@monlite/realtime 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Emad Jumaah
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,80 @@
+# @monlite/realtime
+
+Networked realtime for [`@monlite/core`](https://www.npmjs.com/package/@monlite/core) — stream
+live queries and documents to remote clients (browser, mobile, other services) over **Server-Sent
+Events**, backed by the change feed. Zero extra dependencies (built on `node:http` + `fetch`).
+
+```bash
+npm install @monlite/realtime
+```
+
+The database stays embedded in **your** service; this package puts a realtime API in front of it.
+
+## Server
+
+```ts
+import { createDb } from "@monlite/core";
+import { realtime } from "@monlite/realtime";
+
+const db = createDb("./app.db", { changefeed: true }); // change feed required
+
+// Single database:
+realtime({ db }).listen(8080);
+
+// Or per-tenant + auth (resolve which db from the request):
+realtime({
+  authorize: (req) => {
+    const tenant = verify(req.headers.authorization); // your auth
+    return tenant ? { db: dbForTenant(tenant) } : null; // null → 401
+  },
+}).listen(8080);
+```
+
+Attach to an existing server/framework instead of `listen()`:
+
+```ts
+const rt = realtime({ db });
+http.createServer((req, res) => {
+  if (req.url?.startsWith("/realtime")) return rt.handler(req, res);
+  // ... your other routes
+});
+```
+
+## Client (browser or Node ≥ 18)
+
+```ts
+import { connectRealtime } from "@monlite/realtime/client";
+
+const live = connectRealtime("https://api.example.com", { token });
+
+// Live query — fires with the snapshot, then on every change
+const stop = live
+  .collection("orders")
+  .where({ status: "open" })
+  .orderBy({ createdAt: "desc" })
+  .onSnapshot(({ results, added, removed, changed, moved }) => render(results));
+
+// Single document (null on delete)
+const stopDoc = live.doc("orders", "o-123", (doc) => render(doc));
+
+// Only re-emit when a specific field changes
+live.collection("orders").fields(["status"]).onSnapshot(onChange);
+
+stop(); // unsubscribe
+live.close(); // unsubscribe everything
+```
+
+## How it works
+
+- One SSE stream per subscription; the query travels in the URL.
+- The server runs `collection.watch()` / `watchDoc()` on the authorized database and pushes each
+  `LiveEvent` (init snapshot, then `added`/`removed`/`changed`/`moved` deltas) down the stream.
+- The client auto-reconnects with backoff; on reconnect it receives a fresh snapshot (no missed
+  state). Because writes flow through the [change feed](https://qataruts.github.io/monlite/docs/core/realtime),
+  changes from other processes and from `@monlite/sync` are delivered too.
+
+## Notes
+
+- **Auth & multi-tenancy** are your `authorize` hook's job — it maps a request to a `{ db }`.
+- **CORS** is `*` by default; set `cors` to a specific origin (or `false`) in production.
+- Pairs naturally with the embedded, one-`.db`-file-per-tenant model.

package/dist/client.cjs

@@ -0,0 +1,110 @@
+'use strict';
+
+// src/client.ts
+function connectRealtime(baseUrl, opts = {}) {
+  const root = baseUrl.replace(/\/$/, "");
+  const base = (opts.path ?? "/realtime").replace(/\/$/, "");
+  const reconnectMs = opts.reconnectMs ?? 1e3;
+  const doFetch = opts.fetch ?? globalThis.fetch;
+  const subs = /* @__PURE__ */ new Set();
+  function stream(path, onMessage) {
+    let stopped = false;
+    let controller;
+    const url = new URL(root + base + path);
+    if (opts.token) url.searchParams.set("token", opts.token);
+    (async () => {
+      while (!stopped) {
+        controller = new AbortController();
+        try {
+          const res = await doFetch(url.toString(), {
+            headers: opts.token ? { authorization: `Bearer ${opts.token}` } : {},
+            signal: controller.signal
+          });
+          if (!res.ok || !res.body)
+            throw new Error(`realtime HTTP ${res.status}`);
+          const reader = res.body.getReader();
+          const decoder = new TextDecoder();
+          let buf = "";
+          for (; ; ) {
+            const { value, done } = await reader.read();
+            if (done) break;
+            buf += decoder.decode(value, { stream: true });
+            let idx;
+            while ((idx = buf.indexOf("\n\n")) >= 0) {
+              const frame = buf.slice(0, idx);
+              buf = buf.slice(idx + 2);
+              const data = frame.split("\n").filter((l) => l.startsWith("data:")).map((l) => l.slice(5).replace(/^ /, "")).join("\n");
+              if (data) {
+                try {
+                  onMessage(JSON.parse(data));
+                } catch {
+                }
+              }
+            }
+          }
+        } catch {
+        }
+        if (stopped) break;
+        await new Promise((r) => setTimeout(r, reconnectMs));
+      }
+    })();
+    const unsub = () => {
+      stopped = true;
+      controller?.abort();
+      subs.delete(unsub);
+    };
+    subs.add(unsub);
+    return unsub;
+  }
+  function buildQuery(name) {
+    const args = {};
+    const api = {
+      where(w) {
+        args.where = w;
+        return api;
+      },
+      orderBy(o) {
+        args.orderBy = o;
+        return api;
+      },
+      take(n) {
+        args.take = n;
+        return api;
+      },
+      skip(n) {
+        args.skip = n;
+        return api;
+      },
+      fields(f) {
+        args.fields = f;
+        return api;
+      },
+      onSnapshot(cb) {
+        const qp = `?coll=${encodeURIComponent(name)}&q=${encodeURIComponent(
+          JSON.stringify(args)
+        )}`;
+        return stream(`/query${qp}`, (data) => cb(data));
+      }
+    };
+    return api;
+  }
+  return {
+    collection(name) {
+      return buildQuery(name);
+    },
+    doc(name, id, cb) {
+      const qp = `?coll=${encodeURIComponent(name)}&id=${encodeURIComponent(id)}`;
+      return stream(
+        `/doc${qp}`,
+        (data) => cb(data?.doc ?? null)
+      );
+    },
+    close() {
+      for (const unsub of [...subs]) unsub();
+    }
+  };
+}
+
+exports.connectRealtime = connectRealtime;
+//# sourceMappingURL=client.cjs.map
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";;;AAwDO,SAAS,eAAA,CACd,OAAA,EACA,IAAA,GAA8B,EAAC,EACf;AAChB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,IAAQ,WAAA,EAAa,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,GAAA;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA;AACzC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAiB;AAGlC,EAAA,SAAS,MAAA,CAAO,MAAc,SAAA,EAA6C;AACzE,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,IAAI,UAAA;AAEJ,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,GAAO,OAAO,IAAI,CAAA;AACtC,IAAA,IAAI,KAAK,KAAA,EAAO,GAAA,CAAI,aAAa,GAAA,CAAI,OAAA,EAAS,KAAK,KAAK,CAAA;AAExD,IAAA,CAAC,YAAY;AACX,MAAA,OAAO,CAAC,OAAA,EAAS;AACf,QAAA,UAAA,GAAa,IAAI,eAAA,EAAgB;AACjC,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,GAAA,CAAI,UAAS,EAAG;AAAA,YACxC,OAAA,EAAS,IAAA,CAAK,KAAA,GACV,EAAE,aAAA,EAAe,UAAU,IAAA,CAAK,KAAK,CAAA,CAAA,EAAG,GACxC,EAAC;AAAA,YACL,QAAQ,UAAA,CAAW;AAAA,WACpB,CAAA;AACD,UAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,GAAA,CAAI,IAAA;AAClB,YAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC/C,UAAA,MAAM,MAAA,GAAS,GAAA,CAAI,IAAA,CAAK,SAAA,EAAU;AAClC,UAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,UAAA,IAAI,GAAA,GAAM,EAAA;AACV,UAAA,WAAS;AACP,YAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,YAAA,IAAI,IAAA,EAAM;AACV,YAAA,GAAA,IAAO,QAAQ,MAAA,CAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC7C,YAAA,IAAI,GAAA;AACJ,YAAA,OAAA,CAAQ,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,MAAM,MAAM,CAAA,EAAG;AACvC,cAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC9B,cAAA,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AACvB,cAAA,MAAM,IAAA,GAAO,KAAA,CACV,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,OAAO,CAAC,CAAA,CACnC,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,CACvC,IAAA,CAAK,IAAI,CAAA;AACZ,cAAA,IAAI,IAAA,EAAM;AACR,gBAAA,IAAI;AACF,kBAAA,SAAA,CAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,gBAC5B,CAAA,CAAA,MAAQ;AAAA,gBAER;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AACA,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,WAAW,CAAC,CAAA;AAAA,MACrD;AAAA,IACF,CAAA,GAAG;AAEH,IAAA,MAAM,QAAqB,MAAM;AAC/B,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,UAAA,EAAY,KAAA,EAAM;AAClB,MAAA,IAAA,CAAK,OAAO,KAAK,CAAA;AAAA,IACnB,CAAA;AACA,IAAA,IAAA,CAAK,IAAI,KAAK,CAAA;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,SAAS,WAAc,IAAA,EAA+B;AACpD,IAAA,MAAM,OAAqB,EAAC;AAC5B,IAAA,MAAM,GAAA,GAAuB;AAAA,MAC3B,MAAM,CAAA,EAAG;AACP,QAAA,IAAA,CAAK,KAAA,GAAQ,CAAA;AACb,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,QAAQ,CAAA,EAAG;AACT,QAAA,IAAA,CAAK,OAAA,GAAU,CAAA;AACf,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,KAAK,CAAA,EAAG;AACN,QAAA,IAAA,CAAK,IAAA,GAAO,CAAA;AACZ,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,KAAK,CAAA,EAAG;AACN,QAAA,IAAA,CAAK,IAAA,GAAO,CAAA;AACZ,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAO,CAAA,EAAG;AACR,QAAA,IAAA,CAAK,MAAA,GAAS,CAAA;AACd,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,WAAW,EAAA,EAAI;AACb,QAAA,MAAM,EAAA,GAAK,CAAA,MAAA,EAAS,kBAAA,CAAmB,IAAI,CAAC,CAAA,GAAA,EAAM,kBAAA;AAAA,UAChD,IAAA,CAAK,UAAU,IAAI;AAAA,SACpB,CAAA,CAAA;AACD,QAAA,OAAO,MAAA,CAAO,SAAS,EAAE,CAAA,CAAA,EAAI,CAAC,IAAA,KAAS,EAAA,CAAG,IAAoB,CAAC,CAAA;AAAA,MACjE;AAAA,KACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,WAAoB,IAAA,EAAc;AAChC,MAAA,OAAO,WAAc,IAAI,CAAA;AAAA,IAC3B,CAAA;AAAA,IACA,GAAA,CACE,IAAA,EACA,EAAA,EACA,EAAA,EACa;AACb,MAAA,MAAM,EAAA,GAAK,SAAS,kBAAA,CAAmB,IAAI,CAAC,CAAA,IAAA,EAAO,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACzE,MAAA,OAAO,MAAA;AAAA,QAAO,OAAO,EAAE,CAAA,CAAA;AAAA,QAAI,CAAC,IAAA,KAC1B,EAAA,CAAI,IAAA,EAAM,OAAO,IAAyB;AAAA,OAC5C;AAAA,IACF,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,KAAA,MAAW,KAAA,IAAS,CAAC,GAAG,IAAI,GAAG,KAAA,EAAM;AAAA,IACvC;AAAA,GACF;AACF","file":"client.cjs","sourcesContent":["import type {\n  Doc,\n  LiveEvent,\n  WatchArgs,\n  WhereInput,\n  WithId,\n} from \"@monlite/core\";\n\nexport interface RealtimeClientOptions {\n  /** Bearer token sent as `Authorization` (and `?token=` for EventSource-style auth). */\n  token?: string;\n  /** Base path on the server. Default `\"/realtime\"`. */\n  path?: string;\n  /** Reconnect backoff in ms after a dropped stream. Default `1000`. */\n  reconnectMs?: number;\n  /** Custom `fetch` (e.g. for Node < 18 or a proxy). Defaults to global `fetch`. */\n  fetch?: typeof fetch;\n}\n\n/** Unsubscribe from a live stream. */\nexport type Unsubscribe = () => void;\n\nexport interface QueryBuilder<T = Doc> {\n  where(where: WhereInput<T>): QueryBuilder<T>;\n  orderBy(orderBy: WatchArgs<T>[\"orderBy\"]): QueryBuilder<T>;\n  take(n: number): QueryBuilder<T>;\n  skip(n: number): QueryBuilder<T>;\n  /** Only emit when one of these fields changes (server-side filter). */\n  fields(fields: (keyof T | (string & {}))[]): QueryBuilder<T>;\n  /** Subscribe. The callback fires with each {@link LiveEvent} (init, then changes). */\n  onSnapshot(cb: (event: LiveEvent<T>) => void): Unsubscribe;\n}\n\nexport interface RealtimeClient {\n  /** Live query over a collection. */\n  collection<T = Doc>(name: string): QueryBuilder<T>;\n  /** Live single-document listener (`null` while absent / on delete). */\n  doc<T = Doc>(\n    name: string,\n    id: string,\n    cb: (doc: WithId<T> | null) => void,\n  ): Unsubscribe;\n  /** Close all subscriptions. */\n  close(): void;\n}\n\n/**\n * Connect to a `@monlite/realtime` server and subscribe to live queries and\n * documents over SSE. Works in the browser and Node ≥ 18 (uses `fetch`).\n *\n * ```ts\n * const live = connectRealtime(\"http://localhost:8080\", { token });\n * const stop = live.collection(\"orders\").where({ status: \"open\" }).onSnapshot(render);\n * const stopDoc = live.doc(\"orders\", \"o-123\", (doc) => render(doc));\n * ```\n */\nexport function connectRealtime(\n  baseUrl: string,\n  opts: RealtimeClientOptions = {},\n): RealtimeClient {\n  const root = baseUrl.replace(/\\/$/, \"\");\n  const base = (opts.path ?? \"/realtime\").replace(/\\/$/, \"\");\n  const reconnectMs = opts.reconnectMs ?? 1000;\n  const doFetch = opts.fetch ?? globalThis.fetch;\n  const subs = new Set<Unsubscribe>();\n\n  /** Open an auto-reconnecting SSE stream; returns an unsubscribe. */\n  function stream(path: string, onMessage: (data: any) => void): Unsubscribe {\n    let stopped = false;\n    let controller: AbortController | undefined;\n\n    const url = new URL(root + base + path);\n    if (opts.token) url.searchParams.set(\"token\", opts.token);\n\n    (async () => {\n      while (!stopped) {\n        controller = new AbortController();\n        try {\n          const res = await doFetch(url.toString(), {\n            headers: opts.token\n              ? { authorization: `Bearer ${opts.token}` }\n              : {},\n            signal: controller.signal,\n          });\n          if (!res.ok || !res.body)\n            throw new Error(`realtime HTTP ${res.status}`);\n          const reader = res.body.getReader();\n          const decoder = new TextDecoder();\n          let buf = \"\";\n          for (;;) {\n            const { value, done } = await reader.read();\n            if (done) break;\n            buf += decoder.decode(value, { stream: true });\n            let idx: number;\n            while ((idx = buf.indexOf(\"\\n\\n\")) >= 0) {\n              const frame = buf.slice(0, idx);\n              buf = buf.slice(idx + 2);\n              const data = frame\n                .split(\"\\n\")\n                .filter((l) => l.startsWith(\"data:\"))\n                .map((l) => l.slice(5).replace(/^ /, \"\"))\n                .join(\"\\n\");\n              if (data) {\n                try {\n                  onMessage(JSON.parse(data));\n                } catch {\n                  /* ignore malformed frame */\n                }\n              }\n            }\n          }\n        } catch {\n          /* network/abort — fall through to reconnect */\n        }\n        if (stopped) break;\n        await new Promise((r) => setTimeout(r, reconnectMs));\n      }\n    })();\n\n    const unsub: Unsubscribe = () => {\n      stopped = true;\n      controller?.abort();\n      subs.delete(unsub);\n    };\n    subs.add(unsub);\n    return unsub;\n  }\n\n  function buildQuery<T>(name: string): QueryBuilder<T> {\n    const args: WatchArgs<T> = {};\n    const api: QueryBuilder<T> = {\n      where(w) {\n        args.where = w;\n        return api;\n      },\n      orderBy(o) {\n        args.orderBy = o;\n        return api;\n      },\n      take(n) {\n        args.take = n;\n        return api;\n      },\n      skip(n) {\n        args.skip = n;\n        return api;\n      },\n      fields(f) {\n        args.fields = f;\n        return api;\n      },\n      onSnapshot(cb) {\n        const qp = `?coll=${encodeURIComponent(name)}&q=${encodeURIComponent(\n          JSON.stringify(args),\n        )}`;\n        return stream(`/query${qp}`, (data) => cb(data as LiveEvent<T>));\n      },\n    };\n    return api;\n  }\n\n  return {\n    collection<T = Doc>(name: string) {\n      return buildQuery<T>(name);\n    },\n    doc<T = Doc>(\n      name: string,\n      id: string,\n      cb: (doc: WithId<T> | null) => void,\n    ): Unsubscribe {\n      const qp = `?coll=${encodeURIComponent(name)}&id=${encodeURIComponent(id)}`;\n      return stream(`/doc${qp}`, (data) =>\n        cb((data?.doc ?? null) as WithId<T> | null),\n      );\n    },\n    close() {\n      for (const unsub of [...subs]) unsub();\n    },\n  };\n}\n"]}

package/dist/client.d.cts

@@ -0,0 +1,45 @@
+import { Doc, WhereInput, WatchArgs, LiveEvent, WithId } from '@monlite/core';
+
+interface RealtimeClientOptions {
+    /** Bearer token sent as `Authorization` (and `?token=` for EventSource-style auth). */
+    token?: string;
+    /** Base path on the server. Default `"/realtime"`. */
+    path?: string;
+    /** Reconnect backoff in ms after a dropped stream. Default `1000`. */
+    reconnectMs?: number;
+    /** Custom `fetch` (e.g. for Node < 18 or a proxy). Defaults to global `fetch`. */
+    fetch?: typeof fetch;
+}
+/** Unsubscribe from a live stream. */
+type Unsubscribe = () => void;
+interface QueryBuilder<T = Doc> {
+    where(where: WhereInput<T>): QueryBuilder<T>;
+    orderBy(orderBy: WatchArgs<T>["orderBy"]): QueryBuilder<T>;
+    take(n: number): QueryBuilder<T>;
+    skip(n: number): QueryBuilder<T>;
+    /** Only emit when one of these fields changes (server-side filter). */
+    fields(fields: (keyof T | (string & {}))[]): QueryBuilder<T>;
+    /** Subscribe. The callback fires with each {@link LiveEvent} (init, then changes). */
+    onSnapshot(cb: (event: LiveEvent<T>) => void): Unsubscribe;
+}
+interface RealtimeClient {
+    /** Live query over a collection. */
+    collection<T = Doc>(name: string): QueryBuilder<T>;
+    /** Live single-document listener (`null` while absent / on delete). */
+    doc<T = Doc>(name: string, id: string, cb: (doc: WithId<T> | null) => void): Unsubscribe;
+    /** Close all subscriptions. */
+    close(): void;
+}
+/**
+ * Connect to a `@monlite/realtime` server and subscribe to live queries and
+ * documents over SSE. Works in the browser and Node ≥ 18 (uses `fetch`).
+ *
+ * ```ts
+ * const live = connectRealtime("http://localhost:8080", { token });
+ * const stop = live.collection("orders").where({ status: "open" }).onSnapshot(render);
+ * const stopDoc = live.doc("orders", "o-123", (doc) => render(doc));
+ * ```
+ */
+declare function connectRealtime(baseUrl: string, opts?: RealtimeClientOptions): RealtimeClient;
+
+export { type QueryBuilder, type RealtimeClient, type RealtimeClientOptions, type Unsubscribe, connectRealtime };

package/dist/client.d.ts

@@ -0,0 +1,45 @@
+import { Doc, WhereInput, WatchArgs, LiveEvent, WithId } from '@monlite/core';
+
+interface RealtimeClientOptions {
+    /** Bearer token sent as `Authorization` (and `?token=` for EventSource-style auth). */
+    token?: string;
+    /** Base path on the server. Default `"/realtime"`. */
+    path?: string;
+    /** Reconnect backoff in ms after a dropped stream. Default `1000`. */
+    reconnectMs?: number;
+    /** Custom `fetch` (e.g. for Node < 18 or a proxy). Defaults to global `fetch`. */
+    fetch?: typeof fetch;
+}
+/** Unsubscribe from a live stream. */
+type Unsubscribe = () => void;
+interface QueryBuilder<T = Doc> {
+    where(where: WhereInput<T>): QueryBuilder<T>;
+    orderBy(orderBy: WatchArgs<T>["orderBy"]): QueryBuilder<T>;
+    take(n: number): QueryBuilder<T>;
+    skip(n: number): QueryBuilder<T>;
+    /** Only emit when one of these fields changes (server-side filter). */
+    fields(fields: (keyof T | (string & {}))[]): QueryBuilder<T>;
+    /** Subscribe. The callback fires with each {@link LiveEvent} (init, then changes). */
+    onSnapshot(cb: (event: LiveEvent<T>) => void): Unsubscribe;
+}
+interface RealtimeClient {
+    /** Live query over a collection. */
+    collection<T = Doc>(name: string): QueryBuilder<T>;
+    /** Live single-document listener (`null` while absent / on delete). */
+    doc<T = Doc>(name: string, id: string, cb: (doc: WithId<T> | null) => void): Unsubscribe;
+    /** Close all subscriptions. */
+    close(): void;
+}
+/**
+ * Connect to a `@monlite/realtime` server and subscribe to live queries and
+ * documents over SSE. Works in the browser and Node ≥ 18 (uses `fetch`).
+ *
+ * ```ts
+ * const live = connectRealtime("http://localhost:8080", { token });
+ * const stop = live.collection("orders").where({ status: "open" }).onSnapshot(render);
+ * const stopDoc = live.doc("orders", "o-123", (doc) => render(doc));
+ * ```
+ */
+declare function connectRealtime(baseUrl: string, opts?: RealtimeClientOptions): RealtimeClient;
+
+export { type QueryBuilder, type RealtimeClient, type RealtimeClientOptions, type Unsubscribe, connectRealtime };

package/dist/client.js

@@ -0,0 +1,108 @@
+// src/client.ts
+function connectRealtime(baseUrl, opts = {}) {
+  const root = baseUrl.replace(/\/$/, "");
+  const base = (opts.path ?? "/realtime").replace(/\/$/, "");
+  const reconnectMs = opts.reconnectMs ?? 1e3;
+  const doFetch = opts.fetch ?? globalThis.fetch;
+  const subs = /* @__PURE__ */ new Set();
+  function stream(path, onMessage) {
+    let stopped = false;
+    let controller;
+    const url = new URL(root + base + path);
+    if (opts.token) url.searchParams.set("token", opts.token);
+    (async () => {
+      while (!stopped) {
+        controller = new AbortController();
+        try {
+          const res = await doFetch(url.toString(), {
+            headers: opts.token ? { authorization: `Bearer ${opts.token}` } : {},
+            signal: controller.signal
+          });
+          if (!res.ok || !res.body)
+            throw new Error(`realtime HTTP ${res.status}`);
+          const reader = res.body.getReader();
+          const decoder = new TextDecoder();
+          let buf = "";
+          for (; ; ) {
+            const { value, done } = await reader.read();
+            if (done) break;
+            buf += decoder.decode(value, { stream: true });
+            let idx;
+            while ((idx = buf.indexOf("\n\n")) >= 0) {
+              const frame = buf.slice(0, idx);
+              buf = buf.slice(idx + 2);
+              const data = frame.split("\n").filter((l) => l.startsWith("data:")).map((l) => l.slice(5).replace(/^ /, "")).join("\n");
+              if (data) {
+                try {
+                  onMessage(JSON.parse(data));
+                } catch {
+                }
+              }
+            }
+          }
+        } catch {
+        }
+        if (stopped) break;
+        await new Promise((r) => setTimeout(r, reconnectMs));
+      }
+    })();
+    const unsub = () => {
+      stopped = true;
+      controller?.abort();
+      subs.delete(unsub);
+    };
+    subs.add(unsub);
+    return unsub;
+  }
+  function buildQuery(name) {
+    const args = {};
+    const api = {
+      where(w) {
+        args.where = w;
+        return api;
+      },
+      orderBy(o) {
+        args.orderBy = o;
+        return api;
+      },
+      take(n) {
+        args.take = n;
+        return api;
+      },
+      skip(n) {
+        args.skip = n;
+        return api;
+      },
+      fields(f) {
+        args.fields = f;
+        return api;
+      },
+      onSnapshot(cb) {
+        const qp = `?coll=${encodeURIComponent(name)}&q=${encodeURIComponent(
+          JSON.stringify(args)
+        )}`;
+        return stream(`/query${qp}`, (data) => cb(data));
+      }
+    };
+    return api;
+  }
+  return {
+    collection(name) {
+      return buildQuery(name);
+    },
+    doc(name, id, cb) {
+      const qp = `?coll=${encodeURIComponent(name)}&id=${encodeURIComponent(id)}`;
+      return stream(
+        `/doc${qp}`,
+        (data) => cb(data?.doc ?? null)
+      );
+    },
+    close() {
+      for (const unsub of [...subs]) unsub();
+    }
+  };
+}
+
+export { connectRealtime };
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";AAwDO,SAAS,eAAA,CACd,OAAA,EACA,IAAA,GAA8B,EAAC,EACf;AAChB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,IAAQ,WAAA,EAAa,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,GAAA;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA;AACzC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAiB;AAGlC,EAAA,SAAS,MAAA,CAAO,MAAc,SAAA,EAA6C;AACzE,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,IAAI,UAAA;AAEJ,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,GAAO,OAAO,IAAI,CAAA;AACtC,IAAA,IAAI,KAAK,KAAA,EAAO,GAAA,CAAI,aAAa,GAAA,CAAI,OAAA,EAAS,KAAK,KAAK,CAAA;AAExD,IAAA,CAAC,YAAY;AACX,MAAA,OAAO,CAAC,OAAA,EAAS;AACf,QAAA,UAAA,GAAa,IAAI,eAAA,EAAgB;AACjC,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,GAAA,CAAI,UAAS,EAAG;AAAA,YACxC,OAAA,EAAS,IAAA,CAAK,KAAA,GACV,EAAE,aAAA,EAAe,UAAU,IAAA,CAAK,KAAK,CAAA,CAAA,EAAG,GACxC,EAAC;AAAA,YACL,QAAQ,UAAA,CAAW;AAAA,WACpB,CAAA;AACD,UAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,GAAA,CAAI,IAAA;AAClB,YAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC/C,UAAA,MAAM,MAAA,GAAS,GAAA,CAAI,IAAA,CAAK,SAAA,EAAU;AAClC,UAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,UAAA,IAAI,GAAA,GAAM,EAAA;AACV,UAAA,WAAS;AACP,YAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,YAAA,IAAI,IAAA,EAAM;AACV,YAAA,GAAA,IAAO,QAAQ,MAAA,CAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC7C,YAAA,IAAI,GAAA;AACJ,YAAA,OAAA,CAAQ,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,MAAM,MAAM,CAAA,EAAG;AACvC,cAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC9B,cAAA,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AACvB,cAAA,MAAM,IAAA,GAAO,KAAA,CACV,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,OAAO,CAAC,CAAA,CACnC,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,CACvC,IAAA,CAAK,IAAI,CAAA;AACZ,cAAA,IAAI,IAAA,EAAM;AACR,gBAAA,IAAI;AACF,kBAAA,SAAA,CAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,gBAC5B,CAAA,CAAA,MAAQ;AAAA,gBAER;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AACA,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,WAAW,CAAC,CAAA;AAAA,MACrD;AAAA,IACF,CAAA,GAAG;AAEH,IAAA,MAAM,QAAqB,MAAM;AAC/B,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,UAAA,EAAY,KAAA,EAAM;AAClB,MAAA,IAAA,CAAK,OAAO,KAAK,CAAA;AAAA,IACnB,CAAA;AACA,IAAA,IAAA,CAAK,IAAI,KAAK,CAAA;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,SAAS,WAAc,IAAA,EAA+B;AACpD,IAAA,MAAM,OAAqB,EAAC;AAC5B,IAAA,MAAM,GAAA,GAAuB;AAAA,MAC3B,MAAM,CAAA,EAAG;AACP,QAAA,IAAA,CAAK,KAAA,GAAQ,CAAA;AACb,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,QAAQ,CAAA,EAAG;AACT,QAAA,IAAA,CAAK,OAAA,GAAU,CAAA;AACf,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,KAAK,CAAA,EAAG;AACN,QAAA,IAAA,CAAK,IAAA,GAAO,CAAA;AACZ,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,KAAK,CAAA,EAAG;AACN,QAAA,IAAA,CAAK,IAAA,GAAO,CAAA;AACZ,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAO,CAAA,EAAG;AACR,QAAA,IAAA,CAAK,MAAA,GAAS,CAAA;AACd,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,WAAW,EAAA,EAAI;AACb,QAAA,MAAM,EAAA,GAAK,CAAA,MAAA,EAAS,kBAAA,CAAmB,IAAI,CAAC,CAAA,GAAA,EAAM,kBAAA;AAAA,UAChD,IAAA,CAAK,UAAU,IAAI;AAAA,SACpB,CAAA,CAAA;AACD,QAAA,OAAO,MAAA,CAAO,SAAS,EAAE,CAAA,CAAA,EAAI,CAAC,IAAA,KAAS,EAAA,CAAG,IAAoB,CAAC,CAAA;AAAA,MACjE;AAAA,KACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,WAAoB,IAAA,EAAc;AAChC,MAAA,OAAO,WAAc,IAAI,CAAA;AAAA,IAC3B,CAAA;AAAA,IACA,GAAA,CACE,IAAA,EACA,EAAA,EACA,EAAA,EACa;AACb,MAAA,MAAM,EAAA,GAAK,SAAS,kBAAA,CAAmB,IAAI,CAAC,CAAA,IAAA,EAAO,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACzE,MAAA,OAAO,MAAA;AAAA,QAAO,OAAO,EAAE,CAAA,CAAA;AAAA,QAAI,CAAC,IAAA,KAC1B,EAAA,CAAI,IAAA,EAAM,OAAO,IAAyB;AAAA,OAC5C;AAAA,IACF,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,KAAA,MAAW,KAAA,IAAS,CAAC,GAAG,IAAI,GAAG,KAAA,EAAM;AAAA,IACvC;AAAA,GACF;AACF","file":"client.js","sourcesContent":["import type {\n  Doc,\n  LiveEvent,\n  WatchArgs,\n  WhereInput,\n  WithId,\n} from \"@monlite/core\";\n\nexport interface RealtimeClientOptions {\n  /** Bearer token sent as `Authorization` (and `?token=` for EventSource-style auth). */\n  token?: string;\n  /** Base path on the server. Default `\"/realtime\"`. */\n  path?: string;\n  /** Reconnect backoff in ms after a dropped stream. Default `1000`. */\n  reconnectMs?: number;\n  /** Custom `fetch` (e.g. for Node < 18 or a proxy). Defaults to global `fetch`. */\n  fetch?: typeof fetch;\n}\n\n/** Unsubscribe from a live stream. */\nexport type Unsubscribe = () => void;\n\nexport interface QueryBuilder<T = Doc> {\n  where(where: WhereInput<T>): QueryBuilder<T>;\n  orderBy(orderBy: WatchArgs<T>[\"orderBy\"]): QueryBuilder<T>;\n  take(n: number): QueryBuilder<T>;\n  skip(n: number): QueryBuilder<T>;\n  /** Only emit when one of these fields changes (server-side filter). */\n  fields(fields: (keyof T | (string & {}))[]): QueryBuilder<T>;\n  /** Subscribe. The callback fires with each {@link LiveEvent} (init, then changes). */\n  onSnapshot(cb: (event: LiveEvent<T>) => void): Unsubscribe;\n}\n\nexport interface RealtimeClient {\n  /** Live query over a collection. */\n  collection<T = Doc>(name: string): QueryBuilder<T>;\n  /** Live single-document listener (`null` while absent / on delete). */\n  doc<T = Doc>(\n    name: string,\n    id: string,\n    cb: (doc: WithId<T> | null) => void,\n  ): Unsubscribe;\n  /** Close all subscriptions. */\n  close(): void;\n}\n\n/**\n * Connect to a `@monlite/realtime` server and subscribe to live queries and\n * documents over SSE. Works in the browser and Node ≥ 18 (uses `fetch`).\n *\n * ```ts\n * const live = connectRealtime(\"http://localhost:8080\", { token });\n * const stop = live.collection(\"orders\").where({ status: \"open\" }).onSnapshot(render);\n * const stopDoc = live.doc(\"orders\", \"o-123\", (doc) => render(doc));\n * ```\n */\nexport function connectRealtime(\n  baseUrl: string,\n  opts: RealtimeClientOptions = {},\n): RealtimeClient {\n  const root = baseUrl.replace(/\\/$/, \"\");\n  const base = (opts.path ?? \"/realtime\").replace(/\\/$/, \"\");\n  const reconnectMs = opts.reconnectMs ?? 1000;\n  const doFetch = opts.fetch ?? globalThis.fetch;\n  const subs = new Set<Unsubscribe>();\n\n  /** Open an auto-reconnecting SSE stream; returns an unsubscribe. */\n  function stream(path: string, onMessage: (data: any) => void): Unsubscribe {\n    let stopped = false;\n    let controller: AbortController | undefined;\n\n    const url = new URL(root + base + path);\n    if (opts.token) url.searchParams.set(\"token\", opts.token);\n\n    (async () => {\n      while (!stopped) {\n        controller = new AbortController();\n        try {\n          const res = await doFetch(url.toString(), {\n            headers: opts.token\n              ? { authorization: `Bearer ${opts.token}` }\n              : {},\n            signal: controller.signal,\n          });\n          if (!res.ok || !res.body)\n            throw new Error(`realtime HTTP ${res.status}`);\n          const reader = res.body.getReader();\n          const decoder = new TextDecoder();\n          let buf = \"\";\n          for (;;) {\n            const { value, done } = await reader.read();\n            if (done) break;\n            buf += decoder.decode(value, { stream: true });\n            let idx: number;\n            while ((idx = buf.indexOf(\"\\n\\n\")) >= 0) {\n              const frame = buf.slice(0, idx);\n              buf = buf.slice(idx + 2);\n              const data = frame\n                .split(\"\\n\")\n                .filter((l) => l.startsWith(\"data:\"))\n                .map((l) => l.slice(5).replace(/^ /, \"\"))\n                .join(\"\\n\");\n              if (data) {\n                try {\n                  onMessage(JSON.parse(data));\n                } catch {\n                  /* ignore malformed frame */\n                }\n              }\n            }\n          }\n        } catch {\n          /* network/abort — fall through to reconnect */\n        }\n        if (stopped) break;\n        await new Promise((r) => setTimeout(r, reconnectMs));\n      }\n    })();\n\n    const unsub: Unsubscribe = () => {\n      stopped = true;\n      controller?.abort();\n      subs.delete(unsub);\n    };\n    subs.add(unsub);\n    return unsub;\n  }\n\n  function buildQuery<T>(name: string): QueryBuilder<T> {\n    const args: WatchArgs<T> = {};\n    const api: QueryBuilder<T> = {\n      where(w) {\n        args.where = w;\n        return api;\n      },\n      orderBy(o) {\n        args.orderBy = o;\n        return api;\n      },\n      take(n) {\n        args.take = n;\n        return api;\n      },\n      skip(n) {\n        args.skip = n;\n        return api;\n      },\n      fields(f) {\n        args.fields = f;\n        return api;\n      },\n      onSnapshot(cb) {\n        const qp = `?coll=${encodeURIComponent(name)}&q=${encodeURIComponent(\n          JSON.stringify(args),\n        )}`;\n        return stream(`/query${qp}`, (data) => cb(data as LiveEvent<T>));\n      },\n    };\n    return api;\n  }\n\n  return {\n    collection<T = Doc>(name: string) {\n      return buildQuery<T>(name);\n    },\n    doc<T = Doc>(\n      name: string,\n      id: string,\n      cb: (doc: WithId<T> | null) => void,\n    ): Unsubscribe {\n      const qp = `?coll=${encodeURIComponent(name)}&id=${encodeURIComponent(id)}`;\n      return stream(`/doc${qp}`, (data) =>\n        cb((data?.doc ?? null) as WithId<T> | null),\n      );\n    },\n    close() {\n      for (const unsub of [...subs]) unsub();\n    },\n  };\n}\n"]}

package/dist/index.cjs

@@ -0,0 +1,131 @@
+'use strict';
+
+var http = require('http');
+
+// src/index.ts
+function realtime(options) {
+  const base = (options.path ?? "/realtime").replace(/\/$/, "");
+  const cors = options.cors === void 0 ? "*" : options.cors;
+  const heartbeatMs = options.heartbeatMs ?? 25e3;
+  const open = /* @__PURE__ */ new Set();
+  const resolve = async (req) => {
+    if (options.authorize) return options.authorize(req);
+    if (options.db) return { db: options.db };
+    return null;
+  };
+  const setCors = (res) => {
+    if (cors === false) return;
+    res.setHeader("Access-Control-Allow-Origin", cors);
+    res.setHeader("Access-Control-Allow-Headers", "authorization,content-type");
+  };
+  const fail = (res, code, msg) => {
+    setCors(res);
+    res.writeHead(code, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: msg }));
+  };
+  const handler = (req, res) => {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    if (cors !== false && req.method === "OPTIONS") {
+      setCors(res);
+      res.writeHead(204);
+      res.end();
+      return;
+    }
+    if (!url.pathname.startsWith(base + "/")) {
+      fail(res, 404, "not found");
+      return;
+    }
+    const kind = url.pathname.slice(base.length + 1);
+    if (kind !== "query" && kind !== "doc") {
+      fail(res, 404, "not found");
+      return;
+    }
+    void (async () => {
+      let ctx;
+      try {
+        ctx = await resolve(req);
+      } catch (err) {
+        fail(res, 401, err?.message ?? "unauthorized");
+        return;
+      }
+      if (!ctx) {
+        fail(res, 401, "unauthorized");
+        return;
+      }
+      const coll = url.searchParams.get("coll");
+      if (!coll) {
+        fail(res, 400, "missing coll");
+        return;
+      }
+      setCors(res);
+      res.writeHead(200, {
+        "content-type": "text/event-stream",
+        "cache-control": "no-cache, no-transform",
+        connection: "keep-alive",
+        "x-accel-buffering": "no"
+      });
+      res.write(": ok\n\n");
+      let id = 0;
+      const send = (payload) => {
+        if (res.writableEnded) return;
+        res.write(`id: ${++id}
+data: ${JSON.stringify(payload)}
+
+`);
+      };
+      let handle;
+      try {
+        const collection = ctx.db.collection(coll);
+        if (kind === "doc") {
+          const docId = url.searchParams.get("id");
+          if (!docId) {
+            fail(res, 400, "missing id");
+            return;
+          }
+          handle = collection.watchDoc(docId, (doc) => send({ doc }));
+        } else {
+          const q = url.searchParams.get("q");
+          const args = q ? JSON.parse(q) : {};
+          handle = collection.watch(args, (event) => send(event));
+        }
+      } catch (err) {
+        send({ error: err?.message ?? "watch failed" });
+        res.end();
+        return;
+      }
+      open.add(handle);
+      const heartbeat = setInterval(() => {
+        if (!res.writableEnded) res.write(": ping\n\n");
+      }, heartbeatMs);
+      heartbeat.unref?.();
+      const cleanup = () => {
+        clearInterval(heartbeat);
+        if (handle) {
+          handle.stop();
+          open.delete(handle);
+        }
+      };
+      req.on("close", cleanup);
+      res.on("close", cleanup);
+    })();
+  };
+  return {
+    handler,
+    listen(port, cb) {
+      const server = http.createServer(handler);
+      server.listen(port, cb);
+      return server;
+    },
+    get subscriptions() {
+      return open.size;
+    },
+    close() {
+      for (const h of open) h.stop();
+      open.clear();
+    }
+  };
+}
+
+exports.realtime = realtime;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["createServer"],"mappings":";;;;;AAqDO,SAAS,SAAS,OAAA,EAA0C;AACjE,EAAA,MAAM,QAAQ,OAAA,CAAQ,IAAA,IAAQ,WAAA,EAAa,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC5D,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,KAAS,MAAA,GAAY,MAAM,OAAA,CAAQ,IAAA;AACxD,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,IAAA;AAC3C,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAsB;AAEvC,EAAA,MAAM,OAAA,GAAU,OACd,GAAA,KACoC;AACpC,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,UAAU,GAAG,CAAA;AACnD,IAAA,IAAI,QAAQ,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,QAAQ,EAAA,EAAG;AACxC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAA,KAA8B;AAC7C,IAAA,IAAI,SAAS,KAAA,EAAO;AACpB,IAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,4BAA4B,CAAA;AAAA,EAC5E,CAAA;AAEA,EAAA,MAAM,IAAA,GAAO,CAAC,GAAA,EAAqB,IAAA,EAAc,GAAA,KAAsB;AACrE,IAAA,OAAA,CAAQ,GAAG,CAAA;AACX,IAAA,GAAA,CAAI,SAAA,CAAU,IAAA,EAAM,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC1D,IAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,GAAA,EAAK,CAAC,CAAA;AAAA,EACxC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAA,EAAsB,GAAA,KAA8B;AACnE,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,kBAAkB,CAAA;AACtD,IAAA,IAAI,IAAA,KAAS,KAAA,IAAS,GAAA,CAAI,MAAA,KAAW,SAAA,EAAW;AAC9C,MAAA,OAAA,CAAQ,GAAG,CAAA;AACX,MAAA,GAAA,CAAI,UAAU,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,UAAA,CAAW,IAAA,GAAO,GAAG,CAAA,EAAG;AACxC,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,WAAW,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,IAAA,CAAK,SAAS,CAAC,CAAA;AAC/C,IAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,KAAA,EAAO;AACtC,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,WAAW,CAAA;AAC1B,MAAA;AAAA,IACF;AAEA,IAAA,KAAA,CAAM,YAAY;AAChB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,QAAQ,GAAG,CAAA;AAAA,MACzB,SAAS,GAAA,EAAK;AACZ,QAAA,IAAA,CAAK,GAAA,EAAK,GAAA,EAAM,GAAA,EAAe,OAAA,IAAW,cAAc,CAAA;AACxD,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,IAAA,CAAK,GAAA,EAAK,KAAK,cAAc,CAAA;AAC7B,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AACxC,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,IAAA,CAAK,GAAA,EAAK,KAAK,cAAc,CAAA;AAC7B,QAAA;AAAA,MACF;AAGA,MAAA,OAAA,CAAQ,GAAG,CAAA;AACX,MAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,QACjB,cAAA,EAAgB,mBAAA;AAAA,QAChB,eAAA,EAAiB,wBAAA;AAAA,QACjB,UAAA,EAAY,YAAA;AAAA,QACZ,mBAAA,EAAqB;AAAA,OACtB,CAAA;AACD,MAAA,GAAA,CAAI,MAAM,UAAU,CAAA;AACpB,MAAA,IAAI,EAAA,GAAK,CAAA;AACT,MAAA,MAAM,IAAA,GAAO,CAAC,OAAA,KAA2B;AACvC,QAAA,IAAI,IAAI,aAAA,EAAe;AACvB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,IAAA,EAAO,EAAE,EAAE;AAAA,MAAA,EAAW,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC;;AAAA,CAAM,CAAA;AAAA,MAC/D,CAAA;AAEA,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,GAAa,GAAA,CAAI,EAAA,CAAG,UAAA,CAAW,IAAI,CAAA;AACzC,QAAA,IAAI,SAAS,KAAA,EAAO;AAClB,UAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACvC,UAAA,IAAI,CAAC,KAAA,EAAO;AACV,YAAA,IAAA,CAAK,GAAA,EAAK,KAAK,YAAY,CAAA;AAC3B,YAAA;AAAA,UACF;AACA,UAAA,MAAA,GAAS,UAAA,CAAW,SAAS,KAAA,EAAO,CAAC,QAAQ,IAAA,CAAK,EAAE,GAAA,EAAK,CAAC,CAAA;AAAA,QAC5D,CAAA,MAAO;AACL,UAAA,MAAM,CAAA,GAAI,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAClC,UAAA,MAAM,OAAuB,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAC,IAAI,EAAC;AAClD,UAAA,MAAA,GAAS,WAAW,KAAA,CAAM,IAAA,EAAM,CAAC,KAAA,KAAU,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,QACxD;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAA,CAAK,EAAE,KAAA,EAAQ,GAAA,EAAe,OAAA,IAAW,gBAAgB,CAAA;AACzD,QAAA,GAAA,CAAI,GAAA,EAAI;AACR,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,MAAM,CAAA;AAEf,MAAA,MAAM,SAAA,GAAY,YAAY,MAAM;AAClC,QAAA,IAAI,CAAC,GAAA,CAAI,aAAA,EAAe,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,MAChD,GAAG,WAAW,CAAA;AACd,MAAC,UAAkB,KAAA,IAAQ;AAE3B,MAAA,MAAM,UAAU,MAAY;AAC1B,QAAA,aAAA,CAAc,SAAS,CAAA;AACvB,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAA,CAAO,IAAA,EAAK;AACZ,UAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA,QACpB;AAAA,MACF,CAAA;AACA,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAAA,IACzB,CAAA,GAAG;AAAA,EACL,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,MAAA,CAAO,MAAM,EAAA,EAAI;AACf,MAAA,MAAM,MAAA,GAASA,kBAAa,OAAO,CAAA;AACnC,MAAA,MAAA,CAAO,MAAA,CAAO,MAAM,EAAE,CAAA;AACtB,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IACA,IAAI,aAAA,GAAgB;AAClB,MAAA,OAAO,IAAA,CAAK,IAAA;AAAA,IACd,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,KAAA,MAAW,CAAA,IAAK,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK;AAC7B,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["import {\n  createServer,\n  type IncomingMessage,\n  type Server,\n  type ServerResponse,\n} from \"node:http\";\nimport type { Monlite, WatchArgs, WatchHandle } from \"@monlite/core\";\n\n/** What an authorized request resolves to: the database (tenant) to serve. */\nexport interface RealtimeContext {\n  db: Monlite;\n}\n\nexport interface RealtimeOptions {\n  /**\n   * Resolve the database (tenant) for a request and authorize it. Return a\n   * context (`{ db }`), or `null`/throw to reject (`401`). Read a token from\n   * `req.headers.authorization` / the `?token=` query param. For per-tenant\n   * deployments, map the token → that tenant's `Monlite` instance.\n   */\n  authorize?: (\n    req: IncomingMessage,\n  ) => RealtimeContext | null | Promise<RealtimeContext | null>;\n  /** Single-database shortcut — serve this db for every request (no auth). */\n  db?: Monlite;\n  /** Base path for the endpoints. Default `\"/realtime\"`. */\n  path?: string;\n  /** `Access-Control-Allow-Origin` value, or `false` to disable CORS. Default `\"*\"`. */\n  cors?: string | false;\n  /** Heartbeat comment interval (ms) to keep idle connections alive. Default `25000`. */\n  heartbeatMs?: number;\n}\n\nexport interface RealtimeServer {\n  /** Node `http` request handler — attach to your own server or framework. */\n  handler: (req: IncomingMessage, res: ServerResponse) => void;\n  /** Convenience: start a standalone HTTP server. */\n  listen: (port: number, cb?: () => void) => Server;\n  /** Active subscription count. */\n  readonly subscriptions: number;\n  /** Stop all subscriptions (does not close the http server). */\n  close: () => void;\n}\n\n/**\n * A realtime gateway that streams live queries and documents to remote clients\n * over Server-Sent Events, backed by `@monlite/core`'s `watch()` / change feed.\n * Zero extra dependencies — built on `node:http`.\n *\n * ```ts\n * realtime({ authorize: (req) => ({ db: dbForTenant(tokenOf(req)) }) }).listen(8080);\n * ```\n */\nexport function realtime(options: RealtimeOptions): RealtimeServer {\n  const base = (options.path ?? \"/realtime\").replace(/\\/$/, \"\");\n  const cors = options.cors === undefined ? \"*\" : options.cors;\n  const heartbeatMs = options.heartbeatMs ?? 25_000;\n  const open = new Set<WatchHandle<any>>();\n\n  const resolve = async (\n    req: IncomingMessage,\n  ): Promise<RealtimeContext | null> => {\n    if (options.authorize) return options.authorize(req);\n    if (options.db) return { db: options.db };\n    return null;\n  };\n\n  const setCors = (res: ServerResponse): void => {\n    if (cors === false) return;\n    res.setHeader(\"Access-Control-Allow-Origin\", cors);\n    res.setHeader(\"Access-Control-Allow-Headers\", \"authorization,content-type\");\n  };\n\n  const fail = (res: ServerResponse, code: number, msg: string): void => {\n    setCors(res);\n    res.writeHead(code, { \"content-type\": \"application/json\" });\n    res.end(JSON.stringify({ error: msg }));\n  };\n\n  const handler = (req: IncomingMessage, res: ServerResponse): void => {\n    const url = new URL(req.url ?? \"/\", \"http://localhost\");\n    if (cors !== false && req.method === \"OPTIONS\") {\n      setCors(res);\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n    if (!url.pathname.startsWith(base + \"/\")) {\n      fail(res, 404, \"not found\");\n      return;\n    }\n    const kind = url.pathname.slice(base.length + 1); // \"query\" | \"doc\"\n    if (kind !== \"query\" && kind !== \"doc\") {\n      fail(res, 404, \"not found\");\n      return;\n    }\n\n    void (async () => {\n      let ctx: RealtimeContext | null;\n      try {\n        ctx = await resolve(req);\n      } catch (err) {\n        fail(res, 401, (err as Error)?.message ?? \"unauthorized\");\n        return;\n      }\n      if (!ctx) {\n        fail(res, 401, \"unauthorized\");\n        return;\n      }\n\n      const coll = url.searchParams.get(\"coll\");\n      if (!coll) {\n        fail(res, 400, \"missing coll\");\n        return;\n      }\n\n      // Open the SSE stream.\n      setCors(res);\n      res.writeHead(200, {\n        \"content-type\": \"text/event-stream\",\n        \"cache-control\": \"no-cache, no-transform\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n      });\n      res.write(\": ok\\n\\n\");\n      let id = 0;\n      const send = (payload: unknown): void => {\n        if (res.writableEnded) return;\n        res.write(`id: ${++id}\\ndata: ${JSON.stringify(payload)}\\n\\n`);\n      };\n\n      let handle: WatchHandle<any> | undefined;\n      try {\n        const collection = ctx.db.collection(coll);\n        if (kind === \"doc\") {\n          const docId = url.searchParams.get(\"id\");\n          if (!docId) {\n            fail(res, 400, \"missing id\");\n            return;\n          }\n          handle = collection.watchDoc(docId, (doc) => send({ doc }));\n        } else {\n          const q = url.searchParams.get(\"q\");\n          const args: WatchArgs<any> = q ? JSON.parse(q) : {};\n          handle = collection.watch(args, (event) => send(event));\n        }\n      } catch (err) {\n        // Headers already sent; surface the error in-band, then close.\n        send({ error: (err as Error)?.message ?? \"watch failed\" });\n        res.end();\n        return;\n      }\n      open.add(handle);\n\n      const heartbeat = setInterval(() => {\n        if (!res.writableEnded) res.write(\": ping\\n\\n\");\n      }, heartbeatMs);\n      (heartbeat as any).unref?.();\n\n      const cleanup = (): void => {\n        clearInterval(heartbeat);\n        if (handle) {\n          handle.stop();\n          open.delete(handle);\n        }\n      };\n      req.on(\"close\", cleanup);\n      res.on(\"close\", cleanup);\n    })();\n  };\n\n  return {\n    handler,\n    listen(port, cb) {\n      const server = createServer(handler);\n      server.listen(port, cb);\n      return server;\n    },\n    get subscriptions() {\n      return open.size;\n    },\n    close() {\n      for (const h of open) h.stop();\n      open.clear();\n    },\n  };\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,46 @@
+import { IncomingMessage, ServerResponse, Server } from 'node:http';
+import { Monlite } from '@monlite/core';
+
+/** What an authorized request resolves to: the database (tenant) to serve. */
+interface RealtimeContext {
+    db: Monlite;
+}
+interface RealtimeOptions {
+    /**
+     * Resolve the database (tenant) for a request and authorize it. Return a
+     * context (`{ db }`), or `null`/throw to reject (`401`). Read a token from
+     * `req.headers.authorization` / the `?token=` query param. For per-tenant
+     * deployments, map the token → that tenant's `Monlite` instance.
+     */
+    authorize?: (req: IncomingMessage) => RealtimeContext | null | Promise<RealtimeContext | null>;
+    /** Single-database shortcut — serve this db for every request (no auth). */
+    db?: Monlite;
+    /** Base path for the endpoints. Default `"/realtime"`. */
+    path?: string;
+    /** `Access-Control-Allow-Origin` value, or `false` to disable CORS. Default `"*"`. */
+    cors?: string | false;
+    /** Heartbeat comment interval (ms) to keep idle connections alive. Default `25000`. */
+    heartbeatMs?: number;
+}
+interface RealtimeServer {
+    /** Node `http` request handler — attach to your own server or framework. */
+    handler: (req: IncomingMessage, res: ServerResponse) => void;
+    /** Convenience: start a standalone HTTP server. */
+    listen: (port: number, cb?: () => void) => Server;
+    /** Active subscription count. */
+    readonly subscriptions: number;
+    /** Stop all subscriptions (does not close the http server). */
+    close: () => void;
+}
+/**
+ * A realtime gateway that streams live queries and documents to remote clients
+ * over Server-Sent Events, backed by `@monlite/core`'s `watch()` / change feed.
+ * Zero extra dependencies — built on `node:http`.
+ *
+ * ```ts
+ * realtime({ authorize: (req) => ({ db: dbForTenant(tokenOf(req)) }) }).listen(8080);
+ * ```
+ */
+declare function realtime(options: RealtimeOptions): RealtimeServer;
+
+export { type RealtimeContext, type RealtimeOptions, type RealtimeServer, realtime };

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+import { IncomingMessage, ServerResponse, Server } from 'node:http';
+import { Monlite } from '@monlite/core';
+
+/** What an authorized request resolves to: the database (tenant) to serve. */
+interface RealtimeContext {
+    db: Monlite;
+}
+interface RealtimeOptions {
+    /**
+     * Resolve the database (tenant) for a request and authorize it. Return a
+     * context (`{ db }`), or `null`/throw to reject (`401`). Read a token from
+     * `req.headers.authorization` / the `?token=` query param. For per-tenant
+     * deployments, map the token → that tenant's `Monlite` instance.
+     */
+    authorize?: (req: IncomingMessage) => RealtimeContext | null | Promise<RealtimeContext | null>;
+    /** Single-database shortcut — serve this db for every request (no auth). */
+    db?: Monlite;
+    /** Base path for the endpoints. Default `"/realtime"`. */
+    path?: string;
+    /** `Access-Control-Allow-Origin` value, or `false` to disable CORS. Default `"*"`. */
+    cors?: string | false;
+    /** Heartbeat comment interval (ms) to keep idle connections alive. Default `25000`. */
+    heartbeatMs?: number;
+}
+interface RealtimeServer {
+    /** Node `http` request handler — attach to your own server or framework. */
+    handler: (req: IncomingMessage, res: ServerResponse) => void;
+    /** Convenience: start a standalone HTTP server. */
+    listen: (port: number, cb?: () => void) => Server;
+    /** Active subscription count. */
+    readonly subscriptions: number;
+    /** Stop all subscriptions (does not close the http server). */
+    close: () => void;
+}
+/**
+ * A realtime gateway that streams live queries and documents to remote clients
+ * over Server-Sent Events, backed by `@monlite/core`'s `watch()` / change feed.
+ * Zero extra dependencies — built on `node:http`.
+ *
+ * ```ts
+ * realtime({ authorize: (req) => ({ db: dbForTenant(tokenOf(req)) }) }).listen(8080);
+ * ```
+ */
+declare function realtime(options: RealtimeOptions): RealtimeServer;
+
+export { type RealtimeContext, type RealtimeOptions, type RealtimeServer, realtime };

package/dist/index.js

@@ -0,0 +1,129 @@
+import { createServer } from 'http';
+
+// src/index.ts
+function realtime(options) {
+  const base = (options.path ?? "/realtime").replace(/\/$/, "");
+  const cors = options.cors === void 0 ? "*" : options.cors;
+  const heartbeatMs = options.heartbeatMs ?? 25e3;
+  const open = /* @__PURE__ */ new Set();
+  const resolve = async (req) => {
+    if (options.authorize) return options.authorize(req);
+    if (options.db) return { db: options.db };
+    return null;
+  };
+  const setCors = (res) => {
+    if (cors === false) return;
+    res.setHeader("Access-Control-Allow-Origin", cors);
+    res.setHeader("Access-Control-Allow-Headers", "authorization,content-type");
+  };
+  const fail = (res, code, msg) => {
+    setCors(res);
+    res.writeHead(code, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: msg }));
+  };
+  const handler = (req, res) => {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    if (cors !== false && req.method === "OPTIONS") {
+      setCors(res);
+      res.writeHead(204);
+      res.end();
+      return;
+    }
+    if (!url.pathname.startsWith(base + "/")) {
+      fail(res, 404, "not found");
+      return;
+    }
+    const kind = url.pathname.slice(base.length + 1);
+    if (kind !== "query" && kind !== "doc") {
+      fail(res, 404, "not found");
+      return;
+    }
+    void (async () => {
+      let ctx;
+      try {
+        ctx = await resolve(req);
+      } catch (err) {
+        fail(res, 401, err?.message ?? "unauthorized");
+        return;
+      }
+      if (!ctx) {
+        fail(res, 401, "unauthorized");
+        return;
+      }
+      const coll = url.searchParams.get("coll");
+      if (!coll) {
+        fail(res, 400, "missing coll");
+        return;
+      }
+      setCors(res);
+      res.writeHead(200, {
+        "content-type": "text/event-stream",
+        "cache-control": "no-cache, no-transform",
+        connection: "keep-alive",
+        "x-accel-buffering": "no"
+      });
+      res.write(": ok\n\n");
+      let id = 0;
+      const send = (payload) => {
+        if (res.writableEnded) return;
+        res.write(`id: ${++id}
+data: ${JSON.stringify(payload)}
+
+`);
+      };
+      let handle;
+      try {
+        const collection = ctx.db.collection(coll);
+        if (kind === "doc") {
+          const docId = url.searchParams.get("id");
+          if (!docId) {
+            fail(res, 400, "missing id");
+            return;
+          }
+          handle = collection.watchDoc(docId, (doc) => send({ doc }));
+        } else {
+          const q = url.searchParams.get("q");
+          const args = q ? JSON.parse(q) : {};
+          handle = collection.watch(args, (event) => send(event));
+        }
+      } catch (err) {
+        send({ error: err?.message ?? "watch failed" });
+        res.end();
+        return;
+      }
+      open.add(handle);
+      const heartbeat = setInterval(() => {
+        if (!res.writableEnded) res.write(": ping\n\n");
+      }, heartbeatMs);
+      heartbeat.unref?.();
+      const cleanup = () => {
+        clearInterval(heartbeat);
+        if (handle) {
+          handle.stop();
+          open.delete(handle);
+        }
+      };
+      req.on("close", cleanup);
+      res.on("close", cleanup);
+    })();
+  };
+  return {
+    handler,
+    listen(port, cb) {
+      const server = createServer(handler);
+      server.listen(port, cb);
+      return server;
+    },
+    get subscriptions() {
+      return open.size;
+    },
+    close() {
+      for (const h of open) h.stop();
+      open.clear();
+    }
+  };
+}
+
+export { realtime };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAqDO,SAAS,SAAS,OAAA,EAA0C;AACjE,EAAA,MAAM,QAAQ,OAAA,CAAQ,IAAA,IAAQ,WAAA,EAAa,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC5D,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,KAAS,MAAA,GAAY,MAAM,OAAA,CAAQ,IAAA;AACxD,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,IAAA;AAC3C,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAsB;AAEvC,EAAA,MAAM,OAAA,GAAU,OACd,GAAA,KACoC;AACpC,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,UAAU,GAAG,CAAA;AACnD,IAAA,IAAI,QAAQ,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,QAAQ,EAAA,EAAG;AACxC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAA,KAA8B;AAC7C,IAAA,IAAI,SAAS,KAAA,EAAO;AACpB,IAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,4BAA4B,CAAA;AAAA,EAC5E,CAAA;AAEA,EAAA,MAAM,IAAA,GAAO,CAAC,GAAA,EAAqB,IAAA,EAAc,GAAA,KAAsB;AACrE,IAAA,OAAA,CAAQ,GAAG,CAAA;AACX,IAAA,GAAA,CAAI,SAAA,CAAU,IAAA,EAAM,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC1D,IAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,GAAA,EAAK,CAAC,CAAA;AAAA,EACxC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAA,EAAsB,GAAA,KAA8B;AACnE,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,kBAAkB,CAAA;AACtD,IAAA,IAAI,IAAA,KAAS,KAAA,IAAS,GAAA,CAAI,MAAA,KAAW,SAAA,EAAW;AAC9C,MAAA,OAAA,CAAQ,GAAG,CAAA;AACX,MAAA,GAAA,CAAI,UAAU,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,UAAA,CAAW,IAAA,GAAO,GAAG,CAAA,EAAG;AACxC,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,WAAW,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,IAAA,CAAK,SAAS,CAAC,CAAA;AAC/C,IAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,KAAA,EAAO;AACtC,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,WAAW,CAAA;AAC1B,MAAA;AAAA,IACF;AAEA,IAAA,KAAA,CAAM,YAAY;AAChB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,QAAQ,GAAG,CAAA;AAAA,MACzB,SAAS,GAAA,EAAK;AACZ,QAAA,IAAA,CAAK,GAAA,EAAK,GAAA,EAAM,GAAA,EAAe,OAAA,IAAW,cAAc,CAAA;AACxD,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,IAAA,CAAK,GAAA,EAAK,KAAK,cAAc,CAAA;AAC7B,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AACxC,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,IAAA,CAAK,GAAA,EAAK,KAAK,cAAc,CAAA;AAC7B,QAAA;AAAA,MACF;AAGA,MAAA,OAAA,CAAQ,GAAG,CAAA;AACX,MAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,QACjB,cAAA,EAAgB,mBAAA;AAAA,QAChB,eAAA,EAAiB,wBAAA;AAAA,QACjB,UAAA,EAAY,YAAA;AAAA,QACZ,mBAAA,EAAqB;AAAA,OACtB,CAAA;AACD,MAAA,GAAA,CAAI,MAAM,UAAU,CAAA;AACpB,MAAA,IAAI,EAAA,GAAK,CAAA;AACT,MAAA,MAAM,IAAA,GAAO,CAAC,OAAA,KAA2B;AACvC,QAAA,IAAI,IAAI,aAAA,EAAe;AACvB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,IAAA,EAAO,EAAE,EAAE;AAAA,MAAA,EAAW,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC;;AAAA,CAAM,CAAA;AAAA,MAC/D,CAAA;AAEA,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,GAAa,GAAA,CAAI,EAAA,CAAG,UAAA,CAAW,IAAI,CAAA;AACzC,QAAA,IAAI,SAAS,KAAA,EAAO;AAClB,UAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACvC,UAAA,IAAI,CAAC,KAAA,EAAO;AACV,YAAA,IAAA,CAAK,GAAA,EAAK,KAAK,YAAY,CAAA;AAC3B,YAAA;AAAA,UACF;AACA,UAAA,MAAA,GAAS,UAAA,CAAW,SAAS,KAAA,EAAO,CAAC,QAAQ,IAAA,CAAK,EAAE,GAAA,EAAK,CAAC,CAAA;AAAA,QAC5D,CAAA,MAAO;AACL,UAAA,MAAM,CAAA,GAAI,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAClC,UAAA,MAAM,OAAuB,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAC,IAAI,EAAC;AAClD,UAAA,MAAA,GAAS,WAAW,KAAA,CAAM,IAAA,EAAM,CAAC,KAAA,KAAU,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,QACxD;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAA,CAAK,EAAE,KAAA,EAAQ,GAAA,EAAe,OAAA,IAAW,gBAAgB,CAAA;AACzD,QAAA,GAAA,CAAI,GAAA,EAAI;AACR,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,MAAM,CAAA;AAEf,MAAA,MAAM,SAAA,GAAY,YAAY,MAAM;AAClC,QAAA,IAAI,CAAC,GAAA,CAAI,aAAA,EAAe,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,MAChD,GAAG,WAAW,CAAA;AACd,MAAC,UAAkB,KAAA,IAAQ;AAE3B,MAAA,MAAM,UAAU,MAAY;AAC1B,QAAA,aAAA,CAAc,SAAS,CAAA;AACvB,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAA,CAAO,IAAA,EAAK;AACZ,UAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA,QACpB;AAAA,MACF,CAAA;AACA,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAAA,IACzB,CAAA,GAAG;AAAA,EACL,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,MAAA,CAAO,MAAM,EAAA,EAAI;AACf,MAAA,MAAM,MAAA,GAAS,aAAa,OAAO,CAAA;AACnC,MAAA,MAAA,CAAO,MAAA,CAAO,MAAM,EAAE,CAAA;AACtB,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IACA,IAAI,aAAA,GAAgB;AAClB,MAAA,OAAO,IAAA,CAAK,IAAA;AAAA,IACd,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,KAAA,MAAW,CAAA,IAAK,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK;AAC7B,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import {\n  createServer,\n  type IncomingMessage,\n  type Server,\n  type ServerResponse,\n} from \"node:http\";\nimport type { Monlite, WatchArgs, WatchHandle } from \"@monlite/core\";\n\n/** What an authorized request resolves to: the database (tenant) to serve. */\nexport interface RealtimeContext {\n  db: Monlite;\n}\n\nexport interface RealtimeOptions {\n  /**\n   * Resolve the database (tenant) for a request and authorize it. Return a\n   * context (`{ db }`), or `null`/throw to reject (`401`). Read a token from\n   * `req.headers.authorization` / the `?token=` query param. For per-tenant\n   * deployments, map the token → that tenant's `Monlite` instance.\n   */\n  authorize?: (\n    req: IncomingMessage,\n  ) => RealtimeContext | null | Promise<RealtimeContext | null>;\n  /** Single-database shortcut — serve this db for every request (no auth). */\n  db?: Monlite;\n  /** Base path for the endpoints. Default `\"/realtime\"`. */\n  path?: string;\n  /** `Access-Control-Allow-Origin` value, or `false` to disable CORS. Default `\"*\"`. */\n  cors?: string | false;\n  /** Heartbeat comment interval (ms) to keep idle connections alive. Default `25000`. */\n  heartbeatMs?: number;\n}\n\nexport interface RealtimeServer {\n  /** Node `http` request handler — attach to your own server or framework. */\n  handler: (req: IncomingMessage, res: ServerResponse) => void;\n  /** Convenience: start a standalone HTTP server. */\n  listen: (port: number, cb?: () => void) => Server;\n  /** Active subscription count. */\n  readonly subscriptions: number;\n  /** Stop all subscriptions (does not close the http server). */\n  close: () => void;\n}\n\n/**\n * A realtime gateway that streams live queries and documents to remote clients\n * over Server-Sent Events, backed by `@monlite/core`'s `watch()` / change feed.\n * Zero extra dependencies — built on `node:http`.\n *\n * ```ts\n * realtime({ authorize: (req) => ({ db: dbForTenant(tokenOf(req)) }) }).listen(8080);\n * ```\n */\nexport function realtime(options: RealtimeOptions): RealtimeServer {\n  const base = (options.path ?? \"/realtime\").replace(/\\/$/, \"\");\n  const cors = options.cors === undefined ? \"*\" : options.cors;\n  const heartbeatMs = options.heartbeatMs ?? 25_000;\n  const open = new Set<WatchHandle<any>>();\n\n  const resolve = async (\n    req: IncomingMessage,\n  ): Promise<RealtimeContext | null> => {\n    if (options.authorize) return options.authorize(req);\n    if (options.db) return { db: options.db };\n    return null;\n  };\n\n  const setCors = (res: ServerResponse): void => {\n    if (cors === false) return;\n    res.setHeader(\"Access-Control-Allow-Origin\", cors);\n    res.setHeader(\"Access-Control-Allow-Headers\", \"authorization,content-type\");\n  };\n\n  const fail = (res: ServerResponse, code: number, msg: string): void => {\n    setCors(res);\n    res.writeHead(code, { \"content-type\": \"application/json\" });\n    res.end(JSON.stringify({ error: msg }));\n  };\n\n  const handler = (req: IncomingMessage, res: ServerResponse): void => {\n    const url = new URL(req.url ?? \"/\", \"http://localhost\");\n    if (cors !== false && req.method === \"OPTIONS\") {\n      setCors(res);\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n    if (!url.pathname.startsWith(base + \"/\")) {\n      fail(res, 404, \"not found\");\n      return;\n    }\n    const kind = url.pathname.slice(base.length + 1); // \"query\" | \"doc\"\n    if (kind !== \"query\" && kind !== \"doc\") {\n      fail(res, 404, \"not found\");\n      return;\n    }\n\n    void (async () => {\n      let ctx: RealtimeContext | null;\n      try {\n        ctx = await resolve(req);\n      } catch (err) {\n        fail(res, 401, (err as Error)?.message ?? \"unauthorized\");\n        return;\n      }\n      if (!ctx) {\n        fail(res, 401, \"unauthorized\");\n        return;\n      }\n\n      const coll = url.searchParams.get(\"coll\");\n      if (!coll) {\n        fail(res, 400, \"missing coll\");\n        return;\n      }\n\n      // Open the SSE stream.\n      setCors(res);\n      res.writeHead(200, {\n        \"content-type\": \"text/event-stream\",\n        \"cache-control\": \"no-cache, no-transform\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n      });\n      res.write(\": ok\\n\\n\");\n      let id = 0;\n      const send = (payload: unknown): void => {\n        if (res.writableEnded) return;\n        res.write(`id: ${++id}\\ndata: ${JSON.stringify(payload)}\\n\\n`);\n      };\n\n      let handle: WatchHandle<any> | undefined;\n      try {\n        const collection = ctx.db.collection(coll);\n        if (kind === \"doc\") {\n          const docId = url.searchParams.get(\"id\");\n          if (!docId) {\n            fail(res, 400, \"missing id\");\n            return;\n          }\n          handle = collection.watchDoc(docId, (doc) => send({ doc }));\n        } else {\n          const q = url.searchParams.get(\"q\");\n          const args: WatchArgs<any> = q ? JSON.parse(q) : {};\n          handle = collection.watch(args, (event) => send(event));\n        }\n      } catch (err) {\n        // Headers already sent; surface the error in-band, then close.\n        send({ error: (err as Error)?.message ?? \"watch failed\" });\n        res.end();\n        return;\n      }\n      open.add(handle);\n\n      const heartbeat = setInterval(() => {\n        if (!res.writableEnded) res.write(\": ping\\n\\n\");\n      }, heartbeatMs);\n      (heartbeat as any).unref?.();\n\n      const cleanup = (): void => {\n        clearInterval(heartbeat);\n        if (handle) {\n          handle.stop();\n          open.delete(handle);\n        }\n      };\n      req.on(\"close\", cleanup);\n      res.on(\"close\", cleanup);\n    })();\n  };\n\n  return {\n    handler,\n    listen(port, cb) {\n      const server = createServer(handler);\n      server.listen(port, cb);\n      return server;\n    },\n    get subscriptions() {\n      return open.size;\n    },\n    close() {\n      for (const h of open) h.stop();\n      open.clear();\n    },\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@monlite/realtime",
+  "version": "0.1.0",
+  "description": "Networked realtime for @monlite/core: stream live queries and documents to remote clients over SSE, backed by the change feed.",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./client": {
+      "import": {
+        "types": "./dist/client.d.ts",
+        "default": "./dist/client.js"
+      },
+      "require": {
+        "types": "./dist/client.d.cts",
+        "default": "./dist/client.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "keywords": [
+    "monlite",
+    "realtime",
+    "live-query",
+    "sse",
+    "reactive",
+    "firebase",
+    "sqlite"
+  ],
+  "license": "MIT",
+  "author": "Emad Jumaah <emadjumaah@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/qataruts/monlite.git",
+    "directory": "packages/realtime"
+  },
+  "homepage": "https://github.com/qataruts/monlite/tree/main/packages/realtime#readme",
+  "bugs": {
+    "url": "https://github.com/qataruts/monlite/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@monlite/core": "^2.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "better-sqlite3": "^11.8.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}