@rocicorp/zero 1.11.4 → 1.11.5

package/out/zero-cache/src/workers/syncer-ws-message-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncer-ws-message-handler.js","names":["ErrorKind.InvalidPush","ErrorOrigin.ZeroCache"],"sources":["../../../../../zero-cache/src/workers/syncer-ws-message-handler.ts"],"sourcesContent":["import {ROOT_CONTEXT, context, propagation, trace} from '@opentelemetry/api';\nimport {Lock} from '@rocicorp/lock';\nimport type {LogContext} from '@rocicorp/logger';\nimport {startAsyncSpan, startSpan} from '../../../otel/src/span.ts';\nimport {version} from '../../../otel/src/version.ts';\nimport {assert, unreachable} from '../../../shared/src/asserts.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport type {ErrorBody} from '../../../zero-protocol/src/error.ts';\nimport type {UpstreamWithUnparsedAnalyzeQuery} from '../../../zero-protocol/src/up.ts';\nimport type {Mutagen} from '../services/mutagen/mutagen.ts';\nimport type {Pusher} from '../services/mutagen/pusher.ts';\nimport {\n  type ConnectionContextManager,\n  type ConnectionSelector,\n} from '../services/view-syncer/connection-context-manager.ts';\nimport {type ViewSyncer} from '../services/view-syncer/view-syncer.ts';\nimport type {ConnectParams} from './connect-params.ts';\nimport type {HandlerResult, MessageHandler} from './connection.ts';\n\nconst tracer = trace.getTracer('syncer-ws-server', version);\n\n/**\n * Wraps a function in an OTEL context extracted from a W3C traceparent header.\n * This enables distributed tracing from the client through zero-cache to\n * the user's API server.\n */\nfunction withTraceparent<T>(traceparent: string | undefined, fn: () => T): T {\n  if (!traceparent) {\n    return fn();\n  }\n  const extracted = propagation.extract(ROOT_CONTEXT, {traceparent});\n  return context.with(extracted, fn);\n}\n\nexport class SyncerWsMessageHandler implements MessageHandler {\n  readonly #viewSyncer: ViewSyncer;\n  readonly #mutagen: Mutagen | undefined;\n  readonly #mutationLock: Lock;\n  readonly #lc: LogContext;\n  readonly #clientGroupID: string;\n  readonly #connectionSelector: ConnectionSelector;\n  readonly #connContextManager: ConnectionContextManager;\n  readonly #pusher: Pusher | undefined;\n\n  constructor(\n    lc: LogContext,\n    connectParams: ConnectParams,\n    connContextManager: ConnectionContextManager,\n    viewSyncer: ViewSyncer,\n    mutagen: Mutagen | undefined,\n    pusher: Pusher | undefined,\n  ) {\n    const {clientGroupID, clientID, wsID} = connectParams;\n    this.#viewSyncer = viewSyncer;\n    this.#mutagen = mutagen;\n    this.#connContextManager = connContextManager;\n    this.#mutationLock = new Lock();\n    this.#lc = lc\n      .withContext('connection')\n      .withContext('clientID', clientID)\n      .withContext('clientGroupID', clientGroupID)\n      .withContext('wsID', wsID);\n    this.#clientGroupID = clientGroupID;\n    this.#pusher = pusher;\n    this.#connectionSelector = {\n      clientID,\n      wsID,\n    };\n  }\n\n  async handleMessage(\n    msg: UpstreamWithUnparsedAnalyzeQuery,\n  ): Promise<HandlerResult[]> {\n    const lc = this.#lc;\n    const msgType = msg[0];\n    const viewSyncer = this.#viewSyncer;\n    switch (msgType) {\n      case 'ping':\n        lc.error?.('Ping is not supported at this layer by Zero');\n        break;\n      case 'pull':\n        lc.error?.('Pull is not supported by Zero');\n        break;\n      case 'push': {\n        return withTraceparent(msg[1].traceparent, () =>\n          startAsyncSpan<HandlerResult[]>(\n            tracer,\n            'connection.push',\n            async () => {\n              const {clientGroupID, mutations} = msg[1];\n              if (clientGroupID !== this.#clientGroupID) {\n                return [\n                  {\n                    type: 'fatal',\n                    error: {\n                      kind: ErrorKind.InvalidPush,\n                      message:\n                        `clientGroupID in mutation \"${clientGroupID}\" does not match ` +\n                        `clientGroupID of connection \"${this.#clientGroupID}`,\n                      origin: ErrorOrigin.ZeroCache,\n                    },\n                  } satisfies HandlerResult,\n                ];\n              }\n\n              if (mutations.length === 0) {\n                return [\n                  {\n                    type: 'ok',\n                  },\n                ];\n              }\n\n              // The client only ever sends 1 mutation per push.\n              // #pusher will throw if it sees a CRUD mutation.\n              // #mutagen will throw if it see a custom mutation.\n              if (mutations[0].type === 'custom') {\n                if (!this.#pusher) {\n                  return [\n                    {\n                      type: 'fatal',\n                      error: {\n                        kind: ErrorKind.InvalidPush,\n                        message:\n                          'A ZERO_MUTATE_URL must be set in order to process custom mutations.',\n                        origin: ErrorOrigin.ZeroCache,\n                      },\n                    } satisfies HandlerResult,\n                  ];\n                }\n                return [\n                  this.#pusher.enqueuePush(this.#connectionSelector, msg[1]),\n                ];\n              }\n\n              const mutagen = this.#mutagen;\n              if (!mutagen) {\n                return [\n                  {\n                    type: 'fatal',\n                    error: {\n                      kind: ErrorKind.InvalidPush,\n                      message: `Support for legacy CRUD mutations is disabled`,\n                      origin: ErrorOrigin.ZeroCache,\n                    },\n                  } satisfies HandlerResult,\n                ];\n              }\n\n              const auth = this.#connContextManager.mustGetConnectionContext(\n                this.#connectionSelector,\n              ).auth;\n              assert(\n                auth?.type !== 'opaque',\n                'Only JWT auth is supported for CRUD mutations',\n              );\n\n              // Hold a ref on the mutagen for the duration of the push so that\n              // the connection closing mid-push does not stop the service\n              // (closing its replica handle) between two of its mutations.\n              // (The connection holds a ref while open, and messages are not\n              // dispatched after it has closed, so the service is running\n              // here.)\n              mutagen.ref();\n              try {\n                // Hold a connection-level lock while processing mutations so that:\n                // 1. Mutations are processed in the order in which they are received and\n                // 2. A single view syncer connection cannot hog multiple upstream connections.\n                const ret = await this.#mutationLock.withLock(async () => {\n                  const errors: ErrorBody[] = [];\n                  for (const mutation of mutations) {\n                    const maybeError = await mutagen.processMutation(\n                      mutation,\n                      auth?.decoded,\n                      this.#pusher !== undefined,\n                    );\n                    if (maybeError !== undefined) {\n                      errors.push({\n                        kind: maybeError[0],\n                        message: maybeError[1],\n                        origin: ErrorOrigin.ZeroCache,\n                      });\n                    }\n                  }\n                  if (errors.length > 0) {\n                    return {type: 'transient', errors} satisfies HandlerResult;\n                  }\n                  return {type: 'ok'} satisfies HandlerResult;\n                });\n                return [ret];\n              } finally {\n                mutagen.unref();\n              }\n            },\n          ),\n        );\n      }\n      case 'changeDesiredQueries':\n        await withTraceparent(msg[1].traceparent, () =>\n          startAsyncSpan(tracer, 'connection.changeDesiredQueries', () =>\n            viewSyncer.changeDesiredQueries(this.#connectionSelector, msg),\n          ),\n        );\n        break;\n      case 'updateAuth':\n        await startAsyncSpan(tracer, 'connection.updateAuth', async () => {\n          const initialConnCtx =\n            this.#connContextManager.mustGetConnectionContext(\n              this.#connectionSelector,\n            );\n          const updatedConnCtx = await this.#connContextManager.updateAuth(\n            this.#connectionSelector,\n            msg[1],\n          );\n          const authRevisionChanged =\n            updatedConnCtx.revision !== initialConnCtx.revision;\n\n          await viewSyncer.updateAuth(\n            this.#connectionSelector,\n            msg,\n            authRevisionChanged,\n          );\n        });\n        break;\n      case 'deleteClients': {\n        const deletedClientIDs = await startAsyncSpan(\n          tracer,\n          'connection.deleteClients',\n          () => viewSyncer.deleteClients(this.#connectionSelector, msg),\n        );\n        if (this.#pusher && deletedClientIDs.length > 0) {\n          await this.#pusher.deleteClientMutations(\n            this.#connectionSelector,\n            deletedClientIDs,\n          );\n        }\n        break;\n      }\n      case 'initConnection': {\n        this.#connContextManager.initConnection(\n          this.#connectionSelector,\n          msg[1],\n        );\n        return withTraceparent(msg[1].traceparent, () => {\n          const ret: HandlerResult[] = [\n            {\n              type: 'stream',\n              source: 'viewSyncer',\n              stream: startSpan(tracer, 'connection.initConnection', () =>\n                viewSyncer.initConnection(this.#connectionSelector, msg),\n              ),\n            },\n          ];\n\n          // Given we support both CRUD and Custom mutators,\n          // we do not initialize the `pusher` unless the user has opted\n          // into custom mutations. We detect that by checking\n          // if the pushURL has been set.\n          if (this.#pusher) {\n            ret.push({\n              type: 'stream',\n              source: 'pusher',\n              stream: this.#pusher.initConnection(this.#connectionSelector),\n            });\n          }\n\n          return ret;\n        });\n      }\n      case 'closeConnection':\n        // This message is deprecated and no longer used.\n        break;\n\n      case 'inspect':\n        await startAsyncSpan(tracer, 'connection.inspect', () =>\n          viewSyncer.inspect(this.#connectionSelector, msg),\n        );\n        break;\n\n      case 'ackMutationResponses':\n        if (this.#pusher) {\n          await this.#pusher.ackMutationResponses(\n            this.#connectionSelector,\n            msg[1],\n          );\n        }\n        break;\n\n      default:\n        unreachable(msgType);\n    }\n\n    return [{type: 'ok'}];\n  }\n}\n"],"mappings":";;;;;;;;;;AAoBA,IAAM,SAAS,MAAM,UAAU,oBAAoB,OAAO;;;;;;AAO1D,SAAS,gBAAmB,aAAiC,IAAgB;CAC3E,IAAI,CAAC,aACH,OAAO,GAAG;CAEZ,MAAM,YAAY,YAAY,QAAQ,cAAc,EAAC,YAAW,CAAC;CACjE,OAAO,QAAQ,KAAK,WAAW,EAAE;AACnC;AAEA,IAAa,yBAAb,MAA8D;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,IACA,eACA,oBACA,YACA,SACA,QACA;EACA,MAAM,EAAC,eAAe,UAAU,SAAQ;EACxC,KAAK,cAAc;EACnB,KAAK,WAAW;EAChB,KAAK,sBAAsB;EAC3B,KAAK,gBAAgB,IAAI,KAAK;EAC9B,KAAK,MAAM,GACR,YAAY,YAAY,CAAC,CACzB,YAAY,YAAY,QAAQ,CAAC,CACjC,YAAY,iBAAiB,aAAa,CAAC,CAC3C,YAAY,QAAQ,IAAI;EAC3B,KAAK,iBAAiB;EACtB,KAAK,UAAU;EACf,KAAK,sBAAsB;GACzB;GACA;EACF;CACF;CAEA,MAAM,cACJ,KAC0B;EAC1B,MAAM,KAAK,KAAK;EAChB,MAAM,UAAU,IAAI;EACpB,MAAM,aAAa,KAAK;EACxB,QAAQ,SAAR;GACE,KAAK;IACH,GAAG,QAAQ,6CAA6C;IACxD;GACF,KAAK;IACH,GAAG,QAAQ,+BAA+B;IAC1C;GACF,KAAK,QACH,OAAO,gBAAgB,IAAI,EAAE,CAAC,mBAC5B,eACE,QACA,mBACA,YAAY;IACV,MAAM,EAAC,eAAe,cAAa,IAAI;IACvC,IAAI,kBAAkB,KAAK,gBACzB,OAAO,CACL;KACE,MAAM;KACN,OAAO;MACL,MAAMA;MACN,SACE,8BAA8B,cAAc,gDACZ,KAAK;MACvC,QAAQC;KACV;IACF,CACF;IAGF,IAAI,UAAU,WAAW,GACvB,OAAO,CACL,EACE,MAAM,KACR,CACF;IAMF,IAAI,UAAU,EAAE,CAAC,SAAS,UAAU;KAClC,IAAI,CAAC,KAAK,SACR,OAAO,CACL;MACE,MAAM;MACN,OAAO;OACL,MAAMD;OACN,SACE;OACF,QAAQC;MACV;KACF,CACF;KAEF,OAAO,CACL,KAAK,QAAQ,YAAY,KAAK,qBAAqB,IAAI,EAAE,CAC3D;IACF;IAEA,MAAM,UAAU,KAAK;IACrB,IAAI,CAAC,SACH,OAAO,CACL;KACE,MAAM;KACN,OAAO;MACL,MAAMD;MACN,SAAS;MACT,QAAQC;KACV;IACF,CACF;IAGF,MAAM,OAAO,KAAK,oBAAoB,yBACpC,KAAK,mBACP,CAAC,CAAC;IACF,OACE,MAAM,SAAS,UACf,+CACF;IAQA,QAAQ,IAAI;IACZ,IAAI;KAyBF,OAAO,CAAC,MArBU,KAAK,cAAc,SAAS,YAAY;MACxD,MAAM,SAAsB,CAAC;MAC7B,KAAK,MAAM,YAAY,WAAW;OAChC,MAAM,aAAa,MAAM,QAAQ,gBAC/B,UACA,MAAM,SACN,KAAK,YAAY,KAAA,CACnB;OACA,IAAI,eAAe,KAAA,GACjB,OAAO,KAAK;QACV,MAAM,WAAW;QACjB,SAAS,WAAW;QACpB,QAAQA;OACV,CAAC;MAEL;MACA,IAAI,OAAO,SAAS,GAClB,OAAO;OAAC,MAAM;OAAa;MAAM;MAEnC,OAAO,EAAC,MAAM,KAAI;KACpB,CAAC,CACU;IACb,UAAU;KACR,QAAQ,MAAM;IAChB;GACF,CACF,CACF;GAEF,KAAK;IACH,MAAM,gBAAgB,IAAI,EAAE,CAAC,mBAC3B,eAAe,QAAQ,yCACrB,WAAW,qBAAqB,KAAK,qBAAqB,GAAG,CAC/D,CACF;IACA;GACF,KAAK;IACH,MAAM,eAAe,QAAQ,yBAAyB,YAAY;KAChE,MAAM,iBACJ,KAAK,oBAAoB,yBACvB,KAAK,mBACP;KAKF,MAAM,uBACJ,MAL2B,KAAK,oBAAoB,WACpD,KAAK,qBACL,IAAI,EACN,EAAA,CAEiB,aAAa,eAAe;KAE7C,MAAM,WAAW,WACf,KAAK,qBACL,KACA,mBACF;IACF,CAAC;IACD;GACF,KAAK,iBAAiB;IACpB,MAAM,mBAAmB,MAAM,eAC7B,QACA,kCACM,WAAW,cAAc,KAAK,qBAAqB,GAAG,CAC9D;IACA,IAAI,KAAK,WAAW,iBAAiB,SAAS,GAC5C,MAAM,KAAK,QAAQ,sBACjB,KAAK,qBACL,gBACF;IAEF;GACF;GACA,KAAK;IACH,KAAK,oBAAoB,eACvB,KAAK,qBACL,IAAI,EACN;IACA,OAAO,gBAAgB,IAAI,EAAE,CAAC,mBAAmB;KAC/C,MAAM,MAAuB,CAC3B;MACE,MAAM;MACN,QAAQ;MACR,QAAQ,UAAU,QAAQ,mCACxB,WAAW,eAAe,KAAK,qBAAqB,GAAG,CACzD;KACF,CACF;KAMA,IAAI,KAAK,SACP,IAAI,KAAK;MACP,MAAM;MACN,QAAQ;MACR,QAAQ,KAAK,QAAQ,eAAe,KAAK,mBAAmB;KAC9D,CAAC;KAGH,OAAO;IACT,CAAC;GAEH,KAAK,mBAEH;GAEF,KAAK;IACH,MAAM,eAAe,QAAQ,4BAC3B,WAAW,QAAQ,KAAK,qBAAqB,GAAG,CAClD;IACA;GAEF,KAAK;IACH,IAAI,KAAK,SACP,MAAM,KAAK,QAAQ,qBACjB,KAAK,qBACL,IAAI,EACN;IAEF;GAEF,SACE,YAAY,OAAO;EACvB;EAEA,OAAO,CAAC,EAAC,MAAM,KAAI,CAAC;CACtB;AACF"}
+{"version":3,"file":"syncer-ws-message-handler.js","names":["ErrorKind.InvalidPush","ErrorOrigin.ZeroCache","ErrorKind.InvalidMessage"],"sources":["../../../../../zero-cache/src/workers/syncer-ws-message-handler.ts"],"sourcesContent":["import {ROOT_CONTEXT, context, propagation, trace} from '@opentelemetry/api';\nimport {Lock} from '@rocicorp/lock';\nimport type {LogContext} from '@rocicorp/logger';\nimport {startAsyncSpan, startSpan} from '../../../otel/src/span.ts';\nimport {version} from '../../../otel/src/version.ts';\nimport {assert, unreachable} from '../../../shared/src/asserts.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport type {ErrorBody} from '../../../zero-protocol/src/error.ts';\nimport type {UpstreamWithUnparsedAnalyzeQuery} from '../../../zero-protocol/src/up.ts';\nimport type {Mutagen} from '../services/mutagen/mutagen.ts';\nimport type {Pusher} from '../services/mutagen/pusher.ts';\nimport {\n  type ConnectionContextManager,\n  type ConnectionSelector,\n} from '../services/view-syncer/connection-context-manager.ts';\nimport {type ViewSyncer} from '../services/view-syncer/view-syncer.ts';\nimport {clientGroupLogID} from '../types/client-group-log-id.ts';\nimport {ProtocolErrorWithLevel} from '../types/error-with-level.ts';\nimport type {ConnectParams} from './connect-params.ts';\nimport type {HandlerResult, MessageHandler} from './connection.ts';\n\nconst tracer = trace.getTracer('syncer-ws-server', version);\n\n/**\n * Wraps a function in an OTEL context extracted from a W3C traceparent header.\n * This enables distributed tracing from the client through zero-cache to\n * the user's API server.\n */\nfunction withTraceparent<T>(traceparent: string | undefined, fn: () => T): T {\n  if (!traceparent) {\n    return fn();\n  }\n  const extracted = propagation.extract(ROOT_CONTEXT, {traceparent});\n  return context.with(extracted, fn);\n}\n\nexport class SyncerWsMessageHandler implements MessageHandler {\n  readonly #viewSyncer: ViewSyncer;\n  readonly #mutagen: Mutagen | undefined;\n  readonly #mutationLock: Lock;\n  readonly #lc: LogContext;\n  readonly #clientGroupID: string;\n  readonly #connectionSelector: ConnectionSelector;\n  readonly #connContextManager: ConnectionContextManager;\n  readonly #pusher: Pusher | undefined;\n  #initialized = false;\n\n  constructor(\n    lc: LogContext,\n    connectParams: ConnectParams,\n    connContextManager: ConnectionContextManager,\n    viewSyncer: ViewSyncer,\n    mutagen: Mutagen | undefined,\n    pusher: Pusher | undefined,\n  ) {\n    const {clientGroupID, clientID, wsID} = connectParams;\n    this.#viewSyncer = viewSyncer;\n    this.#mutagen = mutagen;\n    this.#connContextManager = connContextManager;\n    this.#mutationLock = new Lock();\n    this.#lc = lc\n      .withContext('connection')\n      .withContext('clientID', clientID)\n      .withContext('clientGroupID', clientGroupLogID(clientGroupID))\n      .withContext('wsID', wsID);\n    this.#clientGroupID = clientGroupID;\n    this.#pusher = pusher;\n    this.#connectionSelector = {\n      clientID,\n      wsID,\n    };\n  }\n\n  async handleMessage(\n    msg: UpstreamWithUnparsedAnalyzeQuery,\n  ): Promise<HandlerResult[]> {\n    const lc = this.#lc;\n    const msgType = msg[0];\n    const viewSyncer = this.#viewSyncer;\n    switch (msgType) {\n      case 'ping':\n        lc.error?.('Ping is not supported at this layer by Zero');\n        break;\n      case 'pull':\n        lc.error?.('Pull is not supported by Zero');\n        break;\n      case 'push': {\n        return withTraceparent(msg[1].traceparent, () =>\n          startAsyncSpan<HandlerResult[]>(\n            tracer,\n            'connection.push',\n            async () => {\n              const {clientGroupID, mutations} = msg[1];\n              if (clientGroupID !== this.#clientGroupID) {\n                return [\n                  {\n                    type: 'fatal',\n                    error: {\n                      kind: ErrorKind.InvalidPush,\n                      // Neither ID is included: the message is also logged\n                      // as the reason the connection is closed.\n                      message:\n                        'clientGroupID in mutation does not match clientGroupID of connection',\n                      origin: ErrorOrigin.ZeroCache,\n                    },\n                  } satisfies HandlerResult,\n                ];\n              }\n\n              if (mutations.length === 0) {\n                return [\n                  {\n                    type: 'ok',\n                  },\n                ];\n              }\n\n              // The client only ever sends 1 mutation per push.\n              // #pusher will throw if it sees a CRUD mutation.\n              // #mutagen will throw if it see a custom mutation.\n              if (mutations[0].type === 'custom') {\n                if (!this.#pusher) {\n                  return [\n                    {\n                      type: 'fatal',\n                      error: {\n                        kind: ErrorKind.InvalidPush,\n                        message:\n                          'A ZERO_MUTATE_URL must be set in order to process custom mutations.',\n                        origin: ErrorOrigin.ZeroCache,\n                      },\n                    } satisfies HandlerResult,\n                  ];\n                }\n                return [\n                  this.#pusher.enqueuePush(this.#connectionSelector, msg[1]),\n                ];\n              }\n\n              const mutagen = this.#mutagen;\n              if (!mutagen) {\n                return [\n                  {\n                    type: 'fatal',\n                    error: {\n                      kind: ErrorKind.InvalidPush,\n                      message: `Support for legacy CRUD mutations is disabled`,\n                      origin: ErrorOrigin.ZeroCache,\n                    },\n                  } satisfies HandlerResult,\n                ];\n              }\n\n              const auth = this.#connContextManager.mustGetConnectionContext(\n                this.#connectionSelector,\n              ).auth;\n              assert(\n                auth?.type !== 'opaque',\n                'Only JWT auth is supported for CRUD mutations',\n              );\n\n              // Hold a ref on the mutagen for the duration of the push so that\n              // the connection closing mid-push does not stop the service\n              // (closing its replica handle) between two of its mutations.\n              // (The connection holds a ref while open, and messages are not\n              // dispatched after it has closed, so the service is running\n              // here.)\n              mutagen.ref();\n              try {\n                // Hold a connection-level lock while processing mutations so that:\n                // 1. Mutations are processed in the order in which they are received and\n                // 2. A single view syncer connection cannot hog multiple upstream connections.\n                const ret = await this.#mutationLock.withLock(async () => {\n                  const errors: ErrorBody[] = [];\n                  for (const mutation of mutations) {\n                    const maybeError = await mutagen.processMutation(\n                      mutation,\n                      auth?.decoded,\n                      this.#pusher !== undefined,\n                    );\n                    if (maybeError !== undefined) {\n                      errors.push({\n                        kind: maybeError[0],\n                        message: maybeError[1],\n                        origin: ErrorOrigin.ZeroCache,\n                      });\n                    }\n                  }\n                  if (errors.length > 0) {\n                    return {type: 'transient', errors} satisfies HandlerResult;\n                  }\n                  return {type: 'ok'} satisfies HandlerResult;\n                });\n                return [ret];\n              } finally {\n                mutagen.unref();\n              }\n            },\n          ),\n        );\n      }\n      case 'changeDesiredQueries':\n        await withTraceparent(msg[1].traceparent, () =>\n          startAsyncSpan(tracer, 'connection.changeDesiredQueries', () =>\n            viewSyncer.changeDesiredQueries(this.#connectionSelector, msg),\n          ),\n        );\n        break;\n      case 'updateAuth':\n        await startAsyncSpan(tracer, 'connection.updateAuth', async () => {\n          const initialConnCtx =\n            this.#connContextManager.mustGetConnectionContext(\n              this.#connectionSelector,\n            );\n          const updatedConnCtx = await this.#connContextManager.updateAuth(\n            this.#connectionSelector,\n            msg[1],\n          );\n          const authRevisionChanged =\n            updatedConnCtx.revision !== initialConnCtx.revision;\n\n          await viewSyncer.updateAuth(\n            this.#connectionSelector,\n            msg,\n            authRevisionChanged,\n          );\n        });\n        break;\n      case 'deleteClients': {\n        const deletedClientIDs = await startAsyncSpan(\n          tracer,\n          'connection.deleteClients',\n          () => viewSyncer.deleteClients(this.#connectionSelector, msg),\n        );\n        if (this.#pusher && deletedClientIDs.length > 0) {\n          await this.#pusher.deleteClientMutations(\n            this.#connectionSelector,\n            deletedClientIDs,\n          );\n        }\n        break;\n      }\n      case 'initConnection': {\n        // A socket is initialized once, from the sec-protocol header or from\n        // its first initConnection message. A second one is a client bug, so\n        // reject it before it replaces this socket's view-syncer and pusher\n        // streams.\n        if (this.#initialized) {\n          throw new ProtocolErrorWithLevel(\n            {\n              kind: ErrorKind.InvalidMessage,\n              message: 'Connection was already initialized',\n              origin: ErrorOrigin.ZeroCache,\n            },\n            'warn',\n          );\n        }\n        this.#initialized = true;\n        this.#connContextManager.initConnection(\n          this.#connectionSelector,\n          msg[1],\n        );\n        return withTraceparent(msg[1].traceparent, () => {\n          const ret: HandlerResult[] = [\n            {\n              type: 'stream',\n              source: 'viewSyncer',\n              stream: startSpan(tracer, 'connection.initConnection', () =>\n                viewSyncer.initConnection(this.#connectionSelector, msg),\n              ),\n            },\n          ];\n\n          // Given we support both CRUD and Custom mutators,\n          // we do not initialize the `pusher` unless the user has opted\n          // into custom mutations. We detect that by checking\n          // if the pushURL has been set.\n          if (this.#pusher) {\n            ret.push({\n              type: 'stream',\n              source: 'pusher',\n              stream: this.#pusher.initConnection(this.#connectionSelector),\n            });\n          }\n\n          return ret;\n        });\n      }\n      case 'closeConnection':\n        // This message is deprecated and no longer used.\n        break;\n\n      case 'inspect':\n        await startAsyncSpan(tracer, 'connection.inspect', () =>\n          viewSyncer.inspect(this.#connectionSelector, msg),\n        );\n        break;\n\n      case 'ackMutationResponses':\n        if (this.#pusher) {\n          await this.#pusher.ackMutationResponses(\n            this.#connectionSelector,\n            msg[1],\n          );\n        }\n        break;\n\n      default:\n        unreachable(msgType);\n    }\n\n    return [{type: 'ok'}];\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAsBA,IAAM,SAAS,MAAM,UAAU,oBAAoB,OAAO;;;;;;AAO1D,SAAS,gBAAmB,aAAiC,IAAgB;CAC3E,IAAI,CAAC,aACH,OAAO,GAAG;CAEZ,MAAM,YAAY,YAAY,QAAQ,cAAc,EAAC,YAAW,CAAC;CACjE,OAAO,QAAQ,KAAK,WAAW,EAAE;AACnC;AAEA,IAAa,yBAAb,MAA8D;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,eAAe;CAEf,YACE,IACA,eACA,oBACA,YACA,SACA,QACA;EACA,MAAM,EAAC,eAAe,UAAU,SAAQ;EACxC,KAAK,cAAc;EACnB,KAAK,WAAW;EAChB,KAAK,sBAAsB;EAC3B,KAAK,gBAAgB,IAAI,KAAK;EAC9B,KAAK,MAAM,GACR,YAAY,YAAY,CAAC,CACzB,YAAY,YAAY,QAAQ,CAAC,CACjC,YAAY,iBAAiB,iBAAiB,aAAa,CAAC,CAAC,CAC7D,YAAY,QAAQ,IAAI;EAC3B,KAAK,iBAAiB;EACtB,KAAK,UAAU;EACf,KAAK,sBAAsB;GACzB;GACA;EACF;CACF;CAEA,MAAM,cACJ,KAC0B;EAC1B,MAAM,KAAK,KAAK;EAChB,MAAM,UAAU,IAAI;EACpB,MAAM,aAAa,KAAK;EACxB,QAAQ,SAAR;GACE,KAAK;IACH,GAAG,QAAQ,6CAA6C;IACxD;GACF,KAAK;IACH,GAAG,QAAQ,+BAA+B;IAC1C;GACF,KAAK,QACH,OAAO,gBAAgB,IAAI,EAAE,CAAC,mBAC5B,eACE,QACA,mBACA,YAAY;IACV,MAAM,EAAC,eAAe,cAAa,IAAI;IACvC,IAAI,kBAAkB,KAAK,gBACzB,OAAO,CACL;KACE,MAAM;KACN,OAAO;MACL,MAAMA;MAGN,SACE;MACF,QAAQC;KACV;IACF,CACF;IAGF,IAAI,UAAU,WAAW,GACvB,OAAO,CACL,EACE,MAAM,KACR,CACF;IAMF,IAAI,UAAU,EAAE,CAAC,SAAS,UAAU;KAClC,IAAI,CAAC,KAAK,SACR,OAAO,CACL;MACE,MAAM;MACN,OAAO;OACL,MAAMD;OACN,SACE;OACF,QAAQC;MACV;KACF,CACF;KAEF,OAAO,CACL,KAAK,QAAQ,YAAY,KAAK,qBAAqB,IAAI,EAAE,CAC3D;IACF;IAEA,MAAM,UAAU,KAAK;IACrB,IAAI,CAAC,SACH,OAAO,CACL;KACE,MAAM;KACN,OAAO;MACL,MAAMD;MACN,SAAS;MACT,QAAQC;KACV;IACF,CACF;IAGF,MAAM,OAAO,KAAK,oBAAoB,yBACpC,KAAK,mBACP,CAAC,CAAC;IACF,OACE,MAAM,SAAS,UACf,+CACF;IAQA,QAAQ,IAAI;IACZ,IAAI;KAyBF,OAAO,CAAC,MArBU,KAAK,cAAc,SAAS,YAAY;MACxD,MAAM,SAAsB,CAAC;MAC7B,KAAK,MAAM,YAAY,WAAW;OAChC,MAAM,aAAa,MAAM,QAAQ,gBAC/B,UACA,MAAM,SACN,KAAK,YAAY,KAAA,CACnB;OACA,IAAI,eAAe,KAAA,GACjB,OAAO,KAAK;QACV,MAAM,WAAW;QACjB,SAAS,WAAW;QACpB,QAAQA;OACV,CAAC;MAEL;MACA,IAAI,OAAO,SAAS,GAClB,OAAO;OAAC,MAAM;OAAa;MAAM;MAEnC,OAAO,EAAC,MAAM,KAAI;KACpB,CAAC,CACU;IACb,UAAU;KACR,QAAQ,MAAM;IAChB;GACF,CACF,CACF;GAEF,KAAK;IACH,MAAM,gBAAgB,IAAI,EAAE,CAAC,mBAC3B,eAAe,QAAQ,yCACrB,WAAW,qBAAqB,KAAK,qBAAqB,GAAG,CAC/D,CACF;IACA;GACF,KAAK;IACH,MAAM,eAAe,QAAQ,yBAAyB,YAAY;KAChE,MAAM,iBACJ,KAAK,oBAAoB,yBACvB,KAAK,mBACP;KAKF,MAAM,uBACJ,MAL2B,KAAK,oBAAoB,WACpD,KAAK,qBACL,IAAI,EACN,EAAA,CAEiB,aAAa,eAAe;KAE7C,MAAM,WAAW,WACf,KAAK,qBACL,KACA,mBACF;IACF,CAAC;IACD;GACF,KAAK,iBAAiB;IACpB,MAAM,mBAAmB,MAAM,eAC7B,QACA,kCACM,WAAW,cAAc,KAAK,qBAAqB,GAAG,CAC9D;IACA,IAAI,KAAK,WAAW,iBAAiB,SAAS,GAC5C,MAAM,KAAK,QAAQ,sBACjB,KAAK,qBACL,gBACF;IAEF;GACF;GACA,KAAK;IAKH,IAAI,KAAK,cACP,MAAM,IAAI,uBACR;KACE,MAAMC;KACN,SAAS;KACT,QAAQD;IACV,GACA,MACF;IAEF,KAAK,eAAe;IACpB,KAAK,oBAAoB,eACvB,KAAK,qBACL,IAAI,EACN;IACA,OAAO,gBAAgB,IAAI,EAAE,CAAC,mBAAmB;KAC/C,MAAM,MAAuB,CAC3B;MACE,MAAM;MACN,QAAQ;MACR,QAAQ,UAAU,QAAQ,mCACxB,WAAW,eAAe,KAAK,qBAAqB,GAAG,CACzD;KACF,CACF;KAMA,IAAI,KAAK,SACP,IAAI,KAAK;MACP,MAAM;MACN,QAAQ;MACR,QAAQ,KAAK,QAAQ,eAAe,KAAK,mBAAmB;KAC9D,CAAC;KAGH,OAAO;IACT,CAAC;GAEH,KAAK,mBAEH;GAEF,KAAK;IACH,MAAM,eAAe,QAAQ,4BAC3B,WAAW,QAAQ,KAAK,qBAAqB,GAAG,CAClD;IACA;GAEF,KAAK;IACH,IAAI,KAAK,SACP,MAAM,KAAK,QAAQ,qBACjB,KAAK,qBACL,IAAI,EACN;IAEF;GAEF,SACE,YAAY,OAAO;EACvB;EAEA,OAAO,CAAC,EAAC,MAAM,KAAI,CAAC;CACtB;AACF"}

package/out/zero-cache/src/workers/syncer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncer.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/workers/syncer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAUjD,OAAO,EAAyB,KAAK,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAC,KAAK,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAYzD,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,+BAA+B,CAAC;AAC1D,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,sCAAsC,CAAC;AAEvE,OAAO,KAAK,EACV,oBAAoB,EACpB,OAAO,EACP,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAC,gBAAgB,EAAC,MAAM,8CAA8C,CAAC;AAC9E,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,wCAAwC,CAAC;AACvE,OAAO,KAAK,EAA2B,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAO3D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,WAAW,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,UAAU,EACV,aAAa,GAAG,eAAe,GAAG,oBAAoB,CACvD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,UAAU,EACV,gBAAgB,GAAG,iBAAiB,CACrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAG/B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAChC,MAAM,EACN;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAC,CAC/C,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAC7C,kBAAkB,CAkDpB;AAED,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAuJ/C,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,iBAAiB,EAAE,EACvC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAC1C,eAAe,CAejB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,iBAAiB,EAAE,EACvC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAC1C,MAAM,CAER;AA4BD;;;;;;GAMG;AACH,qBAAa,MAAO,YAAW,gBAAgB;;IAC7C,QAAQ,CAAC,EAAE,SAAmB;IAmD9B,YACE,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,UAAU,EAClB,iBAAiB,EAAE,CACjB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAC/B,gBAAgB,EAAE,gBAAgB,KAC/B,UAAU,GAAG,oBAAoB,EACtC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,GAAG,SAAS,EAC/D,aAAa,EACT,CAAC,CACC,EAAE,EAAE,MAAM,EACV,kBAAkB,EAAE,wBAAwB,KACzC,MAAM,GAAG,OAAO,CAAC,GACtB,SAAS,EACb,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,iBAAiB,GAAG,SAAS,EAsLjD;IAyUD,GAAG,kBAEF;IAED;;;;;OAKG;IACG,KAAK,kBAmBV;IAED,IAAI,kBAMH;CACF"}
+{"version":3,"file":"syncer.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/workers/syncer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAUjD,OAAO,EAAyB,KAAK,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAC,KAAK,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAYzD,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,+BAA+B,CAAC;AAC1D,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,sCAAsC,CAAC;AAEvE,OAAO,KAAK,EACV,oBAAoB,EACpB,OAAO,EACP,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAC,gBAAgB,EAAC,MAAM,8CAA8C,CAAC;AAC9E,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,wCAAwC,CAAC;AAEvE,OAAO,KAAK,EAA2B,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAO3D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,WAAW,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,UAAU,EACV,aAAa,GAAG,eAAe,GAAG,oBAAoB,CACvD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,UAAU,EACV,gBAAgB,GAAG,iBAAiB,CACrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAG/B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAChC,MAAM,EACN;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAC,CAC/C,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAC7C,kBAAkB,CAkDpB;AAED,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAuJ/C,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,iBAAiB,EAAE,EACvC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAC1C,eAAe,CAejB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,iBAAiB,EAAE,EACvC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAC1C,MAAM,CAER;AA4BD;;;;;;GAMG;AACH,qBAAa,MAAO,YAAW,gBAAgB;;IAC7C,QAAQ,CAAC,EAAE,SAAmB;IAmD9B,YACE,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,UAAU,EAClB,iBAAiB,EAAE,CACjB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAC/B,gBAAgB,EAAE,gBAAgB,KAC/B,UAAU,GAAG,oBAAoB,EACtC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,GAAG,SAAS,EAC/D,aAAa,EACT,CAAC,CACC,EAAE,EAAE,MAAM,EACV,kBAAkB,EAAE,wBAAwB,KACzC,MAAM,GAAG,OAAO,CAAC,GACtB,SAAS,EACb,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,iBAAiB,GAAG,SAAS,EAsLjD;IAkVD,GAAG,kBAEF;IAED;;;;;OAKG;IACG,KAAK,kBAqBV;IAED,IAAI,kBAMH;CACF"}

package/out/zero-cache/src/workers/syncer.js

@@ -4,6 +4,7 @@ import { ZeroCache } from "../../../zero-protocol/src/error-origin-enum.js";
 import { ProtocolError, isProtocolError } from "../../../zero-protocol/src/error.js";
 import "../config/zero-config.js";
 import { getOrCreateCounter, getOrCreateGauge, getOrCreateNativeHistogram, getOrCreateUpDownCounter } from "../observability/metrics.js";
+import { clientGroupLogID } from "../types/client-group-log-id.js";
 import { installWebSocketReceiver } from "../types/websocket-handoff.js";
 import { createNotifierFrom, subscribeTo } from "./replicator.js";
 import { recordConnectionAttempted, recordConnectionSuccess, setActiveClientGroupsGetter } from "../server/anonymous-otel-start.js";
@@ -327,27 +328,26 @@ var Syncer = class {
 		ws.once("close", () => {
 			this.#webSocketOpenConnections.add(-1, metricAttributes);
 		});
-		this.#lc.debug?.("creating connection", params.clientGroupID, params.clientID);
+		this.#lc.debug?.("creating connection", clientGroupLogID(params.clientGroupID), params.clientID);
 		recordConnectionAttempted();
 		const { clientID, clientGroupID, auth, userID } = params;
 		const hasProvidedAuth = auth !== void 0 && auth !== "";
 		const incomingUserID = userID ?? null;
-		if (hasProvidedAuth) {
-			const tokenOptions = tokenConfigOptions(this.#config.auth ?? {});
-			const hasPushOrMutate = this.#config?.push?.url !== void 0 || this.#config?.mutate?.url !== void 0;
-			const hasQueries = this.#config?.query?.url !== void 0 || this.#config?.getQueries?.url !== void 0;
-			if (!(tokenOptions.length === 1) && !(hasPushOrMutate && hasQueries)) {
-				recordConnectionFailure("configuration");
-				throw new Error("Exactly one of jwk, secret, or jwksUrl must be set in order to verify tokens but actually the following were set: " + JSON.stringify(tokenOptions) + ". You may also set both ZERO_MUTATE_URL and ZERO_QUERY_URL to enable custom mutations and queries without passing token verification options.");
-			}
+		const tokenOptions = tokenConfigOptions(this.#config.auth ?? {});
+		const hasPushOrMutate = this.#config?.push?.url !== void 0 || this.#config?.mutate?.url !== void 0;
+		const hasQueries = this.#config?.query?.url !== void 0 || this.#config?.getQueries?.url !== void 0;
+		const hasCustomEndpoints = hasPushOrMutate && hasQueries;
+		if (tokenOptions.length > 1 || hasProvidedAuth && tokenOptions.length === 0 && !hasCustomEndpoints) {
+			recordConnectionFailure("configuration");
+			throw new Error("Exactly one of jwk, secret, or jwksUrl must be set in order to verify tokens but actually the following were set: " + JSON.stringify(tokenOptions) + ". You may also set both ZERO_MUTATE_URL and ZERO_QUERY_URL to enable custom mutations and queries without passing token verification options.");
 		}
 		let initialAuth;
 		try {
-			initialAuth = await resolveAuth(this.#lc.withContext("clientGroupID", clientGroupID).withContext("clientID", clientID), void 0, incomingUserID, auth, this.#validateLegacyJWT);
+			initialAuth = await resolveAuth(this.#lc.withContext("clientGroupID", clientGroupLogID(clientGroupID)).withContext("clientID", clientID), void 0, incomingUserID, auth, this.#validateLegacyJWT);
 		} catch (e) {
 			if (isProtocolError(e)) {
 				this.#lc.warn?.("Rejecting sync connection during initial auth resolution", {
-					clientGroupID,
+					clientGroupID: clientGroupLogID(clientGroupID),
 					clientID,
 					incomingUserID,
 					hasProvidedAuth,
@@ -363,7 +363,7 @@ var Syncer = class {
 		}
 		if (ws.readyState !== WebSocket.OPEN) {
 			this.#lc.debug?.("websocket closed while resolving auth", {
-				clientGroupID,
+				clientGroupID: clientGroupLogID(clientGroupID),
 				clientID,
 				readyState: ws.readyState
 			});
@@ -386,6 +386,7 @@ var Syncer = class {
 		}
 		const existing = this.#connections.get(clientID);
 		if (existing) {
+			if (existing.wsID === params.wsID) this.#lc.warn?.(`duplicate connection for client ${clientID} with the same wsID ${params.wsID}, closing existing connection`, { clientGroupID: clientGroupLogID(clientGroupID) });
 			this.#lc.debug?.(`client ${clientID} already connected, closing existing connection`);
 			existing.close(`replaced by ${params.wsID}`);
 		}
@@ -424,7 +425,7 @@ var Syncer = class {
 			recordConnectionSuccess();
 		} else recordConnectionFailure("protocol_version");
 		if (params.initConnectionMsg) {
-			this.#lc.debug?.("handling init connection message from sec header", params.clientGroupID, params.clientID);
+			this.#lc.debug?.("handling init connection message from sec header", clientGroupLogID(params.clientGroupID), params.clientID);
 			await connection.handleInitConnection(JSON.stringify(params.initConnectionMsg));
 		}
 	};
@@ -466,7 +467,7 @@ var Syncer = class {
 		while (this.#viewSyncers.size) {
 			await this.#drainCoordinator.forceDrainTimeout;
 			for (const vs of this.#viewSyncers.getServices()) {
-				this.#lc.debug?.(`draining view-syncer ${vs.id} (forced)`);
+				this.#lc.debug?.(`draining view-syncer ${clientGroupLogID(vs.id)} (forced)`);
 				vs.stop();
 				break;
 			}

package/out/zero-cache/src/workers/syncer.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncer.js","names":["ErrorKind.Unauthorized","ErrorOrigin.ZeroCache"],"sources":["../../../../../zero-cache/src/workers/syncer.ts"],"sourcesContent":["import {pid} from 'node:process';\nimport type {MessagePort} from 'node:worker_threads';\nimport type {LogContext} from '@rocicorp/logger';\nimport {resolver} from '@rocicorp/resolver';\nimport {WebSocket, WebSocketServer, type ServerOptions} from 'ws';\nimport {promiseVoid} from '../../../shared/src/resolved-promises.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport {\n  isProtocolError,\n  ProtocolError,\n} from '../../../zero-protocol/src/error.ts';\nimport {resolveAuth, type Auth, type ValidateLegacyJWT} from '../auth/auth.ts';\nimport {tokenConfigOptions} from '../auth/jwt.ts';\nimport {type ZeroConfig} from '../config/zero-config.ts';\nimport {\n  getOrCreateCounter,\n  getOrCreateGauge,\n  getOrCreateNativeHistogram,\n  getOrCreateUpDownCounter,\n} from '../observability/metrics.ts';\nimport {\n  recordConnectionAttempted,\n  recordConnectionSuccess,\n  setActiveClientGroupsGetter,\n} from '../server/anonymous-otel-start.ts';\nimport type {Mutagen} from '../services/mutagen/mutagen.ts';\nimport type {Pusher} from '../services/mutagen/pusher.ts';\nimport type {ReplicaState} from '../services/replicator/replicator.ts';\nimport {ServiceRunner} from '../services/runner.ts';\nimport type {\n  ActivityBasedService,\n  Service,\n  SingletonService,\n} from '../services/service.ts';\nimport type {ConnectionContextManager} from '../services/view-syncer/connection-context-manager.ts';\nimport {DrainCoordinator} from '../services/view-syncer/drain-coordinator.ts';\nimport type {ViewSyncer} from '../services/view-syncer/view-syncer.ts';\nimport type {ClientGroupStatusMessage, Worker} from '../types/processes.ts';\nimport type {Subscription} from '../types/subscription.ts';\nimport {installWebSocketReceiver} from '../types/websocket-handoff.ts';\nimport type {ConnectParams} from './connect-params.ts';\nimport {Connection, sendError} from './connection.ts';\nimport {createNotifierFrom, subscribeTo} from './replicator.ts';\nimport {SyncerWsMessageHandler} from './syncer-ws-message-handler.ts';\n\nexport type SyncerWorkerData = {\n  replicatorPort: MessagePort;\n};\n\nexport type ReplicaReadyState = {\n  readonly watermark: string;\n  readonly replicaReadyTimeMs: number;\n};\n\nexport type ServingLagViewSyncer = Pick<\n  ViewSyncer,\n  'createdAtMs' | 'servedVersion' | 'servingLagEligible'\n>;\n\nexport type ServingLagStats = {\n  readonly activeClientGroups: number;\n  readonly laggingClientGroups: number;\n  readonly minMs: number;\n  readonly p50Ms: number;\n  readonly p75Ms: number;\n  readonly p99Ms: number;\n  readonly maxMs: number;\n};\n\ntype ServingLagDistribution = ServingLagStats & {\n  readonly lagsMs: readonly number[];\n};\n\nexport type PipelineDedupViewSyncer = Pick<\n  ViewSyncer,\n  'pipelineHashes' | 'clientSchemaKey'\n>;\n\nexport type PipelineDedupStats = {\n  readonly clientTotal: number;\n  readonly internalTotal: number;\n  // (clientSchemaKey, transformationHash) -> occurrence count across client\n  // groups, for client/custom queries.\n  readonly clientHashes: ReadonlyMap<\n    string,\n    {count: number; queryName: string | undefined}\n  >;\n  readonly internalUnique: number;\n  readonly clientSchemas: number;\n};\n\nexport function computePipelineDedupStats(\n  viewSyncers: Iterable<PipelineDedupViewSyncer>,\n): PipelineDedupStats {\n  let clientTotal = 0;\n  let internalTotal = 0;\n  const clientHashes = new Map<\n    string,\n    {count: number; queryName: string | undefined}\n  >();\n  const internalHashes = new Set<string>();\n  const schemaKeys = new Set<string>();\n  let vsIndex = 0;\n  for (const vs of viewSyncers) {\n    const schemaKey = vs.clientSchemaKey;\n    if (schemaKey !== undefined) {\n      schemaKeys.add(schemaKey);\n    }\n    // Without a client schema the pipeline's dedup identity is unknown, so key\n    // it uniquely per view-syncer; otherwise schema-less pipelines from\n    // unrelated client groups would collapse under a shared `undefined/<hash>`\n    // key and overstate deduplication.\n    const dedupSchemaKey = schemaKey ?? `#vs${vsIndex}`;\n    vsIndex++;\n    for (const {\n      transformationHash,\n      internal,\n      queryName,\n    } of vs.pipelineHashes()) {\n      // Pipelines only share when both the client schema (which determines\n      // row keys) and the transformed AST are identical.\n      const key = `${dedupSchemaKey}/${transformationHash}`;\n      if (internal) {\n        internalTotal++;\n        internalHashes.add(key);\n      } else {\n        clientTotal++;\n        const entry = clientHashes.get(key);\n        if (entry) {\n          entry.count++;\n        } else {\n          clientHashes.set(key, {count: 1, queryName});\n        }\n      }\n    }\n  }\n  return {\n    clientTotal,\n    internalTotal,\n    clientHashes,\n    internalUnique: internalHashes.size,\n    clientSchemas: schemaKeys.size,\n  };\n}\n\nexport const MAX_REPLICA_READY_STATES = 10_000;\nconst VIEW_SYNCER_LAG_SAMPLE_INTERVAL_MS = 60_000;\nconst SHARED_ADVANCE_ELIGIBILITY_LOG_INTERVAL_MS = 5 * 60_000;\n\nconst PROTOCOL_VERSION_ATTRIBUTE = 'protocol.version';\nconst FAILURE_REASON_ATTRIBUTE = 'reason';\n\nfunction boundReplicaReadyStates(\n  replicaReadyStates: ReplicaReadyState[],\n): void {\n  if (replicaReadyStates.length > MAX_REPLICA_READY_STATES) {\n    replicaReadyStates.splice(\n      0,\n      replicaReadyStates.length - MAX_REPLICA_READY_STATES,\n    );\n  }\n}\n\nfunction pruneReplicaReadyStates(\n  replicaReadyStates: ReplicaReadyState[],\n  firstNeededIndex: number,\n): void {\n  if (firstNeededIndex > 0) {\n    replicaReadyStates.splice(0, firstNeededIndex);\n  }\n\n  boundReplicaReadyStates(replicaReadyStates);\n}\n\nfunction lowerBoundReplicaReadyTimeMs(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  replicaReadyTimeMs: number,\n): number {\n  let low = 0;\n  let high = replicaReadyStates.length;\n  while (low < high) {\n    const mid = low + Math.floor((high - low) / 2);\n    if (replicaReadyStates[mid].replicaReadyTimeMs < replicaReadyTimeMs) {\n      low = mid + 1;\n    } else {\n      high = mid;\n    }\n  }\n  return low;\n}\n\nfunction upperBoundWatermark(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  watermark: string,\n): number {\n  let low = 0;\n  let high = replicaReadyStates.length;\n  while (low < high) {\n    const mid = low + Math.floor((high - low) / 2);\n    if (replicaReadyStates[mid].watermark <= watermark) {\n      low = mid + 1;\n    } else {\n      high = mid;\n    }\n  }\n  return low;\n}\n\nfunction findFirstUnservedIndex(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  viewSyncer: ServingLagViewSyncer,\n): number {\n  const firstReadyAfterCreation = lowerBoundReplicaReadyTimeMs(\n    replicaReadyStates,\n    viewSyncer.createdAtMs,\n  );\n  const firstAfterServedVersion =\n    viewSyncer.servedVersion === null\n      ? 0\n      : upperBoundWatermark(replicaReadyStates, viewSyncer.servedVersion);\n\n  const firstUnservedIndex = Math.max(\n    firstReadyAfterCreation,\n    firstAfterServedVersion,\n  );\n  return firstUnservedIndex < replicaReadyStates.length\n    ? firstUnservedIndex\n    : -1;\n}\n\nfunction percentileNearestRank(\n  sortedValues: readonly number[],\n  percentile: number,\n): number {\n  if (sortedValues.length === 0) {\n    return 0;\n  }\n  const index = Math.min(\n    sortedValues.length - 1,\n    Math.max(0, Math.ceil((percentile / 100) * sortedValues.length) - 1),\n  );\n  return sortedValues[index];\n}\n\nfunction computeServingLagDistributionMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): ServingLagDistribution {\n  const lags: number[] = [];\n  let laggingClientGroups = 0;\n  let firstNeededIndex = replicaReadyStates.length;\n\n  for (const viewSyncer of viewSyncers) {\n    if (!viewSyncer.servingLagEligible) {\n      continue;\n    }\n\n    const firstUnservedIndex = findFirstUnservedIndex(\n      replicaReadyStates,\n      viewSyncer,\n    );\n    if (firstUnservedIndex === -1) {\n      lags.push(0);\n      continue;\n    }\n\n    firstNeededIndex = Math.min(firstNeededIndex, firstUnservedIndex);\n    const lagMs = Math.max(\n      0,\n      now - replicaReadyStates[firstUnservedIndex].replicaReadyTimeMs,\n    );\n    lags.push(lagMs);\n    if (lagMs > 0) {\n      laggingClientGroups++;\n    }\n  }\n\n  pruneReplicaReadyStates(replicaReadyStates, firstNeededIndex);\n\n  lags.sort((a, b) => a - b);\n  return {\n    activeClientGroups: lags.length,\n    laggingClientGroups,\n    // The percentile fields are for the legacy serving_lag_stats gauge.\n    // The native view_syncer_lag histogram records lagsMs and computes\n    // percentiles in Prometheus/AMP.\n    minMs: lags[0] ?? 0,\n    p50Ms: percentileNearestRank(lags, 50),\n    p75Ms: percentileNearestRank(lags, 75),\n    p99Ms: percentileNearestRank(lags, 99),\n    maxMs: lags.at(-1) ?? 0,\n    lagsMs: lags,\n  };\n}\n\nexport function computeServingLagStatsMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): ServingLagStats {\n  const distribution = computeServingLagDistributionMs(\n    now,\n    replicaReadyStates,\n    viewSyncers,\n  );\n  return {\n    activeClientGroups: distribution.activeClientGroups,\n    laggingClientGroups: distribution.laggingClientGroups,\n    minMs: distribution.minMs,\n    p50Ms: distribution.p50Ms,\n    p75Ms: distribution.p75Ms,\n    p99Ms: distribution.p99Ms,\n    maxMs: distribution.maxMs,\n  };\n}\n\nexport function computeMaxServingLagMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): number {\n  return computeServingLagStatsMs(now, replicaReadyStates, viewSyncers).maxMs;\n}\n\nfunction getWebSocketServerOptions(config: ZeroConfig): ServerOptions {\n  const options: ServerOptions = {\n    noServer: true,\n    maxPayload: config.websocketMaxPayloadBytes,\n  };\n\n  if (config.websocketCompression) {\n    options.perMessageDeflate = true;\n\n    if (config.websocketCompressionOptions) {\n      try {\n        const compressionOptions = JSON.parse(\n          config.websocketCompressionOptions,\n        );\n        options.perMessageDeflate = compressionOptions;\n      } catch (e) {\n        throw new Error(\n          `Failed to parse ZERO_WEBSOCKET_COMPRESSION_OPTIONS: ${String(e)}. Expected valid JSON.`,\n        );\n      }\n    }\n  }\n\n  return options;\n}\n\n/**\n * The Syncer worker receives websocket handoffs for \"/sync\" connections\n * from the Dispatcher in the main thread, and creates websocket\n * {@link Connection}s with a corresponding {@link ViewSyncer}, {@link Mutagen},\n * and {@link Subscription} to version notifications from the Replicator\n * worker.\n */\nexport class Syncer implements SingletonService {\n  readonly id = `syncer-${pid}`;\n  readonly #lc: LogContext;\n  readonly #viewSyncers: ServiceRunner<ViewSyncer & ActivityBasedService>;\n  readonly #mutagens: ServiceRunner<Mutagen & Service> | undefined;\n  readonly #pushers: ServiceRunner<Pusher & Service> | undefined;\n  readonly #connections = new Map<string, Connection>();\n  readonly #pendingConnections = new Map<string, number>();\n  readonly #clientGroupGenerations = new Map<string, number>();\n  readonly #drainCoordinator = new DrainCoordinator();\n  readonly #parent: Worker;\n  readonly #wss: WebSocketServer;\n  readonly #stopped = resolver();\n  readonly #config: ZeroConfig;\n  readonly #validateLegacyJWT: ValidateLegacyJWT | undefined;\n  readonly #replicaReadyStates: ReplicaReadyState[] = [];\n  readonly #webSocketOpenConnections = getOrCreateUpDownCounter(\n    'sync',\n    'websocket.open_connections',\n    'Open client WebSocket connections.',\n  );\n  readonly #webSocketConnectionAttempts = getOrCreateCounter(\n    'sync',\n    'websocket.connection_attempts',\n    'Client WebSocket connection attempts.',\n  );\n  readonly #webSocketConnectionSuccesses = getOrCreateCounter(\n    'sync',\n    'websocket.connection_successes',\n    'Client WebSocket connections successfully initialized.',\n  );\n  readonly #webSocketConnectionFailures = getOrCreateCounter(\n    'sync',\n    'websocket.connection_failures',\n    'Client WebSocket connection attempts that failed before initialization.',\n  );\n  readonly #viewSyncerLag = getOrCreateNativeHistogram(\n    'sync',\n    'view_syncer_lag',\n    {\n      description:\n        'Lag from replica-ready change to ViewSyncer output for active ' +\n        'client groups. A change is output after IVM advancement, CVR flush, ' +\n        'and pokeEnd.',\n      unit: 's',\n    },\n  );\n  #servingLagDistributionCache: ServingLagDistribution | undefined;\n  #servingLagDistributionCacheClearQueued = false;\n  #viewSyncerLagSampleInterval: ReturnType<typeof setInterval> | undefined;\n  #eligibilityLogInterval: ReturnType<typeof setInterval> | undefined;\n\n  constructor(\n    lc: LogContext,\n    config: ZeroConfig,\n    viewSyncerFactory: (\n      id: string,\n      sub: Subscription<ReplicaState>,\n      drainCoordinator: DrainCoordinator,\n    ) => ViewSyncer & ActivityBasedService,\n    mutagenFactory: ((id: string) => Mutagen & Service) | undefined,\n    pusherFactory:\n      | ((\n          id: string,\n          connContextManager: ConnectionContextManager,\n        ) => Pusher & Service)\n      | undefined,\n    parent: Worker,\n    validateLegacyJWT: ValidateLegacyJWT | undefined,\n  ) {\n    this.#config = config;\n    this.#validateLegacyJWT = validateLegacyJWT;\n    // Relays notifications from the parent thread subscription\n    // to ViewSyncers within this thread.\n    const notifier = createNotifierFrom(lc, parent, state =>\n      this.#recordReplicaReadyState(state),\n    );\n    subscribeTo(lc, parent);\n\n    this.#lc = lc;\n    this.#parent = parent;\n    this.#viewSyncers = new ServiceRunner(\n      lc,\n      id => viewSyncerFactory(id, notifier.subscribe(), this.#drainCoordinator),\n      v => v.keepalive(),\n      id => {\n        if ((this.#pendingConnections.get(id) ?? 0) === 0) {\n          const generation = this.#clientGroupGenerations.get(id);\n          this.#parent.send<ClientGroupStatusMessage>([\n            'clientGroupStatus',\n            {\n              clientGroupID: id,\n              active: false,\n              ...(generation !== undefined ? {generation} : {}),\n            },\n          ]);\n          this.#clientGroupGenerations.delete(id);\n        }\n      },\n    );\n    if (mutagenFactory) {\n      this.#mutagens = new ServiceRunner(lc, mutagenFactory, m => m.hasRefs());\n    }\n    if (pusherFactory) {\n      this.#pushers = new ServiceRunner(\n        lc,\n        id =>\n          pusherFactory(\n            id,\n            this.#viewSyncers.getService(id).connContextManager,\n          ),\n        p => p.hasRefs(),\n      );\n    }\n    this.#wss = new WebSocketServer(getWebSocketServerOptions(config));\n\n    installWebSocketReceiver(\n      lc,\n      this.#wss,\n      this.#receiveConnection,\n      this.#parent,\n      params => {\n        this.#releasePending(params.clientGroupID, params.generation);\n      },\n      params => {\n        this.#pendingConnections.set(\n          params.clientGroupID,\n          (this.#pendingConnections.get(params.clientGroupID) ?? 0) + 1,\n        );\n        if (params.generation !== undefined) {\n          const current = this.#clientGroupGenerations.get(\n            params.clientGroupID,\n          );\n          if (current === undefined || params.generation > current) {\n            this.#clientGroupGenerations.set(\n              params.clientGroupID,\n              params.generation,\n            );\n          }\n        }\n      },\n    );\n\n    setActiveClientGroupsGetter(() => this.#viewSyncers.size);\n\n    getOrCreateGauge(\n      'sync',\n      'active-client-groups',\n      'Number of active client groups',\n    ).addCallback(result => result.observe(this.#viewSyncers.size));\n\n    getOrCreateGauge(\n      'sync',\n      'queries',\n      'Active queries (pipelines) across all client groups',\n    ).addCallback(result => {\n      let total = 0;\n      for (const vs of this.#viewSyncers.getServices()) {\n        total += vs.queryCount;\n      }\n      result.observe(total);\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'rows',\n      'Tracked rows across all client groups',\n    ).addCallback(result => {\n      let total = 0;\n      for (const vs of this.#viewSyncers.getServices()) {\n        total += vs.rowCount;\n      }\n      result.observe(total);\n    });\n\n    getOrCreateGauge('sync', 'serving_lag', {\n      description:\n        'Maximum time active ViewSyncer client groups have had unserved ' +\n        'replica changes. A change is served after IVM advancement, CVR flush, ' +\n        'and pokeEnd.',\n      unit: 'millisecond',\n    }).addCallback(result => {\n      result.observe(this.#computeServingLagDistribution().maxMs);\n    });\n\n    getOrCreateGauge('sync', 'serving_lag_stats', {\n      description:\n        'Distribution of time active ViewSyncer client groups have had ' +\n        'unserved replica changes. A change is served after IVM advancement, ' +\n        'CVR flush, and pokeEnd.',\n      unit: 'millisecond',\n    }).addCallback(result => {\n      const stats = this.#computeServingLagDistribution();\n      result.observe(stats.minMs, {stat: 'min'});\n      result.observe(stats.p50Ms, {stat: 'p50'});\n      result.observe(stats.p75Ms, {stat: 'p75'});\n      result.observe(stats.p99Ms, {stat: 'p99'});\n      result.observe(stats.maxMs, {stat: 'max'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'serving_lagging_client_groups',\n      'Number of active client groups with unserved replica changes',\n    ).addCallback(result => {\n      result.observe(this.#computeServingLagDistribution().laggingClientGroups);\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'pipelines_total',\n      'Query pipelines across all client groups on this worker, by query ' +\n        'type. The ratio to sync.pipelines_unique is the dedup factor ' +\n        'available to shared pipeline advancement.',\n    ).addCallback(result => {\n      const stats = this.#computePipelineDedupStats();\n      result.observe(stats.clientTotal, {type: 'client'});\n      result.observe(stats.internalTotal, {type: 'internal'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'pipelines_unique',\n      'Distinct (clientSchema, transformationHash) pipelines across all ' +\n        'client groups on this worker, by query type',\n    ).addCallback(result => {\n      const stats = this.#computePipelineDedupStats();\n      result.observe(stats.clientHashes.size, {type: 'client'});\n      result.observe(stats.internalUnique, {type: 'internal'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'client_schemas',\n      'Distinct client schemas across all client groups on this worker',\n    ).addCallback(result => {\n      result.observe(this.#computePipelineDedupStats().clientSchemas);\n    });\n\n    this.#viewSyncerLagSampleInterval = setInterval(\n      () => this.#recordViewSyncerLagSamples(),\n      VIEW_SYNCER_LAG_SAMPLE_INTERVAL_MS,\n    );\n    this.#viewSyncerLagSampleInterval.unref?.();\n\n    this.#eligibilityLogInterval = setInterval(\n      () => this.#logSharedAdvanceEligibility(),\n      SHARED_ADVANCE_ELIGIBILITY_LOG_INTERVAL_MS,\n    );\n    this.#eligibilityLogInterval.unref?.();\n  }\n\n  #computeServingLagDistribution(): ServingLagDistribution {\n    if (this.#servingLagDistributionCache) {\n      return this.#servingLagDistributionCache;\n    }\n\n    const distribution = computeServingLagDistributionMs(\n      Date.now(),\n      this.#replicaReadyStates,\n      this.#viewSyncers.getServices(),\n    );\n    this.#servingLagDistributionCache = distribution;\n    if (!this.#servingLagDistributionCacheClearQueued) {\n      this.#servingLagDistributionCacheClearQueued = true;\n      queueMicrotask(() => {\n        this.#servingLagDistributionCache = undefined;\n        this.#servingLagDistributionCacheClearQueued = false;\n      });\n    }\n    return distribution;\n  }\n\n  #recordViewSyncerLagSamples(): void {\n    const {lagsMs} = this.#computeServingLagDistribution();\n    for (const lagMs of lagsMs) {\n      this.#viewSyncerLag.recordMs(lagMs);\n    }\n  }\n\n  #computePipelineDedupStats(): PipelineDedupStats {\n    return computePipelineDedupStats(this.#viewSyncers.getServices());\n  }\n\n  #logSharedAdvanceEligibility(): void {\n    const stats = this.#computePipelineDedupStats();\n    if (stats.clientTotal === 0) {\n      return;\n    }\n    const unique = stats.clientHashes.size;\n    const topDuplicated = [...stats.clientHashes.entries()]\n      .filter(([, {count}]) => count > 1)\n      .sort((a, b) => b[1].count - a[1].count)\n      .slice(0, 10)\n      .map(([key, {count, queryName}]) => ({key, count, queryName}));\n    this.#lc.info?.('shared-advance-eligibility', {\n      clientPipelines: stats.clientTotal,\n      uniqueClientPipelines: unique,\n      dedupFactor: Number((stats.clientTotal / Math.max(unique, 1)).toFixed(2)),\n      internalPipelines: stats.internalTotal,\n      clientSchemas: stats.clientSchemas,\n      topDuplicated,\n    });\n  }\n\n  #recordReplicaReadyState(state: ReplicaState): void {\n    if (\n      state.watermark === undefined ||\n      state.replicaReadyTimeMs === undefined\n    ) {\n      return;\n    }\n    const last = this.#replicaReadyStates.at(-1);\n    if (last && last.watermark >= state.watermark) {\n      return;\n    }\n    this.#replicaReadyStates.push({\n      watermark: state.watermark,\n      replicaReadyTimeMs: state.replicaReadyTimeMs,\n    });\n    if (this.#viewSyncers.size === 0) {\n      this.#replicaReadyStates.length = 0;\n      return;\n    }\n    boundReplicaReadyStates(this.#replicaReadyStates);\n  }\n\n  readonly #createConnection = async (ws: WebSocket, params: ConnectParams) => {\n    const metricAttributes = {\n      [PROTOCOL_VERSION_ATTRIBUTE]: params.protocolVersion,\n    };\n    let connectionResultRecorded = false;\n    const recordConnectionFailure = (reason: string) => {\n      if (connectionResultRecorded) {\n        return;\n      }\n      connectionResultRecorded = true;\n      this.#webSocketConnectionFailures.add(1, {\n        ...metricAttributes,\n        [FAILURE_REASON_ATTRIBUTE]: reason,\n      });\n    };\n    const recordConnectionSuccessMetric = () => {\n      if (connectionResultRecorded) {\n        return;\n      }\n      connectionResultRecorded = true;\n      this.#webSocketConnectionSuccesses.add(1, metricAttributes);\n    };\n\n    this.#webSocketConnectionAttempts.add(1, metricAttributes);\n    this.#webSocketOpenConnections.add(1, metricAttributes);\n    ws.once('close', () => {\n      this.#webSocketOpenConnections.add(-1, metricAttributes);\n    });\n\n    this.#lc.debug?.(\n      'creating connection',\n      params.clientGroupID,\n      params.clientID,\n    );\n    recordConnectionAttempted();\n    const {clientID, clientGroupID, auth, userID} = params;\n    const hasProvidedAuth = auth !== undefined && auth !== '';\n    const incomingUserID = userID ?? null;\n\n    if (hasProvidedAuth) {\n      const tokenOptions = tokenConfigOptions(this.#config.auth ?? {});\n\n      const hasPushOrMutate =\n        this.#config?.push?.url !== undefined ||\n        this.#config?.mutate?.url !== undefined;\n      const hasQueries =\n        this.#config?.query?.url !== undefined ||\n        this.#config?.getQueries?.url !== undefined;\n\n      // must either have one of the token options set or have custom mutations & queries enabled\n      const hasExactlyOneTokenOption = tokenOptions.length === 1;\n      const hasCustomEndpoints = hasPushOrMutate && hasQueries;\n      if (!hasExactlyOneTokenOption && !hasCustomEndpoints) {\n        recordConnectionFailure('configuration');\n        throw new Error(\n          'Exactly one of jwk, secret, or jwksUrl must be set in order to verify tokens but actually the following were set: ' +\n            JSON.stringify(tokenOptions) +\n            '. You may also set both ZERO_MUTATE_URL and ZERO_QUERY_URL to enable custom mutations and queries without passing token verification options.',\n        );\n      }\n    }\n\n    let initialAuth: Auth | undefined;\n\n    // Verify JWT BEFORE touching existing connections - prevents unauthenticated\n    // attackers from force-disconnecting legitimate users via DoS.\n    try {\n      initialAuth = await resolveAuth(\n        this.#lc\n          .withContext('clientGroupID', clientGroupID)\n          .withContext('clientID', clientID),\n        // no previous auth, since this is a new connection, and resolveAuth is\n        // connection scoped, not client group scoped\n        undefined,\n        incomingUserID,\n        auth,\n        this.#validateLegacyJWT,\n      );\n    } catch (e) {\n      if (isProtocolError(e)) {\n        this.#lc.warn?.(\n          'Rejecting sync connection during initial auth resolution',\n          {\n            clientGroupID,\n            clientID,\n            incomingUserID,\n            hasProvidedAuth,\n            errorKind: e.message,\n          },\n        );\n        recordConnectionFailure('auth');\n        sendError(this.#lc, ws, e.errorBody);\n        ws.close(3000, e.errorBody.message);\n        return;\n      }\n      recordConnectionFailure('internal');\n      throw e;\n    }\n\n    // Resolving auth can take a while (e.g. a remote JWKS fetch), during\n    // which the client may have disconnected. A Connection created for a\n    // closed socket never receives the 'close' event and is thus never\n    // cleaned up, leaking its timer, its registrations in the connection\n    // context manager and its refs on the mutagen and pusher services.\n    if (ws.readyState !== WebSocket.OPEN) {\n      this.#lc.debug?.('websocket closed while resolving auth', {\n        clientGroupID,\n        clientID,\n        readyState: ws.readyState,\n      });\n      recordConnectionFailure('closed_during_auth');\n      return;\n    }\n\n    const viewSyncer = this.#viewSyncers.getService(clientGroupID);\n    const connContextManager = viewSyncer.connContextManager;\n    const group = connContextManager.getGroupState();\n\n    // TODO(0xcadams): we only check for user ID mismatch here if the group is\n    // already validated. This prevents wrong-user reconnects from evicting a\n    // healthy connection, but it does not protect against same-user reconnects\n    // with an invalid opaque token. The long-term fix is to keep the replacement\n    // connection pending until its auth is fully validated, and only then replace\n    // the existing socket.\n    if (\n      group.pinnedUser !== undefined &&\n      group.pinnedUser.id !== incomingUserID\n    ) {\n      const error = new ProtocolError({\n        kind: ErrorKind.Unauthorized,\n        message:\n          'Client groups are pinned to a single userID. Connection userID does not match existing client group userID.',\n        origin: ErrorOrigin.ZeroCache,\n      });\n      recordConnectionFailure('user_mismatch');\n      sendError(this.#lc, ws, error.errorBody);\n      ws.close(3000, error.message);\n      return;\n    }\n\n    // Check for and close existing connections AFTER auth is validated\n    const existing = this.#connections.get(clientID);\n    if (existing) {\n      this.#lc.debug?.(\n        `client ${clientID} already connected, closing existing connection`,\n      );\n      existing.close(`replaced by ${params.wsID}`);\n    }\n\n    connContextManager.registerConnection(\n      {clientID, wsID: params.wsID},\n      params,\n      initialAuth,\n    );\n\n    const mutagen = this.#mutagens?.getService(clientGroupID);\n    const pusher = this.#pushers?.getService(clientGroupID);\n    // a new connection is using the mutagen and pusher. Bump their ref counts.\n    mutagen?.ref();\n    pusher?.ref();\n\n    let connection: Connection;\n    try {\n      connection = new Connection(\n        this.#lc,\n        params,\n        ws,\n        this.#config.allowLegacyQueries,\n        new SyncerWsMessageHandler(\n          this.#lc,\n          params,\n          connContextManager,\n          viewSyncer,\n          mutagen,\n          pusher,\n        ),\n        () => {\n          connContextManager.closeConnection({\n            clientID,\n            wsID: params.wsID,\n          });\n          if (this.#connections.get(clientID) === connection) {\n            this.#connections.delete(clientID);\n          }\n          // Connection is closed. We can unref the mutagen and pusher.\n          // If their ref counts are zero, they will stop themselves and set themselves invalid.\n          mutagen?.unref();\n          pusher?.unref();\n        },\n      );\n    } catch (e) {\n      recordConnectionFailure('internal');\n      connContextManager.closeConnection({clientID, wsID: params.wsID});\n      mutagen?.unref();\n      pusher?.unref();\n      throw e;\n    }\n\n    this.#connections.set(clientID, connection);\n\n    if (connection.init()) {\n      recordConnectionSuccessMetric();\n      recordConnectionSuccess();\n    } else {\n      recordConnectionFailure('protocol_version');\n    }\n\n    if (params.initConnectionMsg) {\n      this.#lc.debug?.(\n        'handling init connection message from sec header',\n        params.clientGroupID,\n        params.clientID,\n      );\n      await connection.handleInitConnection(\n        JSON.stringify(params.initConnectionMsg),\n      );\n    }\n  };\n\n  readonly #receiveConnection = async (\n    ws: WebSocket,\n    params: ConnectParams,\n  ) => {\n    try {\n      await this.#createConnection(ws, params);\n    } finally {\n      this.#releasePending(params.clientGroupID, params.generation);\n    }\n  };\n\n  #releasePending(clientGroupID: string, generation: number | undefined): void {\n    const remaining = (this.#pendingConnections.get(clientGroupID) ?? 1) - 1;\n    if (remaining <= 0) {\n      this.#pendingConnections.delete(clientGroupID);\n      if (!this.#viewSyncers.hasService(clientGroupID)) {\n        const gen =\n          this.#clientGroupGenerations.get(clientGroupID) ?? generation;\n        this.#parent.send<ClientGroupStatusMessage>([\n          'clientGroupStatus',\n          {\n            clientGroupID,\n            active: false,\n            ...(gen !== undefined ? {generation: gen} : {}),\n          },\n        ]);\n        this.#clientGroupGenerations.delete(clientGroupID);\n      }\n    } else {\n      this.#pendingConnections.set(clientGroupID, remaining);\n    }\n  }\n\n  run() {\n    return this.#stopped.promise;\n  }\n\n  /**\n   * Graceful shutdown involves shutting down view syncers one at a time, pausing\n   * for the duration of view syncer's hydration between each one. This paces the\n   * disconnects to avoid creating a backlog of hydrations in the receiving server\n   * when the clients reconnect.\n   */\n  async drain() {\n    const start = Date.now();\n    this.#lc.info?.(`draining ${this.#viewSyncers.size} view-syncers`);\n\n    this.#drainCoordinator.drainNextIn(0);\n\n    while (this.#viewSyncers.size) {\n      await this.#drainCoordinator.forceDrainTimeout;\n\n      // Pick an arbitrary view syncer to force drain.\n      for (const vs of this.#viewSyncers.getServices()) {\n        this.#lc.debug?.(`draining view-syncer ${vs.id} (forced)`);\n        // When this drain or an elective drain completes, the forceDrainTimeout will\n        // resolve after the next drain interval.\n        void vs.stop();\n        break;\n      }\n    }\n    this.#lc.info?.(`finished draining (${Date.now() - start} ms)`);\n  }\n\n  stop() {\n    clearInterval(this.#viewSyncerLagSampleInterval);\n    clearInterval(this.#eligibilityLogInterval);\n    this.#wss.close();\n    this.#stopped.resolve();\n    return promiseVoid;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4FA,SAAgB,0BACd,aACoB;CACpB,IAAI,cAAc;CAClB,IAAI,gBAAgB;CACpB,MAAM,+BAAe,IAAI,IAGvB;CACF,MAAM,iCAAiB,IAAI,IAAY;CACvC,MAAM,6BAAa,IAAI,IAAY;CACnC,IAAI,UAAU;CACd,KAAK,MAAM,MAAM,aAAa;EAC5B,MAAM,YAAY,GAAG;EACrB,IAAI,cAAc,KAAA,GAChB,WAAW,IAAI,SAAS;EAM1B,MAAM,iBAAiB,aAAa,MAAM;EAC1C;EACA,KAAK,MAAM,EACT,oBACA,UACA,eACG,GAAG,eAAe,GAAG;GAGxB,MAAM,MAAM,GAAG,eAAe,GAAG;GACjC,IAAI,UAAU;IACZ;IACA,eAAe,IAAI,GAAG;GACxB,OAAO;IACL;IACA,MAAM,QAAQ,aAAa,IAAI,GAAG;IAClC,IAAI,OACF,MAAM;SAEN,aAAa,IAAI,KAAK;KAAC,OAAO;KAAG;IAAS,CAAC;GAE/C;EACF;CACF;CACA,OAAO;EACL;EACA;EACA;EACA,gBAAgB,eAAe;EAC/B,eAAe,WAAW;CAC5B;AACF;AAEA,IAAa,2BAA2B;AACxC,IAAM,qCAAqC;AAC3C,IAAM,6CAA6C;AAEnD,IAAM,6BAA6B;AACnC,IAAM,2BAA2B;AAEjC,SAAS,wBACP,oBACM;CACN,IAAI,mBAAmB,SAAA,KACrB,mBAAmB,OACjB,GACA,mBAAmB,SAAS,wBAC9B;AAEJ;AAEA,SAAS,wBACP,oBACA,kBACM;CACN,IAAI,mBAAmB,GACrB,mBAAmB,OAAO,GAAG,gBAAgB;CAG/C,wBAAwB,kBAAkB;AAC5C;AAEA,SAAS,6BACP,oBACA,oBACQ;CACR,IAAI,MAAM;CACV,IAAI,OAAO,mBAAmB;CAC9B,OAAO,MAAM,MAAM;EACjB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO,OAAO,CAAC;EAC7C,IAAI,mBAAmB,IAAI,CAAC,qBAAqB,oBAC/C,MAAM,MAAM;OAEZ,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,oBACP,oBACA,WACQ;CACR,IAAI,MAAM;CACV,IAAI,OAAO,mBAAmB;CAC9B,OAAO,MAAM,MAAM;EACjB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO,OAAO,CAAC;EAC7C,IAAI,mBAAmB,IAAI,CAAC,aAAa,WACvC,MAAM,MAAM;OAEZ,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,uBACP,oBACA,YACQ;CACR,MAAM,0BAA0B,6BAC9B,oBACA,WAAW,WACb;CACA,MAAM,0BACJ,WAAW,kBAAkB,OACzB,IACA,oBAAoB,oBAAoB,WAAW,aAAa;CAEtE,MAAM,qBAAqB,KAAK,IAC9B,yBACA,uBACF;CACA,OAAO,qBAAqB,mBAAmB,SAC3C,qBACA;AACN;AAEA,SAAS,sBACP,cACA,YACQ;CACR,IAAI,aAAa,WAAW,GAC1B,OAAO;CAMT,OAAO,aAJO,KAAK,IACjB,aAAa,SAAS,GACtB,KAAK,IAAI,GAAG,KAAK,KAAM,aAAa,MAAO,aAAa,MAAM,IAAI,CAAC,CAEjD;AACtB;AAEA,SAAS,gCACP,KACA,oBACA,aACwB;CACxB,MAAM,OAAiB,CAAC;CACxB,IAAI,sBAAsB;CAC1B,IAAI,mBAAmB,mBAAmB;CAE1C,KAAK,MAAM,cAAc,aAAa;EACpC,IAAI,CAAC,WAAW,oBACd;EAGF,MAAM,qBAAqB,uBACzB,oBACA,UACF;EACA,IAAI,uBAAuB,IAAI;GAC7B,KAAK,KAAK,CAAC;GACX;EACF;EAEA,mBAAmB,KAAK,IAAI,kBAAkB,kBAAkB;EAChE,MAAM,QAAQ,KAAK,IACjB,GACA,MAAM,mBAAmB,mBAAmB,CAAC,kBAC/C;EACA,KAAK,KAAK,KAAK;EACf,IAAI,QAAQ,GACV;CAEJ;CAEA,wBAAwB,oBAAoB,gBAAgB;CAE5D,KAAK,MAAM,GAAG,MAAM,IAAI,CAAC;CACzB,OAAO;EACL,oBAAoB,KAAK;EACzB;EAIA,OAAO,KAAK,MAAM;EAClB,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,KAAK,GAAG,EAAE,KAAK;EACtB,QAAQ;CACV;AACF;AA+BA,SAAS,0BAA0B,QAAmC;CACpE,MAAM,UAAyB;EAC7B,UAAU;EACV,YAAY,OAAO;CACrB;CAEA,IAAI,OAAO,sBAAsB;EAC/B,QAAQ,oBAAoB;EAE5B,IAAI,OAAO,6BACT,IAAI;GAIF,QAAQ,oBAHmB,KAAK,MAC9B,OAAO,2BAEmB;EAC9B,SAAS,GAAG;GACV,MAAM,IAAI,MACR,uDAAuD,OAAO,CAAC,EAAE,uBACnE;EACF;CAEJ;CAEA,OAAO;AACT;;;;;;;;AASA,IAAa,SAAb,MAAgD;CAC9C,KAAc,UAAU;CACxB;CACA;CACA;CACA;CACA,+BAAwB,IAAI,IAAwB;CACpD,sCAA+B,IAAI,IAAoB;CACvD,0CAAmC,IAAI,IAAoB;CAC3D,oBAA6B,IAAI,iBAAiB;CAClD;CACA;CACA,WAAoB,SAAS;CAC7B;CACA;CACA,sBAAoD,CAAC;CACrD,4BAAqC,yBACnC,QACA,8BACA,oCACF;CACA,+BAAwC,mBACtC,QACA,iCACA,uCACF;CACA,gCAAyC,mBACvC,QACA,kCACA,wDACF;CACA,+BAAwC,mBACtC,QACA,iCACA,yEACF;CACA,iBAA0B,2BACxB,QACA,mBACA;EACE,aACE;EAGF,MAAM;CACR,CACF;CACA;CACA,0CAA0C;CAC1C;CACA;CAEA,YACE,IACA,QACA,mBAKA,gBACA,eAMA,QACA,mBACA;EACA,KAAK,UAAU;EACf,KAAK,qBAAqB;EAG1B,MAAM,WAAW,mBAAmB,IAAI,SAAQ,UAC9C,KAAK,yBAAyB,KAAK,CACrC;EACA,YAAY,IAAI,MAAM;EAEtB,KAAK,MAAM;EACX,KAAK,UAAU;EACf,KAAK,eAAe,IAAI,cACtB,KACA,OAAM,kBAAkB,IAAI,SAAS,UAAU,GAAG,KAAK,iBAAiB,IACxE,MAAK,EAAE,UAAU,IACjB,OAAM;GACJ,KAAK,KAAK,oBAAoB,IAAI,EAAE,KAAK,OAAO,GAAG;IACjD,MAAM,aAAa,KAAK,wBAAwB,IAAI,EAAE;IACtD,KAAK,QAAQ,KAA+B,CAC1C,qBACA;KACE,eAAe;KACf,QAAQ;KACR,GAAI,eAAe,KAAA,IAAY,EAAC,WAAU,IAAI,CAAC;IACjD,CACF,CAAC;IACD,KAAK,wBAAwB,OAAO,EAAE;GACxC;EACF,CACF;EACA,IAAI,gBACF,KAAK,YAAY,IAAI,cAAc,IAAI,iBAAgB,MAAK,EAAE,QAAQ,CAAC;EAEzE,IAAI,eACF,KAAK,WAAW,IAAI,cAClB,KACA,OACE,cACE,IACA,KAAK,aAAa,WAAW,EAAE,CAAC,CAAC,kBACnC,IACF,MAAK,EAAE,QAAQ,CACjB;EAEF,KAAK,OAAO,IAAI,gBAAgB,0BAA0B,MAAM,CAAC;EAEjE,yBACE,IACA,KAAK,MACL,KAAK,oBACL,KAAK,UACL,WAAU;GACR,KAAK,gBAAgB,OAAO,eAAe,OAAO,UAAU;EAC9D,IACA,WAAU;GACR,KAAK,oBAAoB,IACvB,OAAO,gBACN,KAAK,oBAAoB,IAAI,OAAO,aAAa,KAAK,KAAK,CAC9D;GACA,IAAI,OAAO,eAAe,KAAA,GAAW;IACnC,MAAM,UAAU,KAAK,wBAAwB,IAC3C,OAAO,aACT;IACA,IAAI,YAAY,KAAA,KAAa,OAAO,aAAa,SAC/C,KAAK,wBAAwB,IAC3B,OAAO,eACP,OAAO,UACT;GAEJ;EACF,CACF;EAEA,kCAAkC,KAAK,aAAa,IAAI;EAExD,iBACE,QACA,wBACA,gCACF,CAAC,CAAC,aAAY,WAAU,OAAO,QAAQ,KAAK,aAAa,IAAI,CAAC;EAE9D,iBACE,QACA,WACA,qDACF,CAAC,CAAC,aAAY,WAAU;GACtB,IAAI,QAAQ;GACZ,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAC7C,SAAS,GAAG;GAEd,OAAO,QAAQ,KAAK;EACtB,CAAC;EAED,iBACE,QACA,QACA,uCACF,CAAC,CAAC,aAAY,WAAU;GACtB,IAAI,QAAQ;GACZ,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAC7C,SAAS,GAAG;GAEd,OAAO,QAAQ,KAAK;EACtB,CAAC;EAED,iBAAiB,QAAQ,eAAe;GACtC,aACE;GAGF,MAAM;EACR,CAAC,CAAC,CAAC,aAAY,WAAU;GACvB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC,KAAK;EAC5D,CAAC;EAED,iBAAiB,QAAQ,qBAAqB;GAC5C,aACE;GAGF,MAAM;EACR,CAAC,CAAC,CAAC,aAAY,WAAU;GACvB,MAAM,QAAQ,KAAK,+BAA+B;GAClD,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;EAC3C,CAAC;EAED,iBACE,QACA,iCACA,8DACF,CAAC,CAAC,aAAY,WAAU;GACtB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC,mBAAmB;EAC1E,CAAC;EAED,iBACE,QACA,mBACA,0KAGF,CAAC,CAAC,aAAY,WAAU;GACtB,MAAM,QAAQ,KAAK,2BAA2B;GAC9C,OAAO,QAAQ,MAAM,aAAa,EAAC,MAAM,SAAQ,CAAC;GAClD,OAAO,QAAQ,MAAM,eAAe,EAAC,MAAM,WAAU,CAAC;EACxD,CAAC;EAED,iBACE,QACA,oBACA,8GAEF,CAAC,CAAC,aAAY,WAAU;GACtB,MAAM,QAAQ,KAAK,2BAA2B;GAC9C,OAAO,QAAQ,MAAM,aAAa,MAAM,EAAC,MAAM,SAAQ,CAAC;GACxD,OAAO,QAAQ,MAAM,gBAAgB,EAAC,MAAM,WAAU,CAAC;EACzD,CAAC;EAED,iBACE,QACA,kBACA,iEACF,CAAC,CAAC,aAAY,WAAU;GACtB,OAAO,QAAQ,KAAK,2BAA2B,CAAC,CAAC,aAAa;EAChE,CAAC;EAED,KAAK,+BAA+B,kBAC5B,KAAK,4BAA4B,GACvC,kCACF;EACA,KAAK,6BAA6B,QAAQ;EAE1C,KAAK,0BAA0B,kBACvB,KAAK,6BAA6B,GACxC,0CACF;EACA,KAAK,wBAAwB,QAAQ;CACvC;CAEA,iCAAyD;EACvD,IAAI,KAAK,8BACP,OAAO,KAAK;EAGd,MAAM,eAAe,gCACnB,KAAK,IAAI,GACT,KAAK,qBACL,KAAK,aAAa,YAAY,CAChC;EACA,KAAK,+BAA+B;EACpC,IAAI,CAAC,KAAK,yCAAyC;GACjD,KAAK,0CAA0C;GAC/C,qBAAqB;IACnB,KAAK,+BAA+B,KAAA;IACpC,KAAK,0CAA0C;GACjD,CAAC;EACH;EACA,OAAO;CACT;CAEA,8BAAoC;EAClC,MAAM,EAAC,WAAU,KAAK,+BAA+B;EACrD,KAAK,MAAM,SAAS,QAClB,KAAK,eAAe,SAAS,KAAK;CAEtC;CAEA,6BAAiD;EAC/C,OAAO,0BAA0B,KAAK,aAAa,YAAY,CAAC;CAClE;CAEA,+BAAqC;EACnC,MAAM,QAAQ,KAAK,2BAA2B;EAC9C,IAAI,MAAM,gBAAgB,GACxB;EAEF,MAAM,SAAS,MAAM,aAAa;EAClC,MAAM,gBAAgB,CAAC,GAAG,MAAM,aAAa,QAAQ,CAAC,CAAC,CACpD,QAAQ,GAAG,EAAC,aAAY,QAAQ,CAAC,CAAC,CAClC,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CACvC,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,CAAC,KAAK,EAAC,OAAO,kBAAiB;GAAC;GAAK;GAAO;EAAS,EAAE;EAC/D,KAAK,IAAI,OAAO,8BAA8B;GAC5C,iBAAiB,MAAM;GACvB,uBAAuB;GACvB,aAAa,QAAQ,MAAM,cAAc,KAAK,IAAI,QAAQ,CAAC,EAAA,CAAG,QAAQ,CAAC,CAAC;GACxE,mBAAmB,MAAM;GACzB,eAAe,MAAM;GACrB;EACF,CAAC;CACH;CAEA,yBAAyB,OAA2B;EAClD,IACE,MAAM,cAAc,KAAA,KACpB,MAAM,uBAAuB,KAAA,GAE7B;EAEF,MAAM,OAAO,KAAK,oBAAoB,GAAG,EAAE;EAC3C,IAAI,QAAQ,KAAK,aAAa,MAAM,WAClC;EAEF,KAAK,oBAAoB,KAAK;GAC5B,WAAW,MAAM;GACjB,oBAAoB,MAAM;EAC5B,CAAC;EACD,IAAI,KAAK,aAAa,SAAS,GAAG;GAChC,KAAK,oBAAoB,SAAS;GAClC;EACF;EACA,wBAAwB,KAAK,mBAAmB;CAClD;CAEA,oBAA6B,OAAO,IAAe,WAA0B;EAC3E,MAAM,mBAAmB,GACtB,6BAA6B,OAAO,gBACvC;EACA,IAAI,2BAA2B;EAC/B,MAAM,2BAA2B,WAAmB;GAClD,IAAI,0BACF;GAEF,2BAA2B;GAC3B,KAAK,6BAA6B,IAAI,GAAG;IACvC,GAAG;KACF,2BAA2B;GAC9B,CAAC;EACH;EACA,MAAM,sCAAsC;GAC1C,IAAI,0BACF;GAEF,2BAA2B;GAC3B,KAAK,8BAA8B,IAAI,GAAG,gBAAgB;EAC5D;EAEA,KAAK,6BAA6B,IAAI,GAAG,gBAAgB;EACzD,KAAK,0BAA0B,IAAI,GAAG,gBAAgB;EACtD,GAAG,KAAK,eAAe;GACrB,KAAK,0BAA0B,IAAI,IAAI,gBAAgB;EACzD,CAAC;EAED,KAAK,IAAI,QACP,uBACA,OAAO,eACP,OAAO,QACT;EACA,0BAA0B;EAC1B,MAAM,EAAC,UAAU,eAAe,MAAM,WAAU;EAChD,MAAM,kBAAkB,SAAS,KAAA,KAAa,SAAS;EACvD,MAAM,iBAAiB,UAAU;EAEjC,IAAI,iBAAiB;GACnB,MAAM,eAAe,mBAAmB,KAAK,QAAQ,QAAQ,CAAC,CAAC;GAE/D,MAAM,kBACJ,KAAK,SAAS,MAAM,QAAQ,KAAA,KAC5B,KAAK,SAAS,QAAQ,QAAQ,KAAA;GAChC,MAAM,aACJ,KAAK,SAAS,OAAO,QAAQ,KAAA,KAC7B,KAAK,SAAS,YAAY,QAAQ,KAAA;GAKpC,IAAI,EAF6B,aAAa,WAAW,MAExB,EADN,mBAAmB,aACQ;IACpD,wBAAwB,eAAe;IACvC,MAAM,IAAI,MACR,uHACE,KAAK,UAAU,YAAY,IAC3B,+IACJ;GACF;EACF;EAEA,IAAI;EAIJ,IAAI;GACF,cAAc,MAAM,YAClB,KAAK,IACF,YAAY,iBAAiB,aAAa,CAAC,CAC3C,YAAY,YAAY,QAAQ,GAGnC,KAAA,GACA,gBACA,MACA,KAAK,kBACP;EACF,SAAS,GAAG;GACV,IAAI,gBAAgB,CAAC,GAAG;IACtB,KAAK,IAAI,OACP,4DACA;KACE;KACA;KACA;KACA;KACA,WAAW,EAAE;IACf,CACF;IACA,wBAAwB,MAAM;IAC9B,UAAU,KAAK,KAAK,IAAI,EAAE,SAAS;IACnC,GAAG,MAAM,KAAM,EAAE,UAAU,OAAO;IAClC;GACF;GACA,wBAAwB,UAAU;GAClC,MAAM;EACR;EAOA,IAAI,GAAG,eAAe,UAAU,MAAM;GACpC,KAAK,IAAI,QAAQ,yCAAyC;IACxD;IACA;IACA,YAAY,GAAG;GACjB,CAAC;GACD,wBAAwB,oBAAoB;GAC5C;EACF;EAEA,MAAM,aAAa,KAAK,aAAa,WAAW,aAAa;EAC7D,MAAM,qBAAqB,WAAW;EACtC,MAAM,QAAQ,mBAAmB,cAAc;EAQ/C,IACE,MAAM,eAAe,KAAA,KACrB,MAAM,WAAW,OAAO,gBACxB;GACA,MAAM,QAAQ,IAAI,cAAc;IAC9B,MAAMA;IACN,SACE;IACF,QAAQC;GACV,CAAC;GACD,wBAAwB,eAAe;GACvC,UAAU,KAAK,KAAK,IAAI,MAAM,SAAS;GACvC,GAAG,MAAM,KAAM,MAAM,OAAO;GAC5B;EACF;EAGA,MAAM,WAAW,KAAK,aAAa,IAAI,QAAQ;EAC/C,IAAI,UAAU;GACZ,KAAK,IAAI,QACP,UAAU,SAAS,gDACrB;GACA,SAAS,MAAM,eAAe,OAAO,MAAM;EAC7C;EAEA,mBAAmB,mBACjB;GAAC;GAAU,MAAM,OAAO;EAAI,GAC5B,QACA,WACF;EAEA,MAAM,UAAU,KAAK,WAAW,WAAW,aAAa;EACxD,MAAM,SAAS,KAAK,UAAU,WAAW,aAAa;EAEtD,SAAS,IAAI;EACb,QAAQ,IAAI;EAEZ,IAAI;EACJ,IAAI;GACF,aAAa,IAAI,WACf,KAAK,KACL,QACA,IACA,KAAK,QAAQ,oBACb,IAAI,uBACF,KAAK,KACL,QACA,oBACA,YACA,SACA,MACF,SACM;IACJ,mBAAmB,gBAAgB;KACjC;KACA,MAAM,OAAO;IACf,CAAC;IACD,IAAI,KAAK,aAAa,IAAI,QAAQ,MAAM,YACtC,KAAK,aAAa,OAAO,QAAQ;IAInC,SAAS,MAAM;IACf,QAAQ,MAAM;GAChB,CACF;EACF,SAAS,GAAG;GACV,wBAAwB,UAAU;GAClC,mBAAmB,gBAAgB;IAAC;IAAU,MAAM,OAAO;GAAI,CAAC;GAChE,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,MAAM;EACR;EAEA,KAAK,aAAa,IAAI,UAAU,UAAU;EAE1C,IAAI,WAAW,KAAK,GAAG;GACrB,8BAA8B;GAC9B,wBAAwB;EAC1B,OACE,wBAAwB,kBAAkB;EAG5C,IAAI,OAAO,mBAAmB;GAC5B,KAAK,IAAI,QACP,oDACA,OAAO,eACP,OAAO,QACT;GACA,MAAM,WAAW,qBACf,KAAK,UAAU,OAAO,iBAAiB,CACzC;EACF;CACF;CAEA,qBAA8B,OAC5B,IACA,WACG;EACH,IAAI;GACF,MAAM,KAAK,kBAAkB,IAAI,MAAM;EACzC,UAAU;GACR,KAAK,gBAAgB,OAAO,eAAe,OAAO,UAAU;EAC9D;CACF;CAEA,gBAAgB,eAAuB,YAAsC;EAC3E,MAAM,aAAa,KAAK,oBAAoB,IAAI,aAAa,KAAK,KAAK;EACvE,IAAI,aAAa,GAAG;GAClB,KAAK,oBAAoB,OAAO,aAAa;GAC7C,IAAI,CAAC,KAAK,aAAa,WAAW,aAAa,GAAG;IAChD,MAAM,MACJ,KAAK,wBAAwB,IAAI,aAAa,KAAK;IACrD,KAAK,QAAQ,KAA+B,CAC1C,qBACA;KACE;KACA,QAAQ;KACR,GAAI,QAAQ,KAAA,IAAY,EAAC,YAAY,IAAG,IAAI,CAAC;IAC/C,CACF,CAAC;IACD,KAAK,wBAAwB,OAAO,aAAa;GACnD;EACF,OACE,KAAK,oBAAoB,IAAI,eAAe,SAAS;CAEzD;CAEA,MAAM;EACJ,OAAO,KAAK,SAAS;CACvB;;;;;;;CAQA,MAAM,QAAQ;EACZ,MAAM,QAAQ,KAAK,IAAI;EACvB,KAAK,IAAI,OAAO,YAAY,KAAK,aAAa,KAAK,cAAc;EAEjE,KAAK,kBAAkB,YAAY,CAAC;EAEpC,OAAO,KAAK,aAAa,MAAM;GAC7B,MAAM,KAAK,kBAAkB;GAG7B,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAAG;IAChD,KAAK,IAAI,QAAQ,wBAAwB,GAAG,GAAG,UAAU;IAGzD,GAAQ,KAAK;IACb;GACF;EACF;EACA,KAAK,IAAI,OAAO,sBAAsB,KAAK,IAAI,IAAI,MAAM,KAAK;CAChE;CAEA,OAAO;EACL,cAAc,KAAK,4BAA4B;EAC/C,cAAc,KAAK,uBAAuB;EAC1C,KAAK,KAAK,MAAM;EAChB,KAAK,SAAS,QAAQ;EACtB,OAAO;CACT;AACF"}
+{"version":3,"file":"syncer.js","names":["ErrorKind.Unauthorized","ErrorOrigin.ZeroCache"],"sources":["../../../../../zero-cache/src/workers/syncer.ts"],"sourcesContent":["import {pid} from 'node:process';\nimport type {MessagePort} from 'node:worker_threads';\nimport type {LogContext} from '@rocicorp/logger';\nimport {resolver} from '@rocicorp/resolver';\nimport {WebSocket, WebSocketServer, type ServerOptions} from 'ws';\nimport {promiseVoid} from '../../../shared/src/resolved-promises.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport {\n  isProtocolError,\n  ProtocolError,\n} from '../../../zero-protocol/src/error.ts';\nimport {resolveAuth, type Auth, type ValidateLegacyJWT} from '../auth/auth.ts';\nimport {tokenConfigOptions} from '../auth/jwt.ts';\nimport {type ZeroConfig} from '../config/zero-config.ts';\nimport {\n  getOrCreateCounter,\n  getOrCreateGauge,\n  getOrCreateNativeHistogram,\n  getOrCreateUpDownCounter,\n} from '../observability/metrics.ts';\nimport {\n  recordConnectionAttempted,\n  recordConnectionSuccess,\n  setActiveClientGroupsGetter,\n} from '../server/anonymous-otel-start.ts';\nimport type {Mutagen} from '../services/mutagen/mutagen.ts';\nimport type {Pusher} from '../services/mutagen/pusher.ts';\nimport type {ReplicaState} from '../services/replicator/replicator.ts';\nimport {ServiceRunner} from '../services/runner.ts';\nimport type {\n  ActivityBasedService,\n  Service,\n  SingletonService,\n} from '../services/service.ts';\nimport type {ConnectionContextManager} from '../services/view-syncer/connection-context-manager.ts';\nimport {DrainCoordinator} from '../services/view-syncer/drain-coordinator.ts';\nimport type {ViewSyncer} from '../services/view-syncer/view-syncer.ts';\nimport {clientGroupLogID} from '../types/client-group-log-id.ts';\nimport type {ClientGroupStatusMessage, Worker} from '../types/processes.ts';\nimport type {Subscription} from '../types/subscription.ts';\nimport {installWebSocketReceiver} from '../types/websocket-handoff.ts';\nimport type {ConnectParams} from './connect-params.ts';\nimport {Connection, sendError} from './connection.ts';\nimport {createNotifierFrom, subscribeTo} from './replicator.ts';\nimport {SyncerWsMessageHandler} from './syncer-ws-message-handler.ts';\n\nexport type SyncerWorkerData = {\n  replicatorPort: MessagePort;\n};\n\nexport type ReplicaReadyState = {\n  readonly watermark: string;\n  readonly replicaReadyTimeMs: number;\n};\n\nexport type ServingLagViewSyncer = Pick<\n  ViewSyncer,\n  'createdAtMs' | 'servedVersion' | 'servingLagEligible'\n>;\n\nexport type ServingLagStats = {\n  readonly activeClientGroups: number;\n  readonly laggingClientGroups: number;\n  readonly minMs: number;\n  readonly p50Ms: number;\n  readonly p75Ms: number;\n  readonly p99Ms: number;\n  readonly maxMs: number;\n};\n\ntype ServingLagDistribution = ServingLagStats & {\n  readonly lagsMs: readonly number[];\n};\n\nexport type PipelineDedupViewSyncer = Pick<\n  ViewSyncer,\n  'pipelineHashes' | 'clientSchemaKey'\n>;\n\nexport type PipelineDedupStats = {\n  readonly clientTotal: number;\n  readonly internalTotal: number;\n  // (clientSchemaKey, transformationHash) -> occurrence count across client\n  // groups, for client/custom queries.\n  readonly clientHashes: ReadonlyMap<\n    string,\n    {count: number; queryName: string | undefined}\n  >;\n  readonly internalUnique: number;\n  readonly clientSchemas: number;\n};\n\nexport function computePipelineDedupStats(\n  viewSyncers: Iterable<PipelineDedupViewSyncer>,\n): PipelineDedupStats {\n  let clientTotal = 0;\n  let internalTotal = 0;\n  const clientHashes = new Map<\n    string,\n    {count: number; queryName: string | undefined}\n  >();\n  const internalHashes = new Set<string>();\n  const schemaKeys = new Set<string>();\n  let vsIndex = 0;\n  for (const vs of viewSyncers) {\n    const schemaKey = vs.clientSchemaKey;\n    if (schemaKey !== undefined) {\n      schemaKeys.add(schemaKey);\n    }\n    // Without a client schema the pipeline's dedup identity is unknown, so key\n    // it uniquely per view-syncer; otherwise schema-less pipelines from\n    // unrelated client groups would collapse under a shared `undefined/<hash>`\n    // key and overstate deduplication.\n    const dedupSchemaKey = schemaKey ?? `#vs${vsIndex}`;\n    vsIndex++;\n    for (const {\n      transformationHash,\n      internal,\n      queryName,\n    } of vs.pipelineHashes()) {\n      // Pipelines only share when both the client schema (which determines\n      // row keys) and the transformed AST are identical.\n      const key = `${dedupSchemaKey}/${transformationHash}`;\n      if (internal) {\n        internalTotal++;\n        internalHashes.add(key);\n      } else {\n        clientTotal++;\n        const entry = clientHashes.get(key);\n        if (entry) {\n          entry.count++;\n        } else {\n          clientHashes.set(key, {count: 1, queryName});\n        }\n      }\n    }\n  }\n  return {\n    clientTotal,\n    internalTotal,\n    clientHashes,\n    internalUnique: internalHashes.size,\n    clientSchemas: schemaKeys.size,\n  };\n}\n\nexport const MAX_REPLICA_READY_STATES = 10_000;\nconst VIEW_SYNCER_LAG_SAMPLE_INTERVAL_MS = 60_000;\nconst SHARED_ADVANCE_ELIGIBILITY_LOG_INTERVAL_MS = 5 * 60_000;\n\nconst PROTOCOL_VERSION_ATTRIBUTE = 'protocol.version';\nconst FAILURE_REASON_ATTRIBUTE = 'reason';\n\nfunction boundReplicaReadyStates(\n  replicaReadyStates: ReplicaReadyState[],\n): void {\n  if (replicaReadyStates.length > MAX_REPLICA_READY_STATES) {\n    replicaReadyStates.splice(\n      0,\n      replicaReadyStates.length - MAX_REPLICA_READY_STATES,\n    );\n  }\n}\n\nfunction pruneReplicaReadyStates(\n  replicaReadyStates: ReplicaReadyState[],\n  firstNeededIndex: number,\n): void {\n  if (firstNeededIndex > 0) {\n    replicaReadyStates.splice(0, firstNeededIndex);\n  }\n\n  boundReplicaReadyStates(replicaReadyStates);\n}\n\nfunction lowerBoundReplicaReadyTimeMs(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  replicaReadyTimeMs: number,\n): number {\n  let low = 0;\n  let high = replicaReadyStates.length;\n  while (low < high) {\n    const mid = low + Math.floor((high - low) / 2);\n    if (replicaReadyStates[mid].replicaReadyTimeMs < replicaReadyTimeMs) {\n      low = mid + 1;\n    } else {\n      high = mid;\n    }\n  }\n  return low;\n}\n\nfunction upperBoundWatermark(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  watermark: string,\n): number {\n  let low = 0;\n  let high = replicaReadyStates.length;\n  while (low < high) {\n    const mid = low + Math.floor((high - low) / 2);\n    if (replicaReadyStates[mid].watermark <= watermark) {\n      low = mid + 1;\n    } else {\n      high = mid;\n    }\n  }\n  return low;\n}\n\nfunction findFirstUnservedIndex(\n  replicaReadyStates: readonly ReplicaReadyState[],\n  viewSyncer: ServingLagViewSyncer,\n): number {\n  const firstReadyAfterCreation = lowerBoundReplicaReadyTimeMs(\n    replicaReadyStates,\n    viewSyncer.createdAtMs,\n  );\n  const firstAfterServedVersion =\n    viewSyncer.servedVersion === null\n      ? 0\n      : upperBoundWatermark(replicaReadyStates, viewSyncer.servedVersion);\n\n  const firstUnservedIndex = Math.max(\n    firstReadyAfterCreation,\n    firstAfterServedVersion,\n  );\n  return firstUnservedIndex < replicaReadyStates.length\n    ? firstUnservedIndex\n    : -1;\n}\n\nfunction percentileNearestRank(\n  sortedValues: readonly number[],\n  percentile: number,\n): number {\n  if (sortedValues.length === 0) {\n    return 0;\n  }\n  const index = Math.min(\n    sortedValues.length - 1,\n    Math.max(0, Math.ceil((percentile / 100) * sortedValues.length) - 1),\n  );\n  return sortedValues[index];\n}\n\nfunction computeServingLagDistributionMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): ServingLagDistribution {\n  const lags: number[] = [];\n  let laggingClientGroups = 0;\n  let firstNeededIndex = replicaReadyStates.length;\n\n  for (const viewSyncer of viewSyncers) {\n    if (!viewSyncer.servingLagEligible) {\n      continue;\n    }\n\n    const firstUnservedIndex = findFirstUnservedIndex(\n      replicaReadyStates,\n      viewSyncer,\n    );\n    if (firstUnservedIndex === -1) {\n      lags.push(0);\n      continue;\n    }\n\n    firstNeededIndex = Math.min(firstNeededIndex, firstUnservedIndex);\n    const lagMs = Math.max(\n      0,\n      now - replicaReadyStates[firstUnservedIndex].replicaReadyTimeMs,\n    );\n    lags.push(lagMs);\n    if (lagMs > 0) {\n      laggingClientGroups++;\n    }\n  }\n\n  pruneReplicaReadyStates(replicaReadyStates, firstNeededIndex);\n\n  lags.sort((a, b) => a - b);\n  return {\n    activeClientGroups: lags.length,\n    laggingClientGroups,\n    // The percentile fields are for the legacy serving_lag_stats gauge.\n    // The native view_syncer_lag histogram records lagsMs and computes\n    // percentiles in Prometheus/AMP.\n    minMs: lags[0] ?? 0,\n    p50Ms: percentileNearestRank(lags, 50),\n    p75Ms: percentileNearestRank(lags, 75),\n    p99Ms: percentileNearestRank(lags, 99),\n    maxMs: lags.at(-1) ?? 0,\n    lagsMs: lags,\n  };\n}\n\nexport function computeServingLagStatsMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): ServingLagStats {\n  const distribution = computeServingLagDistributionMs(\n    now,\n    replicaReadyStates,\n    viewSyncers,\n  );\n  return {\n    activeClientGroups: distribution.activeClientGroups,\n    laggingClientGroups: distribution.laggingClientGroups,\n    minMs: distribution.minMs,\n    p50Ms: distribution.p50Ms,\n    p75Ms: distribution.p75Ms,\n    p99Ms: distribution.p99Ms,\n    maxMs: distribution.maxMs,\n  };\n}\n\nexport function computeMaxServingLagMs(\n  now: number,\n  replicaReadyStates: ReplicaReadyState[],\n  viewSyncers: Iterable<ServingLagViewSyncer>,\n): number {\n  return computeServingLagStatsMs(now, replicaReadyStates, viewSyncers).maxMs;\n}\n\nfunction getWebSocketServerOptions(config: ZeroConfig): ServerOptions {\n  const options: ServerOptions = {\n    noServer: true,\n    maxPayload: config.websocketMaxPayloadBytes,\n  };\n\n  if (config.websocketCompression) {\n    options.perMessageDeflate = true;\n\n    if (config.websocketCompressionOptions) {\n      try {\n        const compressionOptions = JSON.parse(\n          config.websocketCompressionOptions,\n        );\n        options.perMessageDeflate = compressionOptions;\n      } catch (e) {\n        throw new Error(\n          `Failed to parse ZERO_WEBSOCKET_COMPRESSION_OPTIONS: ${String(e)}. Expected valid JSON.`,\n        );\n      }\n    }\n  }\n\n  return options;\n}\n\n/**\n * The Syncer worker receives websocket handoffs for \"/sync\" connections\n * from the Dispatcher in the main thread, and creates websocket\n * {@link Connection}s with a corresponding {@link ViewSyncer}, {@link Mutagen},\n * and {@link Subscription} to version notifications from the Replicator\n * worker.\n */\nexport class Syncer implements SingletonService {\n  readonly id = `syncer-${pid}`;\n  readonly #lc: LogContext;\n  readonly #viewSyncers: ServiceRunner<ViewSyncer & ActivityBasedService>;\n  readonly #mutagens: ServiceRunner<Mutagen & Service> | undefined;\n  readonly #pushers: ServiceRunner<Pusher & Service> | undefined;\n  readonly #connections = new Map<string, Connection>();\n  readonly #pendingConnections = new Map<string, number>();\n  readonly #clientGroupGenerations = new Map<string, number>();\n  readonly #drainCoordinator = new DrainCoordinator();\n  readonly #parent: Worker;\n  readonly #wss: WebSocketServer;\n  readonly #stopped = resolver();\n  readonly #config: ZeroConfig;\n  readonly #validateLegacyJWT: ValidateLegacyJWT | undefined;\n  readonly #replicaReadyStates: ReplicaReadyState[] = [];\n  readonly #webSocketOpenConnections = getOrCreateUpDownCounter(\n    'sync',\n    'websocket.open_connections',\n    'Open client WebSocket connections.',\n  );\n  readonly #webSocketConnectionAttempts = getOrCreateCounter(\n    'sync',\n    'websocket.connection_attempts',\n    'Client WebSocket connection attempts.',\n  );\n  readonly #webSocketConnectionSuccesses = getOrCreateCounter(\n    'sync',\n    'websocket.connection_successes',\n    'Client WebSocket connections successfully initialized.',\n  );\n  readonly #webSocketConnectionFailures = getOrCreateCounter(\n    'sync',\n    'websocket.connection_failures',\n    'Client WebSocket connection attempts that failed before initialization.',\n  );\n  readonly #viewSyncerLag = getOrCreateNativeHistogram(\n    'sync',\n    'view_syncer_lag',\n    {\n      description:\n        'Lag from replica-ready change to ViewSyncer output for active ' +\n        'client groups. A change is output after IVM advancement, CVR flush, ' +\n        'and pokeEnd.',\n      unit: 's',\n    },\n  );\n  #servingLagDistributionCache: ServingLagDistribution | undefined;\n  #servingLagDistributionCacheClearQueued = false;\n  #viewSyncerLagSampleInterval: ReturnType<typeof setInterval> | undefined;\n  #eligibilityLogInterval: ReturnType<typeof setInterval> | undefined;\n\n  constructor(\n    lc: LogContext,\n    config: ZeroConfig,\n    viewSyncerFactory: (\n      id: string,\n      sub: Subscription<ReplicaState>,\n      drainCoordinator: DrainCoordinator,\n    ) => ViewSyncer & ActivityBasedService,\n    mutagenFactory: ((id: string) => Mutagen & Service) | undefined,\n    pusherFactory:\n      | ((\n          id: string,\n          connContextManager: ConnectionContextManager,\n        ) => Pusher & Service)\n      | undefined,\n    parent: Worker,\n    validateLegacyJWT: ValidateLegacyJWT | undefined,\n  ) {\n    this.#config = config;\n    this.#validateLegacyJWT = validateLegacyJWT;\n    // Relays notifications from the parent thread subscription\n    // to ViewSyncers within this thread.\n    const notifier = createNotifierFrom(lc, parent, state =>\n      this.#recordReplicaReadyState(state),\n    );\n    subscribeTo(lc, parent);\n\n    this.#lc = lc;\n    this.#parent = parent;\n    this.#viewSyncers = new ServiceRunner(\n      lc,\n      id => viewSyncerFactory(id, notifier.subscribe(), this.#drainCoordinator),\n      v => v.keepalive(),\n      id => {\n        if ((this.#pendingConnections.get(id) ?? 0) === 0) {\n          const generation = this.#clientGroupGenerations.get(id);\n          this.#parent.send<ClientGroupStatusMessage>([\n            'clientGroupStatus',\n            {\n              clientGroupID: id,\n              active: false,\n              ...(generation !== undefined ? {generation} : {}),\n            },\n          ]);\n          this.#clientGroupGenerations.delete(id);\n        }\n      },\n    );\n    if (mutagenFactory) {\n      this.#mutagens = new ServiceRunner(lc, mutagenFactory, m => m.hasRefs());\n    }\n    if (pusherFactory) {\n      this.#pushers = new ServiceRunner(\n        lc,\n        id =>\n          pusherFactory(\n            id,\n            this.#viewSyncers.getService(id).connContextManager,\n          ),\n        p => p.hasRefs(),\n      );\n    }\n    this.#wss = new WebSocketServer(getWebSocketServerOptions(config));\n\n    installWebSocketReceiver(\n      lc,\n      this.#wss,\n      this.#receiveConnection,\n      this.#parent,\n      params => {\n        this.#releasePending(params.clientGroupID, params.generation);\n      },\n      params => {\n        this.#pendingConnections.set(\n          params.clientGroupID,\n          (this.#pendingConnections.get(params.clientGroupID) ?? 0) + 1,\n        );\n        if (params.generation !== undefined) {\n          const current = this.#clientGroupGenerations.get(\n            params.clientGroupID,\n          );\n          if (current === undefined || params.generation > current) {\n            this.#clientGroupGenerations.set(\n              params.clientGroupID,\n              params.generation,\n            );\n          }\n        }\n      },\n    );\n\n    setActiveClientGroupsGetter(() => this.#viewSyncers.size);\n\n    getOrCreateGauge(\n      'sync',\n      'active-client-groups',\n      'Number of active client groups',\n    ).addCallback(result => result.observe(this.#viewSyncers.size));\n\n    getOrCreateGauge(\n      'sync',\n      'queries',\n      'Active queries (pipelines) across all client groups',\n    ).addCallback(result => {\n      let total = 0;\n      for (const vs of this.#viewSyncers.getServices()) {\n        total += vs.queryCount;\n      }\n      result.observe(total);\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'rows',\n      'Tracked rows across all client groups',\n    ).addCallback(result => {\n      let total = 0;\n      for (const vs of this.#viewSyncers.getServices()) {\n        total += vs.rowCount;\n      }\n      result.observe(total);\n    });\n\n    getOrCreateGauge('sync', 'serving_lag', {\n      description:\n        'Maximum time active ViewSyncer client groups have had unserved ' +\n        'replica changes. A change is served after IVM advancement, CVR flush, ' +\n        'and pokeEnd.',\n      unit: 'millisecond',\n    }).addCallback(result => {\n      result.observe(this.#computeServingLagDistribution().maxMs);\n    });\n\n    getOrCreateGauge('sync', 'serving_lag_stats', {\n      description:\n        'Distribution of time active ViewSyncer client groups have had ' +\n        'unserved replica changes. A change is served after IVM advancement, ' +\n        'CVR flush, and pokeEnd.',\n      unit: 'millisecond',\n    }).addCallback(result => {\n      const stats = this.#computeServingLagDistribution();\n      result.observe(stats.minMs, {stat: 'min'});\n      result.observe(stats.p50Ms, {stat: 'p50'});\n      result.observe(stats.p75Ms, {stat: 'p75'});\n      result.observe(stats.p99Ms, {stat: 'p99'});\n      result.observe(stats.maxMs, {stat: 'max'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'serving_lagging_client_groups',\n      'Number of active client groups with unserved replica changes',\n    ).addCallback(result => {\n      result.observe(this.#computeServingLagDistribution().laggingClientGroups);\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'pipelines_total',\n      'Query pipelines across all client groups on this worker, by query ' +\n        'type. The ratio to sync.pipelines_unique is the dedup factor ' +\n        'available to shared pipeline advancement.',\n    ).addCallback(result => {\n      const stats = this.#computePipelineDedupStats();\n      result.observe(stats.clientTotal, {type: 'client'});\n      result.observe(stats.internalTotal, {type: 'internal'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'pipelines_unique',\n      'Distinct (clientSchema, transformationHash) pipelines across all ' +\n        'client groups on this worker, by query type',\n    ).addCallback(result => {\n      const stats = this.#computePipelineDedupStats();\n      result.observe(stats.clientHashes.size, {type: 'client'});\n      result.observe(stats.internalUnique, {type: 'internal'});\n    });\n\n    getOrCreateGauge(\n      'sync',\n      'client_schemas',\n      'Distinct client schemas across all client groups on this worker',\n    ).addCallback(result => {\n      result.observe(this.#computePipelineDedupStats().clientSchemas);\n    });\n\n    this.#viewSyncerLagSampleInterval = setInterval(\n      () => this.#recordViewSyncerLagSamples(),\n      VIEW_SYNCER_LAG_SAMPLE_INTERVAL_MS,\n    );\n    this.#viewSyncerLagSampleInterval.unref?.();\n\n    this.#eligibilityLogInterval = setInterval(\n      () => this.#logSharedAdvanceEligibility(),\n      SHARED_ADVANCE_ELIGIBILITY_LOG_INTERVAL_MS,\n    );\n    this.#eligibilityLogInterval.unref?.();\n  }\n\n  #computeServingLagDistribution(): ServingLagDistribution {\n    if (this.#servingLagDistributionCache) {\n      return this.#servingLagDistributionCache;\n    }\n\n    const distribution = computeServingLagDistributionMs(\n      Date.now(),\n      this.#replicaReadyStates,\n      this.#viewSyncers.getServices(),\n    );\n    this.#servingLagDistributionCache = distribution;\n    if (!this.#servingLagDistributionCacheClearQueued) {\n      this.#servingLagDistributionCacheClearQueued = true;\n      queueMicrotask(() => {\n        this.#servingLagDistributionCache = undefined;\n        this.#servingLagDistributionCacheClearQueued = false;\n      });\n    }\n    return distribution;\n  }\n\n  #recordViewSyncerLagSamples(): void {\n    const {lagsMs} = this.#computeServingLagDistribution();\n    for (const lagMs of lagsMs) {\n      this.#viewSyncerLag.recordMs(lagMs);\n    }\n  }\n\n  #computePipelineDedupStats(): PipelineDedupStats {\n    return computePipelineDedupStats(this.#viewSyncers.getServices());\n  }\n\n  #logSharedAdvanceEligibility(): void {\n    const stats = this.#computePipelineDedupStats();\n    if (stats.clientTotal === 0) {\n      return;\n    }\n    const unique = stats.clientHashes.size;\n    const topDuplicated = [...stats.clientHashes.entries()]\n      .filter(([, {count}]) => count > 1)\n      .sort((a, b) => b[1].count - a[1].count)\n      .slice(0, 10)\n      .map(([key, {count, queryName}]) => ({key, count, queryName}));\n    this.#lc.info?.('shared-advance-eligibility', {\n      clientPipelines: stats.clientTotal,\n      uniqueClientPipelines: unique,\n      dedupFactor: Number((stats.clientTotal / Math.max(unique, 1)).toFixed(2)),\n      internalPipelines: stats.internalTotal,\n      clientSchemas: stats.clientSchemas,\n      topDuplicated,\n    });\n  }\n\n  #recordReplicaReadyState(state: ReplicaState): void {\n    if (\n      state.watermark === undefined ||\n      state.replicaReadyTimeMs === undefined\n    ) {\n      return;\n    }\n    const last = this.#replicaReadyStates.at(-1);\n    if (last && last.watermark >= state.watermark) {\n      return;\n    }\n    this.#replicaReadyStates.push({\n      watermark: state.watermark,\n      replicaReadyTimeMs: state.replicaReadyTimeMs,\n    });\n    if (this.#viewSyncers.size === 0) {\n      this.#replicaReadyStates.length = 0;\n      return;\n    }\n    boundReplicaReadyStates(this.#replicaReadyStates);\n  }\n\n  readonly #createConnection = async (ws: WebSocket, params: ConnectParams) => {\n    const metricAttributes = {\n      [PROTOCOL_VERSION_ATTRIBUTE]: params.protocolVersion,\n    };\n    let connectionResultRecorded = false;\n    const recordConnectionFailure = (reason: string) => {\n      if (connectionResultRecorded) {\n        return;\n      }\n      connectionResultRecorded = true;\n      this.#webSocketConnectionFailures.add(1, {\n        ...metricAttributes,\n        [FAILURE_REASON_ATTRIBUTE]: reason,\n      });\n    };\n    const recordConnectionSuccessMetric = () => {\n      if (connectionResultRecorded) {\n        return;\n      }\n      connectionResultRecorded = true;\n      this.#webSocketConnectionSuccesses.add(1, metricAttributes);\n    };\n\n    this.#webSocketConnectionAttempts.add(1, metricAttributes);\n    this.#webSocketOpenConnections.add(1, metricAttributes);\n    ws.once('close', () => {\n      this.#webSocketOpenConnections.add(-1, metricAttributes);\n    });\n\n    this.#lc.debug?.(\n      'creating connection',\n      clientGroupLogID(params.clientGroupID),\n      params.clientID,\n    );\n    recordConnectionAttempted();\n    const {clientID, clientGroupID, auth, userID} = params;\n    const hasProvidedAuth = auth !== undefined && auth !== '';\n    const incomingUserID = userID ?? null;\n    const tokenOptions = tokenConfigOptions(this.#config.auth ?? {});\n    const hasPushOrMutate =\n      this.#config?.push?.url !== undefined ||\n      this.#config?.mutate?.url !== undefined;\n    const hasQueries =\n      this.#config?.query?.url !== undefined ||\n      this.#config?.getQueries?.url !== undefined;\n    const hasCustomEndpoints = hasPushOrMutate && hasQueries;\n\n    // More than one token option is a misconfiguration under which no\n    // validator is built, so it is refused whether or not a token was sent.\n    // A token otherwise requires exactly one token option, or custom\n    // mutations & queries to be enabled instead.\n    if (\n      tokenOptions.length > 1 ||\n      (hasProvidedAuth && tokenOptions.length === 0 && !hasCustomEndpoints)\n    ) {\n      recordConnectionFailure('configuration');\n      throw new Error(\n        'Exactly one of jwk, secret, or jwksUrl must be set in order to verify tokens but actually the following were set: ' +\n          JSON.stringify(tokenOptions) +\n          '. You may also set both ZERO_MUTATE_URL and ZERO_QUERY_URL to enable custom mutations and queries without passing token verification options.',\n      );\n    }\n\n    let initialAuth: Auth | undefined;\n\n    // Verify JWT BEFORE touching existing connections - prevents unauthenticated\n    // attackers from force-disconnecting legitimate users via DoS.\n    try {\n      initialAuth = await resolveAuth(\n        this.#lc\n          .withContext('clientGroupID', clientGroupLogID(clientGroupID))\n          .withContext('clientID', clientID),\n        // no previous auth, since this is a new connection, and resolveAuth is\n        // connection scoped, not client group scoped\n        undefined,\n        incomingUserID,\n        auth,\n        this.#validateLegacyJWT,\n      );\n    } catch (e) {\n      if (isProtocolError(e)) {\n        this.#lc.warn?.(\n          'Rejecting sync connection during initial auth resolution',\n          {\n            clientGroupID: clientGroupLogID(clientGroupID),\n            clientID,\n            incomingUserID,\n            hasProvidedAuth,\n            errorKind: e.message,\n          },\n        );\n        recordConnectionFailure('auth');\n        sendError(this.#lc, ws, e.errorBody);\n        ws.close(3000, e.errorBody.message);\n        return;\n      }\n      recordConnectionFailure('internal');\n      throw e;\n    }\n\n    // Resolving auth can take a while (e.g. a remote JWKS fetch), during\n    // which the client may have disconnected. A Connection created for a\n    // closed socket never receives the 'close' event and is thus never\n    // cleaned up, leaking its timer, its registrations in the connection\n    // context manager and its refs on the mutagen and pusher services.\n    if (ws.readyState !== WebSocket.OPEN) {\n      this.#lc.debug?.('websocket closed while resolving auth', {\n        clientGroupID: clientGroupLogID(clientGroupID),\n        clientID,\n        readyState: ws.readyState,\n      });\n      recordConnectionFailure('closed_during_auth');\n      return;\n    }\n\n    const viewSyncer = this.#viewSyncers.getService(clientGroupID);\n    const connContextManager = viewSyncer.connContextManager;\n    const group = connContextManager.getGroupState();\n\n    // TODO(0xcadams): we only check for user ID mismatch here if the group is\n    // already validated. This prevents wrong-user reconnects from evicting a\n    // healthy connection, but it does not protect against same-user reconnects\n    // with an invalid opaque token. The long-term fix is to keep the replacement\n    // connection pending until its auth is fully validated, and only then replace\n    // the existing socket.\n    if (\n      group.pinnedUser !== undefined &&\n      group.pinnedUser.id !== incomingUserID\n    ) {\n      const error = new ProtocolError({\n        kind: ErrorKind.Unauthorized,\n        message:\n          'Client groups are pinned to a single userID. Connection userID does not match existing client group userID.',\n        origin: ErrorOrigin.ZeroCache,\n      });\n      recordConnectionFailure('user_mismatch');\n      sendError(this.#lc, ws, error.errorBody);\n      ws.close(3000, error.message);\n      return;\n    }\n\n    // Check for and close existing connections AFTER auth is validated\n    const existing = this.#connections.get(clientID);\n    if (existing) {\n      if (existing.wsID === params.wsID) {\n        // Clients generate a new wsID per socket, so this means the same\n        // connect request was delivered twice (e.g. duplicated upstream).\n        this.#lc.warn?.(\n          `duplicate connection for client ${clientID} with the same wsID ${params.wsID}, closing existing connection`,\n          {clientGroupID: clientGroupLogID(clientGroupID)},\n        );\n      }\n      this.#lc.debug?.(\n        `client ${clientID} already connected, closing existing connection`,\n      );\n      existing.close(`replaced by ${params.wsID}`);\n    }\n\n    connContextManager.registerConnection(\n      {clientID, wsID: params.wsID},\n      params,\n      initialAuth,\n    );\n\n    const mutagen = this.#mutagens?.getService(clientGroupID);\n    const pusher = this.#pushers?.getService(clientGroupID);\n    // a new connection is using the mutagen and pusher. Bump their ref counts.\n    mutagen?.ref();\n    pusher?.ref();\n\n    let connection: Connection;\n    try {\n      connection = new Connection(\n        this.#lc,\n        params,\n        ws,\n        this.#config.allowLegacyQueries,\n        new SyncerWsMessageHandler(\n          this.#lc,\n          params,\n          connContextManager,\n          viewSyncer,\n          mutagen,\n          pusher,\n        ),\n        () => {\n          connContextManager.closeConnection({\n            clientID,\n            wsID: params.wsID,\n          });\n          if (this.#connections.get(clientID) === connection) {\n            this.#connections.delete(clientID);\n          }\n          // Connection is closed. We can unref the mutagen and pusher.\n          // If their ref counts are zero, they will stop themselves and set themselves invalid.\n          mutagen?.unref();\n          pusher?.unref();\n        },\n      );\n    } catch (e) {\n      recordConnectionFailure('internal');\n      connContextManager.closeConnection({clientID, wsID: params.wsID});\n      mutagen?.unref();\n      pusher?.unref();\n      throw e;\n    }\n\n    this.#connections.set(clientID, connection);\n\n    if (connection.init()) {\n      recordConnectionSuccessMetric();\n      recordConnectionSuccess();\n    } else {\n      recordConnectionFailure('protocol_version');\n    }\n\n    if (params.initConnectionMsg) {\n      this.#lc.debug?.(\n        'handling init connection message from sec header',\n        clientGroupLogID(params.clientGroupID),\n        params.clientID,\n      );\n      await connection.handleInitConnection(\n        JSON.stringify(params.initConnectionMsg),\n      );\n    }\n  };\n\n  readonly #receiveConnection = async (\n    ws: WebSocket,\n    params: ConnectParams,\n  ) => {\n    try {\n      await this.#createConnection(ws, params);\n    } finally {\n      this.#releasePending(params.clientGroupID, params.generation);\n    }\n  };\n\n  #releasePending(clientGroupID: string, generation: number | undefined): void {\n    const remaining = (this.#pendingConnections.get(clientGroupID) ?? 1) - 1;\n    if (remaining <= 0) {\n      this.#pendingConnections.delete(clientGroupID);\n      if (!this.#viewSyncers.hasService(clientGroupID)) {\n        const gen =\n          this.#clientGroupGenerations.get(clientGroupID) ?? generation;\n        this.#parent.send<ClientGroupStatusMessage>([\n          'clientGroupStatus',\n          {\n            clientGroupID,\n            active: false,\n            ...(gen !== undefined ? {generation: gen} : {}),\n          },\n        ]);\n        this.#clientGroupGenerations.delete(clientGroupID);\n      }\n    } else {\n      this.#pendingConnections.set(clientGroupID, remaining);\n    }\n  }\n\n  run() {\n    return this.#stopped.promise;\n  }\n\n  /**\n   * Graceful shutdown involves shutting down view syncers one at a time, pausing\n   * for the duration of view syncer's hydration between each one. This paces the\n   * disconnects to avoid creating a backlog of hydrations in the receiving server\n   * when the clients reconnect.\n   */\n  async drain() {\n    const start = Date.now();\n    this.#lc.info?.(`draining ${this.#viewSyncers.size} view-syncers`);\n\n    this.#drainCoordinator.drainNextIn(0);\n\n    while (this.#viewSyncers.size) {\n      await this.#drainCoordinator.forceDrainTimeout;\n\n      // Pick an arbitrary view syncer to force drain.\n      for (const vs of this.#viewSyncers.getServices()) {\n        this.#lc.debug?.(\n          `draining view-syncer ${clientGroupLogID(vs.id)} (forced)`,\n        );\n        // When this drain or an elective drain completes, the forceDrainTimeout will\n        // resolve after the next drain interval.\n        void vs.stop();\n        break;\n      }\n    }\n    this.#lc.info?.(`finished draining (${Date.now() - start} ms)`);\n  }\n\n  stop() {\n    clearInterval(this.#viewSyncerLagSampleInterval);\n    clearInterval(this.#eligibilityLogInterval);\n    this.#wss.close();\n    this.#stopped.resolve();\n    return promiseVoid;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6FA,SAAgB,0BACd,aACoB;CACpB,IAAI,cAAc;CAClB,IAAI,gBAAgB;CACpB,MAAM,+BAAe,IAAI,IAGvB;CACF,MAAM,iCAAiB,IAAI,IAAY;CACvC,MAAM,6BAAa,IAAI,IAAY;CACnC,IAAI,UAAU;CACd,KAAK,MAAM,MAAM,aAAa;EAC5B,MAAM,YAAY,GAAG;EACrB,IAAI,cAAc,KAAA,GAChB,WAAW,IAAI,SAAS;EAM1B,MAAM,iBAAiB,aAAa,MAAM;EAC1C;EACA,KAAK,MAAM,EACT,oBACA,UACA,eACG,GAAG,eAAe,GAAG;GAGxB,MAAM,MAAM,GAAG,eAAe,GAAG;GACjC,IAAI,UAAU;IACZ;IACA,eAAe,IAAI,GAAG;GACxB,OAAO;IACL;IACA,MAAM,QAAQ,aAAa,IAAI,GAAG;IAClC,IAAI,OACF,MAAM;SAEN,aAAa,IAAI,KAAK;KAAC,OAAO;KAAG;IAAS,CAAC;GAE/C;EACF;CACF;CACA,OAAO;EACL;EACA;EACA;EACA,gBAAgB,eAAe;EAC/B,eAAe,WAAW;CAC5B;AACF;AAEA,IAAa,2BAA2B;AACxC,IAAM,qCAAqC;AAC3C,IAAM,6CAA6C;AAEnD,IAAM,6BAA6B;AACnC,IAAM,2BAA2B;AAEjC,SAAS,wBACP,oBACM;CACN,IAAI,mBAAmB,SAAA,KACrB,mBAAmB,OACjB,GACA,mBAAmB,SAAS,wBAC9B;AAEJ;AAEA,SAAS,wBACP,oBACA,kBACM;CACN,IAAI,mBAAmB,GACrB,mBAAmB,OAAO,GAAG,gBAAgB;CAG/C,wBAAwB,kBAAkB;AAC5C;AAEA,SAAS,6BACP,oBACA,oBACQ;CACR,IAAI,MAAM;CACV,IAAI,OAAO,mBAAmB;CAC9B,OAAO,MAAM,MAAM;EACjB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO,OAAO,CAAC;EAC7C,IAAI,mBAAmB,IAAI,CAAC,qBAAqB,oBAC/C,MAAM,MAAM;OAEZ,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,oBACP,oBACA,WACQ;CACR,IAAI,MAAM;CACV,IAAI,OAAO,mBAAmB;CAC9B,OAAO,MAAM,MAAM;EACjB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO,OAAO,CAAC;EAC7C,IAAI,mBAAmB,IAAI,CAAC,aAAa,WACvC,MAAM,MAAM;OAEZ,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,uBACP,oBACA,YACQ;CACR,MAAM,0BAA0B,6BAC9B,oBACA,WAAW,WACb;CACA,MAAM,0BACJ,WAAW,kBAAkB,OACzB,IACA,oBAAoB,oBAAoB,WAAW,aAAa;CAEtE,MAAM,qBAAqB,KAAK,IAC9B,yBACA,uBACF;CACA,OAAO,qBAAqB,mBAAmB,SAC3C,qBACA;AACN;AAEA,SAAS,sBACP,cACA,YACQ;CACR,IAAI,aAAa,WAAW,GAC1B,OAAO;CAMT,OAAO,aAJO,KAAK,IACjB,aAAa,SAAS,GACtB,KAAK,IAAI,GAAG,KAAK,KAAM,aAAa,MAAO,aAAa,MAAM,IAAI,CAAC,CAEjD;AACtB;AAEA,SAAS,gCACP,KACA,oBACA,aACwB;CACxB,MAAM,OAAiB,CAAC;CACxB,IAAI,sBAAsB;CAC1B,IAAI,mBAAmB,mBAAmB;CAE1C,KAAK,MAAM,cAAc,aAAa;EACpC,IAAI,CAAC,WAAW,oBACd;EAGF,MAAM,qBAAqB,uBACzB,oBACA,UACF;EACA,IAAI,uBAAuB,IAAI;GAC7B,KAAK,KAAK,CAAC;GACX;EACF;EAEA,mBAAmB,KAAK,IAAI,kBAAkB,kBAAkB;EAChE,MAAM,QAAQ,KAAK,IACjB,GACA,MAAM,mBAAmB,mBAAmB,CAAC,kBAC/C;EACA,KAAK,KAAK,KAAK;EACf,IAAI,QAAQ,GACV;CAEJ;CAEA,wBAAwB,oBAAoB,gBAAgB;CAE5D,KAAK,MAAM,GAAG,MAAM,IAAI,CAAC;CACzB,OAAO;EACL,oBAAoB,KAAK;EACzB;EAIA,OAAO,KAAK,MAAM;EAClB,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,sBAAsB,MAAM,EAAE;EACrC,OAAO,KAAK,GAAG,EAAE,KAAK;EACtB,QAAQ;CACV;AACF;AA+BA,SAAS,0BAA0B,QAAmC;CACpE,MAAM,UAAyB;EAC7B,UAAU;EACV,YAAY,OAAO;CACrB;CAEA,IAAI,OAAO,sBAAsB;EAC/B,QAAQ,oBAAoB;EAE5B,IAAI,OAAO,6BACT,IAAI;GAIF,QAAQ,oBAHmB,KAAK,MAC9B,OAAO,2BAEmB;EAC9B,SAAS,GAAG;GACV,MAAM,IAAI,MACR,uDAAuD,OAAO,CAAC,EAAE,uBACnE;EACF;CAEJ;CAEA,OAAO;AACT;;;;;;;;AASA,IAAa,SAAb,MAAgD;CAC9C,KAAc,UAAU;CACxB;CACA;CACA;CACA;CACA,+BAAwB,IAAI,IAAwB;CACpD,sCAA+B,IAAI,IAAoB;CACvD,0CAAmC,IAAI,IAAoB;CAC3D,oBAA6B,IAAI,iBAAiB;CAClD;CACA;CACA,WAAoB,SAAS;CAC7B;CACA;CACA,sBAAoD,CAAC;CACrD,4BAAqC,yBACnC,QACA,8BACA,oCACF;CACA,+BAAwC,mBACtC,QACA,iCACA,uCACF;CACA,gCAAyC,mBACvC,QACA,kCACA,wDACF;CACA,+BAAwC,mBACtC,QACA,iCACA,yEACF;CACA,iBAA0B,2BACxB,QACA,mBACA;EACE,aACE;EAGF,MAAM;CACR,CACF;CACA;CACA,0CAA0C;CAC1C;CACA;CAEA,YACE,IACA,QACA,mBAKA,gBACA,eAMA,QACA,mBACA;EACA,KAAK,UAAU;EACf,KAAK,qBAAqB;EAG1B,MAAM,WAAW,mBAAmB,IAAI,SAAQ,UAC9C,KAAK,yBAAyB,KAAK,CACrC;EACA,YAAY,IAAI,MAAM;EAEtB,KAAK,MAAM;EACX,KAAK,UAAU;EACf,KAAK,eAAe,IAAI,cACtB,KACA,OAAM,kBAAkB,IAAI,SAAS,UAAU,GAAG,KAAK,iBAAiB,IACxE,MAAK,EAAE,UAAU,IACjB,OAAM;GACJ,KAAK,KAAK,oBAAoB,IAAI,EAAE,KAAK,OAAO,GAAG;IACjD,MAAM,aAAa,KAAK,wBAAwB,IAAI,EAAE;IACtD,KAAK,QAAQ,KAA+B,CAC1C,qBACA;KACE,eAAe;KACf,QAAQ;KACR,GAAI,eAAe,KAAA,IAAY,EAAC,WAAU,IAAI,CAAC;IACjD,CACF,CAAC;IACD,KAAK,wBAAwB,OAAO,EAAE;GACxC;EACF,CACF;EACA,IAAI,gBACF,KAAK,YAAY,IAAI,cAAc,IAAI,iBAAgB,MAAK,EAAE,QAAQ,CAAC;EAEzE,IAAI,eACF,KAAK,WAAW,IAAI,cAClB,KACA,OACE,cACE,IACA,KAAK,aAAa,WAAW,EAAE,CAAC,CAAC,kBACnC,IACF,MAAK,EAAE,QAAQ,CACjB;EAEF,KAAK,OAAO,IAAI,gBAAgB,0BAA0B,MAAM,CAAC;EAEjE,yBACE,IACA,KAAK,MACL,KAAK,oBACL,KAAK,UACL,WAAU;GACR,KAAK,gBAAgB,OAAO,eAAe,OAAO,UAAU;EAC9D,IACA,WAAU;GACR,KAAK,oBAAoB,IACvB,OAAO,gBACN,KAAK,oBAAoB,IAAI,OAAO,aAAa,KAAK,KAAK,CAC9D;GACA,IAAI,OAAO,eAAe,KAAA,GAAW;IACnC,MAAM,UAAU,KAAK,wBAAwB,IAC3C,OAAO,aACT;IACA,IAAI,YAAY,KAAA,KAAa,OAAO,aAAa,SAC/C,KAAK,wBAAwB,IAC3B,OAAO,eACP,OAAO,UACT;GAEJ;EACF,CACF;EAEA,kCAAkC,KAAK,aAAa,IAAI;EAExD,iBACE,QACA,wBACA,gCACF,CAAC,CAAC,aAAY,WAAU,OAAO,QAAQ,KAAK,aAAa,IAAI,CAAC;EAE9D,iBACE,QACA,WACA,qDACF,CAAC,CAAC,aAAY,WAAU;GACtB,IAAI,QAAQ;GACZ,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAC7C,SAAS,GAAG;GAEd,OAAO,QAAQ,KAAK;EACtB,CAAC;EAED,iBACE,QACA,QACA,uCACF,CAAC,CAAC,aAAY,WAAU;GACtB,IAAI,QAAQ;GACZ,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAC7C,SAAS,GAAG;GAEd,OAAO,QAAQ,KAAK;EACtB,CAAC;EAED,iBAAiB,QAAQ,eAAe;GACtC,aACE;GAGF,MAAM;EACR,CAAC,CAAC,CAAC,aAAY,WAAU;GACvB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC,KAAK;EAC5D,CAAC;EAED,iBAAiB,QAAQ,qBAAqB;GAC5C,aACE;GAGF,MAAM;EACR,CAAC,CAAC,CAAC,aAAY,WAAU;GACvB,MAAM,QAAQ,KAAK,+BAA+B;GAClD,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;GACzC,OAAO,QAAQ,MAAM,OAAO,EAAC,MAAM,MAAK,CAAC;EAC3C,CAAC;EAED,iBACE,QACA,iCACA,8DACF,CAAC,CAAC,aAAY,WAAU;GACtB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC,mBAAmB;EAC1E,CAAC;EAED,iBACE,QACA,mBACA,0KAGF,CAAC,CAAC,aAAY,WAAU;GACtB,MAAM,QAAQ,KAAK,2BAA2B;GAC9C,OAAO,QAAQ,MAAM,aAAa,EAAC,MAAM,SAAQ,CAAC;GAClD,OAAO,QAAQ,MAAM,eAAe,EAAC,MAAM,WAAU,CAAC;EACxD,CAAC;EAED,iBACE,QACA,oBACA,8GAEF,CAAC,CAAC,aAAY,WAAU;GACtB,MAAM,QAAQ,KAAK,2BAA2B;GAC9C,OAAO,QAAQ,MAAM,aAAa,MAAM,EAAC,MAAM,SAAQ,CAAC;GACxD,OAAO,QAAQ,MAAM,gBAAgB,EAAC,MAAM,WAAU,CAAC;EACzD,CAAC;EAED,iBACE,QACA,kBACA,iEACF,CAAC,CAAC,aAAY,WAAU;GACtB,OAAO,QAAQ,KAAK,2BAA2B,CAAC,CAAC,aAAa;EAChE,CAAC;EAED,KAAK,+BAA+B,kBAC5B,KAAK,4BAA4B,GACvC,kCACF;EACA,KAAK,6BAA6B,QAAQ;EAE1C,KAAK,0BAA0B,kBACvB,KAAK,6BAA6B,GACxC,0CACF;EACA,KAAK,wBAAwB,QAAQ;CACvC;CAEA,iCAAyD;EACvD,IAAI,KAAK,8BACP,OAAO,KAAK;EAGd,MAAM,eAAe,gCACnB,KAAK,IAAI,GACT,KAAK,qBACL,KAAK,aAAa,YAAY,CAChC;EACA,KAAK,+BAA+B;EACpC,IAAI,CAAC,KAAK,yCAAyC;GACjD,KAAK,0CAA0C;GAC/C,qBAAqB;IACnB,KAAK,+BAA+B,KAAA;IACpC,KAAK,0CAA0C;GACjD,CAAC;EACH;EACA,OAAO;CACT;CAEA,8BAAoC;EAClC,MAAM,EAAC,WAAU,KAAK,+BAA+B;EACrD,KAAK,MAAM,SAAS,QAClB,KAAK,eAAe,SAAS,KAAK;CAEtC;CAEA,6BAAiD;EAC/C,OAAO,0BAA0B,KAAK,aAAa,YAAY,CAAC;CAClE;CAEA,+BAAqC;EACnC,MAAM,QAAQ,KAAK,2BAA2B;EAC9C,IAAI,MAAM,gBAAgB,GACxB;EAEF,MAAM,SAAS,MAAM,aAAa;EAClC,MAAM,gBAAgB,CAAC,GAAG,MAAM,aAAa,QAAQ,CAAC,CAAC,CACpD,QAAQ,GAAG,EAAC,aAAY,QAAQ,CAAC,CAAC,CAClC,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CACvC,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,CAAC,KAAK,EAAC,OAAO,kBAAiB;GAAC;GAAK;GAAO;EAAS,EAAE;EAC/D,KAAK,IAAI,OAAO,8BAA8B;GAC5C,iBAAiB,MAAM;GACvB,uBAAuB;GACvB,aAAa,QAAQ,MAAM,cAAc,KAAK,IAAI,QAAQ,CAAC,EAAA,CAAG,QAAQ,CAAC,CAAC;GACxE,mBAAmB,MAAM;GACzB,eAAe,MAAM;GACrB;EACF,CAAC;CACH;CAEA,yBAAyB,OAA2B;EAClD,IACE,MAAM,cAAc,KAAA,KACpB,MAAM,uBAAuB,KAAA,GAE7B;EAEF,MAAM,OAAO,KAAK,oBAAoB,GAAG,EAAE;EAC3C,IAAI,QAAQ,KAAK,aAAa,MAAM,WAClC;EAEF,KAAK,oBAAoB,KAAK;GAC5B,WAAW,MAAM;GACjB,oBAAoB,MAAM;EAC5B,CAAC;EACD,IAAI,KAAK,aAAa,SAAS,GAAG;GAChC,KAAK,oBAAoB,SAAS;GAClC;EACF;EACA,wBAAwB,KAAK,mBAAmB;CAClD;CAEA,oBAA6B,OAAO,IAAe,WAA0B;EAC3E,MAAM,mBAAmB,GACtB,6BAA6B,OAAO,gBACvC;EACA,IAAI,2BAA2B;EAC/B,MAAM,2BAA2B,WAAmB;GAClD,IAAI,0BACF;GAEF,2BAA2B;GAC3B,KAAK,6BAA6B,IAAI,GAAG;IACvC,GAAG;KACF,2BAA2B;GAC9B,CAAC;EACH;EACA,MAAM,sCAAsC;GAC1C,IAAI,0BACF;GAEF,2BAA2B;GAC3B,KAAK,8BAA8B,IAAI,GAAG,gBAAgB;EAC5D;EAEA,KAAK,6BAA6B,IAAI,GAAG,gBAAgB;EACzD,KAAK,0BAA0B,IAAI,GAAG,gBAAgB;EACtD,GAAG,KAAK,eAAe;GACrB,KAAK,0BAA0B,IAAI,IAAI,gBAAgB;EACzD,CAAC;EAED,KAAK,IAAI,QACP,uBACA,iBAAiB,OAAO,aAAa,GACrC,OAAO,QACT;EACA,0BAA0B;EAC1B,MAAM,EAAC,UAAU,eAAe,MAAM,WAAU;EAChD,MAAM,kBAAkB,SAAS,KAAA,KAAa,SAAS;EACvD,MAAM,iBAAiB,UAAU;EACjC,MAAM,eAAe,mBAAmB,KAAK,QAAQ,QAAQ,CAAC,CAAC;EAC/D,MAAM,kBACJ,KAAK,SAAS,MAAM,QAAQ,KAAA,KAC5B,KAAK,SAAS,QAAQ,QAAQ,KAAA;EAChC,MAAM,aACJ,KAAK,SAAS,OAAO,QAAQ,KAAA,KAC7B,KAAK,SAAS,YAAY,QAAQ,KAAA;EACpC,MAAM,qBAAqB,mBAAmB;EAM9C,IACE,aAAa,SAAS,KACrB,mBAAmB,aAAa,WAAW,KAAK,CAAC,oBAClD;GACA,wBAAwB,eAAe;GACvC,MAAM,IAAI,MACR,uHACE,KAAK,UAAU,YAAY,IAC3B,+IACJ;EACF;EAEA,IAAI;EAIJ,IAAI;GACF,cAAc,MAAM,YAClB,KAAK,IACF,YAAY,iBAAiB,iBAAiB,aAAa,CAAC,CAAC,CAC7D,YAAY,YAAY,QAAQ,GAGnC,KAAA,GACA,gBACA,MACA,KAAK,kBACP;EACF,SAAS,GAAG;GACV,IAAI,gBAAgB,CAAC,GAAG;IACtB,KAAK,IAAI,OACP,4DACA;KACE,eAAe,iBAAiB,aAAa;KAC7C;KACA;KACA;KACA,WAAW,EAAE;IACf,CACF;IACA,wBAAwB,MAAM;IAC9B,UAAU,KAAK,KAAK,IAAI,EAAE,SAAS;IACnC,GAAG,MAAM,KAAM,EAAE,UAAU,OAAO;IAClC;GACF;GACA,wBAAwB,UAAU;GAClC,MAAM;EACR;EAOA,IAAI,GAAG,eAAe,UAAU,MAAM;GACpC,KAAK,IAAI,QAAQ,yCAAyC;IACxD,eAAe,iBAAiB,aAAa;IAC7C;IACA,YAAY,GAAG;GACjB,CAAC;GACD,wBAAwB,oBAAoB;GAC5C;EACF;EAEA,MAAM,aAAa,KAAK,aAAa,WAAW,aAAa;EAC7D,MAAM,qBAAqB,WAAW;EACtC,MAAM,QAAQ,mBAAmB,cAAc;EAQ/C,IACE,MAAM,eAAe,KAAA,KACrB,MAAM,WAAW,OAAO,gBACxB;GACA,MAAM,QAAQ,IAAI,cAAc;IAC9B,MAAMA;IACN,SACE;IACF,QAAQC;GACV,CAAC;GACD,wBAAwB,eAAe;GACvC,UAAU,KAAK,KAAK,IAAI,MAAM,SAAS;GACvC,GAAG,MAAM,KAAM,MAAM,OAAO;GAC5B;EACF;EAGA,MAAM,WAAW,KAAK,aAAa,IAAI,QAAQ;EAC/C,IAAI,UAAU;GACZ,IAAI,SAAS,SAAS,OAAO,MAG3B,KAAK,IAAI,OACP,mCAAmC,SAAS,sBAAsB,OAAO,KAAK,gCAC9E,EAAC,eAAe,iBAAiB,aAAa,EAAC,CACjD;GAEF,KAAK,IAAI,QACP,UAAU,SAAS,gDACrB;GACA,SAAS,MAAM,eAAe,OAAO,MAAM;EAC7C;EAEA,mBAAmB,mBACjB;GAAC;GAAU,MAAM,OAAO;EAAI,GAC5B,QACA,WACF;EAEA,MAAM,UAAU,KAAK,WAAW,WAAW,aAAa;EACxD,MAAM,SAAS,KAAK,UAAU,WAAW,aAAa;EAEtD,SAAS,IAAI;EACb,QAAQ,IAAI;EAEZ,IAAI;EACJ,IAAI;GACF,aAAa,IAAI,WACf,KAAK,KACL,QACA,IACA,KAAK,QAAQ,oBACb,IAAI,uBACF,KAAK,KACL,QACA,oBACA,YACA,SACA,MACF,SACM;IACJ,mBAAmB,gBAAgB;KACjC;KACA,MAAM,OAAO;IACf,CAAC;IACD,IAAI,KAAK,aAAa,IAAI,QAAQ,MAAM,YACtC,KAAK,aAAa,OAAO,QAAQ;IAInC,SAAS,MAAM;IACf,QAAQ,MAAM;GAChB,CACF;EACF,SAAS,GAAG;GACV,wBAAwB,UAAU;GAClC,mBAAmB,gBAAgB;IAAC;IAAU,MAAM,OAAO;GAAI,CAAC;GAChE,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,MAAM;EACR;EAEA,KAAK,aAAa,IAAI,UAAU,UAAU;EAE1C,IAAI,WAAW,KAAK,GAAG;GACrB,8BAA8B;GAC9B,wBAAwB;EAC1B,OACE,wBAAwB,kBAAkB;EAG5C,IAAI,OAAO,mBAAmB;GAC5B,KAAK,IAAI,QACP,oDACA,iBAAiB,OAAO,aAAa,GACrC,OAAO,QACT;GACA,MAAM,WAAW,qBACf,KAAK,UAAU,OAAO,iBAAiB,CACzC;EACF;CACF;CAEA,qBAA8B,OAC5B,IACA,WACG;EACH,IAAI;GACF,MAAM,KAAK,kBAAkB,IAAI,MAAM;EACzC,UAAU;GACR,KAAK,gBAAgB,OAAO,eAAe,OAAO,UAAU;EAC9D;CACF;CAEA,gBAAgB,eAAuB,YAAsC;EAC3E,MAAM,aAAa,KAAK,oBAAoB,IAAI,aAAa,KAAK,KAAK;EACvE,IAAI,aAAa,GAAG;GAClB,KAAK,oBAAoB,OAAO,aAAa;GAC7C,IAAI,CAAC,KAAK,aAAa,WAAW,aAAa,GAAG;IAChD,MAAM,MACJ,KAAK,wBAAwB,IAAI,aAAa,KAAK;IACrD,KAAK,QAAQ,KAA+B,CAC1C,qBACA;KACE;KACA,QAAQ;KACR,GAAI,QAAQ,KAAA,IAAY,EAAC,YAAY,IAAG,IAAI,CAAC;IAC/C,CACF,CAAC;IACD,KAAK,wBAAwB,OAAO,aAAa;GACnD;EACF,OACE,KAAK,oBAAoB,IAAI,eAAe,SAAS;CAEzD;CAEA,MAAM;EACJ,OAAO,KAAK,SAAS;CACvB;;;;;;;CAQA,MAAM,QAAQ;EACZ,MAAM,QAAQ,KAAK,IAAI;EACvB,KAAK,IAAI,OAAO,YAAY,KAAK,aAAa,KAAK,cAAc;EAEjE,KAAK,kBAAkB,YAAY,CAAC;EAEpC,OAAO,KAAK,aAAa,MAAM;GAC7B,MAAM,KAAK,kBAAkB;GAG7B,KAAK,MAAM,MAAM,KAAK,aAAa,YAAY,GAAG;IAChD,KAAK,IAAI,QACP,wBAAwB,iBAAiB,GAAG,EAAE,EAAE,UAClD;IAGA,GAAQ,KAAK;IACb;GACF;EACF;EACA,KAAK,IAAI,OAAO,sBAAsB,KAAK,IAAI,IAAI,MAAM,KAAK;CAChE;CAEA,OAAO;EACL,cAAc,KAAK,4BAA4B;EAC/C,cAAc,KAAK,uBAAuB;EAC1C,KAAK,KAAK,MAAM;EAChB,KAAK,SAAS,QAAQ;EACtB,OAAO;CACT;AACF"}

package/out/zero-client/src/client/inspector/inspector.d.ts

@@ -37,6 +37,10 @@ export declare class Inspector {
      * environments. Call this first from Node contexts to establish the
      * session.
      *
+     * The server authenticates each connection separately. An accepted
+     * password is remembered by this inspector and presented again when the
+     * connection is re-established.
+     *
      * Returns `true` if the password is accepted (or the server runs in a
      * development mode that bypasses the check), `false` otherwise.
      */

package/out/zero-client/src/client/inspector/inspector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inspector.d.ts","sourceRoot":"","sources":["../../../../../../zero-client/src/client/inspector/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,sCAAsC,CAAC;AAC9D,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,6CAA6C,CAAC;AAErF,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6CAA6C,CAAC;AAC/E,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,EAEV,iBAAiB,EACjB,OAAO,EAEP,GAAG,EACJ,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAC,iBAAiB,EAAC,CAAC;AAGhC,MAAM,MAAM,IAAI,GAAG,cAAc,qBAAqB,CAAC,CAAC;AAExD,qBAAa,SAAS;;IAMpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,YACE,GAAG,EAAE,GAAG,EACR,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,EAgCpC;IAEK,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAEhC;IAEK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEjC;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAI5C;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErC;IAEK,YAAY,CAChB,KAAK,EAAE,QAAQ,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;IAED;;;;OAIG;IACG,gBAAgB,CACpB,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;IAED;;;OAGG;IACG,iBAAiB,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACtC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAO7B;IAED;;;;;;;;;OASG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAErD;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAExD;CACF"}
+{"version":3,"file":"inspector.d.ts","sourceRoot":"","sources":["../../../../../../zero-client/src/client/inspector/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,sCAAsC,CAAC;AAC9D,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,6CAA6C,CAAC;AAErF,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6CAA6C,CAAC;AAC/E,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,EAEV,iBAAiB,EACjB,OAAO,EAEP,GAAG,EACJ,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAC,iBAAiB,EAAC,CAAC;AAGhC,MAAM,MAAM,IAAI,GAAG,cAAc,qBAAqB,CAAC,CAAC;AAExD,qBAAa,SAAS;;IAMpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,YACE,GAAG,EAAE,GAAG,EACR,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,EAgCpC;IAEK,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAEhC;IAEK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEjC;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAI5C;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErC;IAEK,YAAY,CAChB,KAAK,EAAE,QAAQ,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;IAED;;;;OAIG;IACG,gBAAgB,CACpB,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;IAED;;;OAGG;IACG,iBAAiB,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACtC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAO7B;IAED;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAErD;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAExD;CACF"}

package/out/zero-client/src/client/inspector/inspector.js

@@ -71,6 +71,10 @@ var Inspector = class {
 	* environments. Call this first from Node contexts to establish the
 	* session.
 	*
+	* The server authenticates each connection separately. An accepted
+	* password is remembered by this inspector and presented again when the
+	* connection is re-established.
+	*
 	* Returns `true` if the password is accepted (or the server runs in a
 	* development mode that bypasses the check), `false` otherwise.
 	*/

package/out/zero-client/src/client/inspector/inspector.js.map

@@ -1 +1 @@
-{"version":3,"file":"inspector.js","names":[],"sources":["../../../../../../zero-client/src/client/inspector/inspector.ts"],"sourcesContent":["import type {ReadonlyJSONValue} from '../../../../shared/src/json.ts';\nimport type {\n  AnalyzeQueryResult,\n  PlanDebugEventJSON,\n} from '../../../../zero-protocol/src/analyze-query-result.ts';\nimport type {AST} from '../../../../zero-protocol/src/ast.ts';\nimport type {AnalyzeQueryOptions} from '../../../../zero-protocol/src/inspect-up.ts';\nimport {formatPlannerEvents} from '../../../../zql/src/planner/planner-debug.ts';\nimport type {QueryDelegate} from '../../../../zql/src/query/query-delegate.ts';\nimport type {AnyQuery} from '../../../../zql/src/query/query.ts';\nimport type {ClientGroup} from './client-group.ts';\nimport {Client} from './client.ts';\nimport type {\n  ExtendedInspectorDelegate,\n  InspectorDelegate,\n  Metrics,\n  QueryClientMetrics,\n  Rep,\n} from './lazy-inspector.ts';\n\nexport type {InspectorDelegate};\n\n// oxlint-disable-next-line consistent-type-imports\nexport type Lazy = typeof import('./lazy-inspector.ts');\n\nexport class Inspector {\n  readonly #delegate: ExtendedInspectorDelegate;\n  readonly #deletedQueries = new Map<\n    string,\n    {readonly ast: AST; readonly metrics: QueryClientMetrics}\n  >();\n  readonly client: Client;\n  readonly clientGroup: ClientGroup;\n\n  constructor(\n    rep: Rep,\n    inspectorDelegate: InspectorDelegate,\n    queryDelegate: QueryDelegate,\n    getSocket: () => Promise<WebSocket>,\n  ) {\n    const deletedQueries = this.#deletedQueries;\n    inspectorDelegate.setQueryEvictedCallback((hash, ast, metrics) => {\n      deletedQueries.set(hash, {ast, metrics});\n    });\n    this.#delegate = {\n      getQueryMetrics(hash) {\n        return (\n          inspectorDelegate.getQueryMetrics(hash) ??\n          deletedQueries.get(hash)?.metrics\n        );\n      },\n      getAST(queryID) {\n        return (\n          inspectorDelegate.getAST(queryID) ?? deletedQueries.get(queryID)?.ast\n        );\n      },\n      mapClientASTToServer:\n        inspectorDelegate.mapClientASTToServer.bind(inspectorDelegate),\n      get metrics() {\n        return inspectorDelegate.metrics;\n      },\n      setQueryEvictedCallback() {},\n      queryDelegate,\n      rep,\n      getSocket,\n      lazy: import('./lazy-inspector.ts'),\n    };\n\n    this.client = new Client(this.#delegate, rep.clientID, rep.clientGroupID);\n    this.clientGroup = this.client.clientGroup;\n  }\n\n  async metrics(): Promise<Metrics> {\n    return (await this.#delegate.lazy).inspectorMetrics(this.#delegate);\n  }\n\n  async clients(): Promise<Client[]> {\n    return (await this.#delegate.lazy).inspectorClients(this.#delegate);\n  }\n\n  async clientsWithQueries(): Promise<Client[]> {\n    return (await this.#delegate.lazy).inspectorClientsWithQueries(\n      this.#delegate,\n    );\n  }\n\n  async serverVersion(): Promise<string> {\n    return (await this.#delegate.lazy).serverVersion(this.#delegate);\n  }\n\n  async analyzeQuery(\n    query: AnyQuery,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeQuery(\n      this.#delegate,\n      query,\n      options,\n    );\n  }\n\n  /**\n   * Analyze a query specified by a server-side AST. Unlike {@link analyzeQuery}\n   * the AST is sent to the server verbatim with no client-to-server name\n   * mapping; callers should provide an AST already in the server shape.\n   */\n  async analyzeServerAST(\n    ast: AST,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeServerAST(\n      this.#delegate,\n      ast,\n      options,\n    );\n  }\n\n  /**\n   * Analyze a server-registered named (custom) query. The server resolves\n   * the name and args to an AST using its registered custom-query handler.\n   */\n  async analyzeNamedQuery(\n    name: string,\n    args: ReadonlyArray<ReadonlyJSONValue>,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeNamedQuery(\n      this.#delegate,\n      name,\n      args,\n      options,\n    );\n  }\n\n  /**\n   * Authenticate with the server's admin password. Other inspector RPCs\n   * (e.g. {@link analyzeQuery}) fall back to an interactive HTML password\n   * prompt when authentication is needed, which is unavailable in non-DOM\n   * environments. Call this first from Node contexts to establish the\n   * session.\n   *\n   * Returns `true` if the password is accepted (or the server runs in a\n   * development mode that bypasses the check), `false` otherwise.\n   */\n  async authenticate(password: string): Promise<boolean> {\n    return (await this.#delegate.lazy).authenticate(this.#delegate, password);\n  }\n\n  /**\n   * Format planner debug events as a human-readable string.\n   */\n  formatPlannerEvents(events: PlanDebugEventJSON[]): string {\n    return formatPlannerEvents(events);\n  }\n}\n"],"mappings":";;;AAyBA,IAAa,YAAb,MAAuB;CACrB;CACA,kCAA2B,IAAI,IAG7B;CACF;CACA;CAEA,YACE,KACA,mBACA,eACA,WACA;EACA,MAAM,iBAAiB,KAAK;EAC5B,kBAAkB,yBAAyB,MAAM,KAAK,YAAY;GAChE,eAAe,IAAI,MAAM;IAAC;IAAK;GAAO,CAAC;EACzC,CAAC;EACD,KAAK,YAAY;GACf,gBAAgB,MAAM;IACpB,OACE,kBAAkB,gBAAgB,IAAI,KACtC,eAAe,IAAI,IAAI,CAAC,EAAE;GAE9B;GACA,OAAO,SAAS;IACd,OACE,kBAAkB,OAAO,OAAO,KAAK,eAAe,IAAI,OAAO,CAAC,EAAE;GAEtE;GACA,sBACE,kBAAkB,qBAAqB,KAAK,iBAAiB;GAC/D,IAAI,UAAU;IACZ,OAAO,kBAAkB;GAC3B;GACA,0BAA0B,CAAC;GAC3B;GACA;GACA;GACA,MAAM,OAAO;EACf;EAEA,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,IAAI,UAAU,IAAI,aAAa;EACxE,KAAK,cAAc,KAAK,OAAO;CACjC;CAEA,MAAM,UAA4B;EAChC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBAAiB,KAAK,SAAS;CACpE;CAEA,MAAM,UAA6B;EACjC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBAAiB,KAAK,SAAS;CACpE;CAEA,MAAM,qBAAwC;EAC5C,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,4BACjC,KAAK,SACP;CACF;CAEA,MAAM,gBAAiC;EACrC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,cAAc,KAAK,SAAS;CACjE;CAEA,MAAM,aACJ,OACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,aACjC,KAAK,WACL,OACA,OACF;CACF;;;;;;CAOA,MAAM,iBACJ,KACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBACjC,KAAK,WACL,KACA,OACF;CACF;;;;;CAMA,MAAM,kBACJ,MACA,MACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,kBACjC,KAAK,WACL,MACA,MACA,OACF;CACF;;;;;;;;;;;CAYA,MAAM,aAAa,UAAoC;EACrD,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,aAAa,KAAK,WAAW,QAAQ;CAC1E;;;;CAKA,oBAAoB,QAAsC;EACxD,OAAO,oBAAoB,MAAM;CACnC;AACF"}
+{"version":3,"file":"inspector.js","names":[],"sources":["../../../../../../zero-client/src/client/inspector/inspector.ts"],"sourcesContent":["import type {ReadonlyJSONValue} from '../../../../shared/src/json.ts';\nimport type {\n  AnalyzeQueryResult,\n  PlanDebugEventJSON,\n} from '../../../../zero-protocol/src/analyze-query-result.ts';\nimport type {AST} from '../../../../zero-protocol/src/ast.ts';\nimport type {AnalyzeQueryOptions} from '../../../../zero-protocol/src/inspect-up.ts';\nimport {formatPlannerEvents} from '../../../../zql/src/planner/planner-debug.ts';\nimport type {QueryDelegate} from '../../../../zql/src/query/query-delegate.ts';\nimport type {AnyQuery} from '../../../../zql/src/query/query.ts';\nimport type {ClientGroup} from './client-group.ts';\nimport {Client} from './client.ts';\nimport type {\n  ExtendedInspectorDelegate,\n  InspectorDelegate,\n  Metrics,\n  QueryClientMetrics,\n  Rep,\n} from './lazy-inspector.ts';\n\nexport type {InspectorDelegate};\n\n// oxlint-disable-next-line consistent-type-imports\nexport type Lazy = typeof import('./lazy-inspector.ts');\n\nexport class Inspector {\n  readonly #delegate: ExtendedInspectorDelegate;\n  readonly #deletedQueries = new Map<\n    string,\n    {readonly ast: AST; readonly metrics: QueryClientMetrics}\n  >();\n  readonly client: Client;\n  readonly clientGroup: ClientGroup;\n\n  constructor(\n    rep: Rep,\n    inspectorDelegate: InspectorDelegate,\n    queryDelegate: QueryDelegate,\n    getSocket: () => Promise<WebSocket>,\n  ) {\n    const deletedQueries = this.#deletedQueries;\n    inspectorDelegate.setQueryEvictedCallback((hash, ast, metrics) => {\n      deletedQueries.set(hash, {ast, metrics});\n    });\n    this.#delegate = {\n      getQueryMetrics(hash) {\n        return (\n          inspectorDelegate.getQueryMetrics(hash) ??\n          deletedQueries.get(hash)?.metrics\n        );\n      },\n      getAST(queryID) {\n        return (\n          inspectorDelegate.getAST(queryID) ?? deletedQueries.get(queryID)?.ast\n        );\n      },\n      mapClientASTToServer:\n        inspectorDelegate.mapClientASTToServer.bind(inspectorDelegate),\n      get metrics() {\n        return inspectorDelegate.metrics;\n      },\n      setQueryEvictedCallback() {},\n      queryDelegate,\n      rep,\n      getSocket,\n      lazy: import('./lazy-inspector.ts'),\n    };\n\n    this.client = new Client(this.#delegate, rep.clientID, rep.clientGroupID);\n    this.clientGroup = this.client.clientGroup;\n  }\n\n  async metrics(): Promise<Metrics> {\n    return (await this.#delegate.lazy).inspectorMetrics(this.#delegate);\n  }\n\n  async clients(): Promise<Client[]> {\n    return (await this.#delegate.lazy).inspectorClients(this.#delegate);\n  }\n\n  async clientsWithQueries(): Promise<Client[]> {\n    return (await this.#delegate.lazy).inspectorClientsWithQueries(\n      this.#delegate,\n    );\n  }\n\n  async serverVersion(): Promise<string> {\n    return (await this.#delegate.lazy).serverVersion(this.#delegate);\n  }\n\n  async analyzeQuery(\n    query: AnyQuery,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeQuery(\n      this.#delegate,\n      query,\n      options,\n    );\n  }\n\n  /**\n   * Analyze a query specified by a server-side AST. Unlike {@link analyzeQuery}\n   * the AST is sent to the server verbatim with no client-to-server name\n   * mapping; callers should provide an AST already in the server shape.\n   */\n  async analyzeServerAST(\n    ast: AST,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeServerAST(\n      this.#delegate,\n      ast,\n      options,\n    );\n  }\n\n  /**\n   * Analyze a server-registered named (custom) query. The server resolves\n   * the name and args to an AST using its registered custom-query handler.\n   */\n  async analyzeNamedQuery(\n    name: string,\n    args: ReadonlyArray<ReadonlyJSONValue>,\n    options?: AnalyzeQueryOptions,\n  ): Promise<AnalyzeQueryResult> {\n    return (await this.#delegate.lazy).analyzeNamedQuery(\n      this.#delegate,\n      name,\n      args,\n      options,\n    );\n  }\n\n  /**\n   * Authenticate with the server's admin password. Other inspector RPCs\n   * (e.g. {@link analyzeQuery}) fall back to an interactive HTML password\n   * prompt when authentication is needed, which is unavailable in non-DOM\n   * environments. Call this first from Node contexts to establish the\n   * session.\n   *\n   * The server authenticates each connection separately. An accepted\n   * password is remembered by this inspector and presented again when the\n   * connection is re-established.\n   *\n   * Returns `true` if the password is accepted (or the server runs in a\n   * development mode that bypasses the check), `false` otherwise.\n   */\n  async authenticate(password: string): Promise<boolean> {\n    return (await this.#delegate.lazy).authenticate(this.#delegate, password);\n  }\n\n  /**\n   * Format planner debug events as a human-readable string.\n   */\n  formatPlannerEvents(events: PlanDebugEventJSON[]): string {\n    return formatPlannerEvents(events);\n  }\n}\n"],"mappings":";;;AAyBA,IAAa,YAAb,MAAuB;CACrB;CACA,kCAA2B,IAAI,IAG7B;CACF;CACA;CAEA,YACE,KACA,mBACA,eACA,WACA;EACA,MAAM,iBAAiB,KAAK;EAC5B,kBAAkB,yBAAyB,MAAM,KAAK,YAAY;GAChE,eAAe,IAAI,MAAM;IAAC;IAAK;GAAO,CAAC;EACzC,CAAC;EACD,KAAK,YAAY;GACf,gBAAgB,MAAM;IACpB,OACE,kBAAkB,gBAAgB,IAAI,KACtC,eAAe,IAAI,IAAI,CAAC,EAAE;GAE9B;GACA,OAAO,SAAS;IACd,OACE,kBAAkB,OAAO,OAAO,KAAK,eAAe,IAAI,OAAO,CAAC,EAAE;GAEtE;GACA,sBACE,kBAAkB,qBAAqB,KAAK,iBAAiB;GAC/D,IAAI,UAAU;IACZ,OAAO,kBAAkB;GAC3B;GACA,0BAA0B,CAAC;GAC3B;GACA;GACA;GACA,MAAM,OAAO;EACf;EAEA,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,IAAI,UAAU,IAAI,aAAa;EACxE,KAAK,cAAc,KAAK,OAAO;CACjC;CAEA,MAAM,UAA4B;EAChC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBAAiB,KAAK,SAAS;CACpE;CAEA,MAAM,UAA6B;EACjC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBAAiB,KAAK,SAAS;CACpE;CAEA,MAAM,qBAAwC;EAC5C,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,4BACjC,KAAK,SACP;CACF;CAEA,MAAM,gBAAiC;EACrC,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,cAAc,KAAK,SAAS;CACjE;CAEA,MAAM,aACJ,OACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,aACjC,KAAK,WACL,OACA,OACF;CACF;;;;;;CAOA,MAAM,iBACJ,KACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,iBACjC,KAAK,WACL,KACA,OACF;CACF;;;;;CAMA,MAAM,kBACJ,MACA,MACA,SAC6B;EAC7B,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,kBACjC,KAAK,WACL,MACA,MACA,OACF;CACF;;;;;;;;;;;;;;;CAgBA,MAAM,aAAa,UAAoC;EACrD,QAAQ,MAAM,KAAK,UAAU,KAAA,CAAM,aAAa,KAAK,WAAW,QAAQ;CAC1E;;;;CAKA,oBAAoB,QAAsC;EACxD,OAAO,oBAAoB,MAAM;CACnC;AACF"}

package/out/zero-client/src/client/inspector/lazy-inspector.d.ts

@@ -14,12 +14,11 @@ import type { MutatorDefs } from '../replicache-types.ts';
 import { Client } from './client.ts';
 import { type Lazy } from './inspector.ts';
 import { Query } from './query.ts';
-export type GetWebSocket = () => Promise<WebSocket>;
 export type Metrics = {
     readonly [K in keyof (ClientMetricMap & ServerMetricMap)]: ReadonlyTDigest;
 };
 type DistributiveOmit<T, K extends string> = T extends object ? Omit<T, K> : never;
-export declare function rpc<T extends InspectDownBody>(socket: WebSocket, arg: DistributiveOmit<InspectUpBody, 'id'>, downSchema: valita.Type<T>): Promise<T['value']>;
+export declare function rpc<T extends InspectDownBody>(delegate: ExtendedInspectorDelegate, arg: DistributiveOmit<InspectUpBody, 'id'>, downSchema: valita.Type<T>): Promise<T['value']>;
 export declare function mergeMetrics(clientMetrics: QueryClientMetrics | undefined, serverMetrics: QueryServerMetricsJSON | null | undefined): ClientMetrics & ServerMetrics;
 export declare function inspectorMetrics(delegate: ExtendedInspectorDelegate): Promise<Metrics>;
 export declare function inspectorClients(delegate: ExtendedInspectorDelegate): Promise<Client[]>;
@@ -39,6 +38,9 @@ export declare function analyzeNamedQuery(delegate: ExtendedInspectorDelegate, n
  * is accepted (or the server is in a development mode that bypasses the
  * check). Use this from Node contexts where the default interactive HTML
  * prompt used by other inspector RPCs is not available.
+ *
+ * The server authenticates each connection separately. An accepted password
+ * is remembered and presented again when the connection is re-established.
  */
 export declare function authenticate(delegate: ExtendedInspectorDelegate, password: string): Promise<boolean>;
 export interface InspectorDelegate {
@@ -53,6 +55,12 @@ export interface ExtendedInspectorDelegate extends InspectorDelegate {
     readonly getSocket: () => Promise<WebSocket>;
     readonly queryDelegate: QueryDelegate;
     lazy: Promise<Lazy>;
+    /**
+     * The admin password the server last accepted, if any. Authentication is
+     * per connection, so it is presented again after a reconnect before the
+     * user is prompted.
+     */
+    adminPassword?: string | undefined;
 }
 export type Rep = ReplicacheImpl<MutatorDefs>;
 export type QueryClientMetrics = {

package/out/zero-client/src/client/inspector/lazy-inspector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-inspector.d.ts","sourceRoot":"","sources":["../../../../../../zero-client/src/client/inspector/lazy-inspector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,+CAA+C,CAAC;AAGlF,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAU,KAAK,eAAe,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAC3D,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,sCAAsC,CAAC;AAC9D,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAOL,KAAK,eAAe,EAEpB,KAAK,kBAAkB,IAAI,sBAAsB,EAClD,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EACd,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAChB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6CAA6C,CAAC;AAE/E,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,oCAAoC,CAAC;AAGjE,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AAEnC,OAAO,EAAC,KAAK,IAAI,EAAC,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AAEjC,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;AAEpD,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC,GAAG,eAAe;CAC3E,CAAC;AAEF,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,GACzD,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GACV,KAAK,CAAC;AAEV,wBAAsB,GAAG,CAAC,CAAC,SAAS,eAAe,EACjD,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,EAC1C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAsBrB;AAwDD,wBAAgB,YAAY,CAC1B,aAAa,EAAE,kBAAkB,GAAG,SAAS,EAC7C,aAAa,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GACvD,aAAa,GAAG,aAAa,CAQ/B;AA6CD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,EAAE,CAAC,CAEnB;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,EAAE,CAAC,CAInB;AA8DD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,yBAAyB,EACnC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,yBAAyB,EACnC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,KAAK,EAAE,CAAC,CAElB;AACD,wBAAgB,SAAS,CACvB,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CASzC;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,EAAE,CAAC,CAahB;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,KAAK,EAAE,CAAC,CAElB;AAgBD,wBAAsB,YAAY,CAChC,QAAQ,EAAE,yBAAyB,EACnC,KAAK,EAAE,QAAQ,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,yBAAyB,EACnC,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,yBAAyB,EACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACtC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAMlB;AAID,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC;IACpC,uBAAuB,CACrB,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,GAChE,IAAI,CAAC;CACT;AAED,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,kCAAkC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,qBAAqB,EAAE,eAAe,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,CAAC,IAAI,MAAM,eAAe,GAAG,eAAe;CACvD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,CAAC,IAAI,MAAM,eAAe,GAAG,eAAe;CACvD,CAAC"}
+{"version":3,"file":"lazy-inspector.d.ts","sourceRoot":"","sources":["../../../../../../zero-client/src/client/inspector/lazy-inspector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,+CAA+C,CAAC;AAGlF,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAU,KAAK,eAAe,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAC3D,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,sCAAsC,CAAC;AAC9D,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAOL,KAAK,eAAe,EAEpB,KAAK,kBAAkB,IAAI,sBAAsB,EAClD,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EACd,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAChB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6CAA6C,CAAC;AAE/E,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,oCAAoC,CAAC;AAGjE,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AAEnC,OAAO,EAAC,KAAK,IAAI,EAAC,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AAEjC,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC,GAAG,eAAe;CAC3E,CAAC;AAEF,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,GACzD,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GACV,KAAK,CAAC;AAEV,wBAAsB,GAAG,CAAC,CAAC,SAAS,eAAe,EACjD,QAAQ,EAAE,yBAAyB,EACnC,GAAG,EAAE,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,EAC1C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CA4BrB;AAmED,wBAAgB,YAAY,CAC1B,aAAa,EAAE,kBAAkB,GAAG,SAAS,EAC7C,aAAa,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GACvD,aAAa,GAAG,aAAa,CAQ/B;AA6CD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,EAAE,CAAC,CAEnB;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,EAAE,CAAC,CAInB;AA8DD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,yBAAyB,EACnC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,yBAAyB,EACnC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,KAAK,EAAE,CAAC,CAElB;AACD,wBAAgB,SAAS,CACvB,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CASzC;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,EAAE,CAAC,CAahB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,KAAK,EAAE,CAAC,CAElB;AAgBD,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,yBAAyB,EACnC,KAAK,EAAE,QAAQ,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB,EACnC,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,yBAAyB,EACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACtC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAMlB;AAID,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC;IACpC,uBAAuB,CACrB,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,GAChE,IAAI,CAAC;CACT;AAED,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,kCAAkC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,qBAAqB,EAAE,eAAe,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,CAAC,IAAI,MAAM,eAAe,GAAG,eAAe;CACvD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,CAAC,IAAI,MAAM,eAAe,GAAG,eAAe;CACvD,CAAC"}