@rpcbase/server 0.508.0 → 0.509.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,130 @@
1
+ import { models } from "@rpcbase/db";
2
+ import { getAccessibleByQuery, buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
3
+ const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
4
+ const RTS_USER_ID_HEADER = "rb-user-id";
5
+ const QUERY_MAX_LIMIT = 4096;
6
+ const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
7
+ const normalizeTenantId = (value) => {
8
+ if (typeof value !== "string") return null;
9
+ const normalized = value.trim();
10
+ return normalized ? normalized : null;
11
+ };
12
+ const normalizeSignedInTenants = (value) => {
13
+ if (!Array.isArray(value)) return [];
14
+ return value.map((tenantId) => normalizeTenantId(String(tenantId))).filter((tenantId) => Boolean(tenantId));
15
+ };
16
+ const getTenantIdFromRequest = (req) => {
17
+ const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM];
18
+ const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
19
+ const normalizedFromQuery = normalizeTenantId(queryTenantId);
20
+ if (normalizedFromQuery) return normalizedFromQuery;
21
+ return normalizeTenantId(req.session?.user?.currentTenantId);
22
+ };
23
+ const resolveRtsRequestTenantId = (req) => {
24
+ return getTenantIdFromRequest(req);
25
+ };
26
+ const isRtsRequestAuthorized = (req, tenantId) => {
27
+ const sessionUser = req.session?.user;
28
+ if (!sessionUser) return false;
29
+ const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants);
30
+ if (signedInTenants.length > 0) {
31
+ return signedInTenants.includes(tenantId);
32
+ }
33
+ const currentTenantId = normalizeTenantId(sessionUser.currentTenantId);
34
+ if (!currentTenantId) return false;
35
+ return currentTenantId === tenantId;
36
+ };
37
+ const buildRtsAbilityFromRequest = async (req, tenantId) => {
38
+ const sessionUserId = normalizeTenantId(req.session?.user?.id);
39
+ if (sessionUserId) {
40
+ const ability = buildAbilityFromSession({ tenantId, session: req.session });
41
+ return { ability, userId: sessionUserId };
42
+ }
43
+ const headerValue = req.headers[RTS_USER_ID_HEADER];
44
+ const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue;
45
+ const headerUserId = normalizeTenantId(headerUserIdRaw);
46
+ if (!headerUserId) {
47
+ const ability = buildAbilityFromSession({ tenantId, session: req.session });
48
+ return { ability, userId: null };
49
+ }
50
+ const rbCtx = { req: { session: null } };
51
+ const User = await models.getGlobal("RBUser", rbCtx);
52
+ const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean();
53
+ const tenantsRaw = user?.tenants;
54
+ const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : [];
55
+ if (!tenants.includes(tenantId)) {
56
+ throw new Error("Tenant not authorized for this session");
57
+ }
58
+ const roles = getTenantRolesFromSessionUser(user, tenantId);
59
+ return {
60
+ ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : ["owner"] }),
61
+ userId: headerUserId
62
+ };
63
+ };
64
+ const getTenantModel = async (tenantId, modelName) => {
65
+ const ctx = {
66
+ req: {
67
+ session: {
68
+ user: {
69
+ currentTenantId: tenantId
70
+ }
71
+ }
72
+ }
73
+ };
74
+ return models.get(modelName, ctx);
75
+ };
76
+ const normalizeLimit = (limit) => {
77
+ if (typeof limit !== "number") return QUERY_MAX_LIMIT;
78
+ if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
79
+ return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
80
+ };
81
+ const normalizeRtsQueryOptions = (options) => {
82
+ if (!options || typeof options !== "object") return {};
83
+ const normalized = {};
84
+ if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
85
+ normalized.projection = options.projection;
86
+ }
87
+ if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
88
+ normalized.sort = options.sort;
89
+ }
90
+ normalized.limit = normalizeLimit(options.limit);
91
+ return normalized;
92
+ };
93
+ const runRtsQuery = async ({
94
+ tenantId,
95
+ ability,
96
+ modelName,
97
+ query,
98
+ options,
99
+ allowInternalModels = false
100
+ }) => {
101
+ if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {
102
+ throw new Error("Model not allowed");
103
+ }
104
+ if (!ability.can("read", modelName)) {
105
+ throw new Error("forbidden");
106
+ }
107
+ const model = await getTenantModel(tenantId, modelName);
108
+ const projection = options.projection ?? void 0;
109
+ const sort = options.sort;
110
+ const limit = normalizeLimit(options.limit);
111
+ const accessQuery = getAccessibleByQuery(ability, "read", modelName);
112
+ const finalQuery = { $and: [query, accessQuery] };
113
+ const queryPromise = model.find(finalQuery, projection);
114
+ if (sort && Object.keys(sort).length) {
115
+ queryPromise.sort(sort);
116
+ }
117
+ queryPromise.limit(limit);
118
+ const data = await queryPromise;
119
+ return Array.isArray(data) ? data : [];
120
+ };
121
+ export {
122
+ RTS_TENANT_ID_QUERY_PARAM as R,
123
+ runRtsQuery as a,
124
+ buildRtsAbilityFromRequest as b,
125
+ RTS_USER_ID_HEADER as c,
126
+ isRtsRequestAuthorized as i,
127
+ normalizeRtsQueryOptions as n,
128
+ resolveRtsRequestTenantId as r
129
+ };
130
+ //# sourceMappingURL=queryExecutor-BZ0GSPM1.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"queryExecutor-BZ0GSPM1.js","sources":["../src/rts/queryExecutor.ts"],"sourcesContent":["import type { Request } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n id?: unknown\n currentTenantId?: unknown\n signedInTenants?: unknown\n}\n\nexport type RtsQueryOptions = {\n projection?: JsonObject\n sort?: Record<string, 1 | -1>\n limit?: number\n}\n\nexport const RTS_TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nexport const RTS_USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst normalizeTenantId = (value: unknown): string | null => {\n if (typeof value !== \"string\") return null\n const normalized = value.trim()\n return normalized ? normalized : null\n}\n\nconst normalizeSignedInTenants = (value: unknown): string[] => {\n if (!Array.isArray(value)) return []\n return value\n .map((tenantId) => normalizeTenantId(String(tenantId)))\n .filter((tenantId): tenantId is string => Boolean(tenantId))\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM]\n const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n const normalizedFromQuery = normalizeTenantId(queryTenantId)\n if (normalizedFromQuery) return normalizedFromQuery\n\n return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n if (sessionUserId) return sessionUserId\n\n const headerValue = req.headers[RTS_USER_ID_HEADER]\n const headerUserId = Array.isArray(headerValue) ? headerValue[0] : headerValue\n return normalizeTenantId(headerUserId)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n const sessionUser = req.session?.user as SessionUser | undefined\n if (!sessionUser) return false\n\n const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants)\n if (signedInTenants.length > 0) {\n return signedInTenants.includes(tenantId)\n }\n\n const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n if (!currentTenantId) return false\n return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n req: Request,\n tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n if (sessionUserId) {\n const ability = buildAbilityFromSession({ tenantId, session: req.session })\n return { ability, userId: sessionUserId }\n }\n\n const headerValue = req.headers[RTS_USER_ID_HEADER]\n const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue\n const headerUserId = normalizeTenantId(headerUserIdRaw)\n if (!headerUserId) {\n const ability = buildAbilityFromSession({ tenantId, session: req.session })\n return { ability, userId: null }\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as {\n tenants?: unknown\n tenantRoles?: unknown\n } | null\n\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n return {\n ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] }),\n userId: headerUserId,\n }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n if (!options || typeof options !== \"object\") return {}\n const normalized: RtsQueryOptions = {}\n\n if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n normalized.projection = options.projection\n }\n\n if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n normalized.sort = options.sort\n }\n\n normalized.limit = normalizeLimit(options.limit)\n\n return normalized\n}\n\nexport const runRtsQuery = async ({\n tenantId,\n ability,\n modelName,\n query,\n options,\n allowInternalModels = false,\n}: {\n tenantId: string\n ability: AppAbility\n modelName: string\n query: JsonObject\n options: RtsQueryOptions\n allowInternalModels?: boolean\n}): Promise<unknown[]> => {\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n throw new Error(\"Model not allowed\")\n }\n\n if (!ability.can(\"read\", modelName as AclSubjectType)) {\n throw new Error(\"forbidden\")\n }\n\n const model = await getTenantModel(tenantId, modelName)\n const projection = options.projection ?? undefined\n const sort = options.sort\n const limit = normalizeLimit(options.limit)\n\n const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n const queryPromise = model.find(finalQuery, projection)\n if (sort && Object.keys(sort).length) {\n queryPromise.sort(sort)\n }\n queryPromise.limit(limit)\n\n const data = await queryPromise\n return Array.isArray(data) ? data : []\n}\n"],"names":[],"mappings":";;AAoBO,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAElC,MAAM,kBAAkB;AACxB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,oBAAoB,CAAC,UAAkC;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEA,MAAM,2BAA2B,CAAC,UAA6B;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,SAAO,MACJ,IAAI,CAAC,aAAa,kBAAkB,OAAO,QAAQ,CAAC,CAAC,EACrD,OAAO,CAAC,aAAiC,QAAQ,QAAQ,CAAC;AAC/D;AAEA,MAAM,yBAAyB,CAAC,QAAgC;AAC9D,QAAM,WAAW,IAAI,QAAQ,yBAAyB;AACtD,QAAM,gBAAgB,MAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC,IAAI;AAC9D,QAAM,sBAAsB,kBAAkB,aAAa;AAC3D,MAAI,oBAAqB,QAAO;AAEhC,SAAO,kBAAmB,IAAI,SAAS,MAAkC,eAAe;AAC1F;AAEO,MAAM,4BAA4B,CAAC,QAAgC;AACxE,SAAO,uBAAuB,GAAG;AACnC;AAWO,MAAM,yBAAyB,CAAC,KAAc,aAA8B;AACjF,QAAM,cAAc,IAAI,SAAS;AACjC,MAAI,CAAC,YAAa,QAAO;AAEzB,QAAM,kBAAkB,yBAAyB,YAAY,eAAe;AAC5E,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,gBAAgB,SAAS,QAAQ;AAAA,EAC1C;AAEA,QAAM,kBAAkB,kBAAkB,YAAY,eAAe;AACrE,MAAI,CAAC,gBAAiB,QAAO;AAC7B,SAAO,oBAAoB;AAC7B;AAEO,MAAM,6BAA6B,OACxC,KACA,aAC4D;AAC5D,QAAM,gBAAgB,kBAAmB,IAAI,SAAS,MAAkC,EAAE;AAC1F,MAAI,eAAe;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,cAAA;AAAA,EAC5B;AAEA,QAAM,cAAc,IAAI,QAAQ,kBAAkB;AAClD,QAAM,kBAAkB,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI;AACtE,QAAM,eAAe,kBAAkB,eAAe;AACtD,MAAI,CAAC,cAAc;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,KAAA;AAAA,EAC5B;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAK/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC,IAAI,CAAA;AACzF,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,SAAO;AAAA,IACL,SAAS,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAAA,IACjG,QAAQ;AAAA,EAAA;AAEZ;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEO,MAAM,2BAA2B,CAAC,YAA0D;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA8B,CAAA;AAEpC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAE/C,SAAO;AACT;AAEO,MAAM,cAAc,OAAO;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB,MAO0B;AACxB,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,SAAS,GAAG;AAC/D,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AACtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAE1C,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,SAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AACtC;"}
@@ -1,10 +1,12 @@
1
1
  import { ReactNode } from 'react';
2
2
  import { StaticHandler } from '@rpcbase/router';
3
+ import { StaticRpcbaseRtsHydrationData } from '@rpcbase/client';
3
4
  import * as express from "express";
4
5
  export declare function renderSSR(req: express.Request, dataRoutes: StaticHandler["dataRoutes"]): Promise<{
5
6
  element: ReactNode | null;
6
7
  isMatched: boolean;
7
8
  statusCode: number;
9
+ rtsHydrationData?: StaticRpcbaseRtsHydrationData | null;
8
10
  redirectResponse?: Response;
9
11
  redirectRouteId?: string | null;
10
12
  redirectRoutePath?: string | null;
@@ -1 +1 @@
1
- {"version":3,"file":"renderSSR.d.ts","sourceRoot":"","sources":["../src/renderSSR.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,SAAS,EAAc,MAAM,OAAO,CAAA;AAC7C,OAAO,EAGL,aAAa,EACd,MAAM,iBAAiB,CAAA;AAOxB,wBAAsB,SAAS,CAC7B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,GACtC,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,QAAQ,CAAA;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,CAAC,CAwED"}
1
+ {"version":3,"file":"renderSSR.d.ts","sourceRoot":"","sources":["../src/renderSSR.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,SAAS,EAAc,MAAM,OAAO,CAAA;AAE7C,OAAO,EAGL,aAAa,EACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,iBAAiB,CAAA;AA4DxB,wBAAsB,SAAS,CAC7B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,GACtC,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAAA;IACvD,gBAAgB,CAAC,EAAE,QAAQ,CAAA;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,CAAC,CAqGD"}
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGlK,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AAqBlE,KAAK,UAAU,GAAG;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,UAAU,CAAA;CACpB,CAAA;AAoBD,KAAK,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAA;AAiC3D,cAAM,SAAS;IACb,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAA;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAA;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;gBAE3D,EACjB,EAAE,EACF,EAAE,EACF,IAAI,GACL,EAAE;QACD,EAAE,EAAE,MAAM,CAAA;QACV,EAAE,EAAE,SAAS,CAAA;QACb,IAAI,EAAE,UAAU,CAAA;KACjB;IAOM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAO7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5C,KAAK,IAAI,IAAI;IAQb,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAOvD;AA0kBD,eAAO,MAAM,OAAO,GAAI,4NAQrB;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,cAAc,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,IAyHH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,SAAS,SAAS,KAAG,IAEvD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,IAE3E,CAAA;AAED,cAAc,UAAU,CAAA"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAA6F,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAG5I,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AA8BlE,KAAK,UAAU,GAAG;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,UAAU,CAAA;CACpB,CAAA;AAoBD,KAAK,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAA;AA6B3D,cAAM,SAAS;IACb,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAA;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAA;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;gBAE3D,EACjB,EAAE,EACF,EAAE,EACF,IAAI,GACL,EAAE;QACD,EAAE,EAAE,MAAM,CAAA;QACV,EAAE,EAAE,SAAS,CAAA;QACb,IAAI,EAAE,UAAU,CAAA;KACjB;IAOM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAO7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5C,KAAK,IAAI,IAAI;IAQb,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAOvD;AAqiBD,eAAO,MAAM,OAAO,GAAI,4NAQrB;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,cAAc,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,IAyHH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,SAAS,SAAS,KAAG,IAEvD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,IAE3E,CAAA;AAED,cAAc,UAAU,CAAA"}
package/dist/rts/index.js CHANGED
@@ -1,17 +1,15 @@
1
1
  import { randomUUID } from "node:crypto";
2
2
  import { models } from "@rpcbase/db";
3
- import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility, getAccessibleByQuery } from "@rpcbase/db/acl";
3
+ import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
4
4
  import { WebSocketServer } from "ws";
5
+ import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, a as runRtsQuery } from "../queryExecutor-BZ0GSPM1.js";
5
6
  const routes = Object.entries({
6
7
  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BNrqh1Kb.js") })
7
8
  }).reduce((acc, [path, mod]) => {
8
9
  acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
9
10
  return acc;
10
11
  }, {});
11
- const TENANT_ID_QUERY_PARAM = "rb-tenant-id";
12
- const USER_ID_HEADER = "rb-user-id";
13
12
  const QUERY_KEY_MAX_LEN = 4096;
14
- const QUERY_MAX_LIMIT = 4096;
15
13
  const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
16
14
  const DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024;
17
15
  const DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256;
@@ -151,7 +149,7 @@ const parseUpgradeMeta = async ({
151
149
  url,
152
150
  sessionMiddleware
153
151
  }) => {
154
- const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM);
152
+ const tenantId = url.searchParams.get(RTS_TENANT_ID_QUERY_PARAM);
155
153
  if (!tenantId) {
156
154
  throw new Error("Missing rb-tenant-id query parameter");
157
155
  }
@@ -183,7 +181,7 @@ const parseUpgradeMeta = async ({
183
181
  const ability2 = buildAbilityFromSession({ tenantId, session: upgradeReq.session });
184
182
  return { tenantId, userId: sessionUserId, ability: ability2 };
185
183
  }
186
- const raw = req.headers[USER_ID_HEADER];
184
+ const raw = req.headers[RTS_USER_ID_HEADER];
187
185
  const headerUserId = Array.isArray(raw) ? raw[0] : raw;
188
186
  if (!headerUserId) {
189
187
  throw new Error("Missing rb-user-id header (reverse-proxy) and no session middleware configured");
@@ -212,23 +210,6 @@ const getTenantModel = async (tenantId, modelName) => {
212
210
  };
213
211
  return models.get(modelName, ctx);
214
212
  };
215
- const normalizeLimit = (limit) => {
216
- if (typeof limit !== "number") return QUERY_MAX_LIMIT;
217
- if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
218
- return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
219
- };
220
- const normalizeOptions = (options) => {
221
- if (!options || typeof options !== "object") return {};
222
- const normalized = {};
223
- if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
224
- normalized.projection = options.projection;
225
- }
226
- if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
227
- normalized.sort = options.sort;
228
- }
229
- normalized.limit = normalizeLimit(options.limit);
230
- return normalized;
231
- };
232
213
  const makeDispatchKey = (tenantId, modelName) => `${tenantId}:${modelName}`;
233
214
  const clearDispatchTimer = (tenantId, modelName) => {
234
215
  const key = makeDispatchKey(tenantId, modelName);
@@ -255,27 +236,14 @@ const runAndSendQuery = async ({
255
236
  query,
256
237
  options
257
238
  }) => {
258
- if (!ability.can("read", modelName)) {
259
- const payload2 = { type: "query-payload", modelName, queryKey, error: "forbidden" };
260
- for (const socketId of targetSocketIds) {
261
- const ws = sockets.get(socketId);
262
- if (!ws) continue;
263
- sendWs(ws, payload2);
264
- }
265
- return;
266
- }
267
- const model = await getTenantModel(tenantId, modelName);
268
- const projection = options.projection ?? void 0;
269
- const sort = options.sort;
270
- const limit = normalizeLimit(options.limit);
271
- const accessQuery = getAccessibleByQuery(ability, "read", modelName);
272
- const finalQuery = { $and: [query, accessQuery] };
273
- const queryPromise = model.find(finalQuery, projection);
274
- if (sort && Object.keys(sort).length) {
275
- queryPromise.sort(sort);
276
- }
277
- queryPromise.limit(limit);
278
- const data = await queryPromise;
239
+ const data = await runRtsQuery({
240
+ tenantId,
241
+ ability,
242
+ modelName,
243
+ query,
244
+ options,
245
+ allowInternalModels
246
+ });
279
247
  const payload = { type: "query-payload", modelName, queryKey, data };
280
248
  for (const socketId of targetSocketIds) {
281
249
  const ws = sockets.get(socketId);
@@ -492,7 +460,7 @@ const handleClientMessage = async ({
492
460
  return;
493
461
  }
494
462
  if (!message.query || typeof message.query !== "object") return;
495
- const options = normalizeOptions(message.options);
463
+ const options = normalizeRtsQueryOptions(message.options);
496
464
  const ability = meta.ability;
497
465
  if (!ability.can("read", message.modelName)) {
498
466
  sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error: "forbidden" });
@@ -527,6 +495,9 @@ const handleClientMessage = async ({
527
495
  sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
528
496
  return;
529
497
  }
498
+ if (message.runInitialQuery === false) {
499
+ return;
500
+ }
530
501
  }
531
502
  try {
532
503
  await runAndSendQuery({
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype QueryOptions = {\n projection?: JsonObject\n sort?: Record<string, 1 | -1>\n limit?: number\n}\n\ntype ClientMessage =\n | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | { type: \"register-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | { type: \"remove-query\"; modelName: string; queryKey: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n tenantId: string\n userId: string\n ability: AppAbility\n}\n\ntype SessionUser = {\n id?: string\n currentTenantId?: string\n signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n session?: {\n user?: SessionUser\n }\n}\n\ntype Subscription = {\n query: JsonObject\n options: QueryOptions\n socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nconst USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_KEY_MAX_LEN = 4096\nconst QUERY_MAX_LIMIT = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n public readonly id: string\n public readonly tenantId: string\n public readonly userId: string\n\n private readonly ws: WebSocket\n private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n public constructor({\n id,\n ws,\n meta,\n }: {\n id: string\n ws: WebSocket\n meta: SocketMeta\n }) {\n this.id = id\n this.ws = ws\n this.tenantId = meta.tenantId\n this.userId = meta.userId\n }\n\n public on(event: string, handler: (payload: unknown) => void): () => void {\n const set = this.handlers.get(event) ?? new Set()\n set.add(handler)\n this.handlers.set(event, set)\n return () => this.off(event, handler)\n }\n\n public off(event: string, handler: (payload: unknown) => void): void {\n const set = this.handlers.get(event)\n if (!set) return\n set.delete(handler)\n if (!set.size) this.handlers.delete(event)\n }\n\n public emit(event: string, payload?: unknown): void {\n sendWs(this.ws, { type: \"event\", event, payload })\n }\n\n public close(): void {\n try {\n this.ws.close()\n } catch {\n // ignore\n }\n }\n\n public dispatch(event: string, payload: unknown): void {\n const set = this.handlers.get(event)\n if (!set) return\n for (const handler of set) {\n handler(payload)\n }\n }\n}\n\nconst rawToText = (raw: RawData): string => {\n if (typeof raw === \"string\") return raw\n if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n if (ws.readyState !== 1) return\n ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n if (socket.listenerCount(\"error\") > 0) return\n\n socket.on(\"error\", (err: unknown) => {\n const message = err instanceof Error ? err.message : String(err)\n const name = err instanceof Error ? err.name : typeof err\n const stack = err instanceof Error ? err.stack : undefined\n const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n console.warn(\"[rb/rts] socket error\", {\n name,\n code,\n message,\n stack,\n remoteAddress: socket.remoteAddress,\n remotePort: socket.remotePort,\n localAddress: socket.localAddress,\n localPort: socket.localPort,\n ...context?.(),\n })\n })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n const raw = err instanceof Error ? err.message : \"Unknown error\"\n const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n const maxLen = 256\n if (trimmedModelList.length <= maxLen) return trimmedModelList\n return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n type MiddlewareReq = Parameters<RequestHandler>[0]\n type MiddlewareRes = Parameters<RequestHandler>[1]\n type MiddlewareNext = Parameters<RequestHandler>[2]\n\n await new Promise<void>((resolve, reject) => {\n const next: MiddlewareNext = (err) => {\n if (err) reject(err)\n else resolve()\n }\n\n sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n })\n}\n\nconst parseUpgradeMeta = async ({\n req,\n url,\n sessionMiddleware,\n}: {\n req: IncomingMessage\n url: URL\n sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n if (!tenantId) {\n throw new Error(\"Missing rb-tenant-id query parameter\")\n }\n\n if (sessionMiddleware) {\n const upgradeReq = req as UpgradeRequest\n try {\n await runSessionMiddleware(sessionMiddleware, upgradeReq)\n } catch {\n throw new Error(\"Failed to load session for RTS\")\n }\n\n const sessionUser = upgradeReq.session?.user\n const sessionUserId = sessionUser?.id\n if (!sessionUserId) {\n throw new Error(\"Not signed in (missing session.user.id)\")\n }\n\n const signedInTenants = sessionUser?.signedInTenants\n const currentTenantId = sessionUser?.currentTenantId\n\n if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n if (!signedInTenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else if (currentTenantId) {\n if (currentTenantId !== tenantId) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n return { tenantId, userId: sessionUserId, ability }\n }\n\n const raw = req.headers[USER_ID_HEADER]\n const headerUserId = Array.isArray(raw) ? raw[0] : raw\n if (!headerUserId) {\n throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nconst normalizeOptions = (options: QueryOptions | undefined): QueryOptions => {\n if (!options || typeof options !== \"object\") return {}\n const normalized: QueryOptions = {}\n\n if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n normalized.projection = options.projection\n }\n\n if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n normalized.sort = options.sort\n }\n\n normalized.limit = normalizeLimit(options.limit)\n\n return normalized\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n const timer = dispatchTimers.get(key)\n if (!timer) return\n clearTimeout(timer)\n dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n if (dispatchTimers.has(key)) return\n\n const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n dispatchTimers.set(key, setTimeout(() => {\n dispatchTimers.delete(key)\n void dispatchSubscriptionsForModel(tenantId, modelName)\n }, delay))\n}\n\nconst runAndSendQuery = async ({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query,\n options,\n}: {\n tenantId: string\n targetSocketIds: string[]\n ability: AppAbility\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): Promise<void> => {\n if (!ability.can(\"read\", modelName as AclSubjectType)) {\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error: \"forbidden\" }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n return\n }\n\n const model = await getTenantModel(tenantId, modelName)\n\n const projection = options.projection ?? undefined\n const sort = options.sort\n const limit = normalizeLimit(options.limit)\n\n const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n const queryPromise = model.find(finalQuery, projection)\n if (sort && Object.keys(sort).length) {\n queryPromise.sort(sort)\n }\n queryPromise.limit(limit)\n\n const data = await queryPromise\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantSubs = subscriptions.get(tenantId)\n if (!tenantSubs || !tenantSubs.size) return\n\n for (const userSubs of tenantSubs.values()) {\n const modelSubs = userSubs.get(modelName)\n if (!modelSubs || !modelSubs.size) continue\n\n for (const [queryKey, sub] of modelSubs.entries()) {\n const targetSocketIds = Array.from(sub.socketIds)\n if (!targetSocketIds.length) continue\n\n const socketId = targetSocketIds[0]\n const meta = socketMeta.get(socketId)\n const ability = meta?.ability\n if (!ability) continue\n\n try {\n await runAndSendQuery({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query: sub.query,\n options: sub.options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n }\n }\n }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n changeStreams.set(tenantId, tenantStreams)\n if (tenantStreams.has(modelName)) return\n\n const model = await getTenantModel(tenantId, modelName)\n\n const stream = model.watch([], {\n fullDocument: \"updateLookup\",\n })\n\n stream.on(\"change\", () => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n })\n\n stream.on(\"close\", () => {\n clearDispatchTimer(tenantId, modelName)\n const map = changeStreams.get(tenantId)\n map?.delete(modelName)\n if (map && map.size === 0) changeStreams.delete(tenantId)\n })\n\n stream.on(\"error\", () => {\n try {\n clearDispatchTimer(tenantId, modelName)\n stream.close()\n } catch {\n // ignore\n }\n })\n\n tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n query,\n options,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): void => {\n const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n subscriptions.set(tenantId, tenantSubs)\n\n const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n tenantSubs.set(userId, userSubs)\n\n const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n userSubs.set(modelName, modelSubs)\n\n const existing = modelSubs.get(queryKey)\n if (existing) {\n existing.socketIds.add(socketId)\n } else {\n modelSubs.set(queryKey, {\n query,\n options,\n socketIds: new Set([socketId]),\n })\n }\n\n const byModel = socketSubscriptions.get(socketId) ?? new Map()\n socketSubscriptions.set(socketId, byModel)\n\n const querySet = byModel.get(modelName) ?? new Set()\n byModel.set(modelName, querySet)\n querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n}): void => {\n const tenantSubs = subscriptions.get(tenantId)\n const userSubs = tenantSubs?.get(userId)\n const modelSubs = userSubs?.get(modelName)\n const sub = modelSubs?.get(queryKey)\n if (sub) {\n sub.socketIds.delete(socketId)\n if (!sub.socketIds.size) {\n modelSubs?.delete(queryKey)\n }\n }\n\n const byModel = socketSubscriptions.get(socketId)\n const set = byModel?.get(modelName)\n if (set) {\n set.delete(queryKey)\n if (!set.size) {\n byModel?.delete(modelName)\n }\n }\n\n if (modelSubs && modelSubs.size === 0) {\n userSubs?.delete(modelName)\n }\n\n if (userSubs && userSubs.size === 0) {\n tenantSubs?.delete(userId)\n }\n\n const hasAnyModelSubs = (() => {\n const byUser = subscriptions.get(tenantId)\n if (!byUser) return false\n for (const subs of byUser.values()) {\n const modelSubs = subs.get(modelName)\n if (modelSubs && modelSubs.size > 0) return true\n }\n return false\n })()\n\n if (!hasAnyModelSubs) {\n const tenantStreams = changeStreams.get(tenantId)\n const stream = tenantStreams?.get(modelName)\n if (stream) {\n try {\n stream.close()\n } catch {\n // ignore\n }\n clearDispatchTimer(tenantId, modelName)\n tenantStreams?.delete(modelName)\n if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n }\n }\n\n if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n const meta = socketMeta.get(socketId)\n if (meta) {\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const [modelName, keys] of byModel.entries()) {\n for (const queryKey of keys.values()) {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName,\n queryKey,\n })\n }\n }\n }\n }\n\n socketSubscriptions.delete(socketId)\n\n const cleanupFns = socketCleanup.get(socketId) ?? []\n socketCleanup.delete(socketId)\n for (const fn of cleanupFns) {\n try {\n fn()\n } catch {\n // ignore\n }\n }\n\n sockets.delete(socketId)\n socketMeta.delete(socketId)\n socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n socketId,\n meta,\n message,\n}: {\n socketId: string\n meta: SocketMeta\n message: ClientMessage\n}): Promise<void> => {\n const ws = sockets.get(socketId)\n if (!ws) return\n\n if (message.type === \"event\") {\n const wrapper = socketWrappers.get(socketId)\n wrapper?.dispatch(message.event, message.payload)\n return\n }\n\n if (!message.modelName || typeof message.modelName !== \"string\") return\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n return\n }\n if (!message.queryKey || typeof message.queryKey !== \"string\") return\n if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n if (message.type === \"remove-query\") {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n })\n return\n }\n\n if (!message.query || typeof message.query !== \"object\") return\n\n const options = normalizeOptions(message.options)\n const ability = meta.ability\n\n if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n return\n }\n\n if (message.type === \"register-query\") {\n const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n if (!existing) {\n let count = 0\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const set of byModel.values()) count += set.size\n }\n\n if (count >= maxSubscriptionsPerSocket) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n return\n }\n }\n\n addSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n\n try {\n await ensureChangeStream(meta.tenantId, message.modelName)\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n return\n }\n }\n\n try {\n await runAndSendQuery({\n tenantId: meta.tenantId,\n targetSocketIds: [socketId],\n ability,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n }\n}\n\nexport const initRts = ({\n server,\n path = \"/rts\",\n sessionMiddleware,\n maxPayloadBytes: maxPayloadBytesArg,\n maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n dispatchDebounceMs: dispatchDebounceMsArg,\n allowInternalModels: allowInternalModelsArg,\n}: {\n server: HttpServer\n path?: string\n sessionMiddleware?: RequestHandler\n maxPayloadBytes?: number\n maxSubscriptionsPerSocket?: number\n dispatchDebounceMs?: number\n allowInternalModels?: boolean\n}): void => {\n if (initializedServers.has(server)) return\n initializedServers.add(server)\n\n if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n }\n\n if (\n typeof maxSubscriptionsPerSocketArg === \"number\"\n && Number.isFinite(maxSubscriptionsPerSocketArg)\n && maxSubscriptionsPerSocketArg > 0\n ) {\n maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n }\n\n if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n }\n\n allowInternalModels = Boolean(allowInternalModelsArg)\n\n const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n ensureSocketErrorHandler(socket, () => ({\n upgradeHost: req.headers.host ?? \"\",\n upgradeUrl: req.url ?? \"\",\n userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n }))\n upgradeMeta.delete(req)\n\n let url: URL\n try {\n url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n } catch {\n badRequest(socket, \"Invalid URL\")\n return\n }\n\n if (url.pathname !== path) return\n\n void (async() => {\n try {\n const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n upgradeMeta.set(req, meta)\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit(\"connection\", ws, req)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n if (message.startsWith(\"Missing rb-tenant-id\")) {\n badRequest(socket, message)\n return\n }\n unauthorized(socket, message)\n return\n }\n })().catch(() => {\n badRequest(socket, \"RTS upgrade failed\")\n })\n })\n\n wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n const meta = upgradeMeta.get(req)\n upgradeMeta.delete(req)\n if (!meta) {\n try {\n ws.close()\n } catch {\n // ignore\n }\n return\n }\n\n const socketId = randomUUID()\n sockets.set(socketId, ws)\n socketMeta.set(socketId, meta)\n\n const wrapper = new RtsSocket({ id: socketId, ws, meta })\n socketWrappers.set(socketId, wrapper)\n\n const cleanupFns: Array<() => void> = []\n for (const handler of customHandlers) {\n try {\n const cleanup = handler(wrapper)\n if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n } catch {\n // ignore\n }\n }\n if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n ws.on(\"message\", (raw: RawData) => {\n let parsed: unknown\n try {\n parsed = safeJsonParse(raw)\n } catch {\n return\n }\n\n if (!parsed || typeof parsed !== \"object\") return\n const message = parsed as { type?: unknown }\n if (\n message.type !== \"event\"\n && message.type !== \"run-query\"\n && message.type !== \"register-query\"\n && message.type !== \"remove-query\"\n ) return\n void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n })\n\n ws.on(\"close\", () => {\n cleanupSocket(socketId)\n })\n\n ws.on(\"error\", () => {\n cleanupSocket(socketId)\n })\n })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["ability","payload","socketId","modelSubs"],"mappings":";;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;ACmDL,MAAM,wBAAwB;AAC9B,MAAM,iBAAiB;AAEvB,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;AAExB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAI,qBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMA,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQ,cAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEA,MAAM,mBAAmB,CAAC,YAAoD;AAC5E,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA2B,CAAA;AAEjC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAE/C,SAAO;AACT;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAMC,WAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,OAAO,YAAA;AACpF,eAAW,YAAY,iBAAiB;AACtC,YAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,UAAI,CAAC,GAAI;AACT,aAAO,IAAIA,QAAO;AAAA,IACpB;AACA;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAE1C,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,UAAM,YAAY,SAAS,IAAI,SAAS;AACxC,QAAI,CAAC,aAAa,CAAC,UAAU,KAAM;AAEnC,eAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,UAAI,CAAC,gBAAgB,OAAQ;AAE7B,YAAM,WAAW,gBAAgB,CAAC;AAClC,YAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,YAAM,UAAU,MAAM;AACtB,UAAI,CAAC,QAAS;AAEd,UAAI;AACF,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,IAAI;AAAA,UACX,SAAS,IAAI;AAAA,QAAA,CACd;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,cAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,MAAA;AAC7E,mBAAWC,aAAY,iBAAiB;AACtC,gBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,cAAI,CAAC,GAAI;AACT,iBAAO,IAAI,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAAA,EACjC,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,QAAM,mBAAmB,MAAM;AAC7B,UAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,QAAI,CAAC,OAAQ,QAAO;AACpB,eAAW,QAAQ,OAAO,UAAU;AAClC,YAAMC,aAAY,KAAK,IAAI,SAAS;AACpC,UAAIA,cAAaA,WAAU,OAAO,EAAG,QAAO;AAAA,IAC9C;AACA,WAAO;AAAA,EACT,GAAA;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,SAAS;AACtC,qBAAe,OAAO,SAAS;AAC/B,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,iBAAiB,QAAQ,OAAO;AAChD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,mBAAmB,KAAK,UAAU,QAAQ,SAAS;AAAA,IAC3D,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
1
+ {"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n RTS_USER_ID_HEADER as USER_ID_HEADER,\n normalizeRtsQueryOptions,\n runRtsQuery,\n type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | {\n type: \"register-query\"\n modelName: string\n queryKey: string\n query: JsonObject\n options?: QueryOptions\n runInitialQuery?: boolean\n }\n | { type: \"remove-query\"; modelName: string; queryKey: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n tenantId: string\n userId: string\n ability: AppAbility\n}\n\ntype SessionUser = {\n id?: string\n currentTenantId?: string\n signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n session?: {\n user?: SessionUser\n }\n}\n\ntype Subscription = {\n query: JsonObject\n options: QueryOptions\n socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n public readonly id: string\n public readonly tenantId: string\n public readonly userId: string\n\n private readonly ws: WebSocket\n private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n public constructor({\n id,\n ws,\n meta,\n }: {\n id: string\n ws: WebSocket\n meta: SocketMeta\n }) {\n this.id = id\n this.ws = ws\n this.tenantId = meta.tenantId\n this.userId = meta.userId\n }\n\n public on(event: string, handler: (payload: unknown) => void): () => void {\n const set = this.handlers.get(event) ?? new Set()\n set.add(handler)\n this.handlers.set(event, set)\n return () => this.off(event, handler)\n }\n\n public off(event: string, handler: (payload: unknown) => void): void {\n const set = this.handlers.get(event)\n if (!set) return\n set.delete(handler)\n if (!set.size) this.handlers.delete(event)\n }\n\n public emit(event: string, payload?: unknown): void {\n sendWs(this.ws, { type: \"event\", event, payload })\n }\n\n public close(): void {\n try {\n this.ws.close()\n } catch {\n // ignore\n }\n }\n\n public dispatch(event: string, payload: unknown): void {\n const set = this.handlers.get(event)\n if (!set) return\n for (const handler of set) {\n handler(payload)\n }\n }\n}\n\nconst rawToText = (raw: RawData): string => {\n if (typeof raw === \"string\") return raw\n if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n if (ws.readyState !== 1) return\n ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n if (socket.listenerCount(\"error\") > 0) return\n\n socket.on(\"error\", (err: unknown) => {\n const message = err instanceof Error ? err.message : String(err)\n const name = err instanceof Error ? err.name : typeof err\n const stack = err instanceof Error ? err.stack : undefined\n const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n console.warn(\"[rb/rts] socket error\", {\n name,\n code,\n message,\n stack,\n remoteAddress: socket.remoteAddress,\n remotePort: socket.remotePort,\n localAddress: socket.localAddress,\n localPort: socket.localPort,\n ...context?.(),\n })\n })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n const raw = err instanceof Error ? err.message : \"Unknown error\"\n const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n const maxLen = 256\n if (trimmedModelList.length <= maxLen) return trimmedModelList\n return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n type MiddlewareReq = Parameters<RequestHandler>[0]\n type MiddlewareRes = Parameters<RequestHandler>[1]\n type MiddlewareNext = Parameters<RequestHandler>[2]\n\n await new Promise<void>((resolve, reject) => {\n const next: MiddlewareNext = (err) => {\n if (err) reject(err)\n else resolve()\n }\n\n sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n })\n}\n\nconst parseUpgradeMeta = async ({\n req,\n url,\n sessionMiddleware,\n}: {\n req: IncomingMessage\n url: URL\n sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n if (!tenantId) {\n throw new Error(\"Missing rb-tenant-id query parameter\")\n }\n\n if (sessionMiddleware) {\n const upgradeReq = req as UpgradeRequest\n try {\n await runSessionMiddleware(sessionMiddleware, upgradeReq)\n } catch {\n throw new Error(\"Failed to load session for RTS\")\n }\n\n const sessionUser = upgradeReq.session?.user\n const sessionUserId = sessionUser?.id\n if (!sessionUserId) {\n throw new Error(\"Not signed in (missing session.user.id)\")\n }\n\n const signedInTenants = sessionUser?.signedInTenants\n const currentTenantId = sessionUser?.currentTenantId\n\n if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n if (!signedInTenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else if (currentTenantId) {\n if (currentTenantId !== tenantId) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n return { tenantId, userId: sessionUserId, ability }\n }\n\n const raw = req.headers[USER_ID_HEADER]\n const headerUserId = Array.isArray(raw) ? raw[0] : raw\n if (!headerUserId) {\n throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n const timer = dispatchTimers.get(key)\n if (!timer) return\n clearTimeout(timer)\n dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n if (dispatchTimers.has(key)) return\n\n const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n dispatchTimers.set(key, setTimeout(() => {\n dispatchTimers.delete(key)\n void dispatchSubscriptionsForModel(tenantId, modelName)\n }, delay))\n}\n\nconst runAndSendQuery = async ({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query,\n options,\n}: {\n tenantId: string\n targetSocketIds: string[]\n ability: AppAbility\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): Promise<void> => {\n const data = await runRtsQuery({\n tenantId,\n ability,\n modelName,\n query,\n options,\n allowInternalModels,\n })\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantSubs = subscriptions.get(tenantId)\n if (!tenantSubs || !tenantSubs.size) return\n\n for (const userSubs of tenantSubs.values()) {\n const modelSubs = userSubs.get(modelName)\n if (!modelSubs || !modelSubs.size) continue\n\n for (const [queryKey, sub] of modelSubs.entries()) {\n const targetSocketIds = Array.from(sub.socketIds)\n if (!targetSocketIds.length) continue\n\n const socketId = targetSocketIds[0]\n const meta = socketMeta.get(socketId)\n const ability = meta?.ability\n if (!ability) continue\n\n try {\n await runAndSendQuery({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query: sub.query,\n options: sub.options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n }\n }\n }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n changeStreams.set(tenantId, tenantStreams)\n if (tenantStreams.has(modelName)) return\n\n const model = await getTenantModel(tenantId, modelName)\n\n const stream = model.watch([], {\n fullDocument: \"updateLookup\",\n })\n\n stream.on(\"change\", () => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n })\n\n stream.on(\"close\", () => {\n clearDispatchTimer(tenantId, modelName)\n const map = changeStreams.get(tenantId)\n map?.delete(modelName)\n if (map && map.size === 0) changeStreams.delete(tenantId)\n })\n\n stream.on(\"error\", () => {\n try {\n clearDispatchTimer(tenantId, modelName)\n stream.close()\n } catch {\n // ignore\n }\n })\n\n tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n query,\n options,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): void => {\n const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n subscriptions.set(tenantId, tenantSubs)\n\n const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n tenantSubs.set(userId, userSubs)\n\n const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n userSubs.set(modelName, modelSubs)\n\n const existing = modelSubs.get(queryKey)\n if (existing) {\n existing.socketIds.add(socketId)\n } else {\n modelSubs.set(queryKey, {\n query,\n options,\n socketIds: new Set([socketId]),\n })\n }\n\n const byModel = socketSubscriptions.get(socketId) ?? new Map()\n socketSubscriptions.set(socketId, byModel)\n\n const querySet = byModel.get(modelName) ?? new Set()\n byModel.set(modelName, querySet)\n querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n}): void => {\n const tenantSubs = subscriptions.get(tenantId)\n const userSubs = tenantSubs?.get(userId)\n const modelSubs = userSubs?.get(modelName)\n const sub = modelSubs?.get(queryKey)\n if (sub) {\n sub.socketIds.delete(socketId)\n if (!sub.socketIds.size) {\n modelSubs?.delete(queryKey)\n }\n }\n\n const byModel = socketSubscriptions.get(socketId)\n const set = byModel?.get(modelName)\n if (set) {\n set.delete(queryKey)\n if (!set.size) {\n byModel?.delete(modelName)\n }\n }\n\n if (modelSubs && modelSubs.size === 0) {\n userSubs?.delete(modelName)\n }\n\n if (userSubs && userSubs.size === 0) {\n tenantSubs?.delete(userId)\n }\n\n const hasAnyModelSubs = (() => {\n const byUser = subscriptions.get(tenantId)\n if (!byUser) return false\n for (const subs of byUser.values()) {\n const modelSubs = subs.get(modelName)\n if (modelSubs && modelSubs.size > 0) return true\n }\n return false\n })()\n\n if (!hasAnyModelSubs) {\n const tenantStreams = changeStreams.get(tenantId)\n const stream = tenantStreams?.get(modelName)\n if (stream) {\n try {\n stream.close()\n } catch {\n // ignore\n }\n clearDispatchTimer(tenantId, modelName)\n tenantStreams?.delete(modelName)\n if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n }\n }\n\n if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n const meta = socketMeta.get(socketId)\n if (meta) {\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const [modelName, keys] of byModel.entries()) {\n for (const queryKey of keys.values()) {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName,\n queryKey,\n })\n }\n }\n }\n }\n\n socketSubscriptions.delete(socketId)\n\n const cleanupFns = socketCleanup.get(socketId) ?? []\n socketCleanup.delete(socketId)\n for (const fn of cleanupFns) {\n try {\n fn()\n } catch {\n // ignore\n }\n }\n\n sockets.delete(socketId)\n socketMeta.delete(socketId)\n socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n socketId,\n meta,\n message,\n}: {\n socketId: string\n meta: SocketMeta\n message: ClientMessage\n}): Promise<void> => {\n const ws = sockets.get(socketId)\n if (!ws) return\n\n if (message.type === \"event\") {\n const wrapper = socketWrappers.get(socketId)\n wrapper?.dispatch(message.event, message.payload)\n return\n }\n\n if (!message.modelName || typeof message.modelName !== \"string\") return\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n return\n }\n if (!message.queryKey || typeof message.queryKey !== \"string\") return\n if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n if (message.type === \"remove-query\") {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n })\n return\n }\n\n if (!message.query || typeof message.query !== \"object\") return\n\n const options = normalizeRtsQueryOptions(message.options)\n const ability = meta.ability\n\n if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n return\n }\n\n if (message.type === \"register-query\") {\n const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n if (!existing) {\n let count = 0\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const set of byModel.values()) count += set.size\n }\n\n if (count >= maxSubscriptionsPerSocket) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n return\n }\n }\n\n addSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n\n try {\n await ensureChangeStream(meta.tenantId, message.modelName)\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n return\n }\n\n if (message.runInitialQuery === false) {\n return\n }\n }\n\n try {\n await runAndSendQuery({\n tenantId: meta.tenantId,\n targetSocketIds: [socketId],\n ability,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n }\n}\n\nexport const initRts = ({\n server,\n path = \"/rts\",\n sessionMiddleware,\n maxPayloadBytes: maxPayloadBytesArg,\n maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n dispatchDebounceMs: dispatchDebounceMsArg,\n allowInternalModels: allowInternalModelsArg,\n}: {\n server: HttpServer\n path?: string\n sessionMiddleware?: RequestHandler\n maxPayloadBytes?: number\n maxSubscriptionsPerSocket?: number\n dispatchDebounceMs?: number\n allowInternalModels?: boolean\n}): void => {\n if (initializedServers.has(server)) return\n initializedServers.add(server)\n\n if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n }\n\n if (\n typeof maxSubscriptionsPerSocketArg === \"number\"\n && Number.isFinite(maxSubscriptionsPerSocketArg)\n && maxSubscriptionsPerSocketArg > 0\n ) {\n maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n }\n\n if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n }\n\n allowInternalModels = Boolean(allowInternalModelsArg)\n\n const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n ensureSocketErrorHandler(socket, () => ({\n upgradeHost: req.headers.host ?? \"\",\n upgradeUrl: req.url ?? \"\",\n userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n }))\n upgradeMeta.delete(req)\n\n let url: URL\n try {\n url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n } catch {\n badRequest(socket, \"Invalid URL\")\n return\n }\n\n if (url.pathname !== path) return\n\n void (async() => {\n try {\n const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n upgradeMeta.set(req, meta)\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit(\"connection\", ws, req)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n if (message.startsWith(\"Missing rb-tenant-id\")) {\n badRequest(socket, message)\n return\n }\n unauthorized(socket, message)\n return\n }\n })().catch(() => {\n badRequest(socket, \"RTS upgrade failed\")\n })\n })\n\n wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n const meta = upgradeMeta.get(req)\n upgradeMeta.delete(req)\n if (!meta) {\n try {\n ws.close()\n } catch {\n // ignore\n }\n return\n }\n\n const socketId = randomUUID()\n sockets.set(socketId, ws)\n socketMeta.set(socketId, meta)\n\n const wrapper = new RtsSocket({ id: socketId, ws, meta })\n socketWrappers.set(socketId, wrapper)\n\n const cleanupFns: Array<() => void> = []\n for (const handler of customHandlers) {\n try {\n const cleanup = handler(wrapper)\n if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n } catch {\n // ignore\n }\n }\n if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n ws.on(\"message\", (raw: RawData) => {\n let parsed: unknown\n try {\n parsed = safeJsonParse(raw)\n } catch {\n return\n }\n\n if (!parsed || typeof parsed !== \"object\") return\n const message = parsed as { type?: unknown }\n if (\n message.type !== \"event\"\n && message.type !== \"run-query\"\n && message.type !== \"register-query\"\n && message.type !== \"remove-query\"\n ) return\n void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n })\n\n ws.on(\"close\", () => {\n cleanupSocket(socketId)\n })\n\n ws.on(\"error\", () => {\n cleanupSocket(socketId)\n })\n })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["TENANT_ID_QUERY_PARAM","ability","USER_ID_HEADER","socketId","modelSubs"],"mappings":";;;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;AC4DL,MAAM,oBAAoB;AAE1B,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAIA,yBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMC,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQC,kBAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,QAAM,OAAO,MAAM,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,UAAM,YAAY,SAAS,IAAI,SAAS;AACxC,QAAI,CAAC,aAAa,CAAC,UAAU,KAAM;AAEnC,eAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,UAAI,CAAC,gBAAgB,OAAQ;AAE7B,YAAM,WAAW,gBAAgB,CAAC;AAClC,YAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,YAAM,UAAU,MAAM;AACtB,UAAI,CAAC,QAAS;AAEd,UAAI;AACF,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,IAAI;AAAA,UACX,SAAS,IAAI;AAAA,QAAA,CACd;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,cAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,MAAA;AAC7E,mBAAWC,aAAY,iBAAiB;AACtC,gBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,cAAI,CAAC,GAAI;AACT,iBAAO,IAAI,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAAA,EACjC,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,QAAM,mBAAmB,MAAM;AAC7B,UAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,QAAI,CAAC,OAAQ,QAAO;AACpB,eAAW,QAAQ,OAAO,UAAU;AAClC,YAAMC,aAAY,KAAK,IAAI,SAAS;AACpC,UAAIA,cAAaA,WAAU,OAAO,EAAG,QAAO;AAAA,IAC9C;AACA,WAAO;AAAA,EACT,GAAA;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,SAAS;AACtC,qBAAe,OAAO,SAAS;AAC/B,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,yBAAyB,QAAQ,OAAO;AACxD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,mBAAmB,KAAK,UAAU,QAAQ,SAAS;AAAA,IAC3D,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI,QAAQ,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
@@ -0,0 +1,28 @@
1
+ import { Request } from 'express';
2
+ import { AppAbility } from '@rpcbase/db/acl';
3
+ type JsonObject = Record<string, unknown>;
4
+ export type RtsQueryOptions = {
5
+ projection?: JsonObject;
6
+ sort?: Record<string, 1 | -1>;
7
+ limit?: number;
8
+ };
9
+ export declare const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
10
+ export declare const RTS_USER_ID_HEADER = "rb-user-id";
11
+ export declare const resolveRtsRequestTenantId: (req: Request) => string | null;
12
+ export declare const resolveRtsRequestUserId: (req: Request) => string | null;
13
+ export declare const isRtsRequestAuthorized: (req: Request, tenantId: string) => boolean;
14
+ export declare const buildRtsAbilityFromRequest: (req: Request, tenantId: string) => Promise<{
15
+ ability: AppAbility;
16
+ userId: string | null;
17
+ }>;
18
+ export declare const normalizeRtsQueryOptions: (options: RtsQueryOptions | undefined) => RtsQueryOptions;
19
+ export declare const runRtsQuery: ({ tenantId, ability, modelName, query, options, allowInternalModels, }: {
20
+ tenantId: string;
21
+ ability: AppAbility;
22
+ modelName: string;
23
+ query: JsonObject;
24
+ options: RtsQueryOptions;
25
+ allowInternalModels?: boolean;
26
+ }) => Promise<unknown[]>;
27
+ export {};
28
+ //# sourceMappingURL=queryExecutor.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAIlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAQzC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AA2B9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAiCxD,CAAA;AAsBD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAe/E,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,OAAO,EAAE,CAyBpB,CAAA"}
@@ -0,0 +1,14 @@
1
+ import { Request } from 'express';
2
+ import { RtsSsrRuntime, StaticRpcbaseRtsHydrationData } from '@rpcbase/client';
3
+ export type RtsSsrCollector = {
4
+ runtime: RtsSsrRuntime;
5
+ hasRegistrations: () => boolean;
6
+ resolve: () => Promise<StaticRpcbaseRtsHydrationData | null>;
7
+ };
8
+ export declare const createRtsSsrCollector: (req: Request, opts?: {
9
+ maxQueries?: number;
10
+ maxDocsPerQuery?: number;
11
+ maxSerializedBytes?: number;
12
+ }) => RtsSsrCollector;
13
+ export declare const renderRtsHydrationScript: (data: StaticRpcbaseRtsHydrationData | null | undefined) => string;
14
+ //# sourceMappingURL=ssrHydration.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ssrHydration.d.ts","sourceRoot":"","sources":["../../src/rts/ssrHydration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,6BAA6B,EACnC,MAAM,iBAAiB,CAAA;AA6BxB,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,aAAa,CAAA;IACtB,gBAAgB,EAAE,MAAM,OAAO,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAA;CAC7D,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,KAAK,OAAO,EACZ,OAAO;IACL,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,KACA,eAqGF,CAAA;AAED,eAAO,MAAM,wBAAwB,GACnC,MAAM,6BAA6B,GAAG,IAAI,GAAG,SAAS,KACrD,MAIF,CAAA"}
@@ -1 +1 @@
1
- {"version":3,"file":"ssrMiddleware.d.ts","sourceRoot":"","sources":["../src/ssrMiddleware.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjI,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,OAAO,CAAA;AAErE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAM3C,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;AAmI9D,eAAO,MAAM,aAAa,GAAI,kFAM3B;IACD,YAAY,EAAE,aAAa,CAAC;IAC5B,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACxC,mBAAmB,CAAC,EAAE,aAAa,CAAC;QAAE,KAAK,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACtE,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B,MAAW,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,kBA0K1D,CAAA"}
1
+ {"version":3,"file":"ssrMiddleware.d.ts","sourceRoot":"","sources":["../src/ssrMiddleware.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjI,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,OAAO,CAAA;AAErE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAO3C,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;AAmI9D,eAAO,MAAM,aAAa,GAAI,kFAM3B;IACD,YAAY,EAAE,aAAa,CAAC;IAC5B,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACxC,mBAAmB,CAAC,EAAE,aAAa,CAAC;QAAE,KAAK,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACtE,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B,MAAW,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,kBA4K1D,CAAA"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rpcbase/server",
3
- "version": "0.508.0",
3
+ "version": "0.509.0",
4
4
  "type": "module",
5
5
  "files": [
6
6
  "dist"