@rei-standard/amsg-server 2.6.0-next.2 → 2.6.0-next.21

package/dist/index.cjs

@@ -23,7 +23,56 @@
 
 
 
-var _chunkGN5QTMCLcjs = require('./chunk-GN5QTMCL.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkQHVID3V2cjs = require('./chunk-QHVID3V2.cjs');
+require('./chunk-7NMQFTDJ.cjs');
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -39,11 +88,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-BFUS25UX.cjs")));
+      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-KP2CPA57.cjs")));
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-IIH3M4OM.cjs")));
+      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-RZPQGXR3.cjs")));
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -56,7 +105,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunkGN5QTMCLcjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkQHVID3V2cjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -69,7 +118,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunkGN5QTMCLcjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkQHVID3V2cjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -83,7 +132,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunkGN5QTMCLcjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkQHVID3V2cjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -203,7 +252,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunkGN5QTMCLcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkQHVID3V2cjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -212,14 +261,6 @@ function createSendNotificationsHandler(ctx) {
 // src/server/tenant/blob-store.js
 var _crypto = require('crypto');
 var inMemoryNamespaces = /* @__PURE__ */ new Map();
-function base64UrlEncode(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(input) {
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLength = (4 - normalized.length % 4) % 4;
-  return Buffer.from(normalized + "=".repeat(padLength), "base64");
-}
 function getKekBuffer(kek) {
   const value = String(kek || "").trim();
   if (!value) {
@@ -233,16 +274,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${base64UrlEncode(iv)}.${base64UrlEncode(authTag)}.${base64UrlEncode(ciphertext)}`;
+  return `v1.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, iv)}.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = base64UrlDecode(parts[1]);
-  const authTag = base64UrlDecode(parts[2]);
-  const ciphertext = base64UrlDecode(parts[3]);
+  const iv = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -309,16 +350,8 @@ function createTenantBlobStore(options) {
 
 // src/server/tenant/token.js
 
-function base64UrlEncode2(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode2(input) {
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLength = (4 - normalized.length % 4) % 4;
-  return Buffer.from(normalized + "=".repeat(padLength), "base64");
-}
 function sign(input, secret) {
-  return base64UrlEncode2(_crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -334,8 +367,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = base64UrlEncode2(JSON.stringify(header));
-  const encodedPayload = base64UrlEncode2(JSON.stringify(payload));
+  const encodedHeader = _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _chunkQHVID3V2cjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _chunkQHVID3V2cjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -351,20 +384,20 @@ function verifyTenantToken(token, secret, options = {}) {
   const [encodedHeader, encodedPayload, receivedSignature] = parts;
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const expectedSignature = sign(signingInput, secret);
-  let receivedBuffer;
-  let expectedBuffer;
+  let receivedBytes;
+  let expectedBytes;
   try {
-    receivedBuffer = base64UrlDecode2(receivedSignature);
-    expectedBuffer = base64UrlDecode2(expectedSignature);
+    receivedBytes = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (receivedBuffer.length !== expectedBuffer.length || !_crypto.timingSafeEqual.call(void 0, receivedBuffer, expectedBuffer)) {
+  if (!_chunkQHVID3V2cjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(base64UrlDecode2(encodedPayload).toString("utf8"));
+    payload = JSON.parse(_chunkQHVID3V2cjs.utf8Decode.call(void 0, _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -438,8 +471,17 @@ function createTenantContextManager(options) {
   async function getOrCreateAdapter(dbConfig) {
     const cacheKey = `${dbConfig.driver}:${dbConfig.connectionString}`;
     if (!adapterCache.has(cacheKey)) {
-      const adapter = await adapterFactory(dbConfig);
-      adapterCache.set(cacheKey, adapter);
+      const created = (async () => {
+        const adapter = await adapterFactory(dbConfig);
+        if (typeof adapter.initSchema === "function") {
+          await adapter.initSchema();
+        }
+        return adapter;
+      })().catch((error) => {
+        adapterCache.delete(cacheKey);
+        throw error;
+      });
+      adapterCache.set(cacheKey, created);
     }
     return adapterCache.get(cacheKey);
   }
@@ -567,6 +609,10 @@ async function createReiServer(config) {
       privateKey: vapid.privateKey || ""
     },
     webpush: webpushModule,
+    // 分片传输的限额（与 installReiSW 的 multipart 同一份）。instant 消息在
+    // schedule-message 里就地投递、定时消息走 send-notifications 的 tick，两条路
+    // 都从这个 ctx 展开，所以配一次两边都认。
+    multipart: config.multipart || null,
     tenant: {
       initSecret
     },
@@ -575,12 +621,15 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunkGN5QTMCLcjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunkGN5QTMCLcjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkQHVID3V2cjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkQHVID3V2cjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunkGN5QTMCLcjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunkGN5QTMCLcjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunkGN5QTMCLcjs.createMessagesHandler.call(void 0, ctx)
+      updateMessage: _chunkQHVID3V2cjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkQHVID3V2cjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkQHVID3V2cjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkQHVID3V2cjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkQHVID3V2cjs.createPushSubscriptionHandler.call(void 0, ctx),
+      llmCredentials: _chunkQHVID3V2cjs.createLlmCredentialsHandler.call(void 0, ctx)
     }
   };
 }
@@ -606,4 +655,44 @@ async function createReiServer(config) {
 
 
 
-exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkGN5QTMCLcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkGN5QTMCLcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkGN5QTMCLcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkGN5QTMCLcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkGN5QTMCLcjs.decryptFromStorage; exports.decryptPayload = _chunkGN5QTMCLcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkGN5QTMCLcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkGN5QTMCLcjs.encryptForStorage; exports.isValidISO8601 = _chunkGN5QTMCLcjs.isValidISO8601; exports.isValidUUID = _chunkGN5QTMCLcjs.isValidUUID; exports.isValidUUIDv4 = _chunkGN5QTMCLcjs.isValidUUIDv4; exports.isValidUrl = _chunkGN5QTMCLcjs.isValidUrl; exports.runScheduledTick = _chunkGN5QTMCLcjs.runScheduledTick; exports.validateAvatarUrl = _chunkGN5QTMCLcjs.validateAvatarUrl; exports.validateLlmMessagesArray = _chunkGN5QTMCLcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkGN5QTMCLcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkGN5QTMCLcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.CORS_ALLOW_HEADERS = _chunkQHVID3V2cjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkQHVID3V2cjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkQHVID3V2cjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkQHVID3V2cjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkQHVID3V2cjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkQHVID3V2cjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkQHVID3V2cjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkQHVID3V2cjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkQHVID3V2cjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkQHVID3V2cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkQHVID3V2cjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkQHVID3V2cjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkQHVID3V2cjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunkQHVID3V2cjs.DeploymentConfigError; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkQHVID3V2cjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunkQHVID3V2cjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkQHVID3V2cjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkQHVID3V2cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkQHVID3V2cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkQHVID3V2cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkQHVID3V2cjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkQHVID3V2cjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkQHVID3V2cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkQHVID3V2cjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkQHVID3V2cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkQHVID3V2cjs.decryptFromStorage; exports.decryptPayload = _chunkQHVID3V2cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkQHVID3V2cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkQHVID3V2cjs.encryptForStorage; exports.ensureSchema = _chunkQHVID3V2cjs.ensureSchema; exports.getSchemaVersion = _chunkQHVID3V2cjs.getSchemaVersion; exports.hasChatCredRef = _chunkQHVID3V2cjs.hasChatCredRef; exports.isNonRetryableError = _chunkQHVID3V2cjs.isNonRetryableError; exports.isValidCredId = _chunkQHVID3V2cjs.isValidCredId; exports.isValidISO8601 = _chunkQHVID3V2cjs.isValidISO8601; exports.isValidTimeZoneId = _chunkQHVID3V2cjs.isValidTimeZoneId; exports.isValidUUID = _chunkQHVID3V2cjs.isValidUUID; exports.isValidUUIDv4 = _chunkQHVID3V2cjs.isValidUUIDv4; exports.isValidUrl = _chunkQHVID3V2cjs.isValidUrl; exports.measurePushPayload = _chunkQHVID3V2cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkQHVID3V2cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkQHVID3V2cjs.planNextOccurrence; exports.readRequestBody = _chunkQHVID3V2cjs.readRequestBody; exports.resolveLlmCredential = _chunkQHVID3V2cjs.resolveLlmCredential; exports.runScheduledTick = _chunkQHVID3V2cjs.runScheduledTick; exports.runTask = _chunkQHVID3V2cjs.runTask; exports.sanitizeErrorSummary = _chunkQHVID3V2cjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkQHVID3V2cjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkQHVID3V2cjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkQHVID3V2cjs.validateAvatarUrl; exports.validateCredRefs = _chunkQHVID3V2cjs.validateCredRefs; exports.validateCredValue = _chunkQHVID3V2cjs.validateCredValue; exports.validateLlmMessagesArray = _chunkQHVID3V2cjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkQHVID3V2cjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkQHVID3V2cjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;