@rpcbase/server 0.473.0 → 0.475.0

package/dist/handler-BYVnU9H-.js

@@ -0,0 +1,122 @@
+import { getTenantFilesystemDb } from "@rpcbase/db";
+import { ObjectId, GridFSBucket } from "mongodb";
+import { g as getTenantId, c as getBucketName } from "./shared-Chfrv8o6.js";
+const deleteFile = async (_payload, ctx) => {
+  const tenantId = getTenantId(ctx);
+  if (!tenantId) {
+    ctx.res.status(400);
+    return { ok: false, error: "tenant_missing" };
+  }
+  const fileIdRaw = String(ctx.req.params?.fileId ?? "").trim();
+  let fileObjectId;
+  try {
+    fileObjectId = new ObjectId(fileIdRaw);
+  } catch {
+    ctx.res.status(400);
+    return { ok: false, error: "invalid_file_id" };
+  }
+  const fsDb = await getTenantFilesystemDb(tenantId);
+  const nativeDb = fsDb.db;
+  if (!nativeDb) {
+    ctx.res.status(500);
+    return { ok: false, error: "filesystem_db_unavailable" };
+  }
+  const bucketName = getBucketName();
+  const bucket = new GridFSBucket(nativeDb, { bucketName });
+  try {
+    await bucket.delete(fileObjectId);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (!message.includes("FileNotFound")) {
+      ctx.res.status(500);
+      return { ok: false, error: "delete_failed" };
+    }
+  }
+  ctx.res.status(204);
+  return { ok: true };
+};
+const resolveHeaderString = (value) => {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized ? normalized : null;
+};
+const escapeHeaderFilename = (filename) => filename.replace(/[\\"]/g, "_");
+const getFile = async (_payload, ctx) => {
+  const tenantId = getTenantId(ctx);
+  if (!tenantId) {
+    ctx.res.status(400).end();
+    return {};
+  }
+  const fileIdRaw = String(ctx.req.params?.fileId ?? "").trim();
+  let fileObjectId;
+  try {
+    fileObjectId = new ObjectId(fileIdRaw);
+  } catch {
+    ctx.res.status(400).end();
+    return {};
+  }
+  const fsDb = await getTenantFilesystemDb(tenantId);
+  const nativeDb = fsDb.db;
+  if (!nativeDb) {
+    ctx.res.status(500).end();
+    return {};
+  }
+  const bucketName = getBucketName();
+  const bucket = new GridFSBucket(nativeDb, { bucketName });
+  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray();
+  if (!file) {
+    ctx.res.status(404).end();
+    return {};
+  }
+  const mimeTypeFromMetadata = resolveHeaderString(file?.metadata?.mimeType);
+  const mimeType = mimeTypeFromMetadata ?? "application/octet-stream";
+  const filenameFromDb = resolveHeaderString(file?.filename);
+  const filename = filenameFromDb ?? fileIdRaw;
+  const filenameSafe = escapeHeaderFilename(filename);
+  const cacheControl = "private, max-age=0, must-revalidate";
+  const md5 = resolveHeaderString(file?.md5);
+  const uploadDate = file?.uploadDate instanceof Date ? file.uploadDate : null;
+  const etagValue = md5 ?? `${fileObjectId.toHexString()}-${String(file?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`;
+  const etag = md5 ? `"${etagValue}"` : `W/"${etagValue}"`;
+  const ifNoneMatch = resolveHeaderString(ctx.req.headers?.["if-none-match"]);
+  if (ifNoneMatch) {
+    const candidates = ifNoneMatch.split(",").map((value) => value.trim()).filter(Boolean);
+    if (candidates.includes("*") || candidates.includes(etag)) {
+      ctx.res.status(304);
+      ctx.res.setHeader("Cache-Control", cacheControl);
+      ctx.res.setHeader("ETag", etag);
+      ctx.res.end();
+      return {};
+    }
+  }
+  ctx.res.status(200);
+  ctx.res.setHeader("Content-Type", mimeType);
+  ctx.res.setHeader("Content-Length", String(file?.length ?? 0));
+  ctx.res.setHeader("Content-Disposition", `inline; filename="${filenameSafe}"`);
+  ctx.res.setHeader("Cache-Control", cacheControl);
+  ctx.res.setHeader("ETag", etag);
+  ctx.res.flushHeaders();
+  if (ctx.req.method === "HEAD") {
+    ctx.res.end();
+    return {};
+  }
+  const stream = bucket.openDownloadStream(fileObjectId);
+  stream.on("error", () => {
+    try {
+      ctx.res.destroy();
+    } catch {
+    }
+  });
+  stream.pipe(ctx.res);
+  return {};
+};
+const Route = "/api/rb/files/:fileId";
+const GetRoute = Route;
+const DeleteRoute = Route;
+const handler = (api) => {
+  api.get(GetRoute, getFile);
+  api.delete(DeleteRoute, deleteFile);
+};
+export {
+  handler as default
+};

package/dist/{handler-ybYk2VTq.js → handler-CTL2iQCj.js}

@@ -22,15 +22,15 @@ const getTenantId = (ctx) => {
   const raw = ctx.req.query?.["rb-tenant-id"];
   const queryTenantId = Array.isArray(raw) ? raw[0] : raw;
   if (typeof queryTenantId === "string" && queryTenantId.trim()) return queryTenantId.trim();
-  const sessionTenantId = ctx.req.session?.user?.current_tenant_id;
+  const sessionTenantId = ctx.req.session?.user?.currentTenantId;
   if (typeof sessionTenantId === "string" && sessionTenantId.trim()) return sessionTenantId.trim();
   return null;
 };
 const ensureAuthorized = (ctx, tenantId) => {
   const userId = ctx.req.session?.user?.id;
   if (!userId) return null;
-  const signedInTenants = ctx.req.session?.user?.signed_in_tenants;
-  const currentTenantId = ctx.req.session?.user?.current_tenant_id;
+  const signedInTenants = ctx.req.session?.user?.signedInTenants;
+  const currentTenantId = ctx.req.session?.user?.currentTenantId;
   const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId);
   const normalizedCurrentTenantId = typeof currentTenantId === "string" ? currentTenantId.trim() : "";
   const hasTenantAccessFromCurrent = Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId;
@@ -41,7 +41,7 @@ const getModelCtx = (_ctx, tenantId) => ({
   req: {
     session: {
       user: {
-        current_tenant_id: tenantId
+        currentTenantId: tenantId
       }
     }
   }

package/dist/{handler-CTRE1McR.js → handler-xi0XKR-Y.js}

@@ -1,105 +1,8 @@
 import { loadModel, getTenantFilesystemDb } from "@rpcbase/db";
 import { GridFSBucket, ObjectId } from "mongodb";
-import { createHash, timingSafeEqual, randomBytes } from "node:crypto";
+import { g as getTenantId, a as getModelCtx, b as getOwnershipSelector, e as ensureUploadIndexes, c as getBucketName, d as getUserId, f as getChunkSizeBytes, h as getSessionTtlMs, i as computeSha256Hex, t as toBufferPayload, n as normalizeSha256Hex, j as getMaxClientUploadBytesPerSecond, k as getRawBodyLimitBytes } from "./shared-Chfrv8o6.js";
+import { randomBytes } from "node:crypto";
 import { o as object, n as number, s as string, b as boolean, a as array, _ as _enum } from "./schemas-CyxqObur.js";
-const DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024;
-const MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024;
-const DEFAULT_SESSION_TTL_S = 60 * 60 * 24;
-const ensuredIndexDbNames = /* @__PURE__ */ new Set();
-const parseOptionalPositiveInt = (rawValue) => {
-  if (typeof rawValue !== "string") return null;
-  const normalized = rawValue.trim();
-  if (!normalized) return null;
-  const parsed = Number(normalized);
-  if (!Number.isFinite(parsed) || parsed <= 0) return null;
-  return Math.floor(parsed);
-};
-const getChunkSizeBytes = () => {
-  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES);
-  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES;
-  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved);
-};
-const getSessionTtlMs = () => {
-  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S;
-  return ttlSeconds * 1e3;
-};
-const getRawBodyLimitBytes = (chunkSizeBytes) => chunkSizeBytes + 1024 * 1024;
-const getBucketName = () => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? "").trim() || "fs";
-const getUserId = (ctx) => {
-  const raw = ctx.req.session?.user?.id;
-  if (typeof raw !== "string") return null;
-  const normalized = raw.trim();
-  return normalized ? normalized : null;
-};
-const getTenantId = (ctx) => {
-  const rawSession = ctx.req.session?.user?.current_tenant_id;
-  const sessionTenantId = typeof rawSession === "string" ? rawSession.trim() : "";
-  const userId = getUserId(ctx);
-  if (userId) return sessionTenantId || null;
-  if (sessionTenantId) return sessionTenantId;
-  const rawQuery = ctx.req.query?.["rb-tenant-id"];
-  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
-  if (typeof queryTenantId !== "string") return null;
-  const normalized = queryTenantId.trim();
-  return normalized ? normalized : null;
-};
-const computeSha256Hex = (data) => createHash("sha256").update(data).digest("hex");
-const normalizeSha256Hex = (value) => value.trim().toLowerCase();
-const getModelCtx = (_ctx, tenantId) => ({
-  req: {
-    session: {
-      user: {
-        current_tenant_id: tenantId
-      }
-    }
-  }
-});
-const toBufferPayload = (payload) => {
-  if (Buffer.isBuffer(payload)) return payload;
-  if (payload instanceof Uint8Array) return Buffer.from(payload);
-  return null;
-};
-const ensureUploadIndexes = async (UploadSession, UploadChunk) => {
-  const dbName = String(UploadSession?.db?.name ?? "");
-  if (dbName && ensuredIndexDbNames.has(dbName)) return;
-  await Promise.all([
-    UploadSession.createIndexes(),
-    UploadChunk.createIndexes()
-  ]);
-  if (dbName) ensuredIndexDbNames.add(dbName);
-};
-const normalizeUploadKey = (raw) => {
-  if (typeof raw !== "string") return null;
-  const normalized = raw.trim();
-  return normalized ? normalized : null;
-};
-const getUploadKeyHash = (ctx) => {
-  const uploadKey = normalizeUploadKey(ctx.req.get("X-Upload-Key"));
-  if (!uploadKey) return null;
-  return computeSha256Hex(Buffer.from(uploadKey));
-};
-const timingSafeEqualHex = (left, right) => {
-  if (left.length !== right.length) return false;
-  try {
-    return timingSafeEqual(Buffer.from(left, "hex"), Buffer.from(right, "hex"));
-  } catch {
-    return false;
-  }
-};
-const getOwnershipSelector = (ctx, session) => {
-  if (session.userId) {
-    const userId = getUserId(ctx);
-    if (!userId || userId !== session.userId) return null;
-    return { userId: session.userId };
-  }
-  if (session.ownerKeyHash) {
-    const uploadKeyHash = getUploadKeyHash(ctx);
-    if (!uploadKeyHash) return null;
-    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null;
-    return { ownerKeyHash: session.ownerKeyHash };
-  }
-  return null;
-};
 const waitForStreamFinished = async (stream) => new Promise((resolve, reject) => {
   stream.once("finish", resolve);
   stream.once("error", reject);
@@ -454,7 +357,8 @@ const uploadChunk = async (payload, ctx) => {
   return { ok: true };
 };
 const rawBodyParser = ({
-  limitBytes
+  limitBytes,
+  maxClientBytesPerSecond
 }) => {
   return (req, res, next) => {
     const contentType = typeof req?.headers?.["content-type"] === "string" ? String(req.headers["content-type"]) : "";
@@ -465,11 +369,18 @@ const rawBodyParser = ({
     let total = 0;
     const chunks = [];
     let done = false;
+    let paused = false;
+    let throttleTimeout = null;
+    const rateBytesPerSecond = typeof maxClientBytesPerSecond === "number" && maxClientBytesPerSecond > 0 ? maxClientBytesPerSecond : null;
     const cleanup = () => {
       req.off("data", onData);
       req.off("end", onEnd);
       req.off("error", onError);
       req.off("aborted", onAborted);
+      if (throttleTimeout) {
+        clearTimeout(throttleTimeout);
+        throttleTimeout = null;
+      }
     };
     const finish = (error) => {
       if (done) return;
@@ -494,6 +405,24 @@ const rawBodyParser = ({
         return;
       }
       chunks.push(buffer);
+      if (!rateBytesPerSecond) return;
+      const now = Date.now();
+      const clientKey = getClientKey(req);
+      const state = getClientRateState(clientKey, rateBytesPerSecond, now);
+      const waitMs = consumeRateBudget(state, buffer.length, rateBytesPerSecond, now);
+      if (waitMs > 0 && !paused) {
+        paused = true;
+        req.pause();
+        throttleTimeout = setTimeout(() => {
+          throttleTimeout = null;
+          paused = false;
+          if (done) return;
+          try {
+            req.resume();
+          } catch {
+          }
+        }, waitMs);
+      }
     };
     const onEnd = () => finish();
     const onError = (err) => finish(err);
@@ -504,9 +433,63 @@ const rawBodyParser = ({
     req.on("aborted", onAborted);
   };
 };
+const MAX_BURST_SECONDS = 1;
+const STALE_CLIENT_MS = 15 * 60 * 1e3;
+const clientRateStates = /* @__PURE__ */ new Map();
+let lastCleanupMs = 0;
+const getClientKey = (req) => {
+  const rawClientIp = typeof req?.clientIp === "string" ? req.clientIp : "";
+  if (rawClientIp.trim()) return rawClientIp.trim();
+  const rawIp = typeof req?.ip === "string" ? req.ip : "";
+  return rawIp.trim() || "unknown";
+};
+const maybeCleanupStates = (now) => {
+  if (now - lastCleanupMs < 6e4) return;
+  lastCleanupMs = now;
+  if (clientRateStates.size < 2e3) return;
+  for (const [key, state] of clientRateStates) {
+    if (now - state.lastSeenMs > STALE_CLIENT_MS) {
+      clientRateStates.delete(key);
+    }
+  }
+};
+const getClientRateState = (key, rateBytesPerSecond, now) => {
+  maybeCleanupStates(now);
+  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS;
+  const existing = clientRateStates.get(key);
+  if (existing) {
+    existing.lastSeenMs = now;
+    existing.tokens = Math.min(capacity, existing.tokens);
+    return existing;
+  }
+  const next = {
+    tokens: capacity,
+    lastRefillMs: now,
+    lastSeenMs: now
+  };
+  clientRateStates.set(key, next);
+  return next;
+};
+const consumeRateBudget = (state, bytes, rateBytesPerSecond, now) => {
+  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS;
+  const elapsedMs = Math.max(0, now - state.lastRefillMs);
+  if (elapsedMs > 0) {
+    state.tokens = Math.min(capacity, state.tokens + elapsedMs * rateBytesPerSecond / 1e3);
+    state.lastRefillMs = now;
+  }
+  state.tokens -= bytes;
+  if (state.tokens >= 0) return 0;
+  return Math.ceil(-state.tokens / rateBytesPerSecond * 1e3);
+};
 const handler = (api) => {
   const chunkSizeBytes = getChunkSizeBytes();
-  api.use(InitRoute, rawBodyParser({ limitBytes: getRawBodyLimitBytes(chunkSizeBytes) }));
+  api.use(
+    InitRoute,
+    rawBodyParser({
+      limitBytes: getRawBodyLimitBytes(chunkSizeBytes),
+      maxClientBytesPerSecond: getMaxClientUploadBytesPerSecond()
+    })
+  );
   api.post(InitRoute, initUpload);
   api.put(ChunkRoute, uploadChunk);
   api.get(StatusRoute, getStatus);

package/dist/{index-dlSIqvl2.js → index-Ckx0UHs6.js}

@@ -137,8 +137,8 @@ const parseUpgradeMeta = async ({
     if (!sessionUserId) {
       throw new Error("Not signed in (missing session.user.id)");
     }
-    const signedInTenants = sessionUser?.signed_in_tenants;
-    const currentTenantId = sessionUser?.current_tenant_id;
+    const signedInTenants = sessionUser?.signedInTenants;
+    const currentTenantId = sessionUser?.currentTenantId;
     if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {
       if (!signedInTenants.includes(tenantId)) {
         throw new Error("Tenant not authorized for this session");
@@ -164,7 +164,7 @@ const getTenantModel = async (tenantId, modelName) => {
     req: {
       session: {
         user: {
-          current_tenant_id: tenantId
+          currentTenantId: tenantId
         }
       }
     }

package/dist/index.js

@@ -18,7 +18,7 @@ import { StrictMode, createElement } from "react";
 import { renderToPipeableStream, renderToStaticMarkup } from "react-dom/server";
 import { jsx } from "react/jsx-runtime";
 import { createPath, matchRoutes, parsePath, createStaticRouter, StaticRouterProvider } from "@rpcbase/router";
-import { i, n, r } from "./index-dlSIqvl2.js";
+import { i, n, r } from "./index-Ckx0UHs6.js";
 function getDefaultExportFromCjs(x) {
   return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, "default") ? x["default"] : x;
 }

package/dist/rts/api/changes/handler.d.ts

@@ -1,8 +1,8 @@
 import { Api } from '../../../../../api/src';
 type SessionUser = {
     id?: string;
-    current_tenant_id?: string;
-    signed_in_tenants?: string[];
+    currentTenantId?: string;
+    signedInTenants?: string[];
 };
 declare const _default: (api: Api<SessionUser>) => void;
 export default _default;

package/dist/rts/api/changes/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/rts/api/changes/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAA;AAOnD,KAAK,WAAW,GAAG;IACjB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC7B,CAAA;yBA0He,KAAK,GAAG,CAAC,WAAW,CAAC;AAArC,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/rts/api/changes/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAA;AAOnD,KAAK,WAAW,GAAG;IACjB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B,CAAA;yBA0He,KAAK,GAAG,CAAC,WAAW,CAAC;AAArC,wBAEC"}

package/dist/rts.js

@@ -1,6 +1,6 @@
-import { i, n, r } from "./index-dlSIqvl2.js";
+import { i, n, r } from "./index-Ckx0UHs6.js";
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("./handler-ybYk2VTq.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("./handler-CTL2iQCj.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
   return acc;

package/dist/shared-Chfrv8o6.js

@@ -0,0 +1,119 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+const DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024;
+const MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024;
+const DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024;
+const DEFAULT_SESSION_TTL_S = 60 * 60 * 24;
+const ensuredIndexDbNames = /* @__PURE__ */ new Set();
+const parseOptionalPositiveInt = (rawValue) => {
+  if (typeof rawValue !== "string") return null;
+  const normalized = rawValue.trim();
+  if (!normalized) return null;
+  const parsed = Number(normalized);
+  if (!Number.isFinite(parsed) || parsed <= 0) return null;
+  return Math.floor(parsed);
+};
+const getChunkSizeBytes = () => {
+  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES);
+  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES;
+  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved);
+};
+const getMaxClientUploadBytesPerSecond = () => {
+  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND);
+  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND;
+};
+const getSessionTtlMs = () => {
+  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S;
+  return ttlSeconds * 1e3;
+};
+const getRawBodyLimitBytes = (chunkSizeBytes) => chunkSizeBytes + 1024 * 1024;
+const getBucketName = () => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? "").trim() || "fs";
+const getUserId = (ctx) => {
+  const raw = ctx.req.session?.user?.id;
+  if (typeof raw !== "string") return null;
+  const normalized = raw.trim();
+  return normalized ? normalized : null;
+};
+const getTenantId = (ctx) => {
+  const rawSession = ctx.req.session?.user?.currentTenantId;
+  const sessionTenantId = typeof rawSession === "string" ? rawSession.trim() : "";
+  const userId = getUserId(ctx);
+  const rawQuery = ctx.req.query?.["rb-tenant-id"];
+  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
+  const queryValue = typeof queryTenantId === "string" && queryTenantId.trim() ? queryTenantId.trim() : null;
+  if (!userId && queryValue) return queryValue;
+  if (userId) return sessionTenantId || null;
+  if (sessionTenantId) return sessionTenantId;
+  return queryValue;
+};
+const computeSha256Hex = (data) => createHash("sha256").update(data).digest("hex");
+const normalizeSha256Hex = (value) => value.trim().toLowerCase();
+const getModelCtx = (_ctx, tenantId) => ({
+  req: {
+    session: {
+      user: {
+        currentTenantId: tenantId
+      }
+    }
+  }
+});
+const toBufferPayload = (payload) => {
+  if (Buffer.isBuffer(payload)) return payload;
+  if (payload instanceof Uint8Array) return Buffer.from(payload);
+  return null;
+};
+const ensureUploadIndexes = async (UploadSession, UploadChunk) => {
+  const dbName = String(UploadSession?.db?.name ?? "");
+  if (dbName && ensuredIndexDbNames.has(dbName)) return;
+  await Promise.all([
+    UploadSession.createIndexes(),
+    UploadChunk.createIndexes()
+  ]);
+  if (dbName) ensuredIndexDbNames.add(dbName);
+};
+const normalizeUploadKey = (raw) => {
+  if (typeof raw !== "string") return null;
+  const normalized = raw.trim();
+  return normalized ? normalized : null;
+};
+const getUploadKeyHash = (ctx) => {
+  const uploadKey = normalizeUploadKey(ctx.req.get("X-Upload-Key"));
+  if (!uploadKey) return null;
+  return computeSha256Hex(Buffer.from(uploadKey));
+};
+const timingSafeEqualHex = (left, right) => {
+  if (left.length !== right.length) return false;
+  try {
+    return timingSafeEqual(Buffer.from(left, "hex"), Buffer.from(right, "hex"));
+  } catch {
+    return false;
+  }
+};
+const getOwnershipSelector = (ctx, session) => {
+  if (session.userId) {
+    const userId = getUserId(ctx);
+    if (!userId || userId !== session.userId) return null;
+    return { userId: session.userId };
+  }
+  if (session.ownerKeyHash) {
+    const uploadKeyHash = getUploadKeyHash(ctx);
+    if (!uploadKeyHash) return null;
+    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null;
+    return { ownerKeyHash: session.ownerKeyHash };
+  }
+  return null;
+};
+export {
+  getModelCtx as a,
+  getOwnershipSelector as b,
+  getBucketName as c,
+  getUserId as d,
+  ensureUploadIndexes as e,
+  getChunkSizeBytes as f,
+  getTenantId as g,
+  getSessionTtlMs as h,
+  computeSha256Hex as i,
+  getMaxClientUploadBytesPerSecond as j,
+  getRawBodyLimitBytes as k,
+  normalizeSha256Hex as n,
+  toBufferPayload as t
+};

package/dist/types/index.d.ts

@@ -1,6 +1,6 @@
 export type SessionUser = {
     id: string;
-    current_tenant_id: string;
-    signed_in_tenants: string[];
+    currentTenantId: string;
+    signedInTenants: string[];
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAA"}

package/dist/uploads/api/file-uploads/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAOlC,OAAO,EAA2C,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;yBAKpE,KAAK,GAAG,CAAC,WAAW,CAAC;AAArC,wBAQC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAOlC,OAAO,EAA6E,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;yBAKtG,KAAK,GAAG,CAAC,WAAW,CAAC;AAArC,wBAcC"}

package/dist/uploads/api/file-uploads/middleware/rawBodyParser.d.ts

@@ -1,4 +1,5 @@
-export declare const rawBodyParser: ({ limitBytes, }: {
+export declare const rawBodyParser: ({ limitBytes, maxClientBytesPerSecond, }: {
     limitBytes: number;
+    maxClientBytesPerSecond?: number | null;
 }) => (req: any, res: any, next: any) => void;
 //# sourceMappingURL=rawBodyParser.d.ts.map

package/dist/uploads/api/file-uploads/middleware/rawBodyParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rawBodyParser.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/middleware/rawBodyParser.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,GAAI,iBAE3B;IACD,UAAU,EAAE,MAAM,CAAA;CACnB,MACS,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SA6DtC,CAAA"}
+{"version":3,"file":"rawBodyParser.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/middleware/rawBodyParser.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,GAAI,0CAG3B;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC,MACS,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SA6FtC,CAAA"}

package/dist/uploads/api/file-uploads/shared.d.ts

@@ -3,13 +3,14 @@ import { IRBUploadChunk, IRBUploadSession, LoadModelCtx } from '../../../../../d
 import { Model } from '../../../../../vite/node_modules/mongoose';
 export type SessionUser = {
     id?: string;
-    current_tenant_id?: string;
+    currentTenantId?: string;
 };
 export type UploadSessionDoc = IRBUploadSession;
 export type UploadChunkDoc = Omit<IRBUploadChunk, "data"> & {
     data: Buffer;
 };
 export declare const getChunkSizeBytes: () => number;
+export declare const getMaxClientUploadBytesPerSecond: () => number | null;
 export declare const getSessionTtlMs: () => number;
 export declare const getRawBodyLimitBytes: (chunkSizeBytes: number) => number;
 export declare const getBucketName: () => string;

package/dist/uploads/api/file-uploads/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAkB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAc5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,YAQrE,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAWD,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAoB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAgB5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,YAQrE,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAWD,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}

package/dist/uploads/api/files/handler.d.ts

@@ -0,0 +1,4 @@
+import { Api } from '../../../../../api/src';
+declare const _default: (api: Api) => void;
+export default _default;
+//# sourceMappingURL=handler.d.ts.map

package/dist/uploads/api/files/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/files/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;yBAQlB,KAAK,GAAG;AAAxB,wBAGC"}

package/dist/uploads/api/files/handlers/deleteFile.d.ts

@@ -0,0 +1,9 @@
+import { ApiHandler } from '../../../../../../api/src';
+import { SessionUser } from '../../file-uploads/shared';
+type DeleteResponsePayload = {
+    ok: boolean;
+    error?: string;
+};
+export declare const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser>;
+export {};
+//# sourceMappingURL=deleteFile.d.ts.map

package/dist/uploads/api/files/handlers/deleteFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteFile.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/files/handlers/deleteFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAIzC,OAAO,EAA8B,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAGxF,KAAK,qBAAqB,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,qBAAqB,EAAE,WAAW,CAyC5F,CAAA"}

package/dist/uploads/api/files/handlers/getFile.d.ts

@@ -0,0 +1,3 @@
+import { ApiHandler } from '../../../../../../api/src';
+export declare const getFile: ApiHandler<Record<string, never>, Record<string, never>>;
+//# sourceMappingURL=getFile.d.ts.map

package/dist/uploads/api/files/handlers/getFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFile.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/files/handlers/getFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAezC,eAAO,MAAM,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAmF5E,CAAA"}

package/dist/uploads/api/files/handlers/getFile.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=getFile.test.d.ts.map

package/dist/uploads/api/files/handlers/getFile.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFile.test.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/files/handlers/getFile.test.ts"],"names":[],"mappings":""}

package/dist/uploads/api/files/index.d.ts

@@ -0,0 +1,4 @@
+export declare const Route = "/api/rb/files/:fileId";
+export declare const GetRoute = "/api/rb/files/:fileId";
+export declare const DeleteRoute = "/api/rb/files/:fileId";
+//# sourceMappingURL=index.d.ts.map

package/dist/uploads/api/files/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/files/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,KAAK,0BAA0B,CAAA;AAE5C,eAAO,MAAM,QAAQ,0BAAQ,CAAA;AAC7B,eAAO,MAAM,WAAW,0BAAQ,CAAA"}

package/dist/uploads.js

@@ -1,5 +1,5 @@
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-CTRE1McR.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-xi0XKR-Y.js"), "./api/files/handler.ts": () => import("./handler-BYVnU9H-.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
   return acc;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.473.0",
+  "version": "0.475.0",
   "type": "module",
   "files": [
     "dist"