harperdb 4.6.10 → 4.6.11

package/bin/harperdb.js

@@ -13,7 +13,7 @@
 `),key:"-----BEGIN RSA PRIVATE KEY-----\rMIIEowIBAAKCAQEArBFJQRfFiJku/KwhV1Ssp7cX61vvuKmd4Rp6A9jB2QLgx8nj\r/+Xhp2hPRkISnOA8BuAxr4dMD9syGJwX4kNy9mbZ5Q0fWZCiEGBpVcU1J+k+N5K4\rSuZ2SqgxeN2IN2RLzt3GyQY4imcdHgNv7aHoXUrEwBx0MeYEw3IIDXtrYKCR2D8I\rvWBfwMUgWa24G8lpWILWA5hd9srRz9NxlAiHSjhbgT7B0xruEpHRCHSyKjvaIJVt\rWBR+amejYsAKVrD/hgrqjsA1123Y6++YqvU6vwg64xhS2kz5r3dkNKhvwbWgpZdI\rIaRvsiB77f4kLGo0vi8RFgJ1ZRjGg3RRK2w1LQIDAQABAoIBAQCEOmh78EOpnGZC\rYBjjHrvrysVD5gvLcfVUtl8Ls7gMB60re1eOIF+PoZZCHKZnDd6zPfiQtj1adg0C\rYnnsM/8VoaZS4gm0b3RLd3ubIQifWhuo40RissY2yxfxlPSH9LhZCY8ojnJG0cTL\resK579E8WCfopjUY33XLqEbN7Ylv39J+DSqInjqV3efJZUa+HqUJ98VxxzodcKMD\rP3bwUU4gHoSSp4pAsOFH5sQhaIWH1IcNjrAwpee2cJQuh4G157RRIuuUpagtaEG/\rXJIiAyBguJyu3JQFnIBQF01N5+omJgXYJ1L0m54543/iIRThmF3zDCDgCyUzmOk+\rH6As9fv1AoGBANOpOtOZLSAScjGsgJamT3ceJ2wCa86g2j8Oxu8lJUmUp5s3tA0v\rBFW5O3S4KR1EXwkLMBUMrfFM8YvzHWxsXBI6XV8azGLvyqPHxr65OhmpGYkGZMXu\rn9okgjkqlewnY2I073gvyK7ppX51UL5y9fF1vlsk+UlW+Rgx/vMHbdcjAoGBANAc\rxRUsxs4QJpbS4zD3JOkHjr24a97TrS3kCybAHUMpR2NrEHPZw9zex0/aphOJUHfL\rIMkOZdpfDqMfxWy4FAEmqBEMkO2SB+h0Wp4P+qp81ax4vGFiB0cD3wtixr11U1tt\rlZ/ZTdv4VDpDFNK1KaplhTDeyuCjeYfS3/GJia9vAoGAcOsAgjBevZR5rXx84WH6\rVO8WUu37u7FenXNxt9VWTinrPMh72uixZFY8nOk+rely1e1NCn3IMko9Ns9NbDFm\r8SaH95vhXArXTYbfxZIlp9jp0YtCqcHDL+p4Oq04bFMbFyJseu7rHj1x18QYfnHw\rOY/6LL/N6k1m+Hx7qgXVmIcCgYB/w0nTCBw84XlvWqSTqQaF8VfWbWP79mP5KmkW\rLxdH5g2noVEGbohqDnK6OXd/wusdwByukiJBf94Skyy25AOT+VFwthA7aU1ljhkb\rtJ+lDuJ28eBkwLPLCzthWBC+u0qjdJFJAzVjd/7tjcU43nNn4s90AzL12iaAFhvZ\rwyA+DQKBgGc/4cdyGJ3YkcA8150gQBawgJZ7q8V1JND87ggWA8wnK3cHn7rMZQl2\r3emDp9HEFXFex5dbGDDqZFAoesZCDxjknIn9oNfW4PvaWS8q7b6ZKLZG1p03Pu7/\rtYaD0kPbo0kysfFT/co+NgHbdykvIyboomfGdNLTUjYuy6lpwpvs\r-----END RSA PRIVATE KEY-----\r".replace(/\r/g,`\r
 `)},bie="certificate.pem",Iie="privateKey.pem",Nie="caCertificate.pem",wie="natsCertificate.pem",Oie="natsCaCertificate.pem",Nt={DEFAULT:"default","DEFAULT-CA":"default-ca",SERVER:"server",CA:"ca","OPERATIONS-API":"operations-api","OPERATIONS-CA":"operations-ca"},Cie={tls_certificate:Nt.SERVER,tlsCertificateAuthority:Nt.CA,customFunctions_tls_certificate:Nt.SERVER,customFunctionsTlsCertificateAuthority:Nt.CA,operationsApi_tls_certificate:Nt["OPERATIONS-API"],operationsApiTlsCertificateAuthority:Nt["OPERATIONS-CA"]},Pie={[Nt.SERVER]:2,[Nt.DEFAULT]:1},Die={[Nt["OPERATIONS-API"]]:3,[Nt.SERVER]:2,[Nt.DEFAULT]:1},Lie={[Nt["OPERATIONS-API"]]:3,[Nt.SERVER]:2,[Nt.DEFAULT]:1},Mie={[Nt["OPERATIONS-CA"]]:3,[Nt.CA]:2,[Nt["DEFAULT-CA"]]:1},vie={[Nt["OPERATIONS-CA"]]:3,[Nt.CA]:2,[Nt["DEFAULT-CA"]]:1},Uie={[Nt.CA]:2,[Nt["DEFAULT-CA"]]:1};dn.CERTIFICATE_PEM_NAME=bie;dn.PRIVATEKEY_PEM_NAME=Iie;dn.CA_PEM_NAME=Nie;dn.CERT_NAME=Nt;dn.CERT_CONFIG_NAME_MAP=Cie;dn.CERT_PREFERENCE_APP=Pie;dn.CERT_PREFERENCE_OPS=Die;dn.CERT_PREFERENCE_REP=Lie;dn.CA_CERT_PREFERENCE_REP=Mie;dn.CA_CERT_PREFERENCE_OPS=vie;dn.CA_CERT_PREFERENCE_APP=Uie;dn.CERTIFICATE_VALUES=Aie;dn.NATS_CERTIFICATE_PEM_NAME=wie;dn.NATS_CA_PEM_NAME=Oie});var HN=M((QMe,dk)=>{"use strict";var lk=require("fs-extra"),Re=require("joi"),xie=require("os"),{boolean:qe,string:Tt,number:fr,array:ic}=Re.types(),{totalmem:ok}=require("os"),Ul=require("path"),Bie=j(),FN=se(),JMe=BN(),ak=(F(),v(K)),Fie=ft(),ck="log",Hie="components",kie="Invalid logging.rotation.maxSize unit. Available units are G, M or K",qie="Invalid logging.rotation.interval unit. Available units are D, H or M (minutes)",Gie="Invalid logging.rotation.maxSize value. Value should be a number followed by unit e.g. '10M'",$ie="Invalid logging.rotation.interval value. Value should be a number followed by unit e.g. '10D'",Vie="rootPath config parameter is undefined",Gn=Re.alternatives([fr.min(0),Tt]).optional().empty(null),Zg=Re.alternatives([ic.items(Tt,{host:Tt.required(),port:Gn},{hostname:Tt.required(),port:Gn}).empty(null),ic.items(Tt)]),so,uk=!1;dk.exports={configValidator:Kie,routesValidator:Qie,routeConstraints:Zg};function Kie(e,t=!1){if(uk=t,so=e.rootPath,FN.isEmpty(so))throw Vie;let r=qe.optional(),n=fr.min(0).max(1e3).empty(null).default(Jie),s=Tt.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path").empty(null).default(Dh),i=Tt.optional().empty(null),a=Tt.pattern(/^[^\s.,*>]+$/).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >"}).empty(null).required(),c=Re.string().empty(null).default(Dh),l=Re.custom(Wie).empty(null).default(Dh),u=e.clustering?.enabled,d=Re.object({certificate:i,certificateAuthority:i,privateKey:i}),f;return u===!0?f=Re.object({enabled:r,hubServer:Re.object({cluster:Re.object({name:Re.required().empty(null),network:Re.object({port:Gn,routes:Zg}).required()}).required(),leafNodes:Re.object({network:Re.object({port:Gn}).required()}).required(),network:Re.object({port:Gn}).required()}).required(),leafServer:Re.object({network:Re.object({port:Gn,routes:Zg}).required(),streams:Re.object({maxAge:fr.min(120).allow(null).optional(),maxBytes:fr.min(1).allow(null).optional(),maxMsgs:fr.min(1).allow(null).optional(),path:c}).required()}).required(),logLevel:Re.valid("error","warn","info","debug","trace"),nodeName:a,republishMessages:qe.optional(),databaseLevel:qe.optional(),tls:Re.object({certificate:i,certificateAuthority:i,privateKey:i,insecure:qe.required(),verify:qe.optional()}),user:Tt.optional().empty(null)}).optional():f=Re.object({enabled:r,tls:Re.object({certificate:i,certificateAuthority:i,privateKey:i,insecure:qe.optional()})}).optional(),Re.object({authentication:Re.alternatives(Re.object({authorizeLocal:qe,cacheTTL:fr.required(),cookie:Re.object({domains:ic.items(Tt).optional(),expires:Tt.optional()}),enableSessions:qe,hashFunction:Tt.valid("md5","sha256","argon2id").optional().empty(null)}),qe).optional(),analytics:Re.object({aggregatePeriod:fr,replicate:qe.optional()}),replication:Re.object({hostname:Re.alternatives(Tt,fr).optional().empty(null),url:Tt.optional().empty(null),port:Gn,securePort:Gn,routes:ic.optional().empty(null),databases:Re.alternatives(Tt,ic),enableRootCAs:qe.optional(),copyTablesToCatchUp:qe.optional()}).optional(),componentsRoot:s.optional(),clustering:f,localStudio:Re.object({enabled:r}).required(),logging:Re.object({auditAuthEvents:Re.object({logFailed:qe,logSuccessful:qe}),file:qe.required(),level:Re.valid("notify","fatal","error","warn","info","debug","trace"),rotation:Re.object({enabled:qe.optional(),compress:qe.optional(),interval:Tt.custom(jie).optional().empty(null),maxSize:Tt.custom(zie).optional().empty(null),path:Tt.optional().empty(null).default(Dh)}).required(),root:s,stdStreams:qe.required(),auditLog:qe.required()}).required(),operationsApi:Re.object({network:Re.object({cors:qe.optional(),corsAccessList:ic.optional(),headersTimeout:fr.min(1).optional(),keepAliveTimeout:fr.min(1).optional(),port:Gn,domainSocket:Re.optional().empty("hdb/operations-server").default(Dh),securePort:Gn,timeout:fr.min(1).optional()}).optional(),tls:Re.alternatives([Re.array().items(d),d])}).required(),rootPath:Tt.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path").required(),mqtt:Re.object({network:Re.object({port:Gn,securePort:Gn,mtls:Re.alternatives([qe.optional(),Re.object({user:Tt.optional(),certificateAuthority:i,required:qe.optional()})])}).required(),webSocket:qe.optional(),requireAuthentication:qe.optional()}),http:Re.object({compressionThreshold:fr.optional(),cors:qe.optional(),corsAccessList:ic.optional(),headersTimeout:fr.min(1).optional(),port:Gn,securePort:Gn,maxHeaderSize:fr.optional(),mtls:Re.alternatives([qe.optional(),Re.object({user:Tt.optional(),certificateAuthority:i,required:qe.optional()})]),threadRange:Re.alternatives([ic.optional(),Tt.optional()])}).required(),threads:Re.alternatives(n.optional(),Re.object({count:n.optional(),debug:Re.alternatives(qe.optional(),Re.object({startingPort:fr.min(1).optional(),host:Tt.optional(),waitForDebugger:qe.optional()})),maxHeapMemory:fr.min(0).optional()})),storage:Re.object({writeAsync:qe.required(),overlappingSync:qe.optional(),caching:qe.optional(),compression:Re.alternatives([qe.optional(),Re.object({dictionary:Tt.optional(),threshold:fr.optional()})]),compactOnStart:qe.optional(),compactOnStartKeepBackup:qe.optional(),noReadAhead:qe.optional(),path:l,prefetchWrites:qe.optional(),maxFreeSpaceToLoad:fr.optional(),maxFreeSpaceToRetain:fr.optional()}).required(),ignoreScripts:qe.optional(),tls:Re.alternatives([Re.array().items(d),d])}).validate(e,{allowUnknown:!0,abortEarly:!1,errors:{wrap:{label:"'"}}})}o(Kie,"configValidator");function Yie(e){return uk||lk.existsSync(e)?null:`Specified path ${e} does not exist.`}o(Yie,"doesPathExist");function Wie(e,t){Re.assert(e,Tt.pattern(/^[\\\/]$|([\\\/a-zA-Z_0-9\:-]+)+$/,"directory path"));let r=Yie(e);if(r)return t.message(r)}o(Wie,"validatePath");function zie(e,t){let r=e.slice(-1);if(r!=="G"&&r!=="M"&&r!=="K")return t.message(kie);let n=e.slice(0,-1);return isNaN(parseInt(n))?t.message(Gie):e}o(zie,"validateRotationMaxSize");function jie(e,t){let r=e.slice(-1);if(r!=="D"&&r!=="H"&&r!=="M")return t.message(qie);let n=e.slice(0,-1);return isNaN(parseInt(n))?t.message($ie):e}o(jie,"validateRotationInterval");function Jie(e,t){let r=t.state.path.join("."),n=xie.cpus().length,s=n-1;s<=2&&(s=2);let i=process.constrainedMemory?.()||ok();return i=Math.round(Math.min(i,ok())/1e6),s=Math.max(Math.min(s,Math.round((i-750)/300)),1),Bie.info(`Detected ${n} cores and ${i}MB on this machine, defaulting ${r} to ${s}`),s}o(Jie,"setDefaultThreads");function Dh(e,t){let r=t.state.path.join(".");if(!FN.isEmpty(t.original)&&r!=="operationsApi.network.domainSocket")return t.original;if(FN.isEmpty(so))throw new Error(`Error setting default root for: ${r}. HDB root is not defined`);switch(r){case"componentsRoot":return Ul.join(so,Hie);case"logging.root":return Ul.join(so,ck);case"clustering.leafServer.streams.path":return Ul.join(so,"clustering","leaf");case"storage.path":let n=Ul.join(so,ak.LEGACY_DATABASES_DIR_NAME);return lk.existsSync(n)?n:Ul.join(so,ak.DATABASES_DIR_NAME);case"logging.rotation.path":return Ul.join(so,ck);case"operationsApi.network.domainSocket":return r==null?null:Ul.join(so,"operations-server");default:throw new Error(`Error setting default root for config parameter: ${r}. Unrecognized config parameter`)}}o(Dh,"setDefaultRoot");function Qie(e){let t=Re.object({routes:Zg});return Fie.validateBySchema({routes:e},t)}o(Qie,"routesValidator")});var _t=M(tr=>{"use strict";var Fs=(F(),v(K)),wr=se(),mr=j(),{configValidator:Xie,routesValidator:fk}=HN(),fn=require("fs-extra"),hk=require("yaml"),us=require("path"),Zie=require("is-number"),pk=require("properties-reader"),eoe=require("lodash"),{handleHDBError:toe}=ge(),{HTTP_STATUS_CODES:roe,HDB_ERROR_MSGS:Td}=Vr(),{server:noe}=(Ur(),v(bm)),{PACKAGE_ROOT:_k}=ht(),{DATABASES_PARAM_CONFIG:Lh,CONFIG_PARAMS:ls,CONFIG_PARAM_MAP:Ai}=Fs,soe="Unable to get config value because config is uninitialized",ioe="Config successfully initialized",ooe="Error backing up config file",aoe="Empty parameter sent to getConfigValue",Ek=us.join(_k,"config","yaml",Fs.HDB_DEFAULT_CONFIG_FILE),coe=us.join(_k,"config","yaml","defaultNatsConfig.yaml"),loe="Configuration successfully set. You must restart HarperDB for new config settings to take effect.",mk={logging_rotation_retain:"logging.rotation.retain",logging_rotation_rotate:"logging.rotation.rotate",logging_rotation_rotateinterval:"logging.rotation.rotateInterval",logging_rotation_rotatemodule:"logging.rotation.rotateModule",logging_rotation_timezone:"logging.rotation.timezone",logging_rotation_workerinterval:"logging.rotation.workerInterval"},eS,xt,tS;tr.createConfigFile=uoe;tr.getDefaultConfig=doe;tr.getConfigValue=Sk;tr.initConfig=rS;tr.flattenConfig=Rd;tr.updateConfigValue=Tk;tr.updateConfigObject=moe;tr.getConfiguration=_oe;tr.setConfiguration=Eoe;tr.readConfigFile=$N;tr.getClusteringRoutes=goe;tr.initOldConfig=Rk;tr.getConfigFromFile=Soe;tr.getConfigFilePath=xl;tr.addConfig=Toe;tr.deleteConfigFromFile=Roe;tr.getConfigObj=yoe;tr.resolvePath=kN;tr.getFlatConfigObj=Aoe;function kN(e){if(e?.startsWith("~/"))return us.join(wr.getHomeDir(),e.slice(1));let t=oe();try{return us.resolve(t.getHdbBasePath(),e)}catch(r){return console.error("Unable to resolve path",e,r),e}}o(kN,"resolvePath");function uoe(e,t=!1){let r=oc(Ek);if(e.clustering_enabled||e.CLUSTERING_ENABLED||e.clustering){let c=hk.parseDocument(fn.readFileSync(coe,"utf8"),{simpleKeys:!0});r.addIn(["clustering"],c.toJSON().clustering)}eS=Rd(r.toJSON());let n;for(let c in e){let l=Ai[c.toLowerCase()];if(l===ls.DATABASES){Array.isArray(e[c])?n=e[c]:n=Object.keys(e[c]).map(u=>({[u]:e[c][u]}));continue}if(!l&&(c.endsWith("_package")||c.endsWith("_port"))&&(l=c),l!==void 0){let u=l.split("_"),d=qN(l,e[c]);l==="rootPath"&&d?.endsWith("/")&&(d=d.slice(0,-1));try{r.setIn([...u],d)}catch(f){mr.error(f)}}}n&&gk(r,n),GN(r,t);let s=r.toJSON();xt=Rd(s);let i=r.getIn(["rootPath"]),a=us.join(i,Fs.HDB_CONFIG_FILE);if(fn.createFileSync(a),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);fn.writeFileSync(a,String(r)),mr.trace(`Config file written to ${a}`)}o(uoe,"createConfigFile");function gk(e,t){let r;try{try{r=JSON.parse(t)}catch(n){if(!wr.isObject(t))throw n;r=t}for(let n of r){let s=Object.keys(n)[0];if(n[s].hasOwnProperty(Lh.TABLES))for(let i in n[s][Lh.TABLES])for(let a in n[s][Lh.TABLES][i]){let c=n[s][Lh.TABLES][i][a],l=[ls.DATABASES,s,Lh.TABLES,i,a];e.hasIn(l)?e.setIn(l,c):e.addIn(l,c)}else for(let i in n[s]){let a=n[s][i],c=[ls.DATABASES,s,i];e.hasIn(c)?e.setIn(c,a):e.addIn(c,a)}}}catch(n){mr.error("Error parsing schemas CLI/env config arguments",n)}}o(gk,"setSchemasConfig");function doe(e){if(eS===void 0){let r=oc(Ek);eS=Rd(r.toJSON())}let t=Ai[e.toLowerCase()];if(t!==void 0)return eS[t.toLowerCase()]}o(doe,"getDefaultConfig");function Sk(e){if(e==null){mr.info(aoe);return}if(xt===void 0){mr.trace(soe);return}let t=Ai[e.toLowerCase()];if(t!==void 0)return xt[t.toLowerCase()]}o(Sk,"getConfigValue");function xl(e=wr.getPropsFilePath()){let t=wr.getEnvCliRootPath();if(t)return kN(us.join(t,Fs.HDB_CONFIG_FILE));let r=pk(e);return kN(r.get(Fs.HDB_SETTINGS_NAMES.SETTINGS_PATH_KEY))}o(xl,"getConfigFilePath");function rS(e=!1){if(xt===void 0||e){let t;if(!wr.noBootFile()){t=wr.getPropsFilePath();try{fn.accessSync(t,fn.constants.F_OK|fn.constants.R_OK)}catch(i){throw mr.error(i),new Error(`HarperDB properties file at path ${t} does not exist`)}}let r=xl(t),n;if(r.includes("config/settings.js"))try{Rk(r);return}catch(i){if(i.code!==Fs.NODE_ERROR_CODES.ENOENT)throw i}try{n=oc(r)}catch(i){if(i.code===Fs.NODE_ERROR_CODES.ENOENT){mr.trace(`HarperDB config file not found at ${r}. 
 				This can occur during early stages of install where the config file has not yet been created`);return}else throw mr.error(i),new Error(`Error reading HarperDB config file at ${r}`)}foe(n,r),GN(n);let s=n.toJSON();if(noe.config=s,xt=Rd(s),xt.logging_rotation_rotate)for(let i in mk)xt[i]&&mr.error(`Config ${mk[i]} has been deprecated. Please check https://docs.harperdb.io/docs/ for further details.`);mr.trace(ioe)}}o(rS,"initConfig");function foe(e,t){let r=e.getIn(["rootPath"]),n=!1;if(e.hasIn(["storage","path"])||(e.setIn(["storage","path"],us.join(r,"database")),n=!0),e.hasIn(["logging","rotation","path"])||(e.setIn(["logging","rotation","path"],us.join(r,"log")),n=!0),e.hasIn(["authentication"])||(e.addIn(["authentication"],{cacheTTL:3e4,enableSessions:!0,operationTokenTimeout:e.getIn(["operationsApi","authentication","operationTokenTimeout"])??"1d",refreshTokenTimeout:e.getIn(["operationsApi","authentication","refreshTokenTimeout"])??"30d"}),n=!0),e.hasIn(["analytics"])||(e.addIn(["analytics"],{aggregatePeriod:60,replicate:!1}),n=!0),n){if(mr.trace("Updating config file with missing config params"),e.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${e.errors}`);fn.writeFileSync(t,String(e))}}o(foe,"checkForUpdatedConfig");function GN(e,t=!1){let r=e.toJSON();if(r.componentsRoot=r.componentsRoot??r?.customFunctions?.root,r?.http?.threads&&(r.threads=r?.http?.threads),r.http?.port&&r.http?.port===r.http?.securePort)throw Td.CONFIG_VALIDATION("http.port and http.securePort cannot be the same value");if(r.operationsApi?.network?.port&&r.operationsApi?.network?.port===r.operationsApi?.network?.securePort)throw Td.CONFIG_VALIDATION("operationsApi.network.port and operationsApi.network.securePort cannot be the same value");let n=Xie(r,t);if(n.error)throw Td.CONFIG_VALIDATION(n.error.message);typeof n.value.threads=="object"?e.setIn(["threads","count"],n.value.threads.count):e.setIn(["threads"],n.value.threads),e.setIn(["componentsRoot"],n.value.componentsRoot),e.setIn(["logging","root"],n.value.logging.root),e.setIn(["storage","path"],n.value.storage.path),e.setIn(["logging","rotation","path"],n.value.logging.rotation.path),e.setIn(["operationsApi","network","domainSocket"],n.value?.operationsApi?.network?.domainSocket),r?.clustering?.enabled&&e.setIn(["clustering","leafServer","streams","path"],n.value.clustering.leafServer.streams?.path)}o(GN,"validateConfig");function moe(e,t){xt===void 0&&(xt={});let r=Ai[e.toLowerCase()];if(r===void 0){mr.trace(`Unable to update config object because config param '${e}' does not exist`);return}xt[r.toLowerCase()]=t}o(moe,"updateConfigObject");function Tk(e,t,r=void 0,n=!1,s=!1,i=!1){xt===void 0&&rS();let a=Sk(Ai.hdb_root),c=us.join(a,Fs.HDB_CONFIG_FILE),l=oc(c),u;if(r&&xt){let m=!1;for(let h in r)if(r[h]!=xt[h.toLowerCase()]){m=!0;break}if(!m){mr.trace("No changes detected in config parameters, skipping update");return}}if(r===void 0&&e.toLowerCase()===ls.DATABASES)u=t;else if(r===void 0){let m;if(i)m=e;else if(m=Ai[e.toLowerCase()],m===void 0)throw new Error(`Unable to update config, unrecognized config parameter: ${e}`);let h=m.split("_"),p=qN(m,t);l.setIn([...h],p)}else for(let m in r){let h=Ai[m.toLowerCase()];if(h===ls.HTTP_SECUREPORT&&r[m]===xt[ls.HTTP_PORT]?.toString()&&l.setIn(["http","port"],null),h===ls.OPERATIONSAPI_NETWORK_SECUREPORT&&r[m]===xt[ls.OPERATIONSAPI_NETWORK_PORT.toLowerCase()]?.toString()&&l.setIn(["operationsApi","network","port"],null),h===ls.DATABASES){u=r[m];continue}if(h?.startsWith("threads_")){let p=l.getIn(["threads"]);p>=0&&(l.deleteIn(["threads"]),l.setIn(["threads","count"],p))}if(!h&&(m.endsWith("_package")||m.endsWith("_port"))&&(h=m),h!==void 0){let p=h.split("_"),E=Fs.LEGACY_CONFIG_PARAMS[m.toUpperCase()];E&&E.startsWith("customFunctions")&&l.hasIn(E.split("_"))&&(h=E,p=E.split("_"));let g=qN(h,r[m]);h==="rootPath"&&g?.endsWith("/")&&(g=g.slice(0,-1));try{p.length>1&&typeof l.getIn(p.slice(0,-1))=="boolean"&&l.deleteIn(p.slice(0,-1)),l.setIn([...p],g)}catch(y){mr.error(y)}}}u&&gk(l,u),GN(l);let d=l.getIn(["rootPath"]),f=us.join(d,Fs.HDB_CONFIG_FILE);if(n===!0&&hoe(c,d),l.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${l.errors}`);fn.writeFileSync(f,String(l)),s&&(xt=Rd(l.toJSON())),mr.trace(`Config parameter: ${e} updated with value: ${t}`)}o(Tk,"updateConfigValue");function hoe(e,t){try{let r=us.join(t,"backup",`${new Date(Date.now()).toISOString().replaceAll(":","-")}-${Fs.HDB_CONFIG_FILE}.bak`);fn.copySync(e,r),mr.trace(`Config file: ${e} backed up to: ${r}`)}catch(r){mr.error(ooe),mr.error(r)}}o(hoe,"backupConfigFile");var poe=["databases"];function Rd(e){return e.http&&Object.assign(e.http,e?.customFunctions?.network),e?.operationsApi?.network&&(e.operationsApi.network={...e.http,...e.operationsApi.network}),e?.operationsApi&&(e.operationsApi.tls={...e.tls,...e.operationsApi.tls}),tS=e,r(e);function r(n){let s={};for(let i in n)if(n.hasOwnProperty(i)){if(typeof n[i]=="object"&&n[i]!==null&&!Array.isArray(n[i])&&!poe.includes(i)){let a=r(n[i]);for(let c in a){if(!a.hasOwnProperty(c))continue;c!=="package"&&(i=i.toLowerCase());let l=i+"_"+c;!ls[l.toUpperCase()]&&Ai[l]&&(s[Ai[l].toLowerCase()]=a[c]),s[l]=a[c]}}n[i]!==void 0&&(s[i.toLowerCase()]=n[i])}return s}o(r,"squashObj")}o(Rd,"flattenConfig");function qN(e,t){if(e===ls.CLUSTERING_NODENAME||e===ls.CLUSTERING_USER){if(t==null)return t;if(!isNaN(t))return t.toString();if(typeof t=="string"&&t.toLowerCase()==="true"||typeof t=="string"&&t.toLowerCase()==="false")return t}else{if(Zie(t))return parseFloat(t);if(t===!0||t===!1||Array.isArray(t)||wr.isObject(t)||t===null)return t;if(typeof t=="string"&&t.toLowerCase()==="true")return!0;if(typeof t=="string"&&t.toLowerCase()==="false")return!1}if(t===void 0||t.toLowerCase()==="undefined")return null;if(typeof t=="string"&&(t.startsWith("{")&&t.endsWith("}")||t.startsWith("[")&&t.endsWith("]")))try{return JSON.parse(t)}catch{}return wr.autoCast(t)}o(qN,"castConfigValue");function _oe(){let e=wr.getPropsFilePath(),t=xl(e);return oc(t).toJSON()}o(_oe,"getConfiguration");async function Eoe(e){let{operation:t,hdb_user:r,hdbAuthHeader:n,...s}=e;try{return Tk(void 0,void 0,s,!0),loe}catch(i){throw typeof i=="string"||i instanceof String?toe(i,i,roe.BAD_REQUEST,void 0,void 0,!0):i}}o(Eoe,"setConfiguration");function $N(){let e=wr.getPropsFilePath();try{fn.accessSync(e,fn.constants.F_OK|fn.constants.R_OK)}catch(n){if(!wr.noBootFile())throw mr.error(n),new Error(`HarperDB properties file at path ${e} does not exist`)}let t=xl(e);return oc(t).toJSON()}o($N,"readConfigFile");function oc(e){return hk.parseDocument(fn.readFileSync(e,"utf8"),{simpleKeys:!0})}o(oc,"parseYamlDoc");function goe(){let e=$N(),t=e?.clustering?.hubServer?.cluster?.network?.routes;t=wr.isEmptyOrZeroLength(t)?[]:t;let r=fk(t);if(r)throw Td.CONFIG_VALIDATION(r.message);let n=e?.clustering?.leafServer?.network?.routes;n=wr.isEmptyOrZeroLength(n)?[]:n;let s=fk(n);if(s)throw Td.CONFIG_VALIDATION(s.message);if(!wr.isEmptyOrZeroLength(n)&&!wr.isEmptyOrZeroLength(t)){let i=t.filter(a=>n.some(c=>c.host===a.host&&c.port===a.port));if(!wr.isEmptyOrZeroLength(i)){let a=`Duplicate hub and leaf routes found ${JSON.stringify(i)}`;throw Td.CONFIG_VALIDATION(a)}}return{hub_routes:t,leaf_routes:n}}o(goe,"getClusteringRoutes");function Rk(e){let t=pk(e);xt={};for(let r in Ai){let n=t.get(r.toUpperCase());if(wr.isEmpty(n)||typeof n=="string"&&n.trim().length===0)continue;let s=Ai[r].toLowerCase();s===ls.LOGGING_ROOT?xt[s]=us.dirname(n):xt[s]=n}return xt}o(Rk,"initOldConfig");function Soe(e){let t=$N();return eoe.get(t,e.replaceAll("_","."))}o(Soe,"getConfigFromFile");async function Toe(e,t){let r=oc(xl());if(r.hasIn([e])?r.setIn([e],t):r.addIn([e],t),r.errors?.length>0)throw new Error(`Error parsing harperdb-config.yaml ${r.errors}`);await fn.writeFile(xl(),String(r))}o(Toe,"addConfig");function Roe(e){let t=xl(wr.getPropsFilePath()),r=oc(t);r.deleteIn(e);let n=r.getIn(["rootPath"]),s=us.join(n,Fs.HDB_CONFIG_FILE);fn.writeFileSync(s,String(r))}o(Roe,"deleteConfigFromFile");function yoe(){return tS||(rS(),tS)}o(yoe,"getConfigObj");function Aoe(){return xt||rS(),xt}o(Aoe,"getFlatConfigObj")});var $n=M((tve,Hr)=>{"use strict";var bk="username is required",Ik="nothing to update, must supply active, role or password to update",Nk="password cannot be an empty string",wk="If role is specified, it cannot be empty.",Ok="active must be true or false";Hr.exports.addUser=Loe;Hr.exports.alterUser=Moe;Hr.exports.dropUser=Uoe;Hr.exports.getSuperUser=koe;Hr.exports.userInfo=xoe;Hr.exports.listUsers=sS;Hr.exports.listUsersExternal=Boe;Hr.exports.setUsersWithRolesCache=Bl;Hr.exports.findAndValidateUser=XN;Hr.exports.getClusterUser=qoe;Hr.exports.getUsersWithRolesCache=Hoe;Hr.exports.USERNAME_REQUIRED=bk;Hr.exports.ALTERUSER_NOTHING_TO_UPDATE=Ik;Hr.exports.EMPTY_PASSWORD=Nk;Hr.exports.EMPTY_ROLE=wk;Hr.exports.ACTIVE_BOOLEAN=Ok;var Ck=qn(),boe=vl(),Mh=(Xg(),v(Qg)),Pk=nk(),vh=ln(),zN=Vo(),io=se(),Dk=require("validate.js"),jN=j(),{promisify:Ioe}=require("util"),JN=no(),KN=(F(),v(K)),yk=It(),Noe=_t(),woe=oe(),Ooe=qo(),{hdbErrors:Coe,ClientError:bi}=ge(),{HTTP_STATUS_CODES:zo,AUTHENTICATION_ERROR_MSGS:VN,HDB_ERROR_MSGS:yd}=Coe,{UserEventMsg:QN}=Si(),YN=require("lodash"),{server:nS}=(Ur(),v(bm)),Poe=j();nS.getUser=(e,t)=>XN(e,t,t!=null);nS.authenticateUser=(e,t)=>XN(e,t);var Lk={username:!0,active:!0,role:!0,password:!0},Ak=new Map,Doe=Ioe(boe.delete),WN=woe.get(KN.CONFIG_PARAMS.AUTHENTICATION_HASHFUNCTION)??Mh.HASH_FUNCTION.SHA256,oo;async function Loe(e){let t=Dk.cleanAttributes(e,Lk),r=Pk.addUserValidation(t);if(r)throw new bi(r.message);let n=await vh.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["id","permission","role"]});if(!n||n.length<1)throw new bi(yd.ROLE_NAME_NOT_FOUND(t.role),zo.NOT_FOUND);if(n.length>1)throw new bi(yd.DUP_ROLES_FOUND(t.role),zo.CONFLICT);n[0].permission.cluster_user===!0&&(t.hash=JN.encrypt(t.password)),t.password=await Mh.hash(t.password,WN),t.hash_function=WN,t.role=n[0].id;let s=await Ck.insert({operation:"insert",schema:"system",table:"hdb_user",records:[t]});if(jN.debug(s),await Bl(),s.skipped_hashes.length===1)throw new bi(yd.USER_ALREADY_EXISTS(t.username),zo.CONFLICT);return zN.signalUserChange(new QN(process.pid)),`${t.username} successfully added`}o(Loe,"addUser");async function Moe(e){let t=Dk.cleanAttributes(e,Lk);if(io.isEmptyOrZeroLength(t.username))throw new Error(bk);if(io.isEmptyOrZeroLength(t.password)&&io.isEmptyOrZeroLength(t.role)&&io.isEmptyOrZeroLength(t.active))throw new Error(Ik);if(!io.isEmpty(t.password)&&io.isEmptyOrZeroLength(t.password.trim()))throw new Error(Nk);if(!io.isEmpty(t.active)&&!io.isBoolean(t.active))throw new Error(Ok);if(!io.isEmpty(t.password)&&!io.isEmptyOrZeroLength(t.password.trim())&&(voe(t.username)&&(t.hash=JN.encrypt(t.password)),t.password=await Mh.hash(t.password,WN)),t.role==="")throw new Error(wk);if(t.role){let n=await vh.searchByValue({schema:"system",table:"hdb_role",search_attribute:"role",search_value:t.role,get_attributes:["*"]});if(!n||n.length===0)throw new bi(yd.ALTER_USER_ROLE_NOT_FOUND(t.role),zo.NOT_FOUND);if(n.length>1)throw new bi(yd.DUP_ROLES_FOUND(t.role),zo.CONFLICT);t.role=n[0].id}let r=await Ck.update({operation:"update",schema:"system",table:"hdb_user",records:[t]});return await Bl(),zN.signalUserChange(new QN(process.pid)),r}o(Moe,"alterUser");function voe(e){let t=!1,r=oo.get(e);return r&&r.role.permission.cluster_user===!0&&(t=!0),t}o(voe,"isClusterUser");async function Uoe(e){let t=Pk.dropUserValidation(e);if(t)throw new bi(t.message);if(oo.get(e.username)===void 0)throw new bi(yd.USER_NOT_EXIST(e.username),zo.NOT_FOUND);let r=await Doe({table:"hdb_user",schema:"system",hash_values:[e.username]});return jN.debug(r),await Bl(),zN.signalUserChange(new QN(process.pid)),`${e.username} successfully deleted`}o(Uoe,"dropUser");async function xoe(e){let t={};if(!e||!e.hdb_user)return"There was no user info in the body";t=YN.cloneDeep(e.hdb_user);let r=await vh.searchByHash({schema:"system",table:"hdb_role",hash_values:[t.role.id],get_attributes:["*"]});return t.role=r[0],delete t.password,delete t.refresh_token,delete t.hash,delete t.hash_function,t}o(xoe,"userInfo");async function Boe(){let e=await sS();return e.forEach(t=>{delete t.password,delete t.hash,delete t.refresh_token,delete t.hash_function}),[...e.values()]}o(Boe,"listUsersExternal");async function sS(){let e=await vh.searchByValue({schema:"system",table:"hdb_role",search_value:"*",search_attribute:"role",get_attributes:["*"]}),t={};for(let s of e)t[s.id]=YN.cloneDeep(s);if(Object.keys(t).length===0)return null;let r=await vh.searchByValue({schema:"system",table:"hdb_user",search_value:"*",search_attribute:"username",get_attributes:["*"]}),n=new Map;for(let s of r)s=YN.cloneDeep(s),s.role=t[s.role],Foe(s.role),n.set(s.username,s);return n}o(sS,"listUsers");function Foe(e){if(!e){jN.error("invalid user role found.");return}e.permission.system||(e.permission.system={}),e.permission.system.tables||(e.permission.system.tables={});for(let t of Object.keys(Ooe)){let r={read:!!e.permission.super_user,insert:!1,update:!1,delete:!1,attribute_permissions:[]};e.permission.system.tables[t]=r}}o(Foe,"appendSystemTablesToRole");async function Bl(e=void 0){e?oo=e:oo=await sS()}o(Bl,"setUsersWithRolesCache");async function Hoe(){return oo||await Bl(),oo}o(Hoe,"getUsersWithRolesCache");async function XN(e,t,r=!0){oo||await Bl();let n=oo.get(e);if(!n){if(!r)return{username:e};throw new bi(VN.GENERIC_AUTH_FAIL,zo.UNAUTHORIZED)}if(n&&!n.active)throw new bi(VN.USER_INACTIVE,zo.UNAUTHORIZED);let s={active:n.active,username:n.username};if(n.refresh_token&&(s.refresh_token=n.refresh_token),n.role&&(s.role=n.role),r===!0){if(Ak.get(t)===n.password)return s;{let i=Mh.validate(n.password,t,n.hash_function||Mh.HASH_FUNCTION.MD5);if(i?.then&&(i=await i),i===!0)Ak.set(t,n.password);else throw new bi(VN.GENERIC_AUTH_FAIL,zo.UNAUTHORIZED)}}return s}o(XN,"findAndValidateUser");async function koe(){oo||await Bl();for(let[,e]of oo)if(e.role.role==="super_user")return e}o(koe,"getSuperUser");async function qoe(){let e=await sS(),t=Noe.getConfigFromFile(KN.CONFIG_PARAMS.CLUSTERING_USER),r=e.get(t);if(!(r==null||r?.role?.role!==KN.ROLE_TYPES_ENUM.CLUSTER_USER))return r.decrypt_hash=JN.decrypt(r.hash),r.uri_encoded_d_hash=encodeURIComponent(r.decrypt_hash),r.uri_encoded_name=encodeURIComponent(r.username),r.sys_name=r.username+yk.SERVER_SUFFIX.ADMIN,r.sys_name_encoded=r.uri_encoded_name+yk.SERVER_SUFFIX.ADMIN,r}o(qoe,"getClusterUser");var Mk=[];nS.invalidateUser=function(e){for(let t of Mk)try{t(e)}catch(r){Poe.error("Error invalidating user",r)}};nS.onInvalidatedUser=function(e){Mk.push(e)}});var xh=M((ive,Bk)=>{"use strict";var Fl=j(),ds=(F(),v(K)),Goe=i0(),nve=Bs(),sve=rc(),$oe=$n(),{validateEvent:vk}=Si(),Uh=as(),Voe=require("process"),{resetDatabases:Koe}=(De(),v(ut)),Yoe={[ds.ITC_EVENT_TYPES.SCHEMA]:Woe,[ds.ITC_EVENT_TYPES.USER]:xk};async function Woe(e){let t=vk(e);if(t){Fl.error(t);return}Fl.trace("ITC schemaHandler received schema event:",e),await Goe(e.message),await zoe(e.message)}o(Woe,"schemaHandler");async function zoe(e){try{Uh.resetReadTxn(ds.SYSTEM_SCHEMA_NAME,ds.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME),Uh.resetReadTxn(ds.SYSTEM_SCHEMA_NAME,ds.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME),Uh.resetReadTxn(ds.SYSTEM_SCHEMA_NAME,ds.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME);let t=Koe();e.table&&e.database&&await t[e.database][e.table].put(Symbol.for("write-verify"),null)}catch(t){Fl.error(t)}}o(zoe,"syncSchemaMetadata");var Uk=[];async function xk(e){try{try{Uh.resetReadTxn(ds.SYSTEM_SCHEMA_NAME,ds.SYSTEM_TABLE_NAMES.USER_TABLE_NAME),Uh.resetReadTxn(ds.SYSTEM_SCHEMA_NAME,ds.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME)}catch(r){Fl.warn(r)}let t=vk(e);if(t){Fl.error(t);return}Fl.trace(`ITC userHandler ${ds.HDB_ITC_CLIENT_PREFIX}${Voe.pid} received user event:`,e),await $oe.setUsersWithRolesCache();for(let r of Uk)r()}catch(t){Fl.error(t)}}o(xk,"userHandler");xk.addListener=function(e){Uk.push(e)};Bk.exports=Yoe});var Si=M((dve,Hk)=>{"use strict";var ave=j(),ZN=se(),joe=(F(),v(K)),{ITC_ERRORS:Bh}=Vr(),{parentPort:cve,threadId:Joe,isMainThread:Qoe,workerData:lve}=require("worker_threads"),{onMessageFromWorkers:Xoe,broadcast:uve,broadcastWithAcknowledgement:Zoe}=st();Hk.exports={sendItcEvent:eae,validateEvent:Fk,SchemaEventMsg:tae,UserEventMsg:rae};var iS;Xoe(async(e,t)=>{iS=iS||xh(),Fk(e),iS[e.type]&&await iS[e.type](e),e.requestId&&t&&t.postMessage({type:"ack",id:e.requestId})});function eae(e){return!Qoe&&e.message&&(e.message.originator=Joe),Zoe(e)}o(eae,"sendItcEvent");function Fk(e){if(typeof e!="object")return Bh.INVALID_ITC_DATA_TYPE;if(!e.hasOwnProperty("type")||ZN.isEmpty(e.type))return Bh.MISSING_TYPE;if(!e.hasOwnProperty("message")||ZN.isEmpty(e.message))return Bh.MISSING_MSG;if(!e.message.hasOwnProperty("originator")||ZN.isEmpty(e.message.originator))return Bh.MISSING_ORIGIN;if(joe.ITC_EVENT_TYPES[e.type.toUpperCase()]===void 0)return Bh.INVALID_EVENT(e.type)}o(Fk,"validateEvent");function tae(e,t,r,n=void 0,s=void 0){this.originator=e,this.operation=t,this.schema=r,this.table=n,this.attribute=s}o(tae,"SchemaEventMsg");function rae(e){this.originator=e}o(rae,"UserEventMsg")});var Vo=M((hve,$k)=>{"use strict";var kk=(F(),v(K)),mve=se(),oS=j(),qk=qx(),Ad,{sendItcEvent:Gk}=Si();function nae(e){try{oS.info("signalSchemaChange called with message:",e),Ad=Ad||xh();let t=new qk(kk.ITC_EVENT_TYPES.SCHEMA,e);return Ad.schema(t),Gk(t)}catch(t){oS.error(t)}}o(nae,"signalSchemaChange");function sae(e){try{oS.trace("signalUserChange called with message:",e),Ad=Ad||xh();let t=new qk(kk.ITC_EVENT_TYPES.USER,e);return Ad.user(t),Gk(t)}catch(t){oS.error(t)}}o(sae,"signalUserChange");$k.exports={signalSchemaChange:nae,signalUserChange:sae}});function aS(){return ew||(ew=Je({table:"hdb_analytics_hostname",database:"system",attributes:[{name:"id",isPrimaryKey:!0},{name:"hostname"}]})),ew}function oae(e){return e=e.replace(iae,t=>{let[r,n,s,i]=t.split(".").map(a=>parseInt(a));return(r<<8|n).toString(16)+":"+(s<<8|i).toString(16)}),e=e.replace("::",":".repeat(10-e.split(":").length)),e.toLowerCase().split(":").map(t=>t.padStart(4,"0")).join(":")}function aae(e){if(e.length!==4)throw new Error(`nodeHash must be exactly 4 bytes (32 bits); got ${e.length} bytes`);return e[0]<<24|e[1]<<16|e[2]<<8|e[3]}function rw(e){let t=Vk.default.createHash("shake128",{outputLength:4}),r;return(0,Kk.isIPv6)(e)?r=oae(e):r=e.toLowerCase(),aae(Uint8Array.from(t.update(r).digest()))}var Vk,Kk,tw,ew,iae,nw=ue(()=>{De();Vk=w(require("crypto")),Kk=require("node:net"),tw=new Map;o(aS,"getAnalyticsHostnameTable");iae=/(\d{1,3}\.){3}\d{1,3}$/;o(oae,"normalizeIPv6");o(aae,"nodeHashToNumber");o(rw,"stableNodeId")});var jo,sw=ue(()=>{jo={TABLE_SIZE:"table-size",DATABASE_SIZE:"database-size",STORAGE_VOLUME:"storage-volume",MAIN_THREAD_UTILIZATION:"main-thread-utilization",RESOURCE_USAGE:"resource-usage",UTILIZATION:"utilization"}});var fS={};Oe(fS,{addAnalyticsListener:()=>kh,calculateCPUUtilization:()=>cq,diffResourceUsage:()=>lq,recordAction:()=>ot,recordActionBinary:()=>Qr,recordHostname:()=>aw,setAnalyticsEnabled:()=>cae});function cae(e){nq=e}function lae(e,t){if(typeof e=="number"){let r=t.values,n=r.index++;if(n>=r.length){let s=r;t.values=r=new Float32Array(n*2),r.set(s),r.index=n+1}r[n]=e,t.total+=e}else if(typeof e=="boolean")e&&t.total++,t.count++;else if(typeof e=="function")t.count++;else throw new TypeError("Invalid metric value type "+typeof e)}function uae(e,t,r,n,s,i){let a={};if(typeof t=="number")a.total=t,a.values=new Float32Array(4),a.values.index=1,a.values[0]=t,a.total=t;else if(typeof t=="boolean")a.total=t?1:0,a.count=1;else if(typeof t=="function")a.count=1,a.callback=t;else throw new TypeError("Invalid metric value type "+typeof t);a.description={metric:r,path:n,method:s,type:i},uS.set(e,a)}function ot(e,t,r,n,s){if(!nq)return;let i=t+(r?"-"+r:"");n!==void 0&&(i+="-"+n),s!==void 0&&(i+="-"+s);let a=uS.get(i);a?lae(e,a):uae(i,e,t,r,n,s),lS||dae()}function Qr(e,t,r,n,s){ot(!!e,t,r,n,s)}function kh(e){oq.push(e)}function dae(){lS=performance.now(),setTimeout(async()=>{let e=performance.now()-lS;lS=0;let t=[],r={time:Date.now(),period:e,threadId:Hl.threadId,metrics:t};for(let[s,i]of uS){if(i.values){let a=i.values.subarray(0,i.values.index);a.sort();let c=a.length,l=0,u=[],d;for(let f of aq){let m=Math.floor(c*f),h=a[m-1];if(m>l){let p=m-l;if(h===d){let E=u[u.length-1];typeof E=="number"?u[u.length-1]={value:E,count:1+p}:E.count+=p}else u.push(p>1?{value:h,count:p}:h),d=h;l=m}}t.push(Object.assign(i.description,{mean:i.total/c,distribution:u,count:c}))}else i.callback?t.push(Object.assign(i.description,i.callback(i))):t.push(Object.assign(i.description,{total:i.total,count:i.count}));await uq()}let n=process.memoryUsage();t.push({metric:"memory",threadId:Hl.threadId,byThread:!0,...n});for(let s of oq)s(t);uS=new Map,Hl.parentPort?Hl.parentPort.postMessage({type:iq,report:r}):mq({report:r})},sq).unref()}async function aw(){let e=Le.hostname;Jr.trace?.("recordHostname server.hostname:",e);let t=rw(e);Jr.trace?.("recordHostname nodeId:",t);let r=aS();if(!await r.get(t)){let s={id:t,hostname:e};Jr.trace?.(`recordHostname storing hostname: ${JSON.stringify(s)}`),r.put(s.id,s)}}function bd(e,t){let r=Le.hostname,n=tw.get(r);n?Jr.trace?.("storeMetric cached nodeId:",n):(n=rw(r),Jr.trace?.("storeMetric new nodeId:",n),tw.set(r,n));let s={id:[(0,ow.getNextMonotonicTime)(),n],...t};Jr.trace?.(`storing metric ${JSON.stringify(s)}`),e.put(s.id,s)}function cq(e,t){let r=e.userCPUTime+e.systemCPUTime;return Jr.trace?.(`calculateCPUUtilization cpuTime: ${r} period: ${t}`),Math.round(r/t*100)/100}function lq(e,t){return{userCPUTime:t.userCPUTime-(e?.userCPUTime??0),systemCPUTime:t.systemCPUTime-(e?.systemCPUTime??0),minorPageFault:t.minorPageFault-(e?.minorPageFault??0),majorPageFault:t.majorPageFault-(e?.majorPageFault??0),fsRead:t.fsRead-(e?.fsRead??0),fsWrite:t.fsWrite-(e?.fsWrite??0),voluntaryContextSwitches:t.voluntaryContextSwitches-(e?.voluntaryContextSwitches??0),involuntaryContextSwitches:t.involuntaryContextSwitches-(e?.involuntaryContextSwitches??0)}}function fae(e,t,r){let n=0;for(let[s,i]of Object.entries(r)){let a=`${t}.${s}`,c=i.getSize(),l={metric:jo.TABLE_SIZE,database:t,table:s,size:c};Jr.trace?.(`table ${a} size metric: ${JSON.stringify(l)}`),bd(e,l),n+=c}return n}function Yk(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getAuditSize();if(!i)return;let a=rq.statSync(s.primaryStore.env.path).size,c=fae(e,r,n),l=a-c,u={metric:jo.DATABASE_SIZE,database:r,size:a,used:c,free:l,audit:i};bd(e,u),Jr.trace?.(`database ${r} size metric: ${JSON.stringify(u)}`)}catch(s){Jr.warn?.("Error getting DB size metrics",s)}}function Wk(e,t){for(let[r,n]of Object.entries(t))try{let[s]=Object.values(n),i=s?.getStorageStats();if(!i)return;let a={metric:jo.STORAGE_VOLUME,database:r,...i};bd(e,a),Jr.trace?.(`db ${r} storage volume metrics: ${JSON.stringify(a)}`)}catch(s){Jr.warn?.("Error getting DB volume metrics",s)}}async function mae(e,t=6e4){let r=cw(),n=dq(),s=new Promise(R=>{let N=performance.now();setImmediate(()=>{let C=performance.now();C-N>5e3&&Jr.warn?.("Unusually high event queue latency on the main thread of "+Math.round(C-N)+"ms"),N=performance.now()}),n.primaryStore.prefetch([1],()=>{let C=performance.now();C-N>5e3&&Jr.warn?.("Unusually high task queue latency on the main thread of "+Math.round(C-N)+"ms"),R(C-N)})}),i;for(let R of n.primaryStore.getRange({start:1/0,end:!1,reverse:!0}))if(R.value?.time){i=R.value.time;break}if(Date.now()-t<i)return;let a,c=new Map,l=new Map,u=[],d;for(let{key:R,value:N}of r.primaryStore.getRange({start:i||!1,exclusiveStart:!0,end:1/0})){if(!N)continue;if(a){if(R>a+t)break}else a=R;d=R;let{metrics:C,threadId:k}=N;for(let te of C||[]){let{path:q,method:Y,type:$,metric:W,count:ce,total:le,distribution:ie,threads:he,...Ne}=te;ce||(ce=1);let Ue=W+(q?"-"+q:"");Y!==void 0&&(Ue+="-"+Y),$!==void 0&&(Ue+="-"+$);let xe=c.get(Ue);if(xe){if(xe.threads){let Xt=xe.threads[k];if(Xt)xe=Xt;else{xe.threads[k]={...Ne};continue}}xe.count||(xe.count=1);let yr=xe.count;for(let Xt in Ne){let kt=Ne[Xt];typeof kt=="number"&&(xe[Xt]=(xe[Xt]*yr+kt*ce)/(yr+ce))}xe.count+=ce,le>=0&&(xe.total+=le,xe.ratio=xe.total/xe.count)}else xe={period:t,...te},delete xe.distribution,c.set(Ue,xe),xe.byThread&&(xe.threads=[],xe.threads[k]={...Ne},u.push(xe));if(ie){ie=ie.map(Xt=>typeof Xt=="number"?{value:Xt,count:1}:Xt);let yr=l.get(Ue);yr?yr.push(...ie):l.set(Ue,ie)}}await uq()}for(let R of u){let{path:N,method:C,type:k,metric:te,count:q,total:Y,distribution:$,threads:W,...ce}=R;W=W.filter(le=>le);for(let le in ce){if(typeof R[le]!="number")continue;let ie=0;for(let he of W){let Ne=he[le];typeof Ne=="number"&&(ie+=Ne)}R[le]=ie}R.count=W.length,delete R.threads,delete R.byThread}for(let[R,N]of l){let C=c.get(R);N.sort((Xt,kt)=>Xt.value>kt.value?1:-1);let k=C.count-1,te=[],q=0,Y=0,$;for(let Xt of aq){let kt=k*Xt;for(;q<kt;)$=N[Y++],q+=$.count,Y===1&&q--;let Zt=N[Y>1?Y-2:0];$||($=N[0]),te.push($.value-($.value-Zt.value)*(q-kt)/$.count)}let[W,ce,le,ie,he,Ne,Ue,xe,yr]=te;Object.assign(C,{p1:W,p10:ce,p25:le,median:ie,p75:he,p90:Ne,p95:Ue,p99:xe,p999:yr})}let f;for(let[,R]of c)R.time=d,bd(n,R),f=!0;let m=Date.now(),{idle:h,active:p}=performance.eventLoopUtilization();if(f||p*10>h){let R={metric:jo.MAIN_THREAD_UTILIZATION,idle:h-zk,active:p-jk,taskQueueLatency:await s,time:m,...process.memoryUsage()};bd(n,R)}zk=h,jk=p;let E=process.resourceUsage();E.time=m,E.userCPUTime=E.userCPUTime/1e3,E.systemCPUTime=E.systemCPUTime/1e3,Jr.trace?.(`process.resourceUsage: ${JSON.stringify(E)}`);let g=lq(cS,E);Jr.trace?.(`diffed resourceUsage: ${JSON.stringify(g)}`),g.time=m,g.period=cS.time?m-cS.time:t,g.cpuUtilization=cq(g,g.period);let y={metric:jo.RESOURCE_USAGE,...g};bd(n,y),cS=E;let T=it();Yk(n,T),Yk(n,{system:T.system}),Wk(n,T),Wk(n,{system:T.system})}async function Jk(e,t){let r=Date.now()-t;for(let n of e.primaryStore.getKeys({start:!1,end:r}))e.primaryStore.remove(n)}function cw(){return Qk||(Qk=Je({table:"hdb_raw_analytics",database:"system",audit:!1,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"action"},{name:"metrics"}]}))}function dq(){return Xk||(Xk=Je({table:"hdb_analytics",database:"system",audit:!0,trackDeletes:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"metric"},{name:"path"},{name:"method"},{name:"type"}]}))}function _ae(){fq=!0;let e=(0,Hh.get)(U.ANALYTICS_AGGREGATEPERIOD)*1e3;e&&setInterval(async()=>{await mae(sq,e),await Jk(cw(),hae),await Jk(dq(),pae)},Math.min(e/2,2147483647)).unref()}function mq(e,t){let r=e.report;r.threadId=t?.threadId||Hl.threadId;for(let n of r.metrics)n.metric==="bytes-sent"&&(Zk+=n.mean*n.count);r.totalBytesProcessed=Zk,t&&(r.metrics.push({metric:jo.UTILIZATION,...t.performance.eventLoopUtilization(eq.get(t))}),eq.set(t,t.performance.eventLoopUtilization())),r.id=(0,ow.getNextMonotonicTime)(),cw().primaryStore.put(r.id,r),fq||_ae(),Eae&&(hq=Sae(r))}async function Sae(e){if(await hq,!ac){let r=(0,Fh.dirname)((0,dS.getLogFilePath)());try{ac=await(0,iw.open)((0,Fh.join)(r,"analytics.log"),"r+")}catch{ac=await(0,iw.open)((0,Fh.join)(r,"analytics.log"),"w+")}}let t=(await ac.stat()).size;if(t>gae){let r=Buffer.alloc(t);await ac.read(r,{position:0}),r=r.subarray(r.indexOf(10,r.length/2)+1),await ac.write(r,{position:0}),await ac.truncate(r.length),t=r.length}await ac.write(JSON.stringify(e)+`
-`,t)}var Hl,tq,dS,Fh,iw,ow,Hh,rq,Jr,uS,nq,lS,sq,iq,oq,aq,zk,jk,cS,uq,hae,pae,Qk,Xk,fq,Zk,eq,Eae,hq,ac,gae,ao=ue(()=>{Hl=require("worker_threads"),tq=w(st());De();dS=w(j()),Fh=require("path"),iw=require("fs/promises"),ow=w(Dn()),Hh=w(oe());F();Ur();rq=w(require("node:fs"));nw();sw();Jr=(0,dS.forComponent)("analytics").conditional;(0,Hh.initSync)();uS=new Map,nq=(0,Hh.get)(U.ANALYTICS_AGGREGATEPERIOD)>-1;o(cae,"setAnalyticsEnabled");o(lae,"recordExistingAction");o(uae,"recordNewAction");o(ot,"recordAction");Le.recordAnalytics=ot;o(Qr,"recordActionBinary");lS=0,sq=1e3,iq="analytics-report",oq=[];o(kh,"addAnalyticsListener");aq=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];o(dae,"sendAnalytics");o(aw,"recordHostname");o(bd,"storeMetric");o(cq,"calculateCPUUtilization");o(lq,"diffResourceUsage");o(fae,"storeTableSizeMetrics");o(Yk,"storeDBSizeMetrics");o(Wk,"storeVolumeMetrics");o(mae,"aggregation");zk=0,jk=0,cS={userCPUTime:0,systemCPUTime:0},uq=o(()=>new Promise(setImmediate),"rest");o(Jk,"cleanup");hae=36e5,pae=31536e6;o(cw,"getRawAnalyticsTable");o(dq,"getAnalyticsTable");(0,tq.setChildListenerByType)(iq,mq);o(_ae,"startScheduledTasks");Zk=0,eq=new Map,Eae=!1;o(mq,"recordAnalytics");gae=1e6;o(Sae,"logAnalytics")});function qh(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function pq(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new Hs(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var Hs,Gh=ue(()=>{Hs=class extends Map{static{o(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let a=i[1];if(n)r=(typeof a=="string"?a:a.join(", "))+", "+r;else if(typeof a=="string")r=[a,r];else{a.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};o(qh,"appendHeader");o(pq,"mergeHeaders")});function mS(e,t,r=Rae){let n;return function(...i){return n?n.length*lw>r?t(...i):new Promise((a,c)=>{n.push({args:i,fn(){try{let l=e(...i);a(l)}catch(l){c(l)}}})}):(n=[],s(performance.now(),i),e(...i))};function s(i,a){setImmediate(()=>{let c=performance.now();lw=(lw*4+c-i)/5;let l=n.shift();if(l){let{args:u,fn:d}=l;d(),s(c,u)}else n=null})}}var gq,Tae,Rae,_q,yae,uw,Eq,lw,dw=ue(()=>{gq=w(hi()),Tae=3e3,Rae=2e4,_q=0,yae=3e4,uw=3e3,Eq=performance.now()+uw,lw=0;o(mS,"throttle");setInterval(()=>{let e=performance.now();e-Eq-uw>Tae&&_q+yae<e&&(gq.default.warn?.("JavaScript execution has taken too long and is not allowing proper event queue cycling, consider using 'await new Promise(setImmediate)' in code that will execute for a long duration"),_q=e),Eq=e},uw).unref()});var Oq={};Oe(Oq,{EVICTED:()=>Ja,INVALIDATED:()=>vn,coerceType:()=>pS,makeTable:()=>ES});function ES(e){let{primaryKey:t,indices:r,tableId:n,tableName:s,primaryStore:i,databasePath:a,databaseName:c,auditStore:l,schemaDefined:u,dbisDB:d,sealed:f,splitSegments:m,replicate:h}=e,{expirationMS:p,evictionMS:E,audit:g,trackDeletes:y}=e;E??=0;let{attributes:T}=e;T||(T=[]);let R=kb(i,n,l),N,C,k={},te=Promise.resolve(),q,Y,$;for(let V of T)(V.assignCreatedTime||V.name==="__createdtime__")&&(q=V),(V.assignUpdatedTime||V.name==="__updatedtime__")&&(Y=V),V.expiresAt&&($=V),V.isPrimaryKey&&(k=V);let W,ce=[],le=[],ie=1,he=2,Ne={},Ue={},xe=864e5,yr=0,Xt,kt,Zt,dm=!1,Qc,qt,fm,mm=ql.get(U.REPLICATION_DATABASES);if(Array.isArray(mm)){for(let V of mm)if(V.name===c&&V.replicateTo>=0){fm=V.replicateTo;break}}let aE=i.getRange({start:!1,end:!1}).constructor,cE=10,CA=6;g&&Em(),Km(i.env.path,V=>{if(C)return Ha(V)});class hm extends Nl{static{o(this,"Updatable")}getUpdatedTime(){return za.get(this.getRecord())?.version}getExpiresAt(){return za.get(this.getRecord())?.expiresAt}addTo(_,S){if(typeof S=="number"||typeof S=="bigint")this.set(_,new yh(S));else throw new Error("Can not add or subtract a non-numeric value")}subtractFrom(_,S){return this.addTo(_,-S)}}class Pe extends Br{#e;#t;#r;#n;#s;#i;static name=s;static primaryStore=i;static auditStore=l;static primaryKey=t;static tableName=s;static tableId=n;static indices=r;static audit=g;static databasePath=a;static databaseName=c;static attributes=T;static replicate=h;static sealed=f;static splitSegments=m??!0;static createdTimeProperty=q;static updatedTimeProperty=Y;static propertyResolvers;static userResolvers={};static sources=[];static getResidencyById;static get expirationMS(){return p}static dbisDB=d;static schemaDefined=u;static sourcedFrom(_,S){if(S&&(this.sourceOptions=S,(S.expiration||S.eviction||S.scanInterval)&&this.setTTLExpiration(S)),S?.intermediateSource)_.intermediateSource=!0,this.sources.unshift(_);else{if(this.sources.some(O=>!O.intermediateSource)){if(this.sources.some(O=>O.name===_.name))return;throw new Error("Can not have multiple canonical (non-intermediate) sources")}this.sources.push(_)}C=C||_.get&&(!_.get.reliesOnPrototype||_.prototype.get),N=N||_.load;let A=o(O=>{let L=this.sources;if(L=L.filter(H=>H.intermediateSource&&H[O]&&(!H[O].reliesOnPrototype||H.prototype[O])),L.length>0)if(L.length===1){let H=L[0];return(D,x,z)=>{if(D?.source!==H)return H[O](x,z,D)}}else return(H,D,x)=>{let z=[];for(let ne of L){if(H?.source===ne)break;z.push(ne[O](D,x,H))}return Promise.all(z)}},"getApplyToIntermediateSource"),b=this.sources[this.sources.length-1];b.intermediateSource&&(b={});let I=o(O=>{if(b[O]&&(!b[O].reliesOnPrototype||b.prototype[O]))return(L,H,D)=>{if(!L?.source)return b[O](H,D,L)}},"getApplyToCanonicalSource");Ne={put:I("put"),patch:I("patch"),delete:I("delete"),publish:I("publish")},Ue={put:A("put"),patch:A("patch"),delete:A("delete"),publish:A("publish"),invalidate:A("invalidate")};let P=b.shouldRevalidateEvents;return(async()=>{let O=!1,L,H=o(async(D,x)=>{let z=D.value,ne=D.table?ke[c][D.table]:Pe;if(c===ym&&(D.table===qu.ROLE_TABLE_NAME||D.table===qu.USER_TABLE_NAME)&&(O=!0),D.id===void 0&&(D.id=z[ne.primaryKey],D.id===void 0))throw new Error("Replication message without an id "+JSON.stringify(D));D.source=_;let re={residencyId:el(D.residencyList),isNotification:!0,ensureLoaded:!1,nodeId:D.nodeId,async:!0},B=D.id,de=await ne.getResource(B,x,re);switch(D.finished&&await D.finished,D.type){case"put":return P?de._writeInvalidate(B,z,re):de._writeUpdate(B,z,!0,re);case"patch":return P?de._writeInvalidate(B,z,re):de._writeUpdate(B,z,!1,re);case"delete":return de._writeDelete(B,re);case"publish":case"message":return de._writePublish(B,z,re);case"invalidate":return de._writeInvalidate(B,z,re);case"relocate":return de._writeRelocate(B,re);default:Me.default.error?.("Unknown operation",D.type,D.id)}},"writeUpdate");try{let D=_.subscribe;D&&y==null&&(y=!0);let x={crossThreads:!1,inTransactionUpdates:!0,supportsTransactions:!0,omitCurrent:!0},z=_.subscribeOnThisThread?_.subscribeOnThisThread((0,kl.getWorkerIndex)(),x):(0,kl.getWorkerIndex)()===0,ne=D&&z&&await _.subscribe?.(x);if(ne){let re;for await(let B of ne)try{if(!(B.type==="transaction"?B.writes[0]:B)){Me.default.error?.("Bad subscription event",B);continue}if(B.source=_,B.type==="end_txn"){if(re?.resolve(),B.localTime&&L!==B.localTime){if(B.remoteNodeIds?.length>0){let me=[Symbol.for("seq"),B.remoteNodeIds[0]],Z=d.get(me),J=Z?.nodes;J||(J=[]);for(let Ee of B.remoteNodeIds.slice(1)){let pe=J.find(mt=>mt.id===Ee);J=J.filter(mt=>mt.id!==Ee||mt===pe),pe||(pe={id:Ee,seqId:0},J.push(pe)),pe.seqId=Math.max(Z?.seqId??1,B.localTime),Ee===re?.nodeId&&(pe.lastTxnTime=B.timestamp)}let Te=Math.max(Z?.seqId??1,B.localTime);Me.default.trace?.("Received txn",c,Te,new Date(Te),B.localTime,new Date(B.localTime),B.remoteNodeIds),d.put(me,{seqId:Te,nodes:J})}L=B.localTime}B.onCommit&&re?.committed.then(B.onCommit);continue}if(re)if(B.beginTxn)re.resolve();else{re.write_promises.push(H(B,re));continue}!B.timestamp&&B.version&&(B.timestamp=B.version);let fe=Ut(B,()=>{if(B.type==="transaction"){let me=[];for(let Z of B.writes)try{me.push(H(Z,B))}catch(J){throw J.message+=" writing "+JSON.stringify(Z)+" of event "+JSON.stringify(B),J}return Promise.all(me)}else if(B.type==="define_schema"){let me=this.attributes.slice(0),Z=!1;for(let J of B.attributes)me.find(Te=>Te.name===J.name)||(me.push(J),Z=!0);Z&&(Je({table:s,database:c,attributes:me,origin:"cluster"}),Vh.signalSchemaChange(new Kh.SchemaEventMsg(process.pid,G.CREATE_TABLE,c,s)))}else return B.beginTxn?(re=B,re.write_promises=[H(B,B)],new Promise(me=>{re.resolve=()=>me(Promise.all(re.write_promises))})):H(B,B)});re&&(re.committed=fe),O&&fe&&!fe?.waitingForUserChange&&(fe.then(()=>Vh.signalUserChange(new Kh.UserEventMsg(process.pid))),fe.waitingForUserChange=!0),B.onCommit&&(fe?fe.then(B.onCommit):B.onCommit())}catch(de){Me.default.error?.("error in subscription handler",de)}}}catch(D){Me.default.error?.(D)}})(),this}static get isCaching(){return C}static get shouldRevalidateEvents(){return this.prototype.get!==Pe.prototype.get}static getResource(_,S,A){let b=super.getResource(_,S,A);if(this.loadAsInstance===!1&&(S._freezeRecords=!0),_!=null&&this.loadAsInstance!==!1){Mr(_);try{if(b.getRecord?.())return b;if(typeof _=="object"&&_&&!Array.isArray(_))throw new Error(`Invalid id ${JSON.stringify(_)}`);let I=!A?.async||i.cache?.get?.(_),P=vr(S),O=P.getReadTxn();if(O?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");return Ua(_,S,{transaction:O,ensureLoaded:A?.ensureLoaded},I,L=>{if(L?Pe._updateResource(b,L):b.#e=null,S.onlyIfCached){if(!b.doesExist())throw new at.ServerError("Entry is not cached",504)}else if(A?.ensureLoaded){let H=Xc(_,L,S,b);if(H)return P?.disregardReadTxn(),b.#i=!0,S.loadedFromSource=!0,ks(H,D=>(Pe._updateResource(b,D),b))}return b})}catch(I){throw I.message.includes("Unable to serialize object")&&(I.message+=": "+JSON.stringify(_)),I}}return b}static _updateResource(_,S){_.#n=S,_.#e=S?.value??null,_.#r=S?.version}ensureLoaded(){let _=Xc(this.getId(),this.#n,this.getContext());if(_)return this.#i=!0,this.getContext().loadedFromSource=!0,ks(_,S=>{this.#n=S,this.#e=S.value,this.#r=S.version})}static getNewId(){let _=k?.type;if(_==="String"||_==="ID")return super.getNewId();if(!qt){let I=i.getEntry(Symbol.for("id_allocation")),P=I?.value,O;if(P&&P.nodeName===server.hostname&&(!Mae(i)||P.pid===process.pid)){let L=P.start,H=P.end;O=L;for(let D of i.getKeys({start:H,end:L,limit:1,reverse:!0}))O=D}else P=b(I?.version??null),O=P.start;qt=new BigInt64Array([BigInt(O)+1n]),qt=new BigInt64Array(i.getUserSharedBuffer("id",qt.buffer)),qt.maxSafeId=P.end}let S=Number(Atomics.add(qt,0,1n)),A=_==="Int"?512:1048576;if(S+A>=qt.maxSafeId){let I=o(P=>{qt.maxSafeId=S+(_==="Int"?1023:4194303);let O=(_==="Int"?Math.pow(2,31):Math.pow(2,49))-1,L=P?void 0:i.useReadTransaction(),H=Number(qt[0]);for(let z of i.getKeys({start:H+1,end:O,limit:1,transaction:L}))O=z;L?.done();let{value:D,version:x}=i.getEntry(Symbol.for("id_allocation"));if(qt.maxSafeId<O){if(D.end>qt.maxSafeId-100)return;Me.default.info?.("New id allocation",S,qt.maxSafeId,x),i.put(Symbol.for("id_allocation"),{start:D.start,end:qt.maxSafeId,nodeName:server.hostname,pid:process.pid},Date.now(),x)}else{Me.default.warn?.(`Id conflict detected, starting new id allocation range, attempting to allocate to ${qt.maxSafeId}, but id of ${O} detected`);let z=b(x);z.alreadyUpdated||Atomics.store(qt,0,BigInt(z.start+1)),qt.maxSafeId=z.end}},"updateEnd");S+A===qt.maxSafeId?setImmediate(I):S+100>=qt.maxSafeId&&(Me.default.warn?.(`Synchronous id allocation required on table ${s}${_=="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`),i.transactionSync(()=>I(!0)))}return S;function b(I){let P=(_==="Int"?Math.pow(2,31):Math.pow(2,49))-1,O=P/4,L,H,D=!1,x,z;do{x=Math.floor(Math.random()*P),z={start:x,end:x+(_==="Int"?1024:4194304),nodeName:server.hostname,pid:process.pid},L=0;for(let ne of i.getKeys({start:x,limit:1,reverse:!0}))L=ne;H=P;for(let ne of i.getKeys({start:x+1,end:P,limit:1}))H=ne;O*=.875,O<1e3&&!D&&(D=!0,Me.default.error?.(`Id allocation in table ${s} is very dense, limited safe range of numbers to allocate ids in${_==="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`,x,L,H,O))}while(!(O<H-x&&(O<x-L||L===0)));return i.transactionSync(()=>{let ne=i.getEntry(Symbol.for("id_allocation"));return(ne?.version??null)==I?(Me.default.info?.("Allocated new id range",z),i.put(Symbol.for("id_allocation"),z,Date.now()),z):(Me.default.debug?.("Looks like ids were already allocated"),{alreadyUpdated:!0,...ne.value})})}}static setTTLExpiration(_){if(typeof _=="number")p=_*1e3,E||(E=0);else if(_&&typeof _=="object")p=_.expiration*1e3,E=(_.eviction||0)*1e3,xe=_.scanInterval*1e3;else throw new Error("Invalid expiration value type");if(p<0)throw new Error("Expiration can not be negative");xe=xe||(p+E)/4,Ha()}static getResidencyRecord(_){return d.get([Symbol.for("residency_by_id"),_])}static setResidency(_){Pe.getResidency=_&&((S,A)=>{try{return _(S,A)}catch(b){throw b.message+=` in residency function for table ${s}`,b}})}static setResidencyById(_){Pe.getResidencyById=_&&(S=>{try{return _(S)}catch(A){throw A.message+=` in residency function for table ${s}`,A}})}static getResidency(_,S){if(Pe.getResidencyById)return Pe.getResidencyById(_[t]);let A=fm;if(S.replicateTo!=null){if(Array.isArray(S.replicateTo))return S.replicateTo.includes(server.hostname)?S.replicateTo:[server.hostname,...S.replicateTo];S.replicateTo>=0&&(A=S.replicateTo)}if(A>=0&&server.nodes){let b=[server.hostname];if(S.previousResidency)b.push(...S.previousResidency.slice(0,A));else{let I=server.nodes.map(L=>L.name),P=Math.floor(I.length*Math.random());b.push(...I.slice(P,P+A));let O=P+A-I.length;O>0&&b.push(...I.slice(0,O))}return b}}static enableAuditing(_=!0){g=_,_&&Em(),Pe.audit=_}static coerceId(_){return _===""?null:pS(_,k)}static async dropTable(){delete ke[c][s];for(let _ of i.getRange({versions:!0,snapshot:!1,lazy:!0}))_.metadataFlags&Wr&&_.value&&Ya(_.value);if(c===a){for(let _ of T)d.remove(Pe.tableName+"/"+_.name),r[_.name]?.drop();d.remove(Pe.tableName+"/"),i.drop(),await d.committed}else console.log("legacy dropTable"),await i.close(),mw.default.unlinkSync(i.env.path);Vh.signalSchemaChange(new Kh.SchemaEventMsg(process.pid,G.DROP_TABLE,c,s))}get(_){let S=this.constructor;if(typeof _=="string"&&S.loadAsInstance!==!1)return this.getProperty(_);if(_m(_))return this.search(_);if(_&&_.id===void 0&&!_.toString()){let A={records:"./",name:s,database:c,auditSize:l?.getStats().entryCount,attributes:T,recordCount:void 0,estimatedRecordRange:void 0};return this.getContext()?.includeExpensiveRecordCountEstimates?Pe.getRecordCount().then(b=>(A.recordCount=b.recordCount,A.estimatedRecordRange=b.estimatedRange,A)):A}if(_!==void 0&&S.loadAsInstance===!1){let A=this.getContext(),b=vr(A),I=b.getReadTxn();if(I?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");let P=Ar(_);Mr(P);let O=!0;return _.checkPermission&&(O=this.allowRead(A.user,_)),ks(ks(O,L=>{if(!L)throw new at.AccessViolation(A.user);let H=!0;return Ua(P,A,{transaction:I,ensureLoaded:H},!1,D=>{if(A.onlyIfCached){if(!D?.value)throw new at.ServerError("Entry is not cached",504)}else if(H){let x=Xc(P,D,A);if(x)return b?.disregardReadTxn(),A.loadedFromSource=!0,x.then(z=>z?.value)}return D?.value})}),L=>{let H=_?.select;return H&&L!=null?id(H,this.constructor)(L):L})}if(_?.property)return this.getProperty(_.property);if(this.doesExist()||_?.ensureLoaded===!1||this.getContext()?.returnNonexistent)return this}allowRead(_,S){let A=xa(_,S);if(A?.read){if(A.isSuperUser)return!0;let b=A.attribute_permissions,I=S?.select;if(b?.length>0||dm&&I){if(S||(S={}),I){let P=b?.length>0&&fw(b,"read");S.select=I.map(O=>{let L=O.name||O;if(!P||P[L]){let H=Zt[L]?.definition?.tableClass;if(H){if(O.name||(O={name:O}),!O.checkPermission&&S.checkPermission&&(O.checkPermission=S.checkPermission),!H.prototype.allowRead.call(null,_,O))return!1;if(!O.select)return O.name}return O}}).filter(Boolean)}else S.select=b.filter(P=>P.read&&!Zt[P.attribute_name]).map(P=>P.attribute_name);return S}else return!0}}allowUpdate(_,S,A){let b=xa(_,A);if(b?.update){let I=b.attribute_permissions;if(I?.length>0){let P=fw(I,"update");for(let O in S)if(!P[O])return!1;for(let O of I){let L=O.attribute_name;!O.update&&!(L in S)&&(S[L]=this.getProperty(L))}}return Fa(this.getContext())}}allowCreate(_,S,A){if(this.isCollection){let b=xa(_,A);if(b?.insert){let I=b.attribute_permissions;if(I?.length>0){let P=fw(I,"insert");for(let O in S)if(!P[O])return!1;return Fa(this.getContext())}else return Fa(this.getContext())}}else return this.allowUpdate(_,{})}allowDelete(_,S){return xa(_,S)?.delete&&Fa(this.getContext())}update(_,S){let A,b=typeof S=="boolean"||S===void 0&&(_==null||typeof _=="object"&&!(_ instanceof URLSearchParams)),I=!1;b?(I=S,S=_,A=this.getId()):A=Ar(_);let P=this.getContext();if(!vr(P))throw new Error("Can not update a table resource outside of a transaction");if(S===!1)return this;if(typeof S=="object"&&S)if(I)Object.isFrozen(S)&&(S={...S}),this.#e={},this.#t=S;else if(b){let L=this.#t;L&&(S=Object.assign(L,S)),this.#t=S}else{let L=!0;if(_==null)throw new TypeError("Can not put a record without a target");return _.checkPermission&&(L=this.allowUpdate(P.user,S,_)),ks(L,H=>{if(!H)throw new at.AccessViolation(P.user);return ks(i.get(Ar(_)),D=>{let x=new hm(D);return x._setChanges(S),this._writeUpdate(A,x.getChanges(),!1),x})})}return this._writeUpdate(A,this.#t,I),this}addTo(_,S){if(typeof S=="number"||typeof S=="bigint")this.#s===Tq?this.set(_,(+this.getProperty(_)||0)+S):(this.#s||this.update(),this.set(_,new yh(S)));else throw new Error("Can not add a non-numeric value")}subtractFrom(_,S){if(typeof S=="number")return this.addTo(_,-S);throw new Error("Can not subtract a non-numeric value")}getMetadata(){return this.#n}getRecord(){return this.#e}getChanges(){return this.#t}_setChanges(_){this.#t=_}setRecord(_){this.#e=_}invalidate(_){let S=!0,A=this.getContext();return _?.checkPermission&&(S=this.allowDelete(A.user,_,A)),ks(S,b=>{if(!b)throw new at.AccessViolation(A.user);this._writeInvalidate(_?Ar(_):this.getId())})}_writeInvalidate(_,S,A){let b=this.getContext();Mr(_),vr(this.getContext()).addWrite({key:_,store:i,invalidated:!0,entry:this.#n,before:Ne.invalidate?.bind(this,b,_),beforeIntermediate:ka(S,Ue.invalidate?.bind(this,b,_)),commit:o((P,O)=>{if(!(Ba(P,O,A?.nodeId)<=0)){S??=null;for(let L in r)S||(S={}),S[L]===void 0&&(S[L]=this.getProperty(L));Me.default.trace?.(`Invalidating entry in ${s} id: ${_}, timestamp: ${new Date(P).toISOString()}`),R(_,S,O,P,vn,g,{user:b?.user,residencyId:A?.residencyId,nodeId:A?.nodeId},"invalidate")}},"commit")})}_writeRelocate(_,S){let A=this.getContext();Mr(_),vr(this.getContext()).addWrite({key:_,store:i,invalidated:!0,entry:this.#n,before:Ne.relocate?.bind(this,A,_),beforeIntermediate:Ue.relocate?.bind(this,A,_),commit:o((I,P)=>{if(Ba(I,P,S?.nodeId)<=0)return;let O=Pe.getResidencyRecord(S.residencyId),L=0,H=null,D=P?.value;if(O&&!O.includes(server.hostname)){for(let x in r)H||(H={}),H[x]=D[x];L=vn}else H=D;Me.default.trace?.(`Relocating entry id: ${_}, timestamp: ${new Date(I).toISOString()}`),R(_,H,P,I,L,g,{user:A.user,residencyId:S.residencyId,nodeId:S.nodeId,expiresAt:S.expiresAt},"relocate",!1,null)},"commit")})}static _recordRelocate(_,S){let A={previousResidency:this.getResidencyRecord(_.residencyId),isRelocation:!0},b=Zc(this.getResidency(S.value,A)),I;if(b){if(!b.includes(server.hostname))return!1;I=el(b)}let P=0;Me.default.debug?.("Performing a relocate of an entry",existing_entry.key,S.value,b);let O=R(_.key,S.value,_,_.version,P,!0,{residencyId:I,expiresAt:S.expiresAt},"relocate",!1,null);return!0}static evict(_,S,A){let b=this.Source,I;if(!((C||g)&&(!S||(I=i.getEntry(_),!I||!S)||I.version!==A))){if(C){if(i.hasLock(_,I.version))return;let P;for(let O in r)P||(P={}),P[O]=S[O];if(P)return R(_,P,I,A,Ja,null,null,null,!0)}if(i.ifVersion(_,A,()=>{Po(_,S,null)}),g)return R(_,null,I,A,Ja,null,null,null,!0);_l(i,I??i.getEntry(_),A)}}lock(){throw new Error("Not yet implemented")}static operation(_,S){return _.table||=s,_.schema||=c,global.operation(_,S)}put(_,S){if(S===void 0||S instanceof URLSearchParams)this.update(_,!0);else{let A=!0;if(_==null)throw new TypeError("Can not put a record without a target");let b=this.getContext();return _.checkPermission&&(A=this.allowUpdate(b.user,S,_)),ks(A,I=>{if(!I)throw new at.AccessViolation(b.user);if(Array.isArray(S))for(let P of S){let O=P[t];this._writeUpdate(O,P,!0)}else{let P=Ar(_);this._writeUpdate(P,S,!0)}})}}create(_,S){let A=!0,b=this.getContext();if(!S&&!(_ instanceof URLSearchParams)&&(S=_,_=void 0),!S||typeof S!="object"||Array.isArray(S))throw new TypeError("Can not create a record without an object");return _?.checkPermission&&(A=this.allowCreate(b.user,S,_)),ks(A,I=>{if(!I)throw new at.AccessViolation(b.user);let P=Ar(_)??S[t];if(P===void 0)P=this.constructor.getNewId();else if(i.get(P))throw new at.ClientError("Record already exists",409);return this._writeUpdate(P,S,!0),S})}patch(_,S){if(S===void 0||S instanceof URLSearchParams)this.update(_,!1);else{let A=this.update(_,S);if(A?.then)return A.then(()=>{})}}_writeUpdate(_,S,A,b){let I=this.getContext(),P=vr(I);Mr(_);let O=this.#n??i.getEntry(_);this.#s=A?Tq:Cae;let L=o(D=>A?D.put?()=>D.put(I,_,S):null:D.patch?()=>D.patch(I,_,S):D.put?()=>D.put(I,_,wl(this)):null,"writeToSources"),H={key:_,store:i,entry:O,nodeName:I?.nodeName,validate:o(D=>{S||(S=this.#t),A||S&&xg(this.#t===S?this:S)?I?.source||(P.checkOverloaded(),this.validate(S,!A),Y&&(S[Y.name]=Y.type==="Date"?new Date(D):Y.type==="String"?new Date(D).toISOString():D),A&&(t&&S[t]!==_&&(S[t]=_),q&&(O?.value?S[q.name]=O?.value[q.name]:S[q.name]=q.type==="Date"?new Date(D):q.type==="String"?new Date(D).toISOString():D),S=wl(S))):P.removeWrite(H)},"validate"),before:L(Ne),beforeIntermediate:ka(S,L(Ue)),commit:o((D,x,z)=>{if(z){if(I&&x?.version>(I.lastModified||0)&&(I.lastModified=x.version),this.#n=x,x?.value&&x.value.getRecord)throw new Error("Can not assign a record to a record, check for circular references");A||(this.#e=x?.value??null)}this.#t=void 0,this.#r=D;let ne=x?.value,re=S;this.#s=0;let B=!1,de=Ba(D,x,b?.nodeId),fe;if(de<=0){if(g){let Ee=x.localTime,pe=x.version;Me.default.trace?.("Applying CRDT update to record with id: ",_,"txn time",new Date(D),"applying later update from:",new Date(pe),"local recorded time",new Date(Ee));let mt=[];for(;Ee>D||pe>=D&&Ee>0;){let et=l.get(Ee);if(!et)break;let tt=bt(et);if(pe=tt.version,pe>=D){if(pe===D){if(de=Ba(D,{version:pe,localTime:Ee},b?.nodeId),de===0)return;if(de>0)continue}if(tt.type==="patch")mt.push(tt),fe=S;else if(tt.type==="put"||tt.type==="delete")return}Ee=tt.previousLocalTime}Ee||Me.default.debug?.("No further audit history, applying incremental updates based on available history",_,"existing version preserved",x),mt.sort((et,tt)=>et.version-tt.version);for(let et of mt){let tt=et.getValue(i);if(Me.default.debug?.("Rebuilding update with future patch:",new Date(et.version),tt,et),re=LE(re,tt,A),!re)return}}else{if(A)return;re=LE(re,ne,A),Me.default.debug?.("Rebuilding update without audit:",re)}Me.default.trace?.("Rebuilt record to save:",re," is full update:",A)}let me;if(A?me=re:this.constructor.loadAsInstance===!1?me=wl(ne,re):(this.#e=ne,me=wl(this,re)),this.#e=me,me&&me.getRecord)throw new Error("Can not assign a record to a record, check for circular references");let Z;if(b?.residencyId!=null)Z=b.residencyId;else{O?.residencyId&&(I.previousResidency=Pe.getResidencyRecord(O.residencyId));let Ee=Zc(Pe.getResidency(me,I));if(Ee&&!Ee.includes(server.hostname))if(fe??=me,B=!0,Pe.getResidencyById)me=void 0;else{me=null;for(let pe in r)me||(me={}),me[pe]=fe[pe]}Z=el(Ee)}A||(fe=S);let J=I?.expiresAt??(p?p+Date.now():-1);Me.default.trace?.(`Saving record with id: ${_}, timestamp: ${new Date(D).toISOString()}${J?", expires at: "+new Date(J).toISOString():""}${x?", replaces entry from: "+new Date(x.version).toISOString():", new entry"}`,(()=>{try{return JSON.stringify(me).slice(0,100)}catch{return""}})()),Po(_,ne,me);let Te=A?"put":"patch";R(_,me,x,D,B?vn:0,g,{omitLocalRecord:B,user:I?.user,residencyId:Z,expiresAt:J,nodeId:b?.nodeId,originatingOperation:I?.originatingOperation},Te,!1,fe),I.expiresAt&&Ha()},"commit")};P.addWrite(H)}async delete(_){if(_m(_)){_.select=["$id"];for await(let S of this.search(_))this._writeDelete(S.$id);return!0}if(_){let S=!0,A=this.getContext();return _.checkPermission&&(S=this.allowDelete(A.user,_,A)),ks(S,b=>{if(!b)throw new at.AccessViolation(A.user);let I=Ar(_);return this._writeDelete(I),!0})}return this._writeDelete(this.getId()),!!this.#e}_writeDelete(_,S){let A=vr(this.getContext());Mr(_);let b=this.getContext();return A.addWrite({key:_,store:i,entry:this.#n,nodeName:b?.nodeName,before:Ne.delete?.bind(this,b,_),beforeIntermediate:Ue.delete?.bind(this,b,_),commit:o((I,P,O)=>{let L=P?.value;O&&(b&&P?.version>(b.lastModified||0)&&(b.lastModified=P.version),Pe._updateResource(this,P)),!(Ba(I,P,S?.nodeId)<=0)&&(Po(this.getId(),L),Me.default.trace?.(`Deleting record with id: ${_}, txn timestamp: ${new Date(I).toISOString()}`),g||y?(R(_,null,P,I,0,g,{user:b?.user,nodeId:S?.nodeId},"delete"),g||Ha()):_l(i,P))},"commit")}),!0}search(_){let S=this.getContext(),A=vr(S);if(!_)throw new Error("No query provided");if(_.parseError)throw _.parseError;if(_.checkPermission&&!this.allowRead(S.user,_))throw new at.AccessViolation(S.user);let b=_.conditions;b?b.length===void 0&&(b=b[Symbol.iterator]?Array.from(b):[b]):b=Array.isArray(_)?_:_[Symbol.iterator]?Array.from(_):[];let I=_.id??this.getId();I&&(b=[{attribute:null,comparator:Array.isArray(I)?"prefix":"starts_with",value:I}].concat(b));let P,O={};function L(J,Te){let Ee;switch(Te){case"and":case void 0:if(J.length<1)throw new Error('An "and" operator requires at least one condition');Ee=!0;break;case"or":if(J.length<2)throw new Error('An "or" operator requires at least two conditions');break;default:throw new Error("Invalid operator "+Te)}for(let pe of J){if(pe.conditions){pe.conditions=L(pe.conditions,pe.operator);continue}let mt=pe[0]??pe.attribute,et=mt==null?k:Ji(T,mt);if(et)(et.type||Gb[pe.comparator])&&(pe[1]===void 0?pe.value=D(pe.value,et):pe[1]=D(pe[1],et));else if(mt!=null)throw(0,at.handleHDBError)(new Error,`${mt} is not a defined attribute`,404);if(pe.chainedConditions)if(pe.chainedConditions.length===1&&(!pe.operator||pe.operator=="and")){let tt=pe.chainedConditions[0],Se,rt;if(tt.comparator==="gt"||tt.comparator==="greater_than"||tt.comparator==="ge"||tt.comparator==="greater_than_equal"?(Se=pe,rt=tt):(Se=tt,rt=pe),Se.comparator!=="lt"&&Se.comparator!=="less_than"&&Se.comparator!=="le"&&Se.comparator!=="less_than_equal")throw new Error("Invalid chained condition, only less than and greater than conditions can be chained together");let nt=rt.comparator==="ge"||rt.comparator==="greater_than_equal",ur=Se.comparator==="le"||Se.comparator==="less_than_equal";pe.comparator=(nt?"ge":"gt")+(ur?"le":"lt"),pe.value=[rt.value,Se.value]}else throw new Error("Multiple chained conditions are not currently supported")}return J}o(L,"prepareConditions");function H(J,Te){if(_.enforceExecutionOrder)return J;for(let Ee of J)Ee.conditions&&(Ee.conditions=H(Ee.conditions,Ee.operator));return J.length>1&&Te!=="or"?Aae(J,lg(Pe)):J}o(H,"orderConditions");function D(J,Te){return Array.isArray(J)?J.map(Ee=>pS(Ee,Te)):pS(J,Te)}o(D,"coerceTypedValues");let x=_.operator;(b.length>0||x)&&(b=L(b,x));let z=typeof _.sort=="object"&&_.sort,ne;if(z&&x!=="or"){let J=z.attribute;if(J==null)throw new at.ClientError("Sort requires an attribute");if(P=b.find(Te=>rd(Te.attribute)===rd(J)),!P){let Te=Ji(T,J);if(!Te)throw(0,at.handleHDBError)(new Error,`${Array.isArray(J)?J.join("."):J} is not a defined attribute`,404);if(Te.indexed)P={...z,comparator:"sort"},b.push(P);else if(b.length===0&&!_.allowFullScan)throw(0,at.handleHDBError)(new Error,`${Array.isArray(J)?J.join("."):J} is not indexed and not combined with any other conditions`,404)}P&&(P.descending=!!z.descending)}b=H(b,x),z&&(P&&b[0]===P?z.next&&(ne={dbOrderedAttribute:z.attribute,attribute:z.next.attribute,descending:z.next.descending,next:z.next.next}):(P&&b.splice(b.indexOf(P),1),ne=z));let re=_.select;if(b.length===0&&(b=[{attribute:t,comparator:"greater_than",value:!0}]),_.explain)return{conditions:b,operator:x,postOrdering:ne,selectApplied:!!re};let B=A.useReadTxn(),de=$b(b,x,Pe,B,_,S,(J,Te)=>Fu(J,re,S,B,Te),O),fe=_.ensureLoaded!==!1,me=Pe.transformEntryForSelect(re,S,B,O,fe,!0),Z=Pe.transformToOrderedSelect(de,re,ne,S,B,me);return(_.offset||_.limit!==void 0)&&(Z=Z.slice(_.offset,_.limit!==void 0?(_.offset||0)+_.limit:void 0)),Z.onDone=()=>{Z.onDone=null,A.doneReadTxn()},Z.selectApplied=!0,Z.getColumns=()=>{if(re){let J=[];for(let Te of re)Te==="*"?J.push(...T.map(Ee=>Ee.name)):J.push(Te.name||Te);return J}return T.filter(J=>!J.computed&&!J.relationship).map(J=>J.name)},Z}static transformToOrderedSelect(_,S,A,b,I,P){let O=new aE;if(A){_=Fu(_,S,b,I,null);let L;O.iterate=function(){let D,x=_[Symbol.asyncIterator]?_[Symbol.asyncIterator]():_[Symbol.iterator](),z,ne=A.dbOrderedAttribute,re,B,de=!0;function fe(Z){let J=Z.next&&fe(Z.next),Te=Z.descending;return b.sort=Z,(Ee,pe)=>{let mt=Bu(Ee,Z.attribute,b),et=Bu(pe,Z.attribute,b),tt=Te?(0,Gl.compareKeys)(et,mt):(0,Gl.compareKeys)(mt,et);return tt===0?J?.(Ee,pe)||0:tt}}o(fe,"createComparator");let me=fe(A);return{async next(){let Z;if(D)if(Z=D.next(),Z.done){if(z)return O.onDone&&O.onDone(),Z}else return{value:await P.call(this,Z.value)};L=[],re&&L.push(re);do if(Z=await x.next(),Z.done){if(z=!0,L.length)break;return O.onDone&&O.onDone(),Z}else{let J=Z.value;if(J?.then&&(J=await J),ne){let Te=Bu(J,ne,b);if(de)de=!1,B=Te;else if(Te!==B){B=Te,re=J;break}}L.push(J)}while(!0);return A.isGrouped,L.sort(me),D=L[Symbol.iterator](),Z=D.next(),Z.done?(O.onDone&&O.onDone(),Z):{value:await P.call(this,Z.value)}},return(){O.onDone&&O.onDone(),x.return()},throw(){O.onDone&&O.onDone(),x.throw()}}};let H=o(D=>{if(typeof S=="object"&&Array.isArray(D.attribute))for(let x=0;x<S.length;x++){let z=S[x],ne;if(z.name===D.attribute[0]){for(ne=z.sort||(z.sort={});ne.next;)ne=ne.next;ne.attribute=D.attribute.slice(1),ne.descending=D.descending}else z===D.attribute[0]&&(S[x]=ne={name:z,sort:{attribute:D.attribute.slice(1),descending:D.descending}})}D.next&&H(D.next)},"applySortingOnSelect");H(A)}else O.iterate=(_[Symbol.asyncIterator]||_[Symbol.iterator]).bind(_),O=O.map(function(L){try{let H=P.call(this,L);return typeof H?.catch=="function"?H.catch(D=>{throw D.partialObject={[t]:L.key},D}):H}catch(H){throw H.partialObject={[t]:L.key},H}});return O}static transformEntryForSelect(_,S,A,b,I,P){let O;I&&C&&!(typeof _=="string"?[_]:_)?.every(D=>{let x;return typeof D=="object"?x=D.name:x=D,r[x]||x===t})&&(O=!0);let L,H=o(function(D){let x;if(S?.transaction?.stale&&(S.transaction.stale=!1),D!=null){if(x=D.deref?D.deref():D.value,!x&&(D.key===void 0||D.deref)||D.metadataFlags&vn){if(D.metadataFlags&vn&&S.replicateFrom===!1&&P&&D.residencyId)return lc.SKIP;if(D=Ua(D.key??D,S,{transaction:A,lazy:_?.length<4,ensureLoaded:I},this?.isSync,z=>z),D?.then)return D.then(H.bind(this));x=D?.value}if(O&&D?.metadataFlags&(vn|Ja)||D?.expiresAt!=null&&D?.expiresAt<Date.now()){if(S.onlyIfCached)return{[t]:D.key,message:"This entry has expired"};let z=Xc(D.key??D,D,S);if(z?.then)return z.then(H)}}if(x==null)return P?lc.SKIP:x;if(_&&!(_[0]==="*"&&_.length===1)){let z,ne=o((B,de)=>{let fe;typeof B=="object"?fe=B.name:fe=B;let me=Zt?.[fe],Z;if(me){let J=b?.[fe];if(J)if(J.hasMappings){let Ee=me.from?x[me.from]:rd(D.key);Z=J.get(Ee),Z||(Z=[])}else Z=J.fromRecord?.(x);else Z=me(x,S,D,!0);let Te=o(Ee=>{if(me.directReturn)return de(Ee,fe);if(Ee&&typeof Ee=="object"){let pe=me.definition?.tableClass||Pe;L||(L={});let mt=L[fe]||(L[fe]=pe.transformEntryForSelect(fe===B?null:B.select||(Array.isArray(B)?B:null),S,A,J,I));if(Array.isArray(Ee)){let et=[],tt=pe.transformToOrderedSelect(Ee,B.select,typeof B.sort=="object"&&B.sort,S,A,mt)[this.isSync?Symbol.iterator:Symbol.asyncIterator](),Se=o(nt=>{for(;!nt.done;){if(nt?.then)return nt.then(Se);et.push(nt.value),nt=tt.next()}de(et,fe)},"nextValue"),rt=Se(tt.next());rt&&(z||(z=[]),z.push(rt));return}else if(Ee=mt.call(this,Ee),Ee?.then){z||(z=[]),z.push(Ee.then(et=>de(et,fe)));return}}de(Ee,fe)},"handleResolvedValue");Z?.then?(z||(z=[]),z.push(Z.then(Te))):Te(Z);return}else Z=x[fe],Z&&typeof Z=="object"&&fe!==B&&(Z=Pe.transformEntryForSelect(B.select||B,S,A,null)({value:Z}));de(Z,fe)},"selectAttribute"),re;if(typeof _=="string")ne(_,B=>{re=B});else if(Array.isArray(_))if(_.asArray)re=[],_.forEach((B,de)=>{B==="*"?_[de]=x:ne(B,fe=>re[de]=fe)});else{re={};let B=_.forceNulls;for(let de of _)if(de==="*")for(let fe in x)re[fe]=x[fe];else ne(de,(fe,me)=>{fe===void 0&&B&&(fe=null),re[me]=fe})}else throw new at.ClientError("Invalid select"+_);return z?Promise.all(z).then(()=>re):re}return x},"transform");return H}async subscribe(_){if(!l)throw new Error("Can not subscribe to a table without an audit log");g||Je({table:s,database:c,schemaDefined:u,attributes:T,audit:!0}),_||(_={});let S=!_.rawEvents,A=[],b=this,I=jb(Pe,this.getId()??null,function(O,L,H,D){try{let x=L.getValue?.(i,S),z=L.type;if(!x&&z==="patch"&&S){let re=i.getEntry(O);re?.version===L.version?x=re.value:x=L.getValue?.(i,!0,H),z="put"}let ne={id:O,localTime:H,value:x,version:L.version,type:z,beginTxn:D};A?A.push(ne):this.send(ne)}catch(x){Me.default.error?.(x)}},_.startTime||0,_),P=(async()=>{this.isCollection&&(I.includeDescendants=!0,_.onlyChildren&&(I.onlyChildren=!0)),_.supportsTransactions&&(I.supportsTransactions=!0);let O=this.getId(),L=_.previousCount;L>1e3&&(L=1e3);let H=_.startTime;if(this.isCollection){if(H){if(L)throw new at.ClientError("startTime and previousCount can not be combined for a table level subscription");for(let{key:D,value:x}of l.getRange({start:H,exclusiveStart:!0,snapshot:!1})){let z=bt(x);if(z.tableId!==n)continue;let ne=z.recordId;if(O==null||bq(O,ne)){let re=z.getValue(i,S,D);if(I.send({id:ne,localTime:D,value:re,version:z.version,type:z.type}),I.queue?.length>yq&&await I.waitForDrain()===!1)return}I.startTime=D}}else if(L){let D=[];for(let{key:x,value:z}of l.getRange({start:"z",end:!1,reverse:!0}))try{let ne=bt(z);if(ne.tableId!==n)continue;let re=ne.recordId;if(O==null||bq(O,re)){let B=ne.getValue(i,S,x);if(D.push({id:re,localTime:x,value:B,version:ne.version,type:ne.type}),--L<=0)break}}catch(ne){Me.default.error("Error getting history entry",x,ne)}for(let x=D.length;x>0;)I.send(D[--x]);D[0]&&(I.startTime=D[0].localTime)}else if(!_.omitCurrent){for(let{key:D,value:x,version:z,localTime:ne}of i.getRange({start:O??!1,end:O==null?void 0:[O,Gl.MAXIMUM_KEY],versions:!0,snapshot:!1}))if(x&&(I.send({id:D,localTime:ne,value:x,version:z,type:"put"}),I.queue?.length>yq&&await I.waitForDrain()===!1))return}}else{L&&!H&&(H=0);let D=this.#n?.localTime;if(D===Hb&&(i.cache?.delete(O),this.#n=i.getEntry(O),Me.default.trace?.("re-retrieved record",D,this.#n?.localTime),D=this.#n?.localTime),Me.default.trace?.("Subscription from",H,"from",O,D),H<D){let x=[],z=D;do{let ne=l.get(z);if(ne){_.omitCurrent=!0;let re=bt(ne),B=re.getValue(i,S,z);S&&(re.type="put"),x.push({id:O,value:B,localTime:z,...re}),z=re.previousLocalTime}else break;L&&L--}while(z>H&&L!==0);for(let ne=x.length;ne>0;)I.send(x[--ne]);I.startTime=D}!_.omitCurrent&&this.doesExist()&&I.send({id:O,localTime:D,value:this.#e,version:this.#r,type:"put"})}for(let D of A)I.send(D);A=null})();return _.listener&&I.on("data",_.listener),I}static subscribeOnThisThread(_,S){return _===0||S?.crossThreads===!1}doesExist(){return!!(this.#e||this.#s)}publish(_,S,A){if(S===void 0||S instanceof URLSearchParams)this._writePublish(this.getId(),_,S);else{let b=!0,I=this.getContext();return _.checkPermission&&(b=this.allowCreate(I.user,_,I)),ks(b,P=>{if(!P)throw new at.AccessViolation(I.user);let O=Ar(_);this._writePublish(O,S,A)})}}_writePublish(_,S,A){let b=vr(this.getContext());_??=null,_!==null&&Mr(_);let I=this.getContext();b.addWrite({key:_,store:i,entry:this.#n,nodeName:I?.nodeName,validate:o(()=>{I?.source||(b.checkOverloaded(),this.validate(S))},"validate"),before:Ne.publish?.bind(this,I,_,S),beforeIntermediate:ka(S,Ue.publish?.bind(this,I,_,S)),commit:o((P,O,L)=>{O===void 0&&y&&!g&&Ha(),Me.default.trace?.(`Publishing message to id: ${_}, timestamp: ${new Date(P).toISOString()}`),R(_,O?.value??null,O,O?.version||P,0,!0,{user:I?.user,residencyId:A?.residencyId,expiresAt:I?.expiresAt,nodeId:A?.nodeId},"message",!1,S)},"commit")})}validate(_,S){let A,b=o((I,P,O)=>{if(P.type&&I!=null)if(S&&I.__op__&&(I=I.value),P.properties){typeof I!="object"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an object${P.type?" ("+P.type+")":""}`);let L=P.properties;for(let H=0,D=L.length;H<D;H++){let x=L[H];if(x.relationship||x.computed){_.hasOwnProperty(x.name)&&(A||(A=[])).push(`Computed property ${O}.${x.name} may not be directly assigned a value`);continue}let z=b(I[x.name],x,O+"."+x.name);z&&(I[x.name]=z)}if(P.sealed&&I!=null&&typeof I=="object")for(let H in I)L.find(D=>D.name===H)||(A||(A=[])).push(`Property ${H} is not allowed within object in property ${O}`)}else switch(P.type){case"Int":(typeof I!="number"||I>>0!==I)&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an integer (from -2147483648 to 2147483647)`);break;case"Long":(typeof I!="number"||!(Math.floor(I)===I&&Math.abs(I)<=9007199254740992))&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an integer (from -9007199254740992 to 9007199254740992)`);break;case"Float":typeof I!="number"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a number`);break;case"ID":typeof I=="string"||I?.length>0&&I.every?.(L=>typeof L=="string")||(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a string, or an array of strings`);break;case"String":typeof I!="string"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a string`);break;case"Boolean":typeof I!="boolean"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a boolean`);break;case"Date":if(!(I instanceof Date)){if(typeof I=="string"||typeof I=="number")return new Date(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Date`)}break;case"BigInt":if(typeof I!="bigint"){if(typeof I=="string"||typeof I=="number")return BigInt(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a bigint`)}break;case"Bytes":if(!(I instanceof Uint8Array)){if(typeof I=="string")return Buffer.from(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Buffer or Uint8Array`)}break;case"Blob":if(!(I instanceof Ds)){if(typeof I=="string"&&(I=Buffer.from(I)),I instanceof Buffer)return createBlob(I,{type:"text/plain"});(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Blob`)}break;case"array":if(Array.isArray(I)){if(P.elements)for(let L=0,H=I.length;L<H;L++){let D=I[L],x=b(D,P.elements,O+"[*]");x&&(I[L]=x)}}else(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an Array`);break}P.nullable===!1&&I==null&&(A||(A=[])).push(`Property ${O} is required (and not does not allow null values)`)},"validateValue");for(let I=0,P=T.length;I<P;I++){let O=T[I];if(O.relationship||O.computed){Object.hasOwn(_,O.name)&&(A||(A=[])).push(`Computed property ${O.name} may not be directly assigned a value`);continue}if(!S||O.name in _){let L=b(_[O.name],O,O.name);L!==void 0&&(_[O.name]=L)}}if(f)for(let I in _)T.find(P=>P.name===I)||(A||(A=[])).push(`Property ${I} is not allowed`);if(A)throw new at.ClientError(A.join(". "))}getUpdatedTime(){return this.#r}wasLoadedFromSource(){return C?!!this.#i:void 0}static async addAttributes(_){let S=T.slice(0);for(let A of _){if(!A.name)throw new at.ClientError("Attribute name is required");if(A.name.match(/[`/]/))throw new at.ClientError("Attribute names cannot include backticks or forward slashes");bae(A.name),S.push(A)}return Je({table:s,database:c,schemaDefined:u,attributes:S}),Pe.indexingOperation}static async removeAttributes(_){let S=T.filter(A=>!_.includes(A.name));return Je({table:s,database:c,schemaDefined:u,attributes:S}),Pe.indexingOperation}static getSize(){let _=i.getStats();return(_.treeBranchPageCount+_.treeLeafPageCount+_.overflowPages)*_.pageSize}static getAuditSize(){let _=l?.getStats();return _&&(_.treeBranchPageCount+_.treeLeafPageCount+_.overflowPages)*_.pageSize}static getStorageStats(){let _=i.env.path,S=mw.default.statfsSync?.(_)??{};return{available:S.bavail*S.bsize,free:S.bfree*S.bsize,size:S.blocks*S.bsize}}static async getRecordCount(_){let S=i.getStats().entryCount,A=1e3/2,b=performance.now(),I=Math.floor(S/2),P=_?.exactCount,O=0,L=0,H;for(let{value:D}of i.getRange({start:!0,lazy:!0,snapshot:!1}))if(D!=null&&O++,L++,await cc(),!P&&L<I&&performance.now()-b>A){H=L;break}if(H){let D=O;O=0;for(let{value:Z}of i.getRange({start:"\uFFFF",reverse:!0,lazy:!0,limit:H,snapshot:!1}))Z!=null&&O++,await cc();let x=H*2,z=(O+D)/x,ne=Math.pow((O-D+1)/H/2,2)+z*(1-z)/x,re=Math.max(Math.sqrt(ne)*S,1),B=Math.round(z*S),de=Math.max(B-1.96*re,O+D),fe=Math.min(B+1.96*re,S),me=Math.pow(10,Math.round(Math.log10(re)));return me>B&&(me=me/10),O=Math.round(B/me)*me,{recordCount:O,estimatedRange:[Math.round(de),Math.round(fe)]}}return{recordCount:O}}static updatedAttributes(){Zt=this.propertyResolvers={$id:o((_,S,A)=>({value:A.key}),"$id"),$updatedtime:o((_,S,A)=>A.version,"$updatedtime"),$updatedTime:o((_,S,A)=>A.version,"$updatedTime"),$expiresAt:o((_,S,A)=>A.expiresAt,"$expiresAt"),$record:o((_,S,A)=>A?{value:_}:_,"$record"),$distance:o((_,S,A)=>A&&(A.distance??S?.vectorDistances?.get(A)),"$distance")};for(let _ of this.attributes){_.isPrimaryKey&&(k=_),_.resolve=null;let S=_.relationship,A=_.computed;if(S)if(_.indexed&&console.error("A relationship property can not be directly indexed, (but you may want to index the foreign key attribute)"),A&&console.error("A relationship property is already computed and can not be combined with a computed function (the relationship will be given precedence)"),dm=!0,S.to)_.elements?.definition?(Zt[_.name]=_.resolve=(b,I,P,O)=>{let L=b[S.from?S.from:t],H=_.elements.definition.tableClass;return O?td({attribute:S.to,value:L},vr(I).getReadTxn(),!1,H,!1).map(D=>D&&D.key!==void 0?D:H.primaryStore.getEntry(D,{transaction:vr(I).getReadTxn()})).asArray:H.search([{attribute:S.to,value:L}],I).asArray},_.set=()=>{},_.resolve.definition=_.elements.definition,_.resolve.to=S.to,S.from&&(_.resolve.from=S.from)):console.error(`The one-to-many/many-to-many relationship property "${_.name}" in table "${s}" must have an array type referencing a table as the elements`);else if(S.from){let b=_.definition||_.elements?.definition;b?(Zt[_.name]=_.resolve=(I,P,O,L)=>{let H=I[S.from];if(H===void 0)return;if(_.elements){let x,z=H?.map(ne=>{let re=b.tableClass.primaryStore[L?"getEntry":"get"](ne,{transaction:vr(P).getReadTxn()});return re?.then&&(x=!0),Pe.loadAsInstance===!1&&Object.freeze(L?re?.value:re),re});return S.filterMissing?x?Promise.all(z).then(ne=>ne.filter(Iq)):z.filter(Iq):x?Promise.all(z):z}let D=b.tableClass.primaryStore[L?"getEntry":"get"](H,{transaction:vr(P).getReadTxn()});return Pe.loadAsInstance===!1&&Object.freeze(L?D?.value:D),D},_.set=(I,P)=>{if(Array.isArray(P)){let O=P.map(L=>L.getId?.()||L[b.tableClass.primaryKey]);I[S.from]=O}else{let O=P.getId?.()||P[b.tableClass.primaryKey];I[S.from]=O}},_.resolve.definition=_.definition||_.elements?.definition,_.resolve.from=S.from):console.error(`The relationship property "${_.name}" in table "${s}" must be a type that references a table`)}else console.error(`The relationship directive on "${_.name}" in table "${s}" must use either "from" or "to" arguments`);else if(A)typeof A.from=="function"&&this.setComputedAttribute(_.name,A.from),Zt[_.name]=_.resolve=(b,I,P)=>{let O=typeof A.from=="string"?b[A.from]:b,L=this.userResolvers[_.name];if(L)return L(O,I,P);Me.default.warn(`Computed attribute "${_.name}" does not have a function assigned to it. Please use setComputedAttribute('${_.name}', resolver) to assign a resolver function.`),this.userResolvers[_.name]=()=>{}},_.resolve.directReturn=!0;else if(r[_.name]?.customIndex?.propertyResolver){let b=r[_.name].customIndex;Zt[_.name]=(I,P,O)=>{let L=I[_.name];return b.propertyResolver(L,P,O)},Zt[_.name].directReturn=!0}}Ah(this,this),Ah(hm,this,!0);for(let _ of T){let S=_.name;_.resolve&&Object.defineProperty(i.encoder.structPrototype,S,{get(){return _.resolve(this,sd.getStore())},set(A){return _.set(this,A)},configurable:!0})}}static setComputedAttribute(_,S){let A=Ji(T,_);if(!A){console.error(`The attribute "${_}" does not exist in the table "${s}"`);return}if(!A.computed){console.error(`The attribute "${_}" is not defined as computed in the table "${s}"`);return}this.userResolvers[_]=S}static async deleteHistory(_=0,S=!1){let A;for(let{key:b,value:I}of l.getRange({start:0,end:_}))await cc(),bt(I).tableId===n&&(A=eg(l,b,I));if(S)for(let b of i.getRange({start:0,versions:!0})){let{key:I,value:P,localTime:O}=b;await cc(),P===null&&O<_&&(A=_l(i,b))}await A}static async*getHistory(_=0,S=1/0){for(let{key:A,value:b}of l.getRange({start:_||1,end:S})){await cc();let I=bt(b);I.tableId===n&&(yield{id:I.recordId,localTime:A,version:I.version,type:I.type,value:I.getValue(i,!0,A),user:I.user,operation:I.originatingOperation})}}static async getHistoryOfRecord(_){let S=[];if(_==null)throw new Error("An id is required");let A=i.getEntry(_);if(!A)return S;let b=A.localTime;if(!b)throw new Error("The entry does not have a local audit time");let I=0;do{await cc();let P=l.get(b);if(P){let O=bt(P);S.push({id:O.recordId,localTime:b,version:O.version,type:O.type,value:O.getValue(i,!0,b),user:O.user}),b=O.previousLocalTime}else break}while(I<1e3&&b);return S.reverse()}static cleanup(){W?.remove()}}let lE=mS(async(V,_,S)=>{for(let A of Pe.sources)if(A.get&&(!A.get.reliesOnPrototype||A.prototype.get)){if(A.available?.(S)===!1)continue;_.source=A;let b=await A.get(V,_);if(b)return b}},()=>{throw new at.ServerError("Service unavailable, exceeded request queue limit for resolving cache record",503)});Pe.updatedAttributes();let pm=Pe.prototype;return p&&Pe.setTTLExpiration(p/1e3),$&&Hu(),Pe;function Po(V,_,S){let A;for(let b in r){let I=r[b],P=I.isIndexing,O=Zt[b],L=S&&(O?O(S):S[b]),H=_&&(O?O(_):_[b]);if(L===H&&!P)continue;if(I.customIndex){I.customIndex.index(V,L,H);continue}A=!0;let D=I.indexNulls,x=(0,$h.getIndexedValues)(L,D),z=(0,$h.getIndexedValues)(H,D);if(s==="OrganizationRole"&&Me.default.error?.({tableName:s,id:V,key:b,valuesToAdd:x,valuesToRemove:z}),z?.length>0){let ne=new Set(z);if(x=x?x.filter(re=>{if(ne.has(re))ne.delete(re);else return!0}):[],z=Array.from(ne),(z.length>0||x.length>0)&&Sq){let re=z.concat(x).map(B=>({key:B,value:V}));I.prefetch(re,Aq)}for(let re=0,B=z.length;re<B;re++)I.remove(z[re],V)}else x?.length>0&&Sq&&I.prefetch(x.map(ne=>({key:ne,value:V})),Aq);if(x)for(let ne=0,re=x.length;ne<re;ne++)I.put(x[ne],V)}return A}o(Po,"updateIndices");function Mr(V){switch(typeof V){case"number":return!0;case"string":if(V.length<659)return!0;if(V.length>Rq)throw new Error("Primary key size is too large: "+V.length);break;case"object":if(V===null)throw new Error("Invalid primary key of null");break;case"bigint":if(V<2n**64n&&V>-(2n**64n))return!0;break;default:throw new Error("Invalid primary key type: "+typeof V)}if((0,Gl.writeKey)(V,Pae,0)>Rq)throw new Error("Primary key size is too large: "+V.length);return!0}o(Mr,"checkValidId");function Ar(V){return typeof V=="object"&&V?V.id:V}o(Ar,"requestTargetToId");function _m(V){return typeof V=="object"&&V&&V.isCollection}o(_m,"isSearchTarget");function Cs(V){}o(Cs,"isRequestTarget");function Ua(V,_,S,A,b){if(Pe.getResidencyById&&S.ensureLoaded&&_?.replicateFrom!==!1){let P=Zc(Pe.getResidencyById(V));if(P&&!P.includes(server.hostname)&&N)return N({key:V,residency:P}).then(b)}let I=o(()=>{if(_?.transaction?.stale&&(_.transaction.stale=!1),S.transaction?.isDone)return b(null,V);let P=i.getEntry(V,S);return _?._freezeRecords&&Object.freeze(P?.value),P?.residencyId&&P.metadataFlags&vn&&N&&S.ensureLoaded&&_?.replicateFrom!==!1?N(P).then(O=>b(O,V),O=>(Me.default.error?.("Error loading remote record",V,P,S,O),b(null,V))):(P&&_&&(P?.version>(_.lastModified||0)&&(_.lastModified=P.version),P?.localTime&&!_.lastRefreshed&&(_.lastRefreshed=P.localTime)),b(P,V))},"whenPrefetched");return A?I():ie>0?(ie--,I()):new Promise((P,O)=>{ie===0?(ie--,i.prefetch([V],()=>{L(),H()})):(ce.push(V),le.push(H),ce.length>CA&&(ie--,L()));function L(){if(ce.length>0){let D=le;i.prefetch(ce,()=>{ie===-1?L():ie++;for(let x of D)x()}),ce=[],le=[],he>2&&he--}else ie=he,he<cE&&he++}o(L,"prefetch");function H(){try{P(I())}catch(D){O(D)}}o(H,"load")})}o(Ua,"loadLocalRecord");function xa(V,_){let S=_?.checkPermission;if(typeof S!="object"){if(!V?.role)return;S=V.role.permission}if(S.super_user)return Dae;let A=S[c],b,I=A?.tables;if(I)return I[s];if(c==="data"&&(b=S[s])&&!b.tables)return b}o(xa,"getTablePermissions");function Xc(V,_,S,A){if(C){let b=!1;if(S.noCache?b=!0:(_?(!_.value||_.metadataFlags&(vn|Ja)||_.expiresAt!=null&&_.expiresAt<Date.now())&&(b=!0):b=!0,Qr(!b,"cache-hit",s)),b){let I=uE(V,_,S).then(P=>(P?.value&&P?.value.getRecord?.()&&Me.default.error?.("Can not assign a record that is already a resource"),S&&(P?.version>(S.lastModified||0)&&(S.lastModified=P.version),S.lastRefreshed=Date.now()),P));if(S?.onlyIfCached||_?.value&&A?.allowStaleWhileRevalidate?.(_,V)){if(I.catch(P=>Me.default.warn?.(P)),S?.onlyIfCached&&!A.doesExist())throw new at.ServerError("Entry is not cached",504);return}else return I}}else if(_?.value&&_.expiresAt!=null&&_.expiresAt<Date.now())return Pe.evict(_.key,_.value,_.version),_.value=null,{then(b){return b(_)}}}o(Xc,"ensureLoadedFromSource");function vr(V){let _=V?.transaction;if(_){if(!_.lmdbDb)return _.lmdbDb=i,_;do{if(_.lmdbDb?.path===i.path)return _;let S=_.next;if(!S)return _=_.next=new Lo,_.lmdbDb=i,_;_=S}while(!0)}else return new PE}o(vr,"txnForContext");function Bu(V,_,S){if(!V)return;let A=(V.deref?V.deref():V.value)??i.getEntry(V.key)?.value;if(typeof _=="object"){let I=Zt,P=A;for(let O=0,L=_.length;O<L;O++){let H=_[O],D=I?.[H];P=D&&P?D(P,S,V):P?.[H],V=null,I=D?.definition?.tableClass?.propertyResolvers}return P}let b=Zt[_];return b?b(A,S,V):A[_]}o(Bu,"getAttributeValue");function Fu(V,_,S,A,b){let I=b?.length,P={transaction:A,lazy:I>0||typeof _=="string"||_?.length<4,alwaysPrefetch:!0},O;function L(H,D){let x=H?.value;if(!x)return lc.SKIP;for(let z=0;z<I;z++)if(!O?.includes(z)&&!b[z](x,H))return lc.SKIP;return D!==void 0&&(H.key=D),H}if(o(L,"processEntry"),I>0||!V.hasEntries){let H=V.map(D=>{if(O=null,typeof D=="object"&&D?.key!==void 0)return I>0?L(D):D;if(D==null)return lc.SKIP;for(let x=0;x<I;x++){let ne=b[x].idFilter;if(ne){if(!ne(D))return lc.SKIP;O||(O=[]),O.push(x)}}return Ua(D,S,P,!1,L)});return Array.isArray(V)&&(H=H.filter(D=>D!==lc.SKIP)),H.hasEntries=!0,H}return V}o(Fu,"transformToEntries");function Ba(V,_,S=server.replication?.getThisNodeId(l)){if(V<=_?.version){if(_?.version===V&&S!==void 0){let A=server.replication?.exportIdMapping(l),b=_.localTime,I=b&&l.get(b);if(I){let P,O,L=bt(I);for(let H in A)A[H]===S&&(P=H),A[H]===L.nodeId&&(O=H);if(P>O)return 1;if(P===O)return 0}}return-1}return 1}o(Ba,"precedesExistingVersion");async function uE(V,_,S){let A=_?.metadataFlags,b=_?.version,I,P;if(!i.attemptLock(V,b,()=>{clearTimeout(P);let D=i.getEntry(V);!D||!D.value||D.metadataFlags&(vn|Ja)?I(uE(V,i.getEntry(V),S)):I(D)}))return new Promise(D=>{I=D,P=setTimeout(()=>{i.unlock(V,b)},Oae)});let O=_?.value,L={requestContext:S,replacingRecord:O,replacingEntry:_,replacingVersion:b,noCacheStore:!1,source:null,resourceCache:S?.resourceCache,transaction:void 0,expiresAt:void 0,lastModified:void 0},H=S?.responseHeaders;return new Promise((D,x)=>{let z;ks(Ut(L,async ne=>{let re=performance.now(),B,de,fe;try{B=await lE(V,L,_),fe=A&vn;let Z=L.lastModified||fe&&b;de=fe||Z>b||!O,Z||(Z=(0,$h.getNextMonotonicTime)());let J=performance.now()-re;if(ot(J,"cache-resolution",s,null,"success"),H&&qh(H,"Server-Timing",`cache-resolve;dur=${J.toFixed(2)}`,!0),ne.timestamp=Z,p&&L.expiresAt==null&&(L.expiresAt=Date.now()+p),B){if(typeof B!="object")throw new Error("Only objects can be cached and stored in tables");if(B.status>0&&B.headers)if(B.status>=300)if(B.status===304)B=O,Z=b;else throw new at.ServerError(B.body||"Error from source",B.status);else B=B.body;typeof B.toJSON=="function"&&(B=B.toJSON()),t&&B[t]!==V&&(B[t]=V)}z=!0,D({key:V,version:Z,value:B})}catch(Z){Z.message+=` while resolving record ${V} for ${s}`,O&&((Z.code==="ECONNRESET"||Z.code==="ECONNREFUSED"||Z.code==="EAI_AGAIN")&&!S?.mustRevalidate||S?.staleIfError&&(Z.statusCode===500||Z.statusCode===502||Z.statusCode===503||Z.statusCode===504))?(D({key:V,version:b,value:O}),Me.default.trace?.(Z.message,"(returned stale record)")):x(Z);let J=performance.now()-re;ot(J,"cache-resolution",s,null,"fail"),H&&qh(H,"Server-Timing",`cache-resolve;dur=${J.toFixed(2)}`,!0),L.transaction.abort();return}if(S?.noCacheStore||L.noCacheStore){L.transaction.abort();return}vr(L).addWrite({key:V,store:i,entry:_,nodeName:"source",before:ka(B),commit:o((Z,J)=>{if(J?.version!==b)return;let Te=Po(V,O,B);if(B){Ue.put?.(L,V,B),J&&(S.previousResidency=Pe.getResidencyRecord(J.residencyId));let Ee,pe=!1,mt,et=Zc(Pe.getResidency(B,S));if(et){if(!et.includes(server.hostname))if(Ee=B,pe=!0,Pe.getResidencyById)B=void 0;else{B=null;for(let tt in r)B||(B={}),B[tt]=Ee[tt]}mt=el(et)}Me.default.trace?.(`Writing resolved record from source with id: ${V}, timestamp: ${new Date(Z).toISOString()}`),R(V,B,J,Z,pe?vn:0,g&&(de||pe)||null,{user:L?.user,expiresAt:L.expiresAt,residencyId:mt},"put",!!fe,Ee)}else J&&(Ue.delete?.(L,V),Me.default.trace?.(`Deleting resolved record from source with id: ${V}, timestamp: ${new Date(Z).toISOString()}`),g||y?R(V,null,J,Z,0,g&&de||null,{user:L?.user},"delete",!!fe):_l(i,J,b))},"commit")})}),()=>{i.unlock(V,b)},ne=>{i.unlock(V,b),z&&Me.default.error?.("Error committing cache update",ne)})})}o(uE,"getFromSource");function Fa(V){if(!V||V.user?.role?.permission?.super_user)return!0;if(V.replicateTo)throw new at.ClientError("Can not specify replication parameters without super user permissions",403);if(V.replicatedConfirmation)throw new at.ClientError("Can not specify replication confirmation without super user permissions",403);return!0}o(Fa,"checkContextPermissions");function Ha(V){let _=!1;if(V&&(V-yr>1&&(_=!0),yr=V),!(xe===Xt&&!_)&&(Xt=xe,(0,kl.getWorkerIndex)()===(0,kl.getWorkerCount)()-1))return kt&&clearTimeout(kt),xe?new Promise(S=>{let A=new Date;A.setMonth(0),A.setDate(1),A.setHours(0),A.setMinutes(0),A.setSeconds(0);let b=xe/(1+yr),I=_?Date.now():Math.ceil((Date.now()-A.getTime())/b)*b+A.getTime(),P=o(O=>{Me.default.trace?.(`Scheduled next cleanup scan at ${new Date(O)}`),kt=setTimeout(()=>te=te.then(async()=>{if(P(Math.max(O+xe,Date.now())),i.rootStore.status!=="open"){clearTimeout(kt);return}let L=50,H=new Array(L),D=0,x=Math.pow(yr,8)*(ql.get(U.STORAGE_RECLAMATION_EVICTIONFACTOR)??1e5),z=E/Math.pow(Math.max(yr,1),4);Me.default.info?.(`Starting cleanup scan for ${s}, evict threshold ${x}, adjusted eviction ${z}ms`);function ne(re,B,de,fe){let me=re+z-Date.now();if(me<0)return!0;if(yr){let Z=i.lastSize;return de&Wr&&al(fe,J=>{J.size&&(Z+=J.size)}),Me.default.trace?.(`shouldEvict adjusted ${me} ${Z}, ${me*(re-B)/Z} < ${x}`),me*(re-B)/Z<x}return!1}o(ne,"shouldEvict");try{let re=0;for(let B of i.getRange({start:!1,snapshot:!1,versions:!0,lazy:!0})){let{key:de,value:fe,version:me,expiresAt:Z,metadataFlags:J}=B,Te;fe===null&&!g&&me+wae<Date.now()?Te=_l(i,B,me):Z!=null&&ne(Z,me,J,fe)&&(Te=Pe.evict(de,fe,me),re++),Te&&(await H[D],H[D]=Te.catch(Ee=>{Me.default.error?.("Cleanup error",Ee)}),++D>=L&&(D=0)),await cc()}Me.default.info?.(`Finished cleanup scan for ${s}, evicted ${re} entries`)}catch(re){Me.default.warn?.(`Error in cleanup scan for ${s}:`,re)}S(void 0),yr=0}),Math.min(O-Date.now(),2147483647)).unref()},"startNextTimer");P(I)}):void 0}o(Ha,"scheduleCleanup");function Em(){W=l?.addDeleteRemovalCallback(n,i,(V,_)=>{i.remove(V,_)})}o(Em,"addDeleteRemoval");function Hu(){(0,kl.getWorkerIndex)()===0&&setInterval(async()=>{if(!Qc){Qc=!0;try{let V=$.name,_=r[V];if(!_)throw new Error(`expiresAt attribute ${$} must be indexed`);for(let S of _.getRange({start:!0,values:!1,end:Date.now(),snapshot:!1})){for(let A of _.getValues(S)){let b=i.getEntry(A);b?.value?b.value[V]<Date.now()&&Pe.evict(A,b.value,b.version):i.ifVersion(A,b?.version,()=>_.remove(S,A))}await cc()}}catch(V){Me.default.error?.("Error in evicting old records",V)}finally{Qc=!1}}},Nae).unref()}o(Hu,"runRecordExpirationEviction");function Zc(V){if(V!=null){if(Array.isArray(V))return V;if(typeof V=="number"){if(V>=65536)throw new Error(`Shard id ${V} must be below 65536`);let _=server.shards?.get?.(V);if(_)return Me.default.trace?.(`Shard ${V} mapped to ${_.map(S=>S.name).join(", ")}`),_.map(S=>S.name);throw new Error(`Shard ${V} is not defined`)}throw new Error(`Shard or residency list ${V} is not a valid type, must be a shard number or residency list of node hostnames`)}}o(Zc,"residencyFromFunction");function el(V){if(V){let _=V.join(","),S=d.get([Symbol.for("residency_by_set"),_]);return S||(d.put([Symbol.for("residency_by_set"),_],S=Math.floor(Math.random()*2147418112)+65535),d.put([Symbol.for("residency_by_id"),S],V),S)}}o(el,"getResidencyId");function ka(V,_){let S=yb(V,i.rootStore);if(S){let A=_;return A?async()=>{await A(),await S}:()=>S}return _}o(ka,"preCommitBlobsForRecordBefore")}function fw(e,t){let r=e.attr_object||(e.attr_object={}),n=r[t];if(n)return n;n=r[t]=Object.create(null);for(let s of e)n[s.attribute_name]=s[t];return n}function Aq(){}function pS(e,t){let r=t?.type;if(e===null)return e;if(e===""&&r&&r!=="String"&&r!=="Any")return null;try{switch(r){case"Int":case"Long":if(e[0]==="$")return hS(parseInt(e.slice(1),36));if(e==="null")return null;if(!/^-?[0-9]+$/.test(e)&&!(e instanceof Date))throw new SyntaxError;return hS(+e);case"Float":return e==="null"?null:hS(+e);case"BigInt":return e==="null"?null:BigInt(e);case"Boolean":return e==="true"?!0:e==="false"?!1:e;case"Date":if(isNaN(e)){if(e==="null")return null;Lae.test(e)||(e+="Z");let n=new Date(e);return hS(n.getTime()),n}return new Date(+e);case void 0:case"Any":return(0,_S.autoCast)(e);default:return e}}catch(n){throw n.message=`Invalid value for attribute ${t.name}: "${e}", expecting ${r}`,n.statusCode=400,n}}function hS(e){if(isNaN(e))throw new SyntaxError;return e}function bq(e,t){if(e==null)return!0;if(!Array.isArray(t))return e===t||t.startsWith?.(e);if(Array.isArray(e)){let r=e.length;if(e[r-1]===null&&r--,t.length>=r){for(let n=0;n<r;n++)if(t[n]!==e[n])return!1;return!0}return!1}else if(t[0]===e)return!0}function ks(e,t,r){return e?.then?e.then(t,r):t(e)}function Iq(e){return e!=null}function qs(e){try{return JSON.stringify(e)}catch{return e}}function Mae(e){let t=process.pid;return e.env.readerList().slice(1).some(r=>+r.match(/\d+/)?.[0]!=t)}var lc,$h,Nq,wq,ql,at,Vh,Kh,Me,Gl,kl,_S,mw,Aae,bae,Iae,Nae,wae,Sq,Oae,Tq,Cae,vn,Ja,Pae,Rq,yq,Dae,Wve,Lae,cc,fg=ue(()=>{F();lc=require("lmdb"),$h=w(Dn()),Nq=w(require("lodash")),wq=w(Lm());Qa();vm();ql=w(oe());Jb();at=w(ge()),Vh=w(Vo()),Kh=w(Si());De();dg();Me=w(hi());lN();nl();Gl=require("ordered-binary"),kl=w(st());Ki();_S=w(se());hl();ao();ME();Gh();mw=w(require("node:fs"));ts();JE();dw();({sortBy:Aae}=Nq.default),{validateAttribute:bae}=wq.default,Iae=new Uint8Array(9);Iae[8]=192;Nae=6e4,wae=864e5;ql.initSync();Sq=ql.get(U.STORAGE_PREFETCHWRITES),Oae=1e4,Tq=1,Cae=2,vn=1,Ja=8,Pae=Buffer.allocUnsafeSlow(8192),Rq=1978,yq=100,Dae={read:!0,insert:!0,update:!0,delete:!0,isSuperUser:!0},Wve=(0,_S.convertToMS)(ql.get(U.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE))||864e5;o(ES,"makeTable");o(fw,"attributesAsObject");o(Aq,"noop");Lae=/[+-][0-9]{2}:[0-9]{2}|[a-zA-Z]$/;o(pS,"coerceType");o(hS,"rejectNaN");o(bq,"isDescendantId");cc=o(()=>new Promise(setImmediate),"rest");o(ks,"when");o(Iq,"exists");o(qs,"stringify");o(Mae,"hasOtherProcesses")});function gS(e,t){if(!Array.isArray(e)||!Array.isArray(t))throw new Error("Euclidean distance comparison requires an array");let r=0,n=Math.max(e.length,t.length);for(let s=0;s<n;s++){let i=e[s]||0,a=t[s]||0,c=i-a;r+=c*c}return r}function SS(e,t){if(!Array.isArray(e)||!Array.isArray(t))throw new Error("Cosine distance comparison requires an array");let r=0,n=0,s=0,i=Math.max(e.length,t.length);for(let a=0;a<i;a++){let c=e[a]||0,l=t[a]||0;r+=c*l,n+=c*c,s+=l*l}return n=Math.sqrt(n),s=Math.sqrt(s),1-r/(n*s||1)}var Cq=ue(()=>{o(gS,"euclideanDistance");o(SS,"cosineDistance")});var Pq,Dq,Nd,co,Id,vae,Uae,TS,Lq=ue(()=>{Cq();Pq=require("msgpackr"),Dq=w(hi()),Nd=w(ge()),co=(0,Dq.loggerWithTag)("HNSW"),Id=Symbol.for("entryPoint"),vae=Symbol.for("key"),Uae=10,TS=class{static{o(this,"HierarchicalNavigableSmallWorld")}static useObjectStore=!0;indexStore;M=16;efConstruction=100;efConstructionSearch=50;mL=1/Math.log(this.M);optimizeRouting=.5;nodesVisitedCount=0;idIncrementer;distance;constructor(t,r){this.indexStore=t,t&&(this.indexStore.encoder.useFloat32=Pq.FLOAT32_OPTIONS.ALWAYS),this.distance=r?.distance==="euclidean"?gS:SS,r&&(r.M!==void 0&&(this.M=r.M,this.mL=1/Math.log(this.M)),r.efConstruction!==void 0&&(this.efConstruction=this.efConstructionSearch=r.efConstruction),r.efConstructionSearch!==void 0&&(this.efConstructionSearch=r.efConstructionSearch),r.mL!==void 0&&(this.mL=r.mL),r.optimizeRouting!==void 0&&(this.optimizeRouting=r.optimizeRouting))}index(t,r,n){let s=typeof t=="number"?[vae,t]:t,i=this.indexStore.get(s);if(!i){if(!r)return;if(!this.idIncrementer){let f=0;for(let m of this.indexStore.getKeys({reverse:!0,limit:1,start:1/0,end:0}))typeof m=="number"&&(f=m);this.idIncrementer=new BigInt64Array([BigInt(f)+1n]),this.idIncrementer=new BigInt64Array(this.indexStore.getUserSharedBuffer("next-id",this.idIncrementer.buffer))}i=Number(Atomics.add(this.idIncrementer,0,1n)),this.indexStore.put(s,i)}let a=new Map,c,l=this.indexStore.get(Id);if(n?c={...this.indexStore.get(i)}:c={},r){let f=l&&this.indexStore.get(l);if(f===void 0){let E=Math.floor(-Math.log(Math.random())*this.mL),g={vector:r,level:E,primaryKey:t};for(let y=0;y<=E;y++)g[y]=[];if(this.indexStore.put(i,g),typeof i!="number")throw new Error("Invalid nodeId: "+i);co.debug?.("setting entry point to",i),this.indexStore.put(Id,i);return}let m=c.level??Math.min(Math.floor(-Math.log(Math.random())*this.mL),Uae),h=f.level;if(m>=h){if(typeof i!="number")throw new Error("Invalid nodeId: "+i);co.debug?.("setting entry point to",i),this.indexStore.put(Id,i)}for(;h>m;){let E=this.searchLayer(r,l,f,this.efConstruction,h);E.length>0&&(l=E[0].id,f=E[0].node),h--}let p=new Array(m+1);for(let E=0;E<=m;E++)p[E]=[];for(let E=Math.min(m,h);E>=0;E--){let g=this.searchLayer(r,l,f,this.efConstruction,E);g=g.slice(0,this.M<<1),g.length===0&&E===0&&co.info?.("should not have zero connections for",l);let y=p[E];for(let T=0;T<g.length;T++){let{id:R,distance:N,node:C}=g[T];if(R===i)continue;let k=[];if(this.optimizeRouting){let Y=!1,$=C[E],W=1+this.optimizeRouting*(1+.5*T/this.M);for(let ce=0;ce<$.length;ce++){let{id:le,distance:ie}=$[ce],he=1+this.optimizeRouting*(1+.5*ce/this.M);for(let Ne=0;Ne<y.length;Ne++){let{id:Ue,distance:xe}=y[Ne];if(Ue===le){N*W>xe+ie?Y=!0:ie*he>N+xe&&(k.push({fromId:Ue,toId:R}),k.push({fromId:R,toId:Ue}));break}}if(Y)break}if(Y)continue}else if(T>=(E>0?this.M:this.M<<1))continue;y.push({id:R,distance:N});for(let{fromId:Y,toId:$}of k){let W=d(Y);W||(W=d(Y,this.indexStore.get(Y)));for(let ce=0;ce<W[E].length;ce++)if(W[E][ce].id===$){Object.isFrozen(W[E])&&(W[E]=W[E].slice()),W[E].splice(ce,1);break}}let te=c[E],q=te?.find(({id:Y})=>Y===R);if(q){let Y=te?.indexOf(q);te.copied||(te=[...te],te.copied=!0,c[E]=te),te.splice(Y,1)}else this.addConnection(R,d(R,C),i,E,N,d)}}this.indexStore.put(i,{vector:r,level:m,primaryKey:t,...p})}else{if(l===i){let f=c.level??0;for(let m=f;m>=0&&(l=c[m][0]?.id,l===void 0);m--);if(l===void 0){let m=-1;for(let{key:h,value:p}of this.indexStore.getRange({start:0,end:1/0}))if(p.level>m){if(l=h,p.level===f)break;m=p.level}}if(l===void 0)this.indexStore.remove(Id);else{if(typeof l!="number")throw new Error("Invalid nodeId: "+l);co.debug?.("setting entry point to",l),this.indexStore.put(Id,l)}}this.indexStore.remove(i)}let u=new Map;if(c.level!==void 0)for(let f=0;f<=c.level;f++){let m=c[f];for(let{id:h}of m){let p=d(h,this.indexStore.get(h));for(let E=0;E<=f;E++)p[E]=p[E]?.filter(({id:g})=>g!==i),p[E].length===0&&(co.info?.("node was left orphaned, will reindex",h),u.set(p.primaryKey,p.vector))}}function d(f,m){let h=a.get(f);return!h&&m&&(h={...m},a.set(f,h)),h}o(d,"updateNode");for(let[f,m]of a)this.indexStore.put(f,m);for(let[f,m]of u)this.index(f,m,m);this.checkSymmetry(i,this.indexStore.get(i))}getEntryPoint(){let t=this.indexStore.get(Id);if(t===void 0)return;let r=this.indexStore.get(t);return{id:t,...r}}searchLayer(t,r,n,s,i,a=this.distance){let c=new Set([r]),l=[{id:r,distance:this.distance(t,n.vector),node:n}],u=[...l];for(;l.length>0;){l.sort((h,p)=>h.distance-p.distance);let d=l.shift(),f=u[u.length-1].distance;if(d.distance>f)break;let m=d.node;for(let{id:h}of m[i]||[]){if(c.has(h)||h===void 0)continue;c.add(h);let p=this.indexStore.get(h);if(!p)continue;this.nodesVisitedCount++;let E=a(t,p.vector);if(E<f||u.length<s){let g={id:h,distance:E,node:p};l.push(g),u.push(g)}}u.sort((h,p)=>h.distance-p.distance),u.length>s&&u.splice(s,u.length-s)}return u.visited=c.size,u}search({target:t,value:r,descending:n,distance:s,comparator:i}){let a=0;switch(i){case"lt":case"le":a=r;case"sort":break;default:throw new Nd.ClientError(`Can not use "${i}" comparator with HNSW`)}if(n)throw new Nd.ClientError("Can not use descending sort order with HNSW");let c;if(s==="cosine")c=SS;else if(s==="euclidean")c=gS;else{if(s)throw new Nd.ClientError("Unknown distance function");c=this.distance}if(!t)throw new Nd.ClientError("A target vector must be provided for an HNSW query");if(!Array.isArray(t))throw new Nd.ClientError("The target vector must be an array");let l=this.getEntryPoint();if(!l)return[];let u=l.id,d=[];for(let f=l.level;f>=0;f--)if(d=this.searchLayer(t,u,l,this.efConstructionSearch,f,c),d.length>0){let m=d[0];l=m.node,u=m.id}return a&&(d=d.filter(f=>f.distance<a)),d.map(f=>({key:f.node.primaryKey,distance:f.distance}))}checkSymmetry(t,r){if(!r)return;let n=0,s;for(;(s=r[n])&&s.length!==0;){for(let{id:i}of s){let a=this.indexStore.get(i);if(!a){co.info?.("could not find neighbor node",a);continue}a[n]?.find(({id:l})=>l==t)||co.info?.("asymmetry detected",a[n])}n++}}addConnection(t,r,n,s,i,a){r[s]||(r[s]=[]);let c=s===0?this.M<<1:this.M;if(this.optimizeRouting&&(c<<=2),r[s].length>=c+(c>>2)){co.warn?.("maxConnections reached, removing some connections",c);let l=[...r[s]];l.sort((f,m)=>f.distance-m.distance);let u=l.slice(0,c),d=l.slice(c);r[s]=u;for(let f of d){let m=a(f.id)??this.indexStore.get(f.id);m&&m[s]&&(m=a(f.id,m),m[s]=m[s].filter(({id:h})=>h!==t),s===0&&m[s].length===0&&co.info?.("should not remove last connection",t,n))}}r[s].find(({id:l})=>l===n)?co.debug?.("already connected",t,n):r[s]=[...r[s],{id:n,distance:i}]}validateConnectivity(t=0){let r=this.getEntryPoint(),n=new Set,s=[r.id];n.add(r.id);let i=0;for(;s.length>0;){let a=s.shift(),c=this.indexStore.get(a);for(let l=t;l<=c.level;l++)for(let{id:u}of c[l]||[])i++,n.has(u)||(n.add(u),s.push(u))}return n.size!==this.totalNodes&&console.log("visited",n.size,"total",this.totalNodes),{isFullyConnected:n.size===this.totalNodes,averageConnections:i/n.size}}get totalNodes(){return Array.from(this.indexStore.getKeys({start:0,end:1/0})).length}estimateCountAsSort(){return Math.sqrt(this.indexStore.getStats().entryCount*this.efConstructionSearch)}propertyResolver(t,r,n){let s=r?.sort;if(s){let i=s.vectorDistances;if(i){let l=i.get(n);if(l)return l}else i=r.vectorDistances=s.vectorDistances=new Map;let a=this.distance;s.type&&(a=s.distance==="euclidean"?gS:SS);let c=a(s.target,t);return i.set(n,c),c}return t}}});var hw,Mq=ue(()=>{Lq();hw={HNSW:TS}});var ut={};Oe(ut,{database:()=>_d,databaseEnvs:()=>Jo,databases:()=>ke,dropDatabase:()=>hN,dropTableMeta:()=>kae,getDatabases:()=>it,getDefaultCompression:()=>NS,getTables:()=>xae,onRemovedDB:()=>Qh,onUpdatedTable:()=>$l,readMetaDb:()=>Yh,resetDatabases:()=>Ld,table:()=>Je,tables:()=>mn});function xae(){return bS||it(),mn||{}}function it(){if(bS)return ke;bS=!0,Cd=new Map;let e=(0,Vt.getHdbBasePath)()&&(0,Bt.join)((0,Vt.getHdbBasePath)(),rl),t=(0,Vt.get)(U.DATABASES)||{};if(process.env.SCHEMAS_DATA_PATH&&(t.data={path:process.env.SCHEMAS_DATA_PATH}),e=process.env.STORAGE_PATH||(0,Vt.get)(U.STORAGE_PATH)||e&&((0,fs.existsSync)(e)?e:(0,Bt.join)((0,Vt.getHdbBasePath)(),_E)),!e)return;if((0,fs.existsSync)(e))for(let n of(0,fs.readdirSync)(e,{withFileTypes:!0})){let s=(0,Bt.basename)(n.name,".mdb");n.isFile()&&(0,Bt.extname)(n.name).toLowerCase()===".mdb"&&!t[s]?.path&&Yh((0,Bt.join)(e,n.name),null,s)}if((0,fs.existsSync)((0,Od.getBaseSchemaPath)())){for(let n of(0,fs.readdirSync)((0,Od.getBaseSchemaPath)(),{withFileTypes:!0}))if(!n.isFile()){let s=(0,Bt.join)((0,Od.getBaseSchemaPath)(),n.name),i=(0,Bt.join)((0,Od.getTransactionAuditStoreBasePath)(),n.name);for(let a of(0,fs.readdirSync)(s,{withFileTypes:!0}))if(a.isFile()&&(0,Bt.extname)(a.name).toLowerCase()===".mdb"){let c=(0,Bt.join)(i,a.name);Yh((0,Bt.join)(s,a.name),(0,Bt.basename)(a.name,".mdb"),n.name,c,!0)}}}if(t)for(let n in t){let s=t[n],i=s.path;if((0,fs.existsSync)(i))for(let c of(0,fs.readdirSync)(i,{withFileTypes:!0}))c.isFile()&&(0,Bt.extname)(c.name).toLowerCase()===".mdb"&&Yh((0,Bt.join)(i,c.name),(0,Bt.basename)(c.name,".mdb"),n);let a=s.tables;if(a)for(let c in a){let l=a[c],u=(0,Bt.join)(l.path,(0,Bt.basename)(c+".mdb"));(0,fs.existsSync)(u)&&Yh(u,c,n,null,!0)}}for(let n in ke){let s=Cd.get(n);if(s){let i=ke[n];n.includes("delete")&&Or.trace(`defined tables ${Array.from(s.keys())}`);for(let a in i)s.has(a)||(Or.trace(`delete table class ${a}`),delete i[a])}else if(delete ke[n],n==="data"){for(let i in mn)delete mn[i];delete mn[IS]}}let r=["hdb_temp","hdb_certificate","hdb_raw_analytics","hdb_session_will","hdb_job","hdb_license","hdb_info"];if((0,Vt.get)(U.ANALYTICS_REPLICATE)===!1?r.push("hdb_analytics"):(ke.system?.hdb_analytics?.enableAuditing(),ke.system?.hdb_analytics_hostname?.enableAuditing()),ke.system)for(let n of r)ke.system[n]&&(ke.system[n].replicate=!1);return Cd=null,ke}function Ld(){bS=!1;for(let[,e]of Jo)e.needsDeletion=!0;it();for(let[e,t]of Jo)if(t.needsDeletion&&!e.endsWith("system.mdb")){t.close(),Jo.delete(e);let r=ke[t.databaseName];for(let n in r)if(r[n].primaryStore.path===e){delete ke[t.databaseName],zh.forEach(i=>i(t.databaseName));break}}return ke}function Yh(e,t,r=Ew,n,s){let i=new pw.default(e,!1);try{let a=Jo.get(e);a?a.needsDeletion=!1:(a=(0,Pd.open)(i),Jo.set(e,a));let c=new Dd.default(!1),l=a.dbisDb||(a.dbisDb=a.openDB(RS.INTERNAL_DBIS_NAME,c)),u=a.auditStore;u||(n?(0,fs.existsSync)(n)&&(i.path=n,u=(0,Pd.open)(i),u.isLegacy=!0):u=ZE(a));let d=Fq(r),f=d[IS],m=new Map;for(let{key:h,value:p}of l.getRange({start:!1})){let[E,g]=h.toString().split("/");g===""?g=p.name:g||(g=E,E=t,p.name||(p.name=g,p.indexed=!p.is_hash_attribute)),f?.add(E);let y=m.get(E);y||m.set(E,y={attributes:[]}),(g==null||p.is_hash_attribute)&&(y.primary=p),g!=null&&y.attributes.push(p),Object.defineProperty(p,"key",{value:h,configurable:!0})}for(let[h,p]of m){let{attributes:E,primary:g}=p;if(!g){for(let ie of E)if(ie.is_hash_attribute||ie.isPrimaryKey){g=ie;break}if(!g){Or.warn(`Unable to find a primary key attribute on table ${h}, with attributes: ${JSON.stringify(E)}`);continue}}let y=d[h],T={},R=[],N,C,k=typeof g.audit=="boolean"?g.audit:(0,Vt.get)(U.LOGGING_AUDITLOG),te=g.trackDeletes,q=g.expiration,Y=g.eviction,$=g.sealed,W=g.splitSegments,ce=g.replicate;if(y)T=y.indices,R=y.attributes,y.schemaVersion++;else{N=g.tableId,N?N>=(l.get(wd)||0)&&(l.putSync(wd,N+1),Or.info(`Updating next table id (it was out of sync) to ${N+1} for ${h}`)):(g.tableId=N=l.get(wd),N||(N=1),Or.debug("Table {tableName} missing an id, assigning {tableId}"),l.putSync(wd,N+1),l.putSync(g.key,g));let ie=new Dd.default(!g.is_hash_attribute,g.is_hash_attribute);if(ie.compression=g.compression,ie.compression){let he=(0,Vt.get)(U.STORAGE_COMPRESSION_THRESHOLD)||Bq;ie.compression.threshold=he}C=ag(a.openDB(g.key,ie),a),a.databaseName=r,C.tableId=N}let le;for(let ie of E){ie.attribute=ie.name;try{if(!ie.is_hash_attribute&&(ie.indexed||ie.attribute&&!ie.name)){if(!T[ie.name]){let Ne=kq(ie.key,a,ie);T[ie.name]=Ne,T[ie.name].indexNulls=ie.indexNulls}let he=R.find(Ne=>Ne.name===ie.name);he?R.splice(R.indexOf(he),1,ie):R.push(ie),le=!0}}catch(he){Or.error("Error trying to update attribute",ie,R,T,he)}}for(let ie of R)if(!E.find(Ne=>Ne.name===ie.name)){if(ie.is_hash_attribute){Or.error("Unable to remove existing primary key attribute",ie);continue}ie.indexed&&(R.splice(R.indexOf(ie),1),le=!0)}if(y)le&&(y.schemaVersion++,y.updatedAttributes());else{y=Hq(d,h,ES({primaryStore:C,auditStore:u,audit:k,sealed:$,splitSegments:W,replicate:ce,expirationMS:q&&q*1e3,evictionMS:Y&&Y*1e3,trackDeletes:te,tableName:h,tableId:N,primaryKey:g.name,databasePath:s?r+"/"+h:r,databaseName:r,indices:T,attributes:E,schemaDefined:g.schemaDefined,dbisDB:l})),y.schemaVersion=1;for(let ie of Wh)ie(y)}}return a}catch(a){throw a.message+=` opening database ${e}`,a}}function Fq(e){let t=ke[e];if(t||(e==="data"?t=ke[e]=mn:e==="system"?Object.defineProperty(ke,"system",{value:t=Object.create(null),configurable:!0}):t=ke[e]=Object.create(null)),Cd&&!Cd.has(e)){let r=new Set;t[IS]=r,Cd.set(e,r)}return t}function Hq(e,t,r){return e[t]=r,r}function _d({database:e,table:t}){e||(e=Ew),it();let r=Fq(e),n=(0,Bt.join)((0,Vt.getHdbBasePath)(),rl),s=(0,Vt.get)(U.DATABASES)||{};process.env.SCHEMAS_DATA_PATH&&(s.data={path:process.env.SCHEMAS_DATA_PATH});let i=t&&s[e]?.tables?.[t]?.path;n=i||s[e]?.path||process.env.STORAGE_PATH||(0,Vt.get)(U.STORAGE_PATH)||((0,fs.existsSync)(n)?n:(0,Bt.join)((0,Vt.getHdbBasePath)(),_E));let a=(0,Bt.join)(n,(i?t:e)+".mdb"),c=Jo.get(a);if(!c||c.status==="closed"){let l=new pw.default(a,!1);c=(0,Pd.open)(l),Jo.set(a,c)}return c.auditStore||(c.auditStore=ZE(c)),c}async function hN(e){if(!ke[e])throw new Error("Schema does not exist");let t=ke[e],r;for(let n in t)r=t[n].primaryStore.rootStore,Jo.delete(r.path),r.status==="open"&&(await r.close(),await jh.remove(r.path));if(r||(r=_d({database:e,table:null}),r.status==="open"&&(await r.close(),await jh.remove(r.path))),e==="data"){for(let n in mn)delete mn[n];delete mn[IS]}delete ke[e],zh.forEach(n=>n(e)),await Rb(r)}function kq(e,t,r){let n=r.is_hash_attribute||r.indexed.type&&hw[r.indexed.type]?.useObjectStore,s=new Dd.default(!n,n),i=t.openDB(e,s);if(r.indexed.type){let a=hw[r.indexed.type];a?i.customIndex=new a(i,r.indexed):Or.error(`The indexing type '${r.indexed.type}' is unknown`)}return i}function Je(e){let{table:t,database:r,expiration:n,eviction:s,scanInterval:i,attributes:a,audit:c,sealed:l,splitSegments:u,replicate:d,trackDeletes:f,schemaDefined:m,origin:h}=e;r||(r=Ew);let p=_d({database:r,table:t}),E=ke[r];Or.trace(`Defining ${t} in ${r}`);let g=E?.[t];if(p.status==="closed")throw new Error(`Can not use a closed data store for ${t}`);let y,T,R;m==null&&(m=!0);let N=new Dd.default(!1);for(let W of a)W.attribute&&!W.name?(W.name=W.attribute,W.indexed=!0):W.attribute=W.name,W.expiresAt&&(W.indexed=!0);let C,k;if(g){if(y=g.primaryKey,g.primaryStore.rootStore.status==="closed")throw new Error(`Can not use a closed data store from ${t} class`);u==null&&(u=g.splitSegments),g.attributes.splice(0,g.attributes.length,...a)}else{let W=p.auditStore;T=a.find(he=>he.isPrimaryKey)||{},y=T.name,T.is_hash_attribute=T.isPrimaryKey=!0,T.schemaDefined=m,T.compression=NS(),f&&(T.trackDeletes=!0),c=T.audit=typeof c=="boolean"?c:(0,Vt.get)(U.LOGGING_AUDITLOG),n&&(T.expiration=n),s&&(T.eviction=s),u??=!1,T.splitSegments=u,typeof l=="boolean"&&(T.sealed=l),typeof d=="boolean"&&(T.replicate=d),h&&(T.origins?T.origins.includes(h)||T.origins.push(h):T.origins=[h]),Or.trace(`${t} table loading, opening primary store`);let ce=new Dd.default(!1,!0);ce.compression=T.compression;let le=t+"/";if(R=p.dbisDb=p.openDB(RS.INTERNAL_DBIS_NAME,N),$(),R.get(le))return k&&k(),Ld(),Je(e);let ie=ag(p.openDB(le,ce),p);p.databaseName=r,ie.tableId=R.get(wd),Or.trace(`Assigning new table id ${ie.tableId} for ${t}`),ie.tableId||(ie.tableId=1),R.put(wd,ie.tableId+1),T.tableId=ie.tableId,g=Hq(E,t,ES({primaryStore:ie,auditStore:W,audit:c,sealed:l,splitSegments:u,replicate:d,trackDeletes:f,expirationMS:n&&n*1e3,evictionMS:s&&s*1e3,primaryKey:y,tableName:t,tableId:ie.tableId,databasePath:r,databaseName:r,indices:{},attributes:a,schemaDefined:m,dbisDB:R})),g.schemaVersion=1,C=!0,R.put(le,T)}let te=g.indices;R=R||(p.dbisDb=p.openDB(RS.INTERNAL_DBIS_NAME,N)),g.dbisDB=R;let q=[];for(let{key:W,value:ce}of R.getRange({start:!0})){let[le,ie]=W.toString().split("/");if(ie===""&&(ie=ce.name),ie){if(le!==t)continue}else continue;let he=a.find(Ue=>Ue.name===ie),Ne=!he?.indexed&&ce.indexed&&!ce.isPrimaryKey;if((!he||Ne)&&($(),C=!0,he||R.remove(W),Ne)){let Ue=g.indices[le];Ue&&q.push(Ue)}}let Y=[];try{for(let W of a||[]){if((W.relationship||W.computed)&&(C=!0,W.relationship))continue;let ce=t+"/"+(W.name||"");Object.defineProperty(W,"key",{value:ce,configurable:!0});let le=R.get(ce);if(W.isPrimaryKey){if(le=le||R.get(ce=t+"/")||{},c!==void 0&&c!==g.audit||l!==void 0&&l!==g.sealed||d!==void 0&&d!==g.replicate||(+n||void 0)!==(+le.expiration||void 0)||(+s||void 0)!==(+le.eviction||void 0)||W.type!==le.type){let he={...le};typeof c=="boolean"&&(c&&g.enableAuditing(c),he.audit=c),n&&(he.expiration=+n),s&&(he.eviction=+s),l!==void 0&&(he.sealed=l),d!==void 0&&(he.replicate=d),W.type&&(he.type=W.type),C=!0,$(),R.put(ce,he)}continue}le?.attribute&&!le.name&&(le.indexed=!0);let ie=!le||le.type!==W.type||JSON.stringify(le.indexed)!==JSON.stringify(W.indexed)||le.nullable!==W.nullable||le.version!==W.version||JSON.stringify(le.properties)!==JSON.stringify(W.properties)||JSON.stringify(le.elements)!==JSON.stringify(W.elements);if(W.indexed){let he=kq(ce,p,W);(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<Jh.workerData?.restartNumber)&&(C=!0,$(),le=R.get(ce),(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<Jh.workerData?.restartNumber)&&(C=!0,W.indexNulls===void 0&&(W.indexNulls=!0),g.primaryStore.getStats().entryCount>0&&(W.lastIndexedKey=le?.lastIndexedKey??void 0,W.indexingPID=process.pid,he.isIndexing=!0,Object.defineProperty(W,"dbi",{value:he}),Y.push(W))),R.put(ce,W)),le?.indexNulls&&W.indexNulls===void 0&&(W.indexNulls=!0),he.indexNulls=W.indexNulls,te[W.name]=he}else ie&&(C=!0,$(),R.put(ce,W))}}finally{k&&k()}if(C&&(g.schemaVersion++,g.updatedAttributes()),Or.trace(`${t} table loading, running index`),Y.length>0||q.length>0?g.indexingOperation=Hae(g,Y,q):C&&yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"schema-change",g.databaseName,g.tableName)),g.origin=h,C)for(let W of Wh)W(g,h!=="cluster");return(n||s||i)&&g.setTTLExpiration({expiration:n,eviction:s,scanInterval:i}),Or.trace(`${t} table loaded`),g;function $(){k||p.transactionSync(()=>({then(W){k=W}}))}o($,"startTxn")}async function Hae(e,t,r){try{Or.info(`Indexing ${e.tableName} attributes`,t);let n=e.schemaVersion;await yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"schema-change",e.databaseName,e.tableName));let s;for(let u of r)s=u.drop();let i,a={},c=0,l=t.length;if(await new Promise(u=>setImmediate(u)),l>0){let u;for(let f of t)(0,Pd.compareKeys)(f.lastIndexedKey,u)<0&&(u=f.lastIndexedKey),f.lastIndexedKey==null&&f.dbi.clearAsync();let d=0;for(let{key:f,value:m,version:h}of e.primaryStore.getRange({start:u,lazy:l<4,versions:!0,snapshot:!1}))if(m){if(d++,s=e.primaryStore.ifVersion(f,h,()=>{for(let p=0;p<l;p++){let E=t[p],g=E.name,y=E.dbi;try{let T=E.resolve,R=m&&(T?T(m):m[g]);if(y.customIndex){y.customIndex.index(f,R);continue}let N=(0,vq.getIndexedValues)(R);if(N)for(let C=0,k=N.length;C<k;C++)y.put(N[C],f)}catch(T){a[g]||(a[g]=!0,Or.error(`Error indexing attribute ${g}`,T))}}}),s.then(()=>d--,p=>{d--,Or.error(p)}),Jh.workerData&&Jh.workerData.restartNumber!==xq.restartNumber&&(i=!0),++c%100===0||i){for(let p of t)p.lastIndexedKey=f,e.dbisDB.put(p.key,p);if(i)return}d>Bae?await s:d>Fae&&await new Promise(p=>setImmediate(p))}for(let f of t)delete f.lastIndexedKey,delete f.indexingPID,f.dbi.isIndexing=!1,s=e.dbisDB.put(f.key,f)}await s,await yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"indexing-finished",e.databaseName,e.tableName)),Or.info(`Finished indexing ${e.tableName} attributes`,t)}catch(n){Or.error("Error in indexing",n)}}function kae({table:e,database:t}){let r=_d({database:t,table:e}),n=[],s=r.dbisDb;for(let i of s.getKeys({start:e+"/",end:e+"0"}))n.push(s.remove(i));return Promise.all(n)}function $l(e){return Wh.push(e),{remove(){let t=Wh.indexOf(e);t>-1&&Wh.splice(t,1)}}}function Qh(e){return zh.push(e),{remove(){let t=zh.indexOf(e);t>-1&&zh.splice(t,1)}}}function NS(){let e=(0,Vt.get)(U.STORAGE_COMPRESSION),t=(0,Vt.get)(U.STORAGE_COMPRESSION_DICTIONARY),r=(0,Vt.get)(U.STORAGE_COMPRESSION_THRESHOLD)||Bq,n={startingOffset:32};return t&&(n.dictionary=jh.readFileSync(t)),r&&(n.threshold=r),e&&n}var Vt,RS,Pd,Bt,fs,Od,Dd,pw,jh,_w,vq,yS,AS,Jh,Uq,xq,Or,Ew,IS,Bq,mn,ke,wd,Wh,zh,bS,Jo,Cd,Bae,Fae,De=ue(()=>{Vt=w(oe()),RS=w(Gt()),Pd=require("lmdb"),Bt=require("path"),fs=require("fs"),Od=w(At());fg();Dd=w(nh()),pw=w(sh());F();jh=w(require("fs-extra")),_w=w(mi()),vq=w(Dn()),yS=w(Vo()),AS=w(Si()),Jh=require("worker_threads"),Uq=w(j()),xq=w(st());Ki();hl();ts();Mq();Or=(0,Uq.forComponent)("storage"),Ew="data",IS=Symbol("defined-tables"),Bq=((0,Vt.get)(U.STORAGE_PAGESIZE)||4096)-60;(0,Vt.initSync)();mn=Object.create(null),ke=Object.create(null);(0,_w._assignPackageExport)("databases",ke);(0,_w._assignPackageExport)("tables",mn);wd=Symbol.for("next-table-id"),Wh=[],zh=[],Jo=new Map;o(xae,"getTables");o(it,"getDatabases");o(Ld,"resetDatabases");o(Yh,"readMetaDb");o(Fq,"ensureDB");o(Hq,"setTable");o(_d,"database");o(hN,"dropDatabase");o(kq,"openIndex");o(Je,"table");Bae=1e3,Fae=10;o(Hae,"runIndexing");o(kae,"dropTableMeta");o($l,"onUpdatedTable");o(Qh,"onRemovedDB");o(NS,"getDefaultCompression")});var Tw={};Oe(Tw,{loadGQLSchema:()=>$ae,start:()=>Sw,startOnMainThread:()=>Gae});function Sw({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r,n,s,i){let{parse:a,Source:c,Kind:l,NamedTypeNode:u,StringValueNode:d}=await import("graphql"),f=a(new c(r.toString(),s)),m=new Map,h=[],p;for(let y of f.definitions)switch(y.kind){case l.OBJECT_TYPE_DEFINITION:let k=function(q){if(q.kind==="NonNullType"){let W=k(q.type);return W.nullable=!1,W}if(q.kind==="ListType")return{type:"array",elements:k(q.type)};let $={type:q.name?.value};return Object.defineProperty($,"location",{value:q.loc.startToken}),$};o(k,"getProperty");let T=y.name.value,R=[],N={table:null,database:null,properties:R};m.set(T,N);for(let q of y.directives){if(q.name.value==="table"){for(let $ of q.arguments)N[$.name.value]=$.value.value;N.schema&&(N.database=N.schema),N.table||(N.table=T),N.audit&&(N.audit=N.audit!=="false"),N.attributes=N.properties,h.push(N)}if(q.name.value==="sealed"&&(N.sealed=!0),q.name.value==="splitSegments"&&(N.splitSegments=!0),q.name.value==="replicate"&&(N.replicate=!0),q.name.value==="export"){N.export=!0;for(let $ of q.arguments)typeof N.export!="object"&&(N.export={}),N.export[$.name.value]=$.value.value}}let C=!1,te={};for(let q of y.fields){let Y=k(q.type);Y.name=q.name.value,R.push(Y),te[Y.name]=void 0;for(let $ of q.directives){let W=$.name.value;if(W==="primaryKey")C?console.warn("Can not define two attributes as a primary key at",$.loc):(Y.isPrimaryKey=!0,C=!0);else if(W==="indexed"){let ce={};for(let le of $.arguments||[])ce[le.name.value]=le.value.value;Y.indexed=ce}else if(W==="computed"){for(let ce of $.arguments||[])if(ce.name.value==="from"){let le=ce.value.value;Y.computed={from:g(le,ce,te)},Y.version==null&&(Y.version=le)}else ce.name.value==="version"&&(Y.version=ce.value.value);Y.computed=Y.computed||!0}else if(W==="relationship"){let ce={};for(let le of $.arguments)ce[le.name.value]=le.value.value;Y.relationship=ce}else if(W==="createdTime")Y.assignCreatedTime=!0;else if(W==="updatedTime")Y.assignUpdatedTime=!0;else if(W==="expiresAt")Y.expiresAt=!0;else if(W==="allow"){let ce=Y.authorizedRoles=[];for(let le of $.arguments)le.name.value==="role"&&ce.push(le.value.value)}else server.knownGraphQLDirectives.includes(W)&&console.warn(`@${W} is an unknown directive, at`,$.loc)}}N.type=T,T==="Query"&&(p=N)}function E(y){let T=m.get(y.type);T?(Object.defineProperty(y,"properties",{value:T.properties}),Object.defineProperty(y,"definition",{value:T})):y.type==="array"?E(y.elements):qae.includes(y.type)||(0,Gq.getWorkerIndex)()===0&&console.error(`The type ${y.type} is unknown at line ${y.location.line}, column ${y.location.column}, in ${s}`)}o(E,"connectPropertyType");for(let y of m.values())for(let T of y.properties)E(T);for(let y of h)y.tableClass=e(y),y.export&&(y.export.name===""?i.set((0,gw.dirname)(n),y.tableClass):i.set((0,gw.dirname)(n)+"/"+(y.export.name||y.type),y.tableClass,y.export));function g(y,T,R){return new qq.Script(`function computed(attributes) { return function(record) { with(attributes) { with (record) { return ${y}; } } } } computed;`,{filename:s,lineOffset:T.loc.startToken.line-1,columnOffset:T.loc.startToken.column}).runInThisContext()(R)}o(g,"createComputedFrom")}}var gw,qq,Gq,qae,Gae,$ae,$q=ue(()=>{gw=require("path"),qq=require("node:vm");De();Gq=w(st()),qae=["ID","Int","Float","Long","String","Boolean","Date","Bytes","Any","BigInt","Blob"];server.knownGraphQLDirectives&&(server.knownGraphQLDirectives=["table","sealed","export","primaryKey","indexed","computed","relationship","createdTime","updatedTime","expiresAt","allow"]);o(Sw,"start");Gae=Sw,$ae=Sw({ensureTable:Je}).handleFile});var yw={};Oe(yw,{start:()=>Xae});function Vae(e){if(e.kind!==Be.Kind.OPERATION_DEFINITION&&e.kind!==Be.Kind.FRAGMENT_DEFINITION)throw new kr(`Unexpected non-executable definition type ${e.kind}.`)}function Vq(e){if(typeof e!="object"||e===null)throw new lo("Request body must be an object.");if(!("query"in e))throw new lo("Request body must contain a `query` field.");if(typeof e.query!="string")throw new lo("Request body `query` field must be a string.");if("variables"in e&&(typeof e.variables!="object"||e.variables===null))throw new lo("Request body `variables` field must be an object.");if("operationName"in e&&typeof e.operationName!="string")throw new lo("Request body `operationName` field must be a string.")}function Rw(e){return parseInt(e.value,10)}function Yq(e){return parseFloat(e.value)}function Wq(e,t,r){let n=r.get(e.name.value);return zq(n)?jq(n,t):{attribute:t,value:n}}function zq(e){return typeof e=="object"&&e!=null&&!Array.isArray(e)}function jq(e,t){return t=typeof t=="string"?[t]:t,Object.entries(e).flatMap(([r,n])=>(t=[...t,r],zq(n)?jq(n,t):{attribute:t,value:n}))}function Kae(e,t,r){switch(t=[...t,e.name.value],e.value.kind){case Be.Kind.NULL:return{attribute:t,value:null};case Be.Kind.INT:return{attribute:t,value:Rw(e.value)};case Be.Kind.FLOAT:return{attribute:t,value:Yq(e.value)};case Be.Kind.BOOLEAN:case Be.Kind.STRING:return{attribute:t,value:e.value.value};case Be.Kind.VARIABLE:return Wq(e.value,t,r);case Be.Kind.OBJECT:return Jq(e.value,t,r);case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Value type, ${e.value.kind}, is not supported.`)}}function Jq(e,t,r){return e.fields.flatMap(n=>Kae(n,t,r))}function Yae(e,t){switch(e.value.kind){case Be.Kind.NULL:return{attribute:e.name.value,value:null};case Be.Kind.INT:return{attribute:e.name.value,value:Rw(e.value)};case Be.Kind.FLOAT:return{attribute:e.name.value,value:Yq(e.value)};case Be.Kind.BOOLEAN:case Be.Kind.STRING:return{attribute:e.name.value,value:e.value.value};case Be.Kind.VARIABLE:return Wq(e.value,e.name.value,t);case Be.Kind.OBJECT:return Jq(e.value,[e.name.value],t);case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Argument type, ${e.value.kind}, is not supported.`)}}function Wae(e,t){return e.flatMap(r=>Yae(r,t))}function wS(e,t){return e.selections.flatMap(r=>{switch(r.kind){case Be.Kind.FIELD:return r;case Be.Kind.FRAGMENT_SPREAD:{let n=r.name.value,s=t.get(n);if(s==null)throw new kr(`Fragment \`${n}\` not found.`);return wS(s.selectionSet,t)}case Be.Kind.INLINE_FRAGMENT:return wS(r.selectionSet,t)}})}function Qq(e,t){return wS(e,t).map(r=>r.selectionSet?.selections.length>0?{name:r.name.value,select:Qq(r.selectionSet,t)}:r.name.value)}async function zae(e,t,r,n){let s=vs.getMatch(e.name.value,"graphql");if(s===void 0)throw new kr(`Resource \`${e.name.value}\` not found.`);let i=s.Resource,a={select:Qq(e.selectionSet,r),conditions:Wae(e.arguments,t)},c=[];n.authorize=!0;for await(let l of i.search(a,n))c.push(l);return[e.name.value,c]}function Xq(e){switch(e.kind){case Be.Kind.NULL:return null;case Be.Kind.INT:return Rw(e);case Be.Kind.FLOAT:return parseFloat(e.value);case Be.Kind.STRING:case Be.Kind.BOOLEAN:return e.value;case Be.Kind.OBJECT:return e.fields.reduce((t,r)=>({[r.name.value]:Xq(r.value),...t}),{});case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Value type, ${e.kind}, is not supported.`)}}function jae(e,t){let r=new Map;for(let n of e){let s=n.variable.name.value,i=t?.[s];if(i===void 0&&n.defaultValue!==void 0&&(i=Xq(n.defaultValue)),n.type.kind===Be.Kind.NON_NULL_TYPE&&!(s in t)&&i===void 0)throw new kr(`Variable $${s} is required, but not provided.`);r.set(n.variable.name.value,i??null)}return r}async function Jae(e,t,r,n){if(e.operation===Be.OperationTypeNode.SUBSCRIPTION)throw new kr("Subscriptions are not supported.");if(e.operation===Be.OperationTypeNode.MUTATION)throw new kr("Mutations are not supported yet.");let s=jae(e.variableDefinitions,t),i=await Promise.all(wS(e.selectionSet,r).map(c=>zae(c,s,r,n))),a={data:{}};for(let[c,l]of i)a.data[c]=l;return a}async function Kq({query:e,variables:t={},operationName:r},n){let s=Be.parse(e),i=new Map,a=new Map;for(let u of s.definitions)if(Vae(u),u.kind===Be.Kind.FRAGMENT_DEFINITION)a.set(u.name.value,u);else{if(u.name===void 0&&s.definitions.length>1)throw new kr("Unnamed operations are only allowed when there is a single operation in the document.");let d=u.name?.value??"Unnamed Query";if(i.has(d))throw new kr(`Duplicate operation definition: ${d}`);i.set(d,u)}let c;if(r==null)if(i.size===1)c=i.entries().next().value[1];else throw new kr("Operation name is required when there are multiple operations in the document.");else if(c=i.get(r),c==null)throw new kr(`Operation \`${r}\` not found.`);let l=await Jae(c,t,a,n);return{status:200,headers:{"Content-Type":"application/graphql-response+json; charset=utf-8"},body:JSON.stringify(l)}}async function Qae(e){switch(e.method){case"GET":{let t=new URLSearchParams(e.url.split("?")[1]),r={};for(let[n,s]of t)r[n]=n==="variables"||n==="extensions"?JSON.parse(s):s;return Vq(r),Kq(r,e)}case"POST":{let r=await Uo(e.headers.get("content-type"),!0)(e._nodeRequest);return Vq(r),Kq(r,e)}default:throw new lo("Method Not Allowed",405,{Allow:"GET, POST"})}}function Xae(e){e.server.http(async(t,r)=>{if(!t.url.startsWith("/graphql"))return r(t);try{return await Qae(t)}catch(n){logger.error(n);let s=t.headers.get("accept")??"application/graphql-response+json";switch(s){case"application/json":{if(n instanceof lo)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json",...n.headers}};if(n instanceof Be.GraphQLError)return{status:200,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/json"}};if(n instanceof kr)return{status:200,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};break}default:logger.info(`Unsupported accept header, ${s}, defaulting to application/graphql-response+json`);case"application/graphql-response+json":{if(n instanceof lo)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json",...n.headers}};if(n instanceof Be.GraphQLError)return{status:400,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof kr)return{status:400,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};break}}throw n}},{port:e.port,securePort:e.securePort})}var Be,kr,lo,Zq=ue(()=>{Be=w(require("graphql"));xo();ad();o(Vae,"assertExecutableDefinitionNode");o(Vq,"assertRequestParams");o(Rw,"processIntValueNode");o(Yq,"processFloatValueNode");o(Wq,"processVariableNode");o(zq,"isObject");o(jq,"transformObjectIntoQueryCondition");o(Kae,"processObjectFieldNode");o(Jq,"processObjectValueNode");o(Yae,"processArgumentNode");o(Wae,"buildConditionsQuery");o(wS,"fillInFragments");o(Qq,"buildSelectQuery");o(zae,"processFieldNode");o(Xq,"processConstValueNode");o(jae,"resolveVariables");o(Jae,"executeOperation");o(Kq,"resolver");kr=class extends Error{static{o(this,"GraphQLQueryingError")}},lo=class extends Error{static{o(this,"HTTPError")}statusCode;headers;constructor(t,r=400,n={}){super(t),this.statusCode=r,this.headers=n}};o(Qae,"graphqlQueryingHandler");o(Xae,"start")});var iG=M((_Ue,sG)=>{var Md=require("validate.js"),tG=ft(),vd=(F(),v(K)),{handleHDBError:Zae,hdbErrors:ece}=ge(),{HDB_ERROR_MSGS:rr,HTTP_STATUS_CODES:tce}=ece,Aw=o(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),rce={STRUCTURE_USER:"structure_user"},eG=Object.values(vd.ROLE_TYPES_ENUM),nce="attribute_permissions",sce="attribute_name",{PERMS_CRUD_ENUM:Ud}=vd,ice=[nce,...Object.values(Ud)],rG=[Ud.READ,Ud.INSERT,Ud.UPDATE],oce=[sce,...rG];function ace(e){let t=Aw();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,nG(e,t)}o(ace,"addRoleValidation");function cce(e){let t=Aw();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,nG(e,t)}o(cce,"alterRoleValidation");function lce(e){let t=Aw();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,tG.validateObject(e,t)}o(lce,"dropRoleValidation");var uce=["operation","role","id","permission","hdb_user","access"];function nG(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let a=0,c=n.length;a<c;a++)uce.includes(n[a])||s.push(n[a]);s.length>0&&hr(rr.INVALID_ROLE_JSON_KEYS(s),r);let i=tG.validateObject(e,t);if(i&&i.message.split(",").forEach(a=>{hr(a,r)}),e.permission){let a=dce(e);a&&hr(a,r),eG.forEach(c=>{e.permission[c]&&!Md.isBoolean(e.permission[c])&&hr(rr.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let a in e.permission)if(eG.indexOf(a)<0){if(a===rce.STRUCTURE_USER){let l=e.permission[a];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,d=l.length;u<d;u++){let f=l[u];global.hdb_schema[f]||hr(rr.SCHEMA_NOT_FOUND(f),r)}continue}hr(rr.STRUCTURE_USER_ROLE_TYPE_ERROR(a),r);continue}let c=e.permission[a];if(!a||!global.hdb_schema[a]){hr(rr.SCHEMA_NOT_FOUND(a),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[a][l]){hr(rr.TABLE_NOT_FOUND(a,l),r);continue}if(Object.keys(u).forEach(d=>{ice.includes(d)||hr(rr.INVALID_PERM_KEY(d),r,a,l)}),Object.values(Ud).forEach(d=>{Md.isDefined(u[d])?Md.isBoolean(u[d])||hr(rr.TABLE_PERM_NOT_BOOLEAN(d),r,a,l):hr(rr.TABLE_PERM_MISSING(d),r,a,l)}),u.attribute_permissions===void 0){hr(rr.ATTR_PERMS_ARRAY_MISSING,r,a,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){hr(rr.ATTR_PERMS_NOT_ARRAY,r,a,l);continue}if(u.attribute_permissions){let d=global.hdb_schema[a][l].attributes.map(({attribute:m})=>m),f={read:!1,insert:!1,update:!1};for(let m in u.attribute_permissions){let h=u.attribute_permissions[m];if(Object.keys(h).forEach(E=>{!oce.includes(E)&&E!==Ud.DELETE&&hr(rr.INVALID_ATTR_PERM_KEY(E),r,a,l)}),!Md.isDefined(h.attribute_name)){hr(rr.ATTR_PERM_MISSING_NAME,r,a,l);continue}let p=h.attribute_name;if(!d.includes(p)){hr(rr.INVALID_ATTRIBUTE_IN_PERMS(p),r,a,l);continue}rG.forEach(E=>{Md.isDefined(h[E])?Md.isBoolean(h[E])||hr(rr.ATTR_PERM_NOT_BOOLEAN(E,p),r,a,l):hr(rr.ATTR_PERM_MISSING(E,p),r,a,l)}),!f.read&&h.read===!0&&(f.read=!0),!f.insert&&h.insert===!0&&(f.insert=!0),!f.update&&h.update===!0&&(f.update=!0)}if(u.read===!1&&f.read===!0||u.insert===!1&&f.insert===!0||u.update===!1&&f.update===!0){let m=`${a}.${l}`;hr(rr.MISMATCHED_TABLE_ATTR_PERMS(m),r,a,l)}}}}return fce(r)}o(nG,"customValidate");sG.exports={addRoleValidation:ace,alterRoleValidation:cce,dropRoleValidation:lce};function dce(e){let{operation:t,permission:r}=e;if(t===vd.OPERATIONS_ENUM.ADD_ROLE||t===vd.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return rr.SU_CU_ROLE_COMBINED_ERROR;{let a=r.super_user?vd.ROLE_TYPES_ENUM.SUPER_USER:vd.ROLE_TYPES_ENUM.CLUSTER_USER;return rr.SU_CU_ROLE_NO_PERMS_ALLOWED(a)}}}return null}o(dce,"validateNoSUPerms");function fce(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:rr.ROLE_PERMS_ERROR,...e};return Zae(new Error,n,tce.BAD_REQUEST)}else return null}o(fce,"generateRolePermResponse");function hr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}o(hr,"addPermError")});var Zh=M((SUe,lG)=>{"use strict";var oG=qn(),aG=ln(),mce=vl(),Iw=iG(),Nw=Vo(),gUe=require("uuid").v4,hce=require("util"),OS=(F(),v(K)),pce=se(),ww=aG.searchByValue,_ce=aG.searchByHash,Ece=hce.promisify(mce.delete),gce=Ti(),Sce=hd(),{hdbErrors:Tce,handleHDBError:Vl}=ge(),{HDB_ERROR_MSGS:cG,HTTP_STATUS_CODES:Xh}=Tce,{UserEventMsg:Ow}=Si();lG.exports={addRole:Rce,alterRole:yce,dropRole:Ace,listRoles:bce};function bw(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}o(bw,"scrubRoleDetails");async function Rce(e){let t=Iw.addRoleValidation(e);if(t)throw t;e=bw(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await ww(r)||[])}catch(i){throw Vl(i)}if(n&&n.length>0)throw Vl(new Error,cG.ROLE_ALREADY_EXISTS(e.role),Xh.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await oG.insert(s),Nw.signalUserChange(new Ow(process.pid)),e=bw(e),e}o(Rce,"addRole");async function yce(e){let t=Iw.alterRoleValidation(e);if(t)throw t;e=bw(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await oG.update(r)}catch(s){throw Vl(s)}if(n&&n?.message==="updated 0 of 1 records")throw Vl(new Error,"Invalid role id",Xh.BAD_REQUEST,void 0,void 0,!0);return await Nw.signalUserChange(new Ow(process.pid)),e}o(yce,"alterRole");async function Ace(e){let t=Iw.dropRoleValidation(e);if(t)throw Vl(new Error,t,Xh.BAD_REQUEST,void 0,void 0,!0);let r=new Sce(OS.SYSTEM_SCHEMA_NAME,OS.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await _ce(r));if(n.length===0)throw Vl(new Error,cG.ROLE_NOT_FOUND,Xh.NOT_FOUND,void 0,void 0,!0);let s=new gce(OS.SYSTEM_SCHEMA_NAME,OS.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await ww(s)),a=!1;if(pce.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){a=!0;break}}if(a===!0)throw Vl(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,Xh.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await Ece(c),Nw.signalUserChange(new Ow(process.pid)),`${n[0].role} successfully deleted`}o(Ace,"dropRole");async function bce(){return ww({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}o(bce,"listRoles")});var Cw={};Oe(Cw,{start:()=>fG,startOnMainThread:()=>wce});function fG({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,uG.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let a in i.permission){if(Ice.includes(a))continue;let c=i.permission[a];c.tables||(i.permission[a]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let d=[];for(let f in u.attributes){let m=u.attributes[f];m.attribute_name=f,d.push(m)}u.attribute_permissions=d,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let d of u.attribute_permissions)d.read=!!d.read,d.insert=!!d.insert,d.update=!!d.update}else u.attribute_permissions=null}}i.role=i.id=s,await Nce(i)}}}async function Nce(e){let t=it().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,dG.isEqual)(i,e)?void 0:(e.id=r.id,(0,CS.alterRole)(e))}return(0,CS.addRole)(e)}var CS,uG,dG,Ice,wce,mG=ue(()=>{De();CS=w(Zh()),uG=require("yaml"),dG=require("lodash"),Ice=["super_user","cluster_user","structure_user"];o(fG,"start");o(Nce,"ensureRole");wce=fG});async function PS(e){let t=(0,_G.pathToFileURL)(e).toString();if(Oce)return ep||(ep=Cce(Dce)),(await(await ep).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function Cce(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),ep=new Compartment({console,Math,Date,fetch:Pce,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,pG.extname)(r)||(r+=".js"),r)},importHook:o(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){s.Resource=Br,s.tables=mn,s.databases=ke}};let n=await(0,hG.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),ep}function Pce(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function Dce(){return{Resource:Br,tables:mn}}var hG,pG,_G,Oce,ep,Pw=ue(()=>{Qa();De();hG=require("fs/promises"),pG=require("path"),_G=require("url"),Oce=!1;o(PS,"secureImport");o(Cce,"getCompartment");o(Pce,"secureOnlyFetch");o(Dce,"getGlobalVars")});var Dw={};Oe(Dw,{handleApplication:()=>Lce,suppressHandleApplicationWarning:()=>Mce});function EG(e){return typeof e=="function"&&("get"in e||"put"in e||"post"in e||"delete"in e)}async function Lce(e){e.handleEntry(t=>{if(t.entryType!=="file"){e.logger.warn(`jsResource plugin cannot handle entry type ${t.entryType}. Modify the 'files' option in ${e.configFilePath} to only include files.`);return}if(t.eventType!=="add"){e.requestRestart();return}PS(t.absolutePath).then(r=>{let n=(0,DS.dirname)(t.urlPath);EG(r.default)&&(e.resources.set(n,r.default),e.logger.debug(`Registered root resource: ${n}`)),gG(e,r,n)}).catch(r=>{e.logger.error(`Failed to load resource module ${t.absolutePath}: ${r}`),e.requestRestart()})})}function gG(e,t,r){for(let n in t){let s=t[n],i=(0,DS.join)(r,n);EG(s)?(e.resources.set(i,s),e.logger.debug(`Registered resource: ${i}`)):typeof s=="object"&&gG(e,s,i)}}var DS,Mce,SG=ue(()=>{Pw();DS=require("path");o(EG,"isResource");o(Lce,"handleApplication");o(gG,"recurseForResources");Mce=!0});var Mw={};Oe(Mw,{start:()=>vce});function vce({resources:e}){e.set("login",Lw),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var Lw,TG=ue(()=>{Qa();o(vce,"start");Lw=class extends Br{static{o(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:a}=r;return{data:await n.login(s,i)}}}});function IG(e){let t={openapi:Uce,info:{title:"HarperDB HTTP REST interface",version:bG.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:a,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},d=[];if(a)for(let{type:R,name:N,elements:C,relationship:k,definition:te}of a){if(k)R==="array"?u[N]={type:"array",items:{$ref:uc+C.type}}:u[N]={$ref:uc+R};else{let q=te??C?.definition;if(q){if(!t.components.schemas[q.type]){let Y={};q.properties.forEach($=>{Y[$.name]=new Bw(vw[$.type],$.type)}),t.components.schemas[q.type]=new AG(Y)}R==="array"?u[N]={type:"array",items:{$ref:uc+q.type}}:u[N]={$ref:uc+q.type}}else R==="array"?C.type==="Any"||C.type=="ID"?u[N]={type:"array",items:{format:C.type}}:u[N]={type:"array",items:new Bw(vw[C.type],C.type)}:R==="Any"||R=="ID"?u[N]={format:R}:u[N]=new Bw(vw[R],R)}d.push(new Fw(N,"query",u[N]))}let f=Object.keys(u),m=new Fw(c,"path",{format:"ID"});m.required=!0,m.description="primary key of record";let h=new Fw("property","path",{enum:f});h.required=!0,t.components.schemas[i]=new AG(u);let p=l.post!==Resource.prototype.post||l.update,E=typeof l.put=="function",g=typeof l.get=="function",y=typeof l.delete=="function",T="/"+s+"/";p&&(t.paths[T]={},t.paths[T].post=new xce(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[T]||(t.paths[T]={}),t.paths[T].get=new Uw(d,r,{200:new xw({$ref:uc+i})},"search for records by the specified property name and value pairs")),y&&(t.paths[T]||(t.paths[T]={}),t.paths[T].delete=new yG(d,r,"delete all the records that match the provided query",{204:new RG})),T="/"+s+"/{"+c+"}",g&&(t.paths[T]={},t.paths[T].get=new Uw([m],r,{200:new xw({$ref:uc+i})},"retrieve a record by its primary key")),E&&(t.paths[T]||(t.paths[T]={}),t.paths[T].put=new Bce([m],r,i,"create or update the record with the URL path that maps to the record's primary key")),y&&(t.paths[T]||(t.paths[T]={}),t.paths[T].delete=new yG([m],r,"delete a record with the given primary key",{204:new RG})),g&&h.schema.enum.length>0&&(T="/"+s+"/{"+c+"}.{property}",t.paths[T]={},t.paths[T].get=new Uw([m,h],r,{200:new xw({enum:f})},"used to retrieve the specified property of the specified record"))}return t}function xce(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:uc+e}}}},this.security=t,this.responses={200:{description:Hw,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function Uw(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function xw(e){this.description=Hw,this.content={"application/json":{schema:e}}}function RG(){this.description="successfully processed request, no content returned to client"}function Bce(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:uc+r}}}},this.responses={200:{description:Hw}}}function yG(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function AG(e){this.type="object",this.properties=e}function Bw(e,t){this.type=e,this.format=t}function Fw(e,t,r){this.name=e,this.in=t,this.schema=r}var bG,Uce,vw,uc,Hw,NG=ue(()=>{bG=w(ht()),Uce="3.0.3",vw={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},uc="#/components/schemas/",Hw="successful operation";o(IG,"generateJsonApi");o(xce,"Post");o(Uw,"Get");o(xw,"Response200");o(RG,"Response204");o(Bce,"Put");o(yG,"Delete");o(AG,"ResourceSchema");o(Bw,"Type");o(Fw,"Parameter")});var OG={};Oe(OG,{Request:()=>dc,createReuseportFd:()=>LS});var wG,dc,kw,qw,LS,tp=ue(()=>{wG=require("os"),dc=class{static{o(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new qw(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new kw(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get httpVersion(){return this._nodeRequest.httpVersion}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},kw=class{static{o(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},qw=class{constructor(t){this.asObject=t}static{o(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,wG.platform)()!="win32"&&(LS=require("node-unix-socket").createReuseportFd)});var vS={};Oe(vS,{parseHeaderValue:()=>$w,start:()=>kce});async function Hce(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&ug(e);let i=new Hs;try{e.responseHeaders=i;let a=e.url.slice(1),c,l;if(a!==CG){let g=MS.getMatch(a,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new _i(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let y=$w(g);for(let T of y)switch(T.name){case"max-age":e.expiresAt=T.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=$w(u).map(y=>(y.next?.name==="confirm"&&y.next.value>=0&&(e.replicatedConfirmation=+y.next.value),y.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let f=await Ut(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=Uo(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new xd.ClientError(g,400)}if(e.authorize=!0,a===CG&&s==="GET"){if(e?.user?.role?.permission?.super_user)return IG(MS);throw new xd.ServerError("Forbidden",403)}switch(c.checkPermission=e.user?.role?.permission??{},s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new xd.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new xd.ServerError(`Method ${s} is not recognized`,501)}}),m=200,h;if(f==null)m=s==="GET"||s==="HEAD"?404:204,Gw.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(f.status>0&&f.headers){let g=pq(f.headers,i);return f.headers!==g&&(f.headers=g),f.data!==void 0&&(f.body=km(f.data,e,f)),f}else if(h=e.lastModified){Fce[0]=h;let g=String.fromCharCode(34,(Xr[0]&63)+62,(Xr[0]>>6)+(Xr[1]<<2&63)+62,(Xr[1]>>4)+(Xr[2]<<4&63)+62,(Xr[2]>>2)+62,(Xr[3]&63)+62,(Xr[3]>>6)+(Xr[4]<<2&63)+62,(Xr[4]>>4)+(Xr[5]<<4&63)+62,(Xr[5]>>2)+62,(Xr[6]&63)+62,(Xr[6]>>6)+(Xr[7]<<2&63)+62,34),y=r["if-none-match"];y&&g==y?(f?.onDone&&f.onDone(),m=304,f=void 0):i.setIfNone("ETag",g),Gw.lastModified&&i.setIfNone("Last-Modified",new Date(h).toUTCString())}e.createdResource&&(m=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let p={status:m,headers:i,body:void 0},E=e.loadedFromSource??f?.wasLoadedFromSource?.();return E!==void 0&&(p.wasCacheMiss=E,!E&&h&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||h))/1e3))),f!==void 0&&(p.body=km(f,e,p),s==="HEAD"&&(p.body=void 0)),p}catch(a){a.statusCode?a.statusCode===500?Ii.warn(a):Ii.info(a):Ii.error(a),a.statusCode===405&&(a.method&&(a.message+=` to handle HTTP method ${a.method.toUpperCase()||""}`),a.allow&&(a.allow.push("trace","head","options"),i.setIfNone("Allow",a.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:a.statusCode||500,headers:i,body:void 0};return c.body=km(a.contentType?a:LG(a),e,c),c}}function kce(e){Gw=e,e.includeExpensiveRecordCountEstimates&&(dc.prototype.includeExpensiveRecordCountEstimates=!0),!PG&&(PG=!0,MS=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return Hce(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{rp++;let s=new es;DG||(DG=!0,kh(l=>{rp>0&&l.push({metric:"ws-connections",connections:rp,byThread:!0})}));let i;t.on("error",l=>{i=!0,Ii.warn(l)});let a;t.on("message",o(function(u){a||(a=Uo(r.requestedContentType??r.headers.asObject["content-type"],!1));let d=a(u);ot(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(d)},"message"));let c;t.on("close",()=>{rp--,Qr(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=MS.getMatch(l,"ws");if(Qr(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,ot(p=>({count:p.count,total:rp}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let d=new _i(u.relativeURL);d.checkPermission=r.user?.role?.permission??{};let f=u.Resource;c=(await Ut(r,()=>f.connect(d,s,r)))[Symbol.asyncIterator]();let h;for(;!(h=await c.next()).done;){let p=await Ka(h.value,r);t.send(p),ot(p.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(E=>t._socket.once("drain",E))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Ii.warn(l):Ii.info(l):Ii.error(l),t.close(qce[l.statusCode]||1011,LG(l))}t.close()},e))}function $w(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,a]=s.trim().split("=");i=i.trim(),a&&(a=a.trim()),r={name:i.toLowerCase(),value:a,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Ii,xd,LG,Xr,Fce,Gw,CG,PG,MS,DG,rp,qce,MG=ue(()=>{xo();ao();Ii=w(j()),xd=w(ge());dg();Vu();nl();Gh();NG();tp();mg();({errorToString:LG}=Ii),Xr=new Uint8Array(8),Fce=new Float64Array(Xr.buffer,0,1),Gw={},CG="openapi";o(Hce,"http");rp=0;o(kce,"start");qce={401:3e3,403:3003};o($w,"parseHeaderValue")});var Vw=M((KUe,UG)=>{var{recordAction:US,recordActionBinary:vG}=(ao(),v(fS)),Gce=require("fastify-plugin"),$ce=200;UG.exports=Gce(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let a=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,d,f;l.config?.isOperation?(u=n.body?.operation,d="operation"):(u=l.url,d="fastify-route",f=l.method),US(a,"duration",u,f,d),vG(s.raw.statusCode<400,"success",u,f,d),vG(1,"response_"+s.raw.statusCode,u,f,d);let m=$ce;i?.pipe?(i.on("data",g=>{m+=g.length}),i.on("end",()=>{US(performance.now()-c,"transfer",u,f,d),US(m,"bytes-sent",u,f,d)})):(m+=i?.length||0,US(m,"bytes-sent",u,f,d));let h=a.toFixed(3),p=s.getHeader("Server-Timing"),E=`db;dur=${h}`;s.header("Server-Timing",p?`${p}, ${E}`:E)}),r()},{name:"hdb-request-time"})});var BG=M((YUe,xG)=>{var Vce=ft(),Kce={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};xG.exports=function(e){return Vce.validateObject(e,Kce)}});var xS=M((WUe,FG)=>{"use strict";var Yce=(F(),v(K)).OPERATIONS_ENUM,Kw=class{static{o(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=Yce.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};FG.exports=Kw});var ip={};Oe(ip,{createTokens:()=>zw,getJWTRSAKeys:()=>qS,refreshOperationToken:()=>jw,validateOperationToken:()=>Jw,validateRefreshToken:()=>GS});async function qS(){if(BS)return BS;try{let e=np.default.join(sp.default.getHdbBasePath(),HA),t=await FS.default.readFile(np.default.join(e,Am.JWT_PASSPHRASE_NAME),"utf8"),r=await FS.default.readFile(np.default.join(e,Am.JWT_PRIVATE_KEY_NAME),"utf8");return BS={publicKey:await FS.default.readFile(np.default.join(e,Am.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},BS}catch(e){throw kS.default.error(e),new Ni.ClientError(Fd.NO_ENCRYPTION_KEYS,Bd.INTERNAL_SERVER_ERROR)}}async function zw(e){let t=(0,Yw.validateBySchema)(e,uo.default.object({username:uo.default.string().optional(),password:uo.default.string().optional(),role:uo.default.string().optional(),expires_in:uo.default.alternatives(uo.default.string(),uo.default.number()).optional()}));if(t)throw new Ni.ClientError(t.message);let r;try{let f=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,f=!1),r=await(0,Ww.findAndValidateUser)(e.username,e.password,f)}catch(f){throw kS.default.error(f),new Ni.ClientError(Fd.INVALID_CREDENTIALS,Bd.UNAUTHORIZED)}if(!r)throw new Ni.ClientError(Fd.INVALID_CREDENTIALS,Bd.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let a=await qS(),c=await Hd.default.sign(i,{key:a.privateKey,passphrase:a.passphrase},{expiresIn:e.expires_in??$G,algorithm:HS,subject:kd.OPERATION}),l=await Hd.default.sign(i,{key:a.privateKey,passphrase:a.passphrase},{expiresIn:Wce,algorithm:HS,subject:kd.REFRESH}),u=MN(l,Fr.SHA256);if((await(0,HG.update)(new kG.default(ym,qu.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new Ni.ClientError(Fd.REFRESH_TOKEN_SAVE_FAILED,Bd.INTERNAL_SERVER_ERROR);return qG.default.signalUserChange(new GG.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function jw(e){let t=(0,Yw.validateBySchema)(e,uo.default.object({refresh_token:uo.default.string().required()}).required());if(t)throw new Ni.ClientError(t.message);let{refresh_token:r}=e;await GS(r);let n=await qS(),s=await Hd.default.decode(r);return{operation_token:await Hd.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:$G,algorithm:HS,subject:kd.OPERATION})}}async function Jw(e){return VG(e,kd.OPERATION)}async function GS(e){return VG(e,kd.REFRESH)}async function VG(e,t){try{let r=await qS(),n=await Hd.default.verify(e,r.publicKey,{algorithms:HS,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,Ww.findAndValidateUser)(n.username,void 0,!1);if(t===kd.REFRESH&&!vN(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw kS.default.warn(r),r?.name==="TokenExpiredError"?new Ni.ClientError(Fd.TOKEN_EXPIRED,Bd.FORBIDDEN):new Ni.ClientError(Fd.INVALID_TOKEN,Bd.UNAUTHORIZED)}}var Hd,FS,np,uo,Yw,Ni,kS,Ww,HG,kG,qG,GG,sp,Bd,Fd,$G,Wce,HS,kd,BS,qd=ue(()=>{Hd=w(require("jsonwebtoken")),FS=w(require("fs-extra")),np=w(require("node:path")),uo=w(require("joi")),Yw=w(ft());F();Ni=w(ge()),kS=w(j());Xg();Ww=w($n()),HG=w(qn()),kG=w(xS()),qG=w(Vo()),GG=w(Si()),sp=w(oe()),{HTTP_STATUS_CODES:Bd,AUTHENTICATION_ERROR_MSGS:Fd}=Ni.hdbErrors;sp.default.initSync();$G=sp.default.get(U.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",Wce=sp.default.get(U.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",HS="RS256",kd={OPERATION:"operation",REFRESH:"refresh"};o(qS,"getJWTRSAKeys");o(zw,"createTokens");o(jw,"refreshOperationToken");o(Jw,"validateOperationToken");o(GS,"validateRefreshToken");o(VG,"validateToken")});var Qw=M((XUe,WG)=>{"use strict";var zce=BG(),Gd=require("passport"),jce=require("passport-local").Strategy,Jce=require("passport-http").BasicStrategy,Qce=require("util"),Xce=$n(),YG=Qce.callbackify(Xce.findAndValidateUser),QUe=Vr(),Zce=(F(),v(K)),KG=(qd(),v(ip));Gd.use(new jce(function(e,t,r){YG(e,t,r)}));Gd.use(new Jce(function(e,t,r){YG(e,t,r)}));Gd.serializeUser(function(e,t){t(null,e)});Gd.deserializeUser(function(e,t){t(null,e)});function ele(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let a=e.headers.authorization.split(" ");n=a[0],s=a[1]}function i(a,c){return a?r(a):c?r(null,c):r("Must login")}switch(o(i,"handleResponse"),n){case"Basic":Gd.authenticate("basic",{session:!1},(a,c)=>{i(a,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===Zce.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?KG.validateRefreshToken(s).then(a=>{e.body.refresh_token=s,r(null,a)}).catch(a=>{r(a)}):KG.validateOperationToken(s).then(a=>{r(null,a)}).catch(a=>{r(a)});break;default:Gd.authenticate("local",{session:!1},function(a,c){i(a,c)})(e,t,r);break}}o(ele,"authorize");function tle(e,t){let r=zce(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let a=i[e.schema].tables[e.table].attribute_permissions;for(let c in a)e.attributes.indexOf(a[c].attribute_name)>-1&&!a[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${a[c].attribute_name} `))}return t(null,n)}o(tle,"checkPermissions");WG.exports={authorize:ele,checkPermissions:tle}});var $S=M((exe,zG)=>{"use strict";var rle=as();zG.exports={writeTransaction:nle};function nle(e,t,r){return rle.writeTransaction(e,t,r)}o(nle,"writeTransaction")});var XG=M((nxe,QG)=>{"use strict";var sle=ln(),ile=Bs(),jG=j(),ole=qn(),rxe=$S(),ale=require("clone"),Zw=require("alasql"),cle=qg(),JG=require("util"),lle=JG.promisify(ile.getTableSchema),ule=JG.promisify(sle.search),dle=(F(),v(K)),Xw=se();cle(Zw);QG.exports={update:mle};var fle="There was a problem performing this update. Please check the logs and try again.";async function mle({statement:e,hdb_user:t}){let r=await lle(e.table.databaseid,e.table.tableid),n=hle(e.columns);Xw.backtickASTSchemaItems(e);let{table:s,where:i}=e,a=ale(s),c=Xw.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=Zw.parse(l).statements[0],d=await ule(u),f=ple(n,d);return _le(a,f,t)}o(mle,"update");function hle(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=Zw.compile(`SELECT ${r.expression.toString()} AS [${dle.FUNC_VAL}] FROM ?`)}),t}catch(t){throw jG.error(t),new Error(fle)}}o(hle,"createUpdateRecord");function ple(e,t){return Xw.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}o(ple,"buildUpdateRecords");async function _le(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await ole.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){jG.error(`Error delete new_attributes from update response: ${i}`)}return s}o(_le,"updateRecords")});var e$=M((axe,ZG)=>{var Ele=require("alasql"),gle=ln(),Sle=j(),Tle=as(),tO=require("util"),eO=se(),Rle=(F(),v(K)),yle=Bs(),ixe=$S(),oxe=qn(),Ale="record",ble="successfully deleted",Ile=tO.callbackify(Cle),Nle=tO.promisify(gle.search),wle=tO.promisify(yle.getTableSchema);ZG.exports={convertDelete:Ile};function Ole(e){return`${e.deleted_hashes.length} ${Ale}${e.deleted_hashes.length===1?"":"s"} ${ble}`}o(Ole,"generateReturnMessage");async function Cle({statement:e,hdb_user:t}){let r=await wle(e.table.databaseid,e.table.tableid);eO.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=eO.isEmpty(s)?"":` WHERE  ${s.toString()}`,a=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=Ele.parse(a).statements[0],l={operation:Rle.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await Nle(c);let u=await Tle.deleteRecords(l);return eO.isEmptyOrZeroLength(u.message)&&(u.message=Ole(u)),delete u.txn_time,u}catch(u){throw Sle.error(u),u.hdb_code?u.message:u}}o(Cle,"convertDelete")});var i$=M((lxe,s$)=>{"use strict";var Ple=rc(),{hdbErrors:t$}=ge(),{getDatabases:r$}=(De(),v(ut));s$.exports={checkSchemaExists:n$,checkSchemaTableExists:Dle,schemaDescribe:Ple};async function n$(e){if(!r$()[e])return t$.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}o(n$,"checkSchemaExists");async function Dle(e,t){let r=await n$(e);if(r)return r;if(!r$()[e][t])return t$.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}o(Dle,"checkSchemaTableExists")});var oO=M((hxe,E$)=>{"use strict";var{decode:Lle}=require("msgpackr"),{isMainThread:dxe,parentPort:fxe,threadId:mxe}=require("worker_threads"),YS=nr(),$d=It(),sO=(F(),v(K)),hn=j(),nO=oe(),Mle=(F(),v(K)),{onMessageByType:vle}=st(),l$=no(),{recordAction:o$,recordActionBinary:Ule}=(ao(),v(fS)),{publishToStream:xle}=YS,{ConsumerEvents:a$}=require("nats"),Ble=ln(),{promisify:Fle}=require("util"),{decodeBlobsWithWrites:Hle}=(ts(),v(YE)),u$=Fle(setTimeout),WS=1e4,zS,KS,kle,qle,d$,op=new Map,Vd=new Map;E$.exports={initialize:f$,ingestConsumer:iO,setSubscription:Gle,setIgnoreOrigin:Kle,getDatabaseSubscriptions:Vle,updateConsumer:m$};async function f$(){vle(sO.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await m$(n)}),d$=!0,hn.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await YS.getNATSReferences();zS=e,KS=e.info.server_name,kle=t,qle=r}o(f$,"initialize");async function m$(e){if(e.status==="start"){let{js:t,jsm:r}=await h$(e.node_domain_name);iO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=op.get(e.stream_name+e.node_domain_name);t&&(hn.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),op.set(e.stream_name+e.node_domain_name,"close")),Vd.get(e.node_domain_name)==="failed"&&Vd.set(e.node_domain_name,"close")}}o(m$,"updateConsumer");var jS=new Map;function Gle(e,t,r){let n=jS.get(e);n||jS.set(e,n=new Map),n.set(t,r),d$||f$().then($le)}o(Gle,"setSubscription");async function $le(){let e=await Ble.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+$d.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await h$(r),!n))break;let{schema:a,table:c}=i,l=l$.createNatsTableStreamName(a,c);iO(l,n,s,r)}}}o($le,"accessConsumers");async function h$(e){let t,r,n=1;for(;!r;)try{t=await zS.jetstream({domain:e}),r=await zS.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(Vd.get(e)==="close")break;Vd.set(e,"failed"),n%10===1&&hn.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<WS?n++*100:WS;await u$(i)}return{js:t,jsm:r}}o(h$,"connectToRemoteJS");function Vle(){return jS}o(Vle,"getDatabaseSubscriptions");var p$;function Kle(e){p$=e}o(Kle,"setIgnoreOrigin");var _$=100,c$=new Array(_$),VS=0;async function iO(e,t,r,n){let{connection:s}=await YS.getNATSReferences();zS=s,KS=s.info.server_name;let i,a=1;for(;!i;)try{i=await t.consumers.get(e,KS),hn.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(Vd.get(n)==="close")break;a%10===1&&hn.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(hn.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await YS.createConsumer(r,e,KS,new Date(Date.now()).toISOString()));let d=a++*100<WS?a++*100:WS;await u$(d)}let c=!1,l;for(;!c;){if(op.get(e+n)==="close"||Vd.get(n)==="close"){op.delete(e+n),c=!0;continue}l=await i.consume({max_messages:nO.get(sO.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),op.set(e+n,l);let u=!1;(async()=>{for await(let d of await l.status())if(d.type===a$.ConsumerDeleted&&(await l.close(),c=!0),d.type===a$.HeartbeatsMissed){let f=d.data;hn.trace(`${f} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),f===100&&(hn.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let d of l)await c$[VS],c$[VS]=Yle(d).catch(f=>{hn.error(f)}),++VS>=_$&&(VS=0)}catch(d){d.message==="consumer deleted"?(hn.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):hn.error("Error consuming clustering ingest, restarting consumer",d)}}}o(iO,"ingestConsumer");async function Yle(e){let t;await Hle(()=>{t=Lle(e.data)}),o$(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),hn.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=nO.get(sO.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has($d.MSG_HEADERS.TRANSACTED_NODES)&&r.values($d.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get($d.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!p$),Ule(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append($d.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:a,schema:c,next:l,table:u,records:d,hash_values:f,__origin:m,expiresAt:h}=t;hn.trace("processing message:",a,c,u,(d?"records: "+d.map(C=>C?.id):"")+(f?"ids: "+f:""),"with sequence:",e.seq),hn.trace(`messageProcessor nats msg id: ${e.headers.get($d.MSG_HEADERS.NATS_MSG_ID)}`);let p;d||(d=f);let E=new Promise(C=>p=C),{timestamp:g,user:y,node_name:T}=m||{},R=jS.get(c)?.get(u);if(!R)throw new Error(`Missing table for replication message: ${u}`);if(a==="define_schema")t.type=a,t.onCommit=p,R.send(t);else if(d.length===1&&!l)R.send({type:rO(a),value:d[0],id:f?.[0],expiresAt:h,timestamp:g,table:u,onCommit:p,user:y,nodeName:T});else{let C=d.map((k,te)=>({type:rO(a),value:k,expiresAt:h,id:f?.[te],table:u}));for(;l;)C.push({type:rO(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;R.send({type:"transaction",writes:C,table:u,timestamp:g,onCommit:p,user:y,nodeName:T})}nO.get(Mle.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&xle(e.subject.split(".").slice(0,-1).join("."),l$.createNatsTableStreamName(c,u),e.headers,e.data),await E;let N=Date.now()-g;g&&o$(N,"replication-latency",e.subject,a,"ingest")}catch(a){hn.error(a)}e.ack()}o(Yle,"messageProcessor");function rO(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}o(rO,"convertOperation")});var nr=M((Rxe,v$)=>{"use strict";var qr=oe();qr.initSync();var Wle=require("fs-extra"),zle=require("semver"),lp=require("path"),{monotonicFactory:jle}=require("ulidx"),S$=jle(),Jle=require("util"),T$=require("child_process"),Qle=Jle.promisify(T$.exec),Xle=T$.spawn,Zr=It(),We=(F(),v(K)),{packageJson:Zle,PACKAGE_ROOT:eue}=ht(),JS=se(),wi=j(),QS=no(),tue=$S(),ap=_t(),{broadcast:rue,onMessageByType:nue,getWorkerIndex:sue}=st(),{isMainThread:R$}=require("worker_threads"),{Encoder:iue,decode:uO}=require("msgpackr"),y$=new iue,{isEmpty:zl}=JS,A$=$n(),_xe=48*36e11;R$&&nue(We.ITC_EVENT_TYPES.RESTART,()=>{pn=void 0,Wl=void 0});var{connect:oue,StorageType:aue,RetentionPolicy:cue,AckPolicy:dO,DeliverPolicy:fO,DiscardPolicy:lue,NatsConnection:Exe,JetStreamManager:gxe,JetStreamClient:Sxe,StringCodec:Txe,JSONCodec:uue,createInbox:mO,headers:due,ErrorCode:g$}=require("nats"),{recordAction:fue}=(ao(),v(fS)),{encodeBlobsAsBuffers:mue}=(ts(),v(YE)),b$=uue(),hue="clustering",pue=Zle.engines[Zr.NATS_SERVER_NAME],_ue=lp.join(eue,"dependencies"),lO=lp.join(_ue,`${process.platform}-${process.arch}`,Zr.NATS_BINARY_NAME),aO,cO,cp,Kl,Yl;v$.exports={runCommand:I$,checkNATSServerInstalled:Eue,createConnection:hO,getConnection:up,getJetStreamManager:dp,getJetStream:w$,getNATSReferences:fo,getServerList:Sue,createLocalStream:pO,listStreams:O$,deleteLocalStream:Tue,getServerConfig:Kd,listRemoteStreams:Rue,viewStream:yue,viewStreamIterator:Aue,publishToStream:bue,request:wue,reloadNATS:_O,reloadNATSHub:Oue,reloadNATSLeaf:Cue,extractServerName:Nue,requestErrorHandler:Pue,createLocalTableStream:L$,createTableStreams:Mue,purgeTableStream:M$,purgeSchemaTableStreams:vue,getStreamInfo:Uue,updateLocalStreams:Bue,closeConnection:gue,getJsmServerName:XS,addNatsMsgHeader:C$,clearClientCache:N$,updateRemoteConsumer:Due,createConsumer:P$,updateConsumerIterator:Lue};async function I$(e,t=void 0){let{stdout:r,stderr:n}=await Qle(e,{cwd:t});if(n)throw new Error(n.replace(`
+`,t)}var Hl,tq,dS,Fh,iw,ow,Hh,rq,Jr,uS,nq,lS,sq,iq,oq,aq,zk,jk,cS,uq,hae,pae,Qk,Xk,fq,Zk,eq,Eae,hq,ac,gae,ao=ue(()=>{Hl=require("worker_threads"),tq=w(st());De();dS=w(j()),Fh=require("path"),iw=require("fs/promises"),ow=w(Dn()),Hh=w(oe());F();Ur();rq=w(require("node:fs"));nw();sw();Jr=(0,dS.forComponent)("analytics").conditional;(0,Hh.initSync)();uS=new Map,nq=(0,Hh.get)(U.ANALYTICS_AGGREGATEPERIOD)>-1;o(cae,"setAnalyticsEnabled");o(lae,"recordExistingAction");o(uae,"recordNewAction");o(ot,"recordAction");Le.recordAnalytics=ot;o(Qr,"recordActionBinary");lS=0,sq=1e3,iq="analytics-report",oq=[];o(kh,"addAnalyticsListener");aq=[.01,.1,.25,.5,.75,.9,.95,.99,.999,1];o(dae,"sendAnalytics");o(aw,"recordHostname");o(bd,"storeMetric");o(cq,"calculateCPUUtilization");o(lq,"diffResourceUsage");o(fae,"storeTableSizeMetrics");o(Yk,"storeDBSizeMetrics");o(Wk,"storeVolumeMetrics");o(mae,"aggregation");zk=0,jk=0,cS={userCPUTime:0,systemCPUTime:0},uq=o(()=>new Promise(setImmediate),"rest");o(Jk,"cleanup");hae=36e5,pae=31536e6;o(cw,"getRawAnalyticsTable");o(dq,"getAnalyticsTable");(0,tq.setChildListenerByType)(iq,mq);o(_ae,"startScheduledTasks");Zk=0,eq=new Map,Eae=!1;o(mq,"recordAnalytics");gae=1e6;o(Sae,"logAnalytics")});function qh(e,t,r,n){if(e.append)e.append(t,r,n);else if(e.set){let s=e.get(t);if(s)if(n)r=(typeof s=="string"?s:s.join(", "))+", "+r;else if(typeof s=="string")r=[s,r];else{s.push(r);return}return e.set(t,r)}else e[t]=(e[t]?e[t]+", ":"")+r}function pq(e,t){(typeof e.set!="function"||typeof e.has!="function")&&(e=new Hs(e));for(let[r,n]of t)e.has(r)?r.toLowerCase()==="set-cookie"&&e.append?.(r,n,!0):e.set(r,n);return e}var Hs,Gh=ue(()=>{Hs=class extends Map{static{o(this,"Headers")}constructor(t){if(t)if(t[Symbol.iterator])super(t);else{super();for(let r in t)this.set(r,t[r])}else super()}set(t,r){return typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r),super.set(t.toLowerCase(),[t,r])}get(t){return typeof t!="string"&&(t=""+t),super.get(t.toLowerCase())?.[1]}has(t){return typeof t!="string"&&(t=""+t),super.has(t.toLowerCase())}setIfNone(t,r){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let n=t.toLowerCase();if(!super.has(n))return super.set(n,[t,r])}append(t,r,n){typeof t!="string"&&(t=""+t),typeof r!="string"&&(r=""+r);let s=t.toLowerCase(),i=super.get(s);if(i){let a=i[1];if(n)r=(typeof a=="string"?a:a.join(", "))+", "+r;else if(typeof a=="string")r=[a,r];else{a.push(r);return}}return super.set(s,[t,r])}[Symbol.iterator](){return super.values()[Symbol.iterator]()}};o(qh,"appendHeader");o(pq,"mergeHeaders")});function mS(e,t,r=Rae){let n;return function(...i){return n?n.length*lw>r?t(...i):new Promise((a,c)=>{n.push({args:i,fn(){try{let l=e(...i);a(l)}catch(l){c(l)}}})}):(n=[],s(performance.now(),i),e(...i))};function s(i,a){setImmediate(()=>{let c=performance.now();lw=(lw*4+c-i)/5;let l=n.shift();if(l){let{args:u,fn:d}=l;d(),s(c,u)}else n=null})}}var gq,Tae,Rae,_q,yae,uw,Eq,lw,dw=ue(()=>{gq=w(hi()),Tae=3e3,Rae=2e4,_q=0,yae=3e4,uw=3e3,Eq=performance.now()+uw,lw=0;o(mS,"throttle");setInterval(()=>{let e=performance.now();e-Eq-uw>Tae&&_q+yae<e&&(gq.default.warn?.("JavaScript execution has taken too long and is not allowing proper event queue cycling, consider using 'await new Promise(setImmediate)' in code that will execute for a long duration"),_q=e),Eq=e},uw).unref()});var Oq={};Oe(Oq,{EVICTED:()=>Ja,INVALIDATED:()=>vn,coerceType:()=>pS,makeTable:()=>ES});function ES(e){let{primaryKey:t,indices:r,tableId:n,tableName:s,primaryStore:i,databasePath:a,databaseName:c,auditStore:l,schemaDefined:u,dbisDB:d,sealed:f,splitSegments:m,replicate:h}=e,{expirationMS:p,evictionMS:E,audit:g,trackDeletes:y}=e;E??=0;let{attributes:T}=e;T||(T=[]);let R=kb(i,n,l),N,C,k={},te=Promise.resolve(),q,Y,$;for(let V of T)(V.assignCreatedTime||V.name==="__createdtime__")&&(q=V),(V.assignUpdatedTime||V.name==="__updatedtime__")&&(Y=V),V.expiresAt&&($=V),V.isPrimaryKey&&(k=V);let W,ce=[],le=[],ie=1,he=2,Ne={},Ue={},xe=864e5,yr=0,Xt,kt,Zt,dm=!1,Qc,qt,fm,mm=ql.get(U.REPLICATION_DATABASES);if(Array.isArray(mm)){for(let V of mm)if(V.name===c&&V.replicateTo>=0){fm=V.replicateTo;break}}let aE=i.getRange({start:!1,end:!1}).constructor,cE=10,CA=6;g&&Em(),Km(i.env.path,V=>{if(C)return Ha(V)});class hm extends Nl{static{o(this,"Updatable")}getUpdatedTime(){return za.get(this.getRecord())?.version}getExpiresAt(){return za.get(this.getRecord())?.expiresAt}addTo(_,S){if(typeof S=="number"||typeof S=="bigint")this.set(_,new yh(S));else throw new Error("Can not add or subtract a non-numeric value")}subtractFrom(_,S){return this.addTo(_,-S)}}class Pe extends Br{#e;#t;#r;#n;#s;#i;static name=s;static primaryStore=i;static auditStore=l;static primaryKey=t;static tableName=s;static tableId=n;static indices=r;static audit=g;static databasePath=a;static databaseName=c;static attributes=T;static replicate=h;static sealed=f;static splitSegments=m??!0;static createdTimeProperty=q;static updatedTimeProperty=Y;static propertyResolvers;static userResolvers={};static sources=[];static getResidencyById;static get expirationMS(){return p}static dbisDB=d;static schemaDefined=u;static sourcedFrom(_,S){if(S&&(this.sourceOptions=S,(S.expiration||S.eviction||S.scanInterval)&&this.setTTLExpiration(S)),S?.intermediateSource)_.intermediateSource=!0,this.sources.unshift(_);else{if(this.sources.some(O=>!O.intermediateSource)){if(this.sources.some(O=>O.name===_.name))return;throw new Error("Can not have multiple canonical (non-intermediate) sources")}this.sources.push(_)}C=C||_.get&&(!_.get.reliesOnPrototype||_.prototype.get),N=N||_.load;let A=o(O=>{let L=this.sources;if(L=L.filter(H=>H.intermediateSource&&H[O]&&(!H[O].reliesOnPrototype||H.prototype[O])),L.length>0)if(L.length===1){let H=L[0];return(D,x,z)=>{if(D?.source!==H)return H[O](x,z,D)}}else return(H,D,x)=>{let z=[];for(let ne of L){if(H?.source===ne)break;z.push(ne[O](D,x,H))}return Promise.all(z)}},"getApplyToIntermediateSource"),b=this.sources[this.sources.length-1];b.intermediateSource&&(b={});let I=o(O=>{if(b[O]&&(!b[O].reliesOnPrototype||b.prototype[O]))return(L,H,D)=>{if(!L?.source)return b[O](H,D,L)}},"getApplyToCanonicalSource");Ne={put:I("put"),patch:I("patch"),delete:I("delete"),publish:I("publish")},Ue={put:A("put"),patch:A("patch"),delete:A("delete"),publish:A("publish"),invalidate:A("invalidate")};let P=b.shouldRevalidateEvents;return(async()=>{let O=!1,L,H=o(async(D,x)=>{let z=D.value,ne=D.table?ke[c][D.table]:Pe;if(c===ym&&(D.table===qu.ROLE_TABLE_NAME||D.table===qu.USER_TABLE_NAME)&&(O=!0),D.id===void 0&&(D.id=z[ne.primaryKey],D.id===void 0))throw new Error("Replication message without an id "+JSON.stringify(D));D.source=_;let re={residencyId:el(D.residencyList),isNotification:!0,ensureLoaded:!1,nodeId:D.nodeId,async:!0},B=D.id,de=await ne.getResource(B,x,re);switch(D.finished&&await D.finished,D.type){case"put":return P?de._writeInvalidate(B,z,re):de._writeUpdate(B,z,!0,re);case"patch":return P?de._writeInvalidate(B,z,re):de._writeUpdate(B,z,!1,re);case"delete":return de._writeDelete(B,re);case"publish":case"message":return de._writePublish(B,z,re);case"invalidate":return de._writeInvalidate(B,z,re);case"relocate":return de._writeRelocate(B,re);default:Me.default.error?.("Unknown operation",D.type,D.id)}},"writeUpdate");try{let D=_.subscribe;D&&y==null&&(y=!0);let x={crossThreads:!1,inTransactionUpdates:!0,supportsTransactions:!0,omitCurrent:!0},z=_.subscribeOnThisThread?_.subscribeOnThisThread((0,kl.getWorkerIndex)(),x):(0,kl.getWorkerIndex)()===0,ne=D&&z&&await _.subscribe?.(x);if(ne){let re;for await(let B of ne)try{if(!(B.type==="transaction"?B.writes[0]:B)){Me.default.error?.("Bad subscription event",B);continue}if(B.source=_,B.type==="end_txn"){if(re?.resolve(),B.localTime&&L!==B.localTime){if(B.remoteNodeIds?.length>0){let me=[Symbol.for("seq"),B.remoteNodeIds[0]],Z=d.get(me),J=Z?.nodes;J||(J=[]);for(let Ee of B.remoteNodeIds.slice(1)){let pe=J.find(mt=>mt.id===Ee);J=J.filter(mt=>mt.id!==Ee||mt===pe),pe||(pe={id:Ee,seqId:0},J.push(pe)),pe.seqId=Math.max(Z?.seqId??1,B.localTime),Ee===re?.nodeId&&(pe.lastTxnTime=B.timestamp)}let Te=Math.max(Z?.seqId??1,B.localTime);Me.default.trace?.("Received txn",c,Te,new Date(Te),B.localTime,new Date(B.localTime),B.remoteNodeIds),d.put(me,{seqId:Te,nodes:J})}L=B.localTime}B.onCommit&&re?.committed.then(B.onCommit);continue}if(re)if(B.beginTxn)re.resolve();else{re.write_promises.push(H(B,re));continue}!B.timestamp&&B.version&&(B.timestamp=B.version);let fe=Ut(B,()=>{if(B.type==="transaction"){let me=[];for(let Z of B.writes)try{me.push(H(Z,B))}catch(J){throw J.message+=" writing "+JSON.stringify(Z)+" of event "+JSON.stringify(B),J}return Promise.all(me)}else if(B.type==="define_schema"){let me=this.attributes.slice(0),Z=!1;for(let J of B.attributes)me.find(Te=>Te.name===J.name)||(me.push(J),Z=!0);Z&&(Je({table:s,database:c,attributes:me,origin:"cluster"}),Vh.signalSchemaChange(new Kh.SchemaEventMsg(process.pid,G.CREATE_TABLE,c,s)))}else return B.beginTxn?(re=B,re.write_promises=[H(B,B)],new Promise(me=>{re.resolve=()=>me(Promise.all(re.write_promises))})):H(B,B)});re&&(re.committed=fe),O&&fe&&!fe?.waitingForUserChange&&(fe.then(()=>Vh.signalUserChange(new Kh.UserEventMsg(process.pid))),fe.waitingForUserChange=!0),B.onCommit&&(fe?fe.then(B.onCommit):B.onCommit())}catch(de){Me.default.error?.("error in subscription handler",de)}}}catch(D){Me.default.error?.(D)}})(),this}static get isCaching(){return C}static get shouldRevalidateEvents(){return this.prototype.get!==Pe.prototype.get}static getResource(_,S,A){let b=super.getResource(_,S,A);if(this.loadAsInstance===!1&&(S._freezeRecords=!0),_!=null&&this.loadAsInstance!==!1){Mr(_);try{if(b.getRecord?.())return b;if(typeof _=="object"&&_&&!Array.isArray(_))throw new Error(`Invalid id ${JSON.stringify(_)}`);let I=!A?.async||i.cache?.get?.(_),P=vr(S),O=P.getReadTxn();if(O?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");return Ua(_,S,{transaction:O,ensureLoaded:A?.ensureLoaded},I,L=>{if(L?Pe._updateResource(b,L):b.#e=null,S.onlyIfCached){if(!b.doesExist())throw new at.ServerError("Entry is not cached",504)}else if(A?.ensureLoaded){let H=Xc(_,L,S,b);if(H)return P?.disregardReadTxn(),b.#i=!0,S.loadedFromSource=!0,ks(H,D=>(Pe._updateResource(b,D),b))}return b})}catch(I){throw I.message.includes("Unable to serialize object")&&(I.message+=": "+JSON.stringify(_)),I}}return b}static _updateResource(_,S){_.#n=S,_.#e=S?.value??null,_.#r=S?.version}ensureLoaded(){let _=Xc(this.getId(),this.#n,this.getContext());if(_)return this.#i=!0,this.getContext().loadedFromSource=!0,ks(_,S=>{this.#n=S,this.#e=S.value,this.#r=S.version})}static getNewId(){let _=k?.type;if(_==="String"||_==="ID")return super.getNewId();if(!qt){let I=i.getEntry(Symbol.for("id_allocation")),P=I?.value,O;if(P&&P.nodeName===server.hostname&&(!Mae(i)||P.pid===process.pid)){let L=P.start,H=P.end;O=L;for(let D of i.getKeys({start:H,end:L,limit:1,reverse:!0}))O=D}else P=b(I?.version??null),O=P.start;qt=new BigInt64Array([BigInt(O)+1n]),qt=new BigInt64Array(i.getUserSharedBuffer("id",qt.buffer)),qt.maxSafeId=P.end}let S=Number(Atomics.add(qt,0,1n)),A=_==="Int"?512:1048576;if(S+A>=qt.maxSafeId){let I=o(P=>{qt.maxSafeId=S+(_==="Int"?1023:4194303);let O=(_==="Int"?Math.pow(2,31):Math.pow(2,49))-1,L=P?void 0:i.useReadTransaction(),H=Number(qt[0]);for(let z of i.getKeys({start:H+1,end:O,limit:1,transaction:L}))O=z;L?.done();let{value:D,version:x}=i.getEntry(Symbol.for("id_allocation"));if(qt.maxSafeId<O){if(D.end>qt.maxSafeId-100)return;Me.default.info?.("New id allocation",S,qt.maxSafeId,x),i.put(Symbol.for("id_allocation"),{start:D.start,end:qt.maxSafeId,nodeName:server.hostname,pid:process.pid},Date.now(),x)}else{Me.default.warn?.(`Id conflict detected, starting new id allocation range, attempting to allocate to ${qt.maxSafeId}, but id of ${O} detected`);let z=b(x);z.alreadyUpdated||Atomics.store(qt,0,BigInt(z.start+1)),qt.maxSafeId=z.end}},"updateEnd");S+A===qt.maxSafeId?setImmediate(I):S+100>=qt.maxSafeId&&(Me.default.warn?.(`Synchronous id allocation required on table ${s}${_=="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`),i.transactionSync(()=>I(!0)))}return S;function b(I){let P=(_==="Int"?Math.pow(2,31):Math.pow(2,49))-1,O=P/4,L,H,D=!1,x,z;do{x=Math.floor(Math.random()*P),z={start:x,end:x+(_==="Int"?1024:4194304),nodeName:server.hostname,pid:process.pid},L=0;for(let ne of i.getKeys({start:x,limit:1,reverse:!0}))L=ne;H=P;for(let ne of i.getKeys({start:x+1,end:P,limit:1}))H=ne;O*=.875,O<1e3&&!D&&(D=!0,Me.default.error?.(`Id allocation in table ${s} is very dense, limited safe range of numbers to allocate ids in${_==="Int"?", it is highly recommended that you use Long or Float as the type for auto-incremented primary keys":""}`,x,L,H,O))}while(!(O<H-x&&(O<x-L||L===0)));return i.transactionSync(()=>{let ne=i.getEntry(Symbol.for("id_allocation"));return(ne?.version??null)==I?(Me.default.info?.("Allocated new id range",z),i.put(Symbol.for("id_allocation"),z,Date.now()),z):(Me.default.debug?.("Looks like ids were already allocated"),{alreadyUpdated:!0,...ne.value})})}}static setTTLExpiration(_){if(typeof _=="number")p=_*1e3,E||(E=0);else if(_&&typeof _=="object")p=_.expiration*1e3,E=(_.eviction||0)*1e3,xe=_.scanInterval*1e3;else throw new Error("Invalid expiration value type");if(p<0)throw new Error("Expiration can not be negative");xe=xe||(p+E)/4,Ha()}static getResidencyRecord(_){return d.get([Symbol.for("residency_by_id"),_])}static setResidency(_){Pe.getResidency=_&&((S,A)=>{try{return _(S,A)}catch(b){throw b.message+=` in residency function for table ${s}`,b}})}static setResidencyById(_){Pe.getResidencyById=_&&(S=>{try{return _(S)}catch(A){throw A.message+=` in residency function for table ${s}`,A}})}static getResidency(_,S){if(Pe.getResidencyById)return Pe.getResidencyById(_[t]);let A=fm;if(S.replicateTo!=null){if(Array.isArray(S.replicateTo))return S.replicateTo.includes(server.hostname)?S.replicateTo:[server.hostname,...S.replicateTo];S.replicateTo>=0&&(A=S.replicateTo)}if(A>=0&&server.nodes){let b=[server.hostname];if(S.previousResidency)b.push(...S.previousResidency.slice(0,A));else{let I=server.nodes.map(L=>L.name),P=Math.floor(I.length*Math.random());b.push(...I.slice(P,P+A));let O=P+A-I.length;O>0&&b.push(...I.slice(0,O))}return b}}static enableAuditing(_=!0){g=_,_&&Em(),Pe.audit=_}static coerceId(_){return _===""?null:pS(_,k)}static async dropTable(){delete ke[c][s];for(let _ of i.getRange({versions:!0,snapshot:!1,lazy:!0}))_.metadataFlags&Wr&&_.value&&Ya(_.value);if(c===a){for(let _ of T)d.remove(Pe.tableName+"/"+_.name),r[_.name]?.drop();d.remove(Pe.tableName+"/"),i.drop(),await d.committed}else console.log("legacy dropTable"),await i.close(),mw.default.unlinkSync(i.env.path);Vh.signalSchemaChange(new Kh.SchemaEventMsg(process.pid,G.DROP_TABLE,c,s))}get(_){let S=this.constructor;if(typeof _=="string"&&S.loadAsInstance!==!1)return this.getProperty(_);if(_m(_))return this.search(_);if(_&&_.id===void 0&&!_.toString()){let A={records:"./",name:s,database:c,auditSize:l?.getStats().entryCount,attributes:T,recordCount:void 0,estimatedRecordRange:void 0};return this.getContext()?.includeExpensiveRecordCountEstimates?Pe.getRecordCount().then(b=>(A.recordCount=b.recordCount,A.estimatedRecordRange=b.estimatedRange,A)):A}if(_!==void 0&&S.loadAsInstance===!1){let A=this.getContext(),b=vr(A),I=b.getReadTxn();if(I?.isDone)throw new Error("You can not read from a transaction that has already been committed/aborted");let P=Ar(_);Mr(P);let O=!0;return _.checkPermission&&(O=this.allowRead(A.user,_)),ks(ks(O,L=>{if(!L)throw new at.AccessViolation(A.user);let H=!0;return Ua(P,A,{transaction:I,ensureLoaded:H},!1,D=>{if(A.onlyIfCached){if(!D?.value)throw new at.ServerError("Entry is not cached",504)}else if(H){let x=Xc(P,D,A);if(x)return b?.disregardReadTxn(),A.loadedFromSource=!0,x.then(z=>z?.value)}return D?.value})}),L=>{let H=_?.select;return H&&L!=null?id(H,this.constructor)(L):L})}if(_?.property)return this.getProperty(_.property);if(this.doesExist()||_?.ensureLoaded===!1||this.getContext()?.returnNonexistent)return this}allowRead(_,S){let A=xa(_,S);if(A?.read){if(A.isSuperUser)return!0;let b=A.attribute_permissions,I=S?.select;if(b?.length>0||dm&&I){if(S||(S={}),I){let P=b?.length>0&&fw(b,"read");S.select=I.map(O=>{let L=O.name||O;if(!P||P[L]){let H=Zt[L]?.definition?.tableClass;if(H){if(O.name||(O={name:O}),!O.checkPermission&&S.checkPermission&&(O.checkPermission=S.checkPermission),!H.prototype.allowRead.call(null,_,O))return!1;if(!O.select)return O.name}return O}}).filter(Boolean)}else S.select=b.filter(P=>P.read&&!Zt[P.attribute_name]).map(P=>P.attribute_name);return S}else return!0}}allowUpdate(_,S,A){let b=xa(_,A);if(b?.update){let I=b.attribute_permissions;if(I?.length>0){let P=fw(I,"update");for(let O in S)if(!P[O])return!1;for(let O of I){let L=O.attribute_name;!O.update&&!(L in S)&&(S[L]=this.getProperty(L))}}return Fa(this.getContext())}}allowCreate(_,S,A){if(this.isCollection){let b=xa(_,A);if(b?.insert){let I=b.attribute_permissions;if(I?.length>0){let P=fw(I,"insert");for(let O in S)if(!P[O])return!1;return Fa(this.getContext())}else return Fa(this.getContext())}}else return this.allowUpdate(_,{})}allowDelete(_,S){return xa(_,S)?.delete&&Fa(this.getContext())}update(_,S){let A,b=typeof S=="boolean"||S===void 0&&(_==null||typeof _=="object"&&!(_ instanceof URLSearchParams)),I=!1;b?(I=S,S=_,A=this.getId()):A=Ar(_);let P=this.getContext();if(!vr(P))throw new Error("Can not update a table resource outside of a transaction");if(S===!1)return this;if(typeof S=="object"&&S)if(I)Object.isFrozen(S)&&(S={...S}),this.#e={},this.#t=S;else if(b){let L=this.#t;L&&(S=Object.assign(L,S)),this.#t=S}else{let L=!0;if(_==null)throw new TypeError("Can not put a record without a target");return _.checkPermission&&(L=this.allowUpdate(P.user,S,_)),ks(L,H=>{if(!H)throw new at.AccessViolation(P.user);return ks(i.get(Ar(_)),D=>{let x=new hm(D);return x._setChanges(S),this._writeUpdate(A,x.getChanges(),!1),x})})}return this._writeUpdate(A,this.#t,I),this}addTo(_,S){if(typeof S=="number"||typeof S=="bigint")this.#s===Tq?this.set(_,(+this.getProperty(_)||0)+S):(this.#s||this.update(),this.set(_,new yh(S)));else throw new Error("Can not add a non-numeric value")}subtractFrom(_,S){if(typeof S=="number")return this.addTo(_,-S);throw new Error("Can not subtract a non-numeric value")}getMetadata(){return this.#n}getRecord(){return this.#e}getChanges(){return this.#t}_setChanges(_){this.#t=_}setRecord(_){this.#e=_}invalidate(_){let S=!0,A=this.getContext();return _?.checkPermission&&(S=this.allowDelete(A.user,_,A)),ks(S,b=>{if(!b)throw new at.AccessViolation(A.user);this._writeInvalidate(_?Ar(_):this.getId())})}_writeInvalidate(_,S,A){let b=this.getContext();Mr(_),vr(this.getContext()).addWrite({key:_,store:i,invalidated:!0,entry:this.#n,before:Ne.invalidate?.bind(this,b,_),beforeIntermediate:ka(S,Ue.invalidate?.bind(this,b,_)),commit:o((P,O)=>{if(!(Ba(P,O,A?.nodeId)<=0)){S??=null;for(let L in r)S||(S={}),S[L]===void 0&&(S[L]=this.getProperty(L));Me.default.trace?.(`Invalidating entry in ${s} id: ${_}, timestamp: ${new Date(P).toISOString()}`),R(_,S,O,P,vn,g,{user:b?.user,residencyId:A?.residencyId,nodeId:A?.nodeId},"invalidate")}},"commit")})}_writeRelocate(_,S){let A=this.getContext();Mr(_),vr(this.getContext()).addWrite({key:_,store:i,invalidated:!0,entry:this.#n,before:Ne.relocate?.bind(this,A,_),beforeIntermediate:Ue.relocate?.bind(this,A,_),commit:o((I,P)=>{if(Ba(I,P,S?.nodeId)<=0)return;let O=Pe.getResidencyRecord(S.residencyId),L=0,H=null,D=P?.value;if(O&&!O.includes(server.hostname)){for(let x in r)H||(H={}),H[x]=D[x];L=vn}else H=D;Me.default.trace?.(`Relocating entry id: ${_}, timestamp: ${new Date(I).toISOString()}`),R(_,H,P,I,L,g,{user:A.user,residencyId:S.residencyId,nodeId:S.nodeId,expiresAt:S.expiresAt},"relocate",!1,null)},"commit")})}static _recordRelocate(_,S){let A={previousResidency:this.getResidencyRecord(_.residencyId),isRelocation:!0},b=Zc(this.getResidency(S.value,A)),I;if(b){if(!b.includes(server.hostname))return!1;I=el(b)}let P=0;Me.default.debug?.("Performing a relocate of an entry",existing_entry.key,S.value,b);let O=R(_.key,S.value,_,_.version,P,!0,{residencyId:I,expiresAt:S.expiresAt},"relocate",!1,null);return!0}static evict(_,S,A){let b=this.Source,I;if(!((C||g)&&(!S||(I=i.getEntry(_),!I||!S)||I.version!==A))){if(C){if(i.hasLock(_,I.version))return;let P;for(let O in r)P||(P={}),P[O]=S[O];if(P)return R(_,P,I,A,Ja,null,null,null,!0)}if(i.ifVersion(_,A,()=>{Po(_,S,null)}),g)return R(_,null,I,A,Ja,null,null,null,!0);_l(i,I??i.getEntry(_),A)}}lock(){throw new Error("Not yet implemented")}static operation(_,S){return _.table||=s,_.schema||=c,global.operation(_,S)}put(_,S){if(S===void 0||S instanceof URLSearchParams)this.update(_,!0);else{let A=!0;if(_==null)throw new TypeError("Can not put a record without a target");let b=this.getContext();return _.checkPermission&&(A=this.allowUpdate(b.user,S,_)),ks(A,I=>{if(!I)throw new at.AccessViolation(b.user);if(Array.isArray(S))for(let P of S){let O=P[t];this._writeUpdate(O,P,!0)}else{let P=Ar(_);this._writeUpdate(P,S,!0)}})}}create(_,S){let A=!0,b=this.getContext();if(!S&&!(_ instanceof URLSearchParams)&&(S=_,_=void 0),!S||typeof S!="object"||Array.isArray(S))throw new TypeError("Can not create a record without an object");return _?.checkPermission&&(A=this.allowCreate(b.user,S,_)),ks(A,I=>{if(!I)throw new at.AccessViolation(b.user);let P=Ar(_)??S[t];if(P===void 0)P=this.constructor.getNewId();else if(i.get(P))throw new at.ClientError("Record already exists",409);return this._writeUpdate(P,S,!0),S})}patch(_,S){if(S===void 0||S instanceof URLSearchParams)this.update(_,!1);else{let A=this.update(_,S);if(A?.then)return A.then(()=>{})}}_writeUpdate(_,S,A,b){let I=this.getContext(),P=vr(I);Mr(_);let O=this.#n??i.getEntry(_);this.#s=A?Tq:Cae;let L=o(D=>A?D.put?()=>D.put(I,_,S):null:D.patch?()=>D.patch(I,_,S):D.put?()=>D.put(I,_,wl(this)):null,"writeToSources"),H={key:_,store:i,entry:O,nodeName:I?.nodeName,validate:o(D=>{S||(S=this.#t),A||S&&xg(this.#t===S?this:S)?I?.source||(P.checkOverloaded(),this.validate(S,!A),Y&&(S[Y.name]=Y.type==="Date"?new Date(D):Y.type==="String"?new Date(D).toISOString():D),A&&(t&&S[t]!==_&&(S[t]=_),q&&(O?.value?S[q.name]=O?.value[q.name]:S[q.name]=q.type==="Date"?new Date(D):q.type==="String"?new Date(D).toISOString():D),S=wl(S))):P.removeWrite(H)},"validate"),before:L(Ne),beforeIntermediate:ka(S,L(Ue)),commit:o((D,x,z)=>{if(z){if(I&&x?.version>(I.lastModified||0)&&(I.lastModified=x.version),this.#n=x,x?.value&&x.value.getRecord)throw new Error("Can not assign a record to a record, check for circular references");A||(this.#e=x?.value??null)}this.#t=void 0,this.#r=D;let ne=x?.value,re=S;this.#s=0;let B=!1,de=Ba(D,x,b?.nodeId),fe;if(de<=0){if(g){let Ee=x.localTime,pe=x.version;Me.default.trace?.("Applying CRDT update to record with id: ",_,"txn time",new Date(D),"applying later update from:",new Date(pe),"local recorded time",new Date(Ee));let mt=[];for(;Ee>D||pe>=D&&Ee>0;){let et=l.get(Ee);if(!et)break;let tt=bt(et);if(pe=tt.version,pe>=D){if(pe===D){if(de=Ba(D,{version:pe,localTime:Ee},b?.nodeId),de===0)return;if(de>0)continue}if(tt.type==="patch")mt.push(tt),fe=S;else if(tt.type==="put"||tt.type==="delete")return}Ee=tt.previousLocalTime}Ee||Me.default.debug?.("No further audit history, applying incremental updates based on available history",_,"existing version preserved",x),mt.sort((et,tt)=>et.version-tt.version);for(let et of mt){let tt=et.getValue(i);if(Me.default.debug?.("Rebuilding update with future patch:",new Date(et.version),tt,et),re=LE(re,tt,A),!re)return}}else{if(A)return;re=LE(re,ne,A),Me.default.debug?.("Rebuilding update without audit:",re)}Me.default.trace?.("Rebuilt record to save:",re," is full update:",A)}let me;if(A?me=re:this.constructor.loadAsInstance===!1?me=wl(ne,re):(this.#e=ne,me=wl(this,re)),this.#e=me,me&&me.getRecord)throw new Error("Can not assign a record to a record, check for circular references");let Z;if(b?.residencyId!=null)Z=b.residencyId;else{O?.residencyId&&(I.previousResidency=Pe.getResidencyRecord(O.residencyId));let Ee=Zc(Pe.getResidency(me,I));if(Ee&&!Ee.includes(server.hostname))if(fe??=me,B=!0,Pe.getResidencyById)me=void 0;else{me=null;for(let pe in r)me||(me={}),me[pe]=fe[pe]}Z=el(Ee)}A||(fe=S);let J=I?.expiresAt??(p?p+Date.now():-1);Me.default.trace?.(`Saving record with id: ${_}, timestamp: ${new Date(D).toISOString()}${J?", expires at: "+new Date(J).toISOString():""}${x?", replaces entry from: "+new Date(x.version).toISOString():", new entry"}`,(()=>{try{return JSON.stringify(me).slice(0,100)}catch{return""}})()),Po(_,ne,me);let Te=A?"put":"patch";R(_,me,x,D,B?vn:0,g,{omitLocalRecord:B,user:I?.user,residencyId:Z,expiresAt:J,nodeId:b?.nodeId,originatingOperation:I?.originatingOperation},Te,!1,fe),I.expiresAt&&Ha()},"commit")};P.addWrite(H)}async delete(_){if(_m(_)){_.select=["$id"];for await(let S of this.search(_))this._writeDelete(S.$id);return!0}if(_){let S=!0,A=this.getContext();return _.checkPermission&&(S=this.allowDelete(A.user,_,A)),ks(S,b=>{if(!b)throw new at.AccessViolation(A.user);let I=Ar(_);return this._writeDelete(I),!0})}return this._writeDelete(this.getId()),!!this.#e}_writeDelete(_,S){let A=vr(this.getContext());Mr(_);let b=this.getContext();return A.addWrite({key:_,store:i,entry:this.#n,nodeName:b?.nodeName,before:Ne.delete?.bind(this,b,_),beforeIntermediate:Ue.delete?.bind(this,b,_),commit:o((I,P,O)=>{let L=P?.value;O&&(b&&P?.version>(b.lastModified||0)&&(b.lastModified=P.version),Pe._updateResource(this,P)),!(Ba(I,P,S?.nodeId)<=0)&&(Po(this.getId(),L),Me.default.trace?.(`Deleting record with id: ${_}, txn timestamp: ${new Date(I).toISOString()}`),g||y?(R(_,null,P,I,0,g,{user:b?.user,nodeId:S?.nodeId},"delete"),g||Ha()):_l(i,P))},"commit")}),!0}search(_){let S=this.getContext(),A=vr(S);if(!_)throw new Error("No query provided");if(_.parseError)throw _.parseError;if(_.checkPermission&&!this.allowRead(S.user,_))throw new at.AccessViolation(S.user);let b=_.conditions;b?b.length===void 0&&(b=b[Symbol.iterator]?Array.from(b):[b]):b=Array.isArray(_)?_:_[Symbol.iterator]?Array.from(_):[];let I=_.id??this.getId();I&&(b=[{attribute:null,comparator:Array.isArray(I)?"prefix":"starts_with",value:I}].concat(b));let P,O={};function L(J,Te){let Ee;switch(Te){case"and":case void 0:if(J.length<1)throw new Error('An "and" operator requires at least one condition');Ee=!0;break;case"or":if(J.length<2)throw new Error('An "or" operator requires at least two conditions');break;default:throw new Error("Invalid operator "+Te)}for(let pe of J){if(pe.conditions){pe.conditions=L(pe.conditions,pe.operator);continue}let mt=pe[0]??pe.attribute,et=mt==null?k:Ji(T,mt);if(et)(et.type||Gb[pe.comparator])&&(pe[1]===void 0?pe.value=D(pe.value,et):pe[1]=D(pe[1],et));else if(mt!=null&&!_.allowConditionsOnDynamicAttributes)throw(0,at.handleHDBError)(new Error,`${mt} is not a defined attribute`,404);if(pe.chainedConditions)if(pe.chainedConditions.length===1&&(!pe.operator||pe.operator=="and")){let tt=pe.chainedConditions[0],Se,rt;if(tt.comparator==="gt"||tt.comparator==="greater_than"||tt.comparator==="ge"||tt.comparator==="greater_than_equal"?(Se=pe,rt=tt):(Se=tt,rt=pe),Se.comparator!=="lt"&&Se.comparator!=="less_than"&&Se.comparator!=="le"&&Se.comparator!=="less_than_equal")throw new Error("Invalid chained condition, only less than and greater than conditions can be chained together");let nt=rt.comparator==="ge"||rt.comparator==="greater_than_equal",ur=Se.comparator==="le"||Se.comparator==="less_than_equal";pe.comparator=(nt?"ge":"gt")+(ur?"le":"lt"),pe.value=[rt.value,Se.value]}else throw new Error("Multiple chained conditions are not currently supported")}return J}o(L,"prepareConditions");function H(J,Te){if(_.enforceExecutionOrder)return J;for(let Ee of J)Ee.conditions&&(Ee.conditions=H(Ee.conditions,Ee.operator));return J.length>1&&Te!=="or"?Aae(J,lg(Pe)):J}o(H,"orderConditions");function D(J,Te){return Array.isArray(J)?J.map(Ee=>pS(Ee,Te)):pS(J,Te)}o(D,"coerceTypedValues");let x=_.operator;(b.length>0||x)&&(b=L(b,x));let z=typeof _.sort=="object"&&_.sort,ne;if(z&&x!=="or"){let J=z.attribute;if(J==null)throw new at.ClientError("Sort requires an attribute");if(P=b.find(Te=>rd(Te.attribute)===rd(J)),!P){let Te=Ji(T,J);if(!Te)throw(0,at.handleHDBError)(new Error,`${Array.isArray(J)?J.join("."):J} is not a defined attribute`,404);if(Te.indexed)P={...z,comparator:"sort"},b.push(P);else if(b.length===0&&!_.allowFullScan)throw(0,at.handleHDBError)(new Error,`${Array.isArray(J)?J.join("."):J} is not indexed and not combined with any other conditions`,404)}P&&(P.descending=!!z.descending)}b=H(b,x),z&&(P&&b[0]===P?z.next&&(ne={dbOrderedAttribute:z.attribute,attribute:z.next.attribute,descending:z.next.descending,next:z.next.next}):(P&&b.splice(b.indexOf(P),1),ne=z));let re=_.select;if(b.length===0&&(b=[{attribute:t,comparator:"greater_than",value:!0}]),_.explain)return{conditions:b,operator:x,postOrdering:ne,selectApplied:!!re};let B=A.useReadTxn(),de=$b(b,x,Pe,B,_,S,(J,Te)=>Fu(J,re,S,B,Te),O),fe=_.ensureLoaded!==!1,me=Pe.transformEntryForSelect(re,S,B,O,fe,!0),Z=Pe.transformToOrderedSelect(de,re,ne,S,B,me);return(_.offset||_.limit!==void 0)&&(Z=Z.slice(_.offset,_.limit!==void 0?(_.offset||0)+_.limit:void 0)),Z.onDone=()=>{Z.onDone=null,A.doneReadTxn()},Z.selectApplied=!0,Z.getColumns=()=>{if(re){let J=[];for(let Te of re)Te==="*"?J.push(...T.map(Ee=>Ee.name)):J.push(Te.name||Te);return J}return T.filter(J=>!J.computed&&!J.relationship).map(J=>J.name)},Z}static transformToOrderedSelect(_,S,A,b,I,P){let O=new aE;if(A){_=Fu(_,S,b,I,null);let L;O.iterate=function(){let D,x=_[Symbol.asyncIterator]?_[Symbol.asyncIterator]():_[Symbol.iterator](),z,ne=A.dbOrderedAttribute,re,B,de=!0;function fe(Z){let J=Z.next&&fe(Z.next),Te=Z.descending;return b.sort=Z,(Ee,pe)=>{let mt=Bu(Ee,Z.attribute,b),et=Bu(pe,Z.attribute,b),tt=Te?(0,Gl.compareKeys)(et,mt):(0,Gl.compareKeys)(mt,et);return tt===0?J?.(Ee,pe)||0:tt}}o(fe,"createComparator");let me=fe(A);return{async next(){let Z;if(D)if(Z=D.next(),Z.done){if(z)return O.onDone&&O.onDone(),Z}else return{value:await P.call(this,Z.value)};L=[],re&&L.push(re);do if(Z=await x.next(),Z.done){if(z=!0,L.length)break;return O.onDone&&O.onDone(),Z}else{let J=Z.value;if(J?.then&&(J=await J),ne){let Te=Bu(J,ne,b);if(de)de=!1,B=Te;else if(Te!==B){B=Te,re=J;break}}L.push(J)}while(!0);return A.isGrouped,L.sort(me),D=L[Symbol.iterator](),Z=D.next(),Z.done?(O.onDone&&O.onDone(),Z):{value:await P.call(this,Z.value)}},return(){O.onDone&&O.onDone(),x.return()},throw(){O.onDone&&O.onDone(),x.throw()}}};let H=o(D=>{if(typeof S=="object"&&Array.isArray(D.attribute))for(let x=0;x<S.length;x++){let z=S[x],ne;if(z.name===D.attribute[0]){for(ne=z.sort||(z.sort={});ne.next;)ne=ne.next;ne.attribute=D.attribute.slice(1),ne.descending=D.descending}else z===D.attribute[0]&&(S[x]=ne={name:z,sort:{attribute:D.attribute.slice(1),descending:D.descending}})}D.next&&H(D.next)},"applySortingOnSelect");H(A)}else O.iterate=(_[Symbol.asyncIterator]||_[Symbol.iterator]).bind(_),O=O.map(function(L){try{let H=P.call(this,L);return typeof H?.catch=="function"?H.catch(D=>{throw D.partialObject={[t]:L.key},D}):H}catch(H){throw H.partialObject={[t]:L.key},H}});return O}static transformEntryForSelect(_,S,A,b,I,P){let O;I&&C&&!(typeof _=="string"?[_]:_)?.every(D=>{let x;return typeof D=="object"?x=D.name:x=D,r[x]||x===t})&&(O=!0);let L,H=o(function(D){let x;if(S?.transaction?.stale&&(S.transaction.stale=!1),D!=null){if(x=D.deref?D.deref():D.value,!x&&(D.key===void 0||D.deref)||D.metadataFlags&vn){if(D.metadataFlags&vn&&S.replicateFrom===!1&&P&&D.residencyId)return lc.SKIP;if(D=Ua(D.key??D,S,{transaction:A,lazy:_?.length<4,ensureLoaded:I},this?.isSync,z=>z),D?.then)return D.then(H.bind(this));x=D?.value}if(O&&D?.metadataFlags&(vn|Ja)||D?.expiresAt!=null&&D?.expiresAt<Date.now()){if(S.onlyIfCached)return{[t]:D.key,message:"This entry has expired"};let z=Xc(D.key??D,D,S);if(z?.then)return z.then(H)}}if(x==null)return P?lc.SKIP:x;if(_&&!(_[0]==="*"&&_.length===1)){let z,ne=o((B,de)=>{let fe;typeof B=="object"?fe=B.name:fe=B;let me=Zt?.[fe],Z;if(me){let J=b?.[fe];if(J)if(J.hasMappings){let Ee=me.from?x[me.from]:rd(D.key);Z=J.get(Ee),Z||(Z=[])}else Z=J.fromRecord?.(x);else Z=me(x,S,D,!0);let Te=o(Ee=>{if(me.directReturn)return de(Ee,fe);if(Ee&&typeof Ee=="object"){let pe=me.definition?.tableClass||Pe;L||(L={});let mt=L[fe]||(L[fe]=pe.transformEntryForSelect(fe===B?null:B.select||(Array.isArray(B)?B:null),S,A,J,I));if(Array.isArray(Ee)){let et=[],tt=pe.transformToOrderedSelect(Ee,B.select,typeof B.sort=="object"&&B.sort,S,A,mt)[this.isSync?Symbol.iterator:Symbol.asyncIterator](),Se=o(nt=>{for(;!nt.done;){if(nt?.then)return nt.then(Se);et.push(nt.value),nt=tt.next()}de(et,fe)},"nextValue"),rt=Se(tt.next());rt&&(z||(z=[]),z.push(rt));return}else if(Ee=mt.call(this,Ee),Ee?.then){z||(z=[]),z.push(Ee.then(et=>de(et,fe)));return}}de(Ee,fe)},"handleResolvedValue");Z?.then?(z||(z=[]),z.push(Z.then(Te))):Te(Z);return}else Z=x[fe],Z&&typeof Z=="object"&&fe!==B&&(Z=Pe.transformEntryForSelect(B.select||B,S,A,null)({value:Z}));de(Z,fe)},"selectAttribute"),re;if(typeof _=="string")ne(_,B=>{re=B});else if(Array.isArray(_))if(_.asArray)re=[],_.forEach((B,de)=>{B==="*"?_[de]=x:ne(B,fe=>re[de]=fe)});else{re={};let B=_.forceNulls;for(let de of _)if(de==="*")for(let fe in x)re[fe]=x[fe];else ne(de,(fe,me)=>{fe===void 0&&B&&(fe=null),re[me]=fe})}else throw new at.ClientError("Invalid select"+_);return z?Promise.all(z).then(()=>re):re}return x},"transform");return H}async subscribe(_){if(!l)throw new Error("Can not subscribe to a table without an audit log");g||Je({table:s,database:c,schemaDefined:u,attributes:T,audit:!0}),_||(_={});let S=!_.rawEvents,A=[],b=this,I=jb(Pe,this.getId()??null,function(O,L,H,D){try{let x=L.getValue?.(i,S),z=L.type;if(!x&&z==="patch"&&S){let re=i.getEntry(O);re?.version===L.version?x=re.value:x=L.getValue?.(i,!0,H),z="put"}let ne={id:O,localTime:H,value:x,version:L.version,type:z,beginTxn:D};A?A.push(ne):this.send(ne)}catch(x){Me.default.error?.(x)}},_.startTime||0,_),P=(async()=>{this.isCollection&&(I.includeDescendants=!0,_.onlyChildren&&(I.onlyChildren=!0)),_.supportsTransactions&&(I.supportsTransactions=!0);let O=this.getId(),L=_.previousCount;L>1e3&&(L=1e3);let H=_.startTime;if(this.isCollection){if(H){if(L)throw new at.ClientError("startTime and previousCount can not be combined for a table level subscription");for(let{key:D,value:x}of l.getRange({start:H,exclusiveStart:!0,snapshot:!1})){let z=bt(x);if(z.tableId!==n)continue;let ne=z.recordId;if(O==null||bq(O,ne)){let re=z.getValue(i,S,D);if(I.send({id:ne,localTime:D,value:re,version:z.version,type:z.type}),I.queue?.length>yq&&await I.waitForDrain()===!1)return}I.startTime=D}}else if(L){let D=[];for(let{key:x,value:z}of l.getRange({start:"z",end:!1,reverse:!0}))try{let ne=bt(z);if(ne.tableId!==n)continue;let re=ne.recordId;if(O==null||bq(O,re)){let B=ne.getValue(i,S,x);if(D.push({id:re,localTime:x,value:B,version:ne.version,type:ne.type}),--L<=0)break}}catch(ne){Me.default.error("Error getting history entry",x,ne)}for(let x=D.length;x>0;)I.send(D[--x]);D[0]&&(I.startTime=D[0].localTime)}else if(!_.omitCurrent){for(let{key:D,value:x,version:z,localTime:ne}of i.getRange({start:O??!1,end:O==null?void 0:[O,Gl.MAXIMUM_KEY],versions:!0,snapshot:!1}))if(x&&(I.send({id:D,localTime:ne,value:x,version:z,type:"put"}),I.queue?.length>yq&&await I.waitForDrain()===!1))return}}else{L&&!H&&(H=0);let D=this.#n?.localTime;if(D===Hb&&(i.cache?.delete(O),this.#n=i.getEntry(O),Me.default.trace?.("re-retrieved record",D,this.#n?.localTime),D=this.#n?.localTime),Me.default.trace?.("Subscription from",H,"from",O,D),H<D){let x=[],z=D;do{let ne=l.get(z);if(ne){_.omitCurrent=!0;let re=bt(ne),B=re.getValue(i,S,z);S&&(re.type="put"),x.push({id:O,value:B,localTime:z,...re}),z=re.previousLocalTime}else break;L&&L--}while(z>H&&L!==0);for(let ne=x.length;ne>0;)I.send(x[--ne]);I.startTime=D}!_.omitCurrent&&this.doesExist()&&I.send({id:O,localTime:D,value:this.#e,version:this.#r,type:"put"})}for(let D of A)I.send(D);A=null})();return _.listener&&I.on("data",_.listener),I}static subscribeOnThisThread(_,S){return _===0||S?.crossThreads===!1}doesExist(){return!!(this.#e||this.#s)}publish(_,S,A){if(S===void 0||S instanceof URLSearchParams)this._writePublish(this.getId(),_,S);else{let b=!0,I=this.getContext();return _.checkPermission&&(b=this.allowCreate(I.user,_,I)),ks(b,P=>{if(!P)throw new at.AccessViolation(I.user);let O=Ar(_);this._writePublish(O,S,A)})}}_writePublish(_,S,A){let b=vr(this.getContext());_??=null,_!==null&&Mr(_);let I=this.getContext();b.addWrite({key:_,store:i,entry:this.#n,nodeName:I?.nodeName,validate:o(()=>{I?.source||(b.checkOverloaded(),this.validate(S))},"validate"),before:Ne.publish?.bind(this,I,_,S),beforeIntermediate:ka(S,Ue.publish?.bind(this,I,_,S)),commit:o((P,O,L)=>{O===void 0&&y&&!g&&Ha(),Me.default.trace?.(`Publishing message to id: ${_}, timestamp: ${new Date(P).toISOString()}`),R(_,O?.value??null,O,O?.version||P,0,!0,{user:I?.user,residencyId:A?.residencyId,expiresAt:I?.expiresAt,nodeId:A?.nodeId},"message",!1,S)},"commit")})}validate(_,S){let A,b=o((I,P,O)=>{if(P.type&&I!=null)if(S&&I.__op__&&(I=I.value),P.properties){typeof I!="object"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an object${P.type?" ("+P.type+")":""}`);let L=P.properties;for(let H=0,D=L.length;H<D;H++){let x=L[H];if(x.relationship||x.computed){_.hasOwnProperty(x.name)&&(A||(A=[])).push(`Computed property ${O}.${x.name} may not be directly assigned a value`);continue}let z=b(I[x.name],x,O+"."+x.name);z&&(I[x.name]=z)}if(P.sealed&&I!=null&&typeof I=="object")for(let H in I)L.find(D=>D.name===H)||(A||(A=[])).push(`Property ${H} is not allowed within object in property ${O}`)}else switch(P.type){case"Int":(typeof I!="number"||I>>0!==I)&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an integer (from -2147483648 to 2147483647)`);break;case"Long":(typeof I!="number"||!(Math.floor(I)===I&&Math.abs(I)<=9007199254740992))&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an integer (from -9007199254740992 to 9007199254740992)`);break;case"Float":typeof I!="number"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a number`);break;case"ID":typeof I=="string"||I?.length>0&&I.every?.(L=>typeof L=="string")||(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a string, or an array of strings`);break;case"String":typeof I!="string"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a string`);break;case"Boolean":typeof I!="boolean"&&(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a boolean`);break;case"Date":if(!(I instanceof Date)){if(typeof I=="string"||typeof I=="number")return new Date(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Date`)}break;case"BigInt":if(typeof I!="bigint"){if(typeof I=="string"||typeof I=="number")return BigInt(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a bigint`)}break;case"Bytes":if(!(I instanceof Uint8Array)){if(typeof I=="string")return Buffer.from(I);(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Buffer or Uint8Array`)}break;case"Blob":if(!(I instanceof Ds)){if(typeof I=="string"&&(I=Buffer.from(I)),I instanceof Buffer)return createBlob(I,{type:"text/plain"});(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be a Blob`)}break;case"array":if(Array.isArray(I)){if(P.elements)for(let L=0,H=I.length;L<H;L++){let D=I[L],x=b(D,P.elements,O+"[*]");x&&(I[L]=x)}}else(A||(A=[])).push(`Value ${qs(I)} in property ${O} must be an Array`);break}P.nullable===!1&&I==null&&(A||(A=[])).push(`Property ${O} is required (and not does not allow null values)`)},"validateValue");for(let I=0,P=T.length;I<P;I++){let O=T[I];if(O.relationship||O.computed){Object.hasOwn(_,O.name)&&(A||(A=[])).push(`Computed property ${O.name} may not be directly assigned a value`);continue}if(!S||O.name in _){let L=b(_[O.name],O,O.name);L!==void 0&&(_[O.name]=L)}}if(f)for(let I in _)T.find(P=>P.name===I)||(A||(A=[])).push(`Property ${I} is not allowed`);if(A)throw new at.ClientError(A.join(". "))}getUpdatedTime(){return this.#r}wasLoadedFromSource(){return C?!!this.#i:void 0}static async addAttributes(_){let S=T.slice(0);for(let A of _){if(!A.name)throw new at.ClientError("Attribute name is required");if(A.name.match(/[`/]/))throw new at.ClientError("Attribute names cannot include backticks or forward slashes");bae(A.name),S.push(A)}return Je({table:s,database:c,schemaDefined:u,attributes:S}),Pe.indexingOperation}static async removeAttributes(_){let S=T.filter(A=>!_.includes(A.name));return Je({table:s,database:c,schemaDefined:u,attributes:S}),Pe.indexingOperation}static getSize(){let _=i.getStats();return(_.treeBranchPageCount+_.treeLeafPageCount+_.overflowPages)*_.pageSize}static getAuditSize(){let _=l?.getStats();return _&&(_.treeBranchPageCount+_.treeLeafPageCount+_.overflowPages)*_.pageSize}static getStorageStats(){let _=i.env.path,S=mw.default.statfsSync?.(_)??{};return{available:S.bavail*S.bsize,free:S.bfree*S.bsize,size:S.blocks*S.bsize}}static async getRecordCount(_){let S=i.getStats().entryCount,A=1e3/2,b=performance.now(),I=Math.floor(S/2),P=_?.exactCount,O=0,L=0,H;for(let{value:D}of i.getRange({start:!0,lazy:!0,snapshot:!1}))if(D!=null&&O++,L++,await cc(),!P&&L<I&&performance.now()-b>A){H=L;break}if(H){let D=O;O=0;for(let{value:Z}of i.getRange({start:"\uFFFF",reverse:!0,lazy:!0,limit:H,snapshot:!1}))Z!=null&&O++,await cc();let x=H*2,z=(O+D)/x,ne=Math.pow((O-D+1)/H/2,2)+z*(1-z)/x,re=Math.max(Math.sqrt(ne)*S,1),B=Math.round(z*S),de=Math.max(B-1.96*re,O+D),fe=Math.min(B+1.96*re,S),me=Math.pow(10,Math.round(Math.log10(re)));return me>B&&(me=me/10),O=Math.round(B/me)*me,{recordCount:O,estimatedRange:[Math.round(de),Math.round(fe)]}}return{recordCount:O}}static updatedAttributes(){Zt=this.propertyResolvers={$id:o((_,S,A)=>({value:A.key}),"$id"),$updatedtime:o((_,S,A)=>A.version,"$updatedtime"),$updatedTime:o((_,S,A)=>A.version,"$updatedTime"),$expiresAt:o((_,S,A)=>A.expiresAt,"$expiresAt"),$record:o((_,S,A)=>A?{value:_}:_,"$record"),$distance:o((_,S,A)=>A&&(A.distance??S?.vectorDistances?.get(A)),"$distance")};for(let _ of this.attributes){_.isPrimaryKey&&(k=_),_.resolve=null;let S=_.relationship,A=_.computed;if(S)if(_.indexed&&console.error("A relationship property can not be directly indexed, (but you may want to index the foreign key attribute)"),A&&console.error("A relationship property is already computed and can not be combined with a computed function (the relationship will be given precedence)"),dm=!0,S.to)_.elements?.definition?(Zt[_.name]=_.resolve=(b,I,P,O)=>{let L=b[S.from?S.from:t],H=_.elements.definition.tableClass;return O?td({attribute:S.to,value:L},vr(I).getReadTxn(),!1,H,!1).map(D=>D&&D.key!==void 0?D:H.primaryStore.getEntry(D,{transaction:vr(I).getReadTxn()})).asArray:H.search([{attribute:S.to,value:L}],I).asArray},_.set=()=>{},_.resolve.definition=_.elements.definition,_.resolve.to=S.to,S.from&&(_.resolve.from=S.from)):console.error(`The one-to-many/many-to-many relationship property "${_.name}" in table "${s}" must have an array type referencing a table as the elements`);else if(S.from){let b=_.definition||_.elements?.definition;b?(Zt[_.name]=_.resolve=(I,P,O,L)=>{let H=I[S.from];if(H===void 0)return;if(_.elements){let x,z=H?.map(ne=>{let re=b.tableClass.primaryStore[L?"getEntry":"get"](ne,{transaction:vr(P).getReadTxn()});return re?.then&&(x=!0),Pe.loadAsInstance===!1&&Object.freeze(L?re?.value:re),re});return S.filterMissing?x?Promise.all(z).then(ne=>ne.filter(Iq)):z.filter(Iq):x?Promise.all(z):z}let D=b.tableClass.primaryStore[L?"getEntry":"get"](H,{transaction:vr(P).getReadTxn()});return Pe.loadAsInstance===!1&&Object.freeze(L?D?.value:D),D},_.set=(I,P)=>{if(Array.isArray(P)){let O=P.map(L=>L.getId?.()||L[b.tableClass.primaryKey]);I[S.from]=O}else{let O=P.getId?.()||P[b.tableClass.primaryKey];I[S.from]=O}},_.resolve.definition=_.definition||_.elements?.definition,_.resolve.from=S.from):console.error(`The relationship property "${_.name}" in table "${s}" must be a type that references a table`)}else console.error(`The relationship directive on "${_.name}" in table "${s}" must use either "from" or "to" arguments`);else if(A)typeof A.from=="function"&&this.setComputedAttribute(_.name,A.from),Zt[_.name]=_.resolve=(b,I,P)=>{let O=typeof A.from=="string"?b[A.from]:b,L=this.userResolvers[_.name];if(L)return L(O,I,P);Me.default.warn(`Computed attribute "${_.name}" does not have a function assigned to it. Please use setComputedAttribute('${_.name}', resolver) to assign a resolver function.`),this.userResolvers[_.name]=()=>{}},_.resolve.directReturn=!0;else if(r[_.name]?.customIndex?.propertyResolver){let b=r[_.name].customIndex;Zt[_.name]=(I,P,O)=>{let L=I[_.name];return b.propertyResolver(L,P,O)},Zt[_.name].directReturn=!0}}Ah(this,this),Ah(hm,this,!0);for(let _ of T){let S=_.name;_.resolve&&Object.defineProperty(i.encoder.structPrototype,S,{get(){return _.resolve(this,sd.getStore())},set(A){return _.set(this,A)},configurable:!0})}}static setComputedAttribute(_,S){let A=Ji(T,_);if(!A){console.error(`The attribute "${_}" does not exist in the table "${s}"`);return}if(!A.computed){console.error(`The attribute "${_}" is not defined as computed in the table "${s}"`);return}this.userResolvers[_]=S}static async deleteHistory(_=0,S=!1){let A;for(let{key:b,value:I}of l.getRange({start:0,end:_}))await cc(),bt(I).tableId===n&&(A=eg(l,b,I));if(S)for(let b of i.getRange({start:0,versions:!0})){let{key:I,value:P,localTime:O}=b;await cc(),P===null&&O<_&&(A=_l(i,b))}await A}static async*getHistory(_=0,S=1/0){for(let{key:A,value:b}of l.getRange({start:_||1,end:S})){await cc();let I=bt(b);I.tableId===n&&(yield{id:I.recordId,localTime:A,version:I.version,type:I.type,value:I.getValue(i,!0,A),user:I.user,operation:I.originatingOperation})}}static async getHistoryOfRecord(_){let S=[];if(_==null)throw new Error("An id is required");let A=i.getEntry(_);if(!A)return S;let b=A.localTime;if(!b)throw new Error("The entry does not have a local audit time");let I=0;do{await cc();let P=l.get(b);if(P){let O=bt(P);S.push({id:O.recordId,localTime:b,version:O.version,type:O.type,value:O.getValue(i,!0,b),user:O.user}),b=O.previousLocalTime}else break}while(I<1e3&&b);return S.reverse()}static cleanup(){W?.remove()}}let lE=mS(async(V,_,S)=>{for(let A of Pe.sources)if(A.get&&(!A.get.reliesOnPrototype||A.prototype.get)){if(A.available?.(S)===!1)continue;_.source=A;let b=await A.get(V,_);if(b)return b}},()=>{throw new at.ServerError("Service unavailable, exceeded request queue limit for resolving cache record",503)});Pe.updatedAttributes();let pm=Pe.prototype;return p&&Pe.setTTLExpiration(p/1e3),$&&Hu(),Pe;function Po(V,_,S){let A;for(let b in r){let I=r[b],P=I.isIndexing,O=Zt[b],L=S&&(O?O(S):S[b]),H=_&&(O?O(_):_[b]);if(L===H&&!P)continue;if(I.customIndex){I.customIndex.index(V,L,H);continue}A=!0;let D=I.indexNulls,x=(0,$h.getIndexedValues)(L,D),z=(0,$h.getIndexedValues)(H,D);if(s==="OrganizationRole"&&Me.default.error?.({tableName:s,id:V,key:b,valuesToAdd:x,valuesToRemove:z}),z?.length>0){let ne=new Set(z);if(x=x?x.filter(re=>{if(ne.has(re))ne.delete(re);else return!0}):[],z=Array.from(ne),(z.length>0||x.length>0)&&Sq){let re=z.concat(x).map(B=>({key:B,value:V}));I.prefetch(re,Aq)}for(let re=0,B=z.length;re<B;re++)I.remove(z[re],V)}else x?.length>0&&Sq&&I.prefetch(x.map(ne=>({key:ne,value:V})),Aq);if(x)for(let ne=0,re=x.length;ne<re;ne++)I.put(x[ne],V)}return A}o(Po,"updateIndices");function Mr(V){switch(typeof V){case"number":return!0;case"string":if(V.length<659)return!0;if(V.length>Rq)throw new Error("Primary key size is too large: "+V.length);break;case"object":if(V===null)throw new Error("Invalid primary key of null");break;case"bigint":if(V<2n**64n&&V>-(2n**64n))return!0;break;default:throw new Error("Invalid primary key type: "+typeof V)}if((0,Gl.writeKey)(V,Pae,0)>Rq)throw new Error("Primary key size is too large: "+V.length);return!0}o(Mr,"checkValidId");function Ar(V){return typeof V=="object"&&V?V.id:V}o(Ar,"requestTargetToId");function _m(V){return typeof V=="object"&&V&&V.isCollection}o(_m,"isSearchTarget");function Cs(V){}o(Cs,"isRequestTarget");function Ua(V,_,S,A,b){if(Pe.getResidencyById&&S.ensureLoaded&&_?.replicateFrom!==!1){let P=Zc(Pe.getResidencyById(V));if(P&&!P.includes(server.hostname)&&N)return N({key:V,residency:P}).then(b)}let I=o(()=>{if(_?.transaction?.stale&&(_.transaction.stale=!1),S.transaction?.isDone)return b(null,V);let P=i.getEntry(V,S);return _?._freezeRecords&&Object.freeze(P?.value),P?.residencyId&&P.metadataFlags&vn&&N&&S.ensureLoaded&&_?.replicateFrom!==!1?N(P).then(O=>b(O,V),O=>(Me.default.error?.("Error loading remote record",V,P,S,O),b(null,V))):(P&&_&&(P?.version>(_.lastModified||0)&&(_.lastModified=P.version),P?.localTime&&!_.lastRefreshed&&(_.lastRefreshed=P.localTime)),b(P,V))},"whenPrefetched");return A?I():ie>0?(ie--,I()):new Promise((P,O)=>{ie===0?(ie--,i.prefetch([V],()=>{L(),H()})):(ce.push(V),le.push(H),ce.length>CA&&(ie--,L()));function L(){if(ce.length>0){let D=le;i.prefetch(ce,()=>{ie===-1?L():ie++;for(let x of D)x()}),ce=[],le=[],he>2&&he--}else ie=he,he<cE&&he++}o(L,"prefetch");function H(){try{P(I())}catch(D){O(D)}}o(H,"load")})}o(Ua,"loadLocalRecord");function xa(V,_){let S=_?.checkPermission;if(typeof S!="object"){if(!V?.role)return;S=V.role.permission}if(S.super_user)return Dae;let A=S[c],b,I=A?.tables;if(I)return I[s];if(c==="data"&&(b=S[s])&&!b.tables)return b}o(xa,"getTablePermissions");function Xc(V,_,S,A){if(C){let b=!1;if(S.noCache?b=!0:(_?(!_.value||_.metadataFlags&(vn|Ja)||_.expiresAt!=null&&_.expiresAt<Date.now())&&(b=!0):b=!0,Qr(!b,"cache-hit",s)),b){let I=uE(V,_,S).then(P=>(P?.value&&P?.value.getRecord?.()&&Me.default.error?.("Can not assign a record that is already a resource"),S&&(P?.version>(S.lastModified||0)&&(S.lastModified=P.version),S.lastRefreshed=Date.now()),P));if(S?.onlyIfCached||_?.value&&A?.allowStaleWhileRevalidate?.(_,V)){if(I.catch(P=>Me.default.warn?.(P)),S?.onlyIfCached&&!A.doesExist())throw new at.ServerError("Entry is not cached",504);return}else return I}}else if(_?.value&&_.expiresAt!=null&&_.expiresAt<Date.now())return Pe.evict(_.key,_.value,_.version),_.value=null,{then(b){return b(_)}}}o(Xc,"ensureLoadedFromSource");function vr(V){let _=V?.transaction;if(_){if(!_.lmdbDb)return _.lmdbDb=i,_;do{if(_.lmdbDb?.path===i.path)return _;let S=_.next;if(!S)return _=_.next=new Lo,_.lmdbDb=i,_;_=S}while(!0)}else return new PE}o(vr,"txnForContext");function Bu(V,_,S){if(!V)return;let A=(V.deref?V.deref():V.value)??i.getEntry(V.key)?.value;if(typeof _=="object"){let I=Zt,P=A;for(let O=0,L=_.length;O<L;O++){let H=_[O],D=I?.[H];P=D&&P?D(P,S,V):P?.[H],V=null,I=D?.definition?.tableClass?.propertyResolvers}return P}let b=Zt[_];return b?b(A,S,V):A[_]}o(Bu,"getAttributeValue");function Fu(V,_,S,A,b){let I=b?.length,P={transaction:A,lazy:I>0||typeof _=="string"||_?.length<4,alwaysPrefetch:!0},O;function L(H,D){let x=H?.value;if(!x)return lc.SKIP;for(let z=0;z<I;z++)if(!O?.includes(z)&&!b[z](x,H))return lc.SKIP;return D!==void 0&&(H.key=D),H}if(o(L,"processEntry"),I>0||!V.hasEntries){let H=V.map(D=>{if(O=null,typeof D=="object"&&D?.key!==void 0)return I>0?L(D):D;if(D==null)return lc.SKIP;for(let x=0;x<I;x++){let ne=b[x].idFilter;if(ne){if(!ne(D))return lc.SKIP;O||(O=[]),O.push(x)}}return Ua(D,S,P,!1,L)});return Array.isArray(V)&&(H=H.filter(D=>D!==lc.SKIP)),H.hasEntries=!0,H}return V}o(Fu,"transformToEntries");function Ba(V,_,S=server.replication?.getThisNodeId(l)){if(V<=_?.version){if(_?.version===V&&S!==void 0){let A=server.replication?.exportIdMapping(l),b=_.localTime,I=b&&l.get(b);if(I){let P,O,L=bt(I);for(let H in A)A[H]===S&&(P=H),A[H]===L.nodeId&&(O=H);if(P>O)return 1;if(P===O)return 0}}return-1}return 1}o(Ba,"precedesExistingVersion");async function uE(V,_,S){let A=_?.metadataFlags,b=_?.version,I,P;if(!i.attemptLock(V,b,()=>{clearTimeout(P);let D=i.getEntry(V);!D||!D.value||D.metadataFlags&(vn|Ja)?I(uE(V,i.getEntry(V),S)):I(D)}))return new Promise(D=>{I=D,P=setTimeout(()=>{i.unlock(V,b)},Oae)});let O=_?.value,L={requestContext:S,replacingRecord:O,replacingEntry:_,replacingVersion:b,noCacheStore:!1,source:null,resourceCache:S?.resourceCache,transaction:void 0,expiresAt:void 0,lastModified:void 0},H=S?.responseHeaders;return new Promise((D,x)=>{let z;ks(Ut(L,async ne=>{let re=performance.now(),B,de,fe;try{B=await lE(V,L,_),fe=A&vn;let Z=L.lastModified||fe&&b;de=fe||Z>b||!O,Z||(Z=(0,$h.getNextMonotonicTime)());let J=performance.now()-re;if(ot(J,"cache-resolution",s,null,"success"),H&&qh(H,"Server-Timing",`cache-resolve;dur=${J.toFixed(2)}`,!0),ne.timestamp=Z,p&&L.expiresAt==null&&(L.expiresAt=Date.now()+p),B){if(typeof B!="object")throw new Error("Only objects can be cached and stored in tables");if(B.status>0&&B.headers)if(B.status>=300)if(B.status===304)B=O,Z=b;else throw new at.ServerError(B.body||"Error from source",B.status);else B=B.body;typeof B.toJSON=="function"&&(B=B.toJSON()),t&&B[t]!==V&&(B[t]=V)}z=!0,D({key:V,version:Z,value:B})}catch(Z){Z.message+=` while resolving record ${V} for ${s}`,O&&((Z.code==="ECONNRESET"||Z.code==="ECONNREFUSED"||Z.code==="EAI_AGAIN")&&!S?.mustRevalidate||S?.staleIfError&&(Z.statusCode===500||Z.statusCode===502||Z.statusCode===503||Z.statusCode===504))?(D({key:V,version:b,value:O}),Me.default.trace?.(Z.message,"(returned stale record)")):x(Z);let J=performance.now()-re;ot(J,"cache-resolution",s,null,"fail"),H&&qh(H,"Server-Timing",`cache-resolve;dur=${J.toFixed(2)}`,!0),L.transaction.abort();return}if(S?.noCacheStore||L.noCacheStore){L.transaction.abort();return}vr(L).addWrite({key:V,store:i,entry:_,nodeName:"source",before:ka(B),commit:o((Z,J)=>{if(J?.version!==b)return;let Te=Po(V,O,B);if(B){Ue.put?.(L,V,B),J&&(S.previousResidency=Pe.getResidencyRecord(J.residencyId));let Ee,pe=!1,mt,et=Zc(Pe.getResidency(B,S));if(et){if(!et.includes(server.hostname))if(Ee=B,pe=!0,Pe.getResidencyById)B=void 0;else{B=null;for(let tt in r)B||(B={}),B[tt]=Ee[tt]}mt=el(et)}Me.default.trace?.(`Writing resolved record from source with id: ${V}, timestamp: ${new Date(Z).toISOString()}`),R(V,B,J,Z,pe?vn:0,g&&(de||pe)||null,{user:L?.user,expiresAt:L.expiresAt,residencyId:mt},"put",!!fe,Ee)}else J&&(Ue.delete?.(L,V),Me.default.trace?.(`Deleting resolved record from source with id: ${V}, timestamp: ${new Date(Z).toISOString()}`),g||y?R(V,null,J,Z,0,g&&de||null,{user:L?.user},"delete",!!fe):_l(i,J,b))},"commit")})}),()=>{i.unlock(V,b)},ne=>{i.unlock(V,b),z&&Me.default.error?.("Error committing cache update",ne)})})}o(uE,"getFromSource");function Fa(V){if(!V||V.user?.role?.permission?.super_user)return!0;if(V.replicateTo)throw new at.ClientError("Can not specify replication parameters without super user permissions",403);if(V.replicatedConfirmation)throw new at.ClientError("Can not specify replication confirmation without super user permissions",403);return!0}o(Fa,"checkContextPermissions");function Ha(V){let _=!1;if(V&&(V-yr>1&&(_=!0),yr=V),!(xe===Xt&&!_)&&(Xt=xe,(0,kl.getWorkerIndex)()===(0,kl.getWorkerCount)()-1))return kt&&clearTimeout(kt),xe?new Promise(S=>{let A=new Date;A.setMonth(0),A.setDate(1),A.setHours(0),A.setMinutes(0),A.setSeconds(0);let b=xe/(1+yr),I=_?Date.now():Math.ceil((Date.now()-A.getTime())/b)*b+A.getTime(),P=o(O=>{Me.default.trace?.(`Scheduled next cleanup scan at ${new Date(O)}`),kt=setTimeout(()=>te=te.then(async()=>{if(P(Math.max(O+xe,Date.now())),i.rootStore.status!=="open"){clearTimeout(kt);return}let L=50,H=new Array(L),D=0,x=Math.pow(yr,8)*(ql.get(U.STORAGE_RECLAMATION_EVICTIONFACTOR)??1e5),z=E/Math.pow(Math.max(yr,1),4);Me.default.info?.(`Starting cleanup scan for ${s}, evict threshold ${x}, adjusted eviction ${z}ms`);function ne(re,B,de,fe){let me=re+z-Date.now();if(me<0)return!0;if(yr){let Z=i.lastSize;return de&Wr&&al(fe,J=>{J.size&&(Z+=J.size)}),Me.default.trace?.(`shouldEvict adjusted ${me} ${Z}, ${me*(re-B)/Z} < ${x}`),me*(re-B)/Z<x}return!1}o(ne,"shouldEvict");try{let re=0;for(let B of i.getRange({start:!1,snapshot:!1,versions:!0,lazy:!0})){let{key:de,value:fe,version:me,expiresAt:Z,metadataFlags:J}=B,Te;fe===null&&!g&&me+wae<Date.now()?Te=_l(i,B,me):Z!=null&&ne(Z,me,J,fe)&&(Te=Pe.evict(de,fe,me),re++),Te&&(await H[D],H[D]=Te.catch(Ee=>{Me.default.error?.("Cleanup error",Ee)}),++D>=L&&(D=0)),await cc()}Me.default.info?.(`Finished cleanup scan for ${s}, evicted ${re} entries`)}catch(re){Me.default.warn?.(`Error in cleanup scan for ${s}:`,re)}S(void 0),yr=0}),Math.min(O-Date.now(),2147483647)).unref()},"startNextTimer");P(I)}):void 0}o(Ha,"scheduleCleanup");function Em(){W=l?.addDeleteRemovalCallback(n,i,(V,_)=>{i.remove(V,_)})}o(Em,"addDeleteRemoval");function Hu(){(0,kl.getWorkerIndex)()===0&&setInterval(async()=>{if(!Qc){Qc=!0;try{let V=$.name,_=r[V];if(!_)throw new Error(`expiresAt attribute ${$} must be indexed`);for(let S of _.getRange({start:!0,values:!1,end:Date.now(),snapshot:!1})){for(let A of _.getValues(S)){let b=i.getEntry(A);b?.value?b.value[V]<Date.now()&&Pe.evict(A,b.value,b.version):i.ifVersion(A,b?.version,()=>_.remove(S,A))}await cc()}}catch(V){Me.default.error?.("Error in evicting old records",V)}finally{Qc=!1}}},Nae).unref()}o(Hu,"runRecordExpirationEviction");function Zc(V){if(V!=null){if(Array.isArray(V))return V;if(typeof V=="number"){if(V>=65536)throw new Error(`Shard id ${V} must be below 65536`);let _=server.shards?.get?.(V);if(_)return Me.default.trace?.(`Shard ${V} mapped to ${_.map(S=>S.name).join(", ")}`),_.map(S=>S.name);throw new Error(`Shard ${V} is not defined`)}throw new Error(`Shard or residency list ${V} is not a valid type, must be a shard number or residency list of node hostnames`)}}o(Zc,"residencyFromFunction");function el(V){if(V){let _=V.join(","),S=d.get([Symbol.for("residency_by_set"),_]);return S||(d.put([Symbol.for("residency_by_set"),_],S=Math.floor(Math.random()*2147418112)+65535),d.put([Symbol.for("residency_by_id"),S],V),S)}}o(el,"getResidencyId");function ka(V,_){let S=yb(V,i.rootStore);if(S){let A=_;return A?async()=>{await A(),await S}:()=>S}return _}o(ka,"preCommitBlobsForRecordBefore")}function fw(e,t){let r=e.attr_object||(e.attr_object={}),n=r[t];if(n)return n;n=r[t]=Object.create(null);for(let s of e)n[s.attribute_name]=s[t];return n}function Aq(){}function pS(e,t){let r=t?.type;if(e===null)return e;if(e===""&&r&&r!=="String"&&r!=="Any")return null;try{switch(r){case"Int":case"Long":if(e[0]==="$")return hS(parseInt(e.slice(1),36));if(e==="null")return null;if(!/^-?[0-9]+$/.test(e)&&!(e instanceof Date))throw new SyntaxError;return hS(+e);case"Float":return e==="null"?null:hS(+e);case"BigInt":return e==="null"?null:BigInt(e);case"Boolean":return e==="true"?!0:e==="false"?!1:e;case"Date":if(isNaN(e)){if(e==="null")return null;Lae.test(e)||(e+="Z");let n=new Date(e);return hS(n.getTime()),n}return new Date(+e);case void 0:case"Any":return(0,_S.autoCast)(e);default:return e}}catch(n){throw n.message=`Invalid value for attribute ${t.name}: "${e}", expecting ${r}`,n.statusCode=400,n}}function hS(e){if(isNaN(e))throw new SyntaxError;return e}function bq(e,t){if(e==null)return!0;if(!Array.isArray(t))return e===t||t.startsWith?.(e);if(Array.isArray(e)){let r=e.length;if(e[r-1]===null&&r--,t.length>=r){for(let n=0;n<r;n++)if(t[n]!==e[n])return!1;return!0}return!1}else if(t[0]===e)return!0}function ks(e,t,r){return e?.then?e.then(t,r):t(e)}function Iq(e){return e!=null}function qs(e){try{return JSON.stringify(e)}catch{return e}}function Mae(e){let t=process.pid;return e.env.readerList().slice(1).some(r=>+r.match(/\d+/)?.[0]!=t)}var lc,$h,Nq,wq,ql,at,Vh,Kh,Me,Gl,kl,_S,mw,Aae,bae,Iae,Nae,wae,Sq,Oae,Tq,Cae,vn,Ja,Pae,Rq,yq,Dae,Wve,Lae,cc,fg=ue(()=>{F();lc=require("lmdb"),$h=w(Dn()),Nq=w(require("lodash")),wq=w(Lm());Qa();vm();ql=w(oe());Jb();at=w(ge()),Vh=w(Vo()),Kh=w(Si());De();dg();Me=w(hi());lN();nl();Gl=require("ordered-binary"),kl=w(st());Ki();_S=w(se());hl();ao();ME();Gh();mw=w(require("node:fs"));ts();JE();dw();({sortBy:Aae}=Nq.default),{validateAttribute:bae}=wq.default,Iae=new Uint8Array(9);Iae[8]=192;Nae=6e4,wae=864e5;ql.initSync();Sq=ql.get(U.STORAGE_PREFETCHWRITES),Oae=1e4,Tq=1,Cae=2,vn=1,Ja=8,Pae=Buffer.allocUnsafeSlow(8192),Rq=1978,yq=100,Dae={read:!0,insert:!0,update:!0,delete:!0,isSuperUser:!0},Wve=(0,_S.convertToMS)(ql.get(U.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE))||864e5;o(ES,"makeTable");o(fw,"attributesAsObject");o(Aq,"noop");Lae=/[+-][0-9]{2}:[0-9]{2}|[a-zA-Z]$/;o(pS,"coerceType");o(hS,"rejectNaN");o(bq,"isDescendantId");cc=o(()=>new Promise(setImmediate),"rest");o(ks,"when");o(Iq,"exists");o(qs,"stringify");o(Mae,"hasOtherProcesses")});function gS(e,t){if(!Array.isArray(e)||!Array.isArray(t))throw new Error("Euclidean distance comparison requires an array");let r=0,n=Math.max(e.length,t.length);for(let s=0;s<n;s++){let i=e[s]||0,a=t[s]||0,c=i-a;r+=c*c}return r}function SS(e,t){if(!Array.isArray(e)||!Array.isArray(t))throw new Error("Cosine distance comparison requires an array");let r=0,n=0,s=0,i=Math.max(e.length,t.length);for(let a=0;a<i;a++){let c=e[a]||0,l=t[a]||0;r+=c*l,n+=c*c,s+=l*l}return n=Math.sqrt(n),s=Math.sqrt(s),1-r/(n*s||1)}var Cq=ue(()=>{o(gS,"euclideanDistance");o(SS,"cosineDistance")});var Pq,Dq,Nd,co,Id,vae,Uae,TS,Lq=ue(()=>{Cq();Pq=require("msgpackr"),Dq=w(hi()),Nd=w(ge()),co=(0,Dq.loggerWithTag)("HNSW"),Id=Symbol.for("entryPoint"),vae=Symbol.for("key"),Uae=10,TS=class{static{o(this,"HierarchicalNavigableSmallWorld")}static useObjectStore=!0;indexStore;M=16;efConstruction=100;efConstructionSearch=50;mL=1/Math.log(this.M);optimizeRouting=.5;nodesVisitedCount=0;idIncrementer;distance;constructor(t,r){this.indexStore=t,t&&(this.indexStore.encoder.useFloat32=Pq.FLOAT32_OPTIONS.ALWAYS),this.distance=r?.distance==="euclidean"?gS:SS,r&&(r.M!==void 0&&(this.M=r.M,this.mL=1/Math.log(this.M)),r.efConstruction!==void 0&&(this.efConstruction=this.efConstructionSearch=r.efConstruction),r.efConstructionSearch!==void 0&&(this.efConstructionSearch=r.efConstructionSearch),r.mL!==void 0&&(this.mL=r.mL),r.optimizeRouting!==void 0&&(this.optimizeRouting=r.optimizeRouting))}index(t,r,n){let s=typeof t=="number"?[vae,t]:t,i=this.indexStore.get(s);if(!i){if(!r)return;if(!this.idIncrementer){let f=0;for(let m of this.indexStore.getKeys({reverse:!0,limit:1,start:1/0,end:0}))typeof m=="number"&&(f=m);this.idIncrementer=new BigInt64Array([BigInt(f)+1n]),this.idIncrementer=new BigInt64Array(this.indexStore.getUserSharedBuffer("next-id",this.idIncrementer.buffer))}i=Number(Atomics.add(this.idIncrementer,0,1n)),this.indexStore.put(s,i)}let a=new Map,c,l=this.indexStore.get(Id);if(n?c={...this.indexStore.get(i)}:c={},r){let f=l&&this.indexStore.get(l);if(f===void 0){let E=Math.floor(-Math.log(Math.random())*this.mL),g={vector:r,level:E,primaryKey:t};for(let y=0;y<=E;y++)g[y]=[];if(this.indexStore.put(i,g),typeof i!="number")throw new Error("Invalid nodeId: "+i);co.debug?.("setting entry point to",i),this.indexStore.put(Id,i);return}let m=c.level??Math.min(Math.floor(-Math.log(Math.random())*this.mL),Uae),h=f.level;if(m>=h){if(typeof i!="number")throw new Error("Invalid nodeId: "+i);co.debug?.("setting entry point to",i),this.indexStore.put(Id,i)}for(;h>m;){let E=this.searchLayer(r,l,f,this.efConstruction,h);E.length>0&&(l=E[0].id,f=E[0].node),h--}let p=new Array(m+1);for(let E=0;E<=m;E++)p[E]=[];for(let E=Math.min(m,h);E>=0;E--){let g=this.searchLayer(r,l,f,this.efConstruction,E);g=g.slice(0,this.M<<1),g.length===0&&E===0&&co.info?.("should not have zero connections for",l);let y=p[E];for(let T=0;T<g.length;T++){let{id:R,distance:N,node:C}=g[T];if(R===i)continue;let k=[];if(this.optimizeRouting){let Y=!1,$=C[E],W=1+this.optimizeRouting*(1+.5*T/this.M);for(let ce=0;ce<$.length;ce++){let{id:le,distance:ie}=$[ce],he=1+this.optimizeRouting*(1+.5*ce/this.M);for(let Ne=0;Ne<y.length;Ne++){let{id:Ue,distance:xe}=y[Ne];if(Ue===le){N*W>xe+ie?Y=!0:ie*he>N+xe&&(k.push({fromId:Ue,toId:R}),k.push({fromId:R,toId:Ue}));break}}if(Y)break}if(Y)continue}else if(T>=(E>0?this.M:this.M<<1))continue;y.push({id:R,distance:N});for(let{fromId:Y,toId:$}of k){let W=d(Y);W||(W=d(Y,this.indexStore.get(Y)));for(let ce=0;ce<W[E].length;ce++)if(W[E][ce].id===$){Object.isFrozen(W[E])&&(W[E]=W[E].slice()),W[E].splice(ce,1);break}}let te=c[E],q=te?.find(({id:Y})=>Y===R);if(q){let Y=te?.indexOf(q);te.copied||(te=[...te],te.copied=!0,c[E]=te),te.splice(Y,1)}else this.addConnection(R,d(R,C),i,E,N,d)}}this.indexStore.put(i,{vector:r,level:m,primaryKey:t,...p})}else{if(l===i){let f=c.level??0;for(let m=f;m>=0&&(l=c[m][0]?.id,l===void 0);m--);if(l===void 0){let m=-1;for(let{key:h,value:p}of this.indexStore.getRange({start:0,end:1/0}))if(p.level>m){if(l=h,p.level===f)break;m=p.level}}if(l===void 0)this.indexStore.remove(Id);else{if(typeof l!="number")throw new Error("Invalid nodeId: "+l);co.debug?.("setting entry point to",l),this.indexStore.put(Id,l)}}this.indexStore.remove(i)}let u=new Map;if(c.level!==void 0)for(let f=0;f<=c.level;f++){let m=c[f];for(let{id:h}of m){let p=d(h,this.indexStore.get(h));for(let E=0;E<=f;E++)p[E]=p[E]?.filter(({id:g})=>g!==i),p[E].length===0&&(co.info?.("node was left orphaned, will reindex",h),u.set(p.primaryKey,p.vector))}}function d(f,m){let h=a.get(f);return!h&&m&&(h={...m},a.set(f,h)),h}o(d,"updateNode");for(let[f,m]of a)this.indexStore.put(f,m);for(let[f,m]of u)this.index(f,m,m);this.checkSymmetry(i,this.indexStore.get(i))}getEntryPoint(){let t=this.indexStore.get(Id);if(t===void 0)return;let r=this.indexStore.get(t);return{id:t,...r}}searchLayer(t,r,n,s,i,a=this.distance){let c=new Set([r]),l=[{id:r,distance:this.distance(t,n.vector),node:n}],u=[...l];for(;l.length>0;){l.sort((h,p)=>h.distance-p.distance);let d=l.shift(),f=u[u.length-1].distance;if(d.distance>f)break;let m=d.node;for(let{id:h}of m[i]||[]){if(c.has(h)||h===void 0)continue;c.add(h);let p=this.indexStore.get(h);if(!p)continue;this.nodesVisitedCount++;let E=a(t,p.vector);if(E<f||u.length<s){let g={id:h,distance:E,node:p};l.push(g),u.push(g)}}u.sort((h,p)=>h.distance-p.distance),u.length>s&&u.splice(s,u.length-s)}return u.visited=c.size,u}search({target:t,value:r,descending:n,distance:s,comparator:i}){let a=0;switch(i){case"lt":case"le":a=r;case"sort":break;default:throw new Nd.ClientError(`Can not use "${i}" comparator with HNSW`)}if(n)throw new Nd.ClientError("Can not use descending sort order with HNSW");let c;if(s==="cosine")c=SS;else if(s==="euclidean")c=gS;else{if(s)throw new Nd.ClientError("Unknown distance function");c=this.distance}if(!t)throw new Nd.ClientError("A target vector must be provided for an HNSW query");if(!Array.isArray(t))throw new Nd.ClientError("The target vector must be an array");let l=this.getEntryPoint();if(!l)return[];let u=l.id,d=[];for(let f=l.level;f>=0;f--)if(d=this.searchLayer(t,u,l,this.efConstructionSearch,f,c),d.length>0){let m=d[0];l=m.node,u=m.id}return a&&(d=d.filter(f=>f.distance<a)),d.map(f=>({key:f.node.primaryKey,distance:f.distance}))}checkSymmetry(t,r){if(!r)return;let n=0,s;for(;(s=r[n])&&s.length!==0;){for(let{id:i}of s){let a=this.indexStore.get(i);if(!a){co.info?.("could not find neighbor node",a);continue}a[n]?.find(({id:l})=>l==t)||co.info?.("asymmetry detected",a[n])}n++}}addConnection(t,r,n,s,i,a){r[s]||(r[s]=[]);let c=s===0?this.M<<1:this.M;if(this.optimizeRouting&&(c<<=2),r[s].length>=c+(c>>2)){co.warn?.("maxConnections reached, removing some connections",c);let l=[...r[s]];l.sort((f,m)=>f.distance-m.distance);let u=l.slice(0,c),d=l.slice(c);r[s]=u;for(let f of d){let m=a(f.id)??this.indexStore.get(f.id);m&&m[s]&&(m=a(f.id,m),m[s]=m[s].filter(({id:h})=>h!==t),s===0&&m[s].length===0&&co.info?.("should not remove last connection",t,n))}}r[s].find(({id:l})=>l===n)?co.debug?.("already connected",t,n):r[s]=[...r[s],{id:n,distance:i}]}validateConnectivity(t=0){let r=this.getEntryPoint(),n=new Set,s=[r.id];n.add(r.id);let i=0;for(;s.length>0;){let a=s.shift(),c=this.indexStore.get(a);for(let l=t;l<=c.level;l++)for(let{id:u}of c[l]||[])i++,n.has(u)||(n.add(u),s.push(u))}return n.size!==this.totalNodes&&console.log("visited",n.size,"total",this.totalNodes),{isFullyConnected:n.size===this.totalNodes,averageConnections:i/n.size}}get totalNodes(){return Array.from(this.indexStore.getKeys({start:0,end:1/0})).length}estimateCountAsSort(){return Math.sqrt(this.indexStore.getStats().entryCount*this.efConstructionSearch)}propertyResolver(t,r,n){let s=r?.sort;if(s){let i=s.vectorDistances;if(i){let l=i.get(n);if(l)return l}else i=r.vectorDistances=s.vectorDistances=new Map;let a=this.distance;s.type&&(a=s.distance==="euclidean"?gS:SS);let c=a(s.target,t);return i.set(n,c),c}return t}}});var hw,Mq=ue(()=>{Lq();hw={HNSW:TS}});var ut={};Oe(ut,{database:()=>_d,databaseEnvs:()=>Jo,databases:()=>ke,dropDatabase:()=>hN,dropTableMeta:()=>kae,getDatabases:()=>it,getDefaultCompression:()=>NS,getTables:()=>xae,onRemovedDB:()=>Qh,onUpdatedTable:()=>$l,readMetaDb:()=>Yh,resetDatabases:()=>Ld,table:()=>Je,tables:()=>mn});function xae(){return bS||it(),mn||{}}function it(){if(bS)return ke;bS=!0,Cd=new Map;let e=(0,Vt.getHdbBasePath)()&&(0,Bt.join)((0,Vt.getHdbBasePath)(),rl),t=(0,Vt.get)(U.DATABASES)||{};if(process.env.SCHEMAS_DATA_PATH&&(t.data={path:process.env.SCHEMAS_DATA_PATH}),e=process.env.STORAGE_PATH||(0,Vt.get)(U.STORAGE_PATH)||e&&((0,fs.existsSync)(e)?e:(0,Bt.join)((0,Vt.getHdbBasePath)(),_E)),!e)return;if((0,fs.existsSync)(e))for(let n of(0,fs.readdirSync)(e,{withFileTypes:!0})){let s=(0,Bt.basename)(n.name,".mdb");n.isFile()&&(0,Bt.extname)(n.name).toLowerCase()===".mdb"&&!t[s]?.path&&Yh((0,Bt.join)(e,n.name),null,s)}if((0,fs.existsSync)((0,Od.getBaseSchemaPath)())){for(let n of(0,fs.readdirSync)((0,Od.getBaseSchemaPath)(),{withFileTypes:!0}))if(!n.isFile()){let s=(0,Bt.join)((0,Od.getBaseSchemaPath)(),n.name),i=(0,Bt.join)((0,Od.getTransactionAuditStoreBasePath)(),n.name);for(let a of(0,fs.readdirSync)(s,{withFileTypes:!0}))if(a.isFile()&&(0,Bt.extname)(a.name).toLowerCase()===".mdb"){let c=(0,Bt.join)(i,a.name);Yh((0,Bt.join)(s,a.name),(0,Bt.basename)(a.name,".mdb"),n.name,c,!0)}}}if(t)for(let n in t){let s=t[n],i=s.path;if((0,fs.existsSync)(i))for(let c of(0,fs.readdirSync)(i,{withFileTypes:!0}))c.isFile()&&(0,Bt.extname)(c.name).toLowerCase()===".mdb"&&Yh((0,Bt.join)(i,c.name),(0,Bt.basename)(c.name,".mdb"),n);let a=s.tables;if(a)for(let c in a){let l=a[c],u=(0,Bt.join)(l.path,(0,Bt.basename)(c+".mdb"));(0,fs.existsSync)(u)&&Yh(u,c,n,null,!0)}}for(let n in ke){let s=Cd.get(n);if(s){let i=ke[n];n.includes("delete")&&Or.trace(`defined tables ${Array.from(s.keys())}`);for(let a in i)s.has(a)||(Or.trace(`delete table class ${a}`),delete i[a])}else if(delete ke[n],n==="data"){for(let i in mn)delete mn[i];delete mn[IS]}}let r=["hdb_temp","hdb_certificate","hdb_raw_analytics","hdb_session_will","hdb_job","hdb_license","hdb_info"];if((0,Vt.get)(U.ANALYTICS_REPLICATE)===!1?r.push("hdb_analytics"):(ke.system?.hdb_analytics?.enableAuditing(),ke.system?.hdb_analytics_hostname?.enableAuditing()),ke.system)for(let n of r)ke.system[n]&&(ke.system[n].replicate=!1);return Cd=null,ke}function Ld(){bS=!1;for(let[,e]of Jo)e.needsDeletion=!0;it();for(let[e,t]of Jo)if(t.needsDeletion&&!e.endsWith("system.mdb")){t.close(),Jo.delete(e);let r=ke[t.databaseName];for(let n in r)if(r[n].primaryStore.path===e){delete ke[t.databaseName],zh.forEach(i=>i(t.databaseName));break}}return ke}function Yh(e,t,r=Ew,n,s){let i=new pw.default(e,!1);try{let a=Jo.get(e);a?a.needsDeletion=!1:(a=(0,Pd.open)(i),Jo.set(e,a));let c=new Dd.default(!1),l=a.dbisDb||(a.dbisDb=a.openDB(RS.INTERNAL_DBIS_NAME,c)),u=a.auditStore;u||(n?(0,fs.existsSync)(n)&&(i.path=n,u=(0,Pd.open)(i),u.isLegacy=!0):u=ZE(a));let d=Fq(r),f=d[IS],m=new Map;for(let{key:h,value:p}of l.getRange({start:!1})){let[E,g]=h.toString().split("/");g===""?g=p.name:g||(g=E,E=t,p.name||(p.name=g,p.indexed=!p.is_hash_attribute)),f?.add(E);let y=m.get(E);y||m.set(E,y={attributes:[]}),(g==null||p.is_hash_attribute)&&(y.primary=p),g!=null&&y.attributes.push(p),Object.defineProperty(p,"key",{value:h,configurable:!0})}for(let[h,p]of m){let{attributes:E,primary:g}=p;if(!g){for(let ie of E)if(ie.is_hash_attribute||ie.isPrimaryKey){g=ie;break}if(!g){Or.warn(`Unable to find a primary key attribute on table ${h}, with attributes: ${JSON.stringify(E)}`);continue}}let y=d[h],T={},R=[],N,C,k=typeof g.audit=="boolean"?g.audit:(0,Vt.get)(U.LOGGING_AUDITLOG),te=g.trackDeletes,q=g.expiration,Y=g.eviction,$=g.sealed,W=g.splitSegments,ce=g.replicate;if(y)T=y.indices,R=y.attributes,y.schemaVersion++;else{N=g.tableId,N?N>=(l.get(wd)||0)&&(l.putSync(wd,N+1),Or.info(`Updating next table id (it was out of sync) to ${N+1} for ${h}`)):(g.tableId=N=l.get(wd),N||(N=1),Or.debug("Table {tableName} missing an id, assigning {tableId}"),l.putSync(wd,N+1),l.putSync(g.key,g));let ie=new Dd.default(!g.is_hash_attribute,g.is_hash_attribute);if(ie.compression=g.compression,ie.compression){let he=(0,Vt.get)(U.STORAGE_COMPRESSION_THRESHOLD)||Bq;ie.compression.threshold=he}C=ag(a.openDB(g.key,ie),a),a.databaseName=r,C.tableId=N}let le;for(let ie of E){ie.attribute=ie.name;try{if(!ie.is_hash_attribute&&(ie.indexed||ie.attribute&&!ie.name)){if(!T[ie.name]){let Ne=kq(ie.key,a,ie);T[ie.name]=Ne,T[ie.name].indexNulls=ie.indexNulls}let he=R.find(Ne=>Ne.name===ie.name);he?R.splice(R.indexOf(he),1,ie):R.push(ie),le=!0}}catch(he){Or.error("Error trying to update attribute",ie,R,T,he)}}for(let ie of R)if(!E.find(Ne=>Ne.name===ie.name)){if(ie.is_hash_attribute){Or.error("Unable to remove existing primary key attribute",ie);continue}ie.indexed&&(R.splice(R.indexOf(ie),1),le=!0)}if(y)le&&(y.schemaVersion++,y.updatedAttributes());else{y=Hq(d,h,ES({primaryStore:C,auditStore:u,audit:k,sealed:$,splitSegments:W,replicate:ce,expirationMS:q&&q*1e3,evictionMS:Y&&Y*1e3,trackDeletes:te,tableName:h,tableId:N,primaryKey:g.name,databasePath:s?r+"/"+h:r,databaseName:r,indices:T,attributes:E,schemaDefined:g.schemaDefined,dbisDB:l})),y.schemaVersion=1;for(let ie of Wh)ie(y)}}return a}catch(a){throw a.message+=` opening database ${e}`,a}}function Fq(e){let t=ke[e];if(t||(e==="data"?t=ke[e]=mn:e==="system"?Object.defineProperty(ke,"system",{value:t=Object.create(null),configurable:!0}):t=ke[e]=Object.create(null)),Cd&&!Cd.has(e)){let r=new Set;t[IS]=r,Cd.set(e,r)}return t}function Hq(e,t,r){return e[t]=r,r}function _d({database:e,table:t}){e||(e=Ew),it();let r=Fq(e),n=(0,Bt.join)((0,Vt.getHdbBasePath)(),rl),s=(0,Vt.get)(U.DATABASES)||{};process.env.SCHEMAS_DATA_PATH&&(s.data={path:process.env.SCHEMAS_DATA_PATH});let i=t&&s[e]?.tables?.[t]?.path;n=i||s[e]?.path||process.env.STORAGE_PATH||(0,Vt.get)(U.STORAGE_PATH)||((0,fs.existsSync)(n)?n:(0,Bt.join)((0,Vt.getHdbBasePath)(),_E));let a=(0,Bt.join)(n,(i?t:e)+".mdb"),c=Jo.get(a);if(!c||c.status==="closed"){let l=new pw.default(a,!1);c=(0,Pd.open)(l),Jo.set(a,c)}return c.auditStore||(c.auditStore=ZE(c)),c}async function hN(e){if(!ke[e])throw new Error("Schema does not exist");let t=ke[e],r;for(let n in t)r=t[n].primaryStore.rootStore,Jo.delete(r.path),r.status==="open"&&(await r.close(),await jh.remove(r.path));if(r||(r=_d({database:e,table:null}),r.status==="open"&&(await r.close(),await jh.remove(r.path))),e==="data"){for(let n in mn)delete mn[n];delete mn[IS]}delete ke[e],zh.forEach(n=>n(e)),await Rb(r)}function kq(e,t,r){let n=r.is_hash_attribute||r.indexed.type&&hw[r.indexed.type]?.useObjectStore,s=new Dd.default(!n,n),i=t.openDB(e,s);if(r.indexed.type){let a=hw[r.indexed.type];a?i.customIndex=new a(i,r.indexed):Or.error(`The indexing type '${r.indexed.type}' is unknown`)}return i}function Je(e){let{table:t,database:r,expiration:n,eviction:s,scanInterval:i,attributes:a,audit:c,sealed:l,splitSegments:u,replicate:d,trackDeletes:f,schemaDefined:m,origin:h}=e;r||(r=Ew);let p=_d({database:r,table:t}),E=ke[r];Or.trace(`Defining ${t} in ${r}`);let g=E?.[t];if(p.status==="closed")throw new Error(`Can not use a closed data store for ${t}`);let y,T,R;m==null&&(m=!0);let N=new Dd.default(!1);for(let W of a)W.attribute&&!W.name?(W.name=W.attribute,W.indexed=!0):W.attribute=W.name,W.expiresAt&&(W.indexed=!0);let C,k;if(g){if(y=g.primaryKey,g.primaryStore.rootStore.status==="closed")throw new Error(`Can not use a closed data store from ${t} class`);u==null&&(u=g.splitSegments),g.attributes.splice(0,g.attributes.length,...a)}else{let W=p.auditStore;T=a.find(he=>he.isPrimaryKey)||{},y=T.name,T.is_hash_attribute=T.isPrimaryKey=!0,T.schemaDefined=m,T.compression=NS(),f&&(T.trackDeletes=!0),c=T.audit=typeof c=="boolean"?c:(0,Vt.get)(U.LOGGING_AUDITLOG),n&&(T.expiration=n),s&&(T.eviction=s),u??=!1,T.splitSegments=u,typeof l=="boolean"&&(T.sealed=l),typeof d=="boolean"&&(T.replicate=d),h&&(T.origins?T.origins.includes(h)||T.origins.push(h):T.origins=[h]),Or.trace(`${t} table loading, opening primary store`);let ce=new Dd.default(!1,!0);ce.compression=T.compression;let le=t+"/";if(R=p.dbisDb=p.openDB(RS.INTERNAL_DBIS_NAME,N),$(),R.get(le))return k&&k(),Ld(),Je(e);let ie=ag(p.openDB(le,ce),p);p.databaseName=r,ie.tableId=R.get(wd),Or.trace(`Assigning new table id ${ie.tableId} for ${t}`),ie.tableId||(ie.tableId=1),R.put(wd,ie.tableId+1),T.tableId=ie.tableId,g=Hq(E,t,ES({primaryStore:ie,auditStore:W,audit:c,sealed:l,splitSegments:u,replicate:d,trackDeletes:f,expirationMS:n&&n*1e3,evictionMS:s&&s*1e3,primaryKey:y,tableName:t,tableId:ie.tableId,databasePath:r,databaseName:r,indices:{},attributes:a,schemaDefined:m,dbisDB:R})),g.schemaVersion=1,C=!0,R.put(le,T)}let te=g.indices;R=R||(p.dbisDb=p.openDB(RS.INTERNAL_DBIS_NAME,N)),g.dbisDB=R;let q=[];for(let{key:W,value:ce}of R.getRange({start:!0})){let[le,ie]=W.toString().split("/");if(ie===""&&(ie=ce.name),ie){if(le!==t)continue}else continue;let he=a.find(Ue=>Ue.name===ie),Ne=!he?.indexed&&ce.indexed&&!ce.isPrimaryKey;if((!he||Ne)&&($(),C=!0,he||R.remove(W),Ne)){let Ue=g.indices[le];Ue&&q.push(Ue)}}let Y=[];try{for(let W of a||[]){if((W.relationship||W.computed)&&(C=!0,W.relationship))continue;let ce=t+"/"+(W.name||"");Object.defineProperty(W,"key",{value:ce,configurable:!0});let le=R.get(ce);if(W.isPrimaryKey){if(le=le||R.get(ce=t+"/")||{},c!==void 0&&c!==g.audit||l!==void 0&&l!==g.sealed||d!==void 0&&d!==g.replicate||(+n||void 0)!==(+le.expiration||void 0)||(+s||void 0)!==(+le.eviction||void 0)||W.type!==le.type){let he={...le};typeof c=="boolean"&&(c&&g.enableAuditing(c),he.audit=c),n&&(he.expiration=+n),s&&(he.eviction=+s),l!==void 0&&(he.sealed=l),d!==void 0&&(he.replicate=d),W.type&&(he.type=W.type),C=!0,$(),R.put(ce,he)}continue}le?.attribute&&!le.name&&(le.indexed=!0);let ie=!le||le.type!==W.type||JSON.stringify(le.indexed)!==JSON.stringify(W.indexed)||le.nullable!==W.nullable||le.version!==W.version||JSON.stringify(le.properties)!==JSON.stringify(W.properties)||JSON.stringify(le.elements)!==JSON.stringify(W.elements);if(W.indexed){let he=kq(ce,p,W);(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<Jh.workerData?.restartNumber)&&(C=!0,$(),le=R.get(ce),(ie||le.indexingPID&&le.indexingPID!==process.pid||le.restartNumber<Jh.workerData?.restartNumber)&&(C=!0,W.indexNulls===void 0&&(W.indexNulls=!0),g.primaryStore.getStats().entryCount>0&&(W.lastIndexedKey=le?.lastIndexedKey??void 0,W.indexingPID=process.pid,he.isIndexing=!0,Object.defineProperty(W,"dbi",{value:he}),Y.push(W))),R.put(ce,W)),le?.indexNulls&&W.indexNulls===void 0&&(W.indexNulls=!0),he.indexNulls=W.indexNulls,te[W.name]=he}else ie&&(C=!0,$(),R.put(ce,W))}}finally{k&&k()}if(C&&(g.schemaVersion++,g.updatedAttributes()),Or.trace(`${t} table loading, running index`),Y.length>0||q.length>0?g.indexingOperation=Hae(g,Y,q):C&&yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"schema-change",g.databaseName,g.tableName)),g.origin=h,C)for(let W of Wh)W(g,h!=="cluster");return(n||s||i)&&g.setTTLExpiration({expiration:n,eviction:s,scanInterval:i}),Or.trace(`${t} table loaded`),g;function $(){k||p.transactionSync(()=>({then(W){k=W}}))}o($,"startTxn")}async function Hae(e,t,r){try{Or.info(`Indexing ${e.tableName} attributes`,t);let n=e.schemaVersion;await yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"schema-change",e.databaseName,e.tableName));let s;for(let u of r)s=u.drop();let i,a={},c=0,l=t.length;if(await new Promise(u=>setImmediate(u)),l>0){let u;for(let f of t)(0,Pd.compareKeys)(f.lastIndexedKey,u)<0&&(u=f.lastIndexedKey),f.lastIndexedKey==null&&f.dbi.clearAsync();let d=0;for(let{key:f,value:m,version:h}of e.primaryStore.getRange({start:u,lazy:l<4,versions:!0,snapshot:!1}))if(m){if(d++,s=e.primaryStore.ifVersion(f,h,()=>{for(let p=0;p<l;p++){let E=t[p],g=E.name,y=E.dbi;try{let T=E.resolve,R=m&&(T?T(m):m[g]);if(y.customIndex){y.customIndex.index(f,R);continue}let N=(0,vq.getIndexedValues)(R);if(N)for(let C=0,k=N.length;C<k;C++)y.put(N[C],f)}catch(T){a[g]||(a[g]=!0,Or.error(`Error indexing attribute ${g}`,T))}}}),s.then(()=>d--,p=>{d--,Or.error(p)}),Jh.workerData&&Jh.workerData.restartNumber!==xq.restartNumber&&(i=!0),++c%100===0||i){for(let p of t)p.lastIndexedKey=f,e.dbisDB.put(p.key,p);if(i)return}d>Bae?await s:d>Fae&&await new Promise(p=>setImmediate(p))}for(let f of t)delete f.lastIndexedKey,delete f.indexingPID,f.dbi.isIndexing=!1,s=e.dbisDB.put(f.key,f)}await s,await yS.signalSchemaChange(new AS.SchemaEventMsg(process.pid,"indexing-finished",e.databaseName,e.tableName)),Or.info(`Finished indexing ${e.tableName} attributes`,t)}catch(n){Or.error("Error in indexing",n)}}function kae({table:e,database:t}){let r=_d({database:t,table:e}),n=[],s=r.dbisDb;for(let i of s.getKeys({start:e+"/",end:e+"0"}))n.push(s.remove(i));return Promise.all(n)}function $l(e){return Wh.push(e),{remove(){let t=Wh.indexOf(e);t>-1&&Wh.splice(t,1)}}}function Qh(e){return zh.push(e),{remove(){let t=zh.indexOf(e);t>-1&&zh.splice(t,1)}}}function NS(){let e=(0,Vt.get)(U.STORAGE_COMPRESSION),t=(0,Vt.get)(U.STORAGE_COMPRESSION_DICTIONARY),r=(0,Vt.get)(U.STORAGE_COMPRESSION_THRESHOLD)||Bq,n={startingOffset:32};return t&&(n.dictionary=jh.readFileSync(t)),r&&(n.threshold=r),e&&n}var Vt,RS,Pd,Bt,fs,Od,Dd,pw,jh,_w,vq,yS,AS,Jh,Uq,xq,Or,Ew,IS,Bq,mn,ke,wd,Wh,zh,bS,Jo,Cd,Bae,Fae,De=ue(()=>{Vt=w(oe()),RS=w(Gt()),Pd=require("lmdb"),Bt=require("path"),fs=require("fs"),Od=w(At());fg();Dd=w(nh()),pw=w(sh());F();jh=w(require("fs-extra")),_w=w(mi()),vq=w(Dn()),yS=w(Vo()),AS=w(Si()),Jh=require("worker_threads"),Uq=w(j()),xq=w(st());Ki();hl();ts();Mq();Or=(0,Uq.forComponent)("storage"),Ew="data",IS=Symbol("defined-tables"),Bq=((0,Vt.get)(U.STORAGE_PAGESIZE)||4096)-60;(0,Vt.initSync)();mn=Object.create(null),ke=Object.create(null);(0,_w._assignPackageExport)("databases",ke);(0,_w._assignPackageExport)("tables",mn);wd=Symbol.for("next-table-id"),Wh=[],zh=[],Jo=new Map;o(xae,"getTables");o(it,"getDatabases");o(Ld,"resetDatabases");o(Yh,"readMetaDb");o(Fq,"ensureDB");o(Hq,"setTable");o(_d,"database");o(hN,"dropDatabase");o(kq,"openIndex");o(Je,"table");Bae=1e3,Fae=10;o(Hae,"runIndexing");o(kae,"dropTableMeta");o($l,"onUpdatedTable");o(Qh,"onRemovedDB");o(NS,"getDefaultCompression")});var Tw={};Oe(Tw,{loadGQLSchema:()=>$ae,start:()=>Sw,startOnMainThread:()=>Gae});function Sw({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r,n,s,i){let{parse:a,Source:c,Kind:l,NamedTypeNode:u,StringValueNode:d}=await import("graphql"),f=a(new c(r.toString(),s)),m=new Map,h=[],p;for(let y of f.definitions)switch(y.kind){case l.OBJECT_TYPE_DEFINITION:let k=function(q){if(q.kind==="NonNullType"){let W=k(q.type);return W.nullable=!1,W}if(q.kind==="ListType")return{type:"array",elements:k(q.type)};let $={type:q.name?.value};return Object.defineProperty($,"location",{value:q.loc.startToken}),$};o(k,"getProperty");let T=y.name.value,R=[],N={table:null,database:null,properties:R};m.set(T,N);for(let q of y.directives){if(q.name.value==="table"){for(let $ of q.arguments)N[$.name.value]=$.value.value;N.schema&&(N.database=N.schema),N.table||(N.table=T),N.audit&&(N.audit=N.audit!=="false"),N.attributes=N.properties,h.push(N)}if(q.name.value==="sealed"&&(N.sealed=!0),q.name.value==="splitSegments"&&(N.splitSegments=!0),q.name.value==="replicate"&&(N.replicate=!0),q.name.value==="export"){N.export=!0;for(let $ of q.arguments)typeof N.export!="object"&&(N.export={}),N.export[$.name.value]=$.value.value}}let C=!1,te={};for(let q of y.fields){let Y=k(q.type);Y.name=q.name.value,R.push(Y),te[Y.name]=void 0;for(let $ of q.directives){let W=$.name.value;if(W==="primaryKey")C?console.warn("Can not define two attributes as a primary key at",$.loc):(Y.isPrimaryKey=!0,C=!0);else if(W==="indexed"){let ce={};for(let le of $.arguments||[])ce[le.name.value]=le.value.value;Y.indexed=ce}else if(W==="computed"){for(let ce of $.arguments||[])if(ce.name.value==="from"){let le=ce.value.value;Y.computed={from:g(le,ce,te)},Y.version==null&&(Y.version=le)}else ce.name.value==="version"&&(Y.version=ce.value.value);Y.computed=Y.computed||!0}else if(W==="relationship"){let ce={};for(let le of $.arguments)ce[le.name.value]=le.value.value;Y.relationship=ce}else if(W==="createdTime")Y.assignCreatedTime=!0;else if(W==="updatedTime")Y.assignUpdatedTime=!0;else if(W==="expiresAt")Y.expiresAt=!0;else if(W==="allow"){let ce=Y.authorizedRoles=[];for(let le of $.arguments)le.name.value==="role"&&ce.push(le.value.value)}else server.knownGraphQLDirectives.includes(W)&&console.warn(`@${W} is an unknown directive, at`,$.loc)}}N.type=T,T==="Query"&&(p=N)}function E(y){let T=m.get(y.type);T?(Object.defineProperty(y,"properties",{value:T.properties}),Object.defineProperty(y,"definition",{value:T})):y.type==="array"?E(y.elements):qae.includes(y.type)||(0,Gq.getWorkerIndex)()===0&&console.error(`The type ${y.type} is unknown at line ${y.location.line}, column ${y.location.column}, in ${s}`)}o(E,"connectPropertyType");for(let y of m.values())for(let T of y.properties)E(T);for(let y of h)y.tableClass=e(y),y.export&&(y.export.name===""?i.set((0,gw.dirname)(n),y.tableClass):i.set((0,gw.dirname)(n)+"/"+(y.export.name||y.type),y.tableClass,y.export));function g(y,T,R){return new qq.Script(`function computed(attributes) { return function(record) { with(attributes) { with (record) { return ${y}; } } } } computed;`,{filename:s,lineOffset:T.loc.startToken.line-1,columnOffset:T.loc.startToken.column}).runInThisContext()(R)}o(g,"createComputedFrom")}}var gw,qq,Gq,qae,Gae,$ae,$q=ue(()=>{gw=require("path"),qq=require("node:vm");De();Gq=w(st()),qae=["ID","Int","Float","Long","String","Boolean","Date","Bytes","Any","BigInt","Blob"];server.knownGraphQLDirectives&&(server.knownGraphQLDirectives=["table","sealed","export","primaryKey","indexed","computed","relationship","createdTime","updatedTime","expiresAt","allow"]);o(Sw,"start");Gae=Sw,$ae=Sw({ensureTable:Je}).handleFile});var yw={};Oe(yw,{start:()=>Xae});function Vae(e){if(e.kind!==Be.Kind.OPERATION_DEFINITION&&e.kind!==Be.Kind.FRAGMENT_DEFINITION)throw new kr(`Unexpected non-executable definition type ${e.kind}.`)}function Vq(e){if(typeof e!="object"||e===null)throw new lo("Request body must be an object.");if(!("query"in e))throw new lo("Request body must contain a `query` field.");if(typeof e.query!="string")throw new lo("Request body `query` field must be a string.");if("variables"in e&&(typeof e.variables!="object"||e.variables===null))throw new lo("Request body `variables` field must be an object.");if("operationName"in e&&typeof e.operationName!="string")throw new lo("Request body `operationName` field must be a string.")}function Rw(e){return parseInt(e.value,10)}function Yq(e){return parseFloat(e.value)}function Wq(e,t,r){let n=r.get(e.name.value);return zq(n)?jq(n,t):{attribute:t,value:n}}function zq(e){return typeof e=="object"&&e!=null&&!Array.isArray(e)}function jq(e,t){return t=typeof t=="string"?[t]:t,Object.entries(e).flatMap(([r,n])=>(t=[...t,r],zq(n)?jq(n,t):{attribute:t,value:n}))}function Kae(e,t,r){switch(t=[...t,e.name.value],e.value.kind){case Be.Kind.NULL:return{attribute:t,value:null};case Be.Kind.INT:return{attribute:t,value:Rw(e.value)};case Be.Kind.FLOAT:return{attribute:t,value:Yq(e.value)};case Be.Kind.BOOLEAN:case Be.Kind.STRING:return{attribute:t,value:e.value.value};case Be.Kind.VARIABLE:return Wq(e.value,t,r);case Be.Kind.OBJECT:return Jq(e.value,t,r);case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Value type, ${e.value.kind}, is not supported.`)}}function Jq(e,t,r){return e.fields.flatMap(n=>Kae(n,t,r))}function Yae(e,t){switch(e.value.kind){case Be.Kind.NULL:return{attribute:e.name.value,value:null};case Be.Kind.INT:return{attribute:e.name.value,value:Rw(e.value)};case Be.Kind.FLOAT:return{attribute:e.name.value,value:Yq(e.value)};case Be.Kind.BOOLEAN:case Be.Kind.STRING:return{attribute:e.name.value,value:e.value.value};case Be.Kind.VARIABLE:return Wq(e.value,e.name.value,t);case Be.Kind.OBJECT:return Jq(e.value,[e.name.value],t);case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Argument type, ${e.value.kind}, is not supported.`)}}function Wae(e,t){return e.flatMap(r=>Yae(r,t))}function wS(e,t){return e.selections.flatMap(r=>{switch(r.kind){case Be.Kind.FIELD:return r;case Be.Kind.FRAGMENT_SPREAD:{let n=r.name.value,s=t.get(n);if(s==null)throw new kr(`Fragment \`${n}\` not found.`);return wS(s.selectionSet,t)}case Be.Kind.INLINE_FRAGMENT:return wS(r.selectionSet,t)}})}function Qq(e,t){return wS(e,t).map(r=>r.selectionSet?.selections.length>0?{name:r.name.value,select:Qq(r.selectionSet,t)}:r.name.value)}async function zae(e,t,r,n){let s=vs.getMatch(e.name.value,"graphql");if(s===void 0)throw new kr(`Resource \`${e.name.value}\` not found.`);let i=s.Resource,a={select:Qq(e.selectionSet,r),conditions:Wae(e.arguments,t)},c=[];n.authorize=!0;for await(let l of i.search(a,n))c.push(l);return[e.name.value,c]}function Xq(e){switch(e.kind){case Be.Kind.NULL:return null;case Be.Kind.INT:return Rw(e);case Be.Kind.FLOAT:return parseFloat(e.value);case Be.Kind.STRING:case Be.Kind.BOOLEAN:return e.value;case Be.Kind.OBJECT:return e.fields.reduce((t,r)=>({[r.name.value]:Xq(r.value),...t}),{});case Be.Kind.LIST:case Be.Kind.ENUM:default:throw new kr(`Value type, ${e.kind}, is not supported.`)}}function jae(e,t){let r=new Map;for(let n of e){let s=n.variable.name.value,i=t?.[s];if(i===void 0&&n.defaultValue!==void 0&&(i=Xq(n.defaultValue)),n.type.kind===Be.Kind.NON_NULL_TYPE&&!(s in t)&&i===void 0)throw new kr(`Variable $${s} is required, but not provided.`);r.set(n.variable.name.value,i??null)}return r}async function Jae(e,t,r,n){if(e.operation===Be.OperationTypeNode.SUBSCRIPTION)throw new kr("Subscriptions are not supported.");if(e.operation===Be.OperationTypeNode.MUTATION)throw new kr("Mutations are not supported yet.");let s=jae(e.variableDefinitions,t),i=await Promise.all(wS(e.selectionSet,r).map(c=>zae(c,s,r,n))),a={data:{}};for(let[c,l]of i)a.data[c]=l;return a}async function Kq({query:e,variables:t={},operationName:r},n){let s=Be.parse(e),i=new Map,a=new Map;for(let u of s.definitions)if(Vae(u),u.kind===Be.Kind.FRAGMENT_DEFINITION)a.set(u.name.value,u);else{if(u.name===void 0&&s.definitions.length>1)throw new kr("Unnamed operations are only allowed when there is a single operation in the document.");let d=u.name?.value??"Unnamed Query";if(i.has(d))throw new kr(`Duplicate operation definition: ${d}`);i.set(d,u)}let c;if(r==null)if(i.size===1)c=i.entries().next().value[1];else throw new kr("Operation name is required when there are multiple operations in the document.");else if(c=i.get(r),c==null)throw new kr(`Operation \`${r}\` not found.`);let l=await Jae(c,t,a,n);return{status:200,headers:{"Content-Type":"application/graphql-response+json; charset=utf-8"},body:JSON.stringify(l)}}async function Qae(e){switch(e.method){case"GET":{let t=new URLSearchParams(e.url.split("?")[1]),r={};for(let[n,s]of t)r[n]=n==="variables"||n==="extensions"?JSON.parse(s):s;return Vq(r),Kq(r,e)}case"POST":{let r=await Uo(e.headers.get("content-type"),!0)(e._nodeRequest);return Vq(r),Kq(r,e)}default:throw new lo("Method Not Allowed",405,{Allow:"GET, POST"})}}function Xae(e){e.server.http(async(t,r)=>{if(!t.url.startsWith("/graphql"))return r(t);try{return await Qae(t)}catch(n){logger.error(n);let s=t.headers.get("accept")??"application/graphql-response+json";switch(s){case"application/json":{if(n instanceof lo)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json",...n.headers}};if(n instanceof Be.GraphQLError)return{status:200,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/json"}};if(n instanceof kr)return{status:200,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/json"}};break}default:logger.info(`Unsupported accept header, ${s}, defaulting to application/graphql-response+json`);case"application/graphql-response+json":{if(n instanceof lo)return{status:n.statusCode,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json",...n.headers}};if(n instanceof Be.GraphQLError)return{status:400,body:JSON.stringify({errors:[n]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof kr)return{status:400,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};if(n instanceof Error)return{status:500,body:JSON.stringify({errors:[{message:n.message}]}),headers:{"Content-Type":"application/graphql-response+json"}};break}}throw n}},{port:e.port,securePort:e.securePort})}var Be,kr,lo,Zq=ue(()=>{Be=w(require("graphql"));xo();ad();o(Vae,"assertExecutableDefinitionNode");o(Vq,"assertRequestParams");o(Rw,"processIntValueNode");o(Yq,"processFloatValueNode");o(Wq,"processVariableNode");o(zq,"isObject");o(jq,"transformObjectIntoQueryCondition");o(Kae,"processObjectFieldNode");o(Jq,"processObjectValueNode");o(Yae,"processArgumentNode");o(Wae,"buildConditionsQuery");o(wS,"fillInFragments");o(Qq,"buildSelectQuery");o(zae,"processFieldNode");o(Xq,"processConstValueNode");o(jae,"resolveVariables");o(Jae,"executeOperation");o(Kq,"resolver");kr=class extends Error{static{o(this,"GraphQLQueryingError")}},lo=class extends Error{static{o(this,"HTTPError")}statusCode;headers;constructor(t,r=400,n={}){super(t),this.statusCode=r,this.headers=n}};o(Qae,"graphqlQueryingHandler");o(Xae,"start")});var iG=M((_Ue,sG)=>{var Md=require("validate.js"),tG=ft(),vd=(F(),v(K)),{handleHDBError:Zae,hdbErrors:ece}=ge(),{HDB_ERROR_MSGS:rr,HTTP_STATUS_CODES:tce}=ece,Aw=o(()=>({role:{presence:!0,format:"[\\w\\-\\_]+"},id:{presence:!0,format:"[\\w\\-\\_]+"},permission:{presence:!0}}),"constraintsTemplate"),rce={STRUCTURE_USER:"structure_user"},eG=Object.values(vd.ROLE_TYPES_ENUM),nce="attribute_permissions",sce="attribute_name",{PERMS_CRUD_ENUM:Ud}=vd,ice=[nce,...Object.values(Ud)],rG=[Ud.READ,Ud.INSERT,Ud.UPDATE],oce=[sce,...rG];function ace(e){let t=Aw();return t.role.presence=!0,t.id.presence=!1,t.permission.presence=!0,nG(e,t)}o(ace,"addRoleValidation");function cce(e){let t=Aw();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!0,nG(e,t)}o(cce,"alterRoleValidation");function lce(e){let t=Aw();return t.role.presence=!1,t.id.presence=!0,t.permission.presence=!1,tG.validateObject(e,t)}o(lce,"dropRoleValidation");var uce=["operation","role","id","permission","hdb_user","access"];function nG(e,t){let r={main_permissions:[],schema_permissions:{}},n=Object.keys(e),s=[];for(let a=0,c=n.length;a<c;a++)uce.includes(n[a])||s.push(n[a]);s.length>0&&hr(rr.INVALID_ROLE_JSON_KEYS(s),r);let i=tG.validateObject(e,t);if(i&&i.message.split(",").forEach(a=>{hr(a,r)}),e.permission){let a=dce(e);a&&hr(a,r),eG.forEach(c=>{e.permission[c]&&!Md.isBoolean(e.permission[c])&&hr(rr.SU_CU_ROLE_BOOLEAN_ERROR(c),r)})}for(let a in e.permission)if(eG.indexOf(a)<0){if(a===rce.STRUCTURE_USER){let l=e.permission[a];if(typeof l=="boolean")continue;if(Array.isArray(l)){for(let u=0,d=l.length;u<d;u++){let f=l[u];global.hdb_schema[f]||hr(rr.SCHEMA_NOT_FOUND(f),r)}continue}hr(rr.STRUCTURE_USER_ROLE_TYPE_ERROR(a),r);continue}let c=e.permission[a];if(!a||!global.hdb_schema[a]){hr(rr.SCHEMA_NOT_FOUND(a),r);continue}if(c.tables)for(let l in c.tables){let u=c.tables[l];if(!l||!global.hdb_schema[a][l]){hr(rr.TABLE_NOT_FOUND(a,l),r);continue}if(Object.keys(u).forEach(d=>{ice.includes(d)||hr(rr.INVALID_PERM_KEY(d),r,a,l)}),Object.values(Ud).forEach(d=>{Md.isDefined(u[d])?Md.isBoolean(u[d])||hr(rr.TABLE_PERM_NOT_BOOLEAN(d),r,a,l):hr(rr.TABLE_PERM_MISSING(d),r,a,l)}),u.attribute_permissions===void 0){hr(rr.ATTR_PERMS_ARRAY_MISSING,r,a,l);continue}else if(!(Array.isArray(u.attribute_permissions)||u.attribute_permissions===null)){hr(rr.ATTR_PERMS_NOT_ARRAY,r,a,l);continue}if(u.attribute_permissions){let d=global.hdb_schema[a][l].attributes.map(({attribute:m})=>m),f={read:!1,insert:!1,update:!1};for(let m in u.attribute_permissions){let h=u.attribute_permissions[m];if(Object.keys(h).forEach(E=>{!oce.includes(E)&&E!==Ud.DELETE&&hr(rr.INVALID_ATTR_PERM_KEY(E),r,a,l)}),!Md.isDefined(h.attribute_name)){hr(rr.ATTR_PERM_MISSING_NAME,r,a,l);continue}let p=h.attribute_name;if(!d.includes(p)){hr(rr.INVALID_ATTRIBUTE_IN_PERMS(p),r,a,l);continue}rG.forEach(E=>{Md.isDefined(h[E])?Md.isBoolean(h[E])||hr(rr.ATTR_PERM_NOT_BOOLEAN(E,p),r,a,l):hr(rr.ATTR_PERM_MISSING(E,p),r,a,l)}),!f.read&&h.read===!0&&(f.read=!0),!f.insert&&h.insert===!0&&(f.insert=!0),!f.update&&h.update===!0&&(f.update=!0)}if(u.read===!1&&f.read===!0||u.insert===!1&&f.insert===!0||u.update===!1&&f.update===!0){let m=`${a}.${l}`;hr(rr.MISMATCHED_TABLE_ATTR_PERMS(m),r,a,l)}}}}return fce(r)}o(nG,"customValidate");sG.exports={addRoleValidation:ace,alterRoleValidation:cce,dropRoleValidation:lce};function dce(e){let{operation:t,permission:r}=e;if(t===vd.OPERATIONS_ENUM.ADD_ROLE||t===vd.OPERATIONS_ENUM.ALTER_ROLE){let n=r.super_user===!0,s=r.cluster_user===!0;if(Object.keys(r).length>1&&(n||s)){if(s&&n)return rr.SU_CU_ROLE_COMBINED_ERROR;{let a=r.super_user?vd.ROLE_TYPES_ENUM.SUPER_USER:vd.ROLE_TYPES_ENUM.CLUSTER_USER;return rr.SU_CU_ROLE_NO_PERMS_ALLOWED(a)}}}return null}o(dce,"validateNoSUPerms");function fce(e){let{main_permissions:t,schema_permissions:r}=e;if(t.length>0||Object.keys(r).length>0){let n={error:rr.ROLE_PERMS_ERROR,...e};return Zae(new Error,n,tce.BAD_REQUEST)}else return null}o(fce,"generateRolePermResponse");function hr(e,t,r,n){if(!r)t.main_permissions.push(e);else{let s=n?r+"_"+n:r;t.schema_permissions[s]?t.schema_permissions[s].push(e):t.schema_permissions[s]=[e]}}o(hr,"addPermError")});var Zh=M((SUe,lG)=>{"use strict";var oG=qn(),aG=ln(),mce=vl(),Iw=iG(),Nw=Vo(),gUe=require("uuid").v4,hce=require("util"),OS=(F(),v(K)),pce=se(),ww=aG.searchByValue,_ce=aG.searchByHash,Ece=hce.promisify(mce.delete),gce=Ti(),Sce=hd(),{hdbErrors:Tce,handleHDBError:Vl}=ge(),{HDB_ERROR_MSGS:cG,HTTP_STATUS_CODES:Xh}=Tce,{UserEventMsg:Ow}=Si();lG.exports={addRole:Rce,alterRole:yce,dropRole:Ace,listRoles:bce};function bw(e){try{e.hdb_auth_header&&delete e.hdb_auth_header,e.HDB_INTERNAL_PATH&&delete e.HDB_INTERNAL_PATH,e.operation&&delete e.operation,e.hdb_user&&delete e.hdb_user}catch{}return e}o(bw,"scrubRoleDetails");async function Rce(e){let t=Iw.addRoleValidation(e);if(t)throw t;e=bw(e);let r={schema:"system",table:"hdb_role",search_attribute:"role",search_value:e.role,hash_attribute:"id",get_attributes:["*"]},n;try{n=Array.from(await ww(r)||[])}catch(i){throw Vl(i)}if(n&&n.length>0)throw Vl(new Error,cG.ROLE_ALREADY_EXISTS(e.role),Xh.CONFLICT,void 0,void 0,!0);e.id||(e.id=e.role);let s={operation:"insert",schema:"system",table:"hdb_role",hash_attribute:"id",records:[e]};return await oG.insert(s),Nw.signalUserChange(new Ow(process.pid)),e=bw(e),e}o(Rce,"addRole");async function yce(e){let t=Iw.alterRoleValidation(e);if(t)throw t;e=bw(e);let r={operation:"update",schema:"system",table:"hdb_role",records:[e]},n;try{n=await oG.update(r)}catch(s){throw Vl(s)}if(n&&n?.message==="updated 0 of 1 records")throw Vl(new Error,"Invalid role id",Xh.BAD_REQUEST,void 0,void 0,!0);return await Nw.signalUserChange(new Ow(process.pid)),e}o(yce,"alterRole");async function Ace(e){let t=Iw.dropRoleValidation(e);if(t)throw Vl(new Error,t,Xh.BAD_REQUEST,void 0,void 0,!0);let r=new Sce(OS.SYSTEM_SCHEMA_NAME,OS.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME,[e.id],["role"]),n=Array.from(await _ce(r));if(n.length===0)throw Vl(new Error,cG.ROLE_NOT_FOUND,Xh.NOT_FOUND,void 0,void 0,!0);let s=new gce(OS.SYSTEM_SCHEMA_NAME,OS.SYSTEM_TABLE_NAMES.USER_TABLE_NAME,"role",e.id,void 0,["username","active"]),i=Array.from(await ww(s)),a=!1;if(pce.isEmptyOrZeroLength(i)===!1){for(let l=0;l<i.length;l++)if(i[l].active===!0){a=!0;break}}if(a===!0)throw Vl(new Error,`Cannot drop role ${n[0].role} as it has active user(s) tied to this role`,Xh.CONFLICT,void 0,void 0,!0);let c={table:"hdb_role",schema:"system",hash_values:[e.id]};return await Ece(c),Nw.signalUserChange(new Ow(process.pid)),`${n[0].role} successfully deleted`}o(Ace,"dropRole");async function bce(){return ww({table:"hdb_role",schema:"system",hash_attribute:"id",search_attribute:"id",search_value:"*",get_attributes:["*"]})}o(bce,"listRoles")});var Cw={};Oe(Cw,{start:()=>fG,startOnMainThread:()=>wce});function fG({ensureTable:e}){return{handleFile:t,setupFile:t};async function t(r){let n=(0,uG.parseDocument)(r.toString(),{simpleKeys:!0}).toJSON();for(let s in n){let i=n[s];i.permission||(i={permission:i},i.permission.access&&(i.access=i.permission.access,delete i.permission.access));for(let a in i.permission){if(Ice.includes(a))continue;let c=i.permission[a];c.tables||(i.permission[a]=c={tables:c});for(let l in c.tables){let u=c.tables[l];if(u.read=!!u.read,u.insert=!!u.insert,u.update=!!u.update,u.delete=!!u.delete,u.attributes){let d=[];for(let f in u.attributes){let m=u.attributes[f];m.attribute_name=f,d.push(m)}u.attribute_permissions=d,delete u.attributes}if(u.attribute_permissions){if(!Array.isArray(u.attribute_permissions))throw new Error("attribute_permissions must be an array if defined");for(let d of u.attribute_permissions)d.read=!!d.read,d.insert=!!d.insert,d.update=!!d.update}else u.attribute_permissions=null}}i.role=i.id=s,await Nce(i)}}}async function Nce(e){let t=it().system.hdb_role;for await(let r of t.search([{attribute:"role",value:e.role}])){let{__createdtime__:n,__updatedtime__:s,...i}=r;return(0,dG.isEqual)(i,e)?void 0:(e.id=r.id,(0,CS.alterRole)(e))}return(0,CS.addRole)(e)}var CS,uG,dG,Ice,wce,mG=ue(()=>{De();CS=w(Zh()),uG=require("yaml"),dG=require("lodash"),Ice=["super_user","cluster_user","structure_user"];o(fG,"start");o(Nce,"ensureRole");wce=fG});async function PS(e){let t=(0,_G.pathToFileURL)(e).toString();if(Oce)return ep||(ep=Cce(Dce)),(await(await ep).import(t)).namespace;try{return await import(t)}catch(r){try{(await import("internal/util")).default.decorateErrorStack(r)}catch{}throw r}}async function Cce(e){let{StaticModuleRecord:t}=await import("@endo/static-module-record");return require("ses"),lockdown({domainTaming:"unsafe",consoleTaming:"unsafe",errorTaming:"unsafe",errorTrapping:"none",stackFiltering:"verbose"}),ep=new Compartment({console,Math,Date,fetch:Pce,...e()},{},{name:"h-dapp",resolveHook(r,n){return r==="harperdb"?"harperdb":(r=new URL(r,n).toString(),(0,pG.extname)(r)||(r+=".js"),r)},importHook:o(async r=>{if(r==="harperdb")return{imports:[],exports:["Resource","tables","databases"],execute(s){s.Resource=Br,s.tables=mn,s.databases=ke}};let n=await(0,hG.readFile)(new URL(r),{encoding:"utf-8"});return new t(n,r)},"importHook")}),ep}function Pce(e,t){let r=typeof e=="string"||e.url;if(new URL(r).protocol!="https")throw new Error("Only https is allowed in fetch");return fetch(e,t)}function Dce(){return{Resource:Br,tables:mn}}var hG,pG,_G,Oce,ep,Pw=ue(()=>{Qa();De();hG=require("fs/promises"),pG=require("path"),_G=require("url"),Oce=!1;o(PS,"secureImport");o(Cce,"getCompartment");o(Pce,"secureOnlyFetch");o(Dce,"getGlobalVars")});var Dw={};Oe(Dw,{handleApplication:()=>Lce,suppressHandleApplicationWarning:()=>Mce});function EG(e){return typeof e=="function"&&("get"in e||"put"in e||"post"in e||"delete"in e)}async function Lce(e){e.handleEntry(t=>{if(t.entryType!=="file"){e.logger.warn(`jsResource plugin cannot handle entry type ${t.entryType}. Modify the 'files' option in ${e.configFilePath} to only include files.`);return}if(t.eventType!=="add"){e.requestRestart();return}PS(t.absolutePath).then(r=>{let n=(0,DS.dirname)(t.urlPath);EG(r.default)&&(e.resources.set(n,r.default),e.logger.debug(`Registered root resource: ${n}`)),gG(e,r,n)}).catch(r=>{e.logger.error(`Failed to load resource module ${t.absolutePath}: ${r}`),e.requestRestart()})})}function gG(e,t,r){for(let n in t){let s=t[n],i=(0,DS.join)(r,n);EG(s)?(e.resources.set(i,s),e.logger.debug(`Registered resource: ${i}`)):typeof s=="object"&&gG(e,s,i)}}var DS,Mce,SG=ue(()=>{Pw();DS=require("path");o(EG,"isResource");o(Lce,"handleApplication");o(gG,"recurseForResources");Mce=!0});var Mw={};Oe(Mw,{start:()=>vce});function vce({resources:e}){e.set("login",Lw),e.loginPath=t=>"/login?redirect="+encodeURIComponent(t.url)}var Lw,TG=ue(()=>{Qa();o(vce,"start");Lw=class extends Br{static{o(this,"Login")}static async get(t,r,n){}static async post(t,r,n){let{username:s,password:i,redirect:a}=r;return{data:await n.login(s,i)}}}});function IG(e){let t={openapi:Uce,info:{title:"HarperDB HTTP REST interface",version:bG.packageJson.version},paths:{},components:{schemas:{},securitySchemes:{basicAuth:{type:"http",scheme:"basic"},bearerAuth:{type:"http",scheme:"bearer",bearerFormat:"JWT"}}}},r=[{basicAuth:[],bearerAuth:[]}];for(let[,n]of e){if(!n.path||n.Resource.isError)continue;let{path:s}=n,i=s.split("/").slice(-1),{attributes:a,primaryKey:c,prototype:l}=n.Resource;if(c=c??"id",!c)continue;let u={},d=[];if(a)for(let{type:R,name:N,elements:C,relationship:k,definition:te}of a){if(k)R==="array"?u[N]={type:"array",items:{$ref:uc+C.type}}:u[N]={$ref:uc+R};else{let q=te??C?.definition;if(q){if(!t.components.schemas[q.type]){let Y={};q.properties.forEach($=>{Y[$.name]=new Bw(vw[$.type],$.type)}),t.components.schemas[q.type]=new AG(Y)}R==="array"?u[N]={type:"array",items:{$ref:uc+q.type}}:u[N]={$ref:uc+q.type}}else R==="array"?C.type==="Any"||C.type=="ID"?u[N]={type:"array",items:{format:C.type}}:u[N]={type:"array",items:new Bw(vw[C.type],C.type)}:R==="Any"||R=="ID"?u[N]={format:R}:u[N]=new Bw(vw[R],R)}d.push(new Fw(N,"query",u[N]))}let f=Object.keys(u),m=new Fw(c,"path",{format:"ID"});m.required=!0,m.description="primary key of record";let h=new Fw("property","path",{enum:f});h.required=!0,t.components.schemas[i]=new AG(u);let p=l.post!==Resource.prototype.post||l.update,E=typeof l.put=="function",g=typeof l.get=="function",y=typeof l.delete=="function",T="/"+s+"/";p&&(t.paths[T]={},t.paths[T].post=new xce(i,r,"create a new record auto-assigning a primary key")),g&&(t.paths[T]||(t.paths[T]={}),t.paths[T].get=new Uw(d,r,{200:new xw({$ref:uc+i})},"search for records by the specified property name and value pairs")),y&&(t.paths[T]||(t.paths[T]={}),t.paths[T].delete=new yG(d,r,"delete all the records that match the provided query",{204:new RG})),T="/"+s+"/{"+c+"}",g&&(t.paths[T]={},t.paths[T].get=new Uw([m],r,{200:new xw({$ref:uc+i})},"retrieve a record by its primary key")),E&&(t.paths[T]||(t.paths[T]={}),t.paths[T].put=new Bce([m],r,i,"create or update the record with the URL path that maps to the record's primary key")),y&&(t.paths[T]||(t.paths[T]={}),t.paths[T].delete=new yG([m],r,"delete a record with the given primary key",{204:new RG})),g&&h.schema.enum.length>0&&(T="/"+s+"/{"+c+"}.{property}",t.paths[T]={},t.paths[T].get=new Uw([m,h],r,{200:new xw({enum:f})},"used to retrieve the specified property of the specified record"))}return t}function xce(e,t,r){this.description=r,this.requestBody={content:{"application/json":{schema:{$ref:uc+e}}}},this.security=t,this.responses={200:{description:Hw,headers:{Location:{description:"primary key of new record",schema:{type:"string",format:"ID"}}},content:{"application/json":{schema:{type:"string",format:"ID"}}}}}}function Uw(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.responses=r}function xw(e){this.description=Hw,this.content={"application/json":{schema:e}}}function RG(){this.description="successfully processed request, no content returned to client"}function Bce(e,t,r,n){this.description=n,this.parameters=e,this.security=t,this.requestBody={content:{"application/json":{schema:{$ref:uc+r}}}},this.responses={200:{description:Hw}}}function yG(e,t,r,n){this.description=r,this.parameters=e,this.security=t,this.responses=n}function AG(e){this.type="object",this.properties=e}function Bw(e,t){this.type=e,this.format=t}function Fw(e,t,r){this.name=e,this.in=t,this.schema=r}var bG,Uce,vw,uc,Hw,NG=ue(()=>{bG=w(ht()),Uce="3.0.3",vw={Int:"integer",Float:"number",Long:"integer",String:"string",Boolean:"boolean",Date:"string",Bytes:"string",BigInt:"integer",array:"array"},uc="#/components/schemas/",Hw="successful operation";o(IG,"generateJsonApi");o(xce,"Post");o(Uw,"Get");o(xw,"Response200");o(RG,"Response204");o(Bce,"Put");o(yG,"Delete");o(AG,"ResourceSchema");o(Bw,"Type");o(Fw,"Parameter")});var OG={};Oe(OG,{Request:()=>dc,createReuseportFd:()=>LS});var wG,dc,kw,qw,LS,tp=ue(()=>{wG=require("os"),dc=class{static{o(this,"Request")}#e;constructor(t,r){this.method=t.method;let n=t.url;this._nodeRequest=t,this._nodeResponse=r,this.url=n,this.headers=new qw(t.headers)}get absoluteURL(){return this.protocol+"://"+this.host+this.url}get pathname(){let t=this.url.indexOf("?");return t>-1?this.url.slice(0,t):this.url}set pathname(t){let r=this.url.indexOf("?");r>-1?this.url=t+this.url.slice(r):this.url=t}get protocol(){return this._nodeRequest.socket.encrypted?"https":"http"}get ip(){return this._nodeRequest.socket.remoteAddress}get authorized(){return this._nodeRequest.socket.authorized}get peerCertificate(){return this._nodeRequest.socket.getPeerCertificate()}get mtlsConfig(){return this._nodeRequest.socket.server.mtlsConfig}get body(){return this.#e||(this.#e=new kw(this._nodeRequest))}get host(){return this._nodeRequest.authority||this._nodeRequest.headers.host}get httpVersion(){return this._nodeRequest.httpVersion}get isAborted(){return!1}sendEarlyHints(t,r={}){r.link=t,this._nodeResponse.writeEarlyHints(r)}},kw=class{static{o(this,"RequestBody")}#e;constructor(t){this.#e=t}on(t,r){return this.#e.on(t,r),this}pipe(t,r){return this.#e.pipe(t,r)}},qw=class{constructor(t){this.asObject=t}static{o(this,"Headers")}set(t,r){this.asObject[t.toLowerCase()]=r}get(t){return this.asObject[t.toLowerCase()]}has(t){return this.asObject.hasOwnProperty(t.toLowerCase())}[Symbol.iterator](){return Object.entries(this.asObject)[Symbol.iterator]()}keys(){return Object.keys(this.asObject)}values(){return Object.values(this.asObject)}delete(t){delete this.asObject[t.toLowerCase()]}forEach(t){for(let[r,n]of this)t(n,r,this)}};(0,wG.platform)()!="win32"&&(LS=require("node-unix-socket").createReuseportFd)});var vS={};Oe(vS,{parseHeaderValue:()=>$w,start:()=>kce});async function Hce(e,t){let r=e.headers.asObject,n=r.accept==="text/event-stream",s=n?"CONNECT":e.method;e.search&&ug(e);let i=new Hs;try{e.responseHeaders=i;let a=e.url.slice(1),c,l;if(a!==CG){let g=MS.getMatch(a,n?"sse":"rest");if(!g)return t(e);e.handlerPath=g.path,c=new _i(g.relativeURL),c.async=!0,l=g.Resource}if(l?.isCaching){let g=r["cache-control"];if(g){let y=$w(g);for(let T of y)switch(T.name){case"max-age":e.expiresAt=T.value*1e3+Date.now();break;case"only-if-cached":e.onlyIfCached=!0;break;case"no-cache":e.noCache=!0;break;case"no-store":e.noCacheStore=!0;break;case"stale-if-error":e.staleIfError=!0;break;case"must-revalidate":e.mustRevalidate=!0;break}}}let u=r["x-replicate-to"];if(u){let g=$w(u).map(y=>(y.next?.name==="confirm"&&y.next.value>=0&&(e.replicatedConfirmation=+y.next.value),y.name));e.replicateTo=g.length===1&&+g[0]>=0?+g[0]:g[0]==="*"?void 0:g}r["x-replicate-from"]==="none"&&(e.replicateFrom=!1);let f=await Ut(e,()=>{if(r["content-length"]||r["transfer-encoding"])try{e.data=Uo(r["content-type"],!0)(e.body,e.headers)}catch(g){throw new xd.ClientError(g,400)}if(e.authorize=!0,a===CG&&s==="GET"){if(e?.user?.role?.permission?.super_user)return IG(MS);throw new xd.ServerError("Forbidden",403)}switch(c.checkPermission=e.user?.role?.permission??{},s){case"GET":case"HEAD":return l.get(c,e);case"POST":return l.post(c,e.data,e);case"PUT":return l.put(c,e.data,e);case"DELETE":return l.delete(c,e);case"PATCH":return l.patch(c,e.data,e);case"OPTIONS":i.setIfNone("Allow","GET, HEAD, POST, PUT, DELETE, PATCH, OPTIONS, TRACE, QUERY, COPY, MOVE");return;case"CONNECT":return l.connect(c,null,e);case"TRACE":return"HarperDB is the terminating server";case"QUERY":return l.query(c,e.data,e);case"COPY":return l.copy(c,r.destination,e);case"MOVE":return l.move(c,r.destination,e);case"BREW":throw new xd.ClientError("HarperDB is short and stout and can't brew coffee",418);default:throw new xd.ServerError(`Method ${s} is not recognized`,501)}}),m=200,h;if(f==null)m=s==="GET"||s==="HEAD"?404:204,Gw.lastModified&&e.lastModified&&i.setIfNone("Last-Modified",new Date(e.lastModified).toUTCString());else if(f.status>0&&f.headers){let g=pq(f.headers,i);return f.headers!==g&&(f.headers=g),f.data!==void 0&&(f.body=km(f.data,e,f)),f}else if(h=e.lastModified){Fce[0]=h;let g=String.fromCharCode(34,(Xr[0]&63)+62,(Xr[0]>>6)+(Xr[1]<<2&63)+62,(Xr[1]>>4)+(Xr[2]<<4&63)+62,(Xr[2]>>2)+62,(Xr[3]&63)+62,(Xr[3]>>6)+(Xr[4]<<2&63)+62,(Xr[4]>>4)+(Xr[5]<<4&63)+62,(Xr[5]>>2)+62,(Xr[6]&63)+62,(Xr[6]>>6)+(Xr[7]<<2&63)+62,34),y=r["if-none-match"];y&&g==y?(f?.onDone&&f.onDone(),m=304,f=void 0):i.setIfNone("ETag",g),Gw.lastModified&&i.setIfNone("Last-Modified",new Date(h).toUTCString())}e.createdResource&&(m=201),e.newLocation&&i.setIfNone("Location",e.newLocation);let p={status:m,headers:i,body:void 0},E=e.loadedFromSource??f?.wasLoadedFromSource?.();return E!==void 0&&(p.wasCacheMiss=E,!E&&h&&i.setIfNone("Age",Math.round((Date.now()-(e.lastRefreshed||h))/1e3))),f!==void 0&&(p.body=km(f,e,p),s==="HEAD"&&(p.body=void 0)),p}catch(a){a.statusCode?a.statusCode===500?Ii.warn(a):Ii.info(a):Ii.error(a),a.statusCode===405&&(a.method&&(a.message+=` to handle HTTP method ${a.method.toUpperCase()||""}`),a.allow&&(a.allow.push("trace","head","options"),i.setIfNone("Allow",a.allow.map(l=>l.toUpperCase()).join(", "))));let c={status:a.statusCode||500,headers:i,body:void 0};return c.body=km(a.contentType?a:LG(a),e,c),c}}function kce(e){Gw=e,e.includeExpensiveRecordCountEstimates&&(dc.prototype.includeExpensiveRecordCountEstimates=!0),!PG&&(PG=!0,MS=e.resources,e.server.http(async(t,r)=>{if(!t.isWebSocket)return Hce(t,r)},e),e.webSocket!==!1&&e.server.ws(async(t,r,n)=>{rp++;let s=new es;DG||(DG=!0,kh(l=>{rp>0&&l.push({metric:"ws-connections",connections:rp,byThread:!0})}));let i;t.on("error",l=>{i=!0,Ii.warn(l)});let a;t.on("message",o(function(u){a||(a=Uo(r.requestedContentType??r.headers.asObject["content-type"],!1));let d=a(u);ot(u.length,"bytes-received",r.handlerPath,"message","ws"),s.push(d)},"message"));let c;t.on("close",()=>{rp--,Qr(!i,"connection","ws","disconnect"),s.emit("close"),c&&c.return()});try{await n;let l=r.url.slice(1),u=MS.getMatch(l,"ws");if(Qr(!!u,"connection","ws","connect"),u){r.handlerPath=u.path,ot(p=>({count:p.count,total:rp}),"connections",r.handlerPath,"connect","ws"),r.authorize=!0;let d=new _i(u.relativeURL);d.checkPermission=r.user?.role?.permission??{};let f=u.Resource;c=(await Ut(r,()=>f.connect(d,s,r)))[Symbol.asyncIterator]();let h;for(;!(h=await c.next()).done;){let p=await Ka(h.value,r);t.send(p),ot(p.length,"bytes-sent",r.handlerPath,"message","ws"),t._socket.writableNeedDrain&&await new Promise(E=>t._socket.once("drain",E))}}else return t.close(1011,`No resource was found to handle ${r.pathname}`)}catch(l){l.statusCode?l.statusCode===500?Ii.warn(l):Ii.info(l):Ii.error(l),t.close(qce[l.statusCode]||1011,LG(l))}t.close()},e))}function $w(e){return e.trim().split(",").map(t=>{let r,n=t.trim().split(";"),s;for(;s=n.pop();)if(s.includes("=")){let[i,a]=s.trim().split("=");i=i.trim(),a&&(a=a.trim()),r={name:i.toLowerCase(),value:a,next:r}}else r={name:s.toLowerCase(),next:r};return r})}var Ii,xd,LG,Xr,Fce,Gw,CG,PG,MS,DG,rp,qce,MG=ue(()=>{xo();ao();Ii=w(j()),xd=w(ge());dg();Vu();nl();Gh();NG();tp();mg();({errorToString:LG}=Ii),Xr=new Uint8Array(8),Fce=new Float64Array(Xr.buffer,0,1),Gw={},CG="openapi";o(Hce,"http");rp=0;o(kce,"start");qce={401:3e3,403:3003};o($w,"parseHeaderValue")});var Vw=M((KUe,UG)=>{var{recordAction:US,recordActionBinary:vG}=(ao(),v(fS)),Gce=require("fastify-plugin"),$ce=200;UG.exports=Gce(function(e,t,r){e.addHook("onResponse",async(n,s)=>{let i=s.elapsedTime}),e.addHook("onSend",async(n,s,i)=>{let a=s.elapsedTime,c=performance.now(),l=s.request.routeOptions,u,d,f;l.config?.isOperation?(u=n.body?.operation,d="operation"):(u=l.url,d="fastify-route",f=l.method),US(a,"duration",u,f,d),vG(s.raw.statusCode<400,"success",u,f,d),vG(1,"response_"+s.raw.statusCode,u,f,d);let m=$ce;i?.pipe?(i.on("data",g=>{m+=g.length}),i.on("end",()=>{US(performance.now()-c,"transfer",u,f,d),US(m,"bytes-sent",u,f,d)})):(m+=i?.length||0,US(m,"bytes-sent",u,f,d));let h=a.toFixed(3),p=s.getHeader("Server-Timing"),E=`db;dur=${h}`;s.header("Server-Timing",p?`${p}, ${E}`:E)}),r()},{name:"hdb-request-time"})});var BG=M((YUe,xG)=>{var Vce=ft(),Kce={user:{presence:!0},schema:{presence:!0},table:{presence:!0},operation:{presence:!0}};xG.exports=function(e){return Vce.validateObject(e,Kce)}});var xS=M((WUe,FG)=>{"use strict";var Yce=(F(),v(K)).OPERATIONS_ENUM,Kw=class{static{o(this,"UpdateObject")}constructor(t,r,n,s=void 0){this.operation=Yce.UPDATE,this.schema=t,this.table=r,this.records=n,this.__origin=s}};FG.exports=Kw});var ip={};Oe(ip,{createTokens:()=>zw,getJWTRSAKeys:()=>qS,refreshOperationToken:()=>jw,validateOperationToken:()=>Jw,validateRefreshToken:()=>GS});async function qS(){if(BS)return BS;try{let e=np.default.join(sp.default.getHdbBasePath(),HA),t=await FS.default.readFile(np.default.join(e,Am.JWT_PASSPHRASE_NAME),"utf8"),r=await FS.default.readFile(np.default.join(e,Am.JWT_PRIVATE_KEY_NAME),"utf8");return BS={publicKey:await FS.default.readFile(np.default.join(e,Am.JWT_PUBLIC_KEY_NAME),"utf8"),privateKey:r,passphrase:t},BS}catch(e){throw kS.default.error(e),new Ni.ClientError(Fd.NO_ENCRYPTION_KEYS,Bd.INTERNAL_SERVER_ERROR)}}async function zw(e){let t=(0,Yw.validateBySchema)(e,uo.default.object({username:uo.default.string().optional(),password:uo.default.string().optional(),role:uo.default.string().optional(),expires_in:uo.default.alternatives(uo.default.string(),uo.default.number()).optional()}));if(t)throw new Ni.ClientError(t.message);let r;try{let f=e.bypass_auth!==!0;!e.username&&!e.password&&(e.username=e.hdb_user?.username,f=!1),r=await(0,Ww.findAndValidateUser)(e.username,e.password,f)}catch(f){throw kS.default.error(f),new Ni.ClientError(Fd.INVALID_CREDENTIALS,Bd.UNAUTHORIZED)}if(!r)throw new Ni.ClientError(Fd.INVALID_CREDENTIALS,Bd.UNAUTHORIZED);let n=!1,s=!1;r.role?.permission&&(n=r.role.permission.super_user===!0,s=r.role.permission.cluster_user===!0);let i={username:e.username,super_user:n,cluster_user:s};e.role&&(i.role=e.role);let a=await qS(),c=await Hd.default.sign(i,{key:a.privateKey,passphrase:a.passphrase},{expiresIn:e.expires_in??$G,algorithm:HS,subject:kd.OPERATION}),l=await Hd.default.sign(i,{key:a.privateKey,passphrase:a.passphrase},{expiresIn:Wce,algorithm:HS,subject:kd.REFRESH}),u=MN(l,Fr.SHA256);if((await(0,HG.update)(new kG.default(ym,qu.USER_TABLE_NAME,[{username:e.username,refresh_token:u}]))).skipped_hashes.length>0)throw new Ni.ClientError(Fd.REFRESH_TOKEN_SAVE_FAILED,Bd.INTERNAL_SERVER_ERROR);return qG.default.signalUserChange(new GG.UserEventMsg(process.pid)),{operation_token:c,refresh_token:l}}async function jw(e){let t=(0,Yw.validateBySchema)(e,uo.default.object({refresh_token:uo.default.string().required()}).required());if(t)throw new Ni.ClientError(t.message);let{refresh_token:r}=e;await GS(r);let n=await qS(),s=await Hd.default.decode(r);return{operation_token:await Hd.default.sign({username:s.username,super_user:s.super_user,cluster_user:s.cluster_user},{key:n.privateKey,passphrase:n.passphrase},{expiresIn:$G,algorithm:HS,subject:kd.OPERATION})}}async function Jw(e){return VG(e,kd.OPERATION)}async function GS(e){return VG(e,kd.REFRESH)}async function VG(e,t){try{let r=await qS(),n=await Hd.default.verify(e,r.publicKey,{algorithms:HS,subject:t});if(n.role)throw new Error("Invalid token");let s=await(0,Ww.findAndValidateUser)(n.username,void 0,!1);if(t===kd.REFRESH&&!vN(s.refresh_token,e))throw new Error("Invalid token");return s}catch(r){throw kS.default.warn(r),r?.name==="TokenExpiredError"?new Ni.ClientError(Fd.TOKEN_EXPIRED,Bd.FORBIDDEN):new Ni.ClientError(Fd.INVALID_TOKEN,Bd.UNAUTHORIZED)}}var Hd,FS,np,uo,Yw,Ni,kS,Ww,HG,kG,qG,GG,sp,Bd,Fd,$G,Wce,HS,kd,BS,qd=ue(()=>{Hd=w(require("jsonwebtoken")),FS=w(require("fs-extra")),np=w(require("node:path")),uo=w(require("joi")),Yw=w(ft());F();Ni=w(ge()),kS=w(j());Xg();Ww=w($n()),HG=w(qn()),kG=w(xS()),qG=w(Vo()),GG=w(Si()),sp=w(oe()),{HTTP_STATUS_CODES:Bd,AUTHENTICATION_ERROR_MSGS:Fd}=Ni.hdbErrors;sp.default.initSync();$G=sp.default.get(U.AUTHENTICATION_OPERATIONTOKENTIMEOUT)||"1d",Wce=sp.default.get(U.AUTHENTICATION_REFRESHTOKENTIMEOUT)||"30d",HS="RS256",kd={OPERATION:"operation",REFRESH:"refresh"};o(qS,"getJWTRSAKeys");o(zw,"createTokens");o(jw,"refreshOperationToken");o(Jw,"validateOperationToken");o(GS,"validateRefreshToken");o(VG,"validateToken")});var Qw=M((XUe,WG)=>{"use strict";var zce=BG(),Gd=require("passport"),jce=require("passport-local").Strategy,Jce=require("passport-http").BasicStrategy,Qce=require("util"),Xce=$n(),YG=Qce.callbackify(Xce.findAndValidateUser),QUe=Vr(),Zce=(F(),v(K)),KG=(qd(),v(ip));Gd.use(new jce(function(e,t,r){YG(e,t,r)}));Gd.use(new Jce(function(e,t,r){YG(e,t,r)}));Gd.serializeUser(function(e,t){t(null,e)});Gd.deserializeUser(function(e,t){t(null,e)});function ele(e,t,r){if(e.raw?.user!==void 0)return r(null,e.raw.user);let n,s;if(e.headers?.authorization){let a=e.headers.authorization.split(" ");n=a[0],s=a[1]}function i(a,c){return a?r(a):c?r(null,c):r("Must login")}switch(o(i,"handleResponse"),n){case"Basic":Gd.authenticate("basic",{session:!1},(a,c)=>{i(a,c)})(e,t,r);break;case"Bearer":e.body?.operation&&e.body.operation===Zce.OPERATIONS_ENUM.REFRESH_OPERATION_TOKEN?KG.validateRefreshToken(s).then(a=>{e.body.refresh_token=s,r(null,a)}).catch(a=>{r(a)}):KG.validateOperationToken(s).then(a=>{r(null,a)}).catch(a=>{r(a)});break;default:Gd.authenticate("local",{session:!1},function(a,c){i(a,c)})(e,t,r);break}}o(ele,"authorize");function tle(e,t){let r=zce(e);if(r){t(r);return}let n={authorized:!0,messages:[]},s=e.user.role;if(!s?.permission)return t("Invalid role");let i=JSON.parse(s.permission);if(i.super_user)return t(null,n);if(!i[e.schema])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.schema} schema`),t(null,n);if(!i[e.schema].tables[e.table])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.table} table`),t(null,n);if(!i[e.schema].tables[e.table][e.operation])return n.authorized=!1,n.messages.push(`Not authorized to access ${e.operation} on ${e.table} table`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&!e.attributes)return n.authorized=!1,n.messages.push(`${e.schema}.${e.table} has attribute permissions. Missing attributes to validate`),t(null,n);if(i[e.schema].tables[e.table].attribute_permissions&&e.attributes){let a=i[e.schema].tables[e.table].attribute_permissions;for(let c in a)e.attributes.indexOf(a[c].attribute_name)>-1&&!a[c][e.operation]&&(n.authorized=!1,n.messages.push(`Not authorized to ${e.operation} ${a[c].attribute_name} `))}return t(null,n)}o(tle,"checkPermissions");WG.exports={authorize:ele,checkPermissions:tle}});var $S=M((exe,zG)=>{"use strict";var rle=as();zG.exports={writeTransaction:nle};function nle(e,t,r){return rle.writeTransaction(e,t,r)}o(nle,"writeTransaction")});var XG=M((nxe,QG)=>{"use strict";var sle=ln(),ile=Bs(),jG=j(),ole=qn(),rxe=$S(),ale=require("clone"),Zw=require("alasql"),cle=qg(),JG=require("util"),lle=JG.promisify(ile.getTableSchema),ule=JG.promisify(sle.search),dle=(F(),v(K)),Xw=se();cle(Zw);QG.exports={update:mle};var fle="There was a problem performing this update. Please check the logs and try again.";async function mle({statement:e,hdb_user:t}){let r=await lle(e.table.databaseid,e.table.tableid),n=hle(e.columns);Xw.backtickASTSchemaItems(e);let{table:s,where:i}=e,a=ale(s),c=Xw.isEmpty(i)?"":` WHERE ${i.toString()}`,l=`SELECT ${r.hash_attribute} FROM ${s.toString()} ${c}`,u=Zw.parse(l).statements[0],d=await ule(u),f=ple(n,d);return _le(a,f,t)}o(mle,"update");function hle(e){try{let t={};return e.forEach(r=>{"value"in r.expression?t[r.column.columnid]=r.expression.value??null:t[r.column.columnid]=Zw.compile(`SELECT ${r.expression.toString()} AS [${dle.FUNC_VAL}] FROM ?`)}),t}catch(t){throw jG.error(t),new Error(fle)}}o(hle,"createUpdateRecord");function ple(e,t){return Xw.isEmptyOrZeroLength(t)?[]:t.map(r=>Object.assign(r,e))}o(ple,"buildUpdateRecords");async function _le(e,t,r){let n={operation:"update",schema:e.databaseid_orig,table:e.tableid_orig,records:t,hdb_user:r},s=await ole.update(n);try{delete s.new_attributes,delete s.txn_time}catch(i){jG.error(`Error delete new_attributes from update response: ${i}`)}return s}o(_le,"updateRecords")});var e$=M((axe,ZG)=>{var Ele=require("alasql"),gle=ln(),Sle=j(),Tle=as(),tO=require("util"),eO=se(),Rle=(F(),v(K)),yle=Bs(),ixe=$S(),oxe=qn(),Ale="record",ble="successfully deleted",Ile=tO.callbackify(Cle),Nle=tO.promisify(gle.search),wle=tO.promisify(yle.getTableSchema);ZG.exports={convertDelete:Ile};function Ole(e){return`${e.deleted_hashes.length} ${Ale}${e.deleted_hashes.length===1?"":"s"} ${ble}`}o(Ole,"generateReturnMessage");async function Cle({statement:e,hdb_user:t}){let r=await wle(e.table.databaseid,e.table.tableid);eO.backtickASTSchemaItems(e);let{table:n,where:s}=e,i=eO.isEmpty(s)?"":` WHERE  ${s.toString()}`,a=`SELECT ${r.hash_attribute} FROM ${n.toString()} ${i}`,c=Ele.parse(a).statements[0],l={operation:Rle.OPERATIONS_ENUM.DELETE,schema:n.databaseid_orig,table:n.tableid_orig,hdb_user:t};try{l.records=await Nle(c);let u=await Tle.deleteRecords(l);return eO.isEmptyOrZeroLength(u.message)&&(u.message=Ole(u)),delete u.txn_time,u}catch(u){throw Sle.error(u),u.hdb_code?u.message:u}}o(Cle,"convertDelete")});var i$=M((lxe,s$)=>{"use strict";var Ple=rc(),{hdbErrors:t$}=ge(),{getDatabases:r$}=(De(),v(ut));s$.exports={checkSchemaExists:n$,checkSchemaTableExists:Dle,schemaDescribe:Ple};async function n$(e){if(!r$()[e])return t$.HDB_ERROR_MSGS.SCHEMA_NOT_FOUND(e)}o(n$,"checkSchemaExists");async function Dle(e,t){let r=await n$(e);if(r)return r;if(!r$()[e][t])return t$.HDB_ERROR_MSGS.TABLE_NOT_FOUND(e,t)}o(Dle,"checkSchemaTableExists")});var oO=M((hxe,E$)=>{"use strict";var{decode:Lle}=require("msgpackr"),{isMainThread:dxe,parentPort:fxe,threadId:mxe}=require("worker_threads"),YS=nr(),$d=It(),sO=(F(),v(K)),hn=j(),nO=oe(),Mle=(F(),v(K)),{onMessageByType:vle}=st(),l$=no(),{recordAction:o$,recordActionBinary:Ule}=(ao(),v(fS)),{publishToStream:xle}=YS,{ConsumerEvents:a$}=require("nats"),Ble=ln(),{promisify:Fle}=require("util"),{decodeBlobsWithWrites:Hle}=(ts(),v(YE)),u$=Fle(setTimeout),WS=1e4,zS,KS,kle,qle,d$,op=new Map,Vd=new Map;E$.exports={initialize:f$,ingestConsumer:iO,setSubscription:Gle,setIgnoreOrigin:Kle,getDatabaseSubscriptions:Vle,updateConsumer:m$};async function f$(){vle(sO.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,async n=>{await m$(n)}),d$=!0,hn.notify("Initializing clustering ingest service.");let{connection:e,jsm:t,js:r}=await YS.getNATSReferences();zS=e,KS=e.info.server_name,kle=t,qle=r}o(f$,"initialize");async function m$(e){if(e.status==="start"){let{js:t,jsm:r}=await h$(e.node_domain_name);iO(e.stream_name,t,r,e.node_domain_name)}else if(e.status==="stop"){let t=op.get(e.stream_name+e.node_domain_name);t&&(hn.notify("Closing ingest consumer for node:",e.node_domain_name,"stream:",e.stream_name),await t.close?.(),op.set(e.stream_name+e.node_domain_name,"close")),Vd.get(e.node_domain_name)==="failed"&&Vd.set(e.node_domain_name,"close")}}o(m$,"updateConsumer");var jS=new Map;function Gle(e,t,r){let n=jS.get(e);n||jS.set(e,n=new Map),n.set(t,r),d$||f$().then($le)}o(Gle,"setSubscription");async function $le(){let e=await Ble.searchByValue({database:"system",table:"hdb_nodes",search_attribute:"name",search_value:"*"});for await(let t of e){let r=t.name+$d.SERVER_SUFFIX.LEAF,n,s;for(let i of t.subscriptions||[])if(i.subscribe===!0){if(!n&&({js:n,jsm:s}=await h$(r),!n))break;let{schema:a,table:c}=i,l=l$.createNatsTableStreamName(a,c);iO(l,n,s,r)}}}o($le,"accessConsumers");async function h$(e){let t,r,n=1;for(;!r;)try{t=await zS.jetstream({domain:e}),r=await zS.jetstreamManager({domain:e,checkAPI:!1})}catch(s){if(Vd.get(e)==="close")break;Vd.set(e,"failed"),n%10===1&&hn.warn("Nats ingest attempting to connect to:",e,"Nats error:",s.message);let i=n++*100<WS?n++*100:WS;await u$(i)}return{js:t,jsm:r}}o(h$,"connectToRemoteJS");function Vle(){return jS}o(Vle,"getDatabaseSubscriptions");var p$;function Kle(e){p$=e}o(Kle,"setIgnoreOrigin");var _$=100,c$=new Array(_$),VS=0;async function iO(e,t,r,n){let{connection:s}=await YS.getNATSReferences();zS=s,KS=s.info.server_name;let i,a=1;for(;!i;)try{i=await t.consumers.get(e,KS),hn.notify("Initializing ingest consumer for node:",n,"stream:",e)}catch(u){if(Vd.get(n)==="close")break;a%10===1&&hn.warn("Nats ingest error getting consumer:",n,"stream:",e,"Nats error:",u.message),u.code==="404"&&(hn.notify("Nats ingest creating consumer for node:",n,"stream:",e),i=await YS.createConsumer(r,e,KS,new Date(Date.now()).toISOString()));let d=a++*100<WS?a++*100:WS;await u$(d)}let c=!1,l;for(;!c;){if(op.get(e+n)==="close"||Vd.get(n)==="close"){op.delete(e+n),c=!0;continue}l=await i.consume({max_messages:nO.get(sO.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXCONSUMEMSGS)??100,bind:!0}),op.set(e+n,l);let u=!1;(async()=>{for await(let d of await l.status())if(d.type===a$.ConsumerDeleted&&(await l.close(),c=!0),d.type===a$.HeartbeatsMissed){let f=d.data;hn.trace(`${f} clustering ingest consumer heartbeats missed, node: ${n} stream: ${l.consumer.stream}`),f===100&&(hn.warn(`Restarting clustering ingest consumer due to missed heartbeat threshold being met, node: ${n} stream: ${l.consumer.stream}`),l.stop(),u=!0)}})();try{for await(let d of l)await c$[VS],c$[VS]=Yle(d).catch(f=>{hn.error(f)}),++VS>=_$&&(VS=0)}catch(d){d.message==="consumer deleted"?(hn.notify("Nats consumer deleted, closing messages for node:",n,"stream:",l.consumer.stream),await l.close(),c=!0):hn.error("Error consuming clustering ingest, restarting consumer",d)}}}o(iO,"ingestConsumer");async function Yle(e){let t;await Hle(()=>{t=Lle(e.data)}),o$(e.data.length,"bytes-received",e.subject,t.operation,"ingest"),hn.trace("Nats message processor message size:",e?.msg?._msg?.size,"bytes");let r=e.headers,n=!1,s=nO.get(sO.CONFIG_PARAMS.CLUSTERING_NODENAME);r.has($d.MSG_HEADERS.TRANSACTED_NODES)&&r.values($d.MSG_HEADERS.TRANSACTED_NODES).indexOf(s)>-1&&(n=!0);let i=r.get($d.MSG_HEADERS.ORIGIN);if(n||(n=i===s&&!p$),Ule(n,"echo",e.subject,t.operation,"ingest"),n){e.ack();return}r.append($d.MSG_HEADERS.TRANSACTED_NODES,s);try{let{operation:a,schema:c,next:l,table:u,records:d,hash_values:f,__origin:m,expiresAt:h}=t;hn.trace("processing message:",a,c,u,(d?"records: "+d.map(C=>C?.id):"")+(f?"ids: "+f:""),"with sequence:",e.seq),hn.trace(`messageProcessor nats msg id: ${e.headers.get($d.MSG_HEADERS.NATS_MSG_ID)}`);let p;d||(d=f);let E=new Promise(C=>p=C),{timestamp:g,user:y,node_name:T}=m||{},R=jS.get(c)?.get(u);if(!R)throw new Error(`Missing table for replication message: ${u}`);if(a==="define_schema")t.type=a,t.onCommit=p,R.send(t);else if(d.length===1&&!l)R.send({type:rO(a),value:d[0],id:f?.[0],expiresAt:h,timestamp:g,table:u,onCommit:p,user:y,nodeName:T});else{let C=d.map((k,te)=>({type:rO(a),value:k,expiresAt:h,id:f?.[te],table:u}));for(;l;)C.push({type:rO(l.operation),value:l.record,expiresAt:l.expiresAt,id:l.id,table:l.table}),l=l.next;R.send({type:"transaction",writes:C,table:u,timestamp:g,onCommit:p,user:y,nodeName:T})}nO.get(Mle.CONFIG_PARAMS.CLUSTERING_REPUBLISHMESSAGES)!==!1&&xle(e.subject.split(".").slice(0,-1).join("."),l$.createNatsTableStreamName(c,u),e.headers,e.data),await E;let N=Date.now()-g;g&&o$(N,"replication-latency",e.subject,a,"ingest")}catch(a){hn.error(a)}e.ack()}o(Yle,"messageProcessor");function rO(e){switch(e){case"insert":case"upsert":case"update":return"put"}return e}o(rO,"convertOperation")});var nr=M((Rxe,v$)=>{"use strict";var qr=oe();qr.initSync();var Wle=require("fs-extra"),zle=require("semver"),lp=require("path"),{monotonicFactory:jle}=require("ulidx"),S$=jle(),Jle=require("util"),T$=require("child_process"),Qle=Jle.promisify(T$.exec),Xle=T$.spawn,Zr=It(),We=(F(),v(K)),{packageJson:Zle,PACKAGE_ROOT:eue}=ht(),JS=se(),wi=j(),QS=no(),tue=$S(),ap=_t(),{broadcast:rue,onMessageByType:nue,getWorkerIndex:sue}=st(),{isMainThread:R$}=require("worker_threads"),{Encoder:iue,decode:uO}=require("msgpackr"),y$=new iue,{isEmpty:zl}=JS,A$=$n(),_xe=48*36e11;R$&&nue(We.ITC_EVENT_TYPES.RESTART,()=>{pn=void 0,Wl=void 0});var{connect:oue,StorageType:aue,RetentionPolicy:cue,AckPolicy:dO,DeliverPolicy:fO,DiscardPolicy:lue,NatsConnection:Exe,JetStreamManager:gxe,JetStreamClient:Sxe,StringCodec:Txe,JSONCodec:uue,createInbox:mO,headers:due,ErrorCode:g$}=require("nats"),{recordAction:fue}=(ao(),v(fS)),{encodeBlobsAsBuffers:mue}=(ts(),v(YE)),b$=uue(),hue="clustering",pue=Zle.engines[Zr.NATS_SERVER_NAME],_ue=lp.join(eue,"dependencies"),lO=lp.join(_ue,`${process.platform}-${process.arch}`,Zr.NATS_BINARY_NAME),aO,cO,cp,Kl,Yl;v$.exports={runCommand:I$,checkNATSServerInstalled:Eue,createConnection:hO,getConnection:up,getJetStreamManager:dp,getJetStream:w$,getNATSReferences:fo,getServerList:Sue,createLocalStream:pO,listStreams:O$,deleteLocalStream:Tue,getServerConfig:Kd,listRemoteStreams:Rue,viewStream:yue,viewStreamIterator:Aue,publishToStream:bue,request:wue,reloadNATS:_O,reloadNATSHub:Oue,reloadNATSLeaf:Cue,extractServerName:Nue,requestErrorHandler:Pue,createLocalTableStream:L$,createTableStreams:Mue,purgeTableStream:M$,purgeSchemaTableStreams:vue,getStreamInfo:Uue,updateLocalStreams:Bue,closeConnection:gue,getJsmServerName:XS,addNatsMsgHeader:C$,clearClientCache:N$,updateRemoteConsumer:Due,createConsumer:P$,updateConsumerIterator:Lue};async function I$(e,t=void 0){let{stdout:r,stderr:n}=await Qle(e,{cwd:t});if(n)throw new Error(n.replace(`
 `,""));return r.replace(`
 `,"")}o(I$,"runCommand");async function Eue(){try{await Wle.access(lO)}catch{return!1}let e=await I$(`${lO} --version`,void 0),t=e.substring(e.lastIndexOf("v")+1,e.length);return zle.eq(t,pue)}o(Eue,"checkNATSServerInstalled");async function hO(e,t,r,n=!0,s="127.0.0.1"){if(!t&&!r){let a=await A$.getClusterUser();if(zl(a))throw new Error("Unable to get nats connection. Cluster user is undefined.");t=a.username,r=a.decrypt_hash}wi.trace("create nats connection called");let i=await oue({name:s,port:e,user:t,pass:r,maxReconnectAttempts:-1,waitOnFirstConnect:n,timeout:2e5,tls:{keyFile:qr.get(We.CONFIG_PARAMS.CLUSTERING_TLS_PRIVATEKEY),certFile:qr.get(We.CONFIG_PARAMS.CLUSTERING_TLS_CERTIFICATE),caFile:qr.get(We.CONFIG_PARAMS.CLUSTERING_TLS_CERT_AUTH),rejectUnauthorized:!1}});return i.protocol.transport.socket.unref(),wi.trace("create connection established a nats client connection with id",i?.info?.client_id),i.closed().then(a=>{a&&wi.error("Error with Nats client connection, connection closed",a),i===pn&&N$()}),i}o(hO,"createConnection");function N$(){pn=void 0,Kl=void 0,Yl=void 0,Wl=void 0}o(N$,"clearClientCache");async function gue(){pn&&(await pn.drain(),pn=void 0,Kl=void 0,Yl=void 0,Wl=void 0)}o(gue,"closeConnection");var pn,Wl;async function up(){return Wl||(Wl=hO(qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),void 0,void 0),pn=await Wl),pn||Wl}o(up,"getConnection");async function dp(){if(Kl)return Kl;zl(pn)&&await up();let{domain:e}=Kd(We.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(zl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Kl=await pn.jetstreamManager({domain:e,timeout:6e4}),Kl}o(dp,"getJetStreamManager");async function w$(){if(Yl)return Yl;zl(pn)&&await up();let{domain:e}=Kd(We.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);if(zl(e))throw new Error("Error getting JetStream domain. Unable to get JetStream manager.");return Yl=pn.jetstream({domain:e,timeout:6e4}),Yl}o(w$,"getJetStream");async function fo(){let e=pn||await up(),t=Kl||await dp(),r=Yl||await w$();return{connection:e,jsm:t,js:r}}o(fo,"getNATSReferences");async function Sue(e){let t=qr.get(We.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),{sys_name:r,decrypt_hash:n}=await A$.getClusterUser(),s=await hO(t,r,n),i=mO(),a=s.subscribe(i),c=[],l,u=(async()=>{for await(let d of a){let f=b$.decode(d.data);f.response_time=Date.now()-l,c.push(f)}})();return l=Date.now(),await s.publish("$SYS.REQ.SERVER.PING.VARZ",void 0,{reply:i}),await s.publish("$SYS.REQ.SERVER.PING",void 0,{reply:i}),await s.flush(),await JS.asyncSetTimeout(e),await a.drain(),await s.close(),await u,c}o(Sue,"getServerList");async function pO(e,t){let{jsm:r}=await fo(),n=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);s=s===null?-1:s;let i=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);i=i===null?-1:i,await r.streams.add({name:e,storage:aue.File,retention:cue.Limits,subjects:t,discard:lue.Old,maxMsgs:s,maxBytes:i,maxAge:n})}o(pO,"createLocalStream");async function O$(){let{jsm:e}=await fo(),t=await e.streams.list().next(),r=[];return t.forEach(n=>{r.push(n)}),r}o(O$,"listStreams");async function Tue(e){let{jsm:t}=await fo();await t.streams.delete(e)}o(Tue,"deleteLocalStream");async function Rue(e){let{connection:t}=await fo(),r=[],n=mO(),s=t.subscribe(n),i=(async()=>{for await(let a of s)r.push(b$.decode(a.data))})();return await t.publish(`$JS.${e}.API.STREAM.LIST`,void 0,{reply:n}),await t.flush(),await s.drain(),await i,r}o(Rue,"listRemoteStreams");async function yue(e,t=void 0,r=void 0){let{jsm:n,js:s}=await fo(),i=S$(),a={durable_name:i,ack_policy:dO.Explicit};t&&(a.deliver_policy=fO.StartTime,a.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,a);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];let u=[];for await(let d of l){let f=uO(d.data),m={nats_timestamp:d.info.timestampNanos,nats_sequence:d.info.streamSequence,entry:f};if(d.headers&&(m.origin=d.headers.get(Zr.MSG_HEADERS.ORIGIN)),u.push(m),d.ack(),d.info.pending===0)break}return await c.delete(),u}o(yue,"viewStream");async function*Aue(e,t=void 0,r=void 0){let{jsm:n,js:s}=await fo(),i=S$(),a={durable_name:i,ack_policy:dO.Explicit};t&&(a.deliver_policy=fO.StartTime,a.opt_start_time=new Date(t).toISOString()),await n.consumers.add(e,a);let c=await s.consumers.get(e,i),l=r?await c.fetch({max_messages:r,expires:2e3}):await c.consume();if(c._info.num_pending===0)return[];for await(let u of l){let d=uO(u.data);d[0]||(d=[d]);for(let f of d){let m={nats_timestamp:u.info.timestampNanos,nats_sequence:u.info.streamSequence,entry:f};u.headers&&(m.origin=u.headers.get(Zr.MSG_HEADERS.ORIGIN)),yield m}if(u.ack(),u.info.pending===0)break}await c.delete()}o(Aue,"viewStreamIterator");async function bue(e,t,r,n){wi.trace(`publishToStream called with subject: ${e}, stream: ${t}, entries:`,n.operation),r=C$(n,r);let{js:s}=await fo(),i=await XS(),a=`${e}.${i}`,c=await mue(()=>n instanceof Uint8Array?n:y$.encode(n));try{wi.trace(`publishToStream publishing to subject: ${a}`),fue(c.length,"bytes-sent",e,n.operation,"replication"),await s.publish(a,c,{headers:r})}catch(l){if(l.code&&l.code.toString()==="503")return D$(async()=>{try{await s.publish(a,c,{headers:r})}catch{if(l.code&&l.code.toString()==="503"){wi.trace(`publishToStream creating stream: ${t}`);let d=a.split(".");d[2]="*",await pO(t,[a]),await s.publish(a,c,{headers:r})}else throw l}});throw l}}o(bue,"publishToStream");function C$(e,t){t===void 0&&(t=due());let r=qr.get(We.CONFIG_PARAMS.CLUSTERING_NODENAME);return!t.has(Zr.MSG_HEADERS.ORIGIN)&&r&&t.append(Zr.MSG_HEADERS.ORIGIN,r),t}o(C$,"addNatsMsgHeader");function Kd(e){e=e.toLowerCase();let t=lp.join(qr.get(We.CONFIG_PARAMS.ROOTPATH),hue);if(e===We.PROCESS_DESCRIPTORS.CLUSTERING_HUB.toLowerCase())return zl(cO)&&(cO={port:ap.getConfigFromFile(We.CONFIG_PARAMS.CLUSTERING_HUBSERVER_NETWORK_PORT),server_name:ap.getConfigFromFile(We.CONFIG_PARAMS.CLUSTERING_NODENAME)+Zr.SERVER_SUFFIX.HUB,config_file:Zr.NATS_CONFIG_FILES.HUB_SERVER,pid_file_path:lp.join(t,Zr.PID_FILES.HUB),hdbNatsPath:t}),cO;if(e===We.PROCESS_DESCRIPTORS.CLUSTERING_LEAF.toLowerCase())return zl(aO)&&(aO={port:ap.getConfigFromFile(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_PORT),server_name:ap.getConfigFromFile(We.CONFIG_PARAMS.CLUSTERING_NODENAME)+Zr.SERVER_SUFFIX.LEAF,config_file:Zr.NATS_CONFIG_FILES.LEAF_SERVER,domain:ap.getConfigFromFile(We.CONFIG_PARAMS.CLUSTERING_NODENAME)+Zr.SERVER_SUFFIX.LEAF,pid_file_path:lp.join(t,Zr.PID_FILES.LEAF),hdbNatsPath:t}),aO;wi.error(`Unable to get Nats server config. Unrecognized process: ${e}`)}o(Kd,"getServerConfig");async function P$(e,t,r,n){try{await e.consumers.add(t,{ack_policy:dO.Explicit,durable_name:r,deliver_policy:fO.StartTime,opt_start_time:n})}catch(s){if(s.message!=="consumer already exists")throw s}}o(P$,"createConsumer");async function Iue(e,t,r){await e.consumers.delete(t,r)}o(Iue,"removeConsumer");function Nue(e){return e.split(".")[1]}o(Nue,"extractServerName");async function wue(e,t,r=6e4,n=mO()){if(!JS.isObject(t))throw new Error("data param must be an object");let s=y$.encode(t),{connection:i}=await fo(),a={timeout:r};n&&(a.reply=n,a.noMux=!0);let c=await i.request(e,s,a);return uO(c.data)}o(wue,"request");function _O(e){return new Promise(async(t,r)=>{let n=Xle(lO,["--signal",`reload=${e}`],{cwd:__dirname}),s,i;n.on("error",a=>{r(a)}),n.stdout.on("data",a=>{i+=a.toString()}),n.stderr.on("data",a=>{s+=a.toString()}),n.stderr.on("close",a=>{s&&r(s),t(i)})})}o(_O,"reloadNATS");async function Oue(){let{pid_file_path:e}=Kd(We.PROCESS_DESCRIPTORS.CLUSTERING_HUB);await _O(e)}o(Oue,"reloadNATSHub");async function Cue(){let{pid_file_path:e}=Kd(We.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await _O(e)}o(Cue,"reloadNATSLeaf");function Pue(e,t,r){let n;switch(e.code){case g$.NoResponders:n=`Unable to ${t}, node '${r}' is not listening.`;break;case g$.Timeout:n=`Unable to ${t}, node '${r}' is listening but did not respond.`;break;default:n=e.message;break}return n}o(Pue,"requestErrorHandler");async function Due(e,t){let r=t+Zr.SERVER_SUFFIX.LEAF,{connection:n}=await fo(),{jsm:s}=await Hue(r),{schema:i,table:a}=e,c=QS.createNatsTableStreamName(i,a),l=e.start_time?e.start_time:new Date(Date.now()).toISOString();await D$(async()=>{if(e.subscribe===!0)await P$(s,c,n.info.server_name,l);else try{await Iue(s,c,n.info.server_name)}catch(u){wi.trace(u)}})}o(Due,"updateRemoteConsumer");async function Lue(e,t,r,n){let s=QS.createNatsTableStreamName(e,t),i=r+Zr.SERVER_SUFFIX.LEAF,a={type:We.ITC_EVENT_TYPES.NATS_CONSUMER_UPDATE,status:n,stream_name:s,node_domain_name:i};if(!R$&&sue()<qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXINGESTTHREADS)){let{updateConsumer:c}=oO();await c(a)}await rue(a),n==="stop"&&await JS.asyncSetTimeout(1e3)}o(Lue,"updateConsumerIterator");function D$(e){return tue.writeTransaction(We.SYSTEM_SCHEMA_NAME,We.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,e)}o(D$,"exclusiveLock");async function L$(e,t){let r=QS.createNatsTableStreamName(e,t),n=await XS(),s=xue(e,t,n);await pO(r,[s])}o(L$,"createLocalTableStream");async function Mue(e){for(let t=0,r=e.length;t<r;t++){let n=e[t].schema,s=e[t].table;await L$(n,s)}}o(Mue,"createTableStreams");async function M$(e,t,r=void 0){if(qr.get(We.CONFIG_PARAMS.CLUSTERING_ENABLED))try{let n=QS.createNatsTableStreamName(e,t),{domain:s}=Kd(We.PROCESS_DESCRIPTORS.CLUSTERING_LEAF);await(await(await up()).jetstreamManager({domain:s,timeout:24e4})).streams.purge(n,r)}catch(n){if(n.message==="stream not found")wi.warn(n);else throw n}}o(M$,"purgeTableStream");async function vue(e,t){if(qr.get(We.CONFIG_PARAMS.CLUSTERING_ENABLED))for(let r=0,n=t.length;r<n;r++)await M$(e,t[r])}o(vue,"purgeSchemaTableStreams");async function Uue(e){return(await dp()).streams.info(e)}o(Uue,"getStreamInfo");function xue(e,t,r){return`${Zr.SUBJECT_PREFIXES.TXN}.${e}${t?"."+t:""}.${r}`}o(xue,"createSubjectName");async function XS(){if(cp)return cp;if(cp=(await dp())?.nc?.info?.server_name,cp===void 0)throw new Error("Unable to get jetstream manager server name");return cp}o(XS,"getJsmServerName");async function Bue(){let e=await dp(),t=await XS(),r=await O$();for(let n of r){let s=n.config,i=s.subjects[0];if(!i)continue;let a=Fue(n),c=i.split(".");if(c[c.length-1]===t&&!a||s.name==="__HARPERDB_WORK_QUEUE__")continue;let u=i.split(".");u[u.length-1]=t;let d=u.join(".");wi.trace(`Updating stream subject name from: ${i} to: ${d}`),s.subjects[0]=d,await e.streams.update(s.name,s)}}o(Bue,"updateLocalStreams");function Fue(e){let{config:t}=e,r=!1,n=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXAGE);n=n===null?0:n*1e9;let s=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXBYTES);s=s===null?-1:s;let i=qr.get(We.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_STREAMS_MAXMSGS);return i=i===null?-1:i,n!==t.max_age&&(t.max_age=n,r=!0),s!==t.max_bytes&&(t.max_bytes=s,r=!0),i!==t.max_msgs&&(t.max_msgs=i,r=!0),r}o(Fue,"updateStreamLimits");async function Hue(e){let t,r;try{t=await pn.jetstream({domain:e}),r=await pn.jetstreamManager({domain:e,checkAPI:!1})}catch(n){throw wi.error("Unable to connect to:",e),n}return{js:t,jsm:r}}o(Hue,"connectToRemoteJS")});function EO(e){let t=e.get(ZS),r=t?(0,Yd.unpack)(t):null;r||(r={remoteNameToId:{}});let n=Xe(),s=!1;r.nodeName=Xe();let i=r.remoteNameToId;if(i[n]!==0){let a=0,c;for(let l in i){let u=i[l];u===0?c=l:u>a&&(a=u)}if(c){a++,i[c]=a;let l=[Symbol.for("seq"),a];e.rootStore.dbisDb.transactionSync(()=>{e.rootStore.dbisDb.get(l)||e.rootStore.dbisDb.putSync(l,{seqId:mp(e)??1,nodes:[]})})}i[n]=0,e.putSync(ZS,(0,Yd.pack)(r))}return r}function fp(e){return EO(e).remoteNameToId}function x$(e,t){let r=EO(t),n=r.remoteNameToId,s=new Map,i=!1;for(let a in e){let c=e[a],l=n[a];if(l==null){let u=0;for(let d in n){let f=n[d];f>u&&(u=f)}l=u+1,n[a]=l,i=!0}s.set(c,l)}return i&&t.putSync(ZS,(0,Yd.pack)(r)),s}function eT(e,t){let r=EO(t),n=r.remoteNameToId,s=n[e];if(s==null){let i=0;for(let a in n){let c=n[a];c>i&&(i=c)}s=i+1,n[e]=s,t.putSync(ZS,(0,Yd.pack)(r))}return U$.trace?.("The remote node name map",e,n,s),s}var U$,Yd,ZS,gO=ue(()=>{U$=w(hi());Vn();Yd=require("msgpackr"),ZS=Symbol.for("remote-ids");o(EO,"getIdMappingRecord");o(fp,"exportIdMapping");o(x$,"remoteToLocalNodeId");o(eT,"getIdOfRemoteNode")});var SO={};Oe(SO,{commitsAwaitingReplication:()=>zd,getHDBNodeTable:()=>Kt,getReplicationSharedStatus:()=>jd,iterateRoutes:()=>pp,shouldReplicateToNode:()=>hp,subscribeToNodeUpdates:()=>Jd});function Kt(){return B$||(B$=Je({table:"hdb_nodes",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"subscriptions"},{attribute:"system_info"},{attribute:"url"},{attribute:"routes"},{attribute:"ca"},{attribute:"ca_info"},{attribute:"replicates"},{attribute:"revoked_certificates"},{attribute:"__createdtime__"},{attribute:"__updatedtime__"}]}))}function jd(e,t,r,n){return new Float64Array(e.getUserSharedBuffer(["replicated",t,r],new ArrayBuffer(48),n&&{callback:n}))}function Jd(e){Kt().subscribe({}).then(async t=>{for await(let r of t){let n=r?.value?.name;q$.debug?.("adding node",n,"on  node",Xe()," on process",process.pid),server.nodes=server.nodes.filter(i=>i.name!==n),r.type==="put"&&n!==Xe()&&(r.value?server.nodes.push(r.value):console.error("Invalid node update event",r));let s=new Map;for await(let i of Kt().search({}))if(i.shard!=null){let a=s.get(i.shard);a||s.set(i.shard,a=[]),a.push(i)}server.shards=s,(r.type==="put"||r.type==="delete")&&e(r.value,r.id)}})}function hp(e,t){return(e.replicates===!0||e.replicates?.sends)&&databases[t]&&Kt().primaryStore.get(Xe())?.replicates||e.subscriptions?.some(r=>(r.database||r.schema)===t&&r.subscribe)}function kue(){Jd(e=>{fc({},(t,r)=>{let n=e.name,s=F$.get(n);if(s||F$.set(n,s=new Map),s.has(r))return;let i;for(let a in t)if(i=t[a].auditStore,i)break;if(i){let a=jd(i,r,n,()=>{let c=a[0],l=a.lastTime;for(let{txnTime:u,onConfirm:d}of zd.get(r)||[])u>l&&u<=c&&d();a.lastTime=c});a.lastTime=0,s.set(r,a)}})})}function*pp(e){for(let t of e.routes||[]){let r=t.url,n;if(typeof t=="string"?t.includes("://")?r=t:n=t:n=t.hostname??t.host,n&&!r){let s=Wd.default.get(U.REPLICATION_SECUREPORT)??(!Wd.default.get(U.REPLICATION_PORT)&&Wd.default.get(U.OPERATIONSAPI_NETWORK_SECUREPORT)),i;(i=n.match(/:(\d+)$/)?.[1])?n=n.slice(0,-i[0].length-1):t.port?i=t.port:i=s||Wd.default.get(U.REPLICATION_PORT)||Wd.default.get(U.OPERATIONSAPI_NETWORK_PORT);let a=i?.lastIndexOf?.(":");a>0&&(i=+i.slice(a+1).replace(/[\[\]]/g,"")),r=(s?"wss://":"ws://")+n+":"+i}if(!r){H$.isMainThread&&console.error("Invalid route, must specify a url or host (with port)");continue}yield{replicates:!t.subscriptions,url:r,subscription:t.subscriptions,routes:t.routes,startTime:t.startTime,revoked_certificates:t.revokedCertificates}}}var H$,k$,Wd,q$,B$,F$,zd,jl=ue(()=>{De();Vn();vm();H$=require("worker_threads"),k$=w(ge()),Wd=w(oe());F();q$=w(hi());server.nodes=[];o(Kt,"getHDBNodeTable");o(jd,"getReplicationSharedStatus");o(Jd,"subscribeToNodeUpdates");o(hp,"shouldReplicateToNode");F$=new Map;RU((e,t,r)=>{if(r>server.nodes.length)throw new k$.ClientError(`Cannot confirm replication to more nodes (${r}) than are in the network (${server.nodes.length})`);zd||(zd=new Map,kue());let n=zd.get(e);return n||(n=[],zd.set(e,n)),new Promise(s=>{let i=0;n.push({txnTime:t,onConfirm:o(()=>{++i===r&&s()},"onConfirm")})})});o(kue,"startSubscriptionToReplications");o(pp,"iterateRoutes")});var V$={};Oe(V$,{connectedToNode:()=>Jl,disconnectedFromNode:()=>Xd,ensureNode:()=>Qo,requestClusterStatus:()=>$$,startOnMainThread:()=>yO});async function yO(e){let t=0,r=it();for(let i of Object.getOwnPropertyNames(r)){let a=r[i];for(let c in a){let l=a[c];if(l.auditStore){tT.set(i,mp(l.auditStore));break}}}ho.whenThreadsStarted.then(async()=>{let i=[];for await(let l of r.system.hdb_nodes?.search([])||[])i.push(l);let a=Xe();function c(){let l=Kt().primaryStore.get(a);if(l!==null){let u=e.url??mc();if(l===void 0||l.url!==u||l.shard!==e.shard)return Qo(a,{name:a,url:u,shard:e.shard,replicates:!0})}}o(c,"ensureThisNode"),Kt().primaryStore.get(a)&&c();for(let l of pp(e))try{let u=!l.subscriptions;if(u&&await c(),u&&l.replicates==null&&(l.replicates=!0),i.find(d=>d.url===l.url))continue;s(l)}catch(u){console.error(u)}Jd(s)});let n;function s(i,a=i?.name){let c=Xe()&&a===Xe()||mc()&&i?.url===mc();if(c){let f=!!i?.replicates;if(n!==void 0&&n!==f)for(let m of Kt().search([]))m.replicates&&m.name!==a&&s(m,m.name);n=f}if(ct.trace("Setting up node replication for",i),!i){for(let[f,m]of mo){let h;for(let[p,{worker:E,nodes:g}]of m){let y=g[0];if(y&&y.name==a){h=!0;for(let[T,{worker:R}]of m)m.delete(T),ct.warn("Node was deleted, unsubscribing from node",a,T,f),R?.postMessage({type:"unsubscribe-from-node",node:a,database:T,url:f});break}}if(h){mo.get(f).iterator.remove(),mo.delete(f);return}}return}if(c)return;if(!i.url){ct.info(`Node ${i.name} is missing url`);return}let l=mo.get(i.url);if(l&&l.iterator.remove(),!(i.replicates===!0||i.replicates?.sends)&&!i.subscriptions?.length&&!l)return;if(ct.info(`Added node ${i.name} at ${i.url} for process ${Xe()}`),i.replicates&&i.subscriptions&&(i={...i,subscriptions:null}),i.name){for(let[f,m]of Qd)if(i.url===m.url){Qd.delete(f);break}Qd.set(i.name,i)}let u=it();if(l||(l=new Map,mo.set(i.url,l)),l.iterator=fc(e,(f,m,h)=>{h?d(m,!0):d(m,!1)}),i.subscriptions)for(let f of i.subscriptions){let m=f.database||f.schema;u[m]||(ct.warn(`Database ${m} not found for node ${i.name}, making a subscription anyway`),d(m,!1))}function d(f,m){ct.trace("Setting up replication for database",f,"on node",i.name);let h=l.get(f),p,E=[{replicateByDefault:m,...i}];tT.has(f)&&(E.push({replicateByDefault:m,name:Xe(),startTime:tT.get(f),endTime:Date.now(),replicates:!0}),tT.delete(f));let g=hp(i,f),y=ho.workers.filter(T=>T.name==="http");if(h?(p=h.worker,h.nodes=E):g&&(t=t%y.length,p=y[t++],l.set(f,{worker:p,nodes:E,url:i.url}),p?.on("exit",()=>{l.get(f)?.worker===p&&(l.delete(f),d(f,m))})),g)setTimeout(()=>{let T={type:"subscribe-to-node",database:f,nodes:E};p?p.postMessage(T):_p(T)},que);else{ct.info("Node no longer should be used, unsubscribing from node",{replicates:i.replicates,databaseName:f,node:i,subscriptions:i.subscriptions,hasDatabase:!!u[f],thisReplicates:Kt().primaryStore.get(Xe())?.replicates}),Kt().primaryStore.get(Xe())?.replicates||(n=!1,ct.info("Disabling replication, this node name",Xe(),Kt().primaryStore.get(Xe()),f));let T={type:"unsubscribe-from-node",database:f,url:i.url,name:i.name};p?p.postMessage(T):nT(T)}}o(d,"onDatabase")}o(s,"onNodeUpdate"),Xd=o(function(i){try{ct.info("Disconnected from node",i.name,i.url,"finished",!!i.finished);let a=Array.from(Qd.keys()),c=a.sort(),l=c.indexOf(i.name||Oi(i.url));if(l===-1){ct.warn("Disconnected node not found in node map",i.name,a);return}let u=mo.get(i.url),d=u?.get(i.database);if(!d){ct.warn("Disconnected node not found in replication map",i.database,u);return}if(d.connected=!1,i.finished||!RO.default.get(U.REPLICATION_FAILOVER))return;let f=d.nodes[0];if(!(f.replicates===!0||f.replicates?.sends||f.subscriptions?.length))return;let m=f.shard,h=(l+1)%c.length;for(;l!==h;){let p=c[h],E=Qd.get(p);u=mo.get(E.url);let g=u?.get(i.database);if(!g||g.connected===!1||g.nodes[0].shard!==m){h=(h+1)%c.length;continue}let{worker:y,nodes:T}=g,R=!1;for(let N of d.nodes){if(T.some(C=>C.name===N.name)){ct.info(`Disconnected node is already failing over to ${p} for ${i.database}`);continue}N.endTime<Date.now()||(T.push(N),R=!0)}if(d.nodes=[d.nodes[0]],!R){ct.info(`Disconnected node ${i.name} has no nodes to fail over to ${p}`);return}ct.info(`Failing over ${i.database} from ${i.name} to ${p}`),y?y.postMessage({type:"subscribe-to-node",database:i.database,nodes:T}):_p({database:i.database,nodes:T});return}ct.warn("Unable to find any other node to fail over to",i.name,i.url)}catch(a){ct.error("Error failing over node",a)}},"disconnectedFromNode"),Jl=o(function(i){let a=mo.get(i.url),c=a?.get(i.database);if(!c){ct.warn("Connected node not found in replication map, this may be because the node is being removed",i.database,a);return}c.connected=!0,c.latency=i.latency;let l=c.nodes[0];if(!l){ct.warn("Newly connected node has no node subscriptions",i.database,c);return}if(!l.name){ct.debug("Connected node is not named yet",i.database,c);return}c.nodes=[l];let u=!1;for(let d of mo.values()){let f=d.get(i.database);if(!f||f==c)continue;let{worker:m,nodes:h,connected:p}=f;if(h)if(p===!1&&h[0].shard===l.shard)u=!0,c.nodes.push(h[0]);else{let E=h.filter(g=>g&&g.name!==l.name);E.length<h.length&&(f.nodes=E,m.postMessage({type:"subscribe-to-node",database:i.database,nodes:h}))}}u&&c.worker&&c.worker.postMessage({type:"subscribe-to-node",database:i.database,nodes:c.nodes})},"connectedToNode"),(0,ho.onMessageByType)("disconnected-from-node",Xd),(0,ho.onMessageByType)("connected-to-node",Jl),(0,ho.onMessageByType)("request-cluster-status",$$)}function $$(e,t){let r=[];for(let[n,s]of Qd)try{let i=mo.get(s.url);ct.info("Getting cluster status for",n,s.url,"has dbs",i?.size);let a=[];if(i){for(let[l,{worker:u,connected:d,nodes:f,latency:m}]of i)a.push({database:l,connected:d,latency:m,threadId:u?.threadId,nodes:f.filter(h=>!(h.endTime<Date.now())).map(h=>h.name)});let c=(0,TO.cloneDeep)(s);c.database_sockets=a,delete c.ca,delete c.node_name,delete c.__updatedtime__,delete c.__createdtime__,r.push(c)}}catch(i){ct.warn("Error getting cluster status for",s?.url,i)}return t?.postMessage({type:"cluster-status",connections:r}),{connections:r}}async function Qo(e,t){let r=Kt();e=e??Oi(t.url),t.name=e;try{if(t.ca){let s=new G$.X509Certificate(t.ca);t.ca_info={issuer:s.issuer.replace(/\n/g," "),subject:s.subject.replace(/\n/g," "),subjectAltName:s.subjectAltName,serialNumber:s.serialNumber,validFrom:s.validFrom,validTo:s.validTo}}}catch(s){ct.error("Error parsing replication CA info for hdb_nodes table",s.message)}let n=r.primaryStore.get(e);if(ct.debug(`Ensuring node ${e} at ${t.url}, existing record:`,n,"new record:",t),!n)await r.patch(t);else{t.replicates&&!RO.default.get(U.CLUSTERING_ENABLED)&&(t.subscriptions=null);for(let s in t)if(n[s]!==t[s]&&s==="subscriptions"&&t[s]&&n[s]){let i=[],a=(0,TO.cloneDeep)(n[s]);for(let c of t[s]){let l=!1;for(let u of a)if((c.database??c.schema)===(u.database??u.schema)&&c.table===u.table){u.publish=c.publish,u.subscribe=c.subscribe,l=!0;break}l||i.push(c)}t.subscriptions=[...a,...i];break}if(Array.isArray(t.revoked_certificates)){let s=n.revoked_certificates||[];t.revoked_certificates=[...new Set([...s,...t.revoked_certificates])]}ct.info(`Updating node ${e} at ${t.url}`),await r.patch(t)}}var ho,rT,ct,TO,RO,G$,que,mo,Xd,Jl,Qd,tT,Ep=ue(()=>{De();ho=w(st());Vn();rT=require("worker_threads");jl();ct=w(j()),TO=require("lodash"),RO=w(oe());F();G$=require("crypto"),que=200,mo=new Map,Qd=new Map,tT=new Map;o(yO,"startOnMainThread");o($$,"requestClusterStatus");rT.parentPort&&(Xd=o(e=>{rT.parentPort.postMessage({type:"disconnected-from-node",...e})},"disconnectedFromNode"),Jl=o(e=>{rT.parentPort.postMessage({type:"connected-to-node",...e})},"connectedToNode"),(0,ho.onMessageByType)("subscribe-to-node",e=>{_p(e)}),(0,ho.onMessageByType)("unsubscribe-from-node",e=>{nT(e)}));o(Qo,"ensureNode")});var _n=M(Yt=>{"use strict";var pr=require("path"),{watch:Gue}=require("chokidar"),Kn=require("fs-extra"),Zd=require("node-forge"),J$=require("net"),{generateKeyPair:AO,X509Certificate:Xo,createPrivateKey:Q$}=require("crypto"),$ue=require("util");AO=$ue.promisify(AO);var wt=Zd.pki,Ci=require("joi"),{v4:X$}=require("uuid"),{validateBySchema:wO}=ft(),{forComponent:Vue}=j(),ms=oe(),Gs=(F(),v(K)),{CONFIG_PARAMS:Xl}=Gs,Pi=BN(),{ClientError:pc}=ge(),iT=require("node:tls"),{relative:Z$,join:Kue}=require("node:path"),{CERT_PREFERENCE_APP:Fxe,CERTIFICATE_VALUES:K$}=Pi,Yue=Ga(),bO=_t(),{table:Wue,getDatabases:zue,databases:sT}=(De(),v(ut)),{getJWTRSAKeys:Y$}=(qd(),v(ip)),Et=Vue("tls");Yt.generateKeys=PO;Yt.updateConfigCert=aV;Yt.createCsr=tde;Yt.signCertificate=rde;Yt.setCertTable=ef;Yt.loadCertificates=sV;Yt.reviewSelfSignedCert=LO;Yt.createTLSSelector=lV;Yt.listCertificates=dV;Yt.addCertificate=cde;Yt.removeCertificate=ude;Yt.createNatsCerts=ide;Yt.generateCertsKeys=sde;Yt.getReplicationCert=Sp;Yt.getReplicationCertAuth=ede;Yt.renewSelfSigned=ode;Yt.hostnamesFromCert=vO;Yt.getKey=dde;Yt.getHostnamesFromCertificate=fde;Yt.getPrimaryHostName=MO;var{urlToNodeName:eV,getThisNodeUrl:jue,getThisNodeName:aT,clearThisNodeName:Jue}=(Vn(),v(po)),{readFileSync:Que,statSync:tV}=require("node:fs"),Hxe=oe(),{getTicketKeys:Xue,onMessageFromWorkers:Zue}=st(),hc=j(),{isMainThread:rV}=require("worker_threads"),{TLSSocket:nV,createSecureContext:kxe}=require("node:tls"),OO=3650,gp=["127.0.0.1","localhost","::1"],CO=[{name:"countryName",value:"USA"},{name:"stateOrProvinceName",value:"Colorado"},{name:"localityName",value:"Denver"},{name:"organizationName",value:"HarperDB, Inc."}];Zue(async e=>{e.type===Gs.ITC_EVENT_TYPES.RESTART&&(ms.initSync(!0),await LO())});var en;function Ec(){return en||(en=zue().system.hdb_certificate,en||(en=Wue({table:"hdb_certificate",database:"system",attributes:[{name:"name",isPrimaryKey:!0},{attribute:"uses"},{attribute:"certificate"},{attribute:"is_authority"},{attribute:"private_key_name"},{attribute:"details"},{attribute:"is_self_signed"},{attribute:"__updatedtime__"}]}))),en}o(Ec,"getCertTable");async function Sp(){let e=lV("operations-api"),t={secureContexts:null,setSecureContext:o(s=>{},"setSecureContext")};await e.initialize(t);let r=t.secureContexts.get(aT());if(!r)return;let n=new Xo(r.options.cert);return r.cert_parsed=n,r.issuer=n.issuer,r}o(Sp,"getReplicationCert");async function ede(){Ec();let e=(await Sp()).options.cert,r=new Xo(e).issuer.match(/CN=(.*)/)?.[1];return en.get(r)}o(ede,"getReplicationCertAuth");var W$,_c=new Map;function sV(){if(W$)return;W$=!0;let e=[{configKey:Xl.TLS},{configKey:Xl.OPERATIONSAPI_TLS}];Ec();let t=pr.dirname(bO.getConfigFilePath()),r;for(let{configKey:n}of e){let s=bO.getConfigFromFile(n);if(s){Array.isArray(s)||(s=[s]);for(let i of s){let a=i.privateKey,c=a&&Z$(Kue(t,"keys"),a);c&&z$(a,l=>{_c.set(c,l)},"private key");for(let l of[!1,!0]){let u=i[l?"certificateAuthority":"certificate"];if(u&&rV){let d;z$(u,f=>{if(K$.cert===f)return;let m=i.hostname??i.hostnames??i.host??i.hosts;m&&!Array.isArray(m)&&(m=[m]);let h=cV(u),p=new Xo(h),E;try{E=MO(p)}catch(R){Et.error("error extracting host name from certificate",R);return}if(E==null){Et.error("No host name found on certificate");return}if(p.checkIssued(new Xo(K$.cert)))return;let g=en.primaryStore.get(E),y=tV(u).mtimeMs,T=!g||g.is_self_signed?1:g.file_timestamp??g.__updatedtime__;if(g&&y<=T){y<T&&Et.info(`Certificate ${E} at ${u} is older (${new Date(y)}) than the certificate in the database (${T>1?new Date(T):"only self signed certificate available"})`);return}r=en.put({name:E,uses:["https",...n.includes("operations")?["operations"]:[]],ciphers:i.ciphers,certificate:h,private_key_name:c,is_authority:l,hostnames:m,fileTimestamp:y,details:{issuer:p.issuer.replace(/\n/g," "),subject:p.subject?.replace(/\n/g," "),subject_alt_name:p.subjectAltName,serial_number:p.serialNumber,valid_from:p.validFrom,valid_to:p.validTo}})},l?"certificate authority":"certificate")}}}}}return r}o(sV,"loadCertificates");function z$(e,t,r){let n,s=o((i,a)=>{try{let c=a.mtimeMs;c&&c!==n&&(n&&rV&&Et.warn(`Reloading ${r}:`,i),n=c,t(cV(i)))}catch(c){Et.error(`Error loading ${r}:`,i,c)}},"loadFile");Kn.existsSync(e)?s(e,tV(e)):Et.error(`${r} file not found:`,e),Gue(e,{persistent:!1}).on("change",s)}o(z$,"loadAndWatch");function IO(){let e=jue();if(e==null){let t=gp[0];return Et.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return eV(e)}o(IO,"getHost");function oT(){let e=aT();if(e==null){let t=gp[0];return Et.info("replication url is missing from harperdb-config.yaml, using default host"+t),t}return e}o(oT,"getCommonName");async function tde(){let e=await Sp(),t=wt.certificateFromPem(e.options.cert),r=wt.privateKeyFromPem(e.options.key);Et.info("Creating CSR with cert named:",e.name);let n=wt.createCertificationRequest();n.publicKey=t.publicKey;let s=[{name:"commonName",value:oT()},...CO];Et.info("Creating CSR with subject",s),n.setSubject(s);let i=[{name:"unstructuredName",value:"HarperDB, Inc."},{name:"extensionRequest",extensions:iV()}];return Et.info("Creating CSR with attributes",i),n.setAttributes(i),n.sign(r),Zd.pki.certificationRequestToPem(n)}o(tde,"createCsr");function iV(){let e=gp.includes(oT())?gp:[...gp,oT()];return e.includes(IO())||e.push(IO()),[{name:"basicConstraints",cA:!1,critical:!0},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0,critical:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"nsCertType",client:!0,server:!0},{name:"subjectAltName",altNames:e.map(t=>J$.isIP(t)?{type:7,ip:t}:{type:2,value:t})}]}o(iV,"certExtensions");async function rde(e){let t={},r=pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME);if(e.csr){let n,s;Ec();for await(let d of en.search([]))if(d.is_authority&&!d.details.issuer.includes("HarperDB-Certificate-Authority")){if(_c.has(d.private_key_name)){n=_c.get(d.private_key_name),s=d;break}else if(d.private_key_name&&await Kn.exists(pr.join(r,d.private_key_name))){n=Kn.readFile(pr.join(r,d.private_key_name)),s=d;break}}if(!n){let d=await NO();s=d.ca,n=d.private_key}n=wt.privateKeyFromPem(n),t.signingCA=s.certificate;let i=wt.certificateFromPem(s.certificate);Et.info("Signing CSR with cert named",s.name);let a=wt.certificationRequestFromPem(e.csr);try{a.verify()}catch(d){return Et.error(d),new Error("Error verifying CSR: "+d.message)}let c=Zd.pki.createCertificate();c.serialNumber="0"+Math.random().toString().slice(2,9),c.validity.notBefore=new Date;let l=new Date;c.validity.notAfter=l,c.validity.notAfter.setDate(l.getDate()+OO),Et.info("sign cert setting validity:",c.validity),Et.info("sign cert setting subject from CSR:",a.subject.attributes),c.setSubject(a.subject.attributes),Et.info("sign cert setting issuer:",i.subject.attributes),c.setIssuer(i.subject.attributes);let u=a.getAttribute({name:"extensionRequest"}).extensions;Et.info("sign cert adding extensions from CSR:",u),c.setExtensions(u),c.publicKey=a.publicKey,c.sign(n,Zd.md.sha256.create()),t.certificate=wt.certificateToPem(c)}else Et.info("Sign cert did not receive a CSR from:",e.url,"only the CA will be returned");return t}o(rde,"signCertificate");async function nde(e,t){await ef({name:aT(),uses:["https","wss"],certificate:e,private_key_name:"privateKey.pem",is_authority:!1,is_self_signed:!0}),await ef({name:t.subject.getField("CN").value,uses:["https","wss"],certificate:wt.certificateToPem(t),private_key_name:"privateKey.pem",is_authority:!0,is_self_signed:!0})}o(nde,"createCertificateTable");async function ef(e){let t=new Xo(e.certificate);e.details={issuer:t.issuer.replace(/\n/g," "),subject:t.subject?.replace(/\n/g," "),subject_alt_name:t.subjectAltName,serial_number:t.serialNumber,valid_from:t.validFrom,valid_to:t.validTo},Ec(),await en.patch(e)}o(ef,"setCertTable");async function PO(){let e=await AO("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem"}});return{publicKey:wt.publicKeyFromPem(e.publicKey),privateKey:wt.privateKeyFromPem(e.privateKey)}}o(PO,"generateKeys");async function DO(e,t,r){let n=wt.createCertificate();if(!t){let a=await Sp();t=wt.certificateFromPem(a.options.cert).publicKey}n.publicKey=t,n.serialNumber="0"+Math.random().toString().slice(2,9),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+OO);let i=[{name:"commonName",value:oT()},...CO];return n.setSubject(i),n.setIssuer(r.subject.attributes),n.setExtensions(iV()),n.sign(e,Zd.md.sha256.create()),wt.certificateToPem(n)}o(DO,"generateCertificates");async function NO(){let e=await dV(),t;for(let r of e){if(!r.is_authority)continue;let n=await uV(r.private_key_name);if(r.private_key_name&&n&&new Xo(r.certificate).checkPrivateKey(Q$(n))){Et.trace(`CA named: ${r.name} found with matching private key`),t={ca:r,private_key:n};break}}if(t)return t;Et.trace("No CA found with matching private key")}o(NO,"getCertAuthority");async function oV(e,t,r=!0){let n=wt.createCertificate();n.publicKey=t,n.serialNumber="0"+Math.random().toString().slice(2,9),n.validity.notBefore=new Date;let s=new Date;n.validity.notAfter=s,n.validity.notAfter.setDate(s.getDate()+OO);let i=[{name:"commonName",value:`HarperDB-Certificate-Authority-${ms.get(Xl.REPLICATION_HOSTNAME)??eV(ms.get(Xl.REPLICATION_URL))??X$().split("-")[0]}`},...CO];n.setSubject(i),n.setIssuer(i),n.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,critical:!0}]),n.sign(e,Zd.md.sha256.create());let a=pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME),c=pr.join(a,Pi.PRIVATEKEY_PEM_NAME);return r&&await Kn.writeFile(c,wt.privateKeyToPem(e)),n}o(oV,"generateCertAuthority");async function sde(){let{privateKey:e,publicKey:t}=await PO(),r=await oV(e,t),n=await DO(e,t,r);await nde(n,r),aV()}o(sde,"generateCertsKeys");async function ide(){let e=await DO(wt.privateKeyFromPem(Pi.CERTIFICATE_VALUES.key),void 0,wt.certificateFromPem(Pi.CERTIFICATE_VALUES.cert)),t=pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME),r=pr.join(t,Pi.NATS_CERTIFICATE_PEM_NAME);await Kn.exists(r)||await Kn.writeFile(r,e);let n=pr.join(t,Pi.NATS_CA_PEM_NAME);await Kn.exists(n)||await Kn.writeFile(n,Pi.CERTIFICATE_VALUES.cert)}o(ide,"createNatsCerts");async function ode(){Ec();for await(let e of en.search([{attribute:"is_self_signed",value:!0}]))await en.delete(e.name);await LO()}o(ode,"renewSelfSigned");async function LO(){Jue(),await sV(),Ec();let e=await NO();if(!e){Et.notify("A matching Certificate Authority and key was not found. A new CA will be created in advance, so it's available if needed.");let r=o(u=>{try{return{key:wt.privateKeyFromPem(Kn.readFileSync(u)),keyPath:u}}catch(d){return Et.warn(`Failed to parse private key from ${u}:`,d.message),{key:null,keyPath:u}}},"tryToParseKey"),n=ms.get(Xl.TLS),s,i;if(Array.isArray(n)){for(let u of n)if(u.privateKey){let d=r(u.privateKey);if(s=d.key,i=d.keyPath,d.key)break}}else{let u=ms.get(Xl.TLS_PRIVATEKEY),d=r(u);s=d.key,i=d.keyPath}let a=pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME),c=Z$(a,i);s||(Et.warn("Unable to parse the TLS key",i,"A new key will be generated and used to create Certificate Authority"),{privateKey:s}=await PO(),Kn.existsSync(pr.join(a,Pi.PRIVATEKEY_PEM_NAME))&&(c=`privateKey${X$().split("-")[0]}.pem`),await Kn.writeFile(pr.join(a,c),wt.privateKeyToPem(s)));let l=await oV(s,wt.setRsaPublicKey(s.n,s.e),!1);await ef({name:l.subject.getField("CN").value,uses:["https"],certificate:wt.certificateToPem(l),private_key_name:c,is_authority:!0,is_self_signed:!0})}if(!await Sp()){let r=aT();Et.notify(`A suitable replication certificate was not found, creating new self singed cert named: ${r}`),e=e??await NO();let n=wt.certificateFromPem(e.ca.certificate),s=n.publicKey,i=await DO(wt.privateKeyFromPem(e.private_key),s,n);await ef({name:r,uses:["https","operations","wss"],certificate:i,is_authority:!1,private_key_name:e.ca.private_key_name,is_self_signed:!0})}}o(LO,"reviewSelfSignedCert");function aV(){let e=Yue(Object.keys(Gs.CONFIG_PARAM_MAP),!0),t=pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME),r=pr.join(t,Pi.PRIVATEKEY_PEM_NAME),n=pr.join(t,Pi.NATS_CERTIFICATE_PEM_NAME),s=pr.join(t,Pi.NATS_CA_PEM_NAME),i=Gs.CONFIG_PARAMS,a={[i.TLS_PRIVATEKEY]:e[i.TLS_PRIVATEKEY.toLowerCase()]?e[i.TLS_PRIVATEKEY.toLowerCase()]:r};e[i.TLS_CERTIFICATE.toLowerCase()]&&(a[i.TLS_CERTIFICATE]=e[i.TLS_CERTIFICATE.toLowerCase()]),e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(a[i.TLS_CERTIFICATEAUTHORITY]=e[i.TLS_CERTIFICATEAUTHORITY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]&&(a[i.OPERATIONSAPI_TLS_CERTIFICATE]=e[i.OPERATIONSAPI_TLS_CERTIFICATE.toLowerCase()]),e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]&&(a[i.OPERATIONSAPI_TLS_PRIVATEKEY]=e[i.OPERATIONSAPI_TLS_PRIVATEKEY.toLowerCase()]),e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]&&(a[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY]=e[i.OPERATIONSAPI_TLS_CERTIFICATEAUTHORITY.toLowerCase()]),(e[i.CLUSTERING_ENABLED.toLowerCase()]||e.clustering)&&(a[i.CLUSTERING_TLS_CERTIFICATE]=e[i.CLUSTERING_TLS_CERTIFICATE.toLowerCase()]??n,a[i.CLUSTERING_TLS_CERT_AUTH]=e[i.CLUSTERING_TLS_CERT_AUTH.toLowerCase()]??s,a[i.CLUSTERING_TLS_PRIVATEKEY]=e[i.CLUSTERING_TLS_PRIVATEKEY.toLowerCase()]??r),bO.updateConfigValue(void 0,void 0,a,!1,!0)}o(aV,"updateConfigCert");function cV(e){return e.startsWith("-----BEGIN")?e:Que(e,"utf8")}o(cV,"readPEM");var j$=iT.createSecureContext;iT.createSecureContext=function(e){if(!e.cert||!e.key)return j$(e);let t={...e};delete t.key,delete t.cert;let r=j$(t);return r.context.setCert(e.cert),r.context.setKey(e.key,void 0),r};var ade=nV.prototype._init;nV.prototype._init=function(e,t){ade.call(this,e,t);let r=this;this._handle.oncertcb=function(n){let s=n.servername;r._SNICallback(s,(i,a)=>{this.sni_context=a?.context||a,this.certCbDone()})}};var Ql=new Map;function lV(e,t){let r=new Map,n,s=!1;return i.initialize=a=>i.ready?i.ready:(a&&(a.secureContexts=r,a.secureContextsListeners=[]),i.ready=new Promise((c,l)=>{async function u(){try{r.clear(),Ql.clear();let d=0;if(sT===void 0){c();return}for await(let f of sT.system.hdb_certificate.search([])){let m=f.certificate,h=new Xo(m);f.is_authority&&(h.asString=m,Ql.set(h.subject,m))}for await(let f of sT.system.hdb_certificate.search([]))try{if(f.is_authority)continue;let m=e==="operations-api",h=f.is_self_signed?1:2;m&&f.uses?.includes?.("operations")&&(h+=1);let p=await uV(f.private_key_name),E=f.certificate,g=new Xo(E);if(Ql.has(g.issuer)&&(E+=`
 `+Ql.get(g.issuer)),!p||!E)throw new Error("Missing private key or certificate for secure server");let y={ciphers:f.ciphers,ticketKeys:Xue(),availableCAs:Ql,ca:t&&Array.from(Ql.values()),cert:E,key:p,key_file:f.private_key_name,is_self_signed:f.is_self_signed};a&&(y.sessionIdContext=a.sessionIdContext);let T=iT.createSecureContext(y);T.name=f.name,T.options=y,T.quality=h,T.certificateAuthorities=Array.from(Ql),T.certStart=E.toString().slice(0,100);let R=f.hostnames??vO(g);Array.isArray(R)||(R=[R]);let N;for(let C of R)if(C){C[0]==="*"&&(s=!0,C=C.slice(1)),C===IO()&&(h+=2),J$.isIP(C)&&(N=!0);let k=r.get(C)?.quality??0;h>k&&r.set(C,T)}else hc.error("No hostname found for certificate at",iT.certificate);hc.trace("Adding TLS",T.name,"for",a.ports||"client","cert named",f.name,"hostnames",R,"quality",h,"best quality",d),h>d&&(i.defaultContext=n=T,d=h,a&&(a.defaultContext=T))}catch(m){hc.error("Error applying TLS for",f.name,m)}a?.secureContextsListeners.forEach(f=>f()),c(n)}catch(d){l(d)}}o(u,"updateTLS"),sT?.system.hdb_certificate.subscribe({listener:o(()=>setTimeout(()=>u(),1500).unref(),"listener"),omitCurrent:!0}),u()})),i;function i(a,c){hc.info("TLS requested for",a||"(no SNI)");let l=a;for(;;){let d=r.get(l);if(d)return hc.debug("Found certificate for",a,d.certStart),d.updatedContext&&(d=d.updatedContext),c(null,d);if(s&&l){let f=l.indexOf(".",1);f<0?l="":l=l.slice(f)}else break}a?hc.debug("No certificate found to match",a,"using the default certificate"):hc.debug("No SNI, using the default certificate",n?.name);let u=n;u?u.updatedContext&&(u=u.updatedContext):hc.info("No default certificate found"),c(null,u)}o(i,"SNICallback")}o(lV,"createTLSSelector");async function uV(e){let t=_c.get(e);return!t&&e?await Kn.readFile(pr.join(ms.get(Xl.ROOTPATH),Gs.LICENSE_KEY_DIR_NAME,e),"utf8"):t}o(uV,"getPrivateKeyByName");async function dV(){Ec();let e=[];for await(let t of en.search([]))e.push(t);return e}o(dV,"listCertificates");async function cde(e){let t=wO(e,Ci.object({name:Ci.string().required(),certificate:Ci.string().required(),is_authority:Ci.boolean().required(),private_key:Ci.string(),hosts:Ci.array(),uses:Ci.array()}));if(t)throw new pc(t.message);let{name:r,certificate:n,private_key:s,is_authority:i}=e,a=new Xo(n),c=!1,l=!1,u;for(let[h,p]of _c)!s&&!c&&a.checkPrivateKey(Q$(p))&&(c=!0,u=h),s&&s===p&&(l=!0,u=h);if(!i&&!s&&!c)throw new pc("A suitable private key was not found for this certificate");let d;if(!r){try{d=MO(a)}catch(h){Et.error(h)}if(d==null)throw new pc("Error extracting certificate host name, please provide a name parameter")}let f=lde(r??d);s&&!c&&!l&&(await Kn.writeFile(pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME,f+".pem"),s),_c.set(f,s));let m={name:r??d,certificate:n,is_authority:i,hosts:e.hosts,uses:e.uses};return(!i||i&&u||i&&s)&&(m.private_key_name=u??f+".pem"),e.ciphers&&(m.ciphers=e.ciphers),await ef(m),"Successfully added certificate: "+f}o(cde,"addCertificate");function lde(e){return e.replace(/[^a-z0-9\.]/gi,"-")}o(lde,"sanitizeName");async function ude(e){let t=wO(e,Ci.object({name:Ci.string().required()}));if(t)throw new pc(t.message);let{name:r}=e;Ec();let n=await en.get(r);if(!n)throw new pc(r+" not found");let{private_key_name:s}=n;if(s){let i=Array.from(await en.search([{attribute:"private_key_name",value:s}]));i.length===1&&i[0].name===r&&(Et.info("Removing private key named",s),await Kn.remove(pr.join(ms.getHdbBasePath(),Gs.LICENSE_KEY_DIR_NAME,s)))}return await en.delete(r),"Successfully removed "+r}o(ude,"removeCertificate");function MO(e){let t=e.subject?.match(/CN=(.*)/)?.[1];return t||vO(e)[0]}o(MO,"getPrimaryHostName");function vO(e){if(e.subjectAltName)return e.subjectAltName.split(",").map(r=>{let n=r.indexOf(":");if(r=r.slice(n+1),r=r.trim(),r[0]==='"')try{r=JSON.parse(r)}catch{}return r.indexOf("=")>-1?r.match(/CN=([^,]*)/)?.[1]:r}).filter(r=>r);let t=certObj.subject?.match(/CN=(.*)/)?.[1];return t?[t]:[]}o(vO,"hostnamesFromCert");async function dde(e){if(e.bypass_auth!==!0)throw new pc("Unauthorized","401");let t=wO(e,Ci.object({name:Ci.string().required()}));if(t)throw new pc(t.message);let{name:r}=e;if(r===".jwtPrivate")return(await Y$()).privateKey;if(r===".jwtPublic")return(await Y$()).publicKey;if(_c.get(r))return _c.get(e.name);throw new pc("Key not found")}o(dde,"getKey");function fde(e){return[e.subject?.CN,...e.subjectaltname.split(",").filter(t=>t.trim().startsWith("DNS:")).map(t=>t.trim().substring(4))]}o(fde,"getHostnamesFromCertificate")});var vV={};Oe(vV,{CONFIRMATION_STATUS_POSITION:()=>DV,LATENCY_POSITION:()=>hT,NodeReplicationConnection:()=>nf,OPERATION_REQUEST:()=>FO,RECEIVED_TIME_POSITION:()=>kO,RECEIVED_VERSION_POSITION:()=>HO,RECEIVING_STATUS_POSITION:()=>qO,RECEIVING_STATUS_RECEIVING:()=>MV,RECEIVING_STATUS_WAITING:()=>LV,SENDING_TIME_POSITION:()=>Tp,createWebSocket:()=>pT,databaseSubscriptions:()=>Sc,replicateOverWS:()=>Rp,tableUpdateListeners:()=>$O});async function pT(e,t){let{authorization:r,rejectUnauthorized:n}=t||{},s=Xe(),i;if(e==null)throw new TypeError(`Invalid URL: Expected a string URL for node "${s}" but received ${e}`);if(e.includes("wss://")){if(!xO){let l=(0,NV.createTLSSelector)("operations-api"),u={secureContexts:null};await l.initialize(u),xO=u.secureContexts}if(i=xO.get(s),i&&ae.debug?.("Creating web socket for URL",e,"with certificate named:",i.name),!i&&n!==!1)throw new Error("Unable to find a valid certificate to use for replication to connect to "+e)}let a={};r&&(a.Authorization=r);let c={headers:a,localAddress:s?.startsWith("127.0")?s:void 0,servername:(0,OV.isIP)(t?.serverName)?void 0:t?.serverName,noDelay:!0,highWaterMark:128*1024,rejectUnauthorized:n!==!1,secureContext:void 0};return i&&(mT?.caCount!==Zo.size&&(mT=wV.createSecureContext({...i.options,ca:[...Zo,...i.options.availableCAs.values()]}),mT.caCount=Zo.size),c.secureContext=mT),new bV.WebSocket(e,"harperdb-replication-v1",c)}function Rp(e,t,r){let n=t.port||t.securePort,s=Zl.pid%1e3+"-"+IV.threadId+(n?"s:"+n:"c:"+t.url?.slice(-4))+" "+Math.random().toString().slice(2,3);ae.debug?.(s,"Initializing replication connection",r);let i=0,a=Buffer.allocUnsafeSlow(1024),c=0,l=new DataView(a.buffer,0,1024),u=t.database,d=t.databaseSubscriptions||Sc,f,m,h=!1,p=t.subscription;p?.then&&p.then(_=>{p=_,p.auditStore&&(f=p.auditStore)});let E=t.tables||u&&it()[u],g;if(!r){ae.error?.(s,"No authorization provided"),Cs(1008,"Unauthorized");return}let y=new Map,T=[];g=r.name,g&&t.connection&&(t.connection.nodeName=g);let R,N,C,k,te,q,Y,$=6e4,W,ce=0,le=0,ie=0,he=AV.default.get(U.REPLICATION_BLOBTIMEOUT)??12e4,Ne=new Map,Ue=[],xe=0,yr;if(t.url){let _=o(()=>{te&&le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten?e.terminate():(te=performance.now(),e.ping(),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten)},"sendPing");C=setInterval(_,RV).unref(),_()}else Xt();e._socket?.setMaxListeners(200);function Xt(){clearTimeout(k),le=e._socket?.bytesRead,ie=e._socket?.bytesWritten,k=setTimeout(()=>{le===e._socket?.bytesRead&&ie===e._socket?.bytesWritten&&(ae.warn?.(`Timeout waiting for ping from ${g}, terminating connection and reconnecting`),e.terminate())},RV*2).unref()}o(Xt,"resetPingTimer");function kt(){if(!(!g||!u))return m||(m=jd(f,u,g)),m}o(kt,"getSharedStatus"),u&&Ba(u);let Zt,dm,Qc=[],qt=[],fm,mm=[],aE=[],cE=[],CA=150,hm=25,Pe=0,lE=0,pm=!1,Po,Mr,Ar,_m;e.on("message",_=>{ce=performance.now();try{let S=_.dataView=new ul(_.buffer,_.byteOffset,_.byteLength);if(_[0]>127){let P=(0,Ze.decode)(_),[O,L,H]=P;switch(O){case mV:{if(L){if(g){if(g!==L){ae.error?.(s,`Node name mismatch, expecting to connect to ${g}, but peer reported name as ${L}, disconnecting`),e.send((0,Ze.encode)([tf])),Cs(1008,"Node name mismatch");return}}else if(g=L,t.connection?.tentativeNode){let B=t.connection.tentativeNode;B.name=g,t.connection.tentativeNode=null,Qo(g,B)}if(t.connection&&(t.connection.nodeName=g),ae.debug?.(s,"received node name:",g,"db:",u??P[2]),!u)try{Ba(u=P[2]),u==="system"&&(Zt=fc(t,(B,de)=>{Fu(de)&&Fa(de)}),e.on("close",()=>{Zt?.remove()}))}catch(B){ae.warn?.(s,"Error setting database",B),e.send((0,Ze.encode)([tf])),Cs(1008,B.message);return}vr()}break}case SV:{ae.debug?.(s,"Received table definitions for",L.map(B=>B.table));for(let B of L){let de=P[2];B.database=de;let fe;Fu(de)&&(de==="system"?ke[de]?.[B.table]||(fe=V(B,ke[de]?.[B.table])):fe=V(B,ke[de]?.[B.table]),f||(f=fe?.auditStore),E||(E=it()?.[de]))}break}case tf:Cs();break;case FO:try{let B=r?.replicates||r?.subscribers||r?.name;ae.debug?.("Received operation request",L,"from",g),server.operation(L,{user:r},!B).then(de=>{Array.isArray(de)&&(de={results:de}),de.requestId=L.requestId,e.send((0,Ze.encode)([lT,de]))},de=>{e.send((0,Ze.encode)([lT,{requestId:L.requestId,error:(0,rf.errorToString)(de)}]))})}catch(B){e.send((0,Ze.encode)([lT,{requestId:L.requestId,error:(0,rf.errorToString)(B)}]))}break;case lT:let{resolve:D,reject:x}=y.get(L.requestId);L.error?x(new Error(L.error)):D(L),y.delete(L.requestId);break;case UO:let z=P[3];if(!E){u?ae.error?.(s,"No database found for",u):ae.error?.(s,"Database name never received"),Cs();return}let ne=E[z];ne=V({table:z,database:u,attributes:L.attributes,schemaDefined:L.schemaDefined},ne),Qc[H]={name:z,decoder:new Ze.Packr({useBigIntExtension:!0,randomAccessStructure:!0,freezeData:!0,typedStructs:L.typedStructs,structures:L.structures}),getEntry(B){return ne.primaryStore.getEntry(B)},rootStore:ne.primaryStore.rootStore};break;case hV:_m=f?x$(L,f):new Map,fm=P[2],ae.debug?.(s,`Acknowledged subscription request, receiving messages for nodes: ${fm}`);break;case pV:let re=H;cE[re]=L;break;case gV:kt()[DV]=L,ae.trace?.(s,"received and broadcasting committed update",L),kt().buffer.notify();break;case EV:R=L,p.send({type:"end_txn",localTime:R,remoteNodeIds:T});break;case uT:{let B=P[1],{fileId:de,size:fe,finished:me,error:Z}=B,J=Ne.get(de);ae.debug?.("Received blob",de,"has stream",!!J,"connectedToBlob",!!J?.connectedToBlob,"length",P[2].length,"finished",me),J||(J=new BO.PassThrough,J.expectedSize=fe,Ne.set(de,J)),J.lastChunk=Date.now();let Te=P[2];ot(Te.byteLength,"bytes-received",`${g}.${u}`,"replication","blob");try{me?(Z?(J.on("error",()=>{}),J.destroy(new Error("Blob error: "+Z+" for record "+(J.recordId??"unknown")+" from "+remote_node_name))):J.end(Te),J.connectedToBlob&&Ne.delete(de)):J.write(Te)}catch(Ee){ae.error?.(`Error receiving blob for ${J.recordId} from ${g} and streaming to storage`,Ee),Ne.delete(de)}break}case _V:{let B=L,de;try{let fe=P[3],me=qt[H]||(qt[H]=E[P[4]]);if(!me)return ae.warn?.("Unknown table id trying to handle record request",H);let Z=me.primaryStore.getBinaryFast(Symbol.for("structures")),J=Z?.length??0;if(J>0&&J!==lE){lE=J;let Ee=(0,Ze.decode)(Z);e.send((0,Ze.encode)([UO,{typedStructs:Ee.typed,structures:Ee.named},H,me.tableName]))}let Te=me.primaryStore.getBinaryFast(fe);if(Te){let Ee=me.primaryStore.decoder.decode(Te,{valueAsBuffer:!0}),pe=dt||{};pe.version=(0,CV.getLastVersion)(),dt&&dt[Qu]&Wr&&(Ee=Buffer.from(Ee),Vm(()=>me.primaryStore.decoder.decode(Te),mt=>xa(mt,fe),me.primaryStore.rootStore)),de=(0,Ze.encode)([cT,B,{value:Ee,expiresAt:pe.expiresAt,version:pe.version,residencyId:pe.residencyId,nodeId:pe.nodeId,user:pe.user}])}else de=(0,Ze.encode)([cT,B])}catch(fe){de=(0,Ze.encode)([cT,B,{error:fe.message}])}e.send(de);break}case cT:{let{resolve:B,reject:de,tableId:fe,key:me}=y.get(P[1]),Z=P[2];if(Z?.error)de(new Error(Z.error));else if(Z){let J;KE(()=>{let Te=Qc[fe].decoder.decode(Z.value);Z.value=Te,Z.key=me,B(Z)||J&&setTimeout(()=>J.forEach(GE),6e4).unref()},f?.rootStore,Te=>{let Ee=Xc(Te,me);return J||(J=[]),J.push(Ee),Ee})}else B();y.delete(P[1]);break}case fV:{Ar=L;let B,de,fe=!1;if(p){if(u!==p.databaseName&&!p.then){ae.error?.("Subscription request for wrong database",u,p.databaseName);return}}else p=d.get(u);if(ae.debug?.(s,"received subscription request for",u,"at",Ar),!p){let Se;p=new Promise(rt=>{ae.debug?.("Waiting for subscription to database "+u),Se=rt}),p.ready=Se,Sc.set(u,p)}if(r.name)de=Kt().subscribe(r.name),de.then(async Se=>{B=Se;for await(let rt of B){let nt=rt.value;if(!(nt?.replicates===!0||nt?.replicates?.receives||nt?.subscriptions?.some(ur=>(ur.database||ur.schema)===u&&ur.publish!==!1))){fe=!0,e.send((0,Ze.encode)([tf])),Cs(1008,`Unauthorized database subscription to ${u}`);return}}},Se=>{ae.error?.(s,"Error subscribing to HDB nodes",Se)});else if(!(r?.role?.permission?.super_user||r.replicates)){e.send((0,Ze.encode)([tf])),Cs(1008,`Unauthorized database subscription to ${u}`);return}if(Mr&&(ae.debug?.(s,"stopping previous subscription",u),Mr.emit("close")),Ar.length===0)return;let me=Ar[0],Z=o(Se=>{if(Se&&(me.replicateByDefault?!me.tables.includes(Se.tableName):me.tables.includes(Se.tableName)))return{table:Se}},"tableToTableEntry"),J={txnTime:0},Te,Ee,pe=1/0,mt,et=o((Se,rt)=>{if(Se.type==="end_txn"){J.txnTime&&(a[i]!==66&&ae.error?.("Invalid encoding of message"),Hu(9),Hu(rg),el(mt=rt),tt()),i=c,J.txnTime=0;return}let nt=Se.nodeId,ur=Se.tableId,Mt=Ee[ur];if(!Mt&&(Mt=Ee[ur]=Z(p.tableById[ur]),!Mt))return ae.debug?.("Not subscribed to table",ur);let Ps=Mt.table,vt=Ps.primaryStore,ui=vt.encoder;(Se.extendedType&og||!ui.typedStructs)&&(ui._mergeStructures(ui.getStructures()),ui.typedStructs&&(ui.lastTypedStructuresLength=ui.typedStructs.length));let ku=Te[nt];if(!(ku&&ku.startTime<rt&&(!ku.endTime||ku.endTime>rt)))return fT&&ae.trace?.(s,"skipping replication update",Se.recordId,"to:",g,"from:",nt,"subscribed:",Te),av();fT&&ae.trace?.(s,"sending replication update",Se.recordId,"to:",g,"from:",nt,"subscribed:",Te);let PA=Se.version;J.txnTime!==PA&&(J.txnTime&&(fT&&ae.trace?.(s,"new txn time, sending queued txn",J.txnTime),a[i]!==66&&ae.error?.("Invalid encoding of message"),tt()),J.txnTime=PA,i=c,el(PA));let tl=Se.residencyId,DA=Bu(tl,Ps),dE;if(DA&&!DA.includes(g)){let di=Bu(Se.previousResidencyId,Ps);if(di&&!di.includes(g)&&(Se.type==="put"||Se.type==="patch")||Ps.getResidencyById)return av();let gm=Se.recordId;ae.trace?.(s,"sending invalidation",gm,g,"from",nt);let Sm=0;tl&&(Sm|=dl),Se.previousResidencyId&&(Sm|=fl);let vA,fE=null;for(let cv in Ps.indices){if(!fE){if(vA=Se.getValue(vt,!0),!vA)break;fE={}}fE[cv]=vA[cv]}dE=ml(Se.version,ur,gm,null,nt,Se.user,Se.type==="put"||Se.type==="patch"?"invalidate":Se.type,ui.encode(fE),Sm,tl,Se.previousResidencyId,Se.expiresAt)}function av(){return ae.trace?.(s,"skipping audit record",Se.recordId),q||(q=setTimeout(()=>{q=null,(mt||0)+TV/2<pe&&(fT&&ae.trace?.(s,"sending skipped sequence update",pe),e.send((0,Ze.encode)([EV,pe])))},TV).unref()),new Promise(setImmediate)}o(av,"skipAuditRecord");let LA=ui.typedStructs,MA=ui.structures;if((LA?.length!=Mt.typed_length||MA?.length!=Mt.structure_length)&&(Mt.typed_length=LA?.length,Mt.structure_length=MA.length,ae.debug?.(s,"send table struct",Mt.typed_length,Mt.structure_length),Mt.sentName||(Mt.sentName=!0),e.send((0,Ze.encode)([UO,{typedStructs:LA,structures:MA,attributes:Ps.attributes,schemaDefined:Ps.schemaDefined},ur,Mt.table.tableName]))),tl&&!aE[tl]&&(e.send((0,Ze.encode)([pV,DA,tl])),aE[tl]=!0),dE)Hu(dE.length),Zc(dE);else{let di=Se.encoded;Se.extendedType&Wr&&Vm(()=>Se.getValue(vt),Sm=>xa(Sm,Se.recordId),vt.rootStore);let gm=di[0]===66?8:0;Hu(di.length-gm),Zc(di,gm),ae.trace?.("wrote record",Se.recordId,"length:",di.length)}return e._socket.writableNeedDrain?new Promise(di=>{ae.debug?.(`Waiting for remote node ${g} to allow more commits ${e._socket.writableNeedDrain?"due to network backlog":"due to requested flow directive"}`),e._socket.once("drain",di)}):xe>hm?new Promise(di=>{yr=di}):new Promise(setImmediate)},"sendAuditRecord"),tt=o(()=>{c-i>8?(e.send(a.subarray(i,c)),ae.debug?.(s,"Sent message, size:",c-i),ot(c-i,"bytes-sent",`${g}.${u}`,"replication","egress")):ae.debug?.(s,"skipping empty transaction")},"sendQueuedData");Mr=new GO.EventEmitter,Mr.once("close",()=>{fe=!0,B?.end()});for(let{startTime:Se}of Ar)Se<pe&&(pe=Se);(de||Promise.resolve()).then(async()=>{p=await p,f=p.auditStore,Ee=p.tableById.map(Z),Te=[];for(let{name:rt,startTime:nt,endTime:ur}of Ar){let Mt=eT(rt,f);ae.debug?.("subscription to",rt,"using local id",Mt,"starting",nt),Te[Mt]={startTime:nt,endTime:ur}}Fa(u),Zt||(Zt=$l(rt=>{rt.databaseName===u&&Fa(u)}),dm=Qh(rt=>{rt===u&&(e.send((0,Ze.encode)([tf])),Cs())}),e.on("close",()=>{Zt?.remove(),dm?.remove()})),e.send((0,Ze.encode)([hV,fp(p.auditStore),Ar.map(({name:rt})=>rt)]));let Se=!0;do{isFinite(pe)||(ae.warn?.("Invalid sequence id "+pe),Cs(1008,"Invalid sequence id"+pe));let rt;if(Se&&!fe&&(Se=!1,pe===0)){ae.info?.("Replicating all tables to",g);let nt=pe,ur=_T(f);for(let Mt in E){if(!Z(Mt))continue;let Ps=E[Mt];for(let vt of Ps.primaryStore.getRange({snapshot:!1,versions:!0})){if(fe)return;if(vt.localTime>=pe){ae.trace?.(s,"Copying record from",u,Mt,vt.key,vt.localTime),nt=Math.max(vt.localTime,nt),rt=!0,kt()[Tp]=1;let ui=ml(vt.version,Ps.tableId,vt.key,null,ur,null,"put",Vm(()=>Ps.primaryStore.encoder.encode(vt.value),ku=>xa(ku,vt.key)),vt.metadataFlags&-256,vt.residencyId,null,vt.expiresAt);await et({recordId:vt.key,tableId:Ps.tableId,type:"put",getValue(){return vt.value},encoded:ui,version:vt.version,residencyId:vt.residencyId,nodeId:ur,extendedType:vt.metadataFlags},vt.localTime)}}}rt&&et({type:"end_txn"},pe),kt()[Tp]=0,pe=nt}for(let{key:nt,value:ur}of f.getRange({start:pe||1,exclusiveStart:!0,snapshot:!1})){if(fe)return;let Mt=bt(ur);ae.debug?.("sending audit record",new Date(nt)),kt()[Tp]=nt,pe=nt,await et(Mt,nt),Mr.startTime=nt,rt=!0}rt&&et({type:"end_txn"},pe),kt()[Tp]=0,await Hx(f)}while(!fe)}).catch(Se=>{ae.error?.(s,"Error handling subscription to node",Se),Cs(1008,"Error handling subscription to node")});break}}return}S.position=8;let A=!0,b,I;do{kt();let P=S.readInt();if(P===9&&S.getUint8(S.position)==rg){S.position++,R=I=S.readFloat64(),m[HO]=R,m[kO]=Date.now(),m[qO]=LV,ae.trace?.("received remote sequence update",R,u);break}let O=S.position,L=bt(_,O,O+P),H=Qc[L.tableId];H||ae.error?.(`No table found with an id of ${L.tableId}`);let D;L.residencyId&&(D=cE[L.residencyId],ae.trace?.(s,"received residency list",D,L.type,L.recordId));try{let x=L.recordId;KE(()=>{b={table:H.name,id:L.recordId,type:L.type,nodeId:_m.get(L.nodeId),residencyList:D,timestamp:L.version,value:L.getValue(H),user:L.user,beginTxn:A,expiresAt:L.expiresAt}},f?.rootStore,z=>Xc(z,x))}catch(x){throw x.message+="typed structures for current decoder"+JSON.stringify(H.decoder.typedStructs),x}A=!1,ae.trace?.(s,"received replication message",L.type,"id",b.id,"version",new Date(L.version),"nodeId",b.nodeId),m[HO]=L.version,m[kO]=Date.now(),m[qO]=MV,p.send(b),S.position=O+P}while(S.position<_.byteLength);Pe++,ot(_.byteLength,"bytes-received",`${g}.${u}.${b?.table||"unknown_table"}`,"replication","ingest"),Pe>CA&&!pm&&(pm=!0,e.pause(),ae.debug?.(`Commit backlog causing replication back-pressure, requesting that ${g} pause replication`)),p.send({type:"end_txn",localTime:R,remoteNodeIds:T,async onCommit(){if(b){let P=Date.now()-b.timestamp;ot(P,"replication-latency",g+"."+u+"."+b.table,b.type,"ingest")}Pe--,pm&&(pm=!1,e.resume(),ae.debug?.(`Replication resuming ${g}`)),Ue.length>0&&await Promise.all(Ue),ae.trace?.("All blobs finished"),!N&&I&&(ae.trace?.(s,"queuing confirmation of a commit at",I),setTimeout(()=>{e.send((0,Ze.encode)([gV,N])),ae.trace?.(s,"sent confirmation of a commit at",N),N=null},hde)),N=I,ae.debug?.("last sequence committed",new Date(I),u)}})}catch(S){ae.error?.(s,"Error handling incoming replication message",S)}}),e.on("ping",Xt),e.on("pong",()=>{if(t.connection){let _=performance.now()-te;t.connection.latency=_,kt()&&(m[hT]=_),t.isSubscriptionConnection&&Jl({name:g,database:u,url:t.url,latency:_})}te=null}),e.on("close",(_,S)=>{clearInterval(C),clearTimeout(k),clearInterval(Y),Mr&&Mr.emit("close"),Po&&Po.end();for(let[A,{reject:b}]of y)b(new Error(`Connection closed ${S?.toString()} ${_}`));ae.debug?.(s,"closed",_,S?.toString())});function Cs(_,S){try{e.isFinished=!0,ae.debug?.(s,"closing",g,u,_,S),e.close(_,S),t.connection?.emit("finished")}catch(A){ae.error?.(s,"Error closing connection",A)}}o(Cs,"close");let Ua=new Set;async function xa(_,S){let A=$E(_);if(Ua.has(A)){ae.debug?.("Blob already being sent",A);return}Ua.add(A);try{let b;xe++;for await(let I of _.stream())b&&(ae.debug?.("Sending blob chunk",A,"length",b.length),e.send((0,Ze.encode)([uT,{fileId:A,size:_.size},b]))),b=I,e._socket.writableNeedDrain&&(ae.debug?.("draining",A),await new Promise(P=>e._socket.once("drain",P)),ae.debug?.("drained",A)),ot(I.length,"bytes-sent",`${g}.${u}`,"replication","blob");ae.debug?.("Sending final blob chunk",A,"length",b.length),e.send((0,Ze.encode)([uT,{fileId:A,size:_.size,finished:!0},b]))}catch(b){ae.warn?.("Error sending blob",b,"blob id",A,"for record",S),e.send((0,Ze.encode)([uT,{fileId:A,finished:!0,error:(0,rf.errorToString)(b)},Buffer.alloc(0)]))}finally{Ua.delete(A),xe--,xe<hm&&yr?.()}}o(xa,"sendBlobs");function Xc(_,S){let A=$E(_),b=Ne.get(A);ae.debug?.("Received transaction with blob",A,"has stream",!!b,"ended",!!b?.writableEnded),b?b.writableEnded&&Ne.delete(A):(b=new BO.PassThrough,Ne.set(A,b)),b.connectedToBlob=!0,b.lastChunk=Date.now(),b.recordId=S,_.size===void 0&&b.expectedSize&&(_.size=b.expectedSize);let I=b.blob??createBlob(b,_);b.blob=I;let P=Fo(()=>$m(I).saving,p.auditStore?.rootStore);return P&&(P.blobId=A,Ue.push(P),P.finally(()=>{ae.debug?.(`Finished receiving blob stream ${A}`),Ue.splice(Ue.indexOf(P),1)})),I}o(Xc,"receiveBlobs");function vr(){if(h||(h=!0,t.connection?.on("subscriptions-updated",vr)),!f&&p&&(f=p.auditStore),t.connection?.isFinished)throw new Error("Can not make a subscription request on a connection that is already closed");let _=new Map;f||(f=p?.auditStore);try{for(let b of p?.dbisDB?.getRange({start:Symbol.for("seq"),end:[Symbol.for("seq"),Buffer.from([255])]})||[])for(let I of b.value.nodes||[])I.lastTxnTime>(_.get(I.id)??0)&&_.set(I.id,I.lastTxnTime)}catch(b){if(!b.message.includes("Can not re"))throw b}let S=t.connection?.nodeSubscriptions?.[0];T=[];let A=t.connection?.nodeSubscriptions.map((b,I)=>{let P=[],{replicateByDefault:O}=b;if(b.subscriptions){for(let x of b.subscriptions)if(x.subscribe&&(x.schema||x.database)===u){let z=x.table;E?.[z]?.replicate!==!1&&P.push(z)}O=!1}else for(let x in E)(O?E[x].replicate===!1:E[x].replicate)&&P.push(x);let L=f&&eT(b.name,f),H=p?.dbisDB?.get([Symbol.for("seq"),L])??1,D=Math.max(H?.seqId??1,(typeof b.startTime=="string"?new Date(b.startTime).getTime():b.startTime)??1);if(ae.debug?.("Starting time recorded in db",b.name,L,u,H?.seqId,"start time:",D,new Date(D)),S!==b){let x=f&&eT(S.name,f),z=p?.dbisDB?.get([Symbol.for("seq"),x])??1;for(let ne of z?.nodes||[])ne.name===b.name&&(D=ne.seqId,ae.debug?.("Using sequence id from proxy node",S.name,D))}if(L===void 0?ae.warn("Starting subscription request from node",b,"but no node id found"):T.push(L),_.get(L)>D&&(D=_.get(L),ae.debug?.("Updating start time from more recent txn recorded",S.name,D)),D===1&&dT)try{new URL(dT).hostname===b.name?(ae.warn?.(`Requesting full copy of database ${u} from ${dT}`),D=0):D=Date.now()-6e4}catch(x){ae.error?.("Error parsing leader URL",dT,x)}return ae.trace?.(s,"defining subscription request",b.name,u,new Date(D)),{name:b.name,replicateByDefault:O,tables:P,startTime:D,endTime:b.endTime}});if(A)if(ae.debug?.(s,"sending subscription request",A,p?.dbisDB?.path),clearTimeout(W),A.length>0)e.send((0,Ze.encode)([fV,A]));else{let b=o(()=>{let I=performance.now();W=setTimeout(()=>{ce<=I?Cs(1008,"Connection has no subscriptions and is no longer used"):b()},$).unref()},"scheduleClose");b()}}o(vr,"sendSubscriptionRequestUpdate");function Bu(_,S){if(!_)return;let A=mm[_];return A||(A=S.getResidencyRecord(_),mm[_]=A),A}o(Bu,"getResidence");function Fu(_){return!(gc&&gc!="*"&&!gc[_]&&!gc.includes?.(_)&&!gc.some?.(S=>S.name===_))}o(Fu,"checkDatabaseAccess");function Ba(_){if(p=p||d.get(_),!Fu(_))throw new Error(`Access to database "${_}" is not permitted`);p||ae.warn?.(`No database named "${_}" was declared and registered`),f=p?.auditStore,E||(E=it()?.[_]);let S=Xe();if(S===g)throw S?new Error("Should not connect to self",S):new Error("Node name not defined");return uE(S,_),!0}o(Ba,"setDatabase");function uE(_,S){let A=it()?.[S],b=[];for(let I in A){let P=A[I];b.push({table:I,schemaDefined:P.schemaDefined,attributes:P.attributes.map(O=>({name:O.name,type:O.type,isPrimaryKey:O.isPrimaryKey}))})}ae.trace?.("Sending database info for node",_,"database name",S),e.send((0,Ze.encode)([mV,_,S,b]))}o(uE,"sendNodeDBName");function Fa(_){let S=it()?.[_],A=[];for(let b in S){if(Ar&&!Ar.some(P=>P.replicateByDefault?!P.tables.includes(b):P.tables.includes(b)))continue;let I=S[b];A.push({table:b,schemaDefined:I.schemaDefined,attributes:I.attributes.map(P=>({name:P.name,type:P.type,isPrimaryKey:P.isPrimaryKey}))})}e.send((0,Ze.encode)([SV,A,_]))}o(Fa,"sendDBSchema"),Y=setInterval(()=>{for(let[_,S]of Ne)S.lastChunk+he<Date.now()&&(ae.warn?.(`Timeout waiting for blob stream to finish ${_} for record ${S.recordId??"unknown"} from ${g}`),Ne.delete(_),S.end())},he).unref();let Ha=1,Em=[];return{end(){Po&&Po.end(),Mr&&Mr.emit("close")},getRecord(_){let S=Ha++;return new Promise((A,b)=>{let I=[_V,S,_.table.tableId,_.id];Em[_.table.tableId]||(I.push(_.table.tableName),Em[_.table.tableId]=!0),e.send((0,Ze.encode)(I)),ce=performance.now(),y.set(S,{tableId:_.table.tableId,key:_.id,resolve(P){let{table:O,entry:L}=_;if(A(P),P)return O._recordRelocate(L,P)},reject:b})})},sendOperation(_){let S=Ha++;return _.requestId=S,e.send((0,Ze.encode)([FO,_])),new Promise((A,b)=>{y.set(S,{resolve:A,reject:b})})}};function Hu(_){ka(5),_<128?a[c++]=_:_<16384?(l.setUint16(c,_|32768),c+=2):_<1056964608?(l.setUint32(c,_|3221225472),c+=4):(a[c]=255,l.setUint32(c+1,_),c+=5)}function Zc(_,S=0,A=_.length){let b=A-S;ka(b),_.copy(a,c,S,A),c+=b}function el(_){ka(8),l.setFloat64(c,_),c+=8}function ka(_){if(_+16>a.length-c){let S=Buffer.allocUnsafeSlow(c+_-i+65536>>10<<11);a.copy(S,0,i,c),c=c-i,i=0,a=S,l=new DataView(a.buffer,0,a.length)}}function V(_,S){let A=_.database??"data";if(A!=="data"&&!ke[A]){ae.warn?.("Database not found",_.database);return}S||(S={});let b=S.schemaDefined,I=!1,P=_.schemaDefined,O=S.attributes||[];for(let L=0;L<_.attributes?.length;L++){let H=_.attributes[L],D=O.find(x=>x.name===H.name);(!D||D.type!==H.type)&&(b?ae.error?.(`Schema for '${u}.${_.table}' is defined locally, but attribute '${H.name}: ${H.type}' from '${g}' does not match local attribute ${D?"'"+D.name+": "+D.type+"'":"which does not exist"}`):(I=!0,P||(H.indexed=!0),D?O[O.indexOf(D)]=H:O.push(H)))}return I?(ae.debug?.("(Re)creating",_),Je({table:_.table,database:_.database,schemaDefined:_.schemaDefined,attributes:O,...S})):S}}var AV,Ze,bV,IV,rf,GO,NV,wV,Zl,OV,BO,CV,PV,ae,fV,mV,hV,tf,pV,UO,_V,cT,FO,lT,EV,gV,SV,uT,DV,HO,kO,Tp,hT,qO,LV,MV,mde,dT,$O,Sc,fT,TV,hde,RV,xO,mT,yV,nf,VO=ue(()=>{De();Ki();gO();Jb();Vn();AV=w(oe());F();hl();Ze=require("msgpackr"),bV=require("ws"),IV=require("worker_threads"),rf=w(j());Ep();GO=require("events"),NV=w(_n()),wV=w(require("node:tls"));jl();Zl=w(require("node:process")),OV=require("node:net");ao();ts();BO=require("node:stream"),CV=require("lmdb"),PV=w(require("minimist")),ae=(0,rf.forComponent)("replication").conditional,fV=129,mV=140,hV=141,tf=142,pV=130,UO=132,_V=133,cT=134,FO=136,lT=137,EV=143,gV=144,SV=145,uT=146,DV=0,HO=1,kO=2,Tp=3,hT=4,qO=5,LV=0,MV=1,mde=(0,PV.default)(Zl.argv),dT=mde.HDB_LEADER_URL??Zl.env.HDB_LEADER_URL,$O=new Map,Sc=new Map,fT=!0,TV=300,hde=2,RV=3e4;o(pT,"createWebSocket");yV=500,nf=class extends GO.EventEmitter{static{o(this,"NodeReplicationConnection")}socket;startTime;retryTime=yV;retries=0;isConnected=!0;isFinished=!1;nodeSubscriptions;latency=0;replicateTablesByDefault;session;sessionResolve;sessionReject;url;subscription;databaseName;nodeName;authorization;constructor(t,r,n,s,i){super(),this.url=t,this.subscription=r,this.databaseName=n,this.authorization=i,this.nodeName=this.nodeName??Oi(t)}async connect(){this.session||this.resetSession();let t=[];this.socket=await pT(this.url,{serverName:this.nodeName,authorization:this.authorization});let r;ae.debug?.(`Connecting to ${this.url}, db: ${this.databaseName}, process ${Zl.pid}`),this.socket.on("open",()=>{this.socket._socket.unref(),ae[this.isConnected?"info":"warn"]?.(`Connected to ${this.url}, db: ${this.databaseName}`),this.retries=0,this.retryTime=yV,this.nodeSubscriptions&&Jl({name:this.nodeName,database:this.databaseName,url:this.url}),this.isConnected=!0,r=Rp(this.socket,{database:this.databaseName,subscription:this.subscription,url:this.url,connection:this,isSubscriptionConnection:this.nodeSubscriptions!==void 0},{replicates:!0}),this.sessionResolve(r)}),this.socket.on("error",n=>{n.code==="SELF_SIGNED_CERT_IN_CHAIN"?(ae.warn?.(`Can not connect to ${this.url}, this server does not have a certificate authority for the certificate provided by ${this.url}`),n.isHandled=!0):n.code!=="ECONNREFUSED"&&(n.code==="UNABLE_TO_VERIFY_LEAF_SIGNATURE"?ae.error?.(`Can not connect to ${this.url}, the certificate provided by ${this.url} is not trusted, this node needs to be added to the cluster, or a certificate authority needs to be added`):ae.error?.(`Error in connection to ${this.url} due to ${n.message}`)),this.sessionReject(n)}),this.socket.on("close",(n,s)=>{if(this.isConnected&&(this.nodeSubscriptions&&Xd({name:this.nodeName,database:this.databaseName,url:this.url,finished:this.socket.isFinished}),this.isConnected=!1),this.removeAllListeners("subscriptions-updated"),this.socket.isFinished){this.isFinished=!0,r?.end(),this.emit("finished");return}if(++this.retries%20===1){let i=s?.toString();ae.warn?.(`${r?"Disconnected from":"Failed to connect to"} ${this.url} (db: "${this.databaseName}"), due to ${i?'"'+i+'" ':""}(code: ${n})`)}r=null,this.resetSession(),setTimeout(()=>{this.connect()},this.retryTime).unref(),this.retryTime+=this.retryTime>>8})}resetSession(){this.session=new Promise((t,r)=>{this.sessionResolve=t,this.sessionReject=r})}subscribe(t,r){this.nodeSubscriptions=t,this.replicateTablesByDefault=r,this.emit("subscriptions-updated",t)}unsubscribe(){this.socket.isFinished=!0,this.socket.close(1008,"No longer subscribed")}getRecord(t){return this.session.then(r=>r.getRecord(t))}};o(Rp,"replicateOverWS")});var po={};Oe(po,{clearThisNodeName:()=>Ade,disableReplication:()=>gde,enabledDatabases:()=>gc,forEachReplicatedDatabase:()=>fc,getThisNodeId:()=>_T,getThisNodeName:()=>Xe,getThisNodeUrl:()=>mc,hostnameToUrl:()=>TT,lastTimeInAuditStore:()=>mp,monitorNodeCAs:()=>$V,replicateOperation:()=>Ide,replicationCertificateAuthorities:()=>Zo,sendOperationToNode:()=>yp,servers:()=>_de,setReplicator:()=>KV,start:()=>Ede,startOnMainThread:()=>yO,subscribeToNode:()=>_p,unsubscribeFromNode:()=>nT,urlToNodeName:()=>Oi});function Ede(e){if(!e.port&&!e.securePort&&(e.port=$s.default.get(U.OPERATIONSAPI_NETWORK_PORT),e.securePort=$s.default.get(U.OPERATIONSAPI_NETWORK_SECUREPORT)),!Xe())throw new Error("Can not load replication without a url (see replication.url in the config)");let t=new Map;for(let s of pp(e))t.set(Oi(s.url),s);Sde(e),e={mtls:!0,isOperationsServer:!0,maxPayload:10*1024*1024*1024,...e};let r=Le.ws(async(s,i,a,c)=>{if(Ot.debug("Incoming WS connection received "+i.url),i.headers.get("sec-websocket-protocol")!=="harperdb-replication-v1")return c(s,i,a);await a,s._socket.unref(),Rp(s,e,i?.user),s.on("error",l=>{l.code!=="ECONNREFUSED"&&Ot.error("Error in connection to "+this.url,l.message)})},e);e.runFirst=!0,Le.http((s,i)=>{if(s.isWebSocket&&s.headers.get("Sec-WebSocket-Protocol")==="harperdb-replication-v1"){Ot.debug("Incoming replication WS connection received, authorized: "+s.authorized),!s.authorized&&s._nodeRequest.socket.authorizationError&&Ot.error(`Incoming client connection from ${s.ip} did not have valid certificate, you may need turn on enableRootCAs in the config if you are using a publicly signed certificate, or add the CA to the server's trusted CAs`,s._nodeRequest.socket.authorizationError);let a=Kt().primaryStore;if(s.authorized&&s.peerCertificate.subjectaltname){let c=(0,qV.getHostnamesFromCertificate)(s.peerCertificate),l;for(let u of c)if(l=u&&(a.get(u)||t.get(u)),l)break;if(l)if(l?.revoked_certificates?.includes(s.peerCertificate.serialNumber)){Ot.warn("Revoked certificate used in attempt to connect to node",l.name,"certificate serial number",s.peerCertificate.serialNumber);return}else s.user=l;else Ot.warn(`No node found for certificate common name/SANs: ${c}, available nodes are ${Array.from(a.getRange({}).filter(({value:u})=>u).map(({key:u})=>u)).join(", ")} and routes ${Array.from(t.keys()).join(", ")}, connection will require credentials.`)}else{let c=a.get(s.ip)||t.get(s.ip);c?s.user=c:Ot.warn(`No node found for IP address ${s.ip}, available nodes are ${Array.from(new Set([...a.getKeys(),...t.keys()])).join(", ")}, connection will require credentials.`)}}return i(s)},e);let n=[];for(let s of r)if(s.secureContexts){let i=o(()=>{let a=new Set(s.secureContexts.values());s.defaultContext&&a.add(s.defaultContext);for(let c of a)try{let l=Array.from(Zo);c.options.availableCAs&&l.push(...c.options.availableCAs.values());let u={...c.options,ca:l};c.updatedContext=ST.createSecureContext(u)}catch(l){Ot.error("Error creating replication TLS config",l)}},"updateContexts");s.secureContextsListeners.push(i),n.push(i),$s.default.get(U.REPLICATION_ENABLEROOTCAS)!==!1&&i()}$V(()=>{for(let s of n)s()})}function $V(e){let t=0;Jd(r=>{r?.ca&&(Zo.add(r.ca),Zo.size!==t&&(t=Zo.size,e?.()))})}function gde(e=!0){GV=e}function Sde(e){GV||(it(),gc=e.databases,fc(e,(t,r)=>{if(!t){let n=e.databaseSubscriptions||Sc;for(let[s,i]of gT){let a=i.get(r);a&&(a.subscribe([],!1),i.delete(r))}n.delete(r);return}for(let n in t){let s=t[n];KV(r,s,e),$O.get(s)?.forEach(i=>i(s))}}))}function KV(e,t,r){if(!t)return console.error(`Attempt to replicate non-existent table ${t.name} from database ${e}`);if(t.replicate===!1||t.sources?.some(s=>s.isReplicator))return;let n;t.sourcedFrom(class VV extends Br{static{o(this,"Replicator")}static connection;static subscription;static async subscribe(){let i=r.databaseSubscriptions||Sc,a=i.get(e),c=a?.tableById||[];c[t.tableId]=t;let l=a?.ready;if(Ot.trace("Setting up replicator subscription to database",e),!a?.auditStore)return this.subscription=a=new es,i.set(e,a),a.tableById=c,a.auditStore=t.auditStore,a.dbisDB=t.dbisDB,a.databaseName=e,l&&l(a),a;this.subscription=a}static subscribeOnThisThread(i,a){return!0}static async load(i){if(i){let a=i.residencyId,c=i.residency||t.dbisDB.get([Symbol.for("residency_by_id"),a]);if(c){let l,u=new Set;do{let d,f="",m=1/0;for(let p of c){if(u.has(p)||p===Le.hostname)continue;let E=Rde(p,VV.subscription,e);if(E?.isConnected){let g=jd(t.auditStore,e,p)[hT];(!d||g<m)&&(d=E,f=p,m=g)}}if(!d)throw l||new HV.ServerError(`No connection to any other nodes are available: ${c}`,502);let h={requestId:pde++,table:t,entry:i,id:i.key};u.add(f);try{return await d.getRecord(h)}catch(p){if(d.isConnected)throw p;Ot.warn("Error in load from node",eu,p),l||(l=p)}}while(!0)}}}static isReplicator=!0},{intermediateSource:!0})}function Tde(e,t,r,n,s){let i=gT.get(e);i||gT.set(e,i=new Map);let a=i.get(r);if(a)return a;if(t)return i.set(r,a=new nf(e,t,r,n,s)),a.connect(),a.once("finished",()=>i.delete(r)),a}function Rde(e,t,r){let n=UV.get(eu);n||(n=new Map,UV.set(eu,n));let s=n.get(r);if(s)return s;let i=Kt().primaryStore.get(e);return i?.url&&(s=new nf(i.url,t,r,eu,i.authorization),n.set(r,s),s.connect(),s.once("finished",()=>n.delete(r))),s}async function yp(e,t,r){r||(r={}),r.serverName=e.name;let n=await pT(e.url,r),s=Rp(n,{},{});return new Promise((i,a)=>{n.on("open",()=>{Ot.debug("Sending operation connection to "+e.url+" opened",t),i(s.sendOperation(t))}),n.on("error",c=>{a(c)}),n.on("close",c=>{Ot.info("Sending operation connection to "+e.url+" closed",c)})}).finally(()=>{n.close()})}function _p(e){try{kV.isMainThread&&Ot.trace("Subscribing on main thread (should not happen in multi-threaded instance)",e.nodes[0].url,e.database);let t=Sc.get(e.database);if(!t){let n;t=new Promise(s=>{Ot.info("Waiting for subscription to database "+e.database),n=s}),t.ready=n,Sc.set(e.database,t)}let r=Tde(e.nodes[0].url,t,e.database,e.nodes[0].name,e.nodes[0].authorization);e.nodes[0].name===void 0?r.tentativeNode=e.nodes[0]:r.nodeName=e.nodes[0].name,r.subscribe(e.nodes.filter(n=>hp(n,e.database)),e.replicateByDefault)}catch(t){Ot.error("Error in subscription to node",e.nodes[0]?.url,t)}}async function nT({name:e,url:t,database:r}){Ot.trace("Unsubscribing from node",e,t,r,"nodes",Array.from(Kt().primaryStore.getRange({})));let n=gT.get(t);if(n){let s=n.get(r);s&&(s.unsubscribe(),n.delete(r))}}function yde(){if(KO!==void 0)return KO;let e=$s.default.get(U.OPERATIONSAPI_TLS_CERTIFICATE)||$s.default.get(U.TLS_CERTIFICATE);if(e)return KO=new BV.X509Certificate((0,FV.readFileSync)(e)).subject?.match(/CN=(.*)/)?.[1]??null}function Xe(){return eu||(eu=$s.default.get("replication_hostname")??Oi($s.default.get("replication_url"))??yde()??xV("operationsapi_network_secureport")??xV("operationsapi_network_port")??"127.0.0.1")}function Ade(){eu=void 0}function xV(e){let t=$s.default.get(e),r=t?.lastIndexOf?.(":");if(r>0)return t.slice(0,r)}function ET(e){let t=$s.default.get(e),r=t?.lastIndexOf?.(":");return r>0?+t.slice(r+1).replace(/[\[\]]/g,""):+t}function _T(e){return fp(e)?.[Xe()]}function mc(){let e=$s.default.get("replication_url");return e||TT(Xe())}function TT(e){let t=ET("replication_port");if(t)return`ws://${e}:${t}`;if(t=ET("replication_secureport"),t)return`wss://${e}:${t}`;if(t=ET("operationsapi_network_port"),t)return`ws://${e}:${t}`;if(t=ET("operationsapi_network_secureport"),t)return`wss://${e}:${t}`}function Oi(e){if(e)return new URL(e).hostname}function fc(e,t){for(let n of Object.getOwnPropertyNames(ke))r(n);return Qh(n=>{r(n)}),$l((n,s)=>{r(n.databaseName)});function r(n){let s=ke[n];Ot.trace("Checking replication status of ",n,e?.databases),e?.databases===void 0||e.databases==="*"||e.databases.includes(n)||e.databases.some?.(i=>i.name===n)||!s?t(s,n,!0):bde(n)&&t(s,n,!1)}o(r,"forDatabase")}function bde(e){let t=ke[e];for(let r in t)if(t[r].replicate)return!0}function mp(e){for(let t of e.getKeys({limit:1,reverse:!0}))return t}async function Ide(e){let t={message:""};if(e.replicated){e.replicated=!1,Ot.trace?.("Replicating operation",e.operation,"to nodes",Le.nodes.map(n=>n.name));let r=await Promise.allSettled(Le.nodes.map(n=>yp(n,e)));t.replicated=r.map((n,s)=>{let i=n.status==="rejected"?{status:"failed",reason:n.reason.toString()}:n.value;return i.node=Le.nodes[s]?.name,i})}return t}var $s,Ot,BV,FV,ST,HV,kV,qV,GV,pde,_de,Zo,gc,gT,UV,KO,eu,Vn=ue(()=>{De();Qa();Vu();VO();Ur();$s=w(oe()),Ot=w(j()),BV=require("crypto"),FV=require("fs");Ep();jl();F();gO();ST=w(require("node:tls")),HV=w(ge()),kV=require("worker_threads"),qV=w(_n()),pde=1,_de=[],Zo=$s.default.get(U.REPLICATION_ENABLEROOTCAS)!==!1?new Set(ST.rootCertificates):new Set;o(Ede,"start");o($V,"monitorNodeCAs");o(gde,"disableReplication");o(Sde,"assignReplicationSource");o(KV,"setReplicator");gT=new Map;o(Tde,"getSubscriptionConnection");UV=new Map;o(Rde,"getRetrievalConnectionByName");o(yp,"sendOperationToNode");o(_p,"subscribeToNode");o(nT,"unsubscribeFromNode");o(yde,"getCommonNameFromCert");o(Xe,"getThisNodeName");o(Ade,"clearThisNodeName");Object.defineProperty(Le,"hostname",{get(){return Xe()}});o(xV,"getHostFromListeningPort");o(ET,"getPortFromListeningPort");o(_T,"getThisNodeId");Le.replication={getThisNodeId:_T,exportIdMapping:fp};o(mc,"getThisNodeUrl");o(TT,"hostnameToUrl");o(Oi,"urlToNodeName");o(fc,"forEachReplicatedDatabase");o(bde,"hasExplicitlyReplicatedTable");o(mp,"lastTimeInAuditStore");o(Ide,"replicateOperation")});var bp=M((f0e,JV)=>{"use strict";var sf=i$(),{validateBySchema:Ap}=ft(),{commonValidators:of,schemaRegex:YO}=Zi(),_r=require("joi"),Nde=j(),wde=require("uuid").v4,AT=Vo(),af=(F(),v(K)),Ode=require("util"),Tc=as(),{handleHDBError:ea,hdbErrors:Cde,ClientError:tu}=ge(),{HDB_ERROR_MSGS:RT,HTTP_STATUS_CODES:ta}=Cde,{SchemaEventMsg:bT}=Si(),YV=nr(),{getDatabases:Pde}=(De(),v(ut)),{transformReq:cf}=se(),{replicateOperation:WV}=(Vn(),v(po)),{cleanupOrphans:Dde}=(ts(),v(YE)),yT=_r.string().min(1).max(of.schema_length.maximum).pattern(YO).messages({"string.pattern.base":"{:#label} "+of.schema_format.message}),Lde=_r.string().min(1).max(of.schema_length.maximum).pattern(YO).messages({"string.pattern.base":"{:#label} "+of.schema_format.message}).required(),Mde=_r.string().min(1).max(of.schema_length.maximum).pattern(YO).messages({"string.pattern.base":"{:#label} "+of.schema_format.message,"any.required":"'primary_key' is required","string.base":"'primary_key' must be a string"}).required();JV.exports={createSchema:vde,createSchemaStructure:zV,createTable:Ude,createTableStructure:jV,createAttribute:kde,dropSchema:xde,dropTable:Bde,dropAttribute:Fde,getBackup:qde,cleanupOrphanBlobs:Gde};async function vde(e){let t=await zV(e);return AT.signalSchemaChange(new bT(process.pid,e.operation,e.schema)),t}o(vde,"createSchema");async function zV(e){let t=Ap(e,_r.object({database:yT,schema:yT}));if(t)throw new tu(t.message);if(cf(e),!await sf.checkSchemaExists(e.schema))throw ea(new Error,RT.SCHEMA_EXISTS_ERR(e.schema),ta.BAD_REQUEST,af.LOG_LEVELS.ERROR,RT.SCHEMA_EXISTS_ERR(e.schema),!0);return await Tc.createSchema(e),`database '${e.schema}' successfully created`}o(zV,"createSchemaStructure");async function Ude(e){return cf(e),e.hash_attribute=e.primary_key??e.hash_attribute,await jV(e)}o(Ude,"createTable");async function jV(e){let t=Ap(e,_r.object({database:yT,schema:yT,table:Lde,residence:_r.array().items(_r.string().min(1)).optional(),hash_attribute:Mde}));if(t)throw new tu(t.message);if(!await sf.checkSchemaTableExists(e.schema,e.table))throw ea(new Error,RT.TABLE_EXISTS_ERR(e.schema,e.table),ta.BAD_REQUEST,af.LOG_LEVELS.ERROR,RT.TABLE_EXISTS_ERR(e.schema,e.table),!0);let n={name:e.table,schema:e.schema,id:wde(),hash_attribute:e.hash_attribute};try{if(e.residence)if(global.clustering_on)n.residence=e.residence,await Tc.createTable(n,e);else throw ea(new Error,"Clustering does not appear to be enabled. Cannot insert table with property 'residence'.",ta.BAD_REQUEST);else await Tc.createTable(n,e);return`table '${e.schema}.${e.table}' successfully created.`}catch(s){throw s}}o(jV,"createTableStructure");async function xde(e){let t=Ap(e,_r.object({database:_r.string(),schema:_r.string()}).or("database","schema").messages({"object.missing":"'database' is required"}));if(t)throw new tu(t.message);cf(e);let r=await sf.checkSchemaExists(e.schema);if(r)throw ea(new Error,r,ta.NOT_FOUND,af.LOG_LEVELS.ERROR,r,!0);let n=await sf.schemaDescribe.describeSchema({schema:e.schema}),s=Object.keys(global.hdb_schema[e.schema]);await Tc.dropSchema(e),AT.signalSchemaChange(new bT(process.pid,e.operation,e.schema)),await YV.purgeSchemaTableStreams(e.schema,s);let i=await WV(e);return i.message=`successfully deleted '${e.schema}'`,i}o(xde,"dropSchema");async function Bde(e){let t=Ap(e,_r.object({database:_r.string(),schema:_r.string(),table:_r.string().required()}));if(t)throw new tu(t.message);cf(e);let r=await sf.checkSchemaTableExists(e.schema,e.table);if(r)throw ea(new Error,r,ta.NOT_FOUND,af.LOG_LEVELS.ERROR,r,!0);await Tc.dropTable(e),await YV.purgeTableStream(e.schema,e.table);let n=await WV(e);return n.message=`successfully deleted table '${e.schema}.${e.table}'`,n}o(Bde,"dropTable");async function Fde(e){let t=Ap(e,_r.object({database:_r.string(),schema:_r.string(),table:_r.string().required(),attribute:_r.string().required()}));if(t)throw new tu(t.message);cf(e);let r=await sf.checkSchemaTableExists(e.schema,e.table);if(r)throw ea(new Error,r,ta.NOT_FOUND,af.LOG_LEVELS.ERROR,r,!0);if(e.attribute===global.hdb_schema[e.schema][e.table].hash_attribute)throw ea(new Error,"You cannot drop a hash attribute",ta.BAD_REQUEST,void 0,void 0,!0);if(af.TIME_STAMP_NAMES.indexOf(e.attribute)>=0)throw ea(new Error,`cannot drop internal timestamp attribute: ${e.attribute}`,ta.BAD_REQUEST,void 0,void 0,!0);try{return await Tc.dropAttribute(e),Hde(e),AT.signalSchemaChange(new bT(process.pid,e.operation,e.schema,e.table,e.attribute)),`successfully deleted attribute '${e.attribute}'`}catch(n){throw Nde.error(`Got an error deleting attribute ${Ode.inspect(e)}.`),n}}o(Fde,"dropAttribute");function Hde(e){let t=Object.values(global.hdb_schema[e.schema][e.table].attributes);for(let r=0;r<t.length;r++)t[r].attribute===e.attribute&&global.hdb_schema[e.schema][e.table].attributes.splice(r,1)}o(Hde,"dropAttributeFromGlobal");async function kde(e){cf(e);let t=Pde()[e.schema][e.table].attributes;for(let{name:r}of t)if(r===e.attribute)throw ea(new Error,`attribute '${e.attribute}' already exists in ${e.schema}.${e.table}`,ta.BAD_REQUEST,void 0,void 0,!0);return await Tc.createAttribute(e),AT.signalSchemaChange(new bT(process.pid,e.operation,e.schema,e.table,e.attribute)),`attribute '${e.schema}.${e.table}.${e.attribute}' successfully created.`}o(kde,"createAttribute");function qde(e){return Tc.getBackup(e)}o(qde,"getBackup");function Gde(e){if(!e.database)throw new tu('Must provide "database" name for search for orphaned blobs');if(!databases[e.database])throw new tu(`Unknown database '${e.database}'`);return Dde(databases[e.database]),{message:"Orphaned blobs cleanup started, check logs for progress"}}o(Gde,"cleanupOrphanBlobs")});var XV=M((h0e,QV)=>{"use strict";var{OPERATIONS_ENUM:$de}=(F(),v(K)),WO=class{static{o(this,"ReadAuditLogObject")}constructor(t,r,n=void 0,s=void 0){this.operation=$de.READ_AUDIT_LOG,this.schema=t,this.table=r,this.search_type=n,this.search_values=s}};QV.exports=WO});var zO=M((E0e,n1)=>{"use strict";var Vde=as(),_0e=XV(),IT=se(),NT=(F(),v(K)),Kde=oe(),{handleHDBError:ZV,hdbErrors:Yde}=ge(),{HDB_ERROR_MSGS:e1,HTTP_STATUS_CODES:t1}=Yde,Wde=Object.values(NT.READ_AUDIT_LOG_SEARCH_TYPES_ENUM),r1="To use this operation audit log must be enabled in harperdb-config.yaml";n1.exports=zde;async function zde(e){if(IT.isEmpty(e.schema))throw new Error(e1.SCHEMA_REQUIRED_ERR);if(IT.isEmpty(e.table))throw new Error(e1.TABLE_REQUIRED_ERR);if(!Kde.get(NT.CONFIG_PARAMS.LOGGING_AUDITLOG))throw ZV(new Error,r1,t1.BAD_REQUEST,NT.LOG_LEVELS.ERROR,r1,!0);let t=IT.checkSchemaTableExist(e.schema,e.table);if(t)throw ZV(new Error,t,t1.NOT_FOUND,NT.LOG_LEVELS.ERROR,t,!0);if(!IT.isEmpty(e.search_type)&&Wde.indexOf(e.search_type)<0)throw new Error(`Invalid searchType '${read_audit_log_object.search_type}'`);return await Vde.readAuditLog(e)}o(zde,"readAuditLog")});var i1=M((S0e,s1)=>{"use strict";var{OPERATIONS_ENUM:jde}=(F(),v(K)),jO=class{static{o(this,"GetBackupObject")}constructor(t,r,n=void 0,s=void 0){this.operation=jde.GET_BACKUP,this.schema=t,this.table=r}};s1.exports=jO});var c1=M((A0e,a1)=>{"use strict";var Jde=as(),R0e=i1(),JO=se(),Qde=(F(),v(K)),y0e=oe(),{handleHDBError:Xde,hdbErrors:Zde}=ge(),{HDB_ERROR_MSGS:o1,HTTP_STATUS_CODES:efe}=Zde;a1.exports=tfe;async function tfe(e){if(JO.isEmpty(e.schema))throw new Error(o1.SCHEMA_REQUIRED_ERR);if(JO.isEmpty(e.table))throw new Error(o1.TABLE_REQUIRED_ERR);let t=JO.checkSchemaTableExist(e.schema,e.table);if(t)throw Xde(new Error,t,efe.NOT_FOUND,Qde.LOG_LEVELS.ERROR,t,!0);return await Jde.getBackup(readAuditLogObject)}o(tfe,"getBackup")});var f1=M((I0e,d1)=>{"use strict";var rfe=oe(),Rc=require("joi"),nfe=ft(),l1=require("moment"),sfe=require("fs-extra"),QO=require("path"),ife=require("lodash"),Ip=(F(),v(K)),{LOG_LEVELS:ru}=(F(),v(K)),ofe="YYYY-MM-DD hh:mm:ss",afe=QO.resolve(__dirname,"../logs");d1.exports=function(e){return nfe.validateBySchema(e,cfe)};var cfe=Rc.object({from:Rc.custom(u1),until:Rc.custom(u1),level:Rc.valid(ru.NOTIFY,ru.FATAL,ru.ERROR,ru.WARN,ru.INFO,ru.DEBUG,ru.TRACE),order:Rc.valid("asc","desc"),limit:Rc.number().min(1),start:Rc.number().min(0),log_name:Rc.custom(lfe)});function u1(e,t){if(l1(e,l1.ISO_8601).format(ofe)==="Invalid date")return t.message(`'${t.state.path[0]}' date '${e}' is invalid.`)}o(u1,"validateDatetime");function lfe(e,t){if(ife.invert(Ip.LOG_NAMES)[e]===void 0)return t.message(`'log_name' '${e}' is invalid.`);let n=rfe.get(Ip.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e===void 0?Ip.LOG_NAMES.HDB:e,i=s===Ip.LOG_NAMES.INSTALL?QO.join(afe,Ip.LOG_NAMES.INSTALL):QO.join(n,s);return sfe.existsSync(i)?null:t.message(`'log_name' '${e}' does not exist.`)}o(lfe,"validateReadLogPath")});var ZO=M((w0e,h1)=>{"use strict";var wT=(F(),v(K)),ufe=j(),dfe=oe(),ffe=f1(),XO=require("path"),m1=require("fs-extra"),{once:mfe}=require("events"),{handleHDBError:hfe,hdbErrors:pfe}=ge(),{PACKAGE_ROOT:_fe}=ht(),{replicateOperation:Efe}=(Vn(),v(po)),gfe=XO.join(_fe,"logs"),Sfe=1e3,Tfe=200;h1.exports=Rfe;async function Rfe(e){let t=ffe(e);if(t)throw hfe(t,t.message,pfe.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0);let r=Efe(e),n=dfe.get(wT.HDB_SETTINGS_NAMES.LOG_PATH_KEY),s=e.log_name===void 0?wT.LOG_NAMES.HDB:e.log_name,i=s===wT.LOG_NAMES.INSTALL?XO.join(gfe,wT.LOG_NAMES.INSTALL):XO.join(n,s),a=e.level!==void 0,c=a?e.level:void 0,l=e.from!==void 0,u=l?new Date(e.from):void 0,d=e.until!==void 0,f=d?new Date(e.until):void 0,m=e.limit===void 0?Sfe:e.limit,h=e.order===void 0?void 0:e.order,p=e.start===void 0?0:e.start,E=p+m,g=0;h==="desc"&&!u&&!f&&(g=Math.max(m1.statSync(i).size-(E+5)*Tfe,0));let y=m1.createReadStream(i,{start:g});y.on("error",q=>{ufe.error(q)});let T=0,R=[],N="",C;y.on("data",q=>{let Y=/(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d\.]+Z) \[(.+?)]: /g;q=N+q;let $=0,W;for(;(W=Y.exec(q))&&!y.destroyed;){C&&(C.message=q.slice($,W.index),k(C));let[ce,le,ie]=W,he=ie.split("] ["),Ne=he[0],Ue=he[1];he.splice(0,2),C={timestamp:le,thread:Ne,level:Ue,tags:he,message:""},$=W.index+ce.length}N=q.slice($)}),y.on("end",q=>{y.destroyed||C&&(C.message=N.trim(),k(C))}),y.resume();function k(q){let Y,$,W;switch(!0){case(a&&l&&d):Y=new Date(q.timestamp),$=new Date(u),W=new Date(f),q.level===c&&Y>=$&&Y<=W&&T<p?T++:q.level===c&&Y>=$&&Y<=W&&(_o(q,h,R),T++,T===E&&y.destroy());break;case(a&&l):Y=new Date(q.timestamp),$=new Date(u),q.level===c&&Y>=$&&T<p?T++:q.level===c&&Y>=$&&(_o(q,h,R),T++,T===E&&y.destroy());break;case(a&&d):Y=new Date(q.timestamp),W=new Date(f),q.level===c&&Y<=W&&T<p?T++:q.level===c&&Y<=W&&(_o(q,h,R),T++,T===E&&y.destroy());break;case(l&&d):Y=new Date(q.timestamp),$=new Date(u),W=new Date(f),Y>=$&&Y<=W&&T<p?T++:Y>=$&&Y<=W&&(_o(q,h,R),T++,T===E&&y.destroy());break;case a:q.level===c&&T<p?T++:q.level===c&&(_o(q,h,R),T++,T===E&&y.destroy());break;case l:Y=new Date(q.timestamp),$=new Date(u),Y>=$&&T<p?T++:Y>=$&&T>=p&&(_o(q,h,R),T++,T===E&&y.destroy());break;case d:Y=new Date(q.timestamp),W=new Date(f),Y<=W&&T<p?T++:Y<=W&&T>=p&&(_o(q,h,R),T++,T===E&&y.destroy());break;default:T<p?T++:(_o(q,h,R),T++,T===E&&y.destroy())}}o(k,"onLogMessage"),await mfe(y,"close");let te=await r;if(te.replicated){for(let q of R)q.node=server.hostname;for(let q of te.replicated){let Y=q.node;if(q.status==="failed")_o({timestamp:new Date().toISOString(),level:"error",node:Y,message:`Error retrieving logs: ${q.reason}`},h,R);else for(let $ of q.results)$.node=Y,_o($,h,R)}}return R}o(Rfe,"readLog");function _o(e,t,r){t==="desc"?yfe(e,r):t==="asc"?Afe(e,r):r.push(e)}o(_o,"pushLineToResult");function yfe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)>r?n=i+1:s=i}t.splice(n,0,e)}o(yfe,"insertDescending");function Afe(e,t){let r=new Date(e.timestamp),n=0,s=t.length;for(;n<s;){let i=n+s>>>1;new Date(t[i].timestamp)<r?n=i+1:s=i}t.splice(n,0,e)}o(Afe,"insertAscending")});var OT=M((M0e,g1)=>{"use strict";var eC=require("joi"),{string:lf,boolean:p1,date:bfe}=eC.types(),Ife=ft(),{validateSchemaExists:C0e,validateTableExists:P0e,validateSchemaName:D0e}=Zi(),Nfe=(F(),v(K)),wfe=It(),_1=oe();_1.initSync();var L0e=lf.invalid(_1.get(Nfe.CONFIG_PARAMS.CLUSTERING_NODENAME)??"node_name").pattern(wfe.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),E1={operation:lf.valid("add_node","update_node","set_node_replication"),node_name:lf.optional(),subscriptions:eC.array().items({table:lf.optional(),schema:lf.optional(),database:lf.optional(),subscribe:p1.required(),publish:p1.required().custom(Cfe),start_time:bfe.iso()})};function Ofe(e){return Ife.validateBySchema(e,eC.object(E1))}o(Ofe,"addUpdateNodeValidator");function Cfe(e,t){if(t.state.ancestors[2].operation==="add_node"&&e===!1&&t.state.ancestors[0].subscribe===!1)return t.message(`'subscriptions[${t.state.path[1]}]' subscribe and/or publish must be set to true when adding a node`)}o(Cfe,"checkForFalsy");g1.exports={addUpdateNodeValidator:Ofe,validationSchema:E1}});var uf=M((U0e,S1)=>{"use strict";var tC=class{static{o(this,"Node")}constructor(t,r,n){this.name=t,this.subscriptions=r,this.system_info=n}},rC=class{static{o(this,"NodeSubscription")}constructor(t,r,n,s){this.schema=t,this.table=r,this.publish=n,this.subscribe=s}};S1.exports={Node:tC,NodeSubscription:rC}});var R1=M((B0e,T1)=>{"use strict";var Pfe=(F(),v(K)).OPERATIONS_ENUM,nC=class{static{o(this,"UpsertObject")}constructor(t,r,n,s=void 0){this.operation=Pfe.UPSERT,this.schema=t,this.table=r,this.records=n,this.__origin=s}};T1.exports=nC});var Np=M((H0e,y1)=>{"use strict";var sC=class{static{o(this,"RemotePayloadObject")}constructor(t,r,n,s){this.operation=t,this.node_name=r,this.subscriptions=n,this.system_info=s}},iC=class{static{o(this,"RemotePayloadSubscription")}constructor(t,r,n,s,i,a,c){this.schema=t,this.table=r,this.hash_attribute=n,this.publish=s,this.subscribe=i,this.start_time=a,c!==void 0&&(this.attributes=c)}};y1.exports={RemotePayloadObject:sC,RemotePayloadSubscription:iC}});var b1=M((q0e,A1)=>{"use strict";var oC=class{static{o(this,"TableSizeObject")}constructor(t,r,n=0,s=0,i=0,a=0){this.schema=t,this.table=r,this.table_size=n,this.record_count=s,this.transaction_log_size=i,this.transaction_log_record_count=a}};A1.exports=oC});var N1=M((W0e,I1)=>{"use strict";var Dfe=b1(),$0e=Gt(),V0e=St(),Lfe=j(),{getSchemaPath:K0e,getTransactionAuditStorePath:Y0e}=At(),{getDatabases:Mfe}=(De(),v(ut));I1.exports=vfe;async function vfe(e){let t=new Dfe;try{let r=Mfe()[e.schema]?.[e.name],n=r.primaryStore.getStats(),s=r.auditStore?.getStats();t.schema=e.schema,t.table=e.name,t.record_count=n.entryCount,t.transaction_log_record_count=s.entryCount}catch(r){Lfe.warn(`unable to stat table dbi due to ${r}`)}return t}o(vfe,"lmdbGetTableSize")});var O1=M((j0e,w1)=>{"use strict";var aC=class{static{o(this,"SystemInformationObject")}constructor(t,r,n,s,i,a,c){this.system=t,this.time=r,this.cpu=n,this.memory=s,this.disk=i,this.network=a,this.harperdb_processes=c}};w1.exports=aC});var ra=M((tBe,L1)=>{"use strict";var Ufe=require("fs-extra"),xfe=require("path"),En=require("systeminformation"),yc=j(),C1=nr(),Q0e=It(),df=(F(),v(K)),Bfe=N1(),Ffe=rc(),{getThreadInfo:P1}=st(),wp=oe();wp.initSync();var Hfe=O1(),{openEnvironment:X0e}=St(),{getSchemaPath:Z0e}=At(),{database:eBe,databases:cC}=(De(),v(ut)),CT;L1.exports={getHDBProcessInfo:fC,getNetworkInfo:hC,getDiskInfo:mC,getMemoryInfo:dC,getCPUInfo:uC,getTimeInfo:lC,getSystemInformation:pC,systemInformation:kfe,getTableSize:_C,getMetrics:EC};function lC(){return En.time()}o(lC,"getTimeInfo");async function uC(){try{let{family:e,model:t,stepping:r,revision:n,voltage:s,speedmin:i,speedmax:a,governor:c,socket:l,cache:u,...d}=await En.cpu();d.cpu_speed=await En.cpuCurrentSpeed();let{rawCurrentload:f,rawCurrentloadIdle:m,rawCurrentloadIrq:h,rawCurrentloadNice:p,rawCurrentloadSystem:E,rawCurrentloadUser:g,cpus:y,...T}=await En.currentLoad();return T.cpus=[],y.forEach(R=>{let{rawLoad:N,rawLoadIdle:C,rawLoadIrq:k,rawLoadNice:te,rawLoadSystem:q,rawLoadUser:Y,...$}=R;T.cpus.push($)}),d.current_load=T,d}catch(e){return yc.error(`error in getCPUInfo: ${e}`),{}}}o(uC,"getCPUInfo");async function dC(){try{let{buffers:e,cached:t,slab:r,buffcache:n,...s}=await En.mem();return Object.assign(s,process.memoryUsage())}catch(e){return yc.error(`error in getMemoryInfo: ${e}`),{}}}o(dC,"getMemoryInfo");async function fC(){let e={core:[],clustering:[]};try{let t=await En.processes(),r;try{r=Number.parseInt(await Ufe.readFile(xfe.join(wp.get(df.CONFIG_PARAMS.ROOTPATH),df.HDB_PID_FILE),"utf8"))}catch(n){if(n.code===df.NODE_ERROR_CODES.ENOENT)yc.warn("Unable to locate 'hdb.pid' file, try stopping and starting HarperDB. This could be because HarperDB is not running.");else throw n}t.list.forEach(n=>{n.pid===r?e.core.push(n):n.name==="nats-server"&&e.clustering.push(n)});for(let n of e.core)for(let s of t.list)s.pid===n.parentPid&&(s.name==="PM2"||s.command==="PM2")&&(n.parent="PM2");return e}catch(t){return yc.error(`error in getHDBProcessInfo: ${t}`),e}}o(fC,"getHDBProcessInfo");async function mC(){let e={};try{if(!wp.get(df.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_DISK))return e;let{rIO_sec:t,wIO_sec:r,tIO_sec:n,ms:s,...i}=await En.disksIO();e.io=i;let{rxSec:a,txSec:c,wxSec:l,...u}=await En.fsStats();return e.read_write=u,e.size=await En.fsSize(),e}catch(t){return yc.error(`error in getDiskInfo: ${t}`),e}}o(mC,"getDiskInfo");async function hC(){let e={default_interface:null,latency:{},interfaces:[],stats:[],connections:[]};try{return wp.get(df.CONFIG_PARAMS.OPERATIONSAPI_SYSINFO_NETWORK)&&(e.default_interface=await En.networkInterfaceDefault(),e.latency=await En.inetChecksite("google.com"),(await En.networkInterfaces()).forEach(n=>{let{internal:s,virtual:i,mtu:a,dhcp:c,dnsSuffix:l,ieee8021xAuth:u,ieee8021xState:d,carrierChanges:f,...m}=n;e.interfaces.push(m)}),(await En.networkStats()).forEach(n=>{let{rxSec:s,txSec:i,ms:a,...c}=n;e.stats.push(c)})),e}catch(t){return yc.error(`error in getNetworkInfo: ${t}`),e}}o(hC,"getNetworkInfo");async function pC(){if(CT!==void 0)return CT;let e={};try{let{codepage:t,logofile:r,serial:n,build:s,servicepack:i,uefi:a,...c}=await En.osInfo();e=c;let l=await En.versions("node, npm");return e.node_version=l.node,e.npm_version=l.npm,CT=e,CT}catch(t){return yc.error(`error in getSystemInformation: ${t}`),e}}o(pC,"getSystemInformation");async function _C(){let e=[],t=await Ffe.describeAll();for(let r of Object.values(t))for(let n of Object.values(r))e.push(await Bfe(n));return e}o(_C,"getTableSize");async function EC(){let e={};for(let t in cC){let r=e[t]={},n=r.tables={};for(let s in cC[t])try{let i=cC[t][s];if(!r.readers&&(Object.assign(r,i.primaryStore.rootStore.getStats()),delete r.root,r.readers=i.primaryStore.rootStore.readerList().split(/\n\s+/).slice(1).map(l=>{let[u,d,f]=l.trim().split(" ");return{pid:u,thread:d,txnid:f}}),i.auditStore)){let{treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:d,entryCount:f,overflowPages:m}=i.auditStore.getStats();r.audit={treeDepth:l,treeBranchPageCount:u,treeLeafPageCount:d,entryCount:f,overflowPages:m}}let a=i.primaryStore.getStats(),c={};for(let l of["treeDepth","treeBranchPageCount","treeLeafPageCount","entryCount","overflowPages"])c[l]=a[l];n[s]=c}catch(i){yc.notify(`Error getting stats for table ${s}: ${i}`)}}return e}o(EC,"getMetrics");async function D1(){if(wp.get(df.CONFIG_PARAMS.CLUSTERING_ENABLED)){let{jsm:e}=await C1.getNATSReferences(),t=await C1.listStreams(),r=[];for(let n of t){let s=[],i=await e.consumers.list(n.config.name);for await(let c of i)s.push({name:c.name,created:c.created,num_ack_pending:c.num_ack_pending,num_redelivered:c.num_redelivered,num_waiting:c.num_waiting,num_pending:c.num_pending});let a={stream_name:n.config.name,database:n.config.subjects[0].split(".")[1],table:n.config.subjects[0].split(".")[2],state:n.state,consumers:s};r.push(a)}return r}}o(D1,"getNatsStreamInfo");async function kfe(e){let t=new Hfe;if(!Array.isArray(e.attributes)||e.attributes.length===0)return t.system=await pC(),t.time=lC(),t.cpu=await uC(),t.memory=await dC(),t.disk=await mC(),t.network=await hC(),t.harperdb_processes=await fC(),t.table_size=await _C(),t.metrics=await EC(),t.threads=await P1(),t.replication=await D1(),t;for(let r=0;r<e.attributes.length;r++)switch(e.attributes[r]){case"system":t.system=await pC();break;case"time":t.time=lC();break;case"cpu":t.cpu=await uC();break;case"memory":t.memory=await dC();break;case"disk":t.disk=await mC();break;case"network":t.network=await hC();break;case"harperdb_processes":t.harperdb_processes=await fC();break;case"table_size":t.table_size=await _C();break;case"database_metrics":case"metrics":t.metrics=await EC();break;case"threads":t.threads=await P1();break;case"replication":t.replication=await D1();break;default:break}return t}o(kfe,"systemInformation")});var na=M((oBe,x1)=>{"use strict";var qfe=qn(),gC=se(),Gfe=require("util"),nu=(F(),v(K)),M1=oe();M1.initSync();var $fe=Qw(),v1=ln(),{Node:nBe,NodeSubscription:sBe}=uf(),Vfe=hd(),Kfe=R1(),{RemotePayloadObject:Yfe,RemotePayloadSubscription:Wfe}=Np(),{handleHDBError:zfe,hdbErrors:jfe}=ge(),{HTTP_STATUS_CODES:Jfe,HDB_ERROR_MSGS:Qfe}=jfe,Xfe=Ti(),Zfe=ra(),{packageJson:eme}=ht(),{getDatabases:tme}=(De(),v(ut)),iBe=Gfe.promisify($fe.authorize),rme=v1.searchByHash,nme=v1.searchByValue;x1.exports={isEmpty:sme,getNodeRecord:ime,upsertNodeRecord:ome,buildNodePayloads:ame,checkClusteringEnabled:cme,getAllNodeRecords:lme,getSystemInfo:ume,reverseSubscription:U1};function sme(e){return e==null}o(sme,"isEmpty");async function ime(e){let t=new Vfe(nu.SYSTEM_SCHEMA_NAME,nu.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e],["*"]);return rme(t)}o(ime,"getNodeRecord");async function ome(e){let t=new Kfe(nu.SYSTEM_SCHEMA_NAME,nu.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[e]);return qfe.upsert(t)}o(ome,"upsertNodeRecord");function U1(e){if(gC.isEmpty(e.subscribe)||gC.isEmpty(e.publish))throw new Error("Received invalid subscription object");let{schema:t,table:r,hash_attribute:n}=e,s={schema:t,table:r,hash_attribute:n};return e.subscribe===!0&&e.publish===!1?(s.subscribe=!1,s.publish=!0):e.subscribe===!1&&e.publish===!0?(s.subscribe=!0,s.publish=!1):(s.subscribe=e.subscribe,s.publish=e.publish),s}o(U1,"reverseSubscription");function ame(e,t,r,n){let s=[];for(let i=0,a=e.length;i<a;i++){let c=e[i],{schema:l,table:u}=c,d=gC.getTableHashAttribute(l,u),{subscribe:f,publish:m}=U1(c),h=tme()[l]?.[u],p=new Wfe(l,u,d,m,f,c.start_time,h.schemaDefined?h.attributes:void 0);s.push(p)}return new Yfe(r,t,s,n)}o(ame,"buildNodePayloads");function cme(){if(!M1.get(nu.CONFIG_PARAMS.CLUSTERING_ENABLED))throw zfe(new Error,Qfe.CLUSTERING_NOT_ENABLED,Jfe.BAD_REQUEST,void 0,void 0,!0)}o(cme,"checkClusteringEnabled");async function lme(){let e=new Xfe(nu.SYSTEM_SCHEMA_NAME,nu.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,"name","*",void 0,["*"]);return Array.from(await nme(e))}o(lme,"getAllNodeRecords");async function ume(){let e=await Zfe.getSystemInformation();return{hdb_version:eme.version,node_version:e.node_version,platform:e.platform}}o(ume,"getSystemInfo")});var SC=M((cBe,V1)=>{"use strict";var PT=nr(),B1=se(),F1=It(),H1=(F(),v(K)),DT=j(),k1=bp(),dme=gh(),{RemotePayloadObject:fme}=Np(),{handleHDBError:q1,hdbErrors:mme}=ge(),{HTTP_STATUS_CODES:G1}=mme,{NodeSubscription:$1}=uf();V1.exports=hme;async function hme(e,t){let r;try{r=await PT.request(`${t}.${F1.REQUEST_SUFFIX}`,new fme(H1.OPERATIONS_ENUM.DESCRIBE_ALL,t,void 0,void 0)),DT.trace("Response from remote describe all request:",r)}catch(a){DT.error(`addNode received error from describe all request to remote node: ${a}`);let c=PT.requestErrorHandler(a,"add_node",t);throw q1(new Error,c,G1.INTERNAL_SERVER_ERROR,"error",c)}if(r.status===F1.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let a=`Error returned from remote node ${t}: ${r.message}`;throw q1(new Error,a,G1.INTERNAL_SERVER_ERROR,"error",a)}let n=r.message,s=[],i=[];for(let a of e){let{table:c}=a,l=a.database??a.schema??"data";if(l===H1.SYSTEM_SCHEMA_NAME){await PT.createLocalTableStream(l,c);let p=new $1(l,c,a.publish,a.subscribe);p.start_time=a.start_time,i.push(p);continue}let u=B1.doesSchemaExist(l),d=n[l]!==void 0,f=c?B1.doesTableExist(l,c):!0,m=c?n?.[l]?.[c]!==void 0:!0;if(!u&&!d||!f&&!m){s.push(a);continue}if(!u&&d&&(DT.trace(`addNode creating schema: ${l}`),await k1.createSchema({operation:"create_schema",schema:l})),!f&&m){DT.trace(`addNode creating table: ${c} in schema: ${l} with attributes ${JSON.stringify(n[l][c].attributes)}`);let p=new dme(l,c,n[l][c].hash_attribute);n[l][c].attributes&&(p.attributes=n[l][c].attributes),await k1.createTable(p)}await PT.createLocalTableStream(l,c);let h=new $1(l,c,a.publish,a.subscribe);h.start_time=a.start_time,i.push(h)}return{added:i,skipped:s}}o(hme,"reviewSubscriptions")});var ff={};Oe(ff,{addNodeBack:()=>TC,removeNodeBack:()=>RC,setNode:()=>gme});async function gme(e){e.node_name&&!e.hostname&&(e.hostname=e.node_name),e.verify_tls!==void 0&&(e.rejectUnauthorized=e.verify_tls);let{url:t,hostname:r}=e;t?r||(r=e.hostname=Oi(t)):t=TT(r);let n=(0,Y1.validateBySchema)(e,Eme);if(n)throw(0,sa.handleHDBError)(n,n.message,_me.BAD_REQUEST,void 0,void 0,!0);if(e.operation==="remove_node"){if(!t&&!r)throw new sa.ClientError("url or hostname is required for remove_node operation");let h=r,p=Kt(),E=await p.get(h);if(!E)throw new sa.ClientError(h+" does not exist");try{await yp({url:E.url},{operation:G.REMOVE_NODE_BACK,name:E?.subscriptions?.length>0?Xe():h},void 0)}catch(g){hs.warn(`Error removing node from target node ${h}, if it is offline and we be online in the future, you may need to clean up this node manually, or retry:`,g)}return await p.delete(h),`Successfully removed '${h}' from cluster`}if(!t)throw new sa.ClientError("url required for this operation");let s=mc();if(s==null)throw new sa.ClientError("replication url is missing from harperdb-config.yaml");let i,a,c;if(t?.startsWith("wss:")){i=await(0,Vs.getReplicationCert)();let h=await(0,Vs.getReplicationCertAuth)();if(!i)throw new Error("Unable to find a certificate to use for replication");i.options.is_self_signed?(a=await(0,Vs.createCsr)(),hs.info("Sending CSR to target node:",t)):h&&(c=h.certificate,hs.info("Sending CA named",h.name,"to target node",t))}let l={operation:G.ADD_NODE_BACK,hostname:(0,bc.get)(U.REPLICATION_HOSTNAME),target_hostname:r,url:s,csr:a,cert_auth:c,authorization:e.retain_authorization?e.authorization:null};if((0,bc.get)(U.REPLICATION_SHARD)!==void 0&&(l.shard=(0,bc.get)(U.REPLICATION_SHARD)),e.subscriptions?l.subscriptions=e.subscriptions.map(K1):l.subscriptions=null,e.hasOwnProperty("subscribe")||e.hasOwnProperty("publish")){let h=K1(e);l.subscribe=h.subscribe,l.publish=h.publish}e?.authorization?.username&&e?.authorization?.password&&(e.authorization="Basic "+Buffer.from(e.authorization.username+":"+e.authorization.password).toString("base64"));let u,d;try{u=await yp({url:t},l,e)}catch(h){h.message=`Error returned from ${t}: `+h.message,hs.warn("Error adding node:",t,"to cluster:",h),d=h}if(a&&(!u?.certificate||!u?.certificate?.includes?.("BEGIN CERTIFICATE")))throw d?(d.message+=" and connection was required to sign certificate",d):new Error(`Unexpected certificate signature response from node ${t} response: ${JSON.stringify(u)}`);a&&(hs.info("CSR response received from node:",t,"saving certificate and CA in hdb_certificate"),await(0,Vs.setCertTable)({name:pme.certificateFromPem(u.signingCA).issuer.getField("CN").value,certificate:u.signingCA,is_authority:!0}),u.certificate&&await(0,Vs.setCertTable)({name:Xe(),uses:["https","operations","wss"],certificate:u.certificate,private_key_name:i?.options?.key_file,is_authority:!1,is_self_signed:!1}),c=u.signingCA);let f={url:t,ca:u?.usingCA};if(e.hostname&&(f.name=e.hostname),e.subscriptions?f.subscriptions=e.subscriptions:f.replicates=!0,e.start_time&&(f.start_time=typeof e.start_time=="string"?new Date(e.start_time).getTime():e.start_time),e.retain_authorization&&(f.authorization=e.authorization),e.revoked_certificates&&(f.revoked_certificates=e.revoked_certificates),u?.shard!==void 0?f.shard=u.shard:e.shard!==void 0&&(f.shard=e.shard),f.replicates){let h={url:s,ca:c,replicates:!0,subscriptions:null};(0,bc.get)(U.REPLICATION_SHARD)!==void 0&&(h.shard=(0,bc.get)(U.REPLICATION_SHARD)),e.retain_authorization&&(h.authorization=e.authorization),e.start_time&&(h.start_time=e.start_time),await Qo(Xe(),h)}await Qo(u?u.nodeName:f.name??Oi(t),f);let m;return e.operation==="update_node"?m=`Successfully updated '${t}'`:m=`Successfully added '${t}' to cluster`,d&&(m+=" but there was an error updating target node: "+d.message),m}async function TC(e){hs.trace("addNodeBack received request:",e);let t=await(0,Vs.signCertificate)(e),r;e.csr?(r=t.signingCA,hs.info("addNodeBack received CSR from node:",e.url,"this node will use and respond with CA that was used to issue CSR")):(r=e?.cert_auth,hs.info("addNodeBack received CA from node:",e.url));let n={url:e.url,ca:r};e.subscriptions?n.subscriptions=e.subscriptions:(n.replicates=!0,n.subscriptions=null),e.start_time&&(n.start_time=e.start_time),e.authorization&&(n.authorization=e.authorization),e.shard!==void 0&&(n.shard=e.shard);let s=await(0,Vs.getReplicationCertAuth)();if(n.replicates){let i={url:mc(),ca:s?.certificate,replicates:!0,subscriptions:null};(0,bc.get)(U.REPLICATION_SHARD)!==void 0&&(i.shard=(0,bc.get)(U.REPLICATION_SHARD),t.shard=i.shard),e.start_time&&(i.start_time=e.start_time),e.authorization&&(i.authorization=e.authorization),await Qo(Xe(),i)}return await Qo(e.hostname,n),t.nodeName=Xe(),t.usingCA=s?.certificate,hs.info("addNodeBack responding to:",e.url,"with CA named:",s?.name),t}async function RC(e){hs.trace("removeNodeBack received request:",e),await Kt().delete(e.name)}function K1(e){let{subscribe:t,publish:r}=e;return{...e,subscribe:r,publish:t}}var Vs,Y1,Ac,bc,hs,sa,pme,_me,Eme,mf=ue(()=>{Vs=w(_n()),Y1=w(ft()),Ac=w(require("joi")),bc=w(oe());F();Ep();jl();Vn();hs=w(j()),sa=w(ge()),{pki:pme}=require("node-forge"),{HTTP_STATUS_CODES:_me}=sa.hdbErrors,Eme=Ac.default.object({hostname:Ac.default.string(),verify_tls:Ac.default.boolean(),replicates:Ac.default.boolean(),subscriptions:Ac.default.array(),revoked_certificates:Ac.default.array(),shard:Ac.default.number()});o(gme,"setNode");o(TC,"addNodeBack");o(RC,"removeNodeBack");o(K1,"reverseSubscription")});var hf=M((EBe,z1)=>{"use strict";var{handleHDBError:LT,hdbErrors:Sme}=ge(),{HTTP_STATUS_CODES:MT}=Sme,{addUpdateNodeValidator:Tme}=OT(),vT=j(),UT=(F(),v(K)),W1=It(),Rme=se(),Op=nr(),Cp=na(),yC=oe(),yme=SC(),{Node:Ame,NodeSubscription:bme}=uf(),{broadcast:Ime}=st(),{setNode:Nme}=(mf(),v(ff)),pBe=oe(),_Be=(F(),v(K)),wme="Unable to create subscriptions due to schema and/or tables not existing on the local or remote node",Ome="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",Cme=yC.get(UT.CONFIG_PARAMS.CLUSTERING_NODENAME);z1.exports=Pme;async function Pme(e,t=!1){if(vT.trace("addNode called with:",e),yC.get(UT.CONFIG_PARAMS.REPLICATION_URL)||yC.get(UT.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Nme(e);Cp.checkClusteringEnabled();let r=Tme(e);if(r)throw LT(r,r.message,MT.BAD_REQUEST,void 0,void 0,!0);let n=e.node_name;if(!t){let f=await Cp.getNodeRecord(n);if(!Rme.isEmptyOrZeroLength(f))throw LT(new Error,`Node '${n}' has already been added, perform update_node to proceed.`,MT.BAD_REQUEST,void 0,void 0,!0)}let{added:s,skipped:i}=await yme(e.subscriptions,n),a={message:void 0,added:s,skipped:i};if(s.length===0)return a.message=wme,a;let c=Cp.buildNodePayloads(s,Cme,UT.OPERATIONS_ENUM.ADD_NODE,await Cp.getSystemInfo()),l=[];for(let f=0,m=s.length;f<m;f++){let h=s[f];s[f].start_time===void 0&&delete s[f].start_time,l.push(new bme(h.schema,h.table,h.publish,h.subscribe))}vT.trace("addNode sending remote payload:",c);let u;try{u=await Op.request(`${n}.${W1.REQUEST_SUFFIX}`,c)}catch(f){vT.error(`addNode received error from request: ${f}`);for(let h=0,p=s.length;h<p;h++){let E=s[h];E.publish=!1,E.subscribe=!1,await Op.updateRemoteConsumer(E,n)}let m=Op.requestErrorHandler(f,"add_node",n);throw LT(new Error,m,MT.INTERNAL_SERVER_ERROR,"error",m)}if(u.status===W1.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let f=`Error returned from remote node ${n}: ${u.message}`;throw LT(new Error,f,MT.INTERNAL_SERVER_ERROR,"error",f)}vT.trace(u);for(let f=0,m=s.length;f<m;f++){let h=s[f];await Op.updateRemoteConsumer(h,n),h.subscribe===!0&&await Op.updateConsumerIterator(h.schema,h.table,n,"start")}let d=new Ame(n,l,u.system_info);return await Cp.upsertNodeRecord(d),Ime({type:"nats_update"}),i.length>0?a.message=Ome:a.message=`Successfully added '${n}' to manifest`,a}o(Pme,"addNode")});var NC=M((TBe,J1)=>{"use strict";var{handleHDBError:AC,hdbErrors:Dme}=ge(),{HTTP_STATUS_CODES:bC}=Dme,{addUpdateNodeValidator:Lme}=OT(),Pp=j(),xT=(F(),v(K)),j1=It(),SBe=se(),Dp=nr(),Lp=na(),IC=oe(),{cloneDeep:Mme}=require("lodash"),vme=SC(),{Node:Ume,NodeSubscription:xme}=uf(),{broadcast:Bme}=st(),{setNode:Fme}=(mf(),v(ff)),Hme="Unable to update subscriptions due to schema and/or tables not existing on the local or remote node",kme="Some subscriptions were unsuccessful due to schema and/or tables not existing on the local or remote node",qme=IC.get(xT.CONFIG_PARAMS.CLUSTERING_NODENAME);J1.exports=Gme;async function Gme(e){if(Pp.trace("updateNode called with:",e),IC.get(xT.CONFIG_PARAMS.REPLICATION_URL)??IC.get(xT.CONFIG_PARAMS.REPLICATION_HOSTNAME))return Fme(e);Lp.checkClusteringEnabled();let t=Lme(e);if(t)throw AC(t,t.message,bC.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n,s=await Lp.getNodeRecord(r);s.length>0&&(n=Mme(s));let{added:i,skipped:a}=await vme(e.subscriptions,r),c={message:void 0,updated:i,skipped:a};if(i.length===0)return c.message=Hme,c;let l=Lp.buildNodePayloads(i,qme,xT.OPERATIONS_ENUM.UPDATE_NODE,await Lp.getSystemInfo());for(let d=0,f=i.length;d<f;d++){let m=i[d];Pp.trace(`updateNode updating work stream for node: ${r} subscription:`,m),i[d].start_time===void 0&&delete i[d].start_time}Pp.trace("updateNode sending remote payload:",l);let u;try{u=await Dp.request(`${r}.${j1.REQUEST_SUFFIX}`,l)}catch(d){Pp.error(`updateNode received error from request: ${d}`);let f=Dp.requestErrorHandler(d,"update_node",r);throw AC(new Error,f,bC.INTERNAL_SERVER_ERROR,"error",f)}if(u.status===j1.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR){let d=`Error returned from remote node ${r}: ${u.message}`;throw AC(new Error,d,bC.INTERNAL_SERVER_ERROR,"error",d)}Pp.trace(u);for(let d=0,f=i.length;d<f;d++){let m=i[d];await Dp.updateRemoteConsumer(m,r),m.subscribe===!0?await Dp.updateConsumerIterator(m.schema,m.table,r,"start"):await Dp.updateConsumerIterator(m.schema,m.table,r,"stop")}return n||(n=[new Ume(r,[],u.system_info)]),await $me(n[0],i,u.system_info),a.length>0?c.message=kme:c.message=`Successfully updated '${r}'`,c}o(Gme,"updateNode");async function $me(e,t,r){let n=e;for(let s=0,i=t.length;s<i;s++){let a=t[s],c=!1;for(let l=0,u=e.subscriptions.length;l<u;l++){let d=n.subscriptions[l];if(d.schema===a.schema&&d.table===a.table){d.publish=a.publish,d.subscribe=a.subscribe,c=!0;break}}c||n.subscriptions.push(new xme(a.schema,a.table,a.publish,a.subscribe))}n.system_info=r,await Lp.upsertNodeRecord(n),Bme({type:"nats_update"})}o($me,"updateNodeTable")});var tK=M((yBe,eK)=>{"use strict";var Z1=require("joi"),{string:Q1}=Z1.types(),Vme=ft(),X1=(F(),v(K)),Kme=oe(),Yme=It();eK.exports=Wme;function Wme(e){let t=Q1.invalid(Kme.get(X1.CONFIG_PARAMS.CLUSTERING_NODENAME)).pattern(Yme.NATS_TERM_CONSTRAINTS_RX).messages({"string.pattern.base":"{:#label} invalid, must not contain ., * or >","any.invalid":"'node_name' cannot be this nodes name"}).empty(null),r=Z1.object({operation:Q1.valid(X1.OPERATIONS_ENUM.REMOVE_NODE).required(),node_name:t});return Vme.validateBySchema(e,r)}o(Wme,"removeNodeValidator")});var BT=M((bBe,oK)=>{"use strict";var{handleHDBError:rK,hdbErrors:zme}=ge(),{HTTP_STATUS_CODES:nK}=zme,jme=tK(),Mp=j(),sK=na(),Jme=se(),pf=(F(),v(K)),iK=It(),wC=nr(),OC=oe(),{RemotePayloadObject:Qme}=Np(),{NodeSubscription:Xme}=uf(),Zme=Eh(),ehe=vl(),{broadcast:the}=st(),{setNode:rhe}=(mf(),v(ff)),nhe=OC.get(pf.CONFIG_PARAMS.CLUSTERING_NODENAME);oK.exports=she;async function she(e){if(Mp.trace("removeNode called with:",e),OC.get(pf.CONFIG_PARAMS.REPLICATION_URL)??OC.get(pf.CONFIG_PARAMS.REPLICATION_HOSTNAME))return rhe(e);sK.checkClusteringEnabled();let t=jme(e);if(t)throw rK(t,t.message,nK.BAD_REQUEST,void 0,void 0,!0);let r=e.node_name,n=await sK.getNodeRecord(r);if(Jme.isEmptyOrZeroLength(n))throw rK(new Error,`Node '${r}' was not found.`,nK.BAD_REQUEST,void 0,void 0,!0);n=n[0];let s=new Qme(pf.OPERATIONS_ENUM.REMOVE_NODE,nhe,[]),i,a=!1;for(let l=0,u=n.subscriptions.length;l<u;l++){let d=n.subscriptions[l];d.subscribe===!0&&await wC.updateConsumerIterator(d.schema,d.table,r,"stop");try{await wC.updateRemoteConsumer(new Xme(d.schema,d.table,!1,!1),r)}catch(f){Mp.error(f)}}try{i=await wC.request(`${r}.${iK.REQUEST_SUFFIX}`,s),Mp.trace("Remove node reply from remote node:",r,i)}catch(l){Mp.error("removeNode received error from request:",l),a=!0}let c=new Zme(pf.SYSTEM_SCHEMA_NAME,pf.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME,[r]);return await ehe.deleteRecord(c),the({type:"nats_update"}),i?.status===iK.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR||a?(Mp.error("Error returned from remote node:",r,i?.message),`Successfully removed '${r}' from local manifest, however there was an error reaching remote node. Check the logs for more details.`):`Successfully removed '${r}' from manifest`}o(she,"removeNode")});var lK=M((NBe,cK)=>{"use strict";var aK=require("joi"),{string:ihe,array:ohe}=aK.types(),ahe=ft(),che=OT();cK.exports=lhe;function lhe(e){let t=aK.object({operation:ihe.valid("configure_cluster").required(),connections:ohe.items(che.validationSchema).required()});return ahe.validateBySchema(e,t)}o(lhe,"configureClusterValidator")});var CC=M((OBe,hK)=>{"use strict";var uK=(F(),v(K)),FT=j(),uhe=se(),dhe=oe(),fhe=BT(),mhe=hf(),hhe=na(),phe=lK(),{handleHDBError:dK,hdbErrors:_he}=ge(),{HTTP_STATUS_CODES:fK}=_he,Ehe="Configure cluster complete.",ghe="Failed to configure the cluster. Check the logs for more details.",She="Configure cluster was partially successful. Errors occurred when attempting to configure the following nodes. Check the logs for more details.";hK.exports=The;async function The(e){FT.trace("configure cluster called with:",e);let t=phe(e);if(t)throw dK(t,t.message,fK.BAD_REQUEST,void 0,void 0,!0);let r=await hhe.getAllNodeRecords(),n=[];if(dhe.get(uK.CONFIG_PARAMS.CLUSTERING_ENABLED)){for(let d=0,f=r.length;d<f;d++){let m=await mK(fhe,{operation:uK.OPERATIONS_ENUM.REMOVE_NODE,node_name:r[d].name},r[d].name);n.push(m)}FT.trace("All results from configure_cluster remove node:",n)}let s=[],i=e.connections.length;for(let d=0;d<i;d++){let f=e.connections[d],m=await mK(mhe,f,f.node_name);s.push(m)}FT.trace("All results from configure_cluster add node:",s);let a=[],c=[],l=!1,u=n.concat(s);for(let d=0,f=u.length;d<f;d++){let m=u[d];m.status==="rejected"&&(FT.error(m.node_name,m?.error?.message,m?.error?.stack),a.includes(m.node_name)||a.push(m.node_name)),(m?.result?.message?.includes?.("Successfully")||m?.result?.includes?.("Successfully"))&&(l=!0),!(typeof m.result=="string"&&m.result.includes("Successfully removed")||m.status==="rejected")&&c.push({node_name:m?.node_name,response:m?.result})}if(uhe.isEmptyOrZeroLength(a))return{message:Ehe,connections:c};if(l)return{message:She,failed_nodes:a,connections:c};throw dK(new Error,ghe,fK.INTERNAL_SERVER_ERROR,void 0,void 0,!0)}o(The,"configureCluster");async function mK(e,t,r){try{return{node_name:r,result:await e(t)}}catch(n){return{node_name:r,error:n,status:"rejected"}}}o(mK,"functionWrapper")});var gK=M((PBe,EK)=>{"use strict";var vp=require("joi"),Rhe=ft(),{validateSchemaExists:pK,validateTableExists:yhe,validateSchemaName:_K}=Zi(),Ahe=vp.object({operation:vp.string().valid("purge_stream"),schema:vp.string().custom(pK).custom(_K).optional(),database:vp.string().custom(pK).custom(_K).optional(),table:vp.string().custom(yhe).required()});function bhe(e){return Rhe.validateBySchema(e,Ahe)}o(bhe,"purgeStreamValidator");EK.exports=bhe});var PC=M((LBe,SK)=>{"use strict";var{handleHDBError:Ihe,hdbErrors:Nhe}=ge(),{HTTP_STATUS_CODES:whe}=Nhe,Ohe=gK(),Che=nr(),Phe=na();SK.exports=Dhe;async function Dhe(e){e.schema=e.schema??e.database;let t=Ohe(e);if(t)throw Ihe(t,t.message,whe.BAD_REQUEST,void 0,void 0,!0);Phe.checkClusteringEnabled();let{schema:r,table:n,options:s}=e;return await Che.purgeTableStream(r,n,s),`Successfully purged table '${r}.${n}'`}o(Dhe,"purgeStream")});var qT=M((vBe,NK)=>{"use strict";var LC=na(),Lhe=nr(),kT=oe(),_f=(F(),v(K)),su=It(),Mhe=se(),DC=j(),{RemotePayloadObject:vhe}=Np(),{ErrorCode:TK}=require("nats"),{parentPort:RK}=require("worker_threads"),{onMessageByType:Uhe}=st(),{getThisNodeName:xhe}=(Vn(),v(po)),{requestClusterStatus:Bhe}=(Ep(),v(V$)),{getReplicationSharedStatus:Fhe,getHDBNodeTable:Hhe}=(jl(),v(SO)),{CONFIRMATION_STATUS_POSITION:khe,RECEIVED_VERSION_POSITION:qhe,RECEIVED_TIME_POSITION:Ghe,SENDING_TIME_POSITION:$he,RECEIVING_STATUS_POSITION:Vhe,RECEIVING_STATUS_RECEIVING:Khe}=(VO(),v(vV)),yK=kT.get(_f.CONFIG_PARAMS.CLUSTERING_ENABLED),AK=kT.get(_f.CONFIG_PARAMS.CLUSTERING_NODENAME);NK.exports={clusterStatus:Yhe,buildNodeStatus:IK};var bK;Uhe("cluster-status",async e=>{bK(e)});async function Yhe(){if(kT.get(_f.CONFIG_PARAMS.REPLICATION_URL)||kT.get(_f.CONFIG_PARAMS.REPLICATION_HOSTNAME)){let n;if(RK){RK.postMessage({type:"request-cluster-status"}),n=await new Promise(i=>{bK=i});for(let i of n.connections){let a=i.name;for(let c of i.database_sockets){let l=c.database,u;for(let f of Object.values(databases[l]||{}))if(u=f.auditStore,u)break;if(!u)continue;let d=Fhe(u,l,a);c.lastCommitConfirmed=HT(d[khe]),c.lastReceivedRemoteTime=HT(d[qhe]),c.lastReceivedLocalTime=HT(d[Ghe]),c.sendingMessage=HT(d[$he]),c.lastReceivedStatus=d[Vhe]===Khe?"Receiving":"Waiting"}}}else n=Bhe();n.node_name=xhe();let s=Hhe().primaryStore.get(n.node_name);return s?.shard&&(n.shard=s.shard),s?.url&&(n.url=s.url),n.is_enabled=!0,n}let e={node_name:AK,is_enabled:yK,connections:[]};if(!yK)return e;let t=await LC.getAllNodeRecords();if(Mhe.isEmptyOrZeroLength(t))return e;let r=[];for(let n=0,s=t.length;n<s;n++)r.push(IK(t[n],e.connections));return await Promise.allSettled(r),e}o(Yhe,"clusterStatus");function HT(e){return e?e===1?"Copying":new Date(e).toUTCString():void 0}o(HT,"asDate");async function IK(e,t){let r=e.name,n=new vhe(_f.OPERATIONS_ENUM.CLUSTER_STATUS,AK,void 0,await LC.getSystemInfo()),s,i,a=su.CLUSTER_STATUS_STATUSES.OPEN;try{let l=Date.now();s=await Lhe.request(su.REQUEST_SUBJECT(r),n),i=Date.now()-l,s.status===su.UPDATE_REMOTE_RESPONSE_STATUSES.ERROR&&(a=su.CLUSTER_STATUS_STATUSES.CLOSED,DC.error(`Error getting node status from ${r} `,s))}catch(l){DC.warn(`Error getting node status from ${r}`,l),l.code===TK.NoResponders?a=su.CLUSTER_STATUS_STATUSES.NO_RESPONDERS:l.code===TK.Timeout?a=su.CLUSTER_STATUS_STATUSES.TIMEOUT:a=su.CLUSTER_STATUS_STATUSES.CLOSED}let c=new Whe(r,a,s?.message?.ports?.clustering,s?.message?.ports?.operations_api,i,s?.message?.uptime,e.subscriptions,s?.message?.system_info);try{let l={name:r,system_info:s?.message?.system_info};e.system_info?.hdb_version!==_f.PRE_4_0_0_VERSION&&await LC.upsertNodeRecord(l)}catch(l){DC.error("Cluster status encountered an error updating system info for node:",r,l)}t.push(c)}o(IK,"buildNodeStatus");function Whe(e,t,r,n,s,i,a,c){this.node_name=e,this.status=t,this.ports={clustering:r,operations_api:n},this.latency_ms=s,this.uptime=i,this.subscriptions=a,this.system_info=c}o(Whe,"NodeStatusObject")});var $T=M((xBe,wK)=>{"use strict";var{handleHDBError:zhe,hdbErrors:jhe}=ge(),{HTTP_STATUS_CODES:Jhe}=jhe,Qhe=nr(),Xhe=na(),MC=se(),GT=require("joi"),Zhe=ft(),epe=2e3,tpe=GT.object({timeout:GT.number().min(1),connected_nodes:GT.boolean(),routes:GT.boolean()});wK.exports=rpe;async function rpe(e){Xhe.checkClusteringEnabled();let t=Zhe.validateBySchema(e,tpe);if(t)throw zhe(t,t.message,Jhe.BAD_REQUEST,void 0,void 0,!0);let{timeout:r,connected_nodes:n,routes:s}=e,i=n===void 0||MC.autoCastBoolean(n),a=s===void 0||MC.autoCastBoolean(s),c={nodes:[]},l=await Qhe.getServerList(r??epe),u={};if(i)for(let d=0,f=l.length;d<f;d++){let m=l[d].statsz;m&&(u[l[d].server.name]=m.routes)}for(let d=0,f=l.length;d<f;d++){if(l[d].statsz)continue;let m=l[d].server,h=l[d].data;if(m.name.endsWith("-hub")){let p={name:m.name.slice(0,-4),response_time:l[d].response_time};i&&(p.connected_nodes=[],u[m.name]&&u[m.name].forEach(E=>{p.connected_nodes.includes(E.name.slice(0,-4))||p.connected_nodes.push(E.name.slice(0,-4))})),a&&(p.routes=h.cluster?.urls?h.cluster?.urls.map(E=>({host:E.split(":")[0],port:MC.autoCast(E.split(":")[1])})):[]),c.nodes.push(p)}}return c}o(rpe,"clusterNetwork")});var DK=M((FBe,PK)=>{"use strict";var vC=require("joi"),OK=ft(),{routeConstraints:CK}=HN();PK.exports={setRoutesValidator:npe,deleteRoutesValidator:spe};function npe(e){let t=vC.object({server:vC.valid("hub","leaf"),routes:CK.required()});return OK.validateBySchema(e,t)}o(npe,"setRoutesValidator");function spe(e){let t=vC.object({routes:CK.required()});return OK.validateBySchema(e,t)}o(spe,"deleteRoutesValidator")});var VT=M((kBe,FK)=>{"use strict";var ia=_t(),UC=se(),Ks=(F(),v(K)),Ef=oe(),LK=DK(),{handleHDBError:MK,hdbErrors:ipe}=ge(),{HTTP_STATUS_CODES:vK}=ipe,UK="cluster routes successfully set",xK="cluster routes successfully deleted";FK.exports={setRoutes:ape,getRoutes:cpe,deleteRoutes:lpe};function ope(e){let t=ia.getClusteringRoutes(),r=e.server==="hub"?t.hub_routes:t.leaf_routes,n=e.server==="hub"?t.leaf_routes:t.hub_routes,s=[],i=[];for(let a=0,c=e.routes.length;a<c;a++){let l=e.routes[a];l.port=UC.autoCast(l.port);let u=r.some(f=>f.host===l.host&&f.port===l.port),d=n.some(f=>f.host===l.host&&f.port===l.port);u||d?s.push(l):(r.push(l),i.push(l))}return e.server==="hub"?ia.updateConfigValue(Ks.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r):ia.updateConfigValue(Ks.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,r),{message:UK,set:i,skipped:s}}o(ope,"setRoutesNats");function ape(e){let t=LK.setRoutesValidator(e);if(t)throw MK(t,t.message,vK.BAD_REQUEST,void 0,void 0,!0);if(Ef.get(Ks.CONFIG_PARAMS.CLUSTERING_ENABLED))return ope(e);let r=[],n=[],s=Ef.get(Ks.CONFIG_PARAMS.REPLICATION_ROUTES)??[];return e.routes.forEach(i=>{BK(s,i)?n.push(i):(s.push(i),r.push(i))}),ia.updateConfigValue(Ks.CONFIG_PARAMS.REPLICATION_ROUTES,s),{message:UK,set:r,skipped:n}}o(ape,"setRoutes");function BK(e,t){return typeof t=="string"?e.includes(t):typeof t=="object"&&t!==null?e.some(r=>(r.host===t.host||r.hostname===t.hostname)&&r.port===t.port):!1}o(BK,"existsInArray");function cpe(){if(Ef.get(Ks.CONFIG_PARAMS.CLUSTERING_ENABLED)){let e=ia.getClusteringRoutes();return{hub:e.hub_routes,leaf:e.leaf_routes}}else return Ef.get(Ks.CONFIG_PARAMS.REPLICATION_ROUTES)??[]}o(cpe,"getRoutes");function lpe(e){let t=LK.deleteRoutesValidator(e);if(t)throw MK(t,t.message,vK.BAD_REQUEST,void 0,void 0,!0);if(Ef.get(Ks.CONFIG_PARAMS.CLUSTERING_ENABLED))return upe(e);let r=[],n=[],s=Ef.get(Ks.CONFIG_PARAMS.REPLICATION_ROUTES)??[],i=[];return s.forEach(a=>{BK(e.routes,a)?r.push(a):(i.push(a),n.push(a))}),ia.updateConfigValue(Ks.CONFIG_PARAMS.REPLICATION_ROUTES,i),{message:xK,deleted:r,skipped:n}}o(lpe,"deleteRoutes");function upe(e){let t=ia.getClusteringRoutes(),r=t.hub_routes,n=t.leaf_routes,s=[],i=[],a=!1,c=!1;for(let l=0,u=e.routes.length;l<u;l++){let d=e.routes[l],f=!1;for(let m=0,h=r.length;m<h;m++){let p=r[m];if(d.host===p.host&&d.port===p.port){r.splice(m,1),f=!0,a=!0,s.push(d);break}}if(!f){let m=!0;for(let h=0,p=n.length;h<p;h++){let E=n[h];if(d.host===E.host&&d.port===E.port){n.splice(h,1),c=!0,m=!1,s.push(d);break}}m&&i.push(d)}}return a&&(r=UC.isEmptyOrZeroLength(r)?null:r,ia.updateConfigValue(Ks.CONFIG_PARAMS.CLUSTERING_HUBSERVER_CLUSTER_NETWORK_ROUTES,r)),c&&(n=UC.isEmptyOrZeroLength(n)?null:n,ia.updateConfigValue(Ks.CONFIG_PARAMS.CLUSTERING_LEAFSERVER_NETWORK_ROUTES,n)),{message:xK,deleted:s,skipped:i}}o(upe,"deleteRoutesNats")});var kK=M((GBe,HK)=>{"use strict";var Up=require("alasql"),iu=require("recursive-iterator"),Di=j(),dpe=se(),xp=(F(),v(K)),xC=class{static{o(this,"sqlStatementBucket")}constructor(t){this.ast=t,this.affected_attributes=new Map,this.table_lookup=new Map,this.schema_lookup=new Map,this.table_to_schema_lookup=new Map,mpe(this.ast,this.affected_attributes,this.table_lookup,this.schema_lookup,this.table_to_schema_lookup)}getAttributesBySchemaTableName(t,r){if(!t||!r||!this.affected_attributes)return[];if(this.affected_attributes.has(t))return!this.affected_attributes.get(t).has(r)&&(r=this.table_lookup.get(r),!r)?[]:this.affected_attributes.get(t).get(r)}getAllTables(){let t=[];if(!this.affected_attributes)return t;for(let r of this.affected_attributes.keys())t.push(Array.from(this.affected_attributes.get(r).keys()));return t}getTablesBySchemaName(t){return!t||!this.affected_attributes?[]:Array.from(this.affected_attributes.get(t).keys())}getSchemas(){return this.affected_attributes?Array.from(this.affected_attributes.keys()):[]}getAst(){return this.ast}updateAttributeWildcardsForRolePerms(t){let r=this.ast.columns.filter(s=>xp.SEARCH_WILDCARDS.includes(s.columnid));if(r.length===0)return this.ast;let n=this.ast.from[0].databaseid;return this.ast.columns=this.ast.columns.filter(s=>!xp.SEARCH_WILDCARDS.includes(s.columnid)),r.forEach(s=>{let i=this.table_to_schema_lookup.has(s.tableid)?this.table_to_schema_lookup.get(s.tableid):n,a=this.table_lookup.has(s.tableid)?this.table_lookup.get(s.tableid):this.ast.from[0].tableid;if(t[i]&&t[i].tables[a]&&t[i].tables[a][xp.PERMS_CRUD_ENUM.READ]){let c;t[i].tables[a].attribute_permissions.length>0?c=fpe(t[i].tables[a].attribute_permissions):c=global.hdb_schema[i][a].attributes.map(u=>({attribute_name:u.attribute}));let l=this.affected_attributes.get(i).get(a).filter(u=>!xp.SEARCH_WILDCARDS.includes(u));c.forEach(({attribute_name:u})=>{let d=new Up.yy.Column({columnid:u});s.tableid&&(d.tableid=s.tableid),this.ast.columns.push(d),l.includes(u)||l.push(u)}),this.affected_attributes.get(i).set(a,l)}}),this.ast}};function fpe(e){return e.filter(t=>t[xp.PERMS_CRUD_ENUM.READ])}o(fpe,"filterReadRestrictedAttrs");function mpe(e,t,r,n,s){hpe(e,t,r,n,s)}o(mpe,"interpretAST");function Bp(e,t,r,n,s){if(!(!e||!e.databaseid)&&(t.has(e.databaseid)||t.set(e.databaseid,new Map),t.get(e.databaseid).has(e.tableid)||t.get(e.databaseid).set(e.tableid,[]),e.as&&(r.has(e.as)||r.set(e.as,e.tableid),n&&!n.has(e.as)&&n.set(e.as,e.databaseid)),s)){let i=e.databaseid,a=e.tableid;e.as&&(a=e.as),s.set(a,i)}}o(Bp,"addSchemaTableToMap");function hpe(e,t,r,n,s){if(!e){Di.info("getRecordAttributesAST: invalid SQL syntax tree");return}e instanceof Up.yy.Insert?gpe(e,t,r):e instanceof Up.yy.Select?ppe(e,t,r,n,s):e instanceof Up.yy.Update?_pe(e,t,r):e instanceof Up.yy.Delete?Epe(e,t,r):Di.error("AST in getRecordAttributesAST() is not a valid SQL type.")}o(hpe,"getRecordAttributesAST");function ppe(e,t,r,n,s){if(!e){Di.info("getSelectAttributes: invalid SQL syntax tree");return}if(!e.from||e.from[0]===void 0)return;let i=e.from[0].databaseid;if(dpe.isEmptyOrZeroLength(i)){Di.error("No schema specified");return}e.from.forEach(c=>{Bp(c,t,r,n,s)}),e.joins&&e.joins.forEach(c=>{c.as&&(c.table.as=c.as),Bp(c.table,t,r,n,s)});let a=new iu(e.columns);for(let{node:c}of a)if(c&&c.columnid){let l=c.tableid,u=n.has(l)?n.get(l):i;if(l||(l=e.from[0].tableid),!t.get(u).has(l))if(r.has(l))l=r.get(l);else{Di.info(`table specified as ${l} not found.`);return}t.get(u).get(l).indexOf(c.columnid)<0&&t.get(u).get(l).push(c.columnid)}if(e.where){let c=new iu(e.where),l=e.from[0].tableid;for(let{node:u}of c)if(u&&u.columnid){let d=u.tableid?u.tableid:l;if(!t.get(i).has(d))if(r.has(d))d=r.get(d);else{Di.info(`table specified as ${d} not found.`);continue}t.get(i).get(d).indexOf(u.columnid)<0&&t.get(i).get(d).push(u.columnid)}}if(e.joins&&e.joins.forEach(c=>{let l=new iu(c.on);for(let{node:u}of l)if(u&&u.columnid){let d=u.tableid,f=s.get(d);if(!t.get(f).has(d))if(r.has(d))d=r.get(d);else{Di.info(`table specified as ${d} not found.`);continue}t.get(f).get(d).indexOf(u.columnid)<0&&t.get(f).get(d).push(u.columnid)}}),e.order){let c=new iu(e.order);for(let{node:l}of c)if(l&&l.columnid){let u=l.tableid,d=n.has(u)?n.get(u):i;if(u||(u=e.from[0].tableid),!t.get(d).has(u))if(r.has(u))u=r.get(u);else{Di.info(`table specified as ${u} not found.`);return}t.get(d).get(u).indexOf(l.columnid)<0&&t.get(d).get(u).push(l.columnid)}}}o(ppe,"getSelectAttributes");function _pe(e,t,r){if(!e){Di.info("getUpdateAttributes: invalid SQL syntax tree");return}let n=new iu(e.columns),s=e.table.databaseid;Bp(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&BC(e.table.tableid,s,i.columnid,t,r)}o(_pe,"getUpdateAttributes");function Epe(e,t,r){if(!e){Di.info("getDeleteAttributes: invalid SQL syntax tree");return}let n=new iu(e.where),s=e.table.databaseid;Bp(e.table,t,r);for(let{node:i}of n)i&&i.columnid&&BC(e.table.tableid,s,i.columnid,t,r)}o(Epe,"getDeleteAttributes");function gpe(e,t,r){if(!e){Di.info("getInsertAttributes: invalid SQL syntax tree");return}let n=new iu(e.columns),s=e.into.databaseid;Bp(e.into,t,r);for(let{node:i}of n)i&&i.columnid&&BC(e.into.tableid,s,i.columnid,t,r)}o(gpe,"getInsertAttributes");function BC(e,t,r,n,s){if(!n.get(t))return;let i=e;n.get(t).has(i)||(i=s.get(i)),n.get(t).get(i).push(r)}o(BC,"pushAttribute");HK.exports=xC});var GK=M((VBe,qK)=>{"use strict";var KT=(F(),v(K)),YT=class{static{o(this,"BaseLicense")}constructor(t=0,r=KT.RAM_ALLOCATION_ENUM.DEFAULT,n=KT.LICENSE_VALUES.VERSION_DEFAULT,s){this.exp_date=t,this.ram_allocation=r,this.version=n,this.fingerprint=s}},FC=class extends YT{static{o(this,"ExtendedLicense")}constructor(t=0,r=KT.RAM_ALLOCATION_ENUM.DEFAULT,n=KT.LICENSE_VALUES.VERSION_DEFAULT,s,i=!1){super(t,r,n,s),this.enterprise=i}};qK.exports={BaseLicense:YT,ExtendedLicense:FC}});var Tf=M((YBe,zK)=>{"use strict";var Sf=require("fs-extra"),WT=(Xg(),v(Qg)),VK=require("crypto"),Spe=require("moment"),Tpe=require("uuid").v4,gn=j(),kC=require("path"),Rpe=se(),ou=(F(),v(K)),{totalmem:$K}=require("os"),ype=GK().ExtendedLicense,gf="invalid license key format",Ape="061183",bpe="mofi25",Ipe="aes-256-cbc",Npe=16,wpe=32,KK=oe(),{resolvePath:YK}=_t();KK.initSync();var HC;zK.exports={validateLicense:WK,generateFingerPrint:Cpe,licenseSearch:$C,getLicense:Lpe,checkMemoryLimit:Mpe};function qC(){return kC.join(KK.getHdbBasePath(),ou.LICENSE_KEY_DIR_NAME,ou.LICENSE_FILE_NAME)}o(qC,"getLicenseDirPath");function Ope(){let e=qC();return YK(kC.join(e,ou.LICENSE_FILE_NAME))}o(Ope,"getLicenseFilePath");function GC(){let e=qC();return YK(kC.join(e,ou.REG_KEY_FILE_NAME))}o(GC,"getFingerPrintFilePath");async function Cpe(){let e=GC();try{return await Sf.readFile(e,"utf8")}catch(t){if(t.code==="ENOENT")return await Ppe();throw gn.error(`Error writing fingerprint file to ${e}`),gn.error(t),new Error("There was an error generating the fingerprint")}}o(Cpe,"generateFingerPrint");async function Ppe(){let e=Tpe(),t=WT.hash(e,WT.HASH_FUNCTION.MD5),r=GC();try{await Sf.mkdirp(qC()),await Sf.writeFile(r,t)}catch(n){if(n.code==="EEXIST")return t;throw gn.error(`Error writing fingerprint file to ${r}`),gn.error(n),new Error("There was an error generating the fingerprint")}return t}o(Ppe,"writeFingerprint");function WK(e,t){let r={valid_license:!1,valid_date:!1,valid_machine:!1,exp_date:null,ram_allocation:ou.RAM_ALLOCATION_ENUM.DEFAULT,version:ou.LICENSE_VALUES.VERSION_DEFAULT};if(!e)return gn.error("empty license key passed to validate."),r;let n=GC(),s=!1;try{s=Sf.statSync(n)}catch(i){gn.error(i)}if(s){let i;try{i=Sf.readFileSync(n,"utf8")}catch{gn.error("error validating this machine in the license"),r.valid_machine=!1;return}let a=e.split(bpe),c=a[1];c=Buffer.concat([Buffer.from(c)],Npe);let l=Buffer.concat([Buffer.from(i)],wpe),u=VK.createDecipheriv(Ipe,l,c);r.valid_date=!0,r.valid_license=!0,r.valid_machine=!0;let d=null;try{d=u.update(a[0],"hex","utf8"),d.trim(),d+=u.final("utf8")}catch{let h=Dpe(a[0],i);if(h)d=h;else throw r.valid_license=!1,r.valid_machine=!1,console.error(gf),gn.error(gf),new Error(gf)}let f;if(isNaN(d))try{f=JSON.parse(d),r.version=f.version,r.exp_date=f.exp_date,isNaN(r.exp_date)&&(r.exp_date=new Date(r.exp_date).getTime()),f.ram_allocation&&(r.ram_allocation=f.ram_allocation)}catch{throw console.error(gf),gn.error(gf),new Error(gf)}else r.exp_date=d;r.exp_date<Spe().valueOf()&&(r.valid_date=!1),WT.validate(a[1],`${Ape}${i}${t}`,WT.HASH_FUNCTION.MD5)||(r.valid_license=!1)}else r.valid_license=!1,r.valid_machine=!1;return r.valid_license&&r.valid_machine&&r.valid_date||gn.error("Invalid licence"),r}o(WK,"validateLicense");function Dpe(e,t){try{let r=VK.createDecipher("aes192",t),n=r.update(e,"hex","utf8");return n.trim(),n+=r.final("utf8"),n}catch{gn.warn("Check old license failed")}}o(Dpe,"checkOldLicense");function $C(){let e=new ype,t=[];try{t=Sf.readFileSync(Ope(),"utf-8").split(`\r
@@ -30,7 +30,7 @@ Host ${s}
 	IdentityFile ${c}
 	IdentitiesOnly yes`;await Ie.pathExists(l)?await Ie.appendFile(l,`
 `+u):await Ie.outputFile(l,u);let d="";if(await Ie.pathExists(da)||(await Ie.writeFile(da,""),await Ie.chmod(da,"0600")),i=="github.com"&&!(await Ie.readFile(da,"utf8")).includes("github.com"))try{let E=(await(await fetch("https://api.github.com/meta")).json()).ssh_keys;for(let g of E)Ie.appendFile(da,"github.com "+g+`
-`)}catch{d=". Unable to get known hosts from github.com. Set your known hosts manually using set_ssh_known_hosts."}a&&await Ie.appendFile(da,a);let f=await Mi(e);return f.message=`Added ssh key: ${r}${d}`,f}o(gge,"addSSHKey");async function Sge(e){let t=zn.updateSSHKeyValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{name:r,key:n}=e;Wt.trace("updating ssh key",r);let s=Ce.join(Dc,r+".key");if(!await Ie.pathExists(s))throw new Error("Key does not exist. Use add_ssh_key");await Ie.outputFile(s,n);let i=await Mi(e);return i.message=`Updated ssh key: ${r}`,i}o(Sge,"updateSSHKey");async function Tge(e){let t=zn.deleteSSHKeyValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{name:r}=e;Wt.trace("deleting ssh key",r);let n=Ce.join(Dc,r+".key"),s=Ce.join(Dc,"config");if(!await Ie.pathExists(n))throw new Error("Key does not exist");let i=await Ie.readFile(s,"utf8"),a=new RegExp(`#${r}[\\S\\s]*?IdentitiesOnly yes`,"g");i=i.replace(a,""),await Ie.outputFile(s,i),Ie.removeSync(n);let c=await Mi(e);return c.message=`Deleted ssh key: ${r}`,c}o(Tge,"deleteSSHKey");async function Rge(e){let t=[];return await Ie.pathExists(Dc)&&(await Ie.readdir(Dc)).forEach(r=>{r!="known_hosts"&&r!="config"&&t.push({name:r.split(".")[0]})}),t}o(Rge,"listSSHKeys");async function yge(e){let t=zn.setSSHKnownHostsValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{known_hosts:r}=e;await Ie.outputFile(da,r);let n=await Mi(e);return n.message="Known hosts successfully set",n}o(yge,"setSSHKnownHosts");async function Age(e){return await Ie.pathExists(da)?{known_hosts:await Ie.readFile(da,"utf8")}:{known_hosts:null}}o(Age,"getSSHKnownHosts");or.customFunctionsStatus=sge;or.getCustomFunctions=ige;or.getCustomFunction=oge;or.setCustomFunction=age;or.dropCustomFunction=cge;or.addComponent=lge;or.dropCustomFunctionProject=uge;or.packageComponent=dge;or.deployComponent=fge;or.getComponents=hge;or.getComponentFile=pge;or.setComponentFile=_ge;or.dropComponent=Ege;or.addSSHKey=gge;or.updateSSHKey=Sge;or.deleteSSHKey=Tge;or.listSSHKeys=Rge;or.setSSHKnownHosts=yge;or.getSSHKnownHosts=Age});var IP=M((kFe,vW)=>{"use strict";var zs=require("joi"),MW=ft();vW.exports={readTransactionLogValidator:bge,deleteTransactionLogsBeforeValidator:Ige};function bge(e){let t=zs.object({schema:zs.string(),database:zs.string(),table:zs.string().required(),from:zs.date().timestamp(),to:zs.date().timestamp(),limit:zs.number().min(1)});return MW.validateBySchema(e,t)}o(bge,"readTransactionLogValidator");function Ige(e){let t=zs.object({schema:zs.string(),database:zs.string(),table:zs.string().required(),timestamp:zs.date().timestamp().required()});return MW.validateBySchema(e,t)}o(Ige,"deleteTransactionLogsBeforeValidator")});var RR=M((GFe,kW)=>{"use strict";var NP=(F(),v(K)),e_=nr(),UW=se(),xW=oe(),BW=no(),FW=j(),{handleHDBError:SR,hdbErrors:Nge}=ge(),{HTTP_STATUS_CODES:TR}=Nge,{readTransactionLogValidator:wge,deleteTransactionLogsBeforeValidator:Oge}=IP(),HW=as(),Cge="Logs successfully deleted from transaction log.",Pge="All logs successfully deleted from transaction log.";kW.exports={readTransactionLog:Dge,deleteTransactionLogsBefore:Mge};async function Dge(e){let t=wge(e);if(t)throw SR(t,t.message,TR.BAD_REQUEST,void 0,void 0,!0);e.database=e.database??e.schema??"data";let r=UW.checkSchemaTableExist(e.database,e.table);if(r)throw SR(new Error,r,TR.NOT_FOUND,void 0,void 0,!0);return xW.get(NP.CONFIG_PARAMS.CLUSTERING_ENABLED)?await Lge(e):(FW.info("Reading HarperDB logs used by Plexus"),(e.from||e.to)&&(e.search_type="timestamp",e.search_values=[e.from??0],e.to&&(e.search_values[1]=e.to)),HW.readAuditLog(e))}o(Dge,"readTransactionLog");async function*Lge(e){let t=BW.createNatsTableStreamName(e.database,e.table),r=await e_.viewStreamIterator(t,parseInt(e.from),e.limit);for await(let n of r){let s=Math.floor(n?.nats_timestamp/1e6);if(e.to&&s>e.to)break;let i={operation:n?.entry?.operation,user:n?.entry?.__origin?.user,timestamp:s,records:n?.entry?.records,attributes:n?.entry?.attributes};n?.entry?.operation===NP.OPERATIONS_ENUM.DELETE&&(i.hash_values=n?.entry?.hash_values),yield i}}o(Lge,"readTransactionLogNats");async function Mge(e){let t=Oge(e);if(t)throw SR(t,t.message,TR.BAD_REQUEST,void 0,void 0,!0);if(e.database=e.database??e.schema??"data",!xW.get(NP.CONFIG_PARAMS.CLUSTERING_ENABLED))return FW.info("Delete transaction logs called for Plexus"),HW.deleteAuditLogsBefore(e);let{database:r,table:n,timestamp:s}=e,i=UW.checkSchemaTableExist(r,n);if(i)throw SR(new Error,i,TR.NOT_FOUND,void 0,void 0,!0);let a=BW.createNatsTableStreamName(r,n),{jsm:c}=await e_.getNATSReferences(),l=await e_.getStreamInfo(a),u=new Date(l.state.first_ts).getTime();if(s<=u)return`No transactions exist before: ${s}`;let d=Cge,f,m=new Date(l.state.last_ts).getTime();return s>m?(f=l.state.last_seq+1,d=Pge):f=(await e_.viewStream(a,parseInt(s),1))[0].nats_sequence,await e_.purgeTableStream(r,n,{seq:f}),d}o(Mge,"deleteTransactionLogsBefore")});var PP={};Oe(PP,{describeMetric:()=>YW,describeMetricOp:()=>CP,get:()=>VW,getOp:()=>wP,listMetrics:()=>KW,listMetricsOp:()=>OP});async function vge(e){return(await aS().get(e)).hostname}function qW(e,t){return e.length===0||e.includes(t)}function wP(e){return t_.trace?.("get_analytics request:",e),VW(e.metric,e.get_attributes,e.start_time,e.end_time,e.conditions)}function $W(e){return"conditions"in e?{...e,conditions:e.conditions.map($W)}:{attribute:e.search_attribute??e.attribute,comparator:e.search_type??e.comparator,value:e.search_value??e.value}}async function VW(e,t,r,n,s){let i=[{attribute:"metric",comparator:"equals",value:e}];s&&i.push(...s.map($W));let a=t??[];qW(a,"id")||a.push("id"),r&&i.push({attribute:"id",comparator:"greater_than_equal",value:r}),n&&i.push({attribute:"id",comparator:"less_than",value:n});let c={conditions:i};return a.length>0&&(c.select=a),t_.trace?.("get_analytics hdb_analytics.search request:",JSON.stringify(c)),(await databases.system.hdb_analytics.search(c)).map(async u=>{let d=u.id[1];return u.id=u.id[0],qW(a,"node")&&(t_.trace?.(`get_analytics lookup hostname for nodeId: ${d}`),u.node=await vge(d)),t_.trace?.("get_analytics result:",JSON.stringify(u)),u})}function OP(e){return KW(e.metric_types)}async function KW(e=["builtin"]){let t=[],r=Object.values(jo);if(e.includes("builtin")&&(t=r),e.includes("custom")){let n=r.map(c=>({attribute:"metric",comparator:"not_equal",value:c})),s={select:["metric"],conditions:n},i=new Set,a=await databases.system.hdb_analytics.search(s);for await(let c of a)i.add(c.metric);t.push(...Array.from(i.values()))}return t}function CP(e){return YW(e.metric)}async function YW(e){let t={conditions:[{attribute:"metric",comparator:"equals",value:e}],sort:{attribute:"id",descending:!0},limit:1},r=databases.system.hdb_analytics.search(t),n=[{name:"node",type:"string"}];for await(let s of r){for(let a in s)n.push({name:a,type:typeof s[a]});let i={attributes:n};return t_.trace?.("describe_metric result:",JSON.stringify(i)),i}return{}}var GW,t_,DP=ue(()=>{GW=w(j());nw();sw();t_=(0,GW.forComponent)("analytics").conditional;o(vge,"lookupHostname");o(qW,"isSelected");o(wP,"getOp");o($W,"conformCondition");o(VW,"get");o(OP,"listMetricsOp");o(KW,"listMetrics");o(CP,"describeMetricOp");o(YW,"describeMetric")});var yR,AR,r_,bR=ue(()=>{yR={primary:{allowedValues:null},maintenance:{allowedValues:null},availability:{allowedValues:["Available","Unavailable"]}},AR=Object.keys(yR),r_="primary"});function zW(e){return WW.validateBySchema(e,Fge)}var n_,WW,Uge,xge,Bge,Fge,jW=ue(()=>{n_=w(require("joi")),WW=w(ft());bR();Uge=AR,xge=Object.entries(yR).reduce((e,[t,r])=>(r.allowedValues&&(e[t]=`Status "${t}" only accepts these values: ${r.allowedValues.join(", ")}`),e),{}),Bge=o(()=>{let e=n_.default.string().min(1).max(512);return Object.entries(yR).forEach(([t,r])=>{r.allowedValues&&(e=e.when("id",{is:t,then:n_.default.string().valid(...r.allowedValues).messages({"any.only":xge[t]})}))}),e.required()},"createStatusValidationSchema"),Fge=n_.default.object({id:n_.default.string().valid(...Uge).required(),status:Bge()});o(zW,"validateStatus")});var NR={};Oe(NR,{DEFAULT_STATUS_ID:()=>r_,STATUS_IDS:()=>AR,Status:()=>fa,clear:()=>MP,get:()=>vP,set:()=>UP});function i_(){return LP||(LP=Je({database:"system",table:"hdb_status",replicate:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"status"},{name:"__createdtime__"},{name:"__updatedtime__"}]})),LP}function MP({id:e}){return s_.debug?.("clearStatus",e),i_().delete(e)}function kge(){return s_.debug?.("getAllStatus"),i_().get({})}function vP({id:e}){return e?(s_.debug?.("getStatus",e),i_().get(e)):(s_.debug?.("getStatus","all"),kge())}function UP({status:e,id:t=r_}){let r=zW({status:e,id:t});if(r)throw(0,IR.handleHDBError)(r,r.message,Hge.BAD_REQUEST);return s_.debug?.("setStatus",t,e),i_().put(t,{status:e})}var IR,JW,Hge,LP,fa,s_,Lf=ue(()=>{De();IR=w(ge()),JW=w(hi());jW();bR();bR();({HTTP_STATUS_CODES:Hge}=IR.hdbErrors);o(i_,"getStatusTable");fa={get primaryStore(){return i_().primaryStore}},s_=(0,JW.loggerWithTag)("status");o(MP,"clearStatus");o(kge,"getAllStatus");o(vP,"getStatus");o(UP,"setStatus")});var XW=M((oHe,QW)=>{"use strict";var xP=class{static{o(this,"PermissionTableResponseObject")}constructor(t,r,n=[],s=[]){this.schema=t,this.table=r,this.required_table_permissions=n,this.required_attribute_permissions=s}};QW.exports=xP});var ez=M((cHe,ZW)=>{"use strict";var BP=class{static{o(this,"PermissionAttributeResponseObject")}constructor(t,r=[]){this.attribute_name=t,this.required_permissions=r}};ZW.exports=BP});var HP=M((uHe,rz)=>{"use strict";var tz=XW(),qge=ez(),{HDB_ERROR_MSGS:Gge}=Vr(),FP=class{static{o(this,"PermissionResponseObject")}constructor(){this.error=Gge.OP_AUTH_PERMS_ERROR,this.unauthorized_access={},this.invalid_schema_items=[]}handleUnauthorizedItem(t){return this.invalid_schema_items=[],this.unauthorized_access=[t],this}handleInvalidItem(t){return this.invalid_schema_items=[t],this.unauthorized_access=[],this}addInvalidItem(t,r,n){if(r&&n){let s=`${r}_${n}`;if(this.unauthorized_access[s])return}this.invalid_schema_items.push(t)}addUnauthorizedTable(t,r,n){let s=new tz(t,r,n),i=`${t}_${r}`;this.unauthorized_access[i]=s}addUnauthorizedAttributes(t,r,n,s){let i=[];t.forEach(c=>{let l=new qge(c,s[c]);i.push(l)});let a=`${r}_${n}`;if(this.unauthorized_access[a])this.unauthorized_access[a].required_attribute_permissions=i;else{let c=new tz(r,n,[],i);this.unauthorized_access[a]=c}}getPermsResponse(){let t=Object.values(this.unauthorized_access);return t.length>0||this.invalid_schema_items.length>0?(this.unauthorized_access=t,this):null}};rz.exports=FP});var PR=M((fHe,Sz)=>{"use strict";var kP=qn(),wR=ln(),js=bp(),c_=rc(),qP=vl(),$ge=zO(),Vge=c1(),l_=$n(),OR=Zh(),Cr=j(),Kge=ZO(),Yge=hf(),Wge=NC(),zge=BT(),jge=CC(),Jge=PC(),Qge=qT(),Xge=$T(),GP=VT(),ma=se(),Zge=kK(),$P=jT(),iz=Oc(),yn=(F(),v(K)),oz=eW(),eSe=ra(),az=(qd(),v(ip)),cz=(mR(),v(Yp)),lz=_t(),Er=yP(),tSe=require("alasql"),uz=RR(),dz=Jp(),Mf=_n(),fz=(mf(),v(ff)),VP=(DP(),v(PP)),KP=(Lf(),v(NR)),mz=HP(),{handleHDBError:jn,hdbErrors:hz}=ge(),{HDB_ERROR_MSGS:tn,HTTP_STATUS_CODES:o_}=hz,{cleanupOrphanBlobs:rSe}=bp(),X=new Map,pz="delete",Lc="insert",Js="read",pu="update",a_="describe",nz=c_.describeSchema.name,sz=c_.describeTable.name,_z={delete:!0,deleteRecord:!0,update:!0,updateData:!0,dropAttribute:!0,dropTable:!0,dropSchema:!0,upsert:!0,upsertData:!0},nSe={insert:!0,delete:!0,deleteRecord:!0,update:!0,updateData:!0,upsert:!0,upsertData:!0},sSe="catchup",iSe="handleGetJob",oSe="handleGetJobsByStartDate",CR={CSV_DATA_LOAD:"csvDataLoad",CSV_URL_LOAD:"csvURLLoad",CSV_FILE_LOAD:"csvFileLoad",IMPORT_FROM_S3:"importFromS3"},aSe=[js.createTable.name,js.createAttribute.name,js.dropTable.name,js.dropAttribute.name],Ez={EXPORT_TO_S3:"export_to_s3",EXPORT_LOCAL:"export_local"},ee=class{static{o(this,"permission")}constructor(t,r){this.requires_su=t,this.perms=r}};X.set(kP.insert.name,new ee(!1,[Lc]));X.set(kP.update.name,new ee(!1,[pu]));X.set(kP.upsert.name,new ee(!1,[Lc,pu]));X.set(wR.searchByConditions.name,new ee(!1,[Js]));X.set(wR.searchByHash.name,new ee(!1,[Js]));X.set(wR.searchByValue.name,new ee(!1,[Js]));X.set(wR.search.name,new ee(!1,[Js]));X.set(js.createSchema.name,new ee(!0,[]));X.set(js.createTable.name,new ee(!0,[]));X.set(js.createAttribute.name,new ee(!1,[Lc]));X.set(js.dropSchema.name,new ee(!0,[]));X.set(js.dropTable.name,new ee(!0,[]));X.set(js.dropAttribute.name,new ee(!0,[]));X.set(c_.describeSchema.name,new ee(!1,[Js]));X.set(c_.describeTable.name,new ee(!1,[Js]));X.set(qP.deleteRecord.name,new ee(!1,[pz]));X.set(l_.addUser.name,new ee(!0,[]));X.set(l_.alterUser.name,new ee(!0,[]));X.set(l_.dropUser.name,new ee(!0,[]));X.set(l_.listUsersExternal.name,new ee(!0,[]));X.set(OR.listRoles.name,new ee(!0,[]));X.set(OR.addRole.name,new ee(!0,[]));X.set(OR.alterRole.name,new ee(!0,[]));X.set(OR.dropRole.name,new ee(!0,[]));X.set(Kge.name,new ee(!0,[]));X.set(Yge.name,new ee(!0,[]));X.set(Wge.name,new ee(!0,[]));X.set(zge.name,new ee(!0,[]));X.set(jge.name,new ee(!0,[]));X.set(Jge.name,new ee(!0,[]));X.set(GP.setRoutes.name,new ee(!0,[]));X.set(GP.getRoutes.name,new ee(!0,[]));X.set(GP.deleteRoutes.name,new ee(!0,[]));X.set(lz.setConfiguration.name,new ee(!0,[]));X.set(Qge.clusterStatus.name,new ee(!0,[]));X.set(Xge.name,new ee(!0,[]));X.set($P.getFingerprint.name,new ee(!0,[]));X.set($P.setLicense.name,new ee(!0,[]));X.set(qP.deleteFilesBefore.name,new ee(!0,[]));X.set(qP.deleteAuditLogsBefore.name,new ee(!0,[]));X.set(iz.restart.name,new ee(!0,[]));X.set(iz.restartService.name,new ee(!0,[]));X.set($ge.name,new ee(!0,[]));X.set(Vge.name,new ee(!0,[Js]));X.set(rSe.name,new ee(!0,[]));X.set(eSe.systemInformation.name,new ee(!0,[]));X.set(lz.getConfiguration.name,new ee(!0,[]));X.set(uz.readTransactionLog.name,new ee(!0,[]));X.set(uz.deleteTransactionLogsBefore.name,new ee(!0,[]));X.set(dz.installModules.name,new ee(!0,[]));X.set(dz.auditModules.name,new ee(!0,[]));X.set(Mf.createCsr.name,new ee(!0,[]));X.set(Mf.signCertificate.name,new ee(!0,[]));X.set(Mf.listCertificates.name,new ee(!0,[]));X.set(Mf.addCertificate.name,new ee(!0,[]));X.set(Mf.removeCertificate.name,new ee(!0,[]));X.set(Mf.getKey.name,new ee(!0,[]));X.set(fz.addNodeBack.name,new ee(!0,[]));X.set(fz.removeNodeBack.name,new ee(!0,[]));X.set(VP.getOp.name,new ee(!1,[Js]));X.set(VP.listMetricsOp.name,new ee(!1,[Js]));X.set(VP.describeMetricOp.name,new ee(!1,[Js]));X.set(KP.clear.name,new ee(!0,[]));X.set(KP.get.name,new ee(!0,[]));X.set(KP.set.name,new ee(!0,[]));X.set(az.createTokens.name,new ee(!1,[]));X.set(az.refreshOperationToken.name,new ee(!1,[]));X.set(cz.login.name,new ee(!1,[]));X.set(cz.logout.name,new ee(!1,[]));X.set(Er.customFunctionsStatus.name,new ee(!0,[]));X.set(Er.getCustomFunctions.name,new ee(!0,[]));X.set(Er.getComponents.name,new ee(!0,[]));X.set(Er.getComponentFile.name,new ee(!0,[]));X.set(Er.setComponentFile.name,new ee(!0,[]));X.set(Er.dropComponent.name,new ee(!0,[]));X.set(Er.getCustomFunction.name,new ee(!0,[]));X.set(Er.setCustomFunction.name,new ee(!0,[]));X.set(Er.dropCustomFunction.name,new ee(!0,[]));X.set(Er.addComponent.name,new ee(!0,[]));X.set(Er.dropCustomFunctionProject.name,new ee(!0,[]));X.set(Er.packageComponent.name,new ee(!0,[]));X.set(Er.deployComponent.name,new ee(!0,[]));X.set(Er.addSSHKey.name,new ee(!0,[]));X.set(Er.updateSSHKey.name,new ee(!0,[]));X.set(Er.deleteSSHKey.name,new ee(!0,[]));X.set(Er.listSSHKeys.name,new ee(!0,[]));X.set(Er.setSSHKnownHosts.name,new ee(!0,[]));X.set(Er.getSSHKnownHosts.name,new ee(!0,[]));X.set($P.getRegistrationInfo.name,new ee(!1,[]));X.set(l_.userInfo.name,new ee(!1,[]));X.set(c_.describeAll.name,new ee(!1,[]));X.set(iSe,new ee(!1,[]));X.set(oSe,new ee(!0,[]));X.set(sSe,new ee(!0,[]));X.set(CR.CSV_DATA_LOAD,new ee(!1,[Lc,pu]));X.set(CR.CSV_URL_LOAD,new ee(!1,[Lc,pu]));X.set(CR.CSV_FILE_LOAD,new ee(!1,[Lc,pu]));X.set(CR.IMPORT_FROM_S3,new ee(!1,[Lc,pu]));X.set(Ez.EXPORT_TO_S3,new ee(!0,[]));X.set(Ez.EXPORT_LOCAL,new ee(!0,[]));X.set(yn.VALID_SQL_OPS_ENUM.DELETE,new ee(!1,[pz]));X.set(yn.VALID_SQL_OPS_ENUM.SELECT,new ee(!1,[Js]));X.set(yn.VALID_SQL_OPS_ENUM.INSERT,new ee(!1,[Lc]));X.set(yn.VALID_SQL_OPS_ENUM.UPDATE,new ee(!1,[pu]));Sz.exports={verifyPerms:lSe,verifyPermsAst:cSe,verifyBulkLoadAttributePerms:dSe};function cSe(e,t,r){if(ma.isEmptyOrZeroLength(e))throw Cr.info("verify_perms_ast has an empty user parameter"),jn(new Error);if(ma.isEmptyOrZeroLength(t))throw Cr.info("verify_perms_ast has an empty user parameter"),jn(new Error);if(ma.isEmptyOrZeroLength(r))throw Cr.info("verify_perms_ast has a null operation parameter"),jn(new Error);try{let n=new mz,s=new Zge(e),i=s.getSchemas(),a=new Map;if((!i||i.length===0)&&s.affected_attributes&&s.affected_attributes.size>0)throw Cr.info("No schemas defined in verifyPermsAst(), will not continue."),jn(new Error);let c=!!t.role.permission.super_user,l=i.includes("system");if(l&&_z[r])throw jn(new Error,tn.DROP_SYSTEM,o_.FORBIDDEN);if(c&&!l)return null;let u=oz.getRolePermissions(t.role);t.role.permission=u,!c&&e instanceof tSe.yy.Select&&(e=s.updateAttributeWildcardsForRolePerms(u));for(let f=0;f<i.length;f++){let m=s.getTablesBySchemaName(i[f]);m&&a.set(i[f],m)}let d=gz(t,r,a,n);return d||(a.forEach((f,m)=>{for(let h=0;h<f.length;h++){let p=s.getAttributesBySchemaTableName(m,f[h]),E=WP(t.role.permission,m,f[h]);YP(p,E,r,f[h],m,n)}}),n.getPermsResponse())}catch(n){throw jn(n)}}o(cSe,"verifyPermsAst");function lSe(e,t){if(e===null||t===null||e.hdb_user===void 0||e.hdb_user===null)throw Cr.info("null required parameter in verifyPerms"),jn(new Error,tn.DEFAULT_INVALID_REQUEST,o_.BAD_REQUEST);let r;t instanceof Function?r=t.name:r=t;let n=e.action,s=e.schema??e.database,i=e.table,a=new Map;s&&i&&a.set(s,[i]);let c=new mz;if(ma.isEmptyOrZeroLength(e.hdb_user?.role)||ma.isEmptyOrZeroLength(e.hdb_user?.role?.permission))return Cr.info(`User ${e.hdb_user?.username} has no role or permissions.  Please assign the user a valid role.`),c.handleUnauthorizedItem(tn.USER_HAS_NO_PERMS(e.hdb_user?.username));let l=!!e.hdb_user?.role?.permission?.super_user,u=e.hdb_user?.role?.permission?.structure_user,d=a.has(yn.SYSTEM_SCHEMA_NAME)||s===yn.SYSTEM_SCHEMA_NAME;if(l&&d&&nSe[e.operation]&&(i===yn.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME||i===yn.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME||i===yn.SYSTEM_TABLE_NAMES.USER_TABLE_NAME))return null;if(d&&_z[r])throw jn(new Error,tn.DROP_SYSTEM,o_.FORBIDDEN);if(l&&!d||u===!0&&(r===js.createSchema.name||r===js.dropSchema.name))return null;if(aSe.indexOf(r)>=0&&(u===!0||Array.isArray(u)))return u===!0||u.indexOf(s)>=0?null:c.handleUnauthorizedItem(`User does not have access to perform '${e.operation}' against schema '${s}'`);let f=oz.getRolePermissions(e.hdb_user?.role);if(e.hdb_user?.role&&(e.hdb_user.role.permission=f),(r===nz||r===sz)&&!f.super_user){if(s===yn.SYSTEM_SCHEMA_NAME)return c.handleUnauthorizedItem(tn.SCHEMA_PERM_ERROR(s));if(r===nz&&(!f[s]||!f[s][a_]))return c.handleInvalidItem(tn.SCHEMA_NOT_FOUND(s));if(r===sz&&(!f[s]||!f[s].tables[i]||!f[s].tables[i][a_]))return c.handleInvalidItem(tn.TABLE_NOT_FOUND(s,i))}let m=gz(e.hdb_user,r,a,c,n);if(m)return m;if(X.get(r)&&X.get(r).perms.length===0)return null;if(!l&&e.get_attributes&&yn.SEARCH_WILDCARDS.includes(e.get_attributes[0])){let E=[],g=f[s].tables[i];g[yn.PERMS_CRUD_ENUM.READ]&&(g.attribute_permissions.length>0?g.attribute_permissions.filter(T=>T[yn.PERMS_CRUD_ENUM.READ]).forEach(T=>{E.push(T.attribute_name)}):E=global.hdb_schema[s][i].attributes.map(y=>y.attribute),e.get_attributes=E)}let h=uSe(e),p=WP(e.hdb_user?.role?.permission,s,i);return YP(h,p,r,i,s,c,n),c.getPermsResponse()}o(lSe,"verifyPerms");function gz(e,t,r,n,s){if(ma.arrayHasEmptyValues([e,t,r]))throw Cr.info("hasPermissions has an invalid parameter"),jn(new Error);let i=r.has("system"),a=e.role.permission;if(a.super_user&&(!i||X.get(t).requires_su))return null;if(!X.get(t))throw Cr.info(`operation ${t} not found.`),jn(new Error,tn.OP_NOT_FOUND(t),o_.BAD_REQUEST);if(X.get(t)&&X.get(t).requires_su)return Cr.info(`operation ${t} requires SU permissions.`),n.handleUnauthorizedItem(tn.OP_IS_SU_ONLY(t));let c=r.keys();for(let l of c){try{if(l&&!a[l]||a[l][a_]===!1){n.addInvalidItem(tn.SCHEMA_NOT_FOUND(l));continue}}catch{n.addInvalidItem(tn.SCHEMA_NOT_FOUND(l));continue}let u=r.get(l);for(let d of u){let f=a[l].tables[d];if(!f||f[a_]===!1)n.addInvalidItem(tn.TABLE_NOT_FOUND(l,d));else try{let m=[],h=X.get(t).perms;!ma.isEmpty(s)&&h.includes(s)&&(h=[s]);for(let p=0;p<h.length;p++){let E=h[p],g=f[E];(g==null||g===!1)&&(Cr.info(`Required ${E} permission not found for ${t} ${s?`${s} `:""}operation in role ${e.role.id}`),m.push(E))}m.length>0&&n.addUnauthorizedTable(l,d,m)}catch(m){let h=tn.UNKNOWN_OP_AUTH_ERROR(t,l,d);throw Cr.error(h),Cr.error(m),jn(hz.CHECK_LOGS_WRAPPER(h))}}}return r.size<2?n.getPermsResponse():null}o(gz,"hasPermissions");function YP(e,t,r,n,s,i,a){if(!e||!t)throw Cr.info("no attributes specified in checkAttributePerms."),jn(new Error);let c=X.get(r).perms;if(!c||c==="")throw Cr.info(`no permissions found for ${r} in checkAttributePerms().`),jn(new Error);if(ma.isEmptyOrZeroLength(t))return Cr.info("No role permissions set (this is OK)."),null;a&&c.includes(a)&&(c=[a]);let l={};for(let d of e){let f=t.get(d);if(f){if(f[a_]===!1){i.addInvalidItem(tn.ATTR_NOT_FOUND(s,n,d),s,n);continue}if(c)for(let m of c){if(yn.TIME_STAMP_NAMES.includes(f.attribute_name)&&m!==Js)throw jn(new Error,tn.SYSTEM_TIMESTAMP_PERMS_ERR,o_.FORBIDDEN);f[m]===!1&&(l[f.attribute_name]?l[f.attribute_name].push(m):l[f.attribute_name]=[m])}}else i.addInvalidItem(tn.ATTR_NOT_FOUND(s,n,d),s,n)}let u=Object.keys(l);u.length>0&&i.addUnauthorizedAttributes(u,s,n,l)}o(YP,"checkAttributePerms");function uSe(e){let t=new Set;try{if(e.action)return t;if(e.operation===yn.OPERATIONS_ENUM.SEARCH_BY_CONDITIONS&&e.conditions.forEach(r=>{t.add(r.search_attribute)}),e&&e.search_attribute&&t.add(e.search_attribute),!e.records||e.records.length===0){if(!e.get_attributes||!e.get_attributes.length===0)return t;for(let r=0;r<e.get_attributes.length;r++)t.add(e.get_attributes[r])}else for(let r=0;r<e.records.length;r++){let n=Object.keys(e.records[r]);for(let s=0;s<n.length;s++)t.add(n[s])}}catch(r){Cr.info(r)}return t}o(uSe,"getRecordAttributes");function WP(e,t,r){let n=new Map;if(ma.isEmpty(e))return Cr.info("no hdb_user specified in getAttributePermissions"),n;if(e.super_user||!t||!r)return n;try{e[t].tables[r].attribute_permissions.forEach(s=>{n.has(s.attribute_name)||n.set(s.attribute_name,s)})}catch{Cr.info(`No attribute permissions found for schema ${t} and table ${r}.`)}return n}o(WP,"getAttributePermissions");function dSe(e,t,r,n,s,i,a){let c=new Set(i),l=WP(e,n,s);YP(c,l,t,s,n,a,r)}o(dSe,"verifyBulkLoadAttributePerms")});var LR=M((hHe,bz)=>{"use strict";bz.exports={evaluateSQL:bSe,processAST:Az,convertSQLToAST:yz,checkASTPermissions:Rz};var fSe=qn(),Tz=require("util"),mSe=Tz.callbackify(fSe.insert),hSe=ln().search,pSe=XG().update,_Se=Tz.callbackify(pSe),ESe=e$().convertDelete,Mc=require("alasql"),gSe=PR(),DR=j(),SSe=qg(),TSe=se(),u_=(F(),v(K)),{hdbErrors:RSe,handleHDBError:zP}=ge(),{HTTP_STATUS_CODES:jP}=RSe;SSe(Mc);var ySe=403,ASe="There was a problem performing this insert. Please check the logs and try again.",JP=class{static{o(this,"ParsedSQLObject")}constructor(){this.ast=void 0,this.variant=void 0,this.permissions_checked=!1}};function bSe(e,t){let r=e.parsed_sql_object;if(!r){r=yz(e.sql);let n,s=r.ast.statements[0];if(s instanceof Mc.yy.Insert?n=s.into.databaseid:s instanceof Mc.yy.Select?n=s.from?s.from[0].databaseid:null:s instanceof Mc.yy.Update||s instanceof Mc.yy.Delete?n=s.table.databaseid:DR.error("AST in evaluateSQL is not a valid SQL type."),!(s instanceof Mc.yy.Select)&&TSe.isEmptyOrZeroLength(n))return t("No schema specified",null)}Az(e,r,(n,s)=>{if(n)return t(n);t(null,s)})}o(bSe,"evaluateSQL");function Rz(e,t){let r;try{r=gSe.verifyPermsAst(t.ast.statements[0],e.hdb_user,t.variant),t.permissions_checked=!0}catch(n){throw n}return r||null}o(Rz,"checkASTPermissions");function yz(e){let t=new JP;if(!e)throw zP(new Error,"The 'sql' parameter is missing from the request body",jP.BAD_REQUEST);try{let r=e.trim(),n=Mc.parse(r),s=r.split(" ")[0].toLowerCase();t.ast=n,t.variant=s}catch(r){let n=r.message.split(`
+`)}catch{d=". Unable to get known hosts from github.com. Set your known hosts manually using set_ssh_known_hosts."}a&&await Ie.appendFile(da,a);let f=await Mi(e);return f.message=`Added ssh key: ${r}${d}`,f}o(gge,"addSSHKey");async function Sge(e){let t=zn.updateSSHKeyValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{name:r,key:n}=e;Wt.trace("updating ssh key",r);let s=Ce.join(Dc,r+".key");if(!await Ie.pathExists(s))throw new Error("Key does not exist. Use add_ssh_key");await Ie.outputFile(s,n);let i=await Mi(e);return i.message=`Updated ssh key: ${r}`,i}o(Sge,"updateSSHKey");async function Tge(e){let t=zn.deleteSSHKeyValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{name:r}=e;Wt.trace("deleting ssh key",r);let n=Ce.join(Dc,r+".key"),s=Ce.join(Dc,"config");if(!await Ie.pathExists(n))throw new Error("Key does not exist");let i=await Ie.readFile(s,"utf8"),a=new RegExp(`#${r}[\\S\\s]*?IdentitiesOnly yes`,"g");i=i.replace(a,""),await Ie.outputFile(s,i),Ie.removeSync(n);let c=await Mi(e);return c.message=`Deleted ssh key: ${r}`,c}o(Tge,"deleteSSHKey");async function Rge(e){let t=[];return await Ie.pathExists(Dc)&&(await Ie.readdir(Dc)).forEach(r=>{r!="known_hosts"&&r!="config"&&t.push({name:r.split(".")[0]})}),t}o(Rge,"listSSHKeys");async function yge(e){let t=zn.setSSHKnownHostsValidator(e);if(t)throw zt(t,t.message,jt.BAD_REQUEST);let{known_hosts:r}=e;await Ie.outputFile(da,r);let n=await Mi(e);return n.message="Known hosts successfully set",n}o(yge,"setSSHKnownHosts");async function Age(e){return await Ie.pathExists(da)?{known_hosts:await Ie.readFile(da,"utf8")}:{known_hosts:null}}o(Age,"getSSHKnownHosts");or.customFunctionsStatus=sge;or.getCustomFunctions=ige;or.getCustomFunction=oge;or.setCustomFunction=age;or.dropCustomFunction=cge;or.addComponent=lge;or.dropCustomFunctionProject=uge;or.packageComponent=dge;or.deployComponent=fge;or.getComponents=hge;or.getComponentFile=pge;or.setComponentFile=_ge;or.dropComponent=Ege;or.addSSHKey=gge;or.updateSSHKey=Sge;or.deleteSSHKey=Tge;or.listSSHKeys=Rge;or.setSSHKnownHosts=yge;or.getSSHKnownHosts=Age});var IP=M((kFe,vW)=>{"use strict";var zs=require("joi"),MW=ft();vW.exports={readTransactionLogValidator:bge,deleteTransactionLogsBeforeValidator:Ige};function bge(e){let t=zs.object({schema:zs.string(),database:zs.string(),table:zs.string().required(),from:zs.date().timestamp(),to:zs.date().timestamp(),limit:zs.number().min(1)});return MW.validateBySchema(e,t)}o(bge,"readTransactionLogValidator");function Ige(e){let t=zs.object({schema:zs.string(),database:zs.string(),table:zs.string().required(),timestamp:zs.date().timestamp().required()});return MW.validateBySchema(e,t)}o(Ige,"deleteTransactionLogsBeforeValidator")});var RR=M((GFe,kW)=>{"use strict";var NP=(F(),v(K)),e_=nr(),UW=se(),xW=oe(),BW=no(),FW=j(),{handleHDBError:SR,hdbErrors:Nge}=ge(),{HTTP_STATUS_CODES:TR}=Nge,{readTransactionLogValidator:wge,deleteTransactionLogsBeforeValidator:Oge}=IP(),HW=as(),Cge="Logs successfully deleted from transaction log.",Pge="All logs successfully deleted from transaction log.";kW.exports={readTransactionLog:Dge,deleteTransactionLogsBefore:Mge};async function Dge(e){let t=wge(e);if(t)throw SR(t,t.message,TR.BAD_REQUEST,void 0,void 0,!0);e.database=e.database??e.schema??"data";let r=UW.checkSchemaTableExist(e.database,e.table);if(r)throw SR(new Error,r,TR.NOT_FOUND,void 0,void 0,!0);return xW.get(NP.CONFIG_PARAMS.CLUSTERING_ENABLED)?await Lge(e):(FW.info("Reading HarperDB logs used by Plexus"),(e.from||e.to)&&(e.search_type="timestamp",e.search_values=[e.from??0],e.to&&(e.search_values[1]=e.to)),HW.readAuditLog(e))}o(Dge,"readTransactionLog");async function*Lge(e){let t=BW.createNatsTableStreamName(e.database,e.table),r=await e_.viewStreamIterator(t,parseInt(e.from),e.limit);for await(let n of r){let s=Math.floor(n?.nats_timestamp/1e6);if(e.to&&s>e.to)break;let i={operation:n?.entry?.operation,user:n?.entry?.__origin?.user,timestamp:s,records:n?.entry?.records,attributes:n?.entry?.attributes};n?.entry?.operation===NP.OPERATIONS_ENUM.DELETE&&(i.hash_values=n?.entry?.hash_values),yield i}}o(Lge,"readTransactionLogNats");async function Mge(e){let t=Oge(e);if(t)throw SR(t,t.message,TR.BAD_REQUEST,void 0,void 0,!0);if(e.database=e.database??e.schema??"data",!xW.get(NP.CONFIG_PARAMS.CLUSTERING_ENABLED))return FW.info("Delete transaction logs called for Plexus"),HW.deleteAuditLogsBefore(e);let{database:r,table:n,timestamp:s}=e,i=UW.checkSchemaTableExist(r,n);if(i)throw SR(new Error,i,TR.NOT_FOUND,void 0,void 0,!0);let a=BW.createNatsTableStreamName(r,n),{jsm:c}=await e_.getNATSReferences(),l=await e_.getStreamInfo(a),u=new Date(l.state.first_ts).getTime();if(s<=u)return`No transactions exist before: ${s}`;let d=Cge,f,m=new Date(l.state.last_ts).getTime();return s>m?(f=l.state.last_seq+1,d=Pge):f=(await e_.viewStream(a,parseInt(s),1))[0].nats_sequence,await e_.purgeTableStream(r,n,{seq:f}),d}o(Mge,"deleteTransactionLogsBefore")});var PP={};Oe(PP,{describeMetric:()=>YW,describeMetricOp:()=>CP,get:()=>VW,getOp:()=>wP,listMetrics:()=>KW,listMetricsOp:()=>OP});async function vge(e){return(await aS().get(e)).hostname}function qW(e,t){return e.length===0||e.includes(t)}function wP(e){return t_.trace?.("get_analytics request:",e),VW(e.metric,e.get_attributes,e.start_time,e.end_time,e.conditions)}function $W(e){return"conditions"in e?{...e,conditions:e.conditions.map($W)}:{attribute:e.search_attribute??e.attribute,comparator:e.search_type??e.comparator,value:e.search_value??e.value}}async function VW(e,t,r,n,s){let i=[{attribute:"metric",comparator:"equals",value:e}];s&&i.push(...s.map($W));let a=t??[];qW(a,"id")||a.push("id"),r&&i.push({attribute:"id",comparator:"greater_than_equal",value:r}),n&&i.push({attribute:"id",comparator:"less_than",value:n});let c={conditions:i,allowConditionsOnDynamicAttributes:!0};return a.length>0&&(c.select=a),t_.trace?.("get_analytics hdb_analytics.search request:",JSON.stringify(c)),(await databases.system.hdb_analytics.search(c)).map(async u=>{let d=u.id[1];return u.id=u.id[0],qW(a,"node")&&(t_.trace?.(`get_analytics lookup hostname for nodeId: ${d}`),u.node=await vge(d)),t_.trace?.("get_analytics result:",JSON.stringify(u)),u})}function OP(e){return KW(e.metric_types)}async function KW(e=["builtin"]){let t=[],r=Object.values(jo);if(e.includes("builtin")&&(t=r),e.includes("custom")){let n=r.map(c=>({attribute:"metric",comparator:"not_equal",value:c})),s={select:["metric"],conditions:n},i=new Set,a=await databases.system.hdb_analytics.search(s);for await(let c of a)i.add(c.metric);t.push(...Array.from(i.values()))}return t}function CP(e){return YW(e.metric)}async function YW(e){let t={conditions:[{attribute:"metric",comparator:"equals",value:e}],sort:{attribute:"id",descending:!0},limit:1},r=databases.system.hdb_analytics.search(t),n=[{name:"node",type:"string"}];for await(let s of r){for(let a in s)n.push({name:a,type:typeof s[a]});let i={attributes:n};return t_.trace?.("describe_metric result:",JSON.stringify(i)),i}return{}}var GW,t_,DP=ue(()=>{GW=w(j());nw();sw();t_=(0,GW.forComponent)("analytics").conditional;o(vge,"lookupHostname");o(qW,"isSelected");o(wP,"getOp");o($W,"conformCondition");o(VW,"get");o(OP,"listMetricsOp");o(KW,"listMetrics");o(CP,"describeMetricOp");o(YW,"describeMetric")});var yR,AR,r_,bR=ue(()=>{yR={primary:{allowedValues:null},maintenance:{allowedValues:null},availability:{allowedValues:["Available","Unavailable"]}},AR=Object.keys(yR),r_="primary"});function zW(e){return WW.validateBySchema(e,Fge)}var n_,WW,Uge,xge,Bge,Fge,jW=ue(()=>{n_=w(require("joi")),WW=w(ft());bR();Uge=AR,xge=Object.entries(yR).reduce((e,[t,r])=>(r.allowedValues&&(e[t]=`Status "${t}" only accepts these values: ${r.allowedValues.join(", ")}`),e),{}),Bge=o(()=>{let e=n_.default.string().min(1).max(512);return Object.entries(yR).forEach(([t,r])=>{r.allowedValues&&(e=e.when("id",{is:t,then:n_.default.string().valid(...r.allowedValues).messages({"any.only":xge[t]})}))}),e.required()},"createStatusValidationSchema"),Fge=n_.default.object({id:n_.default.string().valid(...Uge).required(),status:Bge()});o(zW,"validateStatus")});var NR={};Oe(NR,{DEFAULT_STATUS_ID:()=>r_,STATUS_IDS:()=>AR,Status:()=>fa,clear:()=>MP,get:()=>vP,set:()=>UP});function i_(){return LP||(LP=Je({database:"system",table:"hdb_status",replicate:!1,attributes:[{name:"id",isPrimaryKey:!0},{name:"status"},{name:"__createdtime__"},{name:"__updatedtime__"}]})),LP}function MP({id:e}){return s_.debug?.("clearStatus",e),i_().delete(e)}function kge(){return s_.debug?.("getAllStatus"),i_().get({})}function vP({id:e}){return e?(s_.debug?.("getStatus",e),i_().get(e)):(s_.debug?.("getStatus","all"),kge())}function UP({status:e,id:t=r_}){let r=zW({status:e,id:t});if(r)throw(0,IR.handleHDBError)(r,r.message,Hge.BAD_REQUEST);return s_.debug?.("setStatus",t,e),i_().put(t,{status:e})}var IR,JW,Hge,LP,fa,s_,Lf=ue(()=>{De();IR=w(ge()),JW=w(hi());jW();bR();bR();({HTTP_STATUS_CODES:Hge}=IR.hdbErrors);o(i_,"getStatusTable");fa={get primaryStore(){return i_().primaryStore}},s_=(0,JW.loggerWithTag)("status");o(MP,"clearStatus");o(kge,"getAllStatus");o(vP,"getStatus");o(UP,"setStatus")});var XW=M((oHe,QW)=>{"use strict";var xP=class{static{o(this,"PermissionTableResponseObject")}constructor(t,r,n=[],s=[]){this.schema=t,this.table=r,this.required_table_permissions=n,this.required_attribute_permissions=s}};QW.exports=xP});var ez=M((cHe,ZW)=>{"use strict";var BP=class{static{o(this,"PermissionAttributeResponseObject")}constructor(t,r=[]){this.attribute_name=t,this.required_permissions=r}};ZW.exports=BP});var HP=M((uHe,rz)=>{"use strict";var tz=XW(),qge=ez(),{HDB_ERROR_MSGS:Gge}=Vr(),FP=class{static{o(this,"PermissionResponseObject")}constructor(){this.error=Gge.OP_AUTH_PERMS_ERROR,this.unauthorized_access={},this.invalid_schema_items=[]}handleUnauthorizedItem(t){return this.invalid_schema_items=[],this.unauthorized_access=[t],this}handleInvalidItem(t){return this.invalid_schema_items=[t],this.unauthorized_access=[],this}addInvalidItem(t,r,n){if(r&&n){let s=`${r}_${n}`;if(this.unauthorized_access[s])return}this.invalid_schema_items.push(t)}addUnauthorizedTable(t,r,n){let s=new tz(t,r,n),i=`${t}_${r}`;this.unauthorized_access[i]=s}addUnauthorizedAttributes(t,r,n,s){let i=[];t.forEach(c=>{let l=new qge(c,s[c]);i.push(l)});let a=`${r}_${n}`;if(this.unauthorized_access[a])this.unauthorized_access[a].required_attribute_permissions=i;else{let c=new tz(r,n,[],i);this.unauthorized_access[a]=c}}getPermsResponse(){let t=Object.values(this.unauthorized_access);return t.length>0||this.invalid_schema_items.length>0?(this.unauthorized_access=t,this):null}};rz.exports=FP});var PR=M((fHe,Sz)=>{"use strict";var kP=qn(),wR=ln(),js=bp(),c_=rc(),qP=vl(),$ge=zO(),Vge=c1(),l_=$n(),OR=Zh(),Cr=j(),Kge=ZO(),Yge=hf(),Wge=NC(),zge=BT(),jge=CC(),Jge=PC(),Qge=qT(),Xge=$T(),GP=VT(),ma=se(),Zge=kK(),$P=jT(),iz=Oc(),yn=(F(),v(K)),oz=eW(),eSe=ra(),az=(qd(),v(ip)),cz=(mR(),v(Yp)),lz=_t(),Er=yP(),tSe=require("alasql"),uz=RR(),dz=Jp(),Mf=_n(),fz=(mf(),v(ff)),VP=(DP(),v(PP)),KP=(Lf(),v(NR)),mz=HP(),{handleHDBError:jn,hdbErrors:hz}=ge(),{HDB_ERROR_MSGS:tn,HTTP_STATUS_CODES:o_}=hz,{cleanupOrphanBlobs:rSe}=bp(),X=new Map,pz="delete",Lc="insert",Js="read",pu="update",a_="describe",nz=c_.describeSchema.name,sz=c_.describeTable.name,_z={delete:!0,deleteRecord:!0,update:!0,updateData:!0,dropAttribute:!0,dropTable:!0,dropSchema:!0,upsert:!0,upsertData:!0},nSe={insert:!0,delete:!0,deleteRecord:!0,update:!0,updateData:!0,upsert:!0,upsertData:!0},sSe="catchup",iSe="handleGetJob",oSe="handleGetJobsByStartDate",CR={CSV_DATA_LOAD:"csvDataLoad",CSV_URL_LOAD:"csvURLLoad",CSV_FILE_LOAD:"csvFileLoad",IMPORT_FROM_S3:"importFromS3"},aSe=[js.createTable.name,js.createAttribute.name,js.dropTable.name,js.dropAttribute.name],Ez={EXPORT_TO_S3:"export_to_s3",EXPORT_LOCAL:"export_local"},ee=class{static{o(this,"permission")}constructor(t,r){this.requires_su=t,this.perms=r}};X.set(kP.insert.name,new ee(!1,[Lc]));X.set(kP.update.name,new ee(!1,[pu]));X.set(kP.upsert.name,new ee(!1,[Lc,pu]));X.set(wR.searchByConditions.name,new ee(!1,[Js]));X.set(wR.searchByHash.name,new ee(!1,[Js]));X.set(wR.searchByValue.name,new ee(!1,[Js]));X.set(wR.search.name,new ee(!1,[Js]));X.set(js.createSchema.name,new ee(!0,[]));X.set(js.createTable.name,new ee(!0,[]));X.set(js.createAttribute.name,new ee(!1,[Lc]));X.set(js.dropSchema.name,new ee(!0,[]));X.set(js.dropTable.name,new ee(!0,[]));X.set(js.dropAttribute.name,new ee(!0,[]));X.set(c_.describeSchema.name,new ee(!1,[Js]));X.set(c_.describeTable.name,new ee(!1,[Js]));X.set(qP.deleteRecord.name,new ee(!1,[pz]));X.set(l_.addUser.name,new ee(!0,[]));X.set(l_.alterUser.name,new ee(!0,[]));X.set(l_.dropUser.name,new ee(!0,[]));X.set(l_.listUsersExternal.name,new ee(!0,[]));X.set(OR.listRoles.name,new ee(!0,[]));X.set(OR.addRole.name,new ee(!0,[]));X.set(OR.alterRole.name,new ee(!0,[]));X.set(OR.dropRole.name,new ee(!0,[]));X.set(Kge.name,new ee(!0,[]));X.set(Yge.name,new ee(!0,[]));X.set(Wge.name,new ee(!0,[]));X.set(zge.name,new ee(!0,[]));X.set(jge.name,new ee(!0,[]));X.set(Jge.name,new ee(!0,[]));X.set(GP.setRoutes.name,new ee(!0,[]));X.set(GP.getRoutes.name,new ee(!0,[]));X.set(GP.deleteRoutes.name,new ee(!0,[]));X.set(lz.setConfiguration.name,new ee(!0,[]));X.set(Qge.clusterStatus.name,new ee(!0,[]));X.set(Xge.name,new ee(!0,[]));X.set($P.getFingerprint.name,new ee(!0,[]));X.set($P.setLicense.name,new ee(!0,[]));X.set(qP.deleteFilesBefore.name,new ee(!0,[]));X.set(qP.deleteAuditLogsBefore.name,new ee(!0,[]));X.set(iz.restart.name,new ee(!0,[]));X.set(iz.restartService.name,new ee(!0,[]));X.set($ge.name,new ee(!0,[]));X.set(Vge.name,new ee(!0,[Js]));X.set(rSe.name,new ee(!0,[]));X.set(eSe.systemInformation.name,new ee(!0,[]));X.set(lz.getConfiguration.name,new ee(!0,[]));X.set(uz.readTransactionLog.name,new ee(!0,[]));X.set(uz.deleteTransactionLogsBefore.name,new ee(!0,[]));X.set(dz.installModules.name,new ee(!0,[]));X.set(dz.auditModules.name,new ee(!0,[]));X.set(Mf.createCsr.name,new ee(!0,[]));X.set(Mf.signCertificate.name,new ee(!0,[]));X.set(Mf.listCertificates.name,new ee(!0,[]));X.set(Mf.addCertificate.name,new ee(!0,[]));X.set(Mf.removeCertificate.name,new ee(!0,[]));X.set(Mf.getKey.name,new ee(!0,[]));X.set(fz.addNodeBack.name,new ee(!0,[]));X.set(fz.removeNodeBack.name,new ee(!0,[]));X.set(VP.getOp.name,new ee(!1,[Js]));X.set(VP.listMetricsOp.name,new ee(!1,[Js]));X.set(VP.describeMetricOp.name,new ee(!1,[Js]));X.set(KP.clear.name,new ee(!0,[]));X.set(KP.get.name,new ee(!0,[]));X.set(KP.set.name,new ee(!0,[]));X.set(az.createTokens.name,new ee(!1,[]));X.set(az.refreshOperationToken.name,new ee(!1,[]));X.set(cz.login.name,new ee(!1,[]));X.set(cz.logout.name,new ee(!1,[]));X.set(Er.customFunctionsStatus.name,new ee(!0,[]));X.set(Er.getCustomFunctions.name,new ee(!0,[]));X.set(Er.getComponents.name,new ee(!0,[]));X.set(Er.getComponentFile.name,new ee(!0,[]));X.set(Er.setComponentFile.name,new ee(!0,[]));X.set(Er.dropComponent.name,new ee(!0,[]));X.set(Er.getCustomFunction.name,new ee(!0,[]));X.set(Er.setCustomFunction.name,new ee(!0,[]));X.set(Er.dropCustomFunction.name,new ee(!0,[]));X.set(Er.addComponent.name,new ee(!0,[]));X.set(Er.dropCustomFunctionProject.name,new ee(!0,[]));X.set(Er.packageComponent.name,new ee(!0,[]));X.set(Er.deployComponent.name,new ee(!0,[]));X.set(Er.addSSHKey.name,new ee(!0,[]));X.set(Er.updateSSHKey.name,new ee(!0,[]));X.set(Er.deleteSSHKey.name,new ee(!0,[]));X.set(Er.listSSHKeys.name,new ee(!0,[]));X.set(Er.setSSHKnownHosts.name,new ee(!0,[]));X.set(Er.getSSHKnownHosts.name,new ee(!0,[]));X.set($P.getRegistrationInfo.name,new ee(!1,[]));X.set(l_.userInfo.name,new ee(!1,[]));X.set(c_.describeAll.name,new ee(!1,[]));X.set(iSe,new ee(!1,[]));X.set(oSe,new ee(!0,[]));X.set(sSe,new ee(!0,[]));X.set(CR.CSV_DATA_LOAD,new ee(!1,[Lc,pu]));X.set(CR.CSV_URL_LOAD,new ee(!1,[Lc,pu]));X.set(CR.CSV_FILE_LOAD,new ee(!1,[Lc,pu]));X.set(CR.IMPORT_FROM_S3,new ee(!1,[Lc,pu]));X.set(Ez.EXPORT_TO_S3,new ee(!0,[]));X.set(Ez.EXPORT_LOCAL,new ee(!0,[]));X.set(yn.VALID_SQL_OPS_ENUM.DELETE,new ee(!1,[pz]));X.set(yn.VALID_SQL_OPS_ENUM.SELECT,new ee(!1,[Js]));X.set(yn.VALID_SQL_OPS_ENUM.INSERT,new ee(!1,[Lc]));X.set(yn.VALID_SQL_OPS_ENUM.UPDATE,new ee(!1,[pu]));Sz.exports={verifyPerms:lSe,verifyPermsAst:cSe,verifyBulkLoadAttributePerms:dSe};function cSe(e,t,r){if(ma.isEmptyOrZeroLength(e))throw Cr.info("verify_perms_ast has an empty user parameter"),jn(new Error);if(ma.isEmptyOrZeroLength(t))throw Cr.info("verify_perms_ast has an empty user parameter"),jn(new Error);if(ma.isEmptyOrZeroLength(r))throw Cr.info("verify_perms_ast has a null operation parameter"),jn(new Error);try{let n=new mz,s=new Zge(e),i=s.getSchemas(),a=new Map;if((!i||i.length===0)&&s.affected_attributes&&s.affected_attributes.size>0)throw Cr.info("No schemas defined in verifyPermsAst(), will not continue."),jn(new Error);let c=!!t.role.permission.super_user,l=i.includes("system");if(l&&_z[r])throw jn(new Error,tn.DROP_SYSTEM,o_.FORBIDDEN);if(c&&!l)return null;let u=oz.getRolePermissions(t.role);t.role.permission=u,!c&&e instanceof tSe.yy.Select&&(e=s.updateAttributeWildcardsForRolePerms(u));for(let f=0;f<i.length;f++){let m=s.getTablesBySchemaName(i[f]);m&&a.set(i[f],m)}let d=gz(t,r,a,n);return d||(a.forEach((f,m)=>{for(let h=0;h<f.length;h++){let p=s.getAttributesBySchemaTableName(m,f[h]),E=WP(t.role.permission,m,f[h]);YP(p,E,r,f[h],m,n)}}),n.getPermsResponse())}catch(n){throw jn(n)}}o(cSe,"verifyPermsAst");function lSe(e,t){if(e===null||t===null||e.hdb_user===void 0||e.hdb_user===null)throw Cr.info("null required parameter in verifyPerms"),jn(new Error,tn.DEFAULT_INVALID_REQUEST,o_.BAD_REQUEST);let r;t instanceof Function?r=t.name:r=t;let n=e.action,s=e.schema??e.database,i=e.table,a=new Map;s&&i&&a.set(s,[i]);let c=new mz;if(ma.isEmptyOrZeroLength(e.hdb_user?.role)||ma.isEmptyOrZeroLength(e.hdb_user?.role?.permission))return Cr.info(`User ${e.hdb_user?.username} has no role or permissions.  Please assign the user a valid role.`),c.handleUnauthorizedItem(tn.USER_HAS_NO_PERMS(e.hdb_user?.username));let l=!!e.hdb_user?.role?.permission?.super_user,u=e.hdb_user?.role?.permission?.structure_user,d=a.has(yn.SYSTEM_SCHEMA_NAME)||s===yn.SYSTEM_SCHEMA_NAME;if(l&&d&&nSe[e.operation]&&(i===yn.SYSTEM_TABLE_NAMES.NODE_TABLE_NAME||i===yn.SYSTEM_TABLE_NAMES.ROLE_TABLE_NAME||i===yn.SYSTEM_TABLE_NAMES.USER_TABLE_NAME))return null;if(d&&_z[r])throw jn(new Error,tn.DROP_SYSTEM,o_.FORBIDDEN);if(l&&!d||u===!0&&(r===js.createSchema.name||r===js.dropSchema.name))return null;if(aSe.indexOf(r)>=0&&(u===!0||Array.isArray(u)))return u===!0||u.indexOf(s)>=0?null:c.handleUnauthorizedItem(`User does not have access to perform '${e.operation}' against schema '${s}'`);let f=oz.getRolePermissions(e.hdb_user?.role);if(e.hdb_user?.role&&(e.hdb_user.role.permission=f),(r===nz||r===sz)&&!f.super_user){if(s===yn.SYSTEM_SCHEMA_NAME)return c.handleUnauthorizedItem(tn.SCHEMA_PERM_ERROR(s));if(r===nz&&(!f[s]||!f[s][a_]))return c.handleInvalidItem(tn.SCHEMA_NOT_FOUND(s));if(r===sz&&(!f[s]||!f[s].tables[i]||!f[s].tables[i][a_]))return c.handleInvalidItem(tn.TABLE_NOT_FOUND(s,i))}let m=gz(e.hdb_user,r,a,c,n);if(m)return m;if(X.get(r)&&X.get(r).perms.length===0)return null;if(!l&&e.get_attributes&&yn.SEARCH_WILDCARDS.includes(e.get_attributes[0])){let E=[],g=f[s].tables[i];g[yn.PERMS_CRUD_ENUM.READ]&&(g.attribute_permissions.length>0?g.attribute_permissions.filter(T=>T[yn.PERMS_CRUD_ENUM.READ]).forEach(T=>{E.push(T.attribute_name)}):E=global.hdb_schema[s][i].attributes.map(y=>y.attribute),e.get_attributes=E)}let h=uSe(e),p=WP(e.hdb_user?.role?.permission,s,i);return YP(h,p,r,i,s,c,n),c.getPermsResponse()}o(lSe,"verifyPerms");function gz(e,t,r,n,s){if(ma.arrayHasEmptyValues([e,t,r]))throw Cr.info("hasPermissions has an invalid parameter"),jn(new Error);let i=r.has("system"),a=e.role.permission;if(a.super_user&&(!i||X.get(t).requires_su))return null;if(!X.get(t))throw Cr.info(`operation ${t} not found.`),jn(new Error,tn.OP_NOT_FOUND(t),o_.BAD_REQUEST);if(X.get(t)&&X.get(t).requires_su)return Cr.info(`operation ${t} requires SU permissions.`),n.handleUnauthorizedItem(tn.OP_IS_SU_ONLY(t));let c=r.keys();for(let l of c){try{if(l&&!a[l]||a[l][a_]===!1){n.addInvalidItem(tn.SCHEMA_NOT_FOUND(l));continue}}catch{n.addInvalidItem(tn.SCHEMA_NOT_FOUND(l));continue}let u=r.get(l);for(let d of u){let f=a[l].tables[d];if(!f||f[a_]===!1)n.addInvalidItem(tn.TABLE_NOT_FOUND(l,d));else try{let m=[],h=X.get(t).perms;!ma.isEmpty(s)&&h.includes(s)&&(h=[s]);for(let p=0;p<h.length;p++){let E=h[p],g=f[E];(g==null||g===!1)&&(Cr.info(`Required ${E} permission not found for ${t} ${s?`${s} `:""}operation in role ${e.role.id}`),m.push(E))}m.length>0&&n.addUnauthorizedTable(l,d,m)}catch(m){let h=tn.UNKNOWN_OP_AUTH_ERROR(t,l,d);throw Cr.error(h),Cr.error(m),jn(hz.CHECK_LOGS_WRAPPER(h))}}}return r.size<2?n.getPermsResponse():null}o(gz,"hasPermissions");function YP(e,t,r,n,s,i,a){if(!e||!t)throw Cr.info("no attributes specified in checkAttributePerms."),jn(new Error);let c=X.get(r).perms;if(!c||c==="")throw Cr.info(`no permissions found for ${r} in checkAttributePerms().`),jn(new Error);if(ma.isEmptyOrZeroLength(t))return Cr.info("No role permissions set (this is OK)."),null;a&&c.includes(a)&&(c=[a]);let l={};for(let d of e){let f=t.get(d);if(f){if(f[a_]===!1){i.addInvalidItem(tn.ATTR_NOT_FOUND(s,n,d),s,n);continue}if(c)for(let m of c){if(yn.TIME_STAMP_NAMES.includes(f.attribute_name)&&m!==Js)throw jn(new Error,tn.SYSTEM_TIMESTAMP_PERMS_ERR,o_.FORBIDDEN);f[m]===!1&&(l[f.attribute_name]?l[f.attribute_name].push(m):l[f.attribute_name]=[m])}}else i.addInvalidItem(tn.ATTR_NOT_FOUND(s,n,d),s,n)}let u=Object.keys(l);u.length>0&&i.addUnauthorizedAttributes(u,s,n,l)}o(YP,"checkAttributePerms");function uSe(e){let t=new Set;try{if(e.action)return t;if(e.operation===yn.OPERATIONS_ENUM.SEARCH_BY_CONDITIONS&&e.conditions.forEach(r=>{t.add(r.search_attribute)}),e&&e.search_attribute&&t.add(e.search_attribute),!e.records||e.records.length===0){if(!e.get_attributes||!e.get_attributes.length===0)return t;for(let r=0;r<e.get_attributes.length;r++)t.add(e.get_attributes[r])}else for(let r=0;r<e.records.length;r++){let n=Object.keys(e.records[r]);for(let s=0;s<n.length;s++)t.add(n[s])}}catch(r){Cr.info(r)}return t}o(uSe,"getRecordAttributes");function WP(e,t,r){let n=new Map;if(ma.isEmpty(e))return Cr.info("no hdb_user specified in getAttributePermissions"),n;if(e.super_user||!t||!r)return n;try{e[t].tables[r].attribute_permissions.forEach(s=>{n.has(s.attribute_name)||n.set(s.attribute_name,s)})}catch{Cr.info(`No attribute permissions found for schema ${t} and table ${r}.`)}return n}o(WP,"getAttributePermissions");function dSe(e,t,r,n,s,i,a){let c=new Set(i),l=WP(e,n,s);YP(c,l,t,s,n,a,r)}o(dSe,"verifyBulkLoadAttributePerms")});var LR=M((hHe,bz)=>{"use strict";bz.exports={evaluateSQL:bSe,processAST:Az,convertSQLToAST:yz,checkASTPermissions:Rz};var fSe=qn(),Tz=require("util"),mSe=Tz.callbackify(fSe.insert),hSe=ln().search,pSe=XG().update,_Se=Tz.callbackify(pSe),ESe=e$().convertDelete,Mc=require("alasql"),gSe=PR(),DR=j(),SSe=qg(),TSe=se(),u_=(F(),v(K)),{hdbErrors:RSe,handleHDBError:zP}=ge(),{HTTP_STATUS_CODES:jP}=RSe;SSe(Mc);var ySe=403,ASe="There was a problem performing this insert. Please check the logs and try again.",JP=class{static{o(this,"ParsedSQLObject")}constructor(){this.ast=void 0,this.variant=void 0,this.permissions_checked=!1}};function bSe(e,t){let r=e.parsed_sql_object;if(!r){r=yz(e.sql);let n,s=r.ast.statements[0];if(s instanceof Mc.yy.Insert?n=s.into.databaseid:s instanceof Mc.yy.Select?n=s.from?s.from[0].databaseid:null:s instanceof Mc.yy.Update||s instanceof Mc.yy.Delete?n=s.table.databaseid:DR.error("AST in evaluateSQL is not a valid SQL type."),!(s instanceof Mc.yy.Select)&&TSe.isEmptyOrZeroLength(n))return t("No schema specified",null)}Az(e,r,(n,s)=>{if(n)return t(n);t(null,s)})}o(bSe,"evaluateSQL");function Rz(e,t){let r;try{r=gSe.verifyPermsAst(t.ast.statements[0],e.hdb_user,t.variant),t.permissions_checked=!0}catch(n){throw n}return r||null}o(Rz,"checkASTPermissions");function yz(e){let t=new JP;if(!e)throw zP(new Error,"The 'sql' parameter is missing from the request body",jP.BAD_REQUEST);try{let r=e.trim(),n=Mc.parse(r),s=r.split(" ")[0].toLowerCase();t.ast=n,t.variant=s}catch(r){let n=r.message.split(`
 `);throw n[1]?zP(r,`Invalid SQL at: ${n[1]}. Please ensure your SQL is valid. Try adding backticks to reserved words and schema table references.`,jP.BAD_REQUEST):zP(r,"We had trouble parsing your request. Please ensure your SQL is valid. Try adding backticks to reserved words and schema table references.",jP.BAD_REQUEST)}return t}o(yz,"convertSQLToAST");function Az(e,t,r){try{let n=ISe;if(!e.bypass_auth&&!t.permissions_checked){let i=Rz(e,t);if(i&&i.length>0)return r(ySe,i)}let s={statement:t.ast.statements[0],hdb_user:e.hdb_user};switch(t.variant){case u_.VALID_SQL_OPS_ENUM.SELECT:n=hSe,s=t.ast.statements[0];break;case u_.VALID_SQL_OPS_ENUM.INSERT:n=NSe;break;case u_.VALID_SQL_OPS_ENUM.UPDATE:n=_Se;break;case u_.VALID_SQL_OPS_ENUM.DELETE:n=ESe;break;default:throw new Error(`unsupported SQL type ${t.variant} in SQL: ${e}`)}n(s,(i,a)=>{if(i){r(i);return}r(null,a)})}catch(n){return r(n)}}o(Az,"processAST");function ISe(e,t){DR.info(e),t("unknown sql statement")}o(ISe,"nullFunction");function NSe({statement:e,hdb_user:t},r){let n=e.into,s={schema:n.databaseid,table:n.tableid,operation:"insert",hdb_user:t},i=e.columns.map(a=>a.columnid);try{s.records=wSe(i,e.values)}catch(a){return r(a)}mSe(s,(a,c)=>{if(a)return r(a);try{delete c.new_attributes,delete c.txn_time}catch(l){DR.error(`Error delete new_attributes from insert response: ${l}`)}r(null,c)})}o(NSe,"convertInsert");function wSe(e,t){try{return t.map(r=>{if(e.length!==r.length)throw"number of values do not match number of columns in insert";let n={};return r.forEach((s,i)=>{if(s.columnid)throw"cannot use a column in insert value";"value"in s?n[e[i]]=s.value:n[e[i]]=Mc.compile(`SELECT ${s.toString()} AS [${u_.FUNC_VAL}] FROM ?`)}),n})}catch(r){throw DR.error(r),new Error(ASe)}}o(wSe,"createDataObjects")});var rD=M((gHe,Oz)=>{var xR=require("clone"),BR=ft(),OSe=se(),vR=(F(),v(K)),_He=j(),QP=require("fs"),ZP=require("joi"),{string:UR}=ZP.types(),{hdbErrors:CSe,handleHDBError:MR}=ge(),{HDB_ERROR_MSGS:EHe,HTTP_STATUS_CODES:XP}=CSe,{commonValidators:vf}=Zi(),Iz=" is required",PSe=["insert","update","upsert"],eD={database:{presence:!1,format:vf.schema_format,length:vf.schema_length},schema:{presence:!1,format:vf.schema_format,length:vf.schema_length},table:{presence:!0,format:vf.schema_format,length:vf.schema_length},action:{inclusion:{within:PSe,message:"is required and must be either insert, update, or upsert"}},file_path:{},csv_url:{url:{allowLocal:!0}},data:{},passthrough_headers:{}},DSe={schema:UR.required(),table:UR.required(),action:UR.valid("insert","update","upsert")},{AWS_ACCESS_KEY:LSe,AWS_SECRET:MSe,AWS_BUCKET:vSe,AWS_FILE_KEY:USe,REGION:xSe}=vR.S3_BUCKET_AUTH_KEYS,BSe={s3:{presence:!0},[`s3.${LSe}`]:{presence:!0,type:"String"},[`s3.${MSe}`]:{presence:!0,type:"String"},[`s3.${vSe}`]:{presence:!0,type:"String"},[`s3.${USe}`]:{presence:!0,type:"String",hasValidFileExt:[".csv",".json"]},[`s3.${xSe}`]:{presence:!0,type:"String"}},Nz=xR(eD);Nz.data.presence={message:Iz};var wz=xR(eD);wz.file_path.presence={message:Iz};var FSe=Object.assign(xR(eD),BSe),tD=xR(DSe);tD.csv_url=UR.uri().messages({"string.uri":"'csv_url' must be a valid url"}).required();tD.passthrough_headers=ZP.object();function HSe(e){let t=BR.validateObject(e,Nz);return FR(e,t)}o(HSe,"dataObject");function kSe(e){let t=BR.validateBySchema(e,ZP.object(tD));return FR(e,t)}o(kSe,"urlObject");function qSe(e){let t=BR.validateObject(e,wz);return FR(e,t)}o(qSe,"fileObject");function GSe(e){let t=BR.validateObject(e,FSe);return FR(e,t)}o(GSe,"s3FileObject");function FR(e,t){if(!t){let r=OSe.checkGlobalSchemaTable(e.schema,e.table);if(r)return MR(new Error,r,XP.BAD_REQUEST);if(e.operation===vR.OPERATIONS_ENUM.CSV_FILE_LOAD)try{QP.accessSync(e.file_path,QP.constants.R_OK|QP.constants.F_OK)}catch(n){return n.code===vR.NODE_ERROR_CODES.ENOENT?MR(n,`No such file or directory ${n.path}`,XP.BAD_REQUEST):n.code===vR.NODE_ERROR_CODES.EACCES?MR(n,`Permission denied ${n.path}`,XP.BAD_REQUEST):MR(n)}}return t}o(FR,"postValidateChecks");Oz.exports={dataObject:HSe,urlObject:kSe,fileObject:qSe,s3FileObject:GSe}});var nD=M((THe,Cz)=>{"use strict";var d_=j(),HR=(F(),v(K));async function $Se(e,t,r,n=void 0){if(!e||typeof e!="function")throw new Error("Invalid function parameter");let s;try{return s=await e(t),r&&await r(t,s,n),t.operation===HR.OPERATIONS_ENUM.INSERT||t.operation===HR.OPERATIONS_ENUM.UPDATE||t.operation===HR.OPERATIONS_ENUM.UPSERT?(delete s.new_attributes,delete s.txn_time):t.operation===HR.OPERATIONS_ENUM.DELETE&&delete s.txn_time,s}catch(i){throw i.message&&typeof i.message=="string"&&i.message.includes("already exists")?(d_.info(i.message),i):i.http_resp_msg?(d_.error(`Error calling operation: ${e.name}`),d_.error(i.http_resp_msg),i):(d_.error(`Error calling operation: ${e.name}`),d_.error(i),i)}}o($Se,"callOperationFunctionAsAwait");Cz.exports={callOperationFunctionAsAwait:$Se}});var sD=M((yHe,Dz)=>{"use strict";var{S3:VSe,GetObjectCommand:KSe}=require("@aws-sdk/client-s3");Dz.exports={getFileStreamFromS3:YSe,getS3AuthObj:Pz};async function YSe(e){let{s3:t}=e,r={Bucket:t.bucket,Key:t.key};return(await Pz(t.aws_access_key_id,t.aws_secret_access_key,t.region).send(new KSe(r))).Body}o(YSe,"getFileStreamFromS3");function Pz(e,t,r){return new VSe({credentials:{accessKeyId:e,secretAccessKey:t},region:r})}o(Pz,"getS3AuthObj")});var Mz=M((bHe,Lz)=>{"use strict";var iD=class{static{o(this,"BulkLoadFileObject")}constructor(t,r,n,s,i,a,c=null){this.op=t,this.action=r,this.schema=n,this.table=s,this.file_path=i,this.file_type=a,this.role_perms=c}},oD=class{static{o(this,"BulkLoadDataObject")}constructor(t,r,n,s){this.action=t,this.schema=r,this.table=n,this.data=s}};Lz.exports={BulkLoadFileObject:iD,BulkLoadDataObject:oD}});var cD=M((NHe,vz)=>{"use strict";var aD=class{static{o(this,"ClusteringOriginObject")}constructor(t,r,n){this.timestamp=t,this.user=r,this.node_name=n}};vz.exports=aD});var hD=M((LHe,Qz)=>{"use strict";var kR=qn(),GR=rD(),WSe=require("needle"),vi=(F(),v(K)),OHe=It(),Uf=se(),{handleHDBError:Jt,hdbErrors:$z}=ge(),{HTTP_STATUS_CODES:rn,HDB_ERROR_MSGS:Pr,CHECK_LOGS_WRAPPER:Eu}=$z,xf=j(),lD=require("papaparse");Uf.promisifyPapaParse();var Ui=require("fs-extra"),zSe=require("path"),{chain:Uz}=require("stream-chain"),xz=require("stream-json/streamers/StreamArray"),Bz=require("stream-json/utils/Batch"),Fz=require("stream-chain/utils/comp"),{finished:Hz}=require("stream"),jSe=oe(),Vz=nD(),JSe=sD(),{BulkLoadFileObject:dD,BulkLoadDataObject:QSe}=Mz(),fD=HP(),{verifyBulkLoadAttributePerms:Kz}=PR(),CHe=cD(),PHe=nr(),DHe=no(),{databases:XSe}=(De(),v(ut)),{coerceType:ZSe}=(fg(),v(Oq)),kz="No records parsed from csv file.",_u=`${jSe.get("HDB_ROOT")}/tmp`,{schemaRegex:eTe}=Zi(),qz=1024*1024*2,Gz=5e3,tTe={"text/csv":!0,"application/octet-stream":!0,"text/plain":!0,"application/vnd.ms-excel":!0};Qz.exports={csvDataLoad:rTe,csvURLLoad:nTe,csvFileLoad:sTe,importFromS3:iTe};async function rTe(e,t){let r=GR.dataObject(e);if(r)throw Jt(r,r.message,rn.BAD_REQUEST,void 0,void 0,!0);let n={};try{let s=zz(e.schema,e.table),i=lD.parse(e.data,{header:!0,skipEmptyLines:!0,transform:uD.bind(null,s),dynamicTyping:!1}),a=new fD;e.hdb_user&&e.hdb_user?.role&&e.hdb_user?.role?.permission&&e.hdb_user?.role?.permission?.super_user!==!0&&Kz(e.hdb_user?.role?.permission,this.job_operation_function.name,e.action,e.schema,e.table,i.meta.fields,a);let c=a.getPermsResponse();if(c)throw Jt(new Error,c,rn.BAD_REQUEST,void 0,void 0,!0);let l=new QSe(e.action,e.schema,e.table,i.data);return n=await Vz.callOperationFunctionAsAwait(jz,l,null),n.message===kz?kz:Jz(n.records,n.number_written)}catch(s){throw gu(s)}}o(rTe,"csvDataLoad");async function nTe(e){let t=GR.urlObject(e);if(t)throw Jt(t,t.message,rn.BAD_REQUEST,void 0,void 0,!0);let r=`${Date.now()}.csv`,n=`${_u}/${r}`;try{await oTe(e,r)}catch(s){throw xf.error(Pr.DOWNLOAD_FILE_ERR(r)+" - "+s),Jt(s,Eu(Pr.DOWNLOAD_FILE_ERR(r)))}try{let s=new dD(this.job_operation_function.name,e.action,e.schema,e.table,n,vi.VALID_S3_FILE_TYPES.CSV,e.hdb_user?.role?.permission),i=await mD(s);return await qR(n),i}catch(s){throw await qR(n),gu(s)}}o(nTe,"csvURLLoad");async function sTe(e){let t=GR.fileObject(e);if(t)throw Jt(t,t.message,rn.BAD_REQUEST,void 0,void 0,!0);let r=new dD(this.job_operation_function.name,e.action,e.schema,e.table,e.file_path,vi.VALID_S3_FILE_TYPES.CSV,e.hdb_user?.role?.permission);try{return await mD(r)}catch(n){throw gu(n)}}o(sTe,"csvFileLoad");async function iTe(e){let t=GR.s3FileObject(e);if(t)throw Jt(t,t.message,rn.BAD_REQUEST,void 0,void 0,!0);let r;try{let n=zSe.extname(e.s3.key),s=`${Date.now()}${n}`;r=`${_u}/${s}`;let i=new dD(this.job_operation_function.name,e.action,e.schema,e.table,r,n,e.hdb_user?.role?.permission);await aTe(s,e);let a=await mD(i);return await qR(r),a}catch(n){throw await qR(r),gu(n)}}o(iTe,"importFromS3");async function oTe(e,t){let r;try{let n=e.passthrough_headers?{headers:e.passthrough_headers}:void 0;r=await WSe("get",e.csv_url,n)}catch(n){let s=`Error downloading CSV file from ${e.csv_url}, status code: ${n.statusCode}. Check the log for more information.`;throw Jt(n,s,n.statusCode,vi.LOG_LEVELS.ERROR,"Error downloading CSV file - "+n)}lTe(r,e.csv_url),await cTe(t,r.raw)}o(oTe,"downloadCSVFile");async function aTe(e,t){try{let r=`${_u}/${e}`;await Ui.mkdirp(_u),await Ui.writeFile(`${_u}/${e}`,"",{flag:"a+"});let n=await Ui.createWriteStream(r),s=await JSe.getFileStreamFromS3(t);await new Promise((i,a)=>{s.on("error",function(c){a(c)}),s.pipe(n).on("error",function(c){a(c)}).on("close",function(){xf.info(`${t.s3.key} successfully downloaded to ${r}`),i()})})}catch(r){throw xf.error(Pr.S3_DOWNLOAD_ERR+" - "+r),Jt(r,Eu(Pr.S3_DOWNLOAD_ERR))}}o(aTe,"downloadFileFromS3");async function cTe(e,t){try{await Ui.mkdirp(_u),await Ui.writeFile(`${_u}/${e}`,t)}catch(r){throw xf.error(Pr.WRITE_TEMP_FILE_ERR),Jt(r,Eu(Pr.DEFAULT_BULK_LOAD_ERR))}}o(cTe,"writeFileToTempFolder");async function qR(e){if(e)try{await Ui.access(e),await Ui.unlink(e)}catch{xf.warn(`could not delete temp csv file at ${e}, file does not exist`)}}o(qR,"deleteTempFile");function lTe(e,t){if(e.statusCode!==$z.HTTP_STATUS_CODES.OK)throw Jt(new Error,`CSV Load failed from URL: ${t}, status code: ${e.statusCode}, message: ${e.statusMessage}`,rn.BAD_REQUEST);if(!tTe[e.headers["content-type"]])throw Jt(new Error,`CSV Load failed from URL: ${t}, unsupported content type: ${e.headers["content-type"]}`,rn.BAD_REQUEST);if(!e.raw)throw Jt(new Error,`CSV Load failed from URL: ${t}, no csv found at url`,rn.BAD_REQUEST)}o(lTe,"validateURLResponse");async function mD(e){try{let t;switch(e.file_type){case vi.VALID_S3_FILE_TYPES.CSV:t=await uTe(e);break;case vi.VALID_S3_FILE_TYPES.JSON:t=await dTe(e);break;default:throw Jt(new Error,Pr.DEFAULT_BULK_LOAD_ERR,rn.BAD_REQUEST,vi.LOG_LEVELS.ERROR,Pr.INVALID_FILE_EXT_ERR(e))}return Jz(t.records,t.number_written)}catch(t){throw gu(t)}}o(mD,"fileLoad");async function Yz(e,t,r,n,s){let i=n.data?n.data:n;if(i.length===0)return;s&&s.pause();let a={operation:e.action,schema:e.schema,table:e.table,records:i};try{let{attributes:c}=await kR.validation(a);e.role_perms&&e.role_perms.super_user!==!0&&Kz(e.role_perms,e.op,e.action,e.schema,e.table,c,t),s&&s.resume()}catch(c){let l=Jt(c);r(l)}}o(Yz,"validateChunk");async function Wz(e,t,r,n,s){let i=n.data?n.data:n;if(i.length===0)return;Uf.autoCastJSONDeep(i),s&&s.pause();let a=n.meta?n.meta.fields:null;if(a)i.forEach(c=>{!Uf.isEmpty(c)&&!Uf.isEmpty(c.__parsed_extra)&&delete c.__parsed_extra});else{let c=new Set;i.forEach(l=>{Object.keys(l).forEach(u=>c.add(u))}),a=[...c]}try{let c={schema:e.schema,table:e.table,action:e.action,data:i},l=await Vz.callOperationFunctionAsAwait(jz,c,null);t.records+=l.records,t.number_written+=l.number_written,s&&s.resume()}catch(c){let l=Jt(c,Eu(Pr.INSERT_CSV_ERR),rn.INTERNAL_SERVER_ERROR,vi.LOG_LEVELS.ERROR,Pr.INSERT_CSV_ERR+" - "+c);r(l)}}o(Wz,"insertChunk");async function uTe(e){let t={records:0,number_written:0},r=zz(e.schema,e.table);try{let n=new fD,s=Ui.createReadStream(e.file_path,{highWaterMark:qz});s.setEncoding("utf8"),await lD.parsePromise(s,Yz.bind(null,e,n),uD.bind(null,r));let i=n.getPermsResponse();if(i)throw Jt(new Error,i,rn.BAD_REQUEST);return s=Ui.createReadStream(e.file_path,{highWaterMark:qz}),s.setEncoding("utf8"),await lD.parsePromise(s,Wz.bind(null,e,t),uD.bind(null,r)),s.destroy(),t}catch(n){throw Jt(n,Eu(Pr.PAPA_PARSE_ERR),rn.INTERNAL_SERVER_ERROR,vi.LOG_LEVELS.ERROR,Pr.PAPA_PARSE_ERR+n)}}o(uTe,"callPapaParse");function zz(e,t){let r=XSe[e][t].attributes,n=new Map;for(let s of r)s.type&&!s.computed&&!s.relationship&&n.set(s.name,i=>ZSe(i,s));return n}o(zz,"createTransformMap");function uD(e,t,r){let n=e.get(r);return n?n(t):Uf.autoCast(t)}o(uD,"typeFunction");async function dTe(e){let t={records:0,number_written:0},r=o(n=>{throw n},"throwErr");try{let n=new fD,s=Uz([Ui.createReadStream(e.file_path,{encoding:"utf-8"}),xz.withParser(),c=>c.value,new Bz({batchSize:Gz}),Fz(async c=>{await Yz(e,n,r,c)})]);await new Promise((c,l)=>{Hz(s,u=>{u?l(u):c()}),s.resume()});let i=n.getPermsResponse();if(i)throw Jt(new Error,i,rn.BAD_REQUEST);let a=Uz([Ui.createReadStream(e.file_path,{encoding:"utf-8"}),xz.withParser(),c=>c.value,new Bz({batchSize:Gz}),Fz(async c=>{await Wz(e,t,r,c)})]);return await new Promise((c,l)=>{Hz(a,u=>{u?l(u):c()}),a.resume()}),t}catch(n){throw Jt(n,Eu(Pr.INSERT_JSON_ERR),rn.INTERNAL_SERVER_ERROR,vi.LOG_LEVELS.ERROR,Pr.INSERT_JSON_ERR+n)}}o(dTe,"insertJson");async function jz(e){let t={};try{e.data&&e.data.length>0&&fTe(e.data[0])?t=await mTe(e.data,e.schema,e.table,e.action):(t.message="No records parsed from csv file.",xf.info(t.message))}catch(r){throw gu(r)}return t}o(jz,"callBulkFileLoad");function fTe(e){let t=Object.keys(e);for(let r of t)if(!eTe.test(r))throw new Error(`Invalid column name '${r}', cancelling load operation`);return!0}o(fTe,"validateColumnNames");async function mTe(e,t,r,n){n||(n="insert");let s={operation:n,schema:t,table:r,records:e},i;switch(n){case"insert":i=kR.insert;break;case"update":i=kR.update;break;case"upsert":i=kR.upsert;break;default:throw Jt(new Error,Pr.INVALID_ACTION_PARAM_ERR(n),rn.BAD_REQUEST,vi.LOG_LEVELS.ERROR,Pr.INVALID_ACTION_PARAM_ERR(n))}try{let a=await i(s),c;switch(n){case"insert":c=a.inserted_hashes;break;case"update":c=a.update_hashes;break;case"upsert":c=a.upserted_hashes;break;default:break}if(Array.isArray(a.skipped_hashes)&&a.skipped_hashes.length>0){let d=global.hdb_schema[t][r].hash_attribute,f=e.length;for(;f--;)a.skipped_hashes.indexOf(e[f][d])>=0&&e.splice(f,1)}let l=Uf.isEmptyOrZeroLength(c)?0:c.length;return{records:e.length,number_written:l,new_attributes:a.new_attributes}}catch(a){throw gu(a)}}o(mTe,"bulkFileLoad");function Jz(e,t){return`successfully loaded ${t} of ${e} records`}o(Jz,"buildResponseMsg");function gu(e){return Jt(e,Eu(Pr.DEFAULT_BULK_LOAD_ERR),rn.INTERNAL_SERVER_ERROR,vi.LOG_LEVELS.ERROR,Pr.DEFAULT_BULK_LOAD_ERR+" - "+e)}o(gu,"buildTopLevelErrMsg")});var ED=M((vHe,ij)=>{"use strict";var _D=ln(),hTe=sD(),{AsyncParser:pTe}=require("json2csv"),$R=require("stream"),gs=se(),pD=require("fs-extra"),_Te=require("path"),Qs=j(),{promisify:ej}=require("util"),f_=se(),{handleHDBError:gr,hdbErrors:ETe}=ge(),{HDB_ERROR_MSGS:Jn,HTTP_STATUS_CODES:Sr}=ETe,{streamAsJSON:gTe}=(ub(),v(LU)),{Upload:STe}=require("@aws-sdk/lib-storage"),{toCsvStream:TTe}=(xo(),v(GU)),Xz=["search_by_value","search_by_hash","sql","search_by_conditions"],Zz=["json","csv"],tj="json",rj="csv",RTe="Successfully exported JSON locally.",yTe="Successfully exported CSV locally.",ATe=1e3,bTe=_D.searchByHash,ITe=_D.searchByValue,NTe=ej($R.finished);ij.exports={export_to_s3:PTe,export_local:wTe};async function wTe(e){Qs.trace(`export_local request to path: ${e.path}, filename: ${e.filename}, format: ${e.format}`);let t=nj(e);if(!gs.isEmpty(t))throw Qs.error(t),gr(new Error,t,Sr.BAD_REQUEST,void 0,void 0,!0);if(gs.isEmpty(e.path))throw Qs.error(Jn.MISSING_VALUE("path")),gr(new Error,Jn.MISSING_VALUE("path"),Sr.BAD_REQUEST,void 0,void 0,!0);let r=(gs.isEmpty(e.filename)?new Date().getTime():e.filename)+"."+e.format;e.path.endsWith(_Te.sep)&&(e.path=e.path.substring(0,e.path.length-1));let n=gs.buildFolderPath(e.path,r);await OTe(e.path);let s=await sj(e);return await CTe(n,e.format,s)}o(wTe,"export_local");async function OTe(e){if(Qs.trace("in confirmPath"),gs.isEmptyOrZeroLength(e))throw gr(new Error,`Invalid path: ${e}`,Sr.BAD_REQUEST,void 0,void 0,!0);let t;try{t=await pD.stat(e)}catch(r){let n;throw r.code==="ENOENT"?n=`path '${directory_path}' does not exist`:r.code==="EACCES"?n=`access to path '${directory_path}' is denied`:n=r.message,Qs.error(n),gr(new Error,n,Sr.BAD_REQUEST,void 0,void 0,!0)}if(!t.isDirectory()){let r=`path '${directory_path}' is not a directory, please supply a valid folder path`;throw Qs.error(r),gr(new Error,r,Sr.BAD_REQUEST,void 0,void 0,!0)}return!0}o(OTe,"confirmPath");async function CTe(e,t,r){if(Qs.trace("in saveToLocal"),f_.isEmptyOrZeroLength(e))throw gr(new Error,Jn.INVALID_VALUE("file_path"),Sr.BAD_REQUEST,void 0,void 0,!0);if(f_.isEmptyOrZeroLength(t))throw gr(new Error,Jn.INVALID_VALUE("Source format"),Sr.BAD_REQUEST,void 0,void 0,!0);if(f_.isEmpty(r))throw gr(new Error,Jn.NOT_FOUND("Data"),Sr.BAD_REQUEST,void 0,void 0,!0);if(t===tj){let n=pD.createWriteStream(e);return gTe(r).pipe(n),await NTe(n),{message:RTe,path:e}}else if(t===rj){let n=pD.createWriteStream(e),s=$R.Readable.from(r),i={},a=r.getColumns?.();a&&(i.fields=a.map(d=>({label:d,value:d})));let c={objectMode:!0};return await new pTe(i,c).fromInput(s).toOutput(n).promise(!1),{message:yTe,path:e}}throw gr(new Error,Jn.INVALID_VALUE("format"),Sr.BAD_REQUEST)}o(CTe,"saveToLocal");async function PTe(e){if(!e.s3||Object.keys(e.s3).length===0)throw gr(new Error,Jn.MISSING_VALUE("S3 object"),Sr.BAD_REQUEST);if(gs.isEmptyOrZeroLength(e.s3.aws_access_key_id))throw gr(new Error,Jn.MISSING_VALUE("aws_access_key_id"),Sr.BAD_REQUEST);if(gs.isEmptyOrZeroLength(e.s3.aws_secret_access_key))throw gr(new Error,Jn.MISSING_VALUE("aws_secret_access_key"),Sr.BAD_REQUEST);if(gs.isEmptyOrZeroLength(e.s3.bucket))throw gr(new Error,Jn.MISSING_VALUE("bucket"),Sr.BAD_REQUEST);if(gs.isEmptyOrZeroLength(e.s3.key))throw gr(new Error,Jn.MISSING_VALUE("key"),Sr.BAD_REQUEST);if(gs.isEmptyOrZeroLength(e.s3.region))throw gr(new Error,Jn.MISSING_VALUE("region"),Sr.BAD_REQUEST);let t=nj(e);if(!gs.isEmpty(t))throw gr(new Error,t,Sr.BAD_REQUEST);Qs.trace(`called export_to_s3 to bucket: ${e.s3.bucket} and query ${e.search_operation.sql}`);let r;try{r=await sj(e)}catch(l){throw Qs.error(l),l}let n,s=await hTe.getS3AuthObj(e.s3.aws_access_key_id,e.s3.aws_secret_access_key,e.s3.region),i,a=new $R.PassThrough;if(e.format===rj){i=e.s3.key+".csv";let l=TTe(r,r.getColumns?.());l.on("error",u=>{throw u}),l.pipe(a)}else if(e.format===tj){i=e.s3.key+".json";let l=new $R.Readable;l.pipe(a),l.on("error",f=>{throw f}),l.push("[");let u=r.length,d="";for(let[f,m]of r.entries()){let h=f===u-1?JSON.stringify(m):JSON.stringify(m)+",";d+=h,f!==0&&f%ATe===0&&(l.push(d),d="")}d.length!==0&&l.push(d),l.push("]"),l.push(null)}else throw gr(new Error,Jn.INVALID_VALUE("format"),Sr.BAD_REQUEST);return new STe({client:s,params:{Bucket:e.s3.bucket,Key:i,Body:a}}).done()}o(PTe,"export_to_s3");function nj(e){if(Qs.trace("in exportCoreValidation"),gs.isEmpty(e.format))return"format missing";if(Zz.indexOf(e.format)<0)return`format invalid. must be one of the following values: ${Zz.join(", ")}`;let t=e.search_operation.operation;if(gs.isEmpty(t))return"search_operation.operation missing";if(Xz.indexOf(t)<0)return`searchOperation.operation must be one of the following values: ${Xz.join(", ")}`}o(nj,"exportCoreValidation");async function sj(e){Qs.trace("in getRecords");let t,r;if(f_.isEmpty(e.search_operation)||f_.isEmptyOrZeroLength(e.search_operation.operation))throw gr(new Error,Jn.INVALID_VALUE("Search operation"),Sr.BAD_REQUEST);switch(e.search_operation.operation){case"search_by_value":t=ITe;break;case"search_by_hash":t=bTe;break;case"search_by_conditions":t=_D.searchByConditions;break;case"sql":{let n=LR();t=ej(n.evaluateSQL);break}default:throw r=`Operation ${e.search_operation.operation} is not support by export.`,Qs.error(r),gr(new Error,r,Sr.BAD_REQUEST)}return e.search_operation.hdb_user=e.hdb_user,t(e.search_operation)}o(sj,"getRecords")});var aj=M((xHe,oj)=>{"use strict";var gD=class{static{o(this,"SqlSearchObject")}constructor(t,r){this.operation="sql",this.sql=t,this.hdb_user=r}};oj.exports=gD});var uj=M((FHe,lj)=>{"use strict";var DTe=(F(),v(K)),cj=require("moment"),LTe=require("uuid").v4,SD=class{static{o(this,"JobObject")}constructor(){this.id=LTe(),this.type=void 0,this.start_datetime=cj().valueOf(),this.created_datetime=cj().valueOf(),this.end_datetime=void 0,this.status=DTe.JOB_STATUS_ENUM.CREATED,this.message=void 0,this.user=void 0,this.request=void 0}};lj.exports=SD});var TD=M((kHe,gj)=>{"use strict";var MTe=require("uuid").v4,pj=qn(),_j=ln(),vTe=Ti(),UTe=hd(),xTe=aj(),Ct=(F(),v(K)),BTe=uj(),FTe=xS(),xi=j(),HTe=Dm(),Bf=se(),{promisify:kTe}=require("util"),Su=require("moment"),qTe=LR(),VR=rD(),dj=AN(),{deleteTransactionLogsBeforeValidator:GTe}=IP(),{handleHDBError:fj,hdbErrors:$Te,ClientError:VTe}=ge(),{HTTP_STATUS_CODES:mj}=$Te,hj=_j.searchByValue,KTe=_j.searchByHash,YTe=pj.insert,WTe=kTe(qTe.evaluateSQL),zTe=pj.update;gj.exports={addJob:QTe,updateJob:ZTe,handleGetJob:jTe,handleGetJobsByStartDate:JTe,getJobById:Ej};async function jTe(e){if(e.id===void 0)throw new VTe("'id' is required");let t=await Ej(e.id);return Bf.isEmptyOrZeroLength(t)||(t[0]={...t[0]},t[0].request!==void 0&&delete t[0].request,delete t[0].__createdtime__,delete t[0].__updatedtime__),t}o(jTe,"handleGetJob");async function JTe(e){try{let t=await XTe(e);if(xi.trace(`Searching for jobs from ${e.from_date} to ${e.to_date}`),t&&t.length>0)for(let r of t)r.start_datetime&&(r.start_datetime_converted=Su(r.start_datetime)),r.end_datetime&&(r.end_datetime_converted=Su(r.end_datetime)),r.request!==void 0&&delete r.request,delete r.__createdtime__,delete r.__updatedtime__;return t}catch(t){let r=`There was an error searching jobs by date: ${t}`;throw xi.error(r),new Error(r)}}o(JTe,"handleGetJobsByStartDate");async function QTe(e){let t={message:"",error:"",success:!1,createdJob:void 0};if(!e||Object.keys(e).length===0||Bf.isEmptyOrZeroLength(e.operation)){let d="job parameter is invalid";return xi.info(d),t.error=d,t}if(!Ct.JOB_TYPE_ENUM[e.operation])return xi.info(`invalid job type specified: ${e.operation}.`),t;let r=e.operation,n;switch(r){case Ct.OPERATIONS_ENUM.CSV_FILE_LOAD:n=VR.fileObject(e);break;case Ct.OPERATIONS_ENUM.CSV_URL_LOAD:n=VR.urlObject(e);break;case Ct.OPERATIONS_ENUM.CSV_DATA_LOAD:n=VR.dataObject(e);break;case Ct.OPERATIONS_ENUM.IMPORT_FROM_S3:n=VR.s3FileObject(e);break;case Ct.OPERATIONS_ENUM.DELETE_FILES_BEFORE:case Ct.OPERATIONS_ENUM.DELETE_RECORDS_BEFORE:n=dj(e,"date");break;case Ct.OPERATIONS_ENUM.DELETE_AUDIT_LOGS_BEFORE:n=dj(e,"timestamp");break;case Ct.OPERATIONS_ENUM.DELETE_TRANSACTION_LOGS_BEFORE:n=GTe(e);break;case Ct.OPERATIONS_ENUM.RESTART_SERVICE:if(Ct.HDB_PROCESS_SERVICES[e.service]===void 0)throw fj(new Error,"Invalid service",mj.BAD_REQUEST,void 0,void 0,!0);break;default:break}if(n)throw fj(n,n.message,mj.BAD_REQUEST,void 0,void 0,!0);let s=new BTe;s.type=e.operation===Ct.OPERATIONS_ENUM.DELETE_RECORDS_BEFORE?Ct.OPERATIONS_ENUM.DELETE_FILES_BEFORE:e.operation,s.type=e.operation,s.user=e.hdb_user?.username;let i=new vTe(Ct.SYSTEM_SCHEMA_NAME,Ct.SYSTEM_TABLE_NAMES.JOB_TABLE_NAME,"id",s.id,"id",["id"]),a;try{a=Array.from(await hj(i))}catch(d){let f=`There was an error inserting a new job: ${d}`;return xi.error(f),t}let c=Array.isArray(a)?a:Object.keys(a);if(c&&c.length>0){s.id=MTe();try{a=await hj(i)}catch(d){let f=`There was an error inserting a new job: ${d}`;return xi.error(f),t}if(c=Array.isArray(a)?a:Object.keys(a),c&&c.length>0)return xi.error("Error creating a job, could not find a unique job id."),t}s.request=e;let l=new HTe(Ct.SYSTEM_SCHEMA_NAME,Ct.SYSTEM_TABLE_NAMES.JOB_TABLE_NAME,"id",[s]),u;try{u=await YTe(l)}catch(d){return xi.error(`There was an error inserting a job for job type: ${e.operation} -- ${d}`),t.success=!1,t}if(u.inserted_hashes.length===0)t.message=`Had a problem creating a job with type ${s.operation} and id ${s.id}`;else{let d=`Created a job with type ${s.type} and id ${s.id}`;t.message=d,t.createdJob=s,t.success=!0,xi.trace(d)}return t}o(QTe,"addJob");async function XTe(e){let t=Su(e.from_date,Su.ISO_8601),r=Su(e.to_date,Su.ISO_8601);if(!t.isValid())throw new Error("Invalid 'from' date, must be in ISO-8601 format (YYYY-MM-DD).");if(!r.isValid())throw new Error("Invalid 'to' date, must be in ISO-8601 format (YYYY-MM-DD)");let n=`select * from system.hdb_job where start_datetime > '${t.valueOf()}' and start_datetime < '${r.valueOf()}'`,s=new xTe(n,e.hdb_user);try{return await WTe(s)}catch(i){throw xi.error(`there was a problem searching for jobs from date ${e.from_date} to date ${e.to_date} ${i}`),new Error("there was an error searching for jobs.  Please check the log for details.")}}o(XTe,"getJobsInDateRange");async function Ej(e){if(Bf.isEmptyOrZeroLength(e))return Bf.errorizeMessage("Invalid job ID specified.");let t=new UTe(Ct.SYSTEM_SCHEMA_NAME,Ct.SYSTEM_TABLE_NAMES.JOB_TABLE_NAME,[e],["*"]);try{return await KTe(t)}catch(r){let n=`There was an error searching for a job by id: ${e} ${r}`;return xi.error(n),Bf.errorizeMessage("there was an error searching for jobs.  Please check the log for details.")}}o(Ej,"getJobById");async function ZTe(e){if(Object.keys(e).length===0)throw new Error("invalid job object passed to updateJob");if(Bf.isEmptyOrZeroLength(e.id))throw new Error("invalid ID passed to updateJob");(e.status===Ct.JOB_STATUS_ENUM.COMPLETE||e.status===Ct.JOB_STATUS_ENUM.ERROR)&&(e.end_datetime=Su().valueOf());let t=new FTe(Ct.SYSTEM_SCHEMA_NAME,Ct.SYSTEM_TABLE_NAMES.JOB_TABLE_NAME,[e]),r;return r=await zTe(t),r}o(ZTe,"updateJob")});var Nj=M((GHe,Ij)=>{"use strict";var Sj=se(),Dr=(F(),v(K)),eRe=require("moment"),KR=hD(),m_=j(),Tj=TD(),Rj=ED(),yj=vl(),Aj=st(),tRe=RR(),rRe=Oc(),{parentPort:nRe,isMainThread:bj}=require("worker_threads"),{onMessageByType:sRe}=st(),RD=class{static{o(this,"RunnerMessage")}constructor(t,r){this.job=t,this.json=r}};async function iRe(e){if(!e||Object.keys(e).length===0)throw new Error("Empty runner passed to parseMessage");if(!e.json||Object.keys(e.json).length===0)throw new Error("Empty JSON passed to parseMessage");if(!e.job||Object.keys(e.job).length===0)throw new Error("Empty job passed to parseMessage");if(Sj.isEmptyOrZeroLength(e.json.operation))throw new Error("Invalid operation");if(Sj.isEmptyOrZeroLength(e.job.id))throw new Error("Empty job id specified");switch(e.json.operation){case Dr.JOB_TYPE_ENUM.csv_file_load:await go(e,KR.csvFileLoad);break;case Dr.JOB_TYPE_ENUM.csv_url_load:await go(e,KR.csvURLLoad);break;case Dr.JOB_TYPE_ENUM.csv_data_load:await go(e,KR.csvDataLoad);break;case Dr.JOB_TYPE_ENUM.import_from_s3:await go(e,KR.importFromS3);break;case Dr.JOB_TYPE_ENUM.empty_trash:break;case Dr.JOB_TYPE_ENUM.export_local:await go(e,Rj.export_local);break;case Dr.JOB_TYPE_ENUM.export_to_s3:await go(e,Rj.export_to_s3);break;case Dr.JOB_TYPE_ENUM.delete_files_before:case Dr.JOB_TYPE_ENUM.delete_records_before:await go(e,yj.deleteFilesBefore);break;case Dr.JOB_TYPE_ENUM.delete_audit_logs_before:await go(e,yj.deleteAuditLogsBefore);break;case Dr.JOB_TYPE_ENUM.delete_transaction_logs_before:await go(e,tRe.deleteTransactionLogsBefore);break;case Dr.JOB_TYPE_ENUM.restart_service:return await go(e,rRe.restartService),`Restarting ${e.json.service}`;break;default:return`Invalid operation ${e.json.operation} specified`}}o(iRe,"parseMessage");async function go(e,t){try{e.job.status=Dr.JOB_STATUS_ENUM.IN_PROGRESS,e.job.start_datetime=eRe().valueOf(),await Tj.updateJob(e.job),await oRe(e.job.id)}catch(r){let n=r.message!==void 0?r.message:r;typeof n=="string"?(n=`There was an error running ${t.name} job with id ${e.job.id} - ${n}`,r.message=n):m_.error(`There was an error running ${t.name} job with id ${e.job.id}`),m_.error(n),e.job.message=n,e.job.status=Dr.JOB_STATUS_ENUM.ERROR;try{await Tj.updateJob(e.job)}catch(s){throw m_.error(`Unable to update job with id ${e.job.id}`),s}throw r}}o(go,"runJob");async function oRe(e){m_.trace("launching job thread:",e),bj?Aj.startWorker("server/jobs/jobProcess.js",{autoRestart:!1,name:"job",env:{...process.env,[Dr.PROCESS_NAME_ENV_PROP]:`JOB-${e}`}}):nRe.postMessage({type:Dr.ITC_EVENT_TYPES.START_JOB,jobId:e})}o(oRe,"launchJobThread");bj&&sRe(Dr.ITC_EVENT_TYPES.START_JOB,async(e,t)=>{try{Aj.startWorker("server/jobs/jobProcess.js",{autoRestart:!1,name:"job",env:{...process.env,[Dr.PROCESS_NAME_ENV_PROP]:`JOB-${e.jobId}`}})}catch(r){m_.error(r)}});Ij.exports={parseMessage:iRe,RunnerMessage:RD}});var Oj=M((VHe,wj)=>{"use strict";var aRe=se(),yD=oe(),vc=(F(),v(K)),cRe=It(),lRe=nr(),So=j(),uRe=cD(),dRe=no();yD.initSync();wj.exports={postOperationHandler:mRe,sendOperationTransaction:h_};async function h_(e,t,r,n){if(e.schema===vc.SYSTEM_SCHEMA_NAME)return;let s=fRe(e,t,r);s&&(So.trace(`sendOperationTransaction publishing to schema ${e.schema} following transaction:`,s),await lRe.publishToStream(`${cRe.SUBJECT_PREFIXES.TXN}.${e.schema}`,dRe.createNatsTableStreamName(e.schema,e.table),n,s))}o(h_,"sendOperationTransaction");function fRe(e,t,r){if(aRe.isEmptyOrZeroLength(t))return null;let n={operation:e.operation,schema:e.schema,table:e.table,__origin:r};return e.operation===vc.OPERATIONS_ENUM.DELETE?n.hash_values=t:n.records=e.records,n}o(fRe,"convertCRUDOperationToTransaction");async function mRe(e,t,r){if(!yD.get(vc.CONFIG_PARAMS.CLUSTERING_ENABLED))return;So.trace(`postOperationHandler called for operation ${e.operation} on schema.table: ${e.schema}.${e.table}`);let n=e.hdb_user?.username,s=yD.get(vc.CONFIG_PARAMS.CLUSTERING_NODENAME),i=new uRe(t.txn_time,n,s);switch(e.operation){case vc.OPERATIONS_ENUM.INSERT:try{await h_(e,t.inserted_hashes,i,r)}catch(a){So.error("There was an error calling clustering postOperationHandler for insert."),So.error(a)}break;case vc.OPERATIONS_ENUM.DELETE:try{await h_(e,t.deleted_hashes,i,r)}catch(a){So.error("There was an error calling clustering postOperationHandler for delete."),So.error(a)}break;case vc.OPERATIONS_ENUM.UPDATE:try{await h_(e,t.update_hashes,i,r)}catch(a){So.error("There was an error calling clustering postOperationHandler for update."),So.error(a)}break;case vc.OPERATIONS_ENUM.UPSERT:try{await h_(e,t.upserted_hashes,i,r)}catch(a){So.error("There was an error calling clustering postOperationHandler for upsert."),So.error(a)}break;default:break}return t}o(mRe,"postOperationHandler")});var Q,Cj=ue(()=>{Q=class{static{o(this,"OperationFunctionObject")}operation_function;job_operation_function;constructor(t,r=void 0){this.operation_function=t,this.job_operation_function=r}}});var AP={};Oe(AP,{chooseOperation:()=>zj,executeJob:()=>Xs,getOperationFunction:()=>jj,operation:()=>DD,processLocalTransaction:()=>Wj});async function Wj(e,t){try{if(e.body.operation!=="read_log"&&(g_.default.log_level===Rm.INFO||g_.default.log_level===Rm.DEBUG||g_.default.log_level===Rm.TRACE)){let{hdb_user:n,hdbAuthHeader:s,password:i,payload:a,...c}=e.body;An.info(c)}}catch(n){An.error(n)}let r=await Kj.default.callOperationFunctionAsAwait(t,e.body,null);if(typeof r!="object"&&(r={message:r}),r instanceof Error)throw r;return _Re[e.body.operation]&&qj.default.setSchemaDataToGlobal(n=>{n&&An.error(n)}),r}function zj(e){let t;try{t=jj(e)}catch(s){throw An.error(`Error when selecting operation function - ${s}`),s}let{operation_function:r,job_operation_function:n}=t;try{if(e.operation==="sql"||e.search_operation&&e.search_operation.operation==="sql"){let s=e.operation==="sql"?e.sql:e.search_operation.sql,i=zR.default.convertSQLToAST(s);if(e.parsed_sql_object=i,!e.bypass_auth){let a=zR.default.checkASTPermissions(e,i);if(a)throw An.error(`${Pj.FORBIDDEN} from operation ${e.operation}`),An.warn(`User '${e.hdb_user?.username}' is not permitted to ${e.operation}`),(0,Zs.handleHDBError)(new Error,a,Zs.hdbErrors.HTTP_STATUS_CODES.FORBIDDEN,void 0,void 0,!0)}}else if(!e.bypass_auth&&e.operation!==G.CREATE_AUTHENTICATION_TOKENS&&e.operation!==G.LOGIN&&e.operation!==G.LOGOUT){let s=n===void 0?r:n,i=e.search_operation?e.search_operation:e;i.hdb_user||(i.hdb_user=e.hdb_user);let a=kj.default.verifyPerms(i,s);if(a)throw An.error(`${Pj.FORBIDDEN} from operation ${e.operation}`),An.warn(`User '${i.hdb_user?.username}' is not permitted to ${i.operation}`),(0,Zs.handleHDBError)(new Error,a,Zs.hdbErrors.HTTP_STATUS_CODES.FORBIDDEN,void 0,!1,!0)}}catch(s){throw(0,Zs.handleHDBError)(s,"There was an error when trying to choose an operation path")}return r}function jj(e){if(An.trace(`getOperationFunction with operation: ${e.operation}`),Dj.has(e.operation))return Dj.get(e.operation);throw(0,Zs.handleHDBError)(new Error,Zs.hdbErrors.HDB_ERROR_MSGS.OP_NOT_FOUND(e.operation),Zs.hdbErrors.HTTP_STATUS_CODES.BAD_REQUEST,void 0,void 0,!0)}function DD(e,t,r){e.hdb_user=t?.user,e.bypass_auth=!r;let n=zj(e);return Wj({body:e},n)}async function ERe(e){An.trace("In serverUtils.catchup");let t=e.transaction,r=t.channel.split(":"),n=r[0],s=r[1];for(let i of t.transactions)try{i.schema=n,i.table=s,i[GA]=!0;let a;switch(i.operation){case G.INSERT:a=await Ru.default.insert(i);break;case G.UPDATE:a=await Ru.default.update(i);break;case G.UPSERT:a=await Ru.default.upsert(i);break;case G.DELETE:a=await kf.default.deleteRecord(i);break;default:An.warn("invalid operation in catchup");break}await Yj.transactToClusteringUtils.postOperationHandler(i,a,e)}catch(a){An.info("Invalid operation in transaction"),An.error(a)}}async function Xs(e){(0,Vj.transformReq)(e);let t,r;try{if(r=await jR.default.addJob(e),r){t=r.createdJob,An.info("addJob result",r);let n=new ND.default.RunnerMessage(t,e);return{message:await ND.default.parseMessage(n)??`Starting job with id ${t.id}`,job_id:t.id}}}catch(n){let s=n instanceof Error?n:null,i=`There was an error executing job: ${s&&"http_resp_msg"in s?s.http_resp_msg:n}`;throw An.error(i),(0,Zs.handleHDBError)(n,i)}}function gRe(){let e=new Map;return e.set(G.INSERT,new Q(Ru.default.insert)),e.set(G.UPDATE,new Q(Ru.default.update)),e.set(G.UPSERT,new Q(Ru.default.upsert)),e.set(G.SEARCH_BY_CONDITIONS,new Q(Hf.default.searchByConditions)),e.set(G.SEARCH_BY_HASH,new Q(Hf.default.searchByHash)),e.set(G.SEARCH_BY_ID,new Q(Hf.default.searchByHash)),e.set(G.SEARCH_BY_VALUE,new Q(Hf.default.searchByValue)),e.set(G.SEARCH,new Q(hRe)),e.set(G.SQL,new Q(pRe)),e.set(G.CSV_DATA_LOAD,new Q(Xs,p_.default.csvDataLoad)),e.set(G.CSV_FILE_LOAD,new Q(Xs,p_.default.csvFileLoad)),e.set(G.CSV_URL_LOAD,new Q(Xs,p_.default.csvURLLoad)),e.set(G.IMPORT_FROM_S3,new Q(Xs,p_.default.importFromS3)),e.set(G.CREATE_SCHEMA,new Q(Bi.default.createSchema)),e.set(G.CREATE_DATABASE,new Q(Bi.default.createSchema)),e.set(G.CREATE_TABLE,new Q(Bi.default.createTable)),e.set(G.CREATE_ATTRIBUTE,new Q(Bi.default.createAttribute)),e.set(G.DROP_SCHEMA,new Q(Bi.default.dropSchema)),e.set(G.DROP_DATABASE,new Q(Bi.default.dropSchema)),e.set(G.DROP_TABLE,new Q(Bi.default.dropTable)),e.set(G.DROP_ATTRIBUTE,new Q(Bi.default.dropAttribute)),e.set(G.DESCRIBE_SCHEMA,new Q(__.default.describeSchema)),e.set(G.DESCRIBE_DATABASE,new Q(__.default.describeSchema)),e.set(G.DESCRIBE_TABLE,new Q(__.default.describeTable)),e.set(G.DESCRIBE_ALL,new Q(__.default.describeAll)),e.set(G.DELETE,new Q(kf.default.deleteRecord)),e.set(G.ADD_USER,new Q(Ff.default.addUser)),e.set(G.ALTER_USER,new Q(Ff.default.alterUser)),e.set(G.DROP_USER,new Q(Ff.default.dropUser)),e.set(G.LIST_USERS,new Q(Ff.default.listUsersExternal)),e.set(G.LIST_ROLES,new Q(E_.default.listRoles)),e.set(G.ADD_ROLE,new Q(E_.default.addRole)),e.set(G.ALTER_ROLE,new Q(E_.default.alterRole)),e.set(G.DROP_ROLE,new Q(E_.default.dropRole)),e.set(G.USER_INFO,new Q(Ff.default.userInfo)),e.set(G.READ_LOG,new Q(Mj.default)),e.set(G.ADD_NODE,new Q(vj.default)),e.set(G.UPDATE_NODE,new Q(AD.default)),e.set(G.SET_NODE_REPLICATION,new Q(AD.default)),e.set(G.REMOVE_NODE,new Q(Uj.default)),e.set(G.CONFIGURE_CLUSTER,new Q(xj.default)),e.set(G.PURGE_STREAM,new Q(Bj.default)),e.set(G.SET_CONFIGURATION,new Q(wD.default.setConfiguration)),e.set(G.CLUSTER_STATUS,new Q(Fj.default.clusterStatus)),e.set(G.CLUSTER_NETWORK,new Q(Hj.default)),e.set(G.CLUSTER_SET_ROUTES,new Q(YR.default.setRoutes)),e.set(G.CLUSTER_GET_ROUTES,new Q(YR.default.getRoutes)),e.set(G.CLUSTER_DELETE_ROUTES,new Q(YR.default.deleteRoutes)),e.set(G.EXPORT_TO_S3,new Q(Xs,bD.default.export_to_s3)),e.set(G.CREATE_CSR,new Q(Tu.default.createCsr)),e.set(G.SIGN_CERTIFICATE,new Q(Tu.default.signCertificate)),e.set(G.LIST_CERTIFICATES,new Q(Tu.default.listCertificates)),e.set(G.ADD_CERTIFICATES,new Q(Tu.default.addCertificate)),e.set(G.REMOVE_CERTIFICATE,new Q(Tu.default.removeCertificate)),e.set(G.GET_KEY,new Q(Tu.default.getKey)),e.set(G.ADD_NODE_BACK,new Q(TC)),e.set(G.REMOVE_NODE_BACK,new Q(RC)),e.set(G.DELETE_FILES_BEFORE,new Q(Xs,kf.default.deleteFilesBefore)),e.set(G.DELETE_RECORDS_BEFORE,new Q(Xs,kf.default.deleteFilesBefore)),e.set(G.EXPORT_LOCAL,new Q(Xs,bD.default.export_local)),e.set(G.SEARCH_JOBS_BY_START_DATE,new Q(jR.default.handleGetJobsByStartDate)),e.set(G.GET_JOB,new Q(jR.default.handleGetJob)),e.set(G.GET_FINGERPRINT,new Q(WR.default.getFingerprint)),e.set(G.SET_LICENSE,new Q(WR.default.setLicense)),e.set(G.GET_REGISTRATION_INFO,new Q(WR.default.getRegistrationInfo)),e.set(G.RESTART,new Q(ID.default.restart)),e.set(G.RESTART_SERVICE,new Q(Xs,ID.default.restartService)),e.set(G.CATCHUP,new Q(ERe)),e.set(G.SYSTEM_INFORMATION,new Q(Gj.default.systemInformation)),e.set(G.DELETE_AUDIT_LOGS_BEFORE,new Q(Xs,kf.default.deleteAuditLogsBefore)),e.set(G.READ_AUDIT_LOG,new Q(Lj.default)),e.set(G.CREATE_AUTHENTICATION_TOKENS,new Q(zw)),e.set(G.REFRESH_OPERATION_TOKEN,new Q(jw)),e.set(G.LOGIN,new Q(mP)),e.set(G.LOGOUT,new Q(hP)),e.set(G.GET_CONFIGURATION,new Q(wD.default.getConfiguration)),e.set(G.CUSTOM_FUNCTIONS_STATUS,new Q(Pt.default.customFunctionsStatus)),e.set(G.GET_CUSTOM_FUNCTIONS,new Q(Pt.default.getCustomFunctions)),e.set(G.GET_COMPONENT_FILE,new Q(Pt.default.getComponentFile)),e.set(G.GET_COMPONENTS,new Q(Pt.default.getComponents)),e.set(G.SET_COMPONENT_FILE,new Q(Pt.default.setComponentFile)),e.set(G.DROP_COMPONENT,new Q(Pt.default.dropComponent)),e.set(G.GET_CUSTOM_FUNCTION,new Q(Pt.default.getCustomFunction)),e.set(G.SET_CUSTOM_FUNCTION,new Q(Pt.default.setCustomFunction)),e.set(G.DROP_CUSTOM_FUNCTION,new Q(Pt.default.dropCustomFunction)),e.set(G.ADD_CUSTOM_FUNCTION_PROJECT,new Q(Pt.default.addComponent)),e.set(G.ADD_COMPONENT,new Q(Pt.default.addComponent)),e.set(G.DROP_CUSTOM_FUNCTION_PROJECT,new Q(Pt.default.dropCustomFunctionProject)),e.set(G.PACKAGE_CUSTOM_FUNCTION_PROJECT,new Q(Pt.default.packageComponent)),e.set(G.PACKAGE_COMPONENT,new Q(Pt.default.packageComponent)),e.set(G.DEPLOY_CUSTOM_FUNCTION_PROJECT,new Q(Pt.default.deployComponent)),e.set(G.DEPLOY_COMPONENT,new Q(Pt.default.deployComponent)),e.set(G.READ_TRANSACTION_LOG,new Q(OD.default.readTransactionLog)),e.set(G.DELETE_TRANSACTION_LOGS_BEFORE,new Q(Xs,OD.default.deleteTransactionLogsBefore)),e.set(G.INSTALL_NODE_MODULES,new Q(CD.default.installModules)),e.set(G.AUDIT_NODE_MODULES,new Q(CD.default.auditModules)),e.set(G.GET_BACKUP,new Q(Bi.default.getBackup)),e.set(G.CLEANUP_ORPHAN_BLOBS,new Q(Bi.default.cleanupOrphanBlobs)),e.set(G.ADD_SSH_KEY,new Q(Pt.default.addSSHKey)),e.set(G.UPDATE_SSH_KEY,new Q(Pt.default.updateSSHKey)),e.set(G.DELETE_SSH_KEY,new Q(Pt.default.deleteSSHKey)),e.set(G.LIST_SSH_KEYS,new Q(Pt.default.listSSHKeys)),e.set(G.SET_SSH_KNOWN_HOSTS,new Q(Pt.default.setSSHKnownHosts)),e.set(G.GET_SSH_KNOWN_HOSTS,new Q(Pt.default.getSSHKnownHosts)),e.set(G.GET_ANALYTICS,new Q(wP)),e.set(G.LIST_METRICS,new Q(OP)),e.set(G.DESCRIBE_METRIC,new Q(CP)),e.set(G.GET_STATUS,new Q(vP)),e.set(G.SET_STATUS,new Q(UP)),e.set(G.CLEAR_STATUS,new Q(MP)),e}var Hf,zR,p_,Bi,__,kf,Lj,Ff,E_,Pt,g_,Mj,vj,AD,Uj,xj,Bj,Fj,Hj,YR,bD,kj,jR,Zs,WR,ID,PD,Ru,qj,Gj,ND,wD,OD,CD,$j,Vj,Tu,Kj,Yj,Pj,An,hRe,pRe,_Re,Dj,bP=ue(()=>{Hf=w(ln()),zR=w(LR()),p_=w(hD()),Bi=w(bp()),__=w(rc()),kf=w(vl()),Lj=w(zO()),Ff=w($n()),E_=w(Zh()),Pt=w(yP()),g_=w(j()),Mj=w(ZO()),vj=w(hf()),AD=w(NC()),Uj=w(BT()),xj=w(CC()),Bj=w(PC()),Fj=w(qT()),Hj=w($T()),YR=w(VT()),bD=w(ED()),kj=w(PR()),jR=w(TD());F();Zs=w(ge()),WR=w(jT()),ID=w(Oc()),PD=w(require("util")),Ru=w(qn()),qj=w(Bs()),Gj=w(ra()),ND=w(Nj());qd();mR();wD=w(_t()),OD=w(RR()),CD=w(Jp()),$j=w(mi()),Vj=w(se());Ur();Tu=w(_n());mf();DP();Kj=w(nD()),Yj=w(Oj());Lf();Cj();({HTTP_STATUS_CODES:Pj}=Zs.hdbErrors),An=g_.default.loggerWithTag("operation"),hRe=PD.promisify(Hf.default.search),pRe=PD.promisify(zR.default.evaluateSQL),_Re={[G.CREATE_ATTRIBUTE]:!0,[G.CREATE_TABLE]:!0,[G.CREATE_SCHEMA]:!0,[G.DROP_ATTRIBUTE]:!0,[G.DROP_TABLE]:!0,[G.DROP_SCHEMA]:!0};o(Wj,"processLocalTransaction");Dj=gRe();Le.operation=DD;o(zj,"chooseOperation");o(jj,"getOperationFunction");(0,$j._assignPackageExport)("operation",DD);o(DD,"operation");o(ERe,"catchup");o(Xs,"executeJob");o(gRe,"initializeOperationFunctionMap")});var XR=M((QHe,Xj)=>{"use strict";var JR=(F(),v(K)),SRe=se(),S_=j(),{handleHDBError:LD,hdbErrors:QR}=ge(),{isMainThread:TRe}=require("worker_threads"),{Readable:RRe}=require("stream"),Jj=require("os"),yRe=require("util"),ARe=Qw(),bRe=yRe.promisify(ARe.authorize),Qj=(bP(),v(AP)),{createGzip:IRe,constants:NRe}=require("zlib"),wRe=[JR.OPERATIONS_ENUM.CREATE_AUTHENTICATION_TOKENS,JR.OPERATIONS_ENUM.LOGIN,JR.OPERATIONS_ENUM.LOGOUT];function ORe(e){let t=`Found an uncaught exception with message: ${e.message}. ${Jj.EOL}Stack: ${e.stack} ${Jj.EOL}Terminating ${TRe?"HDB":"thread"}.`;console.error(t),S_.fatal(t),process.exit(1)}o(ORe,"handleServerUncaughtException");function CRe(e,t,r){if(S_[e.logLevel||"error"](e),e.statusCode)return typeof e.http_resp_msg!="object"?r.code(e.statusCode).send({error:e.http_resp_msg||e.message}):r.code(e.statusCode).send(e.http_resp_msg);let n=e.statusCode?e.statusCode:QR.HTTP_STATUS_CODES.INTERNAL_SERVER_ERROR;return typeof e=="string"?r.code(n).send({error:e}):r.code(n).send(e.message?{error:e.message}:e)}o(CRe,"serverErrorHandler");function PRe(e,t,r){if(!e.body||Object.keys(e.body).length===0||typeof e.body!="object"){let n=LD(new Error,"Invalid JSON.",QR.HTTP_STATUS_CODES.BAD_REQUEST);r(n,null)}if(SRe.isEmpty(e.body.operation)){let n=LD(new Error,"Request body must include an 'operation' property.",QR.HTTP_STATUS_CODES.BAD_REQUEST);r(n,null)}r()}o(PRe,"reqBodyValidationHandler");function DRe(e,t,r){let n;!wRe.includes(e.body.operation)||e.body.operation===JR.OPERATIONS_ENUM.CREATE_AUTHENTICATION_TOKENS&&!e.body.username&&!e.body.password?bRe(e,t).then(i=>{n=i,e.body.hdb_user=n,r()}).catch(i=>{S_.warn(i),S_.warn(`{"ip":"${e.socket.remoteAddress}", "error":"${i.stack}"`);let a=typeof i=="string"?{error:i}:{error:i.message};r(LD(i,a,QR.HTTP_STATUS_CODES.UNAUTHORIZED),null)}):(e.body.hdb_user=null,e.body.baseRequest=e.raw?.baseRequest,e.body.baseResponse=t.raw?.baseResponse,e.body.fastifyResponse=t,r())}o(DRe,"authHandler");async function LRe(e,t,r=!1){let n;try{e.body.bypass_auth&&delete e.body.bypass_auth,n=Qj.chooseOperation(e.body);let s=await Qj.processLocalTransaction(e,n);if(s instanceof RRe&&s.headers){for(let[i,a]of s.headers)t.header(i,a);e.headers["accept-encoding"]?.includes("gzip")&&(t.header("content-encoding","gzip"),s=s.pipe(IRe({level:NRe.Z_BEST_SPEED})))}return s}catch(s){throw S_.error(s),s}}o(LRe,"handlePostRequest");Xj.exports={authHandler:DRe,handlePostRequest:LRe,handleServerUncaughtException:ORe,serverErrorHandler:CRe,reqBodyValidationHandler:PRe}});var r2=M((ZHe,t2)=>{"use strict";var MRe=require("fastify-plugin"),{handlePostRequest:Zj,authHandler:vRe,reqBodyValidationHandler:URe}=XR();async function xRe(e){e.decorate("hdbCore",{preValidation:[URe,vRe],request:o(t=>e2(Zj(t,response)),"request"),requestWithoutAuthentication:o((t,r)=>e2(Zj(t,r,!0)),"requestWithoutAuthentication")})}o(xRe,"hdbCore");async function e2(e){if(e=await e,e?.[Symbol.asyncIterator]&&!e[Symbol.iterator]){let t=[];for await(let r of e)t.push(r);return t}return e}o(e2,"convertAsyncIterators");t2.exports=MRe(xRe)});var s2=M((rke,n2)=>{"use strict";var tke=require("fs"),ZR=oe();ZR.initSync();var{CONFIG_PARAMS:MD}=(F(),v(K)),BRe=1024*1024*1024;function FRe(e){let t=ZR.get(MD.HTTP_TIMEOUT),r=ZR.get(MD.HTTP_KEEPALIVETIMEOUT);return{bodyLimit:BRe,connectionTimeout:t,keepAliveTimeout:r,return503OnClosing:!1,forceCloseConnections:!0,ignoreTrailingSlash:!0,maxParamLength:ZR.get(MD.HTTP_MAXPARAMLENGTH)??1e3,https:e}}o(FRe,"getServerOptions");n2.exports=FRe});var a2=M((ske,o2)=>{"use strict";var vD=oe();vD.initSync();var{CONFIG_PARAMS:i2}=(F(),v(K));function HRe(){let e=vD.get(i2.HTTP_CORSACCESSLIST),t=vD.get(i2.HTTP_CORS),r;return t&&(r={origin:!0,allowedHeaders:["Content-Type","Authorization","Accept"],credentials:!1},e&&e.length>0&&e[0]!==null&&e[0]!=="*"&&(r.origin=(n,s)=>s(null,e.indexOf(n)!==-1))),r}o(HRe,"getCORSOptions");o2.exports=HRe});var u2=M((oke,l2)=>{"use strict";var c2=oe();c2.initSync();var kRe=(F(),v(K));function qRe(){return c2.get(kRe.CONFIG_PARAMS.HTTP_HEADERSTIMEOUT)??6e4}o(qRe,"getHeaderTimeoutConfig");l2.exports=qRe});var xD={};Oe(xD,{customFunctionsServer:()=>VRe,ready:()=>b2,start:()=>$Re});function $Re(e){let t=e.securePort>0;return{async handleFile(r,n,s,i){ha||(ha=A2(t),Le.http((await ha).server));let a=await ha,c=(0,UD.dirname)(s),l=(0,UD.dirname)(n);if(l.startsWith("/")&&(l=l.slice(1)),!d2.has(c)){d2.add(c);try{a.register(YRe(c,l))}catch(u){if(u.message==="Root plugin has already booted")Rt.warn(`Could not load root fastify route for ${s}, this may require a restart to install properly`);else throw u}}},ready:b2}}async function VRe(){try{Rt.info("In Custom Functions Fastify server"+process.cwd()),Rt.info(`Custom Functions Running with NODE_ENV set as: ${process.env.NODE_ENV}`),Rt.debug(`Custom Functions server process ${process.pid} starting up.`),await KRe();let e=E2.get(U.HTTP_SECUREPORT)>0,t;try{t=ha=await A2(e)}catch(r){throw Rt.error(`Custom Functions buildServer error: ${r}`),r}try{await t.ready()}catch(r){throw Rt.error(`Custom Functions server.ready() error: ${r}`),r}t.server.cantCleanupProperly=!0}catch(e){Rt.error(`Custom Functions ${process.pid} Error: ${e}`),Rt.error(e),process.exit(1)}}async function KRe(){try{Rt.info("Custom Functions starting configuration."),await g2.setUsersWithRolesCache(),Rt.info("Custom Functions completed configuration.")}catch(e){Rt.error(e)}}function YRe(e,t){return async function(r){try{Rt.info("Custom Functions starting buildRoutes"),Rt.trace("Loading fastify routes folder "+e),(0,f2.existsSync)(e)&&r.register(_2.default,s=>({dir:e,dirNameRoutePrefix:!1,options:{hdbCore:s.hdbCore,logger:Rt.loggerWithTag("custom-function"),prefix:`/${t}`}})).after((s,i,a)=>{s?.message?Rt.error(s.message):s&&Rt.error(s),a()})}catch(n){Rt.error(`Custom Functions errored buildRoutes: ${n}`)}}}async function A2(e){Rt.info("Custom Functions starting buildServer.");let t=(0,S2.default)(e),r=(0,m2.default)(t);r.server.headersTimeout=(0,R2.default)(),r.setErrorHandler(y2.serverErrorHandler);let n=(0,T2.default)();return n&&r.register(h2.default,n),r.register(function(s,i,a){s.setNotFoundHandler(function(c,l){r.server.emit("unhandled",c.raw,l.raw)}),a()}),r.register(p2.default),await r.register(GRe),await r.after(),Hm(r),Rt.info("Custom Functions completed buildServer."),r}function b2(){if(ha)return ha.then?ha.then(e=>e.ready()):ha.ready()}var UD,f2,m2,h2,p2,_2,E2,Rt,GRe,g2,S2,T2,R2,y2,ha,d2,I2=ue(()=>{UD=require("path"),f2=require("fs"),m2=w(require("fastify")),h2=w(require("@fastify/cors")),p2=w(Vw()),_2=w(require("@fastify/autoload")),E2=w(oe());F();Rt=w(j()),GRe=w(r2()),g2=w($n()),S2=w(s2()),T2=w(a2()),R2=w(u2()),y2=w(XR());xo();Ur();d2=new Set;o($Re,"start");o(VRe,"customFunctionsServer");o(KRe,"setUp");o(YRe,"buildRouteFolder");o(A2,"buildServer");o(b2,"ready")});var BD={};Oe(BD,{start:()=>WRe});function WRe(e){return{handleDirectory(t,r){if(t==="/"){let n=(0,P2.default)(r,e);return e.server.http(async(s,i)=>{if(!s.isWebSocket)return new Promise(a=>n(s._nodeRequest,s._nodeResponse,()=>{a(i(s))}))}),!0}},handleFile(t,r,n){w2||(w2=!0,e.server.http(async(s,i)=>{if(!s.isWebSocket){let a=N2.get(s.pathname);if(a)return{handlesHeaders:!0,body:(0,O2.default)(s,(0,C2.realpathSync)(a))}}return i(s)},{runFirst:!0})),N2.set(r,n)}}}var O2,C2,P2,N2,w2,D2=ue(()=>{O2=w(require("send")),C2=require("fs"),P2=w(require("serve-static")),N2=new Map;o(WRe,"start")});var FD={};Oe(FD,{start:()=>zRe});function zRe({override:e}){return{handleFile:o((t,r,n)=>{ey.default.debug(`Loading env file: ${n}`);for(let[s,i]of Object.entries((0,L2.parse)(t))){if(process.env[s]!==void 0)if(ey.default.warn(`Environment variable conflict: ${s} from ${n} is already set on process.env`),e)ey.default.debug(`override option enabled. overriding environment variable: ${s}`);else continue;process.env[s]=i}},"handleFile")}}var L2,ey,M2=ue(()=>{L2=require("dotenv"),ey=w(j());o(zRe,"start")});var HD={};Oe(HD,{DataLoaderError:()=>Ss,DataLoaderResult:()=>qf,EmptyFileError:()=>ny,FileParseError:()=>ry,InvalidPropertyTypeError:()=>sy,MissingRequiredPropertyError:()=>T_,RecordProcessingError:()=>R_,SystemDatabaseError:()=>iy,UnsupportedFileExtensionError:()=>ty,handleApplication:()=>JRe,loadDataFile:()=>F2,suppressHandleApplicationWarning:()=>jRe});function JRe(e){if((0,U2.getWorkerIndex)()!==0){To.debug?.("Skipping data loader initialization on non-primary worker");return}e.handleEntry(t=>{t.entryType!=="file"||t.eventType==="unlink"||F2(t,mn,ke).then(r=>{To.debug?.("Data loader processed file: %s: %s",(0,pa.basename)(t.absolutePath),r.message)})})}async function F2({contents:e,absolutePath:t,stats:r},n,s){let i=(0,pa.extname)(t)||"unknown",a;try{if(i===".yaml"||i===".yml")a=(0,v2.parseDocument)(e.toString()).toJSON();else if(i===".json")a=JSON.parse(e.toString());else throw new ty(t,i);a.mtime=r.mtimeMs}catch(f){throw f instanceof Ss?f:new ry(t,f)}if(!a)throw new ny(t);let{database:c,table:l,records:u}=a;if(!l)throw new T_(t,"table");if(!u)throw new T_(t,"records");if(!Array.isArray(u))throw new sy(t,"records","array");let d=c?`${c}.${l}`:l;if(c?.toLowerCase()==="system")throw new iy(c,l);try{let f;if(c&&s[c]&&s[c][l])To.debug?.(`Using existing table ${d} from database tables`),f=s[c][l];else if(n&&n[l])To.debug?.(`Using existing table ${d} from global tables`),f=n[l];else{To.debug?.(`Table ${d} not found, creating new table`);let y=[];if(u.length>0){let T=u[0];Object.keys(T).map(R=>{let N={name:R,type:typeof T[R]};return R==="id"&&(N.isPrimaryKey=!0),N}).forEach(R=>{y.push(R)})}f=await Je({database:c,table:l,attributes:y})}let m=u.length,h=0,p=0,E=0,g=100;for(let y=0;y<u.length;y+=g){let T=u.slice(y,y+g),R=[];for(let N of T)R.push(async()=>{try{let C=null,k=N.id;if(k!==void 0&&(C=await f.get(k)),!C)return h++,f.put(N);let te=C.getUpdatedTime();return a.mtime>te?(p++,f.put(N)):(E++,Promise.resolve({inserted:0,updated:0}))}catch(C){if(C instanceof Ss)To.error?.(`Record processing error: ${C.message}`);else{let k=new R_(d,C);To.error?.(`Record processing error: ${k.message}`)}return Promise.resolve({inserted:0,updated:0,error:C.message})}});await Promise.all(R.map(N=>N()))}if(h>0||p>0){let y=`Loaded ${h} new and updated ${p} records in ${d}`;return E>0&&(y+=` (${E} records skipped)`),To.info?.(y),new qf(t,c,l,"success",h+p,y)}else if(E>0){let y=`All ${E} records in ${d} already up-to-date`;return To.info?.(y),new qf(t,c,l,"skipped",m,y)}else{let y=`No records to process in ${d}`;return To.info?.(y),new qf(t,c,l,"success",0,y)}}catch(f){throw f instanceof Ss?f:new R_(d,f)}}var pa,v2,U2,_a,x2,B2,To,jRe,Ss,ty,ry,ny,T_,sy,iy,R_,qf,H2=ue(()=>{pa=require("node:path"),v2=require("yaml");De();U2=w(st()),_a=w(Vr()),x2=w(ge()),B2=w(j()),To=B2.default.forComponent("dataLoader"),jRe=!0;o(JRe,"handleApplication");o(F2,"loadDataFile");Ss=class extends x2.ClientError{static{o(this,"DataLoaderError")}constructor(t,r=_a.HTTP_STATUS_CODES.BAD_REQUEST){super(t,r),this.name="DataLoaderError"}},ty=class extends Ss{static{o(this,"UnsupportedFileExtensionError")}constructor(t,r){super(`Unsupported file extension in ${(0,pa.basename)(t)}: ${r}. Only YAML and JSON files are supported.`,_a.HTTP_STATUS_CODES.BAD_REQUEST),this.name="UnsupportedFileExtensionError"}},ry=class extends Ss{static{o(this,"FileParseError")}constructor(t,r){super(`Failed to parse data file ${(0,pa.basename)(t)}: ${r.message}`,_a.HTTP_STATUS_CODES.BAD_REQUEST),this.name="FileParseError"}},ny=class extends Ss{static{o(this,"EmptyFileError")}constructor(t){super(`Data file ${(0,pa.basename)(t)} is empty or invalid`,_a.HTTP_STATUS_CODES.BAD_REQUEST),this.name="EmptyFileError"}},T_=class extends Ss{static{o(this,"MissingRequiredPropertyError")}constructor(t,r){super(`Data file ${(0,pa.basename)(t)} is missing required "${r}" property`,_a.HTTP_STATUS_CODES.BAD_REQUEST),this.name="MissingRequiredPropertyError"}},sy=class extends Ss{static{o(this,"InvalidPropertyTypeError")}constructor(t,r,n){super(`Data file ${(0,pa.basename)(t)} has invalid "${r}" property, expected ${n}`,_a.HTTP_STATUS_CODES.BAD_REQUEST),this.name="InvalidPropertyTypeError"}},iy=class extends Ss{static{o(this,"SystemDatabaseError")}constructor(t,r){super(`Cannot load data into system database: ${t}.${r}`,_a.HTTP_STATUS_CODES.FORBIDDEN),this.name="SystemDatabaseError"}},R_=class extends Ss{static{o(this,"RecordProcessingError")}constructor(t,r){super(`Failed to process record in ${t}: ${r.message}`,_a.HTTP_STATUS_CODES.INTERNAL_SERVER_ERROR),this.name="RecordProcessingError"}},qf=class{static{o(this,"DataLoaderResult")}#e;#t;#r;#n;#s;#i;constructor(t,r,n,s,i,a){this.#e=t,this.#t=r||"unknown",this.#r=n||"unknown",this.#n=s,this.#s=i,this.#i=a}get filePath(){return this.#e}get database(){return this.#t}get table(){return this.#r}get status(){return this.#n}get count(){return this.#s}get message(){return this.#i}toJSON(){return{filePath:this.#e,database:this.#t,table:this.#r,status:this.#n,count:this.#s,message:this.#i}}}});var qD=M((gke,k2)=>{"use strict";var y_=oe();y_.initSync();var Gf=require("fs-extra"),kD=require("path"),$f=(F(),v(K)),QRe=require("crypto"),XRe=require("uuid").v4;k2.exports=ZRe;function ZRe(){if(y_.getHdbBasePath()!==void 0){let e=kD.join(y_.getHdbBasePath(),$f.LICENSE_KEY_DIR_NAME,$f.JWT_ENUM.JWT_PRIVATE_KEY_NAME),t=kD.join(y_.getHdbBasePath(),$f.LICENSE_KEY_DIR_NAME,$f.JWT_ENUM.JWT_PUBLIC_KEY_NAME),r=kD.join(y_.getHdbBasePath(),$f.LICENSE_KEY_DIR_NAME,$f.JWT_ENUM.JWT_PASSPHRASE_NAME);try{Gf.accessSync(r),Gf.accessSync(e),Gf.accessSync(t)}catch(n){if(n.code==="ENOENT"){let s=XRe(),i=QRe.generateKeyPairSync("rsa",{modulusLength:4096,publicKeyEncoding:{type:"spki",format:"pem"},privateKeyEncoding:{type:"pkcs8",format:"pem",cipher:"aes-256-cbc",passphrase:s}});Gf.writeFileSync(r,s),Gf.writeFileSync(e,i.privateKey),Gf.writeFileSync(t,i.publicKey)}else throw n}}}o(ZRe,"checkJWTTokenExist")});var G2=M((Tke,q2)=>{"use strict";var GD=class{static{o(this,"HdbInfoInsertObject")}constructor(t,r,n){this.info_id=t,this.data_version_num=r,this.hdb_version_num=n}};q2.exports={HdbInfoInsertObject:GD}});var K2=M((yke,V2)=>{"use strict";var $2=(F(),v(K)),$D=class{static{o(this,"UpgradeObject")}constructor(t,r){this[$2.UPGRADE_JSON_FIELD_NAMES_ENUM.DATA_VERSION]=t,this[$2.UPGRADE_JSON_FIELD_NAMES_ENUM.UPGRADE_VERSION]=r}};V2.exports={UpgradeObject:$D}});var oy=M((bke,W2)=>{"use strict";var ei=require("prompt"),Vf=require("chalk"),Y2=j(),Fi=require("os"),VD=Ga(),KD=["yes","y"];async function eye(e){let t=`${Fi.EOL}`+Vf.bold.green("Your current HarperDB version requires that we complete an update process.")+`${Fi.EOL}If a backup of your data has not been created, we recommend you cancel this process and backup before proceeding.${Fi.EOL}${Fi.EOL}You can read more about the changes in this upgrade at https://harperdb.io/developers/release-notes/${Fi.EOL}`;ei.override=VD(["CONFIRM_UPGRADE"]),ei.start(),ei.message=t;let r={properties:{CONFIRM_UPGRADE:{description:Vf.magenta(`${Fi.EOL}[CONFIRM_UPGRADE] Do you want to upgrade your HDB instance now? (yes/no)`),pattern:/y(es)?$|n(o)?$/,message:"Must respond 'yes' or 'no'",default:"no",required:!0}}},n;try{n=await ei.get([r])}catch(s){return Y2.error("There was an error when prompting user about an upgrade."),Y2.error(s),!1}return KD.includes(n.CONFIRM_UPGRADE)}o(eye,"forceUpdatePrompt");async function tye(e){let t=`${Fi.EOL}`+Vf.bold.green(`Your installed HarperDB version is older than the version used to create your data. Downgrading is not recommended as it is not tested and guaranteed to work. However, if you need to downgrade, and a backup of your data has not been created, we recommend you cancel this process and backup before proceeding.${Fi.EOL}`);ei.override=VD(["CONFIRM_DOWNGRADE"]),ei.start(),ei.message=t;let r={properties:{CONFIRM_DOWNGRADE:{description:Vf.magenta(`${Fi.EOL}[CONFIRM_DOWNGRADE] Do you want to proceed with using your downgraded HDB instance now? (yes/no)`),pattern:/y(es)?$|n(o)?$/,message:"Must respond 'yes' or 'no'",default:"no",required:!0}}},n=await ei.get([r]);return KD.includes(n.CONFIRM_DOWNGRADE)}o(tye,"forceDowngradePrompt");async function rye(){let e=`${Fi.EOL}`+Vf.bold.green("We now require a Certifacte Authority certificate. HarperDB can generate all new certificates for you (your existing certificates will be backed up) or you can keep any existing certificates and add your own CA certificate. To add your own CA certificate set the <certificateAuthority> parameter in harperdb-config.yaml");ei.override=VD(["GENERATE_CERTS"]),ei.start(),ei.message=e;let t={properties:{GENERATE_CERTS:{description:Vf.magenta(`${Fi.EOL}[GENERATE_CERTS] Do you want HarperDB to generate all new certificates? (yes/no)`),pattern:/y(es)?$|n(o)?$/,message:"Must respond 'yes' or 'no'",default:"yes",required:!0}}},r=await ei.get([t]);return KD.includes(r.GENERATE_CERTS)}o(rye,"upgradeCertsPrompt");W2.exports={forceUpdatePrompt:eye,forceDowngradePrompt:tye,upgradeCertsPrompt:rye}});var WD=M((Nke,z2)=>{"use strict";var YD=class{static{o(this,"UpgradeDirective")}constructor(t){this.version=t,this.sync_functions=[],this.async_functions=[]}};z2.exports=YD});var J2=M((Lke,j2)=>{"use strict";var nye=se(),sye=_t(),Oke=j(),Cke=require("path"),Pke=require("fs"),Dke=(F(),v(K));j2.exports={getOldPropsValue:iye};function iye(e,t,r=!1){let n=t.getRaw(e);return nye.isNotEmptyAndHasValue(n)?n:r?sye.getDefaultConfig(e):""}o(iye,"getOldPropsValue")});var eJ=M((vke,Z2)=>{"use strict";var Uc=require("path"),xc=require("fs-extra"),oye=require("properties-reader"),aye=WD(),Tr=j(),{getOldPropsValue:yt}=J2(),{HDB_SETTINGS_NAMES:ye,CONFIG_PARAMS:yu}=(F(),v(K)),Au=_t(),ay=oe(),Q2=se(),Ro=(F(),v(K)),zD=new aye("3.1.0"),X2=[];function cye(){let e=oye(ay.get(ye.SETTINGS_PATH_KEY)),t="Updating settings file for version 3.1.0";console.log(t),Tr.info(t);let r=`   ;Settings for the HarperDB process.
 
    ;The directory selected during install where the database files reside.