete(e.name)}function WF(e){let{subscribe:t,publish:r}=e;return{...e,subscribe:r,publish:t}}var Ss,zF,Da,La,Xn,bo,Qie,jie,Jie,fl=Re(()=>{Ss=v(ei()),zF=v(ot()),Da=v(require("joi")),La=v(le());k();K_();tl();ps();Xn=v(ee()),bo=v(he()),{pki:Qie}=require("node-forge"),{HTTP_STATUS_CODES:jie}=bo.hdb_errors,Jie=Da.default.object({hostname:Da.default.string(),verify_tls:Da.default.boolean(),replicates:Da.default.boolean(),subscriptions:Da.default.array(),revoked_certificates:Da.default.array(),shard:Da.default.number()});a(Xie,"setNode");a(Zie,"addNodeBack");a(eoe,"removeNodeBack");a(WF,"reverseSubscription")});var Ug=C((qCe,jF)=>{"use strict";var{handleHDBError:Dg,hdb_errors:toe}=he(),{HTTP_STATUS_CODES:Lg}=toe,{addUpdateNodeValidator:roe}=wg(),Mg=ee(),vg=(k(),P(q)),QF=Ct(),noe=ie(),ih=pr(),oh=yo(),hN=le(),soe=_N(),{Node:ioe,NodeSubscription:ooe}=Wu(),{broadcast:aoe}=it(),{setNode:coe}=(fl(),P(dl)),FCe=le(),GCe=(k(),P(q)),loe="Unable to create subscriptions due to schema and/or tables not existing on the local or remote node",uoe="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",doe=hN.get(vg.CONFIG_PARAMS.CLUSTERING_NODENAME);jF.exports=foe;async function foe(e,t=!1){if(Mg.trace("addNode called with:",e),hN.get(vg.CONFIG_PARAMS.REPLICATION_URL)||hN.get(vg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return coe(e);oh.checkClusteringEnabled();let r=roe(e);if(r)throw Dg(r,r.message,Lg.BAD_REQUEST,void 0,void 0,!0);let n=e.node_name;if(!t){let d=await oh.getNodeRecord(n);if(!noe.isEmptyOrZeroLength(d))throw Dg(new Error,`Node '${n}' has already been added, perform update_node to proceed.`,Lg.BAD_REQUEST,void 0,void 0,!0)}let{added:s,skipped:i}=await soe(e.subscriptions,n),o={message:void 0,added:s,skipped:i};if(s.length===0)return o.message=loe,o;let c=oh.buildNodePayloads(s,doe,vg.OPERATIONS_ENUM.ADD_NODE,await oh.getSystemInfo()),l=[];for(let d=0,_=s.length;d<_;d++){let h=s[d];s[d].start_time===void 0&&delete s[d].start_time,l.push(new ooe(h.schema,h.table,h.publish,h.subscribe))}Mg.trace("addNode sending remote payload:",c);let u;try{u=await ih.request(`${n}.${QF.REQUEST_SUFFIX}`,c)}catch(d){Mg.error(`addNode received error from request: ${d}`);for(let h=0,m=s.length;h<m;h++){let S=s[h];S.publish=!1,S.subscribe=!1,await ih.updateRemoteConsumer(S,n)}let _=ih.requestErrorHandler(d,"add_node",n);throw Dg(new Error,_,Lg.INTERNAL_SERVER_ERROR,"error",_)}if(u.status===QF.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let d=`Error returned from remote node ${n}: ${u.message}`;throw Dg(new Error,d,Lg.INTERNAL_SERVER_ERROR,"error",d)}Mg.trace(u);for(let d=0,_=s.length;d<_;d++){let h=s[d];await ih.updateRemoteConsumer(h,n),h.subscribe===!0&&await ih.updateConsumerIterator(h.schema,h.table,n,"start")}let f=new ioe(n,l,u.system_info);return await oh.upsertNodeRecord(f),aoe({type:"nats_update"}),i.length>0?o.message=uoe:o.message=`Successfully added '${n}' to manifest`,o}a(foe,"addNode")});var gN=C((KCe,XF)=>{"use strict";var{handleHDBError:mN,hdb_errors:_oe}=he(),{HTTP_STATUS_CODES:pN}=_oe,{addUpdateNodeValidator:hoe}=wg(),ah=ee(),xg=(k(),P(q)),JF=Ct(),VCe=ie(),ch=pr(),lh=yo(),EN=le(),{cloneDeep:moe}=require("lodash"),poe=_N(),{Node:Eoe,NodeSubscription:goe}=Wu(),{broadcast:Soe}=it(),{setNode:Toe}=(fl(),P(dl)),Aoe="Unable to update subscriptions due to schema and/or tables not existing on the local or remote node",Roe="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",yoe=EN.get(xg.CONFIG_PARAMS.CLUSTERING_NODENAME);XF.exports=boe;async function boe(e){if(ah.trace("updateNode called with:",e),EN.get(xg.CONFIG_PARAMS.REPLICATION_URL)??EN.get(xg.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Toe(e);lh.checkClusteringEnabled();let t=hoe(e);if(t)throw mN(t,t.message,pN.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n,s=await lh.getNodeRecord(r);s.length>0&&(n=moe(s));let{added:i,skipped:o}=await poe(e.subscriptions,r),c={message:void 0,updated:i,skipped:o};if(i.length===0)return c.message=Aoe,c;let l=lh.buildNodePayloads(i,yoe,xg.OPERATIONS_ENUM.UPDATE_NODE,await lh.getSystemInfo());for(let f=0,d=i.length;f<d;f++){let _=i[f];ah.trace(`updateNode updating work stream for node: ${r} subscription:`,_),i[f].start_time===void 0&&delete i[f].start_time}ah.trace("updateNode sending remote payload:",l);let u;try{u=await ch.request(`${r}.${JF.REQUEST_SUFFIX}`,l)}catch(f){ah.error(`updateNode received error from request: ${f}`);let d=ch.requestErrorHandler(f,"update_node",r);throw mN(new Error,d,pN.INTERNAL_SERVER_ERROR,"error",d)}if(u.status===JF.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let f=`Error returned from remote node ${r}: ${u.message}`;throw mN(new Error,f,pN.INTERNAL_SERVER_ERROR,"error",f)}ah.trace(u);for(let f=0,d=i.length;f<d;f++){let _=i[f];await ch.updateRemoteConsumer(_,r),_.subscribe===!0?await ch.updateConsumerIterator(_.schema,_.table,r,"start"):await ch.updateConsumerIterator(_.schema,_.table,r,"stop")}return n||(n=[new Eoe(r,[],u.system_info)]),await Ooe(n[0],i,u.system_info),o.length>0?c.message=Roe:c.message=`Successfully updated '${r}'`,c}a(boe,"updateNode");async function Ooe(e,t,r){let n=e;for(let s=0,i=t.length;s<i;s++){let o=t[s],c=!1;for(let l=0,u=e.subscriptions.length;l<u;l++){let f=n.subscriptions[l];if(f.schema===o.schema&&f.table===o.table){f.publish=o.publish,f.subscribe=o.subscribe,c=!0;break}}c||n.subscriptions.push(new goe(o.schema,o.table,o.publish,o.subscribe))}n.system_info=r,await lh.upsertNodeRecord(n),Soe({type:"nats_update"})}a(Ooe,"updateNodeTable")});var nG=C((WCe,rG)=>{"use strict";var tG=require("joi"),{string:ZF}=tG.types(),Noe=ot(),eG=(k(),P(q)),woe=le(),Ioe=Ct();rG.exports=Coe;function Coe(e){let t=ZF.invalid(woe.get(eG.CONFIG_PARAMS.CLUSTERING_NODENAME)).pattern(Ioe.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),r=tG.object({operation:ZF.valid(eG.OPERATIONS_ENUM.REMOVE_NODE).required(),node_name:t});return Noe.validateBySchema(e,r)}a(Coe,"removeNodeValidator")});var Bg=C((QCe,cG)=>{"use strict";var{handleHDBError:sG,hdb_errors:Poe}=he(),{HTTP_STATUS_CODES:iG}=Poe,Doe=nG(),uh=ee(),oG=yo(),Loe=ie(),ju=(k(),P(q)),aG=Ct(),SN=pr(),TN=le(),{RemotePayloadObject:Moe}=nh(),{NodeSubscription:voe}=Wu(),Uoe=f_(),xoe=Bc(),{broadcast:Boe}=it(),{setNode:Hoe}=(fl(),P(dl)),koe=TN.get(ju.CONFIG_PARAMS.CLUSTERING_NODENAME);cG.exports=Foe;async function Foe(e){if(uh.trace("removeNode called with:",e),TN.get(ju.CONFIG_PARAMS.REPLICATION_URL)??TN.get(ju.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Hoe(e);oG.checkClusteringEnabled();let t=Doe(e);if(t)throw sG(t,t.message,iG.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n=await oG.getNodeRecord(r);if(Loe.isEmptyOrZeroLength(n))throw sG(new Error,`Node '${r}' was not found.`,iG.BAD_REQUEST,void 0,void 0,!0);n=n[0];let s=new Moe(ju.OPERATIONS_ENUM.REMOVE_NODE,koe,[]),i,o=!1;for(let l=0,u=n.subscriptions.length;l<u;l++){let f=n.subscriptions[l];f.subscribe===!0&&await SN.updateConsumerIterator(f.schema,f.table,r,"stop");try{await SN.updateRemoteConsumer(new voe(f.schema,f.table,!1,!1),r)}catch(d){uh.error(d)}}try{i=await SN.request(`${r}.${aG.REQUEST_SUFFIX}`,s),uh.trace("Remove node reply from remote node:",r,i)}catch(l){uh.error("removeNode received error from request:",l),o=!0}let c=new Uoe(ju.SYSTEM_SCHEMA_NAME,ju.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[r]);return await xoe.deleteRecord(c),Boe({type:"nats_update"}),i?.status===aG.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR||o?(uh.error("Error returned from remote node:",r,i?.message),`Successfully removed '${r}' from local manifest, however there was an error reaching remote node. Check the logs for more details.`):`Successfully removed '${r}' from manifest`}a(Foe,"removeNode")});var dG=C((JCe,uG)=>{"use strict";var lG=require("joi"),{string:Goe,array:qoe}=lG.types(),$oe=ot(),Voe=wg();uG.exports=Koe;function Koe(e){let t=lG.object({operation:Goe.valid("configure_cluster").required(),connections:qoe.items(Voe.validation_schema).required()});return $oe.validateBySchema(e,t)}a(Koe,"configureClusterValidator")});var AN=C((ZCe,pG)=>{"use strict";var fG=(k(),P(q)),Hg=ee(),Yoe=ie(),Woe=le(),zoe=Bg(),Qoe=Ug(),joe=yo(),Joe=dG(),{handleHDBError:_G,hdb_errors:Xoe}=he(),{HTTP_STATUS_CODES:hG}=Xoe,Zoe="Configure cluster complete.",eae="Failed to configure the cluster. Check the logs for more details.",tae="Configure cluster was partially successful. Errors occurred when attempting to configure the following nodes. Check the logs for more details.";pG.exports=rae;async function rae(e){Hg.trace("configure cluster called with:",e);let t=Joe(e);if(t)throw _G(t,t.message,hG.BAD_REQUEST,void 0,void 0,!0);let r=await joe.getAllNodeRecords(),n=[];if(Woe.get(fG.CONFIG_PARAMS.CLUSTERING_ENABLED)){for(let f=0,d=r.length;f<d;f++){let _=await mG(zoe,{operation:fG.OPERATIONS_ENUM.REMOVE_NODE,node_name:r[f].name},r[f].name);n.push(_)}Hg.trace("All results from configure_cluster remove node:",n)}let s=[],i=e.connections.length;for(let f=0;f<i;f++){let d=e.connections[f],_=await mG(Qoe,d,d.node_name);s.push(_)}Hg.trace("All results from configure_cluster add node:",s);let o=[],c=[],l=!1,u=n.concat(s);for(let f=0,d=u.length;f<d;f++){let _=u[f];_.status==="rejected"&&(Hg.error(_.node_name,_?.error?.message,_?.error?.stack),o.includes(_.node_name)||o.push(_.node_name)),(_?.result?.message?.includes?.("Successfully")||_?.result?.includes?.("Successfully"))&&(l=!0),!(typeof _.result=="string"&&_.result.includes("Successfully removed")||_.status==="rejected")&&c.push({node_name:_?.node_name,response:_?.result})}if(Yoe.isEmptyOrZeroLength(o))return{message:Zoe,connections:c};if(l)return{message:tae,failed_nodes:o,connections:c};throw _G(new Error,eae,hG.INTERNAL_SERVER_ERROR,void 0,void 0,!0)}a(rae,"configureCluster");async function mG(e,t,r){try{return{node_name:r,result:await e(t)}}catch(n){return{node_name:r,error:n,status:"rejected"}}}a(mG,"functionWrapper")});var TG=C((tPe,SG)=>{"use strict";var dh=require("joi"),nae=ot(),{validateSchemaExists:EG,validateTableExists:sae,validateSchemaName:gG}=Ai(),iae=dh.object({operation:dh.string().valid("purge_stream"),schema:dh.string().custom(EG).custom(gG).optional(),database:dh.string().custom(EG).custom(gG).optional(),table:dh.string().custom(sae).required()});function oae(e){return nae.validateBySchema(e,iae)}a(oae,"purgeStreamValidator");SG.exports=oae});var RN=C((nPe,AG)=>{"use strict";var{handleHDBError:aae,hdb_errors:cae}=he(),{HTTP_STATUS_CODES:lae}=cae,uae=TG(),dae=pr(),fae=yo();AG.exports=_ae;async function _ae(e){e.schema=e.schema??e.database;let t=uae(e);if(t)throw aae(t,t.message,lae.BAD_REQUEST,void 0,void 0,!0);fae.checkClusteringEnabled();let{schema:r,table:n,options:s}=e;return await dae.purgeTableStream(r,n,s),`Successfully purged table '${r}.${n}'`}a(_ae,"purgeStream")});var ON=C((iPe,IG)=>{"use strict";var bN=yo(),hae=pr(),Fg=le(),Ju=(k(),P(q)),_l=Ct(),mae=ie(),yN=ee(),{RemotePayloadObject:pae}=nh(),{ErrorCode:RG}=require("nats"),{parentPort:yG}=require("worker_threads"),{onMessageByType:Eae}=it(),{getThisNodeName:gae}=(ps(),P(ba)),{requestClusterStatus:Sae}=(K_(),P(WH)),{getReplicationSharedStatus:Tae,getHDBNodeTable:Aae}=(tl(),P(hO)),{CONFIRMATION_STATUS_POSITION:Rae,RECEIVED_VERSION_POSITION:yae,RECEIVED_TIME_POSITION:bae,SENDING_TIME_POSITION:Oae,RECEIVING_STATUS_POSITION:Nae,RECEIVING_STATUS_RECEIVING:wae}=(BO(),P(xk)),bG=Fg.get(Ju.CONFIG_PARAMS.CLUSTERING_ENABLED),OG=Fg.get(Ju.CONFIG_PARAMS.CLUSTERING_NODENAME);IG.exports={clusterStatus:Iae,buildNodeStatus:wG};var NG;Eae("cluster-status",async e=>{NG(e)});async function Iae(){if(Fg.get(Ju.CONFIG_PARAMS.REPLICATION_URL)||Fg.get(Ju.CONFIG_PARAMS.REPLICATION_HOSTNAME)){let n;if(yG){yG.postMessage({type:"request-cluster-status"}),n=await new Promise(i=>{NG=i});for(let i of n.connections){let o=i.name;for(let c of i.database_sockets){let l=c.database,u;for(let d of Object.values(databases[l]||{}))if(u=d.auditStore,u)break;if(!u)continue;let f=Tae(u,l,o);c.lastCommitConfirmed=kg(f[Rae]),c.lastReceivedRemoteTime=kg(f[yae]),c.lastReceivedLocalTime=kg(f[bae]),c.sendingMessage=kg(f[Oae]),c.lastReceivedStatus=f[Nae]===wae?"Receiving":"Waiting"}}}else n=Sae();n.node_name=gae();let s=Aae().primaryStore.get(n.node_name);return s?.shard&&(n.shard=s.shard),s?.url&&(n.url=s.url),n.is_enabled=!0,n}let e={node_name:OG,is_enabled:bG,connections:[]};if(!bG)return e;let t=await bN.getAllNodeRecords();if(mae.isEmptyOrZeroLength(t))return e;let r=[];for(let n=0,s=t.length;n<s;n++)r.push(wG(t[n],e.connections));return await Promise.allSettled(r),e}a(Iae,"clusterStatus");function kg(e){return e?e===1?"Copying":new Date(e).toUTCString():void 0}a(kg,"asDate");async function wG(e,t){let r=e.name,n=new pae(Ju.OPERATIONS_ENUM.CLUSTER_STATUS,OG,void 0,await bN.getSystemInfo()),s,i,o=_l.CLUSTER_STATUS_STATUSES.OPEN;try{let l=Date.now();s=await hae.request(_l.REQUEST_SUBJECT(r),n),i=Date.now()-l,s.status===_l.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR&&(o=_l.CLUSTER_STATUS_STATUSES.CLOSED,yN.error(`Error getting node status from ${r} `,s))}catch(l){yN.warn(`Error getting node status from ${r}`,l),l.code===RG.NoResponders?o=_l.CLUSTER_STATUS_STATUSES.NO_RESPONDERS:l.code===RG.Timeout?o=_l.CLUSTER_STATUS_STATUSES.TIMEOUT:o=_l.CLUSTER_STATUS_STATUSES.CLOSED}let c=new Cae(r,o,s?.message?.ports?.clustering,s?.message?.ports?.operations_api,i,s?.message?.uptime,e.subscriptions,s?.message?.system_info);try{let l={name:r,system_info:s?.message?.system_info};e.system_info?.hdb_version!==Ju.PRE_4_0_0_VERSION&&await bN.upsertNodeRecord(l)}catch(l){yN.error("Cluster status encountered an error updating system info for node:",r,l)}t.push(c)}a(wG,"buildNodeStatus");function Cae(e,t,r,n,s,i,o,c){this.node_name=e,this.status=t,this.ports={clustering:r,operations_api:n},this.latency_ms=s,this.uptime=i,this.subscriptions=o,this.system_info=c}a(Cae,"NodeStatusObject")});var wN=C((aPe,CG)=>{"use strict";var{handleHDBError:Pae,hdb_errors:Dae}=he(),{HTTP_STATUS_CODES:Lae}=Dae,Mae=pr(),vae=yo(),NN=ie(),Gg=require("joi"),Uae=ot(),xae=2e3,Bae=Gg.object({timeout:Gg.number().min(1),connected_nodes:Gg.boolean(),routes:Gg.boolean()});CG.exports=Hae;async function Hae(e){vae.checkClusteringEnabled();let t=Uae.validateBySchema(e,Bae);if(t)throw Pae(t,t.message,Lae.BAD_REQUEST,void 0,void 0,!0);let{timeout:r,connected_nodes:n,routes:s}=e,i=n===void 0||NN.autoCastBoolean(n),o=s===void 0||NN.autoCastBoolean(s),c={nodes:[]},l=await Mae.getServerList(r??xae),u={};if(i)for(let f=0,d=l.length;f<d;f++){let _=l[f].statsz;_&&(u[l[f].server.name]=_.routes)}for(let f=0,d=l.length;f<d;f++){if(l[f].statsz)continue;let _=l[f].server,h=l[f].data;if(_.name.endsWith("-hub")){let m={name:_.name.slice(0,-4),response_time:l[f].response_time};i&&(m.connected_nodes=[],u[_.name]&&u[_.name].forEach(S=>{m.connected_nodes.includes(S.name.slice(0,-4))||m.connected_nodes.push(S.name.slice(0,-4))})),o&&(m.routes=h.cluster?.urls?h.cluster?.urls.map(S=>({host:S.split(":")[0],port:NN.autoCast(S.split(":")[1])})):[]),c.nodes.push(m)}}return c}a(Hae,"clusterNetwork")});var MG=C((lPe,LG)=>{"use strict";var IN=require("joi"),PG=ot(),{route_constraints:DG}=ly();LG.exports={setRoutesValidator:kae,deleteRoutesValidator:Fae};function kae(e){let t=IN.object({server:IN.valid("hub","leaf"),routes:DG.required()});return PG.validateBySchema(e,t)}a(kae,"setRoutesValidator");function Fae(e){let t=IN.object({routes:DG.required()});return PG.validateBySchema(e,t)}a(Fae,"deleteRoutesValidator")});var qg=C((dPe,FG)=>{"use strict";var Oo=Dt(),CN=ie(),Ts=(k(),P(q)),Xu=le(),vG=MG(),{handleHDBError:UG,hdb_errors:Gae}=he(),{HTTP_STATUS_CODES:xG}=Gae,BG="cluster routes successfully set",HG="cluster routes successfully deleted";FG.exports={setRoutes:$ae,getRoutes:Vae,deleteRoutes:Kae};function qae(e){let t=Oo.getClusteringRoutes(),r=e.server==="hub"?t.hub_routes:t.leaf_routes,n=e.server==="hub"?t.leaf_routes:t.hub_routes,s=[],i=[];for(let o=0,c=e.routes.length;o<c;o++){let l=e.routes[o];l.port=CN.autoCast(l.port);let u=r.some(d=>d.host===l.host&&d.port===l.port),f=n.some(d=>d.host===l.host&&d.port===l.port);u||f?s.push(l):(r.push(l),i.push(l))}return e.server==="hub"?Oo.updateConfigValue(Ts.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r):Oo.updateConfigValue(Ts.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,r),{message:BG,set:i,skipped:s}}a(qae,"setRoutesNats");function $ae(e){let t=vG.setRoutesValidator(e);if(t)throw UG(t,t.message,xG.BAD_REQUEST,void 0,void 0,!0);if(Xu.get(Ts.CONFIG_PARAMS.CLUSTERING_ENABLED))return qae(e);let r=[],n=[],s=Xu.get(Ts.CONFIG_PARAMS.REPLICATION_ROUTES)??[];return e.routes.forEach(i=>{kG(s,i)?n.push(i):(s.push(i),r.push(i))}),Oo.updateConfigValue(Ts.CONFIG_PARAMS.REPLICATION_ROUTES,s),{message:BG,set:r,skipped:n}}a($ae,"setRoutes");function kG(e,t){return typeof t=="string"?e.includes(t):typeof t=="object"&&t!==null?e.some(r=>(r.host===t.host||r.hostname===t.hostname)&&r.port===t.port):!1}a(kG,"existsInArray");function Vae(){if(Xu.get(Ts.CONFIG_PARAMS.CLUSTERING_ENABLED)){let e=Oo.getClusteringRoutes();return{hub:e.hub_routes,leaf:e.leaf_routes}}else return Xu.get(Ts.CONFIG_PARAMS.REPLICATION_ROUTES)??[]}a(Vae,"getRoutes");function Kae(e){let t=vG.deleteRoutesValidator(e);if(t)throw UG(t,t.message,xG.BAD_REQUEST,void 0,void 0,!0);if(Xu.get(Ts.CONFIG_PARAMS.CLUSTERING_ENABLED))return Yae(e);let r=[],n=[],s=Xu.get(Ts.CONFIG_PARAMS.REPLICATION_ROUTES)??[],i=[];return s.forEach(o=>{kG(e.routes,o)?r.push(o):(i.push(o),n.push(o))}),Oo.updateConfigValue(Ts.CONFIG_PARAMS.REPLICATION_ROUTES,i),{message:HG,deleted:r,skipped:n}}a(Kae,"deleteRoutes");function Yae(e){let t=Oo.getClusteringRoutes(),r=t.hub_routes,n=t.leaf_routes,s=[],i=[],o=!1,c=!1;for(let l=0,u=e.routes.length;l<u;l++){let f=e.routes[l],d=!1;for(let _=0,h=r.length;_<h;_++){let m=r[_];if(f.host===m.host&&f.port===m.port){r.splice(_,1),d=!0,o=!0,s.push(f);break}}if(!d){let _=!0;for(let h=0,m=n.length;h<m;h++){let S=n[h];if(f.host===S.host&&f.port===S.port){n.splice(h,1),c=!0,_=!1,s.push(f);break}}_&&i.push(f)}}return o&&(r=CN.isEmptyOrZeroLength(r)?null:r,Oo.updateConfigValue(Ts.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r)),c&&(n=CN.isEmptyOrZeroLength(n)?null:n,Oo.updateConfigValue(Ts.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,n)),{message:HG,deleted:s,skipped:i}}a(Yae,"deleteRoutesNats")});var qG=C((_Pe,GG)=>{"use strict";var fh=require("alasql"),hl=require("recursive-iterator"),ti=ee(),Wae=ie(),_h=(k(),P(q)),PN=class{static{a(this,"sql_statement_bucket")}constructor(t){this.ast=t,this.affected_attributes=new Map,this.table_lookup=new Map,this.schema_lookup=new Map,this.table_to_schema_lookup=new Map,Qae(this.ast,this.affected_attributes,this.table_lookup,this.schema_lookup,this.table_to_schema_lookup)}getAttributesBySchemaTableName(t,r){if(!t||!r||!this.affected_attributes)return[];if(this.affected_attributes.has(t))return!this.affected_attributes.get(t).has(r)&&(r=this.table_lookup.get(r),!r)?[]:this.affected_attributes.get(t).get(r)}getAllTables(){let t=[];if(!this.affected_attributes)return t;for(let r of this.affected_attributes.keys())t.push(Array.from(this.affected_attributes.get(r).keys()));return t}getTablesBySchemaName(t){return!t||!this.affected_attributes?[]:Array.from(this.affected_attributes.get(t).keys())}getSchemas(){return this.affected_attributes?Array.from(this.affected_attributes.keys()):[]}getAst(){return this.ast}updateAttributeWildcardsForRolePerms(t){let r=this.ast.columns.filter(s=>_h.SEARCH_WILDCARDS.includes(s.columnid));if(r.length===0)return this.ast;let n=this.ast.from[0].databaseid;return this.ast.columns=this.ast.columns.filter(s=>!_h.SEARCH_WILDCARDS.includes(s.columnid)),r.forEach(s=>{let i=this.table_to_schema_lookup.has(s.tableid)?this.table_to_schema_lookup.get(s.tableid):n,o=this.table_lookup.has(s.tableid)?this.table_lookup.get(s.tableid):this.ast.from[0].tableid;if(t[i]&&t[i].tables[o]&&t[i].tables[o][_h.PERMS_CRUD_ENUM.READ]){let c;t[i].tables[o].attribute_permissions.length>0?c=zae(t[i].tables[o].attribute_permissions):c=global.hdb_schema[i][o].attributes.map(u=>({attribute_name:u.attribute}));let l=this.affected_attributes.get(i).get(o).filter(u=>!_h.SEARCH_WILDCARDS.includes(u));c.forEach(({attribute_name:u})=>{let f=new fh.yy.Column({columnid:u});s.tableid&&(f.tableid=s.tableid),this.ast.columns.push(f),l.includes(u)||l.push(u)}),this.affected_attributes.get(i).set(o,l)}}),this.ast}};function zae(e){return e.filter(t=>t[_h.PERMS_CRUD_ENUM.READ])}a(zae,"filterReadRestrictedAttrs");function Qae(e,t,r,n,s){jae(e,t,r,n,s)}a(Qae,"interpretAST");function hh(e,t,r,n,s){if(!(!e||!e.databaseid)&&(t.has(e.databaseid)||t.set(e.databaseid,new Map),t.get(e.databaseid).has(e.tableid)||t.get(e.databaseid).set(e.tableid,[]),e.as&&(r.has(e.as)||r.set(e.as,e.tableid),n&&!n.has(e.as)&&n.set(e.as,e.databaseid)),s)){let i=e.databaseid,o=e.tableid;e.as&&(o=e.as),s.set(o,i)}}a(hh,"addSchemaTableToMap");function jae(e,t,r,n,s){if(!e){ti.info("getRecordAttributesAST: invalid SQL syntax tree");return}e instanceof fh.yy.Insert?ece(e,t,r):e instanceof fh.yy.Select?Jae(e,t,r,n,s):e instanceof fh.yy.Update?Xae(e,t,r):e instanceof fh.yy.Delete?Zae(e,t,r):ti.error("AST in getRecordAttributesAST() is not a valid SQL type.")}a(jae,"getRecordAttributesAST");function Jae(e,t,r,n,s){if(!e){ti.info("getSelectAttributes: invalid SQL syntax tree");return}if(!e.from||e.from[0]===void 0)return;let i=e.from[0].databaseid;if(Wae.isEmptyOrZeroLength(i)){ti.error("No schema specified");return}e.from.forEach(c=>{hh(c,t,r,n,s)}),e.joins&&e.joins.forEach(c=>{c.as&&(c.table.as=c.as),hh(c.table,t,r,n,s)});let o=new hl(e.columns);for(let{node:c}of o)if(c&&c.columnid){let l=c.tableid,u=n.has(l)?n.get(l):i;if(l||(l=e.from[0].tableid),!t.get(u).has(l))if(r.has(l))l=r.get(l);else{ti.info(`table specified as ${l} not found.`);return}t.get(u).get(l).indexOf(c.columnid)<0&&t.get(u).get(l).push(c.columnid)}if(e.where){let c=new hl(e.where),l=e.from[0].tableid;for(let{node:u}of c)if(u&&u.columnid){let f=u.tableid?u.tableid:l;if(!t.get(i).has(f))if(r.has(f))f=r.get(f);else{ti.info(`table specified as ${f} not found.`);continue}t.get(i).get(f).indexOf(u.columnid)<0&&t.get(i).get(f).push(u.columnid)}}if(e.joins&&e.joins.forEach(c=>{let l=new hl(c.on);for(let{node:u}of l)if(u&&u.columnid){let f=u.tableid,d=s.get(f);if(!t.get(d).has(f))if(r.has(f))f=r.get(f);else{ti.info(`table specified as ${f} not found.`);continue}t.get(d).get(f).indexOf(u.columnid)<0&&t.get(d).get(f).push(u.columnid)}}),e.order){let c=new hl(e.order);for(let{node:l}of c)if(l&&l.columnid){let u=l.tableid,f=n.has(u)?n.get(u):i;if(u||(u=e.from[0].tableid),!t.get(f).has(u))if(r.has(u))u=r.get(u);else{ti.info(`table specified as ${u} not found.`);return}t.get(f).get(u).indexOf(l.columnid)<0&&t.get(f).get(u).push(l.columnid)}}}a(Jae,"getSelectAttributes");function Xae(e,t,r){if(!e){ti.info("getUpdateAttributes: invalid SQL syntax tree");return}let n=new hl(e.columns),s=e.table.databaseid;hh(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&DN(e.table.tableid,s,i.columnid,t,r)}a(Xae,"getUpdateAttributes");function Zae(e,t,r){if(!e){ti.info("getDeleteAttributes: invalid SQL syntax tree");return}let n=new hl(e.where),s=e.table.databaseid;hh(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&DN(e.table.tableid,s,i.columnid,t,r)}a(Zae,"getDeleteAttributes");function ece(e,t,r){if(!e){ti.info("getInsertAttributes: invalid SQL syntax tree");return}let n=new hl(e.columns),s=e.into.databaseid;hh(e.into,t,r);for(let{node:i}of n)i&&i.columnid&&DN(e.into.tableid,s,i.columnid,t,r)}a(ece,"getInsertAttributes");function DN(e,t,r,n,s){if(!n.get(t))return;let i=e;n.get(t).has(i)||(i=s.get(i)),n.get(t).get(i).push(r)}a(DN,"pushAttribute");GG.exports=PN});var VG=C((mPe,$G)=>{"use strict";var $g=(k(),P(q)),Vg=class{static{a(this,"BaseLicense")}constructor(t=0,r=$g.RAM_ALLOCATION_ENUM.DEFAULT,n=$g.LICENSE_VALUES.VERSION_DEFAULT,s){this.exp_date=t,this.ram_allocation=r,this.version=n,this.fingerprint=s}},LN=class extends Vg{static{a(this,"ExtendedLicense")}constructor(t=0,r=$g.RAM_ALLOCATION_ENUM.DEFAULT,n=$g.LICENSE_VALUES.VERSION_DEFAULT,s,i=!1){super(t,r,n,s),this.enterprise=i}};$G.exports={BaseLicense:Vg,ExtendedLicense:LN}});var td=C((EPe,jG)=>{"use strict";var ed=require("fs-extra"),Kg=(Up(),P(vp)),YG=require("crypto"),tce=require("moment"),rce=require("uuid").v4,en=ee(),vN=require("path"),nce=ie(),ml=(k(),P(q)),{totalmem:KG}=require("os"),sce=VG().ExtendedLicense,Zu="invalid license key format",ice="061183",oce="mofi25",ace="aes-256-cbc",cce=16,lce=32,WG=le(),{resolvePath:zG}=Dt();WG.initSync();var MN;jG.exports={validateLicense:QG,generateFingerPrint:dce,licenseSearch:BN,getLicense:hce,checkMemoryLimit:mce};function UN(){return vN.join(WG.getHdbBasePath(),ml.LICENSE_KEY_DIR_NAME,ml.LICENSE_FILE_NAME)}a(UN,"getLicenseDirPath");function uce(){let e=UN();return zG(vN.join(e,ml.LICENSE_FILE_NAME))}a(uce,"getLicenseFilePath");function xN(){let e=UN();return zG(vN.join(e,ml.REG_KEY_FILE_NAME))}a(xN,"getFingerPrintFilePath");async function dce(){let e=xN();try{return await ed.readFile(e,"utf8")}catch(t){if(t.code==="ENOENT")return await fce();throw en.error(`Error writing fingerprint file to ${e}`),en.error(t),new Error("There was an error generating the fingerprint")}}a(dce,"generateFingerPrint");async function fce(){let e=rce(),t=Kg.hash(e,Kg.HASH_FUNCTION.MD5),r=xN();try{await ed.mkdirp(UN()),await ed.writeFile(r,t)}catch(n){if(n.code==="EEXIST")return t;throw en.error(`Error writing fingerprint file to ${r}`),en.error(n),new Error("There was an error generating the fingerprint")}return t}a(fce,"writeFingerprint");function QG(e,t){let r={valid_license:!1,valid_date:!1,valid_machine:!1,exp_date:null,ram_allocation:ml.RAM_ALLOCATION_ENUM.DEFAULT,version:ml.LICENSE_VALUES.VERSION_DEFAULT};if(!e)return en.error("empty license key passed to validate."),r;let n=xN(),s=!1;try{s=ed.statSync(n)}catch(i){en.error(i)}if(s){let i;try{i=ed.readFileSync(n,"utf8")}catch{en.error("error validating this machine in the license"),r.valid_machine=!1;return}let o=e.split(oce),c=o[1];c=Buffer.concat([Buffer.from(c)],cce);let l=Buffer.concat([Buffer.from(i)],lce),u=YG.createDecipheriv(ace,l,c);r.valid_date=!0,r.valid_license=!0,r.valid_machine=!0;let f=null;try{f=u.update(o[0],"hex","utf8"),f.trim(),f+=u.final("utf8")}catch{let h=_ce(o[0],i);if(h)f=h;else throw r.valid_license=!1,r.valid_machine=!1,console.error(Zu),en.error(Zu),new Error(Zu)}let d;if(isNaN(f))try{d=JSON.parse(f),r.version=d.version,r.exp_date=d.exp_date,isNaN(r.exp_date)&&(r.exp_date=new Date(r.exp_date).getTime()),d.ram_allocation&&(r.ram_allocation=d.ram_allocation)}catch{throw console.error(Zu),en.error(Zu),new Error(Zu)}else r.exp_date=f;r.exp_date<tce().valueOf()&&(r.valid_date=!1),Kg.validate(o[1],`${ice}${i}${t}`,Kg.HASH_FUNCTION.MD5)||(r.valid_license=!1)}else r.valid_license=!1,r.valid_machine=!1;return r.valid_license&&r.valid_machine&&r.valid_date||en.error("Invalid licence"),r}a(QG,"validateLicense");function _ce(e,t){try{let r=YG.createDecipher("aes192",t),n=r.update(e,"hex","utf8");return n.trim(),n+=r.final("utf8"),n}catch{en.warn("Check old license failed")}}a(_ce,"checkOldLicense");function BN(){let e=new sce,t=[];try{t=ed.readFileSync(uce(),"utf-8").split(`\r
 `)}catch(r){r.code==="ENOENT"?en.debug("no license file found"):en.error(`could not search for licenses due to: '${r.message}`)}for(let r=0;r<t.length;++r){let n=t[r];try{if(nce.isEmptyOrZeroLength(n))continue;let s=JSON.parse(n),i=QG(s.license_key,s.company);i.valid_machine===!0&&i.valid_date===!0&&i.valid_machine===!0&&(e.exp_date=i.exp_date>e.exp_date?i.exp_date:e.exp_date,e.ram_allocation=i.ram_allocation,e.enterprise=!0)}catch(s){en.error("There was an error parsing the license string."),en.error(s),e.ram_allocation=ml.RAM_ALLOCATION_ENUM.DEFAULT,e.enterprise=!1}}return MN=e,e}a(BN,"licenseSearch");async function hce(){return MN||await BN(),MN}a(hce,"getLicense");function mce(){let e=BN().ram_allocation,t=process.constrainedMemory?.()||KG();if(t=Math.round(Math.min(t,KG())/2**20),t>e)return`This server has more memory (${t}MB) than HarperDB is licensed for (${e}MB), this should only be used for educational and development purposes.`}a(mce,"checkMemoryLimit")});var FN=C((SPe,eq)=>{var Yg=td(),JG=require("chalk"),Zn=ee(),XG=require("prompt"),{promisify:pce}=require("util"),HN=(k(),P(q)),Ece=require("fs-extra"),gce=require("path"),Sce=ie(),{packageJson:Tce}=Et(),ZG=le();ZG.initSync();var Ace=require("moment"),Rce=pce(XG.get),yce=gce.join(ZG.getHdbBasePath(),HN.LICENSE_KEY_DIR_NAME,HN.LICENSE_FILE_NAME,HN.LICENSE_FILE_NAME);eq.exports={getFingerprint:Oce,setLicense:bce,parseLicense:kN,register:Nce,getRegistrationInfo:Ice};async function bce(e){if(e&&e.key&&e.company){try{Zn.info(`parsing license key: ${e.key} and `);let t=e.company.toString();await kN(e.key.trim(),t.trim())}catch(t){let r="There was an error parsing the license key.";throw Zn.error(r),Zn.error(t),new Error(r)}return"Wrote license key file.  Registration successful."}throw new Error("Invalid key or company specified for license file.")}a(bce,"setLicense");async function Oce(){let e={};try{e=await Yg.generateFingerPrint()}catch(t){let r="Error generating fingerprint.";throw Zn.error(r),Zn.error(t),new Error(r)}return e}a(Oce,"getFingerprint");async function kN(e,t){if(!e||!t)throw new Error("Invalid entries for License Key and Customer Company");Zn.info("Validating license input...");let r=Yg.validateLicense(e,t);if(Zn.info("checking for valid license..."),!r.valid_license)throw new Error("Invalid license found.");if(Zn.info("checking valid license date..."),!r.valid_date)throw new Error("This License has expired.");if(Zn.info(`checking for valid machine license ${r.valid_machine}`),!r.valid_machine)throw new Error("This license is in use on another machine.");try{Zn.info("writing license to disk"),await Ece.writeFile(yce,JSON.stringify({license_key:e,company:t}))}catch(n){throw Zn.error("Failed to write License"),n}return"Registration successful."}a(kN,"parseLicense");async function Nce(){let e=await wce();return kN(e.HDB_LICENSE,e.CUSTOMER_COMPANY)}a(Nce,"register");async function wce(){let e=await Yg.generateFingerPrint(),t={properties:{CUSTOMER_COMPANY:{description:JG.magenta("[COMPANY] Please enter your company name"),required:!0},HDB_LICENSE:{description:JG.magenta(`[HDB_LICENSE] Your fingerprint is ${e} Please enter your license key`),required:!0}}};try{XG.start()}catch(n){Zn.error(n)}let r;try{r=await Rce(t)}catch(n){throw console.error("There was a problem prompting for registration input.  Exiting."),n}return r}a(wce,"promptForRegistration");async function Ice(){let e={registered:!1,version:null,ram_allocation:null,license_expiration_date:null},t;try{t=await Yg.getLicense()}catch(r){throw Zn.error(`There was an error when searching licenses due to: ${r.message}`),r}if(Sce.isEmptyOrZeroLength(t))throw new Error("There were no licenses found.");if(e.registered=t.enterprise,e.version=Tce.version,e.ram_allocation=t.ram_allocation,isNaN(t.exp_date))e.license_expiration_date=t.enterprise?t.exp_date:null;else{let r=Ace.utc(t.exp_date).format("YYYY-MM-DD");e.license_expiration_date=t.enterprise?r:null}return e}a(Ice,"getRegistrationInfo")});var rq=C((APe,tq)=>{"use strict";var Cce=Ct(),GN=class{static{a(this,"HubConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d,_,h,m){this.port=t,o===null&&(o=void 0),this.server_name=r+Cce.SERVER_SUFFIX.HUB,this.pid_file=n,this.max_payload=67108864,this.reconnect_error_reports=100,this.jetstream={enabled:!1},this.tls={cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l},this.leafnodes={port:u,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c}},this.cluster={name:f,port:d,routes:_,tls:{cert_file:s,key_file:i,ca_file:o,insecure:c,verify:l}},this.accounts={SYS:{users:h},HDB:{users:m}},this.system_account="SYS"}};tq.exports=GN});var iq=C((yPe,sq)=>{"use strict";var nq=Ct(),qN=class{static{a(this,"LeafConfigObject")}constructor(t,r,n,s,i,o,c,l,u,f,d){this.port=t,d===null&&(d=void 0),this.server_name=r+nq.SERVER_SUFFIX.LEAF,this.pid_file=n,this.max_payload=67108864,this.jetstream={enabled:!0,store_dir:s,domain:r+nq.SERVER_SUFFIX.LEAF},this.tls={cert_file:u,key_file:f,ca_file:d,insecure:!0},this.leafnodes={remotes:[{tls:{ca_file:d,insecure:!0},urls:i,account:"SYS"},{tls:{ca_file:d,insecure:!0},urls:o,account:"HDB"}]},this.accounts={SYS:{users:c},HDB:{users:l,jetstream:"enabled"}},this.system_account="SYS"}};sq.exports=qN});var aq=C((OPe,oq)=>{"use strict";var $N=class{static{a(this,"HdbUserObject")}constructor(t,r){this.user=t,this.password=r}};oq.exports=$N});var lq=C((wPe,cq)=>{"use strict";var Pce=Ct(),VN=class{static{a(this,"SysUserObject")}constructor(t,r){this.user=t+Pce.SERVER_SUFFIX.ADMIN,this.password=r}};cq.exports=VN});var jg=C((CPe,fq)=>{"use strict";var pl=require("path"),El=require("fs-extra"),Dce=rq(),Lce=iq(),Mce=aq(),vce=lq(),KN=Kn(),nd=ie(),yn=Dt(),zg=(k(),P(q)),mh=Ct(),{CONFIG_PARAMS:jt}=zg,sd=ee(),ph=le(),uq=uo(),YN=pr(),Uce=ei(),rd="clustering",xce=1e4,dq=50;fq.exports={generateNatsConfig:Hce,removeNatsConfig:kce,getHubConfigPath:Bce};function Bce(){let e=ph.get(jt.ROOTPATH);return pl.join(e,rd,mh.NATS_CONFIG_FILES.HUB_SERVER)}a(Bce,"getHubConfigPath");async function Hce(e=!1,t=void 0){let r=ph.get(jt.ROOTPATH);El.ensureDirSync(pl.join(r,"clustering","leaf")),ph.initSync();let n=yn.getConfigFromFile(jt.CLUSTERING_TLS_CERT_AUTH),s=yn.getConfigFromFile(jt.CLUSTERING_TLS_PRIVATEKEY),i=yn.getConfigFromFile(jt.CLUSTERING_TLS_CERTIFICATE);!await El.exists(i)&&!await El.exists(!n)&&await Uce.createNatsCerts();let o=pl.join(r,rd,mh.PID_FILES.HUB),c=pl.join(r,rd,mh.PID_FILES.LEAF),l=yn.getConfigFromFile(jt.CLUSTERING_LEAFSERVER_STREAMS_PATH),u=pl.join(r,rd,mh.NATS_CONFIG_FILES.HUB_SERVER),f=pl.join(r,rd,mh.NATS_CONFIG_FILES.LEAF_SERVER),d=yn.getConfigFromFile(jt.CLUSTERING_TLS_INSECURE),_=yn.getConfigFromFile(jt.CLUSTERING_TLS_VERIFY),h=yn.getConfigFromFile(jt.CLUSTERING_NODENAME),m=yn.getConfigFromFile(jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT);await YN.checkNATSServerInstalled()||Qg("nats-server dependency is either missing or the wrong version. Run 'npm install' to fix");let S=await KN.listUsers(),g=yn.getConfigFromFile(jt.CLUSTERING_USER),R=await KN.getClusterUser();(nd.isEmpty(R)||R.active!==!0)&&Qg(`Invalid cluster user '${g}'. A valid user with the role 'cluster_user' must be defined under clustering.user in harperdb-config.yaml`),e||(await Wg(jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),await Wg(jt.CLUSTERING_HUBSERVER_LEAFNODES_NETWORK_PORT),await Wg(jt.CLUSTERING_HUBSERVER_NETWORK_PORT),await Wg(jt.CLUSTERING_LEAFSERVER_NETWORK_PORT));let E=[],T=[];for(let[se,z]of S.entries())z.role?.role===zg.ROLE_TYPES_ENUM.CLUSTER_USER&&z.active&&(E.push(new vce(z.username,uq.decrypt(z.hash))),T.push(new Mce(z.username,uq.decrypt(z.hash))));let N=[],{hub_routes:M}=yn.getClusteringRoutes();if(!nd.isEmptyOrZeroLength(M))for(let se of M)N.push(`tls://${R.sys_name_encoded}:${R.uri_encoded_d_hash}@${se.host}:${se.port}`);let H=new Dce(yn.getConfigFromFile(jt.CLUSTERING_HUBSERVER_NETWORK_PORT),h,o,i,s,n,d,_,m,yn.getConfigFromFile(jt.CLUSTERING_HUBSERVER_CLUSTER_NAME),yn.getConfigFromFile(jt.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_PORT),N,E,T);n==null&&(delete H.tls.ca_file,delete H.leafnodes.tls.ca_file),t=nd.isEmpty(t)?void 0:t.toLowerCase(),(t===void 0||t===zg.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())&&(await El.writeJson(u,H),sd.trace(`Hub server config written to ${u}`));let X=`tls://${R.sys_name_encoded}:${R.uri_encoded_d_hash}@0.0.0.0:${m}`,W=`tls://${R.uri_encoded_name}:${R.uri_encoded_d_hash}@0.0.0.0:${m}`,$=new Lce(yn.getConfigFromFile(jt.CLUSTERING_LEAFSERVER_NETWORK_PORT),h,c,l,[X],[W],E,T,i,s,n,d);n==null&&delete $.tls.ca_file,(t===void 0||t===zg.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())&&(await El.writeJson(f,$),sd.trace(`Leaf server config written to ${f}`))}a(Hce,"generateNatsConfig");async function Wg(e){let t=ph.get(e);return nd.isEmpty(t)&&Qg(`port undefined for '${e}'`),await nd.isPortTaken(t)&&Qg(`'${e}' port '${t}' is is in use by another process, check to see if HarperDB is already running or another process is using this port.`),!0}a(Wg,"isPortAvailable");function Qg(e){let t=`Error generating clustering config: ${e}`;sd.error(t),console.error(t),process.exit(1)}a(Qg,"generateNatsConfigError");async function kce(e){let{port:t,config_file:r}=YN.getServerConfig(e),{username:n,decrypt_hash:s}=await KN.getClusterUser(),i=0,o=2e3;for(;i<dq;){try{let f=await YN.createConnection(t,n,s,!1);if(f.protocol.connected===!0){f.close();break}}catch(f){sd.trace(`removeNatsConfig waiting for ${e}. Caught and swallowed error ${f}`)}if(i++,i>=dq)throw new Error(`Operations API timed out attempting to connect to ${e}. This is commonly caused by incorrect clustering config. Check hdb.log for further details.`);let u=o*(i*2);u>3e4&&sd.notify("Operations API waiting for Nats server connection. This could be caused by large Nats streams or incorrect clustering config."),await nd.async_set_timeout(u)}let c="0".repeat(xce),l=pl.join(ph.get(jt.ROOTPATH),rd,r);await El.writeFile(l,c),await El.remove(l),sd.notify(e,"started.")}a(kce,"removeNatsConfig")});var gq=C((DPe,Eq)=>{"use strict";var es=le(),Fce=td(),$e=(k(),P(q)),Eh=Ct(),No=require("path"),{PACKAGE_ROOT:Xg}=Et(),_q=le(),Jg=ie(),id="/dev/null",Gce=No.join(Xg,"launchServiceScripts"),hq=No.join(Xg,"utility/scripts"),qce=No.join(hq,$e.HDB_RESTART_SCRIPT),mq=No.resolve(Xg,"dependencies",`${process.platform}-${process.arch}`,Eh.NATS_BINARY_NAME);function pq(){let t=Fce.licenseSearch().ram_allocation||$e.RAM_ALLOCATION_ENUM.DEFAULT,r=$e.MEM_SETTING_KEY+t,n={[$e.PROCESS_NAME_ENV_PROP]:$e.PROCESS_DESCRIPTORS.HDB,IS_SCRIPTED_SERVICE:!0};return Jg.noBootFile()&&(n[$e.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=Jg.getEnvCliRootPath()),{name:$e.PROCESS_DESCRIPTORS.HDB,script:$e.LAUNCH_SERVICE_SCRIPTS.MAIN,exec_mode:"fork",env:n,node_args:r,cwd:Xg}}a(pq,"generateMainServerConfig");var $ce=9930;function Vce(){es.initSync(!0);let e=es.get($e.CONFIG_PARAMS.ROOTPATH),t=No.join(e,"clustering",Eh.NATS_CONFIG_FILES.HUB_SERVER),r=No.join(es.get($e.HDB_SETTINGS_NAMES.LOG_PATH_KEY),$e.LOG_NAMES.HDB),n=_q.get($e.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),s=Eh.LOG_LEVEL_FLAGS[es.get($e.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:$e.PROCESS_DESCRIPTORS.CLUSTERING_HUB+(n!==$ce?"-"+n:""),script:mq,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[$e.PROCESS_NAME_ENV_PROP]:$e.PROCESS_DESCRIPTORS.CLUSTERING_HUB},merge_logs:!0,out_file:r,error_file:r,instances:1};return es.get($e.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=id,i.error_file=id),i}a(Vce,"generateNatsHubServerConfig");var Kce=9940;function Yce(){es.initSync(!0);let e=es.get($e.CONFIG_PARAMS.ROOTPATH),t=No.join(e,"clustering",Eh.NATS_CONFIG_FILES.LEAF_SERVER),r=No.join(es.get($e.HDB_SETTINGS_NAMES.LOG_PATH_KEY),$e.LOG_NAMES.HDB),n=_q.get($e.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),s=Eh.LOG_LEVEL_FLAGS[es.get($e.CONFIG_PARAMS.CLUSTERING_LOGLEVEL)]??void 0,i={name:$e.PROCESS_DESCRIPTORS.CLUSTERING_LEAF+(n!==Kce?"-"+n:""),script:mq,args:s?`${s} -c ${t}`:`-c ${t}`,exec_mode:"fork",env:{[$e.PROCESS_NAME_ENV_PROP]:$e.PROCESS_DESCRIPTORS.CLUSTERING_LEAF},merge_logs:!0,out_file:r,error_file:r,instances:1};return es.get($e.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(i.out_file=id,i.error_file=id),i}a(Yce,"generateNatsLeafServerConfig");function Wce(){es.initSync();let e=No.join(es.get($e.CONFIG_PARAMS.LOGGING_ROOT),$e.LOG_NAMES.HDB),t={name:$e.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0,script:$e.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,exec_mode:"fork",env:{[$e.PROCESS_NAME_ENV_PROP]:$e.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0},merge_logs:!0,out_file:e,error_file:e,instances:1,cwd:Gce,autorestart:!1};return es.get($e.HDB_SETTINGS_NAMES.LOG_TO_FILE)||(t.out_file=id,t.error_file=id),t}a(Wce,"generateClusteringUpgradeV4ServiceConfig");function zce(){let e={[$e.PROCESS_NAME_ENV_PROP]:$e.PROCESS_DESCRIPTORS.RESTART_HDB};return Jg.noBootFile()&&(e[$e.CONFIG_PARAMS.ROOTPATH.toUpperCase()]=Jg.getEnvCliRootPath()),{...{name:$e.PROCESS_DESCRIPTORS.RESTART_HDB,exec_mode:"fork",env:e,instances:1,autorestart:!1,cwd:hq},script:qce}}a(zce,"generateRestart");function Qce(){return{apps:[pq()]}}a(Qce,"generateAllServiceConfigs");Eq.exports={generateAllServiceConfigs:Qce,generateMainServerConfig:pq,generateRestart:zce,generateNatsHubServerConfig:Vce,generateNatsLeafServerConfig:Yce,generateClusteringUpgradeV4ServiceConfig:Wce}});var Sh=C((vPe,Lq)=>{"use strict";var tt=(k(),P(q)),jce=ie(),Io=jg(),Zg=pr(),wo=Ct(),Ma=gq(),eS=le(),gl=ee(),Jce=yo(),{startWorker:Sq,onMessageFromWorkers:Xce}=it(),Zce=Qu(),MPe=require("util"),ele=require("child_process"),tle=require("fs"),{execFile:rle}=ele,Qe;Lq.exports={enterPM2Mode:nle,start:va,stop:WN,reload:Aq,restart:Rq,list:zN,describe:Oq,connect:Co,kill:cle,startAllServices:lle,startService:QN,getUniqueServicesList:Nq,restartAllServices:ule,isServiceRegistered:wq,reloadStopStart:Iq,restartHdb:bq,deleteProcess:ole,startClusteringProcesses:Pq,startClusteringThreads:Dq,isHdbRestartRunning:ale,isClusteringRunning:fle,stopClustering:dle,reloadClustering:_le,expectedRestartOfChildren:yq};var gh=!1;Xce(e=>{e.type==="restart"&&eS.initSync(!0)});function nle(){gh=!0}a(nle,"enterPM2Mode");function Co(){return Qe||(Qe=require("pm2")),new Promise((e,t)=>{Qe.connect((r,n)=>{r&&t(r),e(n)})})}a(Co,"connect");var tn,sle=10,Tq;function va(e,t=!1){if(gh)return ile(e);let r=rle(e.script,e.args.split(" "),e);r.name=e.name,r.config=e,r.on("exit",async i=>{let o=tn.indexOf(r);o>-1&&tn.splice(o,1),!Tq&&i!==0&&(e.restarts=(e.restarts||0)+1,e.restarts<sle&&(tle.existsSync(Io.getHubConfigPath())?va(e):(await Io.generateNatsConfig(!0),va(e),await new Promise(c=>setTimeout(c,3e3)),await Io.removeNatsConfig(tt.PROCESS_DESCRIPTORS.CLUSTERING_HUB),await Io.removeNatsConfig(tt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF))))});let n={serviceName:e.name.replace(/ /g,"-")};function s(i){let o=eS.get(tt.CONFIG_PARAMS.CLUSTERING_LOGLEVEL),c=/\[\d+][^\[]+\[(\w+)]/g,l,u=0,f;for(;l=c.exec(i);){if(l.index&&wo.LOG_LEVEL_HIERARCHY[o]>=wo.LOG_LEVEL_HIERARCHY[f||"info"]){let h=f===wo.LOG_LEVELS.ERR||f===wo.LOG_LEVELS.WRN?gl.OUTPUTS.STDERR:gl.OUTPUTS.STDOUT;gl.logCustomLevel(f||"info",h,n,i.slice(u,l.index).trim())}let[d,_]=l;u=l.index+d.length,f=wo.LOG_LEVELS[_]}if(wo.LOG_LEVEL_HIERARCHY[o]>=wo.LOG_LEVEL_HIERARCHY[f||"info"]){let d=f===wo.LOG_LEVELS.ERR||f===wo.LOG_LEVELS.WRN?gl.OUTPUTS.STDERR:gl.OUTPUTS.STDOUT;gl.logCustomLevel(f||"info",d,n,i.slice(u).trim())}}if(a(s,"extractMessages"),r.stdout.on("data",s),r.stderr.on("data",s),r.unref(),!tn&&(tn=[],!t)){let i=a(()=>{Tq=!0,tn&&(tn.map(o=>o.kill()),process.exit(0))},"kill_children");process.on("exit",i),process.on("SIGINT",i),process.on("SIGQUIT",i),process.on("SIGTERM",i)}tn.push(r)}a(va,"start");function ile(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.start(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(ile,"startWithPM2");function WN(e){if(!gh){for(let t of tn||[])t.name===e&&(tn.splice(tn.indexOf(t),1),t.kill());return}return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.stop(e,async(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.delete(e,(i,o)=>{i&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(o)})})})}a(WN,"stop");function Aq(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.reload(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(Aq,"reload");function Rq(e){if(!gh){yq();for(let t of tn||[])t.name===e&&t.kill()}return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.restart(e,(n,s)=>{Qe.disconnect(),t(s)})})}a(Rq,"restart");function yq(){for(let e of tn||[])e.config&&(e.config.restarts=0)}a(yq,"expectedRestartOfChildren");function ole(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.delete(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(ole,"deleteProcess");async function bq(){await va(Ma.generateRestart())}a(bq,"restartHdb");async function ale(){let e=await zN();for(let t in e)if(e[t].name===tt.PROCESS_DESCRIPTORS.RESTART_HDB)return!0;return!1}a(ale,"isHdbRestartRunning");function zN(){return new Promise(async(e,t)=>{try{await Co()}catch(r){t(r)}Qe.list((r,n)=>{r&&(Qe.disconnect(),t(r)),Qe.disconnect(),e(n)})})}a(zN,"list");function Oq(e){return new Promise(async(t,r)=>{try{await Co()}catch(n){r(n)}Qe.describe(e,(n,s)=>{n&&(Qe.disconnect(),r(n)),Qe.disconnect(),t(s)})})}a(Oq,"describe");function cle(){if(!gh){for(let e of tn||[])e.kill();tn=[];return}return new Promise(async(e,t)=>{try{await Co()}catch(r){t(r)}Qe.killDaemon((r,n)=>{r&&(Qe.disconnect(),t(r)),Qe.disconnect(),e(n)})})}a(cle,"kill");async function lle(){try{await Pq(),await Dq(),await va(Ma.generateAllServiceConfigs())}catch(e){throw Qe?.disconnect(),e}}a(lle,"startAllServices");async function QN(e,t=!1){try{let r;switch(e=e.toLowerCase(),e){case tt.PROCESS_DESCRIPTORS.HDB.toLowerCase():r=Ma.generateMainServerConfig();break;case tt.PROCESS_DESCRIPTORS.CLUSTERING_INGEST_SERVICE.toLowerCase():r=Ma.generateNatsIngestServiceConfig();break;case tt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE.toLowerCase():r=Ma.generateNatsReplyServiceConfig();break;case tt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase():r=Ma.generateNatsHubServerConfig(),await va(r,t),await Io.removeNatsConfig(e);return;case tt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase():r=Ma.generateNatsLeafServerConfig(),await va(r,t),await Io.removeNatsConfig(e);return;case tt.PROCESS_DESCRIPTORS.CLUSTERING_UPGRADE_4_0_0.toLowerCase():r=Ma.generateClusteringUpgradeV4ServiceConfig();break;default:throw new Error(`Start service called with unknown service config: ${e}`)}await va(r)}catch(r){throw Qe?.disconnect(),r}}a(QN,"startService");async function Nq(){try{let e=await zN(),t={};for(let r=0,n=e.length;r<n;r++){let s=e[r];t[s.name]===void 0&&(t[s.name]={name:s.name,exec_mode:s.pm2_env.exec_mode})}return t}catch(e){throw Qe?.disconnect(),e}}a(Nq,"getUniqueServicesList");async function ule(e=[]){try{let t=!1,r=await Nq();for(let n=0,s=Object.values(r).length;n<s;n++){let o=Object.values(r)[n].name;e.includes(o)||(o===tt.PROCESS_DESCRIPTORS.HDB?t=!0:await Rq(o))}t&&await Iq(tt.PROCESS_DESCRIPTORS.HDB)}catch(t){throw Qe?.disconnect(),t}}a(ule,"restartAllServices");async function wq(e){if(tn?.find(r=>r.name===e))return!0;let t=await Zce.getHDBProcessInfo();return t.core.length&&t.core[0]?.parent==="PM2"}a(wq,"isServiceRegistered");async function Iq(e){let t=eS.get(tt.CONFIG_PARAMS.THREADS_COUNT)??eS.get(tt.CONFIG_PARAMS.THREADS),r=await Oq(e),n=jce.isEmptyOrZeroLength(r)?0:r.length;t!==n?(await WN(e),await QN(e)):e===tt.PROCESS_DESCRIPTORS.HDB?await bq():await Aq(e)}a(Iq,"reloadStopStart");var Cq;async function Pq(e=!1){for(let t in tt.CLUSTERING_PROCESSES){let r=tt.CLUSTERING_PROCESSES[t];await QN(r,e)}}a(Pq,"startClusteringProcesses");async function Dq(){Cq=Sq(tt.LAUNCH_SERVICE_SCRIPTS.NATS_REPLY_SERVICE,{name:tt.PROCESS_DESCRIPTORS.CLUSTERING_REPLY_SERVICE});try{await Zg.deleteLocalStream("__HARPERDB_WORK_QUEUE__")}catch{}await Zg.updateLocalStreams();let e=await Jce.getAllNodeRecords();for(let t=0,r=e.length;t<r;t++)if(e[t].system_info?.hdb_version===tt.PRE_4_0_0_VERSION){gl.info("Starting clustering upgrade 4.0.0 process"),Sq(tt.LAUNCH_SERVICE_SCRIPTS.NODES_UPGRADE_4_0_0,{name:"Upgrade-4-0-0"});break}}a(Dq,"startClusteringThreads");async function dle(){for(let e in tt.CLUSTERING_PROCESSES)if(e!==tt.CLUSTERING_PROCESSES.CLUSTERING_INGEST_PROC_DESCRIPTOR)if(e===tt.CLUSTERING_PROCESSES.CLUSTERING_REPLY_SERVICE_DESCRIPTOR)await Cq.terminate();else{let t=tt.CLUSTERING_PROCESSES[e];await WN(t)}}a(dle,"stopClustering");async function fle(){for(let e in tt.CLUSTERING_PROCESSES){let t=tt.CLUSTERING_PROCESSES[e];if(await wq(t)===!1)return!1}return!0}a(fle,"isClusteringRunning");async function _le(){await Io.generateNatsConfig(!0),await Zg.reloadNATSHub(),await Zg.reloadNATSLeaf(),await Io.removeNatsConfig(tt.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase()),await Io.removeNatsConfig(tt.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())}a(_le,"reloadClustering")});var XN={};Ue(XN,{compactOnStart:()=>hle,copyDb:()=>Hq});async function hle(){Ua.notify("Running compact on start"),console.log("Running compact on start");let e=(0,jN.get)(x.ROOTPATH),t=new Map,r=Xe();(0,JN.updateConfigValue)(x.STORAGE_COMPACTONSTART,!1);try{for(let n in r){if(n==="system"||n.endsWith("-copy"))continue;let s;for(let l in r[n]){s=r[n][l].primaryStore.path;break}if(!s){console.log("Couldn't find any tables in database",n);continue}let i=(0,tS.join)(e,"backup",n+".mdb"),o=(0,tS.join)(e,fc,n+"-copy.mdb"),c=0;try{c=await Mq(n),console.log("Database",n,"before compact has a total record count of",c)}catch(l){Ua.error("Error getting record count for database",n,l),console.error("Error getting record count for database",n,l)}t.set(n,{db_path:s,copy_dest:o,backup_dest:i,record_count:c}),await Hq(n,o),console.log("Backing up",n,"to",i),await(0,Sl.move)(s,i,{overwrite:!0}),console.log("Moving copy compacted",n,"to",s),await(0,Sl.move)(o,s,{overwrite:!0}),await(0,Sl.remove)((0,tS.join)(e,fc,`${n}-copy.mdb-lock`))}try{ad()}catch(n){Ua.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n)}try{ad()}catch(n){Ua.error("Error resetting databases after backup",n),console.error("Error resetting databases after backup",n),process.exit(0)}}catch(n){Ua.error("Error compacting database, rolling back operation",n),console.error("Error compacting database, rolling back operation",n),(0,JN.updateConfigValue)(x.STORAGE_COMPACTONSTART,!1);for(let[s,{db_path:i,backup_dest:o}]of t){console.error("Moving backup database",o,"back to",i);try{await(0,Sl.move)(o,i,{overwrite:!0})}catch(c){console.error(c)}}throw ad(),n}for(let[n,{backup_dest:s,record_count:i}]of t){let o=await Mq(n);if(console.log("Database",n,"after compact has a total record count of",o),i!==o){let c=`There is a discrepancy between pre and post compact record count for database ${n}.
 Total record count before compaction: ${i}, total after: ${o}.