@acorex-platform/framework-server 0.0.10 → 0.0.14

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.listener.js

@@ -0,0 +1,67 @@
+"use strict";
+var RealtimeEntityBridgeListener_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeEntityBridgeListener = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const core_1 = require("@acorex-platform/framework-server/core");
+const realtime_publisher_port_1 = require("../ports/realtime-publisher.port");
+const realtime_topics_1 = require("../topics/realtime-topics");
+const realtime_entity_bridge_registry_1 = require("./realtime-entity-bridge.registry");
+const realtime_entity_bridge_tokens_1 = require("./realtime-entity-bridge.tokens");
+//#region ---- Entity mutation → realtime bridge ----
+let RealtimeEntityBridgeListener = RealtimeEntityBridgeListener_1 = class RealtimeEntityBridgeListener {
+    constructor(publisher, registry) {
+        this.publisher = publisher;
+        this.registry = registry;
+        this.logger = new common_1.Logger(RealtimeEntityBridgeListener_1.name);
+    }
+    async onEntityMutation(event) {
+        const entityName = event.entityName?.trim() || '';
+        if (!entityName || realtime_entity_bridge_tokens_1.REALTIME_ENTITY_BRIDGE_EXCLUSIONS.has(entityName)) {
+            return;
+        }
+        const tenantId = event.tenantId?.trim() || '';
+        const actorUserId = event.userId?.trim() || '';
+        if (!tenantId || !actorUserId) {
+            return;
+        }
+        const registration = this.registry.get(entityName);
+        const audienceMode = registration?.audience ?? 'tenant';
+        const payload = {
+            entityName,
+            operation: event.operation,
+            id: event.id,
+        };
+        const audience = audienceMode === 'tenant'
+            ? { tenant: true }
+            : { userIds: [actorUserId] };
+        try {
+            await this.publisher.publish({
+                topic: realtime_topics_1.AXP_REALTIME_TOPIC_ENTITY_MUTATION,
+                tenantId,
+                audience,
+                payload,
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.logger.error(`Failed to publish entity.mutation for ${event.entityName}: ${message}`);
+        }
+    }
+};
+exports.RealtimeEntityBridgeListener = RealtimeEntityBridgeListener;
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(core_1.ENTITY_MUTATION_EVENT_WILDCARD),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RealtimeEntityBridgeListener.prototype, "onEntityMutation", null);
+exports.RealtimeEntityBridgeListener = RealtimeEntityBridgeListener = RealtimeEntityBridgeListener_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [realtime_publisher_port_1.RealtimePublisherPort,
+        realtime_entity_bridge_registry_1.RealtimeEntityBridgeRegistry])
+], RealtimeEntityBridgeListener);
+//#endregion
+//# sourceMappingURL=realtime-entity-bridge.listener.js.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.listener.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.listener.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AACpD,yDAAgD;AAChD,iEAGgD;AAChD,8EAAyE;AACzE,+DAA+E;AAE/E,uFAAiF;AACjF,mFAAoF;AAEpF,qDAAqD;AAG9C,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAGvC,YACmB,SAAgC,EAChC,QAAsC;QADtC,cAAS,GAAT,SAAS,CAAuB;QAChC,aAAQ,GAAR,QAAQ,CAA8B;QAJxC,WAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAKrE,CAAC;IAGE,AAAN,KAAK,CAAC,gBAAgB,CAAC,KAA0B;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,UAAU,IAAI,iEAAiC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,YAAY,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAExD,MAAM,OAAO,GAAqC;YAChD,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC;QAEF,MAAM,QAAQ,GACZ,YAAY,KAAK,QAAQ;YACvB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE;YAC3B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC3B,KAAK,EAAE,oDAAkC;gBACzC,QAAQ;gBACR,QAAQ;gBACR,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,KAAK,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;CACF,CAAA;AA/CY,oEAA4B;AASjC;IADL,IAAA,uBAAO,EAAC,qCAA8B,CAAC;;;;oEAsCvC;uCA9CU,4BAA4B;IADxC,IAAA,mBAAU,GAAE;6CAKmB,+CAAqB;QACtB,8DAA4B;GAL9C,4BAA4B,CA+CxC;AAED,YAAY"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.d.ts

@@ -0,0 +1,8 @@
+import type { RealtimeEntityBridgeRegistration } from './realtime-entity-bridge.types';
+export declare class RealtimeEntityBridgeRegistry {
+    private readonly byEntity;
+    register(registration: RealtimeEntityBridgeRegistration): void;
+    get(entityName: string): RealtimeEntityBridgeRegistration | undefined;
+    list(): RealtimeEntityBridgeRegistration[];
+}
+//# sourceMappingURL=realtime-entity-bridge.registry.d.ts.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.registry.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAIvF,qBACa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuD;IAEhF,QAAQ,CAAC,YAAY,EAAE,gCAAgC,GAAG,IAAI;IAQ9D,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,gCAAgC,GAAG,SAAS;IAIrE,IAAI,IAAI,gCAAgC,EAAE;CAG3C"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeEntityBridgeRegistry = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const realtime_entity_bridge_tokens_1 = require("./realtime-entity-bridge.tokens");
+//#region ---- Entity bridge registry ----
+let RealtimeEntityBridgeRegistry = class RealtimeEntityBridgeRegistry {
+    constructor() {
+        this.byEntity = new Map();
+    }
+    register(registration) {
+        const entityName = registration.entityName?.trim();
+        if (!entityName || realtime_entity_bridge_tokens_1.REALTIME_ENTITY_BRIDGE_EXCLUSIONS.has(entityName)) {
+            return;
+        }
+        this.byEntity.set(entityName, { ...registration, entityName });
+    }
+    get(entityName) {
+        return this.byEntity.get(entityName);
+    }
+    list() {
+        return Array.from(this.byEntity.values());
+    }
+};
+exports.RealtimeEntityBridgeRegistry = RealtimeEntityBridgeRegistry;
+exports.RealtimeEntityBridgeRegistry = RealtimeEntityBridgeRegistry = tslib_1.__decorate([
+    (0, common_1.Injectable)()
+], RealtimeEntityBridgeRegistry);
+//#endregion
+//# sourceMappingURL=realtime-entity-bridge.registry.js.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.registry.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.registry.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,mFAAoF;AAGpF,0CAA0C;AAGnC,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAAlC;QACY,aAAQ,GAAG,IAAI,GAAG,EAA4C,CAAC;IAiBlF,CAAC;IAfC,QAAQ,CAAC,YAA8C;QACrD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,iEAAiC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AAlBY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;GACA,4BAA4B,CAkBxC;AAED,YAAY"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.d.ts

@@ -0,0 +1,11 @@
+import type { Provider } from '@nestjs/common';
+import type { RealtimeEntityBridgeRegistration } from './realtime-entity-bridge.types';
+export declare const REALTIME_ENTITY_BRIDGE: unique symbol;
+/**
+ * Registers an optional per-entity override with the global {@link RealtimeEntityBridgeRegistry}.
+ * All entities are bridged by default except {@link REALTIME_ENTITY_BRIDGE_EXCLUSIONS}.
+ */
+export declare function provideRealtimeEntityBridge(registration: RealtimeEntityBridgeRegistration): Provider;
+/** Built-in entities that must never go through the generic entity bridge. */
+export declare const REALTIME_ENTITY_BRIDGE_EXCLUSIONS: Set<string>;
+//# sourceMappingURL=realtime-entity-bridge.tokens.d.ts.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.tokens.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAIvF,eAAO,MAAM,sBAAsB,eAAmC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,gCAAgC,GAC7C,QAAQ,CAUV;AAED,8EAA8E;AAC9E,eAAO,MAAM,iCAAiC,aAI5C,CAAC"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REALTIME_ENTITY_BRIDGE_EXCLUSIONS = exports.REALTIME_ENTITY_BRIDGE = void 0;
+exports.provideRealtimeEntityBridge = provideRealtimeEntityBridge;
+const realtime_entity_bridge_registry_1 = require("./realtime-entity-bridge.registry");
+//#region ---- Entity bridge DI tokens ----
+exports.REALTIME_ENTITY_BRIDGE = Symbol('REALTIME_ENTITY_BRIDGE');
+/**
+ * Registers an optional per-entity override with the global {@link RealtimeEntityBridgeRegistry}.
+ * All entities are bridged by default except {@link REALTIME_ENTITY_BRIDGE_EXCLUSIONS}.
+ */
+function provideRealtimeEntityBridge(registration) {
+    const provider = {
+        provide: `${String(exports.REALTIME_ENTITY_BRIDGE)}:${registration.entityName}`,
+        useFactory: (registry) => {
+            registry.register(registration);
+            return registration;
+        },
+        inject: [realtime_entity_bridge_registry_1.RealtimeEntityBridgeRegistry],
+    };
+    return provider;
+}
+/** Built-in entities that must never go through the generic entity bridge. */
+exports.REALTIME_ENTITY_BRIDGE_EXCLUSIONS = new Set([
+    'Conversation.Message',
+    'CommunicationManagement.Communication',
+    'CommunicationManagement.CommunicationDelivery',
+]);
+//#endregion
+//# sourceMappingURL=realtime-entity-bridge.tokens.js.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.tokens.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.tokens.ts"],"names":[],"mappings":";;;AAYA,kEAYC;AAvBD,uFAAiF;AAGjF,2CAA2C;AAE9B,QAAA,sBAAsB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEvE;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,YAA8C;IAE9C,MAAM,QAAQ,GAAoB;QAChC,OAAO,EAAE,GAAG,MAAM,CAAC,8BAAsB,CAAC,IAAI,YAAY,CAAC,UAAU,EAAE;QACvE,UAAU,EAAE,CAAC,QAAsC,EAAE,EAAE;YACrD,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,EAAE,CAAC,8DAA4B,CAAC;KACvC,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AACjE,QAAA,iCAAiC,GAAG,IAAI,GAAG,CAAS;IAC/D,sBAAsB;IACtB,uCAAuC;IACvC,+CAA+C;CAChD,CAAC,CAAC;AAEH,YAAY"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.d.ts

@@ -0,0 +1,11 @@
+export type RealtimeEntityBridgeAudienceMode = 'actor' | 'tenant';
+/**
+ * Optional per-entity override for {@link RealtimeEntityBridgeListener}.
+ * Unregistered entities default to `tenant` audience (all viewers in the tenant).
+ */
+export interface RealtimeEntityBridgeRegistration {
+    entityName: string;
+    /** Default for unregistered entities is `tenant`. Use `actor` to limit to the mutating user. */
+    audience?: RealtimeEntityBridgeAudienceMode;
+}
+//# sourceMappingURL=realtime-entity-bridge.types.d.ts.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gCAAgC,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,gCAAgC,CAAC;CAC7C"}

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.js

@@ -0,0 +1,5 @@
+"use strict";
+//#region ---- Entity bridge registration ----
+Object.defineProperty(exports, "__esModule", { value: true });
+//#endregion
+//# sourceMappingURL=realtime-entity-bridge.types.js.map

package/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-entity-bridge.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/entity-bridge/realtime-entity-bridge.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAc9C,YAAY"}

package/realtime/src/lib/gateway/realtime-ws-auth.d.ts

@@ -0,0 +1,5 @@
+import type { AuthService, TokenResolverService } from '@acorex-platform/framework-server/security';
+import type { Socket } from 'socket.io';
+import type { AXPRealtimeSocketSession } from '../types/realtime.types';
+export declare function authenticateRealtimeSocket(socket: Socket, tokenResolver: TokenResolverService, authService: AuthService): AXPRealtimeSocketSession | null;
+//# sourceMappingURL=realtime-ws-auth.d.ts.map

package/realtime/src/lib/gateway/realtime-ws-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-ws-auth.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/gateway/realtime-ws-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAyBxE,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,oBAAoB,EACnC,WAAW,EAAE,WAAW,GACvB,wBAAwB,GAAG,IAAI,CA6BjC"}

package/realtime/src/lib/gateway/realtime-ws-auth.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateRealtimeSocket = authenticateRealtimeSocket;
+const common_1 = require("@nestjs/common");
+//#region ---- WebSocket handshake auth ----
+const logger = new common_1.Logger('RealtimeWsAuth');
+function headerMap(handshake) {
+    return handshake.headers;
+}
+function authTokenFromHandshake(handshake) {
+    const auth = handshake.auth;
+    if (typeof auth?.token === 'string' && auth.token.trim()) {
+        return auth.token.trim();
+    }
+    const queryToken = handshake.query?.['token'];
+    if (typeof queryToken === 'string' && queryToken.trim()) {
+        return queryToken.trim();
+    }
+    if (Array.isArray(queryToken) && typeof queryToken[0] === 'string' && queryToken[0].trim()) {
+        return queryToken[0].trim();
+    }
+    return undefined;
+}
+function authenticateRealtimeSocket(socket, tokenResolver, authService) {
+    try {
+        const fromAuth = authTokenFromHandshake(socket.handshake);
+        const resolved = (fromAuth ? { token: fromAuth, source: 'bearer' } : null) ??
+            tokenResolver.resolveAccessToken(headerMap(socket.handshake), socket.handshake.headers?.cookie
+                ? parseCookieHeader(socket.handshake.headers.cookie)
+                : undefined);
+        if (!resolved?.token) {
+            return null;
+        }
+        const payload = authService.verifyAccessToken(resolved.token);
+        const tenantId = typeof payload.tid === 'string' ? payload.tid.trim() : '';
+        if (!payload.sub?.trim() || !tenantId) {
+            return null;
+        }
+        return {
+            userId: payload.sub.trim(),
+            tenantId,
+            username: payload.username,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        logger.debug(`Realtime socket auth failed: ${message}`);
+        return null;
+    }
+}
+function parseCookieHeader(cookieHeader) {
+    const cookies = {};
+    for (const part of cookieHeader.split(';')) {
+        const idx = part.indexOf('=');
+        if (idx <= 0) {
+            continue;
+        }
+        const key = part.slice(0, idx).trim();
+        const value = part.slice(idx + 1).trim();
+        if (key) {
+            cookies[key] = decodeURIComponent(value);
+        }
+    }
+    return cookies;
+}
+//#endregion
+//# sourceMappingURL=realtime-ws-auth.js.map

package/realtime/src/lib/gateway/realtime-ws-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-ws-auth.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/gateway/realtime-ws-auth.ts"],"names":[],"mappings":";;AA4BA,gEAiCC;AA7DD,2CAAwC;AAKxC,4CAA4C;AAE5C,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAgB,CAAC,CAAC;AAE5C,SAAS,SAAS,CAAC,SAA8B;IAC/C,OAAO,SAAS,CAAC,OAAwD,CAAC;AAC5E,CAAC;AAED,SAAS,sBAAsB,CAAC,SAA8B;IAC5D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAuC,CAAC;IAC/D,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3F,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,0BAA0B,CACxC,MAAc,EACd,aAAmC,EACnC,WAAwB;IAExB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GACZ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM;gBAC5F,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;gBACpD,CAAC,CAAC,SAAS,CAAC,CAAC;QAEjB,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YAC1B,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,YAAY"}

package/realtime/src/lib/gateway/realtime.gateway.d.ts

@@ -0,0 +1,31 @@
+import { OnGatewayConnection, OnGatewayDisconnect, OnGatewayInit } from '@nestjs/websockets';
+import { AuthService, TokenResolverService } from '@acorex-platform/framework-server/security';
+import type { Server, Socket } from 'socket.io';
+import { RealtimeConversationMembershipRegistry } from '../ports/realtime-conversation-membership.registry';
+import { RealtimeTransportPort } from '../ports/realtime-transport.port';
+export declare class RealtimeGateway implements OnGatewayInit, OnGatewayConnection, OnGatewayDisconnect {
+    private readonly transport;
+    private readonly tokenResolver;
+    private readonly authService;
+    private readonly membership;
+    private readonly logger;
+    server: Server;
+    private readonly onEnvelope;
+    constructor(transport: RealtimeTransportPort, tokenResolver: TokenResolverService, authService: AuthService, membership: RealtimeConversationMembershipRegistry);
+    afterInit(): void;
+    handleConnection(socket: Socket): void;
+    handleDisconnect(socket: Socket): void;
+    subscribeConversation(socket: Socket, body: {
+        conversationId?: string;
+    }): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    unsubscribeConversation(socket: Socket, body: {
+        conversationId?: string;
+    }): Promise<{
+        ok: boolean;
+    }>;
+    private deliver;
+}
+//# sourceMappingURL=realtime.gateway.d.ts.map

package/realtime/src/lib/gateway/realtime.gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.gateway.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/gateway/realtime.gateway.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EAId,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,sCAAsC,EAAE,MAAM,oDAAoD,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAiCzE,qBAca,eAAgB,YAAW,aAAa,EAAE,mBAAmB,EAAE,mBAAmB;IAW3F,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAb7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAG3D,MAAM,EAAG,MAAM,CAAC;IAEhB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;gBAGiB,SAAS,EAAE,qBAAqB,EAChC,aAAa,EAAE,oBAAoB,EACnC,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,sCAAsC;IAGrE,SAAS,IAAI,IAAI;IAKjB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgBtC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAShC,qBAAqB,CACN,MAAM,EAAE,MAAM,EAClB,IAAI,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBtC,uBAAuB,CACR,MAAM,EAAE,MAAM,EAClB,IAAI,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAU3B,OAAO,CAAC,OAAO;CAchB"}

package/realtime/src/lib/gateway/realtime.gateway.js

@@ -0,0 +1,138 @@
+"use strict";
+var RealtimeGateway_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeGateway = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const websockets_1 = require("@nestjs/websockets");
+const security_1 = require("@acorex-platform/framework-server/security");
+const realtime_conversation_membership_registry_1 = require("../ports/realtime-conversation-membership.registry");
+const realtime_transport_port_1 = require("../ports/realtime-transport.port");
+const realtime_rooms_util_1 = require("../rooms/realtime-rooms.util");
+const realtime_topics_1 = require("../topics/realtime-topics");
+const realtime_ws_auth_1 = require("./realtime-ws-auth");
+//#region ---- Socket session key ----
+const SOCKET_SESSION_KEY = 'acxRealtimeSession';
+function getSocketSession(socket) {
+    return socket.data[SOCKET_SESSION_KEY];
+}
+function setSocketSession(socket, session) {
+    socket.data[SOCKET_SESSION_KEY] = session;
+}
+//#endregion
+//#region ---- Realtime WebSocket gateway ----
+let RealtimeGateway = RealtimeGateway_1 = class RealtimeGateway {
+    constructor(transport, tokenResolver, authService, membership) {
+        this.transport = transport;
+        this.tokenResolver = tokenResolver;
+        this.authService = authService;
+        this.membership = membership;
+        this.logger = new common_1.Logger(RealtimeGateway_1.name);
+        this.onEnvelope = (envelope) => {
+            this.deliver(envelope);
+        };
+    }
+    afterInit() {
+        this.transport.subscribe(this.onEnvelope);
+        this.logger.log('Realtime gateway initialized (namespace /realtime)');
+    }
+    handleConnection(socket) {
+        const session = (0, realtime_ws_auth_1.authenticateRealtimeSocket)(socket, this.tokenResolver, this.authService);
+        if (!session) {
+            this.logger.debug(`Rejecting unauthenticated realtime socket ${socket.id}`);
+            socket.disconnect(true);
+            return;
+        }
+        setSocketSession(socket, session);
+        void socket.join((0, realtime_rooms_util_1.realtimeUserRoom)(session.tenantId, session.userId));
+        void socket.join((0, realtime_rooms_util_1.realtimeTenantRoom)(session.tenantId));
+        this.logger.debug(`Realtime connected user=${session.userId} tenant=${session.tenantId} socket=${socket.id}`);
+    }
+    handleDisconnect(socket) {
+        const session = getSocketSession(socket);
+        if (session) {
+            this.logger.debug(`Realtime disconnected user=${session.userId} socket=${socket.id}`);
+        }
+    }
+    // TODO(realtime): Replace with generic subscribe.{refType} + RealtimeSubscriptionRegistry (refType/refId).
+    async subscribeConversation(socket, body) {
+        const session = getSocketSession(socket);
+        if (!session) {
+            return { ok: false, reason: 'unauthenticated' };
+        }
+        const conversationId = body?.conversationId?.trim() ?? '';
+        if (!conversationId) {
+            return { ok: false, reason: 'conversationId_required' };
+        }
+        const allowed = await this.membership.isMember(conversationId, session.userId);
+        if (!allowed) {
+            return { ok: false, reason: 'forbidden' };
+        }
+        await socket.join((0, realtime_rooms_util_1.realtimeConversationRoom)(session.tenantId, conversationId));
+        return { ok: true };
+    }
+    async unsubscribeConversation(socket, body) {
+        const session = getSocketSession(socket);
+        const conversationId = body?.conversationId?.trim() ?? '';
+        if (!session || !conversationId) {
+            return { ok: false };
+        }
+        await socket.leave((0, realtime_rooms_util_1.realtimeConversationRoom)(session.tenantId, conversationId));
+        return { ok: true };
+    }
+    deliver(envelope) {
+        if (!this.server || !envelope.tenantId?.trim() || !envelope.topic?.trim()) {
+            return;
+        }
+        const rooms = (0, realtime_rooms_util_1.resolveRealtimeRooms)(envelope.tenantId, envelope.audience);
+        if (!rooms.length) {
+            return;
+        }
+        for (const room of rooms) {
+            this.server.to(room).emit(realtime_topics_1.AXP_REALTIME_SOCKET_EVENT, envelope);
+        }
+    }
+};
+exports.RealtimeGateway = RealtimeGateway;
+tslib_1.__decorate([
+    (0, websockets_1.WebSocketServer)(),
+    tslib_1.__metadata("design:type", Function)
+], RealtimeGateway.prototype, "server", void 0);
+tslib_1.__decorate([
+    (0, websockets_1.SubscribeMessage)(realtime_topics_1.AXP_REALTIME_SUBSCRIBE_CONVERSATION),
+    tslib_1.__param(0, (0, websockets_1.ConnectedSocket)()),
+    tslib_1.__param(1, (0, websockets_1.MessageBody)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Function, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RealtimeGateway.prototype, "subscribeConversation", null);
+tslib_1.__decorate([
+    (0, websockets_1.SubscribeMessage)(realtime_topics_1.AXP_REALTIME_UNSUBSCRIBE_CONVERSATION),
+    tslib_1.__param(0, (0, websockets_1.ConnectedSocket)()),
+    tslib_1.__param(1, (0, websockets_1.MessageBody)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Function, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RealtimeGateway.prototype, "unsubscribeConversation", null);
+exports.RealtimeGateway = RealtimeGateway = RealtimeGateway_1 = tslib_1.__decorate([
+    (0, websockets_1.WebSocketGateway)({
+        namespace: '/realtime',
+        cors: {
+            origin: process.env['CORS_ORIGINS']
+                ? process.env['CORS_ORIGINS'].split(',').map((o) => o.trim())
+                : [
+                    'http://localhost:4200',
+                    'https://localhost:4200',
+                    'http://localhost:4800',
+                    'https://localhost:4800',
+                ],
+            credentials: true,
+        },
+    }),
+    tslib_1.__metadata("design:paramtypes", [realtime_transport_port_1.RealtimeTransportPort,
+        security_1.TokenResolverService,
+        security_1.AuthService,
+        realtime_conversation_membership_registry_1.RealtimeConversationMembershipRegistry])
+], RealtimeGateway);
+//#endregion
+//# sourceMappingURL=realtime.gateway.js.map

package/realtime/src/lib/gateway/realtime.gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.gateway.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/gateway/realtime.gateway.ts"],"names":[],"mappings":";;;;;AAAA,2CAAwC;AACxC,mDAS4B;AAC5B,yEAA+F;AAE/F,kHAA4G;AAC5G,8EAAyE;AACzE,sEAKsC;AACtC,+DAImC;AAEnC,yDAAgE;AAEhE,sCAAsC;AAEtC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAQ,MAAM,CAAC,IAAgC,CAAC,kBAAkB,CAErD,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAiC;IACxE,MAAM,CAAC,IAAgC,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC;AACzE,CAAC;AAED,YAAY;AAEZ,8CAA8C;AAgBvC,IAAM,eAAe,uBAArB,MAAM,eAAe;IAU1B,YACmB,SAAgC,EAChC,aAAmC,EACnC,WAAwB,EACxB,UAAkD;QAHlD,cAAS,GAAT,SAAS,CAAuB;QAChC,kBAAa,GAAb,aAAa,CAAsB;QACnC,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAwC;QAbpD,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;QAK1C,eAAU,GAAG,CAAC,QAA6B,EAAQ,EAAE;YACpE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC,CAAC;IAOC,CAAC;IAEJ,SAAS;QACP,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC7B,MAAM,OAAO,GAAG,IAAA,6CAA0B,EAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAA,sCAAgB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAA,wCAAkB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2BAA2B,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,QAAQ,WAAW,MAAM,CAAC,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,MAAM,WAAW,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,2GAA2G;IAErG,AAAN,KAAK,CAAC,qBAAqB,CACN,MAAc,EAClB,IAAiC;QAEhD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,8CAAwB,EAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAGK,AAAN,KAAK,CAAC,uBAAuB,CACR,MAAc,EAClB,IAAiC;QAEhD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,IAAA,8CAAwB,EAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,OAAO,CAAC,QAA6B;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,0CAAoB,EAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,2CAAyB,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,0CAAe;AAI1B;IADC,IAAA,4BAAe,GAAE;;+CACF;AA2CV;IADL,IAAA,6BAAgB,EAAC,qDAAmC,CAAC;IAEnD,mBAAA,IAAA,4BAAe,GAAE,CAAA;IACjB,mBAAA,IAAA,wBAAW,GAAE,CAAA;;;;4DAmBf;AAGK;IADL,IAAA,6BAAgB,EAAC,uDAAqC,CAAC;IAErD,mBAAA,IAAA,4BAAe,GAAE,CAAA;IACjB,mBAAA,IAAA,wBAAW,GAAE,CAAA;;;;8DASf;0BAlFU,eAAe;IAd3B,IAAA,6BAAgB,EAAC;QAChB,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE;YACJ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;gBACjC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,CAAC,CAAC;oBACE,uBAAuB;oBACvB,wBAAwB;oBACxB,uBAAuB;oBACvB,wBAAwB;iBACzB;YACL,WAAW,EAAE,IAAI;SAClB;KACF,CAAC;6CAY8B,+CAAqB;QACjB,+BAAoB;QACtB,sBAAW;QACZ,kFAAsC;GAd1D,eAAe,CAkG3B;AAED,YAAY"}

package/realtime/src/lib/ports/realtime-conversation-membership.port.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Optional authz hook for joining conversation Socket.IO rooms.
+ * Provided by the conversation module when available.
+ */
+export declare abstract class RealtimeConversationMembershipPort {
+    abstract isMember(conversationId: string, userId: string): Promise<boolean>;
+}
+//# sourceMappingURL=realtime-conversation-membership.port.d.ts.map

package/realtime/src/lib/ports/realtime-conversation-membership.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-conversation-membership.port.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-conversation-membership.port.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,8BAAsB,kCAAkC;IACtD,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAC5E"}

package/realtime/src/lib/ports/realtime-conversation-membership.port.js

@@ -0,0 +1,13 @@
+"use strict";
+//#region ---- Conversation membership port ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeConversationMembershipPort = void 0;
+/**
+ * Optional authz hook for joining conversation Socket.IO rooms.
+ * Provided by the conversation module when available.
+ */
+class RealtimeConversationMembershipPort {
+}
+exports.RealtimeConversationMembershipPort = RealtimeConversationMembershipPort;
+//#endregion
+//# sourceMappingURL=realtime-conversation-membership.port.js.map

package/realtime/src/lib/ports/realtime-conversation-membership.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-conversation-membership.port.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-conversation-membership.port.ts"],"names":[],"mappings":";AAAA,gDAAgD;;;AAEhD;;;GAGG;AACH,MAAsB,kCAAkC;CAEvD;AAFD,gFAEC;AAED,YAAY"}

package/realtime/src/lib/ports/realtime-conversation-membership.registry.d.ts

@@ -0,0 +1,11 @@
+import { RealtimeConversationMembershipPort } from './realtime-conversation-membership.port';
+/**
+ * Global registry so feature modules can supply conversation room authz
+ * without creating Nest import cycles with {@link RealtimeModule}.
+ */
+export declare class RealtimeConversationMembershipRegistry extends RealtimeConversationMembershipPort {
+    private delegate;
+    register(delegate: RealtimeConversationMembershipPort): void;
+    isMember(conversationId: string, userId: string): Promise<boolean>;
+}
+//# sourceMappingURL=realtime-conversation-membership.registry.d.ts.map

package/realtime/src/lib/ports/realtime-conversation-membership.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-conversation-membership.registry.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-conversation-membership.registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAI7F;;;GAGG;AACH,qBACa,sCAAuC,SAAQ,kCAAkC;IAC5F,OAAO,CAAC,QAAQ,CAAmD;IAEnE,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,GAAG,IAAI;IAItD,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAMzE"}

package/realtime/src/lib/ports/realtime-conversation-membership.registry.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeConversationMembershipRegistry = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const realtime_conversation_membership_port_1 = require("./realtime-conversation-membership.port");
+//#region ---- Membership registry ----
+/**
+ * Global registry so feature modules can supply conversation room authz
+ * without creating Nest import cycles with {@link RealtimeModule}.
+ */
+let RealtimeConversationMembershipRegistry = class RealtimeConversationMembershipRegistry extends realtime_conversation_membership_port_1.RealtimeConversationMembershipPort {
+    constructor() {
+        super(...arguments);
+        this.delegate = null;
+    }
+    register(delegate) {
+        this.delegate = delegate;
+    }
+    async isMember(conversationId, userId) {
+        if (!this.delegate) {
+            return false;
+        }
+        return this.delegate.isMember(conversationId, userId);
+    }
+};
+exports.RealtimeConversationMembershipRegistry = RealtimeConversationMembershipRegistry;
+exports.RealtimeConversationMembershipRegistry = RealtimeConversationMembershipRegistry = tslib_1.__decorate([
+    (0, common_1.Injectable)()
+], RealtimeConversationMembershipRegistry);
+//#endregion
+//# sourceMappingURL=realtime-conversation-membership.registry.js.map

package/realtime/src/lib/ports/realtime-conversation-membership.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-conversation-membership.registry.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-conversation-membership.registry.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,mGAA6F;AAE7F,uCAAuC;AAEvC;;;GAGG;AAEI,IAAM,sCAAsC,GAA5C,MAAM,sCAAuC,SAAQ,0EAAkC;IAAvF;;QACG,aAAQ,GAA8C,IAAI,CAAC;IAYrE,CAAC;IAVC,QAAQ,CAAC,QAA4C;QACnD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,cAAsB,EAAE,MAAc;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AAbY,wFAAsC;iDAAtC,sCAAsC;IADlD,IAAA,mBAAU,GAAE;GACA,sCAAsC,CAalD;AAED,YAAY"}

package/realtime/src/lib/ports/realtime-publisher.port.d.ts

@@ -0,0 +1,9 @@
+import type { AXPRealtimeEnvelope, AXPRealtimePublishInput } from '../types/realtime.types';
+/**
+ * Domain modules publish lightweight realtime envelopes through this port.
+ * Transport fan-out (in-process / Redis) and Socket.IO delivery are handled by the realtime module.
+ */
+export declare abstract class RealtimePublisherPort {
+    abstract publish(input: AXPRealtimePublishInput): Promise<AXPRealtimeEnvelope>;
+}
+//# sourceMappingURL=realtime-publisher.port.d.ts.map

package/realtime/src/lib/ports/realtime-publisher.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-publisher.port.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-publisher.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAI5F;;;GAGG;AACH,8BAAsB,qBAAqB;IACzC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAC/E"}

package/realtime/src/lib/ports/realtime-publisher.port.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimePublisherPort = void 0;
+//#region ---- Publisher port ----
+/**
+ * Domain modules publish lightweight realtime envelopes through this port.
+ * Transport fan-out (in-process / Redis) and Socket.IO delivery are handled by the realtime module.
+ */
+class RealtimePublisherPort {
+}
+exports.RealtimePublisherPort = RealtimePublisherPort;
+//#endregion
+//# sourceMappingURL=realtime-publisher.port.js.map

package/realtime/src/lib/ports/realtime-publisher.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-publisher.port.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-publisher.port.ts"],"names":[],"mappings":";;;AAEA,kCAAkC;AAElC;;;GAGG;AACH,MAAsB,qBAAqB;CAE1C;AAFD,sDAEC;AAED,YAAY"}

package/realtime/src/lib/ports/realtime-transport.port.d.ts

@@ -0,0 +1,12 @@
+import type { AXPRealtimeEnvelope } from '../types/realtime.types';
+export type RealtimeEnvelopeHandler = (envelope: AXPRealtimeEnvelope) => void | Promise<void>;
+/**
+ * Cross-instance (or in-process) fan-out for realtime envelopes.
+ * Gateways subscribe; publishers call {@link publish}.
+ */
+export declare abstract class RealtimeTransportPort {
+    abstract publish(envelope: AXPRealtimeEnvelope): Promise<void>;
+    abstract subscribe(handler: RealtimeEnvelopeHandler): void;
+    abstract unsubscribe(handler: RealtimeEnvelopeHandler): void;
+}
+//# sourceMappingURL=realtime-transport.port.d.ts.map

package/realtime/src/lib/ports/realtime-transport.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.port.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/realtime/src/lib/ports/realtime-transport.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAInE,MAAM,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9F;;;GAGG;AACH,8BAAsB,qBAAqB;IACzC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAC1D,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;CAC7D"}

package/realtime/src/lib/ports/realtime-transport.port.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeTransportPort = void 0;
+/**
+ * Cross-instance (or in-process) fan-out for realtime envelopes.
+ * Gateways subscribe; publishers call {@link publish}.
+ */
+class RealtimeTransportPort {
+}
+exports.RealtimeTransportPort = RealtimeTransportPort;
+//#endregion
+//# sourceMappingURL=realtime-transport.port.js.map