@memberjunction/server 6.2.0-edge.3 → 6.2.0-edge.4

package/dist/realtimeProxy/RealtimeProxyServer.js

@@ -1,6 +1,11 @@
 import { WebSocket as WsClient, WebSocketServer } from 'ws';
 import { BaseSingleton, ShutdownRegistry } from '@memberjunction/global';
-import { RealtimeProxyRegistry, REALTIME_PROXY_PATH } from '@memberjunction/ai';
+import { RealtimeProxyRegistry, REALTIME_PROXY_PATH, REALTIME_RELAY_PATH, } from '@memberjunction/ai';
+import { RealtimeRelayTunnel, RelayTicketPrefix, REALTIME_RELAY_LIMITS, REALTIME_RELAY_MAX_CLIENT_FRAME_BYTES, } from './RealtimeRelayTunnel.js';
+/** The optional Origin allowlist both paths apply: comma-separated origins. */
+const ALLOWED_ORIGINS_ENV = 'MJ_REALTIME_PROXY_ALLOWED_ORIGINS';
+/** The longest part of a refused Origin header a log line quotes. */
+const MAX_LOGGED_ORIGIN_CHARS = 200;
 /**
  * MJAPI's realtime websocket **proxy** — the transport half of the self-hosted realtime provider story.
  *
@@ -15,6 +20,11 @@ import { RealtimeProxyRegistry, REALTIME_PROXY_PATH } from '@memberjunction/ai';
  * wire vocabulary) and knows nothing about any specific provider — it is a pure authenticated byte tunnel,
  * reusable by any future self-hosted realtime provider that mints a ticket.
  *
+ * It also serves the realtime **relay** at `{REALTIME_RELAY_PATH}/<ticket>/…` (any suffix: a provider's
+ * browser SDK appends its own path): one ticket per realtime session, a frame policy from the provider driver
+ * between the legs (see {@link RealtimeRelayTunnel}), one live upstream per session (a resume replaces the
+ * older connection). The Origin allowlist applies to both paths.
+ *
  * A {@link BaseSingleton} + {@link IShutdownable}: it tracks live tunnels and closes them on graceful
  * shutdown (drained by MJServer's `ShutdownRegistry` before `httpServer.close()`).
  */
@@ -24,40 +34,118 @@ export class RealtimeProxyServer extends BaseSingleton {
         this.ShutdownName = 'RealtimeProxyServer';
         /** `noServer` so THIS server never binds its own upgrade listener — MJServer routes upgrades to it by path. */
         this.wss = new WebSocketServer({ noServer: true });
+        /** The relay's upgrade server: the same routing, plus the client frame cap, enforced while a frame is read. */
+        this.relayWss = new WebSocketServer({ noServer: true, maxPayload: REALTIME_RELAY_MAX_CLIENT_FRAME_BYTES });
         /** Live browser↔upstream tunnels, tracked for shutdown teardown. */
         this.tunnels = new Set();
+        /** Live relay connections, tracked for shutdown teardown. */
+        this.relays = new Set();
+        /** The granted connection each relay session uses now: one live upstream per session. */
+        this.liveRelays = new Map();
+        this.relayHost = {
+            OnGranted: (tunnel) => this.relayGranted(tunnel),
+            OnClosed: (tunnel) => this.relayClosed(tunnel),
+        };
         this.registered = false;
     }
     /** Process-wide singleton accessor. */
     static get Instance() {
         return super.getInstance();
     }
+    /** The relay's deadlines, ping interval and pre-open buffer ({@link REALTIME_RELAY_LIMITS}); a subclass may tune them. */
+    get RelayLimits() {
+        return REALTIME_RELAY_LIMITS;
+    }
     /**
-     * Routes an HTTP `upgrade` for {@link REALTIME_PROXY_PATH} to the proxy. Returns `true` when it OWNS
-     * (handled/rejected) the request, `false` when the path is not the proxy's — so the caller leaves the
-     * socket for the GraphQL websocket server's own upgrade listener. NEVER destroys a socket it doesn't own.
+     * Routes an HTTP `upgrade` for {@link REALTIME_PROXY_PATH} (ticket in the query) or {@link REALTIME_RELAY_PATH}
+     * (ticket in the path, any suffix). Returns `true` when it OWNS (handled/rejected) the request, `false` when
+     * the path is neither — so the caller leaves the socket for the GraphQL websocket server's own upgrade
+     * listener. NEVER destroys a socket it doesn't own.
      */
     TryHandleUpgrade(request, socket, head) {
         const url = RealtimeProxyServer.parseUrl(request.url);
-        if (!url || url.pathname !== REALTIME_PROXY_PATH) {
-            return false; // not ours — leave it for the GraphQL WS server
+        if (url?.pathname === REALTIME_PROXY_PATH) {
+            this.handleProxyUpgrade(request, socket, head, url);
+            return true;
         }
+        if (url && RealtimeProxyServer.isRelayPath(url.pathname)) {
+            this.handleRelayUpgrade(request, socket, head, url.pathname);
+            return true;
+        }
+        return false; // not ours — leave it for the GraphQL WS server
+    }
+    /** `/realtime-proxy?ticket=<id>`: consumes the single-use ticket and opens a byte tunnel. */
+    handleProxyUpgrade(request, socket, head, url) {
         this.ensureRegistered();
         // Optional Origin allowlist (MJ_REALTIME_PROXY_ALLOWED_ORIGINS: comma-separated origins).
         // Unset ⇒ prior behavior (the single-use short-TTL ticket remains the primary guard);
         // set ⇒ a browser page on a foreign origin cannot ride a leaked ticket id.
         if (!RealtimeProxyServer.originAllowed(request.headers?.origin)) {
-            RealtimeProxyServer.rejectUpgrade(socket, 403, 'Forbidden');
-            return true;
+            RealtimeProxyServer.refuseOrigin(socket, '[RealtimeProxy]', request.headers?.origin);
+            return;
         }
         const ticketId = url.searchParams.get('ticket') ?? '';
         const entry = RealtimeProxyRegistry.Instance.Consume(ticketId);
         if (!entry) {
             RealtimeProxyServer.rejectUpgrade(socket, 401, 'Unauthorized');
-            return true;
+            return;
         }
         this.wss.handleUpgrade(request, socket, head, (browserWs) => this.openTunnel(browserWs, entry));
-        return true;
+    }
+    /**
+     * `/realtime/relay/<ticket>/…`: the same Origin allowlist (403, logged with the origin), then 401 unless the relay
+     * session can still take a connection. Whether it opens fresh or resumes is decided on the connection's first frame.
+     * A query string is ignored: the ticket is read from the path only.
+     */
+    handleRelayUpgrade(request, socket, head, pathname) {
+        this.ensureRegistered();
+        if (!RealtimeProxyServer.originAllowed(request.headers?.origin)) {
+            RealtimeProxyServer.refuseOrigin(socket, '[RealtimeRelay]', request.headers?.origin);
+            return;
+        }
+        const sessionId = RealtimeProxyServer.relayTicketFrom(pathname);
+        const session = sessionId ? RealtimeProxyRegistry.Instance.FindRelaySession(sessionId) : null;
+        if (!session) {
+            console.warn(`[RealtimeRelay] relay ${RelayTicketPrefix(sessionId)}: upgrade refused (unknown, ended or used up)`);
+            RealtimeProxyServer.rejectUpgrade(socket, 401, 'Unauthorized');
+            return;
+        }
+        this.relayWss.handleUpgrade(request, socket, head, (browserWs) => this.openRelay(browserWs, sessionId, session.Policy));
+    }
+    /** Whether a path is the relay's: `/realtime/relay` itself or anything below it. */
+    static isRelayPath(pathname) {
+        return pathname === REALTIME_RELAY_PATH || pathname.startsWith(`${REALTIME_RELAY_PATH}/`);
+    }
+    /** The ticket id in a relay path: the segment right after `/realtime/relay/`; whatever follows is the SDK's. */
+    static relayTicketFrom(pathname) {
+        const segment = pathname.slice(REALTIME_RELAY_PATH.length + 1).split('/')[0] ?? '';
+        try {
+            return decodeURIComponent(segment);
+        }
+        catch {
+            return ''; // malformed escape — no ticket
+        }
+    }
+    /** Starts one relay connection; the session's policy reads its first frame. */
+    openRelay(browserWs, sessionId, policy) {
+        const tunnel = new RealtimeRelayTunnel(browserWs, sessionId, policy, this.RelayLimits, this.relayHost);
+        this.relays.add(tunnel);
+        tunnel.Start();
+    }
+    /** A relay connection was granted: it becomes the session's live one, and the older one closes. */
+    relayGranted(tunnel) {
+        const previous = this.liveRelays.get(tunnel.SessionID);
+        this.liveRelays.set(tunnel.SessionID, tunnel);
+        if (previous && previous !== tunnel) {
+            previous.Close(1000, 'Replaced by a resumed connection');
+        }
+    }
+    /** A relay connection closed: forget it, and the session's live slot when it held it. */
+    relayClosed(tunnel) {
+        this.relays.delete(tunnel);
+        if (this.liveRelays.get(tunnel.SessionID) === tunnel) {
+            this.liveRelays.delete(tunnel.SessionID);
+        }
     }
     /**
      * Evaluates the optional Origin allowlist. Comparison is exact on the normalized origin
@@ -69,7 +157,7 @@ export class RealtimeProxyServer extends BaseSingleton {
      * @returns True when allowed (or no allowlist is configured).
      */
     static originAllowed(origin) {
-        const raw = process.env['MJ_REALTIME_PROXY_ALLOWED_ORIGINS'];
+        const raw = process.env[ALLOWED_ORIGINS_ENV];
         if (!raw || raw.trim().length === 0) {
             return true; // no allowlist configured — prior behavior
         }
@@ -93,17 +181,24 @@ export class RealtimeProxyServer extends BaseSingleton {
             this.registered = true;
         }
     }
-    /** Closes every live tunnel and the proxy server. Idempotent; never throws. */
+    /** Closes every live tunnel and relay connection (1001), and both upgrade servers. Idempotent; never throws. */
     Shutdown() {
         for (const tunnel of [...this.tunnels]) {
             tunnel.Close();
         }
         this.tunnels.clear();
-        try {
-            this.wss.close();
+        for (const relay of [...this.relays]) {
+            relay.Close(1001, 'Server shutting down');
         }
-        catch {
-            /* already closing */
+        this.relays.clear();
+        this.liveRelays.clear();
+        for (const server of [this.wss, this.relayWss]) {
+            try {
+                server.close();
+            }
+            catch {
+                /* already closing */
+            }
         }
     }
     /** Parses `request.url` (a path+query) into a URL, or `null` when absent/unparseable. */
@@ -118,6 +213,16 @@ export class RealtimeProxyServer extends BaseSingleton {
             return null;
         }
     }
+    /**
+     * Refuses an upgrade whose Origin is not on the allowlist: 403, and one log line naming the origin (printable
+     * characters only, shortened), so a browser page on an origin the allowlist lacks shows in MJAPI's log. The line
+     * never quotes the request's path or query: they carry the ticket.
+     */
+    static refuseOrigin(socket, logPrefix, origin) {
+        const shown = (origin ?? '').replace(/[^\x20-\x7E]/g, '?').slice(0, MAX_LOGGED_ORIGIN_CHARS);
+        console.warn(`${logPrefix} upgrade refused (403): origin "${shown}" is not in ${ALLOWED_ORIGINS_ENV}`);
+        RealtimeProxyServer.rejectUpgrade(socket, 403, 'Forbidden');
+    }
     /** Writes a minimal HTTP error response and destroys the socket (used for a rejected upgrade). */
     static rejectUpgrade(socket, code, reason) {
         try {

package/dist/realtimeProxy/RealtimeProxyServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"RealtimeProxyServer.js","sourceRoot":"","sources":["../../src/realtimeProxy/RealtimeProxyServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,IAAI,QAAQ,EAAE,eAAe,EAAgB,MAAM,IAAI,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAsB,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAiC,MAAM,oBAAoB,CAAC;AAE/G;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAkC;IAWvE;QACI,KAAK,EAAE,CAAC;QAXI,iBAAY,GAAG,qBAAqB,CAAC;QAErD,+GAA+G;QAC9F,QAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/D,oEAAoE;QACnD,YAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAElD,eAAU,GAAG,KAAK,CAAC;IAI3B,CAAC;IAED,uCAAuC;IAChC,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAAuB,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACI,gBAAgB,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY;QAC1E,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,gDAAgD;QAClE,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,0FAA0F;QAC1F,sFAAsF;QACtF,2EAA2E;QAC3E,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9D,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,aAAa,CAAC,MAA0B;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAC5D,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,CAAC,oEAAoE;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,+FAA+F;IACvF,UAAU,CAAC,SAAmB,EAAE,KAA+B;QACnE,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,yFAAyF;IACjF,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,+EAA+E;IACxE,QAAQ;QACX,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACL,qBAAqB;QACzB,CAAC;IACL,CAAC;IAED,yFAAyF;IACjF,MAAM,CAAC,QAAQ,CAAC,MAA0B;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,sCAAsC;QACrF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,kGAAkG;IAC1F,MAAM,CAAC,aAAa,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc;QACrE,IAAI,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,MAAM,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACL,yBAAyB;QAC7B,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,mBAAmB;IACrB,4FAA4F;aACpE,6BAAwB,GAAG,MAAM,AAAT,CAAU;IAC1D;;;;;OAKG;aACqB,uBAAkB,GAAG,GAAG,AAAN,CAAO;IASjD,YACqB,OAAiB,EACjB,KAA+B,EAC/B,QAAoB;QAFpB,YAAO,GAAP,OAAO,CAAU;QACjB,UAAK,GAAL,KAAK,CAA0B;QAC/B,aAAQ,GAAR,QAAQ,CAAY;QAVjC,aAAQ,GAAoB,IAAI,CAAC;QACzC,4FAA4F;QAC3E,YAAO,GAAgD,EAAE,CAAC;QACnE,iBAAY,GAAyC,IAAI,CAAC;QAC1D,yBAAoB,GAAG,CAAC,CAAC;QACzB,WAAM,GAAG,KAAK,CAAC;IAMpB,CAAC;IAEJ,qDAAqD;IAC9C,KAAK;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,oFAAoF;QACpF,2DAA2D;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,gDAAgD,mBAAmB,CAAC,wBAAwB,qBAAqB,CAAC,CAAC;gBAChI,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACL,CAAC,EAAE,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAChD,IAAI,CAAC,YAAuC,CAAC,KAAK,EAAE,EAAE,CAAC;QAExD,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,QAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,QAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,+FAA+F;IACvF,WAAW,CAAC,IAAa,EAAE,QAAiB;QAChD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,CAAC;gBAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,uDAAuD;gBAC7E,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,oBAAoB,KAAK,CAAC,IAAI,IAAI,CAAC,oBAAoB,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,oBAAoB,yCAAyC,CAAC,CAAC;gBAC1I,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,2DAA2D;IACnD,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,sGAAsG;IAC9F,OAAO,CAAC,MAAgB,EAAE,IAAa,EAAE,QAAiB;QAC9D,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACL,CAAC;IAED,4EAA4E;IACrE,KAAK;QACR,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACD,IAAI,EAAE,KAAK,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACL,qBAAqB;YACzB,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC"}
+{"version":3,"file":"RealtimeProxyServer.js","sourceRoot":"","sources":["../../src/realtimeProxy/RealtimeProxyServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,IAAI,QAAQ,EAAE,eAAe,EAAgB,MAAM,IAAI,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAsB,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EACH,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACH,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,qCAAqC,GAGxC,MAAM,0BAA0B,CAAC;AAElC,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;AAEhE,qEAAqE;AACrE,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAkC;IAyBvE;QACI,KAAK,EAAE,CAAC;QAzBI,iBAAY,GAAG,qBAAqB,CAAC;QAErD,+GAA+G;QAC9F,QAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/D,+GAA+G;QAC9F,aAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAEvH,oEAAoE;QACnD,YAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAE1D,6DAA6D;QAC5C,WAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QAEzD,yFAAyF;QACxE,eAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;QAEpD,cAAS,GAA4B;YAClD,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAChD,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;SACjD,CAAC;QAEM,eAAU,GAAG,KAAK,CAAC;IAI3B,CAAC;IAED,uCAAuC;IAChC,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAAuB,CAAC;IACpD,CAAC;IAED,0HAA0H;IAC1H,IAAc,WAAW;QACrB,OAAO,qBAAqB,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACI,gBAAgB,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY;QAC1E,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,GAAG,EAAE,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACxC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,GAAG,IAAI,mBAAmB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,gDAAgD;IAClE,CAAC;IAED,6FAA6F;IACrF,kBAAkB,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,GAAQ;QACvF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,0FAA0F;QAC1F,sFAAsF;QACtF,2EAA2E;QAC3E,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9D,mBAAmB,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrF,OAAO;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC/D,OAAO;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACpG,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,QAAgB;QAC/F,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9D,mBAAmB,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrF,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,yBAAyB,iBAAiB,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;YACnH,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC/D,OAAO;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5H,CAAC;IAED,oFAAoF;IAC5E,MAAM,CAAC,WAAW,CAAC,QAAgB;QACvC,OAAO,QAAQ,KAAK,mBAAmB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,mBAAmB,GAAG,CAAC,CAAC;IAC9F,CAAC;IAED,gHAAgH;IACxG,MAAM,CAAC,eAAe,CAAC,QAAgB;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnF,IAAI,CAAC;YACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC,CAAC,+BAA+B;QAC9C,CAAC;IACL,CAAC;IAED,+EAA+E;IACvE,SAAS,CAAC,SAAmB,EAAE,SAAiB,EAAE,MAA4B;QAClF,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,mGAAmG;IAC3F,YAAY,CAAC,MAA2B;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAED,yFAAyF;IACjF,WAAW,CAAC,MAA2B;QAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,aAAa,CAAC,MAA0B;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAC5D,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,CAAC,oEAAoE;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,+FAA+F;IACvF,UAAU,CAAC,SAAmB,EAAE,KAA+B;QACnE,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,yFAAyF;IACjF,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,gHAAgH;IACzG,QAAQ;QACX,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACD,MAAM,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACL,qBAAqB;YACzB,CAAC;QACL,CAAC;IACL,CAAC;IAED,yFAAyF;IACjF,MAAM,CAAC,QAAQ,CAAC,MAA0B;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,sCAAsC;QACrF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,YAAY,CAAC,MAAc,EAAE,SAAiB,EAAE,MAA0B;QACrF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,mCAAmC,KAAK,eAAe,mBAAmB,EAAE,CAAC,CAAC;QACvG,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED,kGAAkG;IAC1F,MAAM,CAAC,aAAa,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc;QACrE,IAAI,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,MAAM,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACL,yBAAyB;QAC7B,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,mBAAmB;IACrB,4FAA4F;aACpE,6BAAwB,GAAG,MAAM,AAAT,CAAU;IAC1D;;;;;OAKG;aACqB,uBAAkB,GAAG,GAAG,AAAN,CAAO;IASjD,YACqB,OAAiB,EACjB,KAA+B,EAC/B,QAAoB;QAFpB,YAAO,GAAP,OAAO,CAAU;QACjB,UAAK,GAAL,KAAK,CAA0B;QAC/B,aAAQ,GAAR,QAAQ,CAAY;QAVjC,aAAQ,GAAoB,IAAI,CAAC;QACzC,4FAA4F;QAC3E,YAAO,GAAgD,EAAE,CAAC;QACnE,iBAAY,GAAyC,IAAI,CAAC;QAC1D,yBAAoB,GAAG,CAAC,CAAC;QACzB,WAAM,GAAG,KAAK,CAAC;IAMpB,CAAC;IAEJ,qDAAqD;IAC9C,KAAK;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,oFAAoF;QACpF,2DAA2D;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,gDAAgD,mBAAmB,CAAC,wBAAwB,qBAAqB,CAAC,CAAC;gBAChI,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACL,CAAC,EAAE,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAChD,IAAI,CAAC,YAAuC,CAAC,KAAK,EAAE,EAAE,CAAC;QAExD,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,QAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,QAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,+FAA+F;IACvF,WAAW,CAAC,IAAa,EAAE,QAAiB;QAChD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,CAAC;gBAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,uDAAuD;gBAC7E,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,oBAAoB,KAAK,CAAC,IAAI,IAAI,CAAC,oBAAoB,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,oBAAoB,yCAAyC,CAAC,CAAC;gBAC1I,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,2DAA2D;IACnD,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,sGAAsG;IAC9F,OAAO,CAAC,MAAgB,EAAE,IAAa,EAAE,QAAiB;QAC9D,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACL,CAAC;IAED,4EAA4E;IACrE,KAAK;QACR,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACD,IAAI,EAAE,KAAK,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACL,qBAAqB;YACzB,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC"}

package/dist/realtimeProxy/RealtimeRelayTunnel.d.ts

@@ -0,0 +1,171 @@
+import { WebSocket as WsClient } from 'ws';
+import { type IRealtimeRelayPolicy } from '@memberjunction/ai';
+/** The relay's deadlines, pings, buffers and caps. */
+export interface RealtimeRelayLimits {
+    /** How long the browser has to send its first frame after the upgrade, in ms. */
+    FirstFrameTimeoutMs: number;
+    /** How long the upstream has to open, from the header fetch to the end of its handshake, in ms. */
+    UpstreamOpenTimeoutMs: number;
+    /** How often the relay pings each leg, in ms. */
+    PingIntervalMs: number;
+    /**
+     * Pings a leg may leave unanswered in a row. At the next ping a leg that answered none of them is terminated and the
+     * other leg is closed (any pong resets the count).
+     */
+    MaxMissedPongs: number;
+    /** Client frames held while the upstream opens; past this the oldest are dropped. */
+    MaxPendingFrames: number;
+    /** Bytes of client frames held while the upstream opens; past this the oldest are dropped. */
+    MaxPendingBytes: number;
+    /**
+     * Bytes the browser leg may have queued after a downstream send. Past this the browser cannot keep up: the tunnel
+     * closes (1013 to the browser, 1001 upstream) and the client resumes on a new connection.
+     */
+    MaxBrowserBufferedBytes: number;
+    /**
+     * Bytes the upstream leg may have queued after an upstream send. Past this the provider has stopped reading: the
+     * tunnel closes (1013 to the browser, 1001 upstream) and the client resumes on a new connection.
+     */
+    MaxUpstreamBufferedBytes: number;
+}
+/** The limits MJAPI runs the relay with. */
+export declare const REALTIME_RELAY_LIMITS: Readonly<RealtimeRelayLimits>;
+/**
+ * The largest client message the relay accepts (2 MiB). The relay's websocket server enforces it while reading, so a
+ * larger message closes the browser leg with 1009 before it is buffered.
+ */
+export declare const REALTIME_RELAY_MAX_CLIENT_FRAME_BYTES: number;
+/** How a relay tunnel reports to the server that owns it. */
+export interface RealtimeRelayTunnelHost {
+    /** The session granted this connection: the server makes it the session's live one and closes the older one. */
+    OnGranted(tunnel: RealtimeRelayTunnel): void;
+    /** The tunnel closed; called once. */
+    OnClosed(tunnel: RealtimeRelayTunnel): void;
+}
+/** The first 8 characters of a ticket id, safe to log (never the whole id). */
+export declare function RelayTicketPrefix(id: string): string;
+/**
+ * One browser connection through MJAPI's realtime relay (`/realtime/relay/<ticket>/…`).
+ *
+ * It waits for the browser's first frame, asks the session's policy what that frame opens, and lets the registry
+ * decide (one fresh connection, then resumes with a forwarded handle). Then it opens the upstream with headers the
+ * policy mints for this connection, sends the policy's opening frames before anything else, and pumps both ways: client
+ * frames through the policy's filter (text only; binary client frames are dropped), server frames unchanged once the
+ * policy has looked for a resumption handle. It pings both legs and terminates one that stops answering, closes a
+ * browser that cannot keep up with what it is sent and an upstream that stops reading, passes close codes through, and closes when the session ends. Logs
+ * carry counts, sizes, codes and an 8-character ticket prefix, never payloads, headers or tokens.
+ */
+export declare class RealtimeRelayTunnel {
+    private readonly browser;
+    private readonly sessionId;
+    private readonly policy;
+    private readonly limits;
+    private readonly host;
+    private upstream;
+    private grant;
+    private intent;
+    /** Client frames that passed the filter before the upstream opened, in arrival order. */
+    private readonly pending;
+    private pendingBytes;
+    /** Dropped client frames per type label. */
+    private readonly drops;
+    private readonly traffic;
+    /** Pings each leg has left unanswered since its last pong. */
+    private readonly unanswered;
+    private firstFrameTimer;
+    private upstreamTimer;
+    private lifetimeTimer;
+    private pingTimer;
+    private openedAtMs;
+    private browserCloseCode;
+    private upstreamCloseNote;
+    private closed;
+    constructor(browser: WsClient, sessionId: string, policy: IRealtimeRelayPolicy, limits: RealtimeRelayLimits, host: RealtimeRelayTunnelHost);
+    /** The relay session this connection belongs to. */
+    get SessionID(): string;
+    /** Starts the first-frame deadline and the pings, and listens to the browser leg. */
+    Start(): void;
+    /** Closes both legs with `code` and `reason` (no code: a close frame without one). Idempotent. */
+    Close(code?: number, reason?: string): void;
+    private onBrowserMessage;
+    /** Reads the first frame's intent, asks the registry, and opens the upstream when the connection is granted. */
+    private openFromFirstFrame;
+    /** The policy's reading of the first frame; a policy that throws opens nothing (only the error's name is logged). */
+    private readIntent;
+    /** Opens the upstream with headers the policy mints now, under the upstream deadline. */
+    private openUpstream;
+    /** Asks the policy for this connection's upstream headers; a failure closes the tunnel with 1011. */
+    private fetchHeaders;
+    /** Starts the upstream handshake; a refused URL closes the tunnel with 1014. */
+    private connectUpstream;
+    /** The upstream is open: the policy's opening frames go first, then what the browser sent meanwhile. */
+    private onUpstreamOpen;
+    /** The policy's opening frames; a policy that throws closes the tunnel with 1011. */
+    private openingFrames;
+    /** A client frame after the first: binary is dropped, text goes through the policy's filter. */
+    private fromBrowser;
+    /** The policy's verdict on a client frame; a policy that throws drops the frame. */
+    private filter;
+    /**
+     * Holds a frame until the upstream opens; past either cap (frames or bytes) the oldest go (stale audio is worthless
+     * anyway). A frame larger than the byte cap on its own is dropped.
+     */
+    private hold;
+    /**
+     * A server frame: a handle it carries is recorded before the frame goes to the browser, unchanged; then the browser
+     * leg's queue is checked against the cap.
+     */
+    private onUpstreamMessage;
+    /**
+     * A browser that cannot keep up (its queued bytes pass `MaxBrowserBufferedBytes` after a downstream send) is closed
+     * with 1013 and the upstream with 1001; the client resumes on a new connection.
+     */
+    private closeIfBrowserBehind;
+    /** The resumption handle the policy finds in a server frame, if any; a policy that throws finds none. */
+    private observe;
+    /** Sends one text frame upstream and counts it; then the upstream leg's queue is checked against the cap. */
+    private sendUp;
+    /**
+     * An upstream that has stopped reading (its queued bytes pass `MaxUpstreamBufferedBytes` after an upstream send) is
+     * closed with 1001 and the browser with 1013, before the ping watchdog would notice; the client resumes on a new
+     * connection.
+     */
+    private closeIfUpstreamBehind;
+    /** Sends on a leg that is open, keeping text as text and binary as binary; a failed send closes the tunnel. */
+    private send;
+    /**
+     * Pings each open leg, so idle timeouts on load balancers and ingresses do not close it. A leg that answered none of
+     * its last `MaxMissedPongs` pings is gone: it is terminated and the other leg closed.
+     */
+    private pingBoth;
+    /** A leg stopped answering pings: it is terminated, and the other leg closes (1001 upstream, 1014 to the browser). */
+    private closeSilentLeg;
+    /** The upstream closed: the browser gets the same code and reason (1014 when the upstream sent none). */
+    private onUpstreamClose;
+    /** The browser closed: the upstream gets the same code and reason (1001 when the browser sent none). */
+    private onBrowserClose;
+    /** The upstream failed (a refused handshake, a dropped socket): the browser gets 1014. */
+    private onUpstreamError;
+    /** The browser leg failed; `ws` has already closed it with the right code (1009 for an oversized frame). */
+    private onBrowserError;
+    /**
+     * Closes both legs (the upstream with the browser's close unless it gets its own), stops the timers and reports to
+     * the server. Idempotent.
+     */
+    private closeWith;
+    /** Closes one leg unless it is already closing; `Terminate`, or a handshake in progress, drops the socket. */
+    private static closeLeg;
+    private static terminate;
+    /** Refuses the connection with 1008; the reason is logged, the browser only learns it was refused. */
+    private refuse;
+    private static after;
+    private static cancel;
+    private stopTimers;
+    /** Counts a dropped client frame under a sanitized label (the label is the policy's, never the payload). */
+    private countDrop;
+    private get label();
+    private warn;
+    private logOpened;
+    private logClosed;
+}
+//# sourceMappingURL=RealtimeRelayTunnel.d.ts.map

package/dist/realtimeProxy/RealtimeRelayTunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RealtimeRelayTunnel.d.ts","sourceRoot":"","sources":["../../src/realtimeProxy/RealtimeRelayTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,QAAQ,EAAgB,MAAM,IAAI,CAAC;AACzD,OAAO,EAGH,KAAK,oBAAoB,EAI5B,MAAM,oBAAoB,CAAC;AAE5B,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAChC,iFAAiF;IACjF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mGAAmG;IACnG,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,gBAAgB,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,wBAAwB,EAAE,MAAM,CAAC;CACpC;AAED,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,mBAAmB,CAS9D,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,qCAAqC,QAAkB,CAAC;AA4BrE,6DAA6D;AAC7D,MAAM,WAAW,uBAAuB;IACpC,gHAAgH;IAChH,SAAS,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/C;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,mBAAmB;IAsBxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAzBzB,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,MAAM,CAAwC;IACtD,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,YAAY,CAAK;IACzB,4CAA4C;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4D;IACpF,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyD;IACpF,OAAO,CAAC,eAAe,CAA8C;IACrE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,iBAAiB,CAAM;IAC/B,OAAO,CAAC,MAAM,CAAS;gBAGF,OAAO,EAAE,QAAQ,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,uBAAuB;IAGlD,oDAAoD;IACpD,IAAW,SAAS,IAAI,MAAM,CAE7B;IAED,qFAAqF;IAC9E,KAAK,IAAI,IAAI;IAUpB,kGAAkG;IAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAMlD,OAAO,CAAC,gBAAgB;IAWxB,gHAAgH;IAChH,OAAO,CAAC,kBAAkB;IA4B1B,qHAAqH;IACrH,OAAO,CAAC,UAAU;IASlB,yFAAyF;YAC3E,YAAY;IAqB1B,qGAAqG;YACvF,YAAY;IAU1B,gFAAgF;IAChF,OAAO,CAAC,eAAe;IAWvB,wGAAwG;IACxG,OAAO,CAAC,cAAc;IAmBtB,qFAAqF;IACrF,OAAO,CAAC,aAAa;IAYrB,gGAAgG;IAChG,OAAO,CAAC,WAAW;IAiBnB,oFAAoF;IACpF,OAAO,CAAC,MAAM;IAQd;;;OAGG;IACH,OAAO,CAAC,IAAI;IAYZ;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAgBzB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAa5B,yGAAyG;IACzG,OAAO,CAAC,OAAO;IASf,6GAA6G;IAC7G,OAAO,CAAC,MAAM;IAQd;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAa7B,+GAA+G;IAC/G,OAAO,CAAC,IAAI;IAaZ;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAmBhB,sHAAsH;IACtH,OAAO,CAAC,cAAc;IAYtB,yGAAyG;IACzG,OAAO,CAAC,eAAe;IAKvB,wGAAwG;IACxG,OAAO,CAAC,cAAc;IAKtB,0FAA0F;IAC1F,OAAO,CAAC,eAAe;IASvB,4GAA4G;IAC5G,OAAO,CAAC,cAAc;IAQtB;;;OAGG;IACH,OAAO,CAAC,SAAS;IAejB,8GAA8G;IAC9G,OAAO,CAAC,MAAM,CAAC,QAAQ;IAkBvB,OAAO,CAAC,MAAM,CAAC,SAAS;IAQxB,sGAAsG;IACtG,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM,CAAC,KAAK;IAMpB,OAAO,CAAC,MAAM,CAAC,MAAM;IAMrB,OAAO,CAAC,UAAU;IAUlB,4GAA4G;IAC5G,OAAO,CAAC,SAAS;IAWjB,OAAO,KAAK,KAAK,GAEhB;IAED,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,SAAS;CAWpB"}