whale-code 6.5.6 → 6.5.8

package/dist/server/handlers/nodes-handlers-mgmt.js

@@ -0,0 +1,418 @@
+// handlers/nodes-handlers-mgmt.ts — Node management route handlers
+// register, heartbeat, list nodes, patch node, commands, rotate-key, delete
+// Extracted from nodes.ts for modularity.
+
+import { authenticateNode, userHasStoreAccess, generateNodeApiKey, hashApiKey, logNodeEvent, invalidateNodeAuth } from "./nodes-utils.js";
+export async function handleRegister(body, supabase, auth) {
+  if (!auth.userId && !auth.isServiceRole) {
+    return {
+      status: 401,
+      body: {
+        error: "User authentication required"
+      }
+    };
+  }
+  if (!body) return {
+    status: 400,
+    body: {
+      error: "Request body required"
+    }
+  };
+  const reg = body;
+  if (!reg.name || !reg.store_id) {
+    return {
+      status: 400,
+      body: {
+        error: "name and store_id required"
+      }
+    };
+  }
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, reg.store_id);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "No access to this store"
+      }
+    };
+  }
+  const {
+    data: planRow
+  } = await supabase.from("store_plans").select("plan, limits").eq("store_id", reg.store_id).single();
+  const nodesMax = planRow?.limits?.nodes_max ?? 1;
+  const {
+    count
+  } = await supabase.from("nodes").select("id", {
+    count: "exact",
+    head: true
+  }).eq("store_id", reg.store_id);
+  if ((count || 0) >= nodesMax) {
+    return {
+      status: 429,
+      body: {
+        error: `Node limit reached (${count}/${nodesMax} on ${planRow?.plan || "free"} plan)`
+      }
+    };
+  }
+  const apiKey = generateNodeApiKey();
+  const {
+    data: node,
+    error
+  } = await supabase.from("nodes").insert({
+    store_id: reg.store_id,
+    name: reg.name,
+    api_key_hash: hashApiKey(apiKey),
+    capabilities: reg.capabilities || [],
+    hardware: reg.hardware || {},
+    version: reg.version || "1.0.0",
+    config: reg.config || {},
+    status: "offline"
+  }).select("id, name, store_id, status, created_at").single();
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  await logNodeEvent(supabase, reg.store_id, node.id, "registered", {
+    name: reg.name,
+    registered_by: auth.userId
+  });
+  return {
+    status: 201,
+    body: {
+      success: true,
+      node,
+      api_key: apiKey,
+      message: "Save your API key — it cannot be retrieved later."
+    }
+  };
+}
+export async function handleHeartbeat(body, supabase, auth) {
+  const node = await authenticateNode(supabase, auth.rawToken);
+  if (!node) return {
+    status: 401,
+    body: {
+      error: "Invalid node API key"
+    }
+  };
+  const hb = body;
+  const updates = {
+    status: "online",
+    last_heartbeat: new Date().toISOString(),
+    updated_at: new Date().toISOString()
+  };
+  if (hb.hardware) updates.hardware = hb.hardware;
+  if (hb.capabilities) updates.capabilities = hb.capabilities;
+  if (hb.version) updates.version = hb.version;
+  await supabase.from("nodes").update(updates).eq("id", node.id);
+  if (hb.channels?.length) {
+    for (const ch of hb.channels) {
+      await supabase.from("channels").update({
+        status: ch.status,
+        updated_at: new Date().toISOString()
+      }).eq("node_id", node.id).eq("type", ch.type);
+    }
+  }
+  let pendingCommands = [];
+  try {
+    const {
+      data: cmds
+    } = await supabase.from("node_commands").select("id, command, payload").eq("node_id", node.id).eq("status", "pending").order("created_at", {
+      ascending: true
+    }).limit(10);
+    if (cmds?.length) {
+      pendingCommands = cmds;
+      const cmdIds = cmds.map(c => c.id);
+      await supabase.from("node_commands").update({
+        status: "acknowledged",
+        acknowledged_at: new Date().toISOString()
+      }).in("id", cmdIds);
+    }
+  } catch {/* Command delivery is best-effort */}
+  return {
+    status: 200,
+    body: {
+      success: true,
+      node_id: node.id,
+      commands: pendingCommands
+    }
+  };
+}
+export async function handleListNodes(body, supabase, auth, queryParams) {
+  const storeId = body?.store_id || queryParams?.get("store_id");
+  if (!storeId) return {
+    status: 400,
+    body: {
+      error: "store_id required"
+    }
+  };
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "Not authorized to access this store's nodes"
+      }
+    };
+  } else if (!auth.isServiceRole) {
+    return {
+      status: 401,
+      body: {
+        error: "Authentication required"
+      }
+    };
+  }
+  const {
+    data: nodes,
+    error
+  } = await supabase.from("nodes").select("id, name, status, hardware, capabilities, version, ip_address, last_heartbeat, created_at").eq("store_id", storeId).order("created_at", {
+    ascending: false
+  });
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  const nodeIds = (nodes || []).map(n => n.id);
+  const {
+    data: channels
+  } = nodeIds.length ? await supabase.from("channels").select("id, node_id, type, name, status, stats").in("node_id", nodeIds) : {
+    data: []
+  };
+  const result = (nodes || []).map(n => ({
+    ...n,
+    channels: (channels || []).filter(c => c.node_id === n.id)
+  }));
+  return {
+    status: 200,
+    body: {
+      success: true,
+      nodes: result
+    }
+  };
+}
+export async function handlePatchNode(nodeId, body, supabase, auth) {
+  if (!auth.userId && !auth.isServiceRole) {
+    return {
+      status: 401,
+      body: {
+        error: "User authentication required"
+      }
+    };
+  }
+  const {
+    data: nodeRow
+  } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+  if (!nodeRow) return {
+    status: 404,
+    body: {
+      error: "Node not found"
+    }
+  };
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, nodeRow.store_id);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "No access to this node"
+      }
+    };
+  }
+  const nodeUpdates = {
+    updated_at: new Date().toISOString()
+  };
+  if (body.name !== undefined) nodeUpdates.name = body.name;
+  if (body.capabilities !== undefined) nodeUpdates.capabilities = body.capabilities;
+  if (body.config !== undefined) nodeUpdates.config = body.config;
+  const {
+    data: updated,
+    error
+  } = await supabase.from("nodes").update(nodeUpdates).eq("id", nodeId).select("id, name, status, capabilities, config, version, hardware, last_heartbeat, updated_at").single();
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  return {
+    status: 200,
+    body: {
+      success: true,
+      node: updated
+    }
+  };
+}
+export async function handleNodeCommands(nodeId, body, supabase, auth) {
+  if (!auth.userId && !auth.isServiceRole) {
+    return {
+      status: 401,
+      body: {
+        error: "User authentication required"
+      }
+    };
+  }
+  if (!body) return {
+    status: 400,
+    body: {
+      error: "Request body required"
+    }
+  };
+  const command = body.command;
+  if (!command) return {
+    status: 400,
+    body: {
+      error: "command is required"
+    }
+  };
+  const validCommands = ["restart", "shutdown", "rotate_key", "pause_all_channels", "resume_all_channels", "update"];
+  if (!validCommands.includes(command)) {
+    return {
+      status: 400,
+      body: {
+        error: `Invalid command. Valid: ${validCommands.join(", ")}`
+      }
+    };
+  }
+  const {
+    data: targetNode
+  } = await supabase.from("nodes").select("id, store_id").eq("id", nodeId).single();
+  if (!targetNode) return {
+    status: 404,
+    body: {
+      error: "Node not found"
+    }
+  };
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, targetNode.store_id);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "No access to this node"
+      }
+    };
+  }
+  const {
+    data: cmd,
+    error
+  } = await supabase.from("node_commands").insert({
+    node_id: nodeId,
+    store_id: targetNode.store_id,
+    command,
+    payload: body.payload || {},
+    status: "pending"
+  }).select("id, command, status, created_at").single();
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  await logNodeEvent(supabase, targetNode.store_id, nodeId, "command_queued", {
+    command,
+    command_id: cmd.id,
+    queued_by: auth.userId
+  });
+  return {
+    status: 201,
+    body: {
+      success: true,
+      command: cmd
+    }
+  };
+}
+export async function handleRotateKey(nodeId, supabase, auth) {
+  if (!auth.userId && !auth.isServiceRole) {
+    return {
+      status: 401,
+      body: {
+        error: "User authentication required"
+      }
+    };
+  }
+  const {
+    data: rotateNode
+  } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+  if (!rotateNode) return {
+    status: 404,
+    body: {
+      error: "Node not found"
+    }
+  };
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, rotateNode.store_id);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "No access to this node"
+      }
+    };
+  }
+  const newApiKey = generateNodeApiKey();
+  const {
+    error
+  } = await supabase.from("nodes").update({
+    api_key_hash: hashApiKey(newApiKey),
+    updated_at: new Date().toISOString()
+  }).eq("id", nodeId);
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  invalidateNodeAuth(nodeId);
+  await logNodeEvent(supabase, rotateNode.store_id, nodeId, "key_rotated", {
+    rotated_by: auth.userId
+  });
+  return {
+    status: 200,
+    body: {
+      success: true,
+      api_key: newApiKey,
+      message: "Save your new API key — it cannot be retrieved later. The old key is now invalid."
+    }
+  };
+}
+export async function handleDeleteNode(nodeId, supabase, auth) {
+  const {
+    data: node
+  } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+  if (!node) return {
+    status: 404,
+    body: {
+      error: "Node not found"
+    }
+  };
+  if (auth.userId) {
+    const hasAccess = await userHasStoreAccess(supabase, auth.userId, node.store_id);
+    if (!hasAccess) return {
+      status: 403,
+      body: {
+        error: "No access to this node"
+      }
+    };
+  }
+  await logNodeEvent(supabase, node.store_id, nodeId, "deleted", {
+    name: node.name,
+    deleted_by: auth.userId
+  });
+  const {
+    error
+  } = await supabase.from("nodes").delete().eq("id", nodeId);
+  if (error) return {
+    status: 500,
+    body: {
+      error: error.message
+    }
+  };
+  return {
+    status: 200,
+    body: {
+      success: true,
+      deleted: nodeId
+    }
+  };
+}
+//# sourceMappingURL=nodes-handlers-mgmt.js.map

package/dist/server/handlers/nodes-handlers-mgmt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-handlers-mgmt.js","names":["authenticateNode","userHasStoreAccess","generateNodeApiKey","hashApiKey","logNodeEvent","invalidateNodeAuth","handleRegister","body","supabase","auth","userId","isServiceRole","status","error","reg","name","store_id","hasAccess","data","planRow","from","select","eq","single","nodesMax","limits","nodes_max","count","head","plan","apiKey","node","insert","api_key_hash","capabilities","hardware","version","config","message","id","registered_by","success","api_key","handleHeartbeat","rawToken","hb","updates","last_heartbeat","Date","toISOString","updated_at","update","channels","length","ch","type","pendingCommands","cmds","order","ascending","limit","cmdIds","map","c","acknowledged_at","in","node_id","commands","handleListNodes","queryParams","storeId","get","nodes","nodeIds","n","result","filter","handlePatchNode","nodeId","nodeRow","nodeUpdates","undefined","updated","handleNodeCommands","command","validCommands","includes","join","targetNode","cmd","payload","command_id","queued_by","handleRotateKey","rotateNode","newApiKey","rotated_by","handleDeleteNode","deleted_by","delete","deleted"],"sources":["../../../src/server/handlers/nodes-handlers-mgmt.ts"],"sourcesContent":["// handlers/nodes-handlers-mgmt.ts — Node management route handlers\n// register, heartbeat, list nodes, patch node, commands, rotate-key, delete\n// Extracted from nodes.ts for modularity.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport {\n  type NodeRegistration, type HeartbeatPayload,\n  authenticateNode, userHasStoreAccess, generateNodeApiKey,\n  hashApiKey, logNodeEvent, invalidateNodeAuth,\n} from \"./nodes-utils.js\";\n\ntype RouteResult = { status: number; body: Record<string, unknown> } | null;\n\nexport async function handleRegister(\n  body: Record<string, unknown> | null, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n): Promise<RouteResult> {\n  if (!auth.userId && !auth.isServiceRole) {\n    return { status: 401, body: { error: \"User authentication required\" } };\n  }\n  if (!body) return { status: 400, body: { error: \"Request body required\" } };\n  const reg = body as unknown as NodeRegistration;\n  if (!reg.name || !reg.store_id) {\n    return { status: 400, body: { error: \"name and store_id required\" } };\n  }\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, reg.store_id);\n    if (!hasAccess) return { status: 403, body: { error: \"No access to this store\" } };\n  }\n\n  const { data: planRow } = await supabase\n    .from(\"store_plans\").select(\"plan, limits\").eq(\"store_id\", reg.store_id).single();\n  const nodesMax = (planRow?.limits as { nodes_max?: number } | null)?.nodes_max ?? 1;\n  const { count } = await supabase\n    .from(\"nodes\").select(\"id\", { count: \"exact\", head: true }).eq(\"store_id\", reg.store_id);\n  if ((count || 0) >= nodesMax) {\n    return { status: 429, body: { error: `Node limit reached (${count}/${nodesMax} on ${planRow?.plan || \"free\"} plan)` } };\n  }\n\n  const apiKey = generateNodeApiKey();\n  const { data: node, error } = await supabase\n    .from(\"nodes\").insert({\n      store_id: reg.store_id, name: reg.name, api_key_hash: hashApiKey(apiKey),\n      capabilities: reg.capabilities || [], hardware: reg.hardware || {},\n      version: reg.version || \"1.0.0\", config: reg.config || {}, status: \"offline\",\n    }).select(\"id, name, store_id, status, created_at\").single();\n\n  if (error) return { status: 500, body: { error: error.message } };\n\n  await logNodeEvent(supabase, reg.store_id, node.id, \"registered\", {\n    name: reg.name, registered_by: auth.userId,\n  });\n\n  return {\n    status: 201,\n    body: { success: true, node, api_key: apiKey, message: \"Save your API key — it cannot be retrieved later.\" },\n  };\n}\n\nexport async function handleHeartbeat(\n  body: Record<string, unknown> | null, supabase: SupabaseClient,\n  auth: { rawToken: string },\n): Promise<RouteResult> {\n  const node = await authenticateNode(supabase, auth.rawToken);\n  if (!node) return { status: 401, body: { error: \"Invalid node API key\" } };\n\n  const hb = body as unknown as HeartbeatPayload;\n  const updates: Record<string, unknown> = {\n    status: \"online\", last_heartbeat: new Date().toISOString(), updated_at: new Date().toISOString(),\n  };\n  if (hb.hardware) updates.hardware = hb.hardware;\n  if (hb.capabilities) updates.capabilities = hb.capabilities;\n  if (hb.version) updates.version = hb.version;\n\n  await supabase.from(\"nodes\").update(updates).eq(\"id\", node.id);\n\n  if (hb.channels?.length) {\n    for (const ch of hb.channels) {\n      await supabase.from(\"channels\")\n        .update({ status: ch.status, updated_at: new Date().toISOString() })\n        .eq(\"node_id\", node.id).eq(\"type\", ch.type);\n    }\n  }\n\n  let pendingCommands: Array<{ id: string; command: string; payload: unknown }> = [];\n  try {\n    const { data: cmds } = await supabase\n      .from(\"node_commands\").select(\"id, command, payload\")\n      .eq(\"node_id\", node.id).eq(\"status\", \"pending\")\n      .order(\"created_at\", { ascending: true }).limit(10);\n    if (cmds?.length) {\n      pendingCommands = cmds;\n      const cmdIds = cmds.map((c: { id: string }) => c.id);\n      await supabase.from(\"node_commands\")\n        .update({ status: \"acknowledged\", acknowledged_at: new Date().toISOString() })\n        .in(\"id\", cmdIds);\n    }\n  } catch { /* Command delivery is best-effort */ }\n\n  return { status: 200, body: { success: true, node_id: node.id, commands: pendingCommands } };\n}\n\nexport async function handleListNodes(\n  body: Record<string, unknown> | null, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n  queryParams?: URLSearchParams,\n): Promise<RouteResult> {\n  const storeId = (body as any)?.store_id || queryParams?.get(\"store_id\");\n  if (!storeId) return { status: 400, body: { error: \"store_id required\" } };\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);\n    if (!hasAccess) return { status: 403, body: { error: \"Not authorized to access this store's nodes\" } };\n  } else if (!auth.isServiceRole) {\n    return { status: 401, body: { error: \"Authentication required\" } };\n  }\n\n  const { data: nodes, error } = await supabase\n    .from(\"nodes\")\n    .select(\"id, name, status, hardware, capabilities, version, ip_address, last_heartbeat, created_at\")\n    .eq(\"store_id\", storeId).order(\"created_at\", { ascending: false });\n  if (error) return { status: 500, body: { error: error.message } };\n\n  const nodeIds = (nodes || []).map((n: any) => n.id);\n  const { data: channels } = nodeIds.length\n    ? await supabase.from(\"channels\").select(\"id, node_id, type, name, status, stats\").in(\"node_id\", nodeIds)\n    : { data: [] };\n\n  const result = (nodes || []).map((n: any) => ({\n    ...n, channels: (channels || []).filter((c: any) => c.node_id === n.id),\n  }));\n\n  return { status: 200, body: { success: true, nodes: result } };\n}\n\nexport async function handlePatchNode(\n  nodeId: string, body: Record<string, unknown> | null, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n): Promise<RouteResult> {\n  if (!auth.userId && !auth.isServiceRole) {\n    return { status: 401, body: { error: \"User authentication required\" } };\n  }\n  const { data: nodeRow } = await supabase\n    .from(\"nodes\").select(\"id, store_id, name\").eq(\"id\", nodeId).single();\n  if (!nodeRow) return { status: 404, body: { error: \"Node not found\" } };\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, nodeRow.store_id);\n    if (!hasAccess) return { status: 403, body: { error: \"No access to this node\" } };\n  }\n\n  const nodeUpdates: Record<string, unknown> = { updated_at: new Date().toISOString() };\n  if ((body as any).name !== undefined) nodeUpdates.name = (body as any).name;\n  if ((body as any).capabilities !== undefined) nodeUpdates.capabilities = (body as any).capabilities;\n  if ((body as any).config !== undefined) nodeUpdates.config = (body as any).config;\n\n  const { data: updated, error } = await supabase\n    .from(\"nodes\").update(nodeUpdates).eq(\"id\", nodeId)\n    .select(\"id, name, status, capabilities, config, version, hardware, last_heartbeat, updated_at\").single();\n  if (error) return { status: 500, body: { error: error.message } };\n\n  return { status: 200, body: { success: true, node: updated } };\n}\n\nexport async function handleNodeCommands(\n  nodeId: string, body: Record<string, unknown> | null, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n): Promise<RouteResult> {\n  if (!auth.userId && !auth.isServiceRole) {\n    return { status: 401, body: { error: \"User authentication required\" } };\n  }\n  if (!body) return { status: 400, body: { error: \"Request body required\" } };\n\n  const command = (body as any).command as string;\n  if (!command) return { status: 400, body: { error: \"command is required\" } };\n\n  const validCommands = [\"restart\", \"shutdown\", \"rotate_key\", \"pause_all_channels\", \"resume_all_channels\", \"update\"];\n  if (!validCommands.includes(command)) {\n    return { status: 400, body: { error: `Invalid command. Valid: ${validCommands.join(\", \")}` } };\n  }\n\n  const { data: targetNode } = await supabase\n    .from(\"nodes\").select(\"id, store_id\").eq(\"id\", nodeId).single();\n  if (!targetNode) return { status: 404, body: { error: \"Node not found\" } };\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, targetNode.store_id);\n    if (!hasAccess) return { status: 403, body: { error: \"No access to this node\" } };\n  }\n\n  const { data: cmd, error } = await supabase\n    .from(\"node_commands\").insert({\n      node_id: nodeId, store_id: targetNode.store_id,\n      command, payload: (body as any).payload || {}, status: \"pending\",\n    }).select(\"id, command, status, created_at\").single();\n  if (error) return { status: 500, body: { error: error.message } };\n\n  await logNodeEvent(supabase, targetNode.store_id, nodeId, \"command_queued\", {\n    command, command_id: cmd.id, queued_by: auth.userId,\n  });\n\n  return { status: 201, body: { success: true, command: cmd } };\n}\n\nexport async function handleRotateKey(\n  nodeId: string, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n): Promise<RouteResult> {\n  if (!auth.userId && !auth.isServiceRole) {\n    return { status: 401, body: { error: \"User authentication required\" } };\n  }\n\n  const { data: rotateNode } = await supabase\n    .from(\"nodes\").select(\"id, store_id, name\").eq(\"id\", nodeId).single();\n  if (!rotateNode) return { status: 404, body: { error: \"Node not found\" } };\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, rotateNode.store_id);\n    if (!hasAccess) return { status: 403, body: { error: \"No access to this node\" } };\n  }\n\n  const newApiKey = generateNodeApiKey();\n  const { error } = await supabase\n    .from(\"nodes\").update({ api_key_hash: hashApiKey(newApiKey), updated_at: new Date().toISOString() })\n    .eq(\"id\", nodeId);\n  if (error) return { status: 500, body: { error: error.message } };\n\n  invalidateNodeAuth(nodeId);\n\n  await logNodeEvent(supabase, rotateNode.store_id, nodeId, \"key_rotated\", { rotated_by: auth.userId });\n\n  return {\n    status: 200,\n    body: { success: true, api_key: newApiKey, message: \"Save your new API key — it cannot be retrieved later. The old key is now invalid.\" },\n  };\n}\n\nexport async function handleDeleteNode(\n  nodeId: string, supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean },\n): Promise<RouteResult> {\n  const { data: node } = await supabase\n    .from(\"nodes\").select(\"id, store_id, name\").eq(\"id\", nodeId).single();\n  if (!node) return { status: 404, body: { error: \"Node not found\" } };\n\n  if (auth.userId) {\n    const hasAccess = await userHasStoreAccess(supabase, auth.userId, node.store_id);\n    if (!hasAccess) return { status: 403, body: { error: \"No access to this node\" } };\n  }\n\n  await logNodeEvent(supabase, node.store_id, nodeId, \"deleted\", {\n    name: node.name, deleted_by: auth.userId,\n  });\n\n  const { error } = await supabase.from(\"nodes\").delete().eq(\"id\", nodeId);\n  if (error) return { status: 500, body: { error: error.message } };\n\n  return { status: 200, body: { success: true, deleted: nodeId } };\n}\n"],"mappings":"AAAA;AACA;AACA;;AAGA,SAEEA,gBAAgB,EAAEC,kBAAkB,EAAEC,kBAAkB,EACxDC,UAAU,EAAEC,YAAY,EAAEC,kBAAkB,QACvC,kBAAkB;AAIzB,OAAO,eAAeC,cAAcA,CAClCC,IAAoC,EAAEC,QAAwB,EAC9DC,IAAiD,EAC3B;EACtB,IAAI,CAACA,IAAI,CAACC,MAAM,IAAI,CAACD,IAAI,CAACE,aAAa,EAAE;IACvC,OAAO;MAAEC,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA+B;IAAE,CAAC;EACzE;EACA,IAAI,CAACN,IAAI,EAAE,OAAO;IAAEK,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAwB;EAAE,CAAC;EAC3E,MAAMC,GAAG,GAAGP,IAAmC;EAC/C,IAAI,CAACO,GAAG,CAACC,IAAI,IAAI,CAACD,GAAG,CAACE,QAAQ,EAAE;IAC9B,OAAO;MAAEJ,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA6B;IAAE,CAAC;EACvE;EAEA,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAEI,GAAG,CAACE,QAAQ,CAAC;IAC/E,IAAI,CAACC,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA0B;IAAE,CAAC;EACpF;EAEA,MAAM;IAAEK,IAAI,EAAEC;EAAQ,CAAC,GAAG,MAAMX,QAAQ,CACrCY,IAAI,CAAC,aAAa,CAAC,CAACC,MAAM,CAAC,cAAc,CAAC,CAACC,EAAE,CAAC,UAAU,EAAER,GAAG,CAACE,QAAQ,CAAC,CAACO,MAAM,CAAC,CAAC;EACnF,MAAMC,QAAQ,GAAIL,OAAO,EAAEM,MAAM,EAAoCC,SAAS,IAAI,CAAC;EACnF,MAAM;IAAEC;EAAM,CAAC,GAAG,MAAMnB,QAAQ,CAC7BY,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,IAAI,EAAE;IAAEM,KAAK,EAAE,OAAO;IAAEC,IAAI,EAAE;EAAK,CAAC,CAAC,CAACN,EAAE,CAAC,UAAU,EAAER,GAAG,CAACE,QAAQ,CAAC;EAC1F,IAAI,CAACW,KAAK,IAAI,CAAC,KAAKH,QAAQ,EAAE;IAC5B,OAAO;MAAEZ,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE,uBAAuBc,KAAK,IAAIH,QAAQ,OAAOL,OAAO,EAAEU,IAAI,IAAI,MAAM;MAAS;IAAE,CAAC;EACzH;EAEA,MAAMC,MAAM,GAAG5B,kBAAkB,CAAC,CAAC;EACnC,MAAM;IAAEgB,IAAI,EAAEa,IAAI;IAAElB;EAAM,CAAC,GAAG,MAAML,QAAQ,CACzCY,IAAI,CAAC,OAAO,CAAC,CAACY,MAAM,CAAC;IACpBhB,QAAQ,EAAEF,GAAG,CAACE,QAAQ;IAAED,IAAI,EAAED,GAAG,CAACC,IAAI;IAAEkB,YAAY,EAAE9B,UAAU,CAAC2B,MAAM,CAAC;IACxEI,YAAY,EAAEpB,GAAG,CAACoB,YAAY,IAAI,EAAE;IAAEC,QAAQ,EAAErB,GAAG,CAACqB,QAAQ,IAAI,CAAC,CAAC;IAClEC,OAAO,EAAEtB,GAAG,CAACsB,OAAO,IAAI,OAAO;IAAEC,MAAM,EAAEvB,GAAG,CAACuB,MAAM,IAAI,CAAC,CAAC;IAAEzB,MAAM,EAAE;EACrE,CAAC,CAAC,CAACS,MAAM,CAAC,wCAAwC,CAAC,CAACE,MAAM,CAAC,CAAC;EAE9D,IAAIV,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjE,MAAMlC,YAAY,CAACI,QAAQ,EAAEM,GAAG,CAACE,QAAQ,EAAEe,IAAI,CAACQ,EAAE,EAAE,YAAY,EAAE;IAChExB,IAAI,EAAED,GAAG,CAACC,IAAI;IAAEyB,aAAa,EAAE/B,IAAI,CAACC;EACtC,CAAC,CAAC;EAEF,OAAO;IACLE,MAAM,EAAE,GAAG;IACXL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAEV,IAAI;MAAEW,OAAO,EAAEZ,MAAM;MAAEQ,OAAO,EAAE;IAAoD;EAC7G,CAAC;AACH;AAEA,OAAO,eAAeK,eAAeA,CACnCpC,IAAoC,EAAEC,QAAwB,EAC9DC,IAA0B,EACJ;EACtB,MAAMsB,IAAI,GAAG,MAAM/B,gBAAgB,CAACQ,QAAQ,EAAEC,IAAI,CAACmC,QAAQ,CAAC;EAC5D,IAAI,CAACb,IAAI,EAAE,OAAO;IAAEnB,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAuB;EAAE,CAAC;EAE1E,MAAMgC,EAAE,GAAGtC,IAAmC;EAC9C,MAAMuC,OAAgC,GAAG;IACvClC,MAAM,EAAE,QAAQ;IAAEmC,cAAc,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;IAAEC,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;EACjG,CAAC;EACD,IAAIJ,EAAE,CAACV,QAAQ,EAAEW,OAAO,CAACX,QAAQ,GAAGU,EAAE,CAACV,QAAQ;EAC/C,IAAIU,EAAE,CAACX,YAAY,EAAEY,OAAO,CAACZ,YAAY,GAAGW,EAAE,CAACX,YAAY;EAC3D,IAAIW,EAAE,CAACT,OAAO,EAAEU,OAAO,CAACV,OAAO,GAAGS,EAAE,CAACT,OAAO;EAE5C,MAAM5B,QAAQ,CAACY,IAAI,CAAC,OAAO,CAAC,CAAC+B,MAAM,CAACL,OAAO,CAAC,CAACxB,EAAE,CAAC,IAAI,EAAES,IAAI,CAACQ,EAAE,CAAC;EAE9D,IAAIM,EAAE,CAACO,QAAQ,EAAEC,MAAM,EAAE;IACvB,KAAK,MAAMC,EAAE,IAAIT,EAAE,CAACO,QAAQ,EAAE;MAC5B,MAAM5C,QAAQ,CAACY,IAAI,CAAC,UAAU,CAAC,CAC5B+B,MAAM,CAAC;QAAEvC,MAAM,EAAE0C,EAAE,CAAC1C,MAAM;QAAEsC,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;MAAE,CAAC,CAAC,CACnE3B,EAAE,CAAC,SAAS,EAAES,IAAI,CAACQ,EAAE,CAAC,CAACjB,EAAE,CAAC,MAAM,EAAEgC,EAAE,CAACC,IAAI,CAAC;IAC/C;EACF;EAEA,IAAIC,eAAyE,GAAG,EAAE;EAClF,IAAI;IACF,MAAM;MAAEtC,IAAI,EAAEuC;IAAK,CAAC,GAAG,MAAMjD,QAAQ,CAClCY,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,sBAAsB,CAAC,CACpDC,EAAE,CAAC,SAAS,EAAES,IAAI,CAACQ,EAAE,CAAC,CAACjB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC9CoC,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAK,CAAC,CAAC,CAACC,KAAK,CAAC,EAAE,CAAC;IACrD,IAAIH,IAAI,EAAEJ,MAAM,EAAE;MAChBG,eAAe,GAAGC,IAAI;MACtB,MAAMI,MAAM,GAAGJ,IAAI,CAACK,GAAG,CAAEC,CAAiB,IAAKA,CAAC,CAACxB,EAAE,CAAC;MACpD,MAAM/B,QAAQ,CAACY,IAAI,CAAC,eAAe,CAAC,CACjC+B,MAAM,CAAC;QAAEvC,MAAM,EAAE,cAAc;QAAEoD,eAAe,EAAE,IAAIhB,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;MAAE,CAAC,CAAC,CAC7EgB,EAAE,CAAC,IAAI,EAAEJ,MAAM,CAAC;IACrB;EACF,CAAC,CAAC,MAAM,CAAE;EAEV,OAAO;IAAEjD,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAEyB,OAAO,EAAEnC,IAAI,CAACQ,EAAE;MAAE4B,QAAQ,EAAEX;IAAgB;EAAE,CAAC;AAC9F;AAEA,OAAO,eAAeY,eAAeA,CACnC7D,IAAoC,EAAEC,QAAwB,EAC9DC,IAAiD,EACjD4D,WAA6B,EACP;EACtB,MAAMC,OAAO,GAAI/D,IAAI,EAAUS,QAAQ,IAAIqD,WAAW,EAAEE,GAAG,CAAC,UAAU,CAAC;EACvE,IAAI,CAACD,OAAO,EAAE,OAAO;IAAE1D,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAoB;EAAE,CAAC;EAE1E,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAE4D,OAAO,CAAC;IAC1E,IAAI,CAACrD,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA8C;IAAE,CAAC;EACxG,CAAC,MAAM,IAAI,CAACJ,IAAI,CAACE,aAAa,EAAE;IAC9B,OAAO;MAAEC,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA0B;IAAE,CAAC;EACpE;EAEA,MAAM;IAAEK,IAAI,EAAEsD,KAAK;IAAE3D;EAAM,CAAC,GAAG,MAAML,QAAQ,CAC1CY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,2FAA2F,CAAC,CACnGC,EAAE,CAAC,UAAU,EAAEgD,OAAO,CAAC,CAACZ,KAAK,CAAC,YAAY,EAAE;IAAEC,SAAS,EAAE;EAAM,CAAC,CAAC;EACpE,IAAI9C,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjE,MAAMmC,OAAO,GAAG,CAACD,KAAK,IAAI,EAAE,EAAEV,GAAG,CAAEY,CAAM,IAAKA,CAAC,CAACnC,EAAE,CAAC;EACnD,MAAM;IAAErB,IAAI,EAAEkC;EAAS,CAAC,GAAGqB,OAAO,CAACpB,MAAM,GACrC,MAAM7C,QAAQ,CAACY,IAAI,CAAC,UAAU,CAAC,CAACC,MAAM,CAAC,wCAAwC,CAAC,CAAC4C,EAAE,CAAC,SAAS,EAAEQ,OAAO,CAAC,GACvG;IAAEvD,IAAI,EAAE;EAAG,CAAC;EAEhB,MAAMyD,MAAM,GAAG,CAACH,KAAK,IAAI,EAAE,EAAEV,GAAG,CAAEY,CAAM,KAAM;IAC5C,GAAGA,CAAC;IAAEtB,QAAQ,EAAE,CAACA,QAAQ,IAAI,EAAE,EAAEwB,MAAM,CAAEb,CAAM,IAAKA,CAAC,CAACG,OAAO,KAAKQ,CAAC,CAACnC,EAAE;EACxE,CAAC,CAAC,CAAC;EAEH,OAAO;IAAE3B,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAE+B,KAAK,EAAEG;IAAO;EAAE,CAAC;AAChE;AAEA,OAAO,eAAeE,eAAeA,CACnCC,MAAc,EAAEvE,IAAoC,EAAEC,QAAwB,EAC9EC,IAAiD,EAC3B;EACtB,IAAI,CAACA,IAAI,CAACC,MAAM,IAAI,CAACD,IAAI,CAACE,aAAa,EAAE;IACvC,OAAO;MAAEC,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA+B;IAAE,CAAC;EACzE;EACA,MAAM;IAAEK,IAAI,EAAE6D;EAAQ,CAAC,GAAG,MAAMvE,QAAQ,CACrCY,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,oBAAoB,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC,CAACvD,MAAM,CAAC,CAAC;EACvE,IAAI,CAACwD,OAAO,EAAE,OAAO;IAAEnE,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAiB;EAAE,CAAC;EAEvE,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAEqE,OAAO,CAAC/D,QAAQ,CAAC;IACnF,IAAI,CAACC,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAAyB;IAAE,CAAC;EACnF;EAEA,MAAMmE,WAAoC,GAAG;IAAE9B,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;EAAE,CAAC;EACrF,IAAK1C,IAAI,CAASQ,IAAI,KAAKkE,SAAS,EAAED,WAAW,CAACjE,IAAI,GAAIR,IAAI,CAASQ,IAAI;EAC3E,IAAKR,IAAI,CAAS2B,YAAY,KAAK+C,SAAS,EAAED,WAAW,CAAC9C,YAAY,GAAI3B,IAAI,CAAS2B,YAAY;EACnG,IAAK3B,IAAI,CAAS8B,MAAM,KAAK4C,SAAS,EAAED,WAAW,CAAC3C,MAAM,GAAI9B,IAAI,CAAS8B,MAAM;EAEjF,MAAM;IAAEnB,IAAI,EAAEgE,OAAO;IAAErE;EAAM,CAAC,GAAG,MAAML,QAAQ,CAC5CY,IAAI,CAAC,OAAO,CAAC,CAAC+B,MAAM,CAAC6B,WAAW,CAAC,CAAC1D,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC,CAClDzD,MAAM,CAAC,uFAAuF,CAAC,CAACE,MAAM,CAAC,CAAC;EAC3G,IAAIV,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjE,OAAO;IAAE1B,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAEV,IAAI,EAAEmD;IAAQ;EAAE,CAAC;AAChE;AAEA,OAAO,eAAeC,kBAAkBA,CACtCL,MAAc,EAAEvE,IAAoC,EAAEC,QAAwB,EAC9EC,IAAiD,EAC3B;EACtB,IAAI,CAACA,IAAI,CAACC,MAAM,IAAI,CAACD,IAAI,CAACE,aAAa,EAAE;IACvC,OAAO;MAAEC,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA+B;IAAE,CAAC;EACzE;EACA,IAAI,CAACN,IAAI,EAAE,OAAO;IAAEK,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAwB;EAAE,CAAC;EAE3E,MAAMuE,OAAO,GAAI7E,IAAI,CAAS6E,OAAiB;EAC/C,IAAI,CAACA,OAAO,EAAE,OAAO;IAAExE,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAsB;EAAE,CAAC;EAE5E,MAAMwE,aAAa,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,QAAQ,CAAC;EAClH,IAAI,CAACA,aAAa,CAACC,QAAQ,CAACF,OAAO,CAAC,EAAE;IACpC,OAAO;MAAExE,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE,2BAA2BwE,aAAa,CAACE,IAAI,CAAC,IAAI,CAAC;MAAG;IAAE,CAAC;EAChG;EAEA,MAAM;IAAErE,IAAI,EAAEsE;EAAW,CAAC,GAAG,MAAMhF,QAAQ,CACxCY,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,cAAc,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC,CAACvD,MAAM,CAAC,CAAC;EACjE,IAAI,CAACiE,UAAU,EAAE,OAAO;IAAE5E,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAiB;EAAE,CAAC;EAE1E,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAE8E,UAAU,CAACxE,QAAQ,CAAC;IACtF,IAAI,CAACC,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAAyB;IAAE,CAAC;EACnF;EAEA,MAAM;IAAEK,IAAI,EAAEuE,GAAG;IAAE5E;EAAM,CAAC,GAAG,MAAML,QAAQ,CACxCY,IAAI,CAAC,eAAe,CAAC,CAACY,MAAM,CAAC;IAC5BkC,OAAO,EAAEY,MAAM;IAAE9D,QAAQ,EAAEwE,UAAU,CAACxE,QAAQ;IAC9CoE,OAAO;IAAEM,OAAO,EAAGnF,IAAI,CAASmF,OAAO,IAAI,CAAC,CAAC;IAAE9E,MAAM,EAAE;EACzD,CAAC,CAAC,CAACS,MAAM,CAAC,iCAAiC,CAAC,CAACE,MAAM,CAAC,CAAC;EACvD,IAAIV,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjE,MAAMlC,YAAY,CAACI,QAAQ,EAAEgF,UAAU,CAACxE,QAAQ,EAAE8D,MAAM,EAAE,gBAAgB,EAAE;IAC1EM,OAAO;IAAEO,UAAU,EAAEF,GAAG,CAAClD,EAAE;IAAEqD,SAAS,EAAEnF,IAAI,CAACC;EAC/C,CAAC,CAAC;EAEF,OAAO;IAAEE,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAE2C,OAAO,EAAEK;IAAI;EAAE,CAAC;AAC/D;AAEA,OAAO,eAAeI,eAAeA,CACnCf,MAAc,EAAEtE,QAAwB,EACxCC,IAAiD,EAC3B;EACtB,IAAI,CAACA,IAAI,CAACC,MAAM,IAAI,CAACD,IAAI,CAACE,aAAa,EAAE;IACvC,OAAO;MAAEC,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAA+B;IAAE,CAAC;EACzE;EAEA,MAAM;IAAEK,IAAI,EAAE4E;EAAW,CAAC,GAAG,MAAMtF,QAAQ,CACxCY,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,oBAAoB,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC,CAACvD,MAAM,CAAC,CAAC;EACvE,IAAI,CAACuE,UAAU,EAAE,OAAO;IAAElF,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAiB;EAAE,CAAC;EAE1E,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAEoF,UAAU,CAAC9E,QAAQ,CAAC;IACtF,IAAI,CAACC,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAAyB;IAAE,CAAC;EACnF;EAEA,MAAMkF,SAAS,GAAG7F,kBAAkB,CAAC,CAAC;EACtC,MAAM;IAAEW;EAAM,CAAC,GAAG,MAAML,QAAQ,CAC7BY,IAAI,CAAC,OAAO,CAAC,CAAC+B,MAAM,CAAC;IAAElB,YAAY,EAAE9B,UAAU,CAAC4F,SAAS,CAAC;IAAE7C,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;EAAE,CAAC,CAAC,CACnG3B,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC;EACnB,IAAIjE,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjEjC,kBAAkB,CAACyE,MAAM,CAAC;EAE1B,MAAM1E,YAAY,CAACI,QAAQ,EAAEsF,UAAU,CAAC9E,QAAQ,EAAE8D,MAAM,EAAE,aAAa,EAAE;IAAEkB,UAAU,EAAEvF,IAAI,CAACC;EAAO,CAAC,CAAC;EAErG,OAAO;IACLE,MAAM,EAAE,GAAG;IACXL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAEC,OAAO,EAAEqD,SAAS;MAAEzD,OAAO,EAAE;IAAoF;EAC1I,CAAC;AACH;AAEA,OAAO,eAAe2D,gBAAgBA,CACpCnB,MAAc,EAAEtE,QAAwB,EACxCC,IAAiD,EAC3B;EACtB,MAAM;IAAES,IAAI,EAAEa;EAAK,CAAC,GAAG,MAAMvB,QAAQ,CAClCY,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,oBAAoB,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC,CAACvD,MAAM,CAAC,CAAC;EACvE,IAAI,CAACQ,IAAI,EAAE,OAAO;IAAEnB,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAE;IAAiB;EAAE,CAAC;EAEpE,IAAIJ,IAAI,CAACC,MAAM,EAAE;IACf,MAAMO,SAAS,GAAG,MAAMhB,kBAAkB,CAACO,QAAQ,EAAEC,IAAI,CAACC,MAAM,EAAEqB,IAAI,CAACf,QAAQ,CAAC;IAChF,IAAI,CAACC,SAAS,EAAE,OAAO;MAAEL,MAAM,EAAE,GAAG;MAAEL,IAAI,EAAE;QAAEM,KAAK,EAAE;MAAyB;IAAE,CAAC;EACnF;EAEA,MAAMT,YAAY,CAACI,QAAQ,EAAEuB,IAAI,CAACf,QAAQ,EAAE8D,MAAM,EAAE,SAAS,EAAE;IAC7D/D,IAAI,EAAEgB,IAAI,CAAChB,IAAI;IAAEmF,UAAU,EAAEzF,IAAI,CAACC;EACpC,CAAC,CAAC;EAEF,MAAM;IAAEG;EAAM,CAAC,GAAG,MAAML,QAAQ,CAACY,IAAI,CAAC,OAAO,CAAC,CAAC+E,MAAM,CAAC,CAAC,CAAC7E,EAAE,CAAC,IAAI,EAAEwD,MAAM,CAAC;EACxE,IAAIjE,KAAK,EAAE,OAAO;IAAED,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEM,KAAK,EAAEA,KAAK,CAACyB;IAAQ;EAAE,CAAC;EAEjE,OAAO;IAAE1B,MAAM,EAAE,GAAG;IAAEL,IAAI,EAAE;MAAEkC,OAAO,EAAE,IAAI;MAAE2D,OAAO,EAAEtB;IAAO;EAAE,CAAC;AAClE","ignoreList":[]}

package/dist/server/handlers/nodes-list-delete.test.js

@@ -0,0 +1,171 @@
+// nodes-list-delete.test.ts — Tests for GET|POST /nodes (list) and DELETE /nodes/:id
+
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { HAS_TEST_DB, getTestClient, seedTracked, cleanup, TEST_STORE, RUN_PREFIX } from "./__test-utils__/test-db.js";
+// ---------------------------------------------------------------------------
+// Mock dependencies
+// ---------------------------------------------------------------------------
+
+vi.mock("./billing.js", () => ({
+  checkPlanLimits: vi.fn().mockResolvedValue({
+    allowed: true
+  }),
+  incrementUsage: vi.fn().mockResolvedValue(undefined)
+}));
+vi.mock("node:crypto", async importOriginal => {
+  const actual = await importOriginal();
+  return {
+    ...actual,
+    createHash: vi.fn().mockReturnValue({
+      update: vi.fn().mockReturnValue({
+        digest: vi.fn().mockReturnValue("mocked-hash-abc123")
+      })
+    }),
+    randomBytes: vi.fn().mockReturnValue({
+      toString: vi.fn().mockReturnValue("mocked-api-key-hex-string-64chars-long-enough-for-testing-12345678")
+    }),
+    randomUUID: vi.fn().mockReturnValue("a0a0a0a0-0001-0002-0003-000000000001")
+  };
+});
+import { handleNodeRoutes, clearNodeAuthCache } from "./nodes.js";
+const sb = getTestClient();
+const USER_ID = "562fd6cb-ef83-4eca-b999-ffeac2293ee7";
+const NODE_ID = "a0a0a0a0-0001-0002-0003-000000000001";
+function makeNode(overrides = {}) {
+  return {
+    id: NODE_ID,
+    store_id: TEST_STORE,
+    name: `${RUN_PREFIX} Test Node`,
+    api_key_hash: "mocked-hash-abc123",
+    status: "online",
+    capabilities: ["chat", "voice"],
+    hardware: {
+      cpu: "arm64"
+    },
+    version: "1.0.0",
+    ip_address: null,
+    last_heartbeat: "2026-01-01T00:00:00Z",
+    created_at: "2026-01-01T00:00:00Z",
+    ...overrides
+  };
+}
+function makeAuth(overrides = {}) {
+  return {
+    userId: USER_ID,
+    isServiceRole: false,
+    rawToken: "user-jwt-token",
+    ...overrides
+  };
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+describe.skipIf(!HAS_TEST_DB)("handleNodeRoutes — list & delete", () => {
+  beforeEach(async () => {
+    vi.restoreAllMocks();
+    vi.clearAllMocks();
+    clearNodeAuthCache();
+    await sb.from("channel_messages").delete().eq("channel_id", "b0b0b0b0-0001-0002-0003-000000000001").then(() => {});
+    await sb.from("channels").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("node_events").delete().eq("node_id", NODE_ID).then(() => {});
+    await sb.from("nodes").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("store_plans").delete().eq("store_id", TEST_STORE).then(() => {});
+    const {
+      data: storeRow
+    } = await sb.from("stores").select("owner_user_id").eq("id", TEST_STORE).single();
+    if (storeRow?.owner_user_id) {
+      await sb.from("platform_users").update({
+        auth_id: USER_ID
+      }).eq("id", storeRow.owner_user_id);
+    }
+  });
+  afterEach(async () => {
+    vi.restoreAllMocks();
+    await cleanup();
+    await sb.from("channel_messages").delete().eq("channel_id", "b0b0b0b0-0001-0002-0003-000000000001").then(() => {});
+    await sb.from("channels").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("node_events").delete().eq("node_id", NODE_ID).then(() => {});
+    await sb.from("nodes").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("store_plans").delete().eq("store_id", TEST_STORE).then(() => {});
+    const {
+      data: storeRow
+    } = await sb.from("stores").select("owner_user_id").eq("id", TEST_STORE).single();
+    if (storeRow?.owner_user_id) {
+      await sb.from("platform_users").update({
+        auth_id: null
+      }).eq("id", storeRow.owner_user_id);
+    }
+  });
+  describe("GET|POST /nodes", () => {
+    it("lists nodes for a store via GET", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes", "GET", null, sb, makeAuth(), new URLSearchParams({
+        store_id: TEST_STORE
+      }));
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(Array.isArray(result.body.nodes)).toBe(true);
+    });
+    it("lists nodes for a store via POST body", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes", "POST", {
+        store_id: TEST_STORE
+      }, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+    });
+    it("returns 400 when store_id is missing", async () => {
+      const result = await handleNodeRoutes("/nodes", "GET", null, sb, makeAuth());
+      expect(result.status).toBe(400);
+      expect(result.body.error).toContain("store_id required");
+    });
+  });
+  describe("DELETE /nodes/:id", () => {
+    it("deletes a node", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}`, "DELETE", null, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(result.body.deleted).toBe(NODE_ID);
+    });
+    it("returns 404 when node not found", async () => {
+      const result = await handleNodeRoutes("/nodes/00000000-0000-0000-0000-000000000000", "DELETE", null, sb, makeAuth());
+      expect(result.status).toBe(404);
+      expect(result.body.error).toContain("Node not found");
+    });
+    it("returns 403 when user has no store access", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}`, "DELETE", null, sb, makeAuth({
+        userId: "00000000-0000-0000-0000-000000000099"
+      }));
+      expect(result.status).toBe(403);
+      expect(result.body.error).toContain("No access to this node");
+    });
+  });
+  describe("GET /nodes/:id/events", () => {
+    it("returns events for a node", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      await seedTracked("node_events", [{
+        id: "e0e0e0e0-0001-0001-0001-000000000001",
+        store_id: TEST_STORE,
+        node_id: NODE_ID,
+        event_type: "registered",
+        details: {},
+        created_at: "2026-01-01"
+      }, {
+        id: "e0e0e0e0-0001-0001-0001-000000000002",
+        store_id: TEST_STORE,
+        node_id: NODE_ID,
+        event_type: "heartbeat",
+        details: {},
+        created_at: "2026-01-02"
+      }]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}/events`, "GET", null, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(Array.isArray(result.body.events)).toBe(true);
+    });
+  });
+});