@rpcbase/server 0.508.0 → 0.509.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +168 -12
- package/dist/index.js.map +1 -1
- package/dist/queryExecutor-BZ0GSPM1.js +130 -0
- package/dist/queryExecutor-BZ0GSPM1.js.map +1 -0
- package/dist/renderSSR.d.ts +2 -0
- package/dist/renderSSR.d.ts.map +1 -1
- package/dist/rts/index.d.ts.map +1 -1
- package/dist/rts/index.js +16 -45
- package/dist/rts/index.js.map +1 -1
- package/dist/rts/queryExecutor.d.ts +28 -0
- package/dist/rts/queryExecutor.d.ts.map +1 -0
- package/dist/rts/ssrHydration.d.ts +14 -0
- package/dist/rts/ssrHydration.d.ts.map +1 -0
- package/dist/ssrMiddleware.d.ts.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,130 @@
|
|
|
1
|
+
import { models } from "@rpcbase/db";
|
|
2
|
+
import { getAccessibleByQuery, buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
|
|
3
|
+
const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
|
|
4
|
+
const RTS_USER_ID_HEADER = "rb-user-id";
|
|
5
|
+
const QUERY_MAX_LIMIT = 4096;
|
|
6
|
+
const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
|
|
7
|
+
const normalizeTenantId = (value) => {
|
|
8
|
+
if (typeof value !== "string") return null;
|
|
9
|
+
const normalized = value.trim();
|
|
10
|
+
return normalized ? normalized : null;
|
|
11
|
+
};
|
|
12
|
+
const normalizeSignedInTenants = (value) => {
|
|
13
|
+
if (!Array.isArray(value)) return [];
|
|
14
|
+
return value.map((tenantId) => normalizeTenantId(String(tenantId))).filter((tenantId) => Boolean(tenantId));
|
|
15
|
+
};
|
|
16
|
+
const getTenantIdFromRequest = (req) => {
|
|
17
|
+
const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM];
|
|
18
|
+
const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
|
|
19
|
+
const normalizedFromQuery = normalizeTenantId(queryTenantId);
|
|
20
|
+
if (normalizedFromQuery) return normalizedFromQuery;
|
|
21
|
+
return normalizeTenantId(req.session?.user?.currentTenantId);
|
|
22
|
+
};
|
|
23
|
+
const resolveRtsRequestTenantId = (req) => {
|
|
24
|
+
return getTenantIdFromRequest(req);
|
|
25
|
+
};
|
|
26
|
+
const isRtsRequestAuthorized = (req, tenantId) => {
|
|
27
|
+
const sessionUser = req.session?.user;
|
|
28
|
+
if (!sessionUser) return false;
|
|
29
|
+
const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants);
|
|
30
|
+
if (signedInTenants.length > 0) {
|
|
31
|
+
return signedInTenants.includes(tenantId);
|
|
32
|
+
}
|
|
33
|
+
const currentTenantId = normalizeTenantId(sessionUser.currentTenantId);
|
|
34
|
+
if (!currentTenantId) return false;
|
|
35
|
+
return currentTenantId === tenantId;
|
|
36
|
+
};
|
|
37
|
+
const buildRtsAbilityFromRequest = async (req, tenantId) => {
|
|
38
|
+
const sessionUserId = normalizeTenantId(req.session?.user?.id);
|
|
39
|
+
if (sessionUserId) {
|
|
40
|
+
const ability = buildAbilityFromSession({ tenantId, session: req.session });
|
|
41
|
+
return { ability, userId: sessionUserId };
|
|
42
|
+
}
|
|
43
|
+
const headerValue = req.headers[RTS_USER_ID_HEADER];
|
|
44
|
+
const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue;
|
|
45
|
+
const headerUserId = normalizeTenantId(headerUserIdRaw);
|
|
46
|
+
if (!headerUserId) {
|
|
47
|
+
const ability = buildAbilityFromSession({ tenantId, session: req.session });
|
|
48
|
+
return { ability, userId: null };
|
|
49
|
+
}
|
|
50
|
+
const rbCtx = { req: { session: null } };
|
|
51
|
+
const User = await models.getGlobal("RBUser", rbCtx);
|
|
52
|
+
const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean();
|
|
53
|
+
const tenantsRaw = user?.tenants;
|
|
54
|
+
const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : [];
|
|
55
|
+
if (!tenants.includes(tenantId)) {
|
|
56
|
+
throw new Error("Tenant not authorized for this session");
|
|
57
|
+
}
|
|
58
|
+
const roles = getTenantRolesFromSessionUser(user, tenantId);
|
|
59
|
+
return {
|
|
60
|
+
ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : ["owner"] }),
|
|
61
|
+
userId: headerUserId
|
|
62
|
+
};
|
|
63
|
+
};
|
|
64
|
+
const getTenantModel = async (tenantId, modelName) => {
|
|
65
|
+
const ctx = {
|
|
66
|
+
req: {
|
|
67
|
+
session: {
|
|
68
|
+
user: {
|
|
69
|
+
currentTenantId: tenantId
|
|
70
|
+
}
|
|
71
|
+
}
|
|
72
|
+
}
|
|
73
|
+
};
|
|
74
|
+
return models.get(modelName, ctx);
|
|
75
|
+
};
|
|
76
|
+
const normalizeLimit = (limit) => {
|
|
77
|
+
if (typeof limit !== "number") return QUERY_MAX_LIMIT;
|
|
78
|
+
if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
|
|
79
|
+
return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
|
|
80
|
+
};
|
|
81
|
+
const normalizeRtsQueryOptions = (options) => {
|
|
82
|
+
if (!options || typeof options !== "object") return {};
|
|
83
|
+
const normalized = {};
|
|
84
|
+
if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
|
|
85
|
+
normalized.projection = options.projection;
|
|
86
|
+
}
|
|
87
|
+
if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
|
|
88
|
+
normalized.sort = options.sort;
|
|
89
|
+
}
|
|
90
|
+
normalized.limit = normalizeLimit(options.limit);
|
|
91
|
+
return normalized;
|
|
92
|
+
};
|
|
93
|
+
const runRtsQuery = async ({
|
|
94
|
+
tenantId,
|
|
95
|
+
ability,
|
|
96
|
+
modelName,
|
|
97
|
+
query,
|
|
98
|
+
options,
|
|
99
|
+
allowInternalModels = false
|
|
100
|
+
}) => {
|
|
101
|
+
if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {
|
|
102
|
+
throw new Error("Model not allowed");
|
|
103
|
+
}
|
|
104
|
+
if (!ability.can("read", modelName)) {
|
|
105
|
+
throw new Error("forbidden");
|
|
106
|
+
}
|
|
107
|
+
const model = await getTenantModel(tenantId, modelName);
|
|
108
|
+
const projection = options.projection ?? void 0;
|
|
109
|
+
const sort = options.sort;
|
|
110
|
+
const limit = normalizeLimit(options.limit);
|
|
111
|
+
const accessQuery = getAccessibleByQuery(ability, "read", modelName);
|
|
112
|
+
const finalQuery = { $and: [query, accessQuery] };
|
|
113
|
+
const queryPromise = model.find(finalQuery, projection);
|
|
114
|
+
if (sort && Object.keys(sort).length) {
|
|
115
|
+
queryPromise.sort(sort);
|
|
116
|
+
}
|
|
117
|
+
queryPromise.limit(limit);
|
|
118
|
+
const data = await queryPromise;
|
|
119
|
+
return Array.isArray(data) ? data : [];
|
|
120
|
+
};
|
|
121
|
+
export {
|
|
122
|
+
RTS_TENANT_ID_QUERY_PARAM as R,
|
|
123
|
+
runRtsQuery as a,
|
|
124
|
+
buildRtsAbilityFromRequest as b,
|
|
125
|
+
RTS_USER_ID_HEADER as c,
|
|
126
|
+
isRtsRequestAuthorized as i,
|
|
127
|
+
normalizeRtsQueryOptions as n,
|
|
128
|
+
resolveRtsRequestTenantId as r
|
|
129
|
+
};
|
|
130
|
+
//# sourceMappingURL=queryExecutor-BZ0GSPM1.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"queryExecutor-BZ0GSPM1.js","sources":["../src/rts/queryExecutor.ts"],"sourcesContent":["import type { Request } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n id?: unknown\n currentTenantId?: unknown\n signedInTenants?: unknown\n}\n\nexport type RtsQueryOptions = {\n projection?: JsonObject\n sort?: Record<string, 1 | -1>\n limit?: number\n}\n\nexport const RTS_TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nexport const RTS_USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst normalizeTenantId = (value: unknown): string | null => {\n if (typeof value !== \"string\") return null\n const normalized = value.trim()\n return normalized ? normalized : null\n}\n\nconst normalizeSignedInTenants = (value: unknown): string[] => {\n if (!Array.isArray(value)) return []\n return value\n .map((tenantId) => normalizeTenantId(String(tenantId)))\n .filter((tenantId): tenantId is string => Boolean(tenantId))\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM]\n const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n const normalizedFromQuery = normalizeTenantId(queryTenantId)\n if (normalizedFromQuery) return normalizedFromQuery\n\n return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n if (sessionUserId) return sessionUserId\n\n const headerValue = req.headers[RTS_USER_ID_HEADER]\n const headerUserId = Array.isArray(headerValue) ? headerValue[0] : headerValue\n return normalizeTenantId(headerUserId)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n const sessionUser = req.session?.user as SessionUser | undefined\n if (!sessionUser) return false\n\n const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants)\n if (signedInTenants.length > 0) {\n return signedInTenants.includes(tenantId)\n }\n\n const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n if (!currentTenantId) return false\n return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n req: Request,\n tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n if (sessionUserId) {\n const ability = buildAbilityFromSession({ tenantId, session: req.session })\n return { ability, userId: sessionUserId }\n }\n\n const headerValue = req.headers[RTS_USER_ID_HEADER]\n const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue\n const headerUserId = normalizeTenantId(headerUserIdRaw)\n if (!headerUserId) {\n const ability = buildAbilityFromSession({ tenantId, session: req.session })\n return { ability, userId: null }\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as {\n tenants?: unknown\n tenantRoles?: unknown\n } | null\n\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n return {\n ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] }),\n userId: headerUserId,\n }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n if (!options || typeof options !== \"object\") return {}\n const normalized: RtsQueryOptions = {}\n\n if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n normalized.projection = options.projection\n }\n\n if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n normalized.sort = options.sort\n }\n\n normalized.limit = normalizeLimit(options.limit)\n\n return normalized\n}\n\nexport const runRtsQuery = async ({\n tenantId,\n ability,\n modelName,\n query,\n options,\n allowInternalModels = false,\n}: {\n tenantId: string\n ability: AppAbility\n modelName: string\n query: JsonObject\n options: RtsQueryOptions\n allowInternalModels?: boolean\n}): Promise<unknown[]> => {\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n throw new Error(\"Model not allowed\")\n }\n\n if (!ability.can(\"read\", modelName as AclSubjectType)) {\n throw new Error(\"forbidden\")\n }\n\n const model = await getTenantModel(tenantId, modelName)\n const projection = options.projection ?? undefined\n const sort = options.sort\n const limit = normalizeLimit(options.limit)\n\n const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n const queryPromise = model.find(finalQuery, projection)\n if (sort && Object.keys(sort).length) {\n queryPromise.sort(sort)\n }\n queryPromise.limit(limit)\n\n const data = await queryPromise\n return Array.isArray(data) ? data : []\n}\n"],"names":[],"mappings":";;AAoBO,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAElC,MAAM,kBAAkB;AACxB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,oBAAoB,CAAC,UAAkC;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEA,MAAM,2BAA2B,CAAC,UAA6B;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,SAAO,MACJ,IAAI,CAAC,aAAa,kBAAkB,OAAO,QAAQ,CAAC,CAAC,EACrD,OAAO,CAAC,aAAiC,QAAQ,QAAQ,CAAC;AAC/D;AAEA,MAAM,yBAAyB,CAAC,QAAgC;AAC9D,QAAM,WAAW,IAAI,QAAQ,yBAAyB;AACtD,QAAM,gBAAgB,MAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC,IAAI;AAC9D,QAAM,sBAAsB,kBAAkB,aAAa;AAC3D,MAAI,oBAAqB,QAAO;AAEhC,SAAO,kBAAmB,IAAI,SAAS,MAAkC,eAAe;AAC1F;AAEO,MAAM,4BAA4B,CAAC,QAAgC;AACxE,SAAO,uBAAuB,GAAG;AACnC;AAWO,MAAM,yBAAyB,CAAC,KAAc,aAA8B;AACjF,QAAM,cAAc,IAAI,SAAS;AACjC,MAAI,CAAC,YAAa,QAAO;AAEzB,QAAM,kBAAkB,yBAAyB,YAAY,eAAe;AAC5E,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,gBAAgB,SAAS,QAAQ;AAAA,EAC1C;AAEA,QAAM,kBAAkB,kBAAkB,YAAY,eAAe;AACrE,MAAI,CAAC,gBAAiB,QAAO;AAC7B,SAAO,oBAAoB;AAC7B;AAEO,MAAM,6BAA6B,OACxC,KACA,aAC4D;AAC5D,QAAM,gBAAgB,kBAAmB,IAAI,SAAS,MAAkC,EAAE;AAC1F,MAAI,eAAe;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,cAAA;AAAA,EAC5B;AAEA,QAAM,cAAc,IAAI,QAAQ,kBAAkB;AAClD,QAAM,kBAAkB,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI;AACtE,QAAM,eAAe,kBAAkB,eAAe;AACtD,MAAI,CAAC,cAAc;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,KAAA;AAAA,EAC5B;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAK/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC,IAAI,CAAA;AACzF,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,SAAO;AAAA,IACL,SAAS,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAAA,IACjG,QAAQ;AAAA,EAAA;AAEZ;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEO,MAAM,2BAA2B,CAAC,YAA0D;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA8B,CAAA;AAEpC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAE/C,SAAO;AACT;AAEO,MAAM,cAAc,OAAO;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB,MAO0B;AACxB,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,SAAS,GAAG;AAC/D,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AACtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAE1C,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,SAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AACtC;"}
|
package/dist/renderSSR.d.ts
CHANGED
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
import { ReactNode } from 'react';
|
|
2
2
|
import { StaticHandler } from '@rpcbase/router';
|
|
3
|
+
import { StaticRpcbaseRtsHydrationData } from '@rpcbase/client';
|
|
3
4
|
import * as express from "express";
|
|
4
5
|
export declare function renderSSR(req: express.Request, dataRoutes: StaticHandler["dataRoutes"]): Promise<{
|
|
5
6
|
element: ReactNode | null;
|
|
6
7
|
isMatched: boolean;
|
|
7
8
|
statusCode: number;
|
|
9
|
+
rtsHydrationData?: StaticRpcbaseRtsHydrationData | null;
|
|
8
10
|
redirectResponse?: Response;
|
|
9
11
|
redirectRouteId?: string | null;
|
|
10
12
|
redirectRoutePath?: string | null;
|
package/dist/renderSSR.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderSSR.d.ts","sourceRoot":"","sources":["../src/renderSSR.tsx"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"renderSSR.d.ts","sourceRoot":"","sources":["../src/renderSSR.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,SAAS,EAAc,MAAM,OAAO,CAAA;AAE7C,OAAO,EAGL,aAAa,EACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,iBAAiB,CAAA;AA4DxB,wBAAsB,SAAS,CAC7B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,GACtC,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAAA;IACvD,gBAAgB,CAAC,EAAE,QAAQ,CAAA;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,CAAC,CAqGD"}
|
package/dist/rts/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAA6F,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAG5I,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AA8BlE,KAAK,UAAU,GAAG;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,UAAU,CAAA;CACpB,CAAA;AAoBD,KAAK,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAA;AA6B3D,cAAM,SAAS;IACb,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAA;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAA;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;gBAE3D,EACjB,EAAE,EACF,EAAE,EACF,IAAI,GACL,EAAE;QACD,EAAE,EAAE,MAAM,CAAA;QACV,EAAE,EAAE,SAAS,CAAA;QACb,IAAI,EAAE,UAAU,CAAA;KACjB;IAOM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAO7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5C,KAAK,IAAI,IAAI;IAQb,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAOvD;AAqiBD,eAAO,MAAM,OAAO,GAAI,4NAQrB;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,cAAc,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,IAyHH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,SAAS,SAAS,KAAG,IAEvD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,IAE3E,CAAA;AAED,cAAc,UAAU,CAAA"}
|
package/dist/rts/index.js
CHANGED
|
@@ -1,17 +1,15 @@
|
|
|
1
1
|
import { randomUUID } from "node:crypto";
|
|
2
2
|
import { models } from "@rpcbase/db";
|
|
3
|
-
import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility
|
|
3
|
+
import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
|
|
4
4
|
import { WebSocketServer } from "ws";
|
|
5
|
+
import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, a as runRtsQuery } from "../queryExecutor-BZ0GSPM1.js";
|
|
5
6
|
const routes = Object.entries({
|
|
6
7
|
.../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BNrqh1Kb.js") })
|
|
7
8
|
}).reduce((acc, [path, mod]) => {
|
|
8
9
|
acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
|
|
9
10
|
return acc;
|
|
10
11
|
}, {});
|
|
11
|
-
const TENANT_ID_QUERY_PARAM = "rb-tenant-id";
|
|
12
|
-
const USER_ID_HEADER = "rb-user-id";
|
|
13
12
|
const QUERY_KEY_MAX_LEN = 4096;
|
|
14
|
-
const QUERY_MAX_LIMIT = 4096;
|
|
15
13
|
const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
|
|
16
14
|
const DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024;
|
|
17
15
|
const DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256;
|
|
@@ -151,7 +149,7 @@ const parseUpgradeMeta = async ({
|
|
|
151
149
|
url,
|
|
152
150
|
sessionMiddleware
|
|
153
151
|
}) => {
|
|
154
|
-
const tenantId = url.searchParams.get(
|
|
152
|
+
const tenantId = url.searchParams.get(RTS_TENANT_ID_QUERY_PARAM);
|
|
155
153
|
if (!tenantId) {
|
|
156
154
|
throw new Error("Missing rb-tenant-id query parameter");
|
|
157
155
|
}
|
|
@@ -183,7 +181,7 @@ const parseUpgradeMeta = async ({
|
|
|
183
181
|
const ability2 = buildAbilityFromSession({ tenantId, session: upgradeReq.session });
|
|
184
182
|
return { tenantId, userId: sessionUserId, ability: ability2 };
|
|
185
183
|
}
|
|
186
|
-
const raw = req.headers[
|
|
184
|
+
const raw = req.headers[RTS_USER_ID_HEADER];
|
|
187
185
|
const headerUserId = Array.isArray(raw) ? raw[0] : raw;
|
|
188
186
|
if (!headerUserId) {
|
|
189
187
|
throw new Error("Missing rb-user-id header (reverse-proxy) and no session middleware configured");
|
|
@@ -212,23 +210,6 @@ const getTenantModel = async (tenantId, modelName) => {
|
|
|
212
210
|
};
|
|
213
211
|
return models.get(modelName, ctx);
|
|
214
212
|
};
|
|
215
|
-
const normalizeLimit = (limit) => {
|
|
216
|
-
if (typeof limit !== "number") return QUERY_MAX_LIMIT;
|
|
217
|
-
if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
|
|
218
|
-
return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
|
|
219
|
-
};
|
|
220
|
-
const normalizeOptions = (options) => {
|
|
221
|
-
if (!options || typeof options !== "object") return {};
|
|
222
|
-
const normalized = {};
|
|
223
|
-
if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
|
|
224
|
-
normalized.projection = options.projection;
|
|
225
|
-
}
|
|
226
|
-
if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
|
|
227
|
-
normalized.sort = options.sort;
|
|
228
|
-
}
|
|
229
|
-
normalized.limit = normalizeLimit(options.limit);
|
|
230
|
-
return normalized;
|
|
231
|
-
};
|
|
232
213
|
const makeDispatchKey = (tenantId, modelName) => `${tenantId}:${modelName}`;
|
|
233
214
|
const clearDispatchTimer = (tenantId, modelName) => {
|
|
234
215
|
const key = makeDispatchKey(tenantId, modelName);
|
|
@@ -255,27 +236,14 @@ const runAndSendQuery = async ({
|
|
|
255
236
|
query,
|
|
256
237
|
options
|
|
257
238
|
}) => {
|
|
258
|
-
|
|
259
|
-
|
|
260
|
-
|
|
261
|
-
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
}
|
|
267
|
-
const model = await getTenantModel(tenantId, modelName);
|
|
268
|
-
const projection = options.projection ?? void 0;
|
|
269
|
-
const sort = options.sort;
|
|
270
|
-
const limit = normalizeLimit(options.limit);
|
|
271
|
-
const accessQuery = getAccessibleByQuery(ability, "read", modelName);
|
|
272
|
-
const finalQuery = { $and: [query, accessQuery] };
|
|
273
|
-
const queryPromise = model.find(finalQuery, projection);
|
|
274
|
-
if (sort && Object.keys(sort).length) {
|
|
275
|
-
queryPromise.sort(sort);
|
|
276
|
-
}
|
|
277
|
-
queryPromise.limit(limit);
|
|
278
|
-
const data = await queryPromise;
|
|
239
|
+
const data = await runRtsQuery({
|
|
240
|
+
tenantId,
|
|
241
|
+
ability,
|
|
242
|
+
modelName,
|
|
243
|
+
query,
|
|
244
|
+
options,
|
|
245
|
+
allowInternalModels
|
|
246
|
+
});
|
|
279
247
|
const payload = { type: "query-payload", modelName, queryKey, data };
|
|
280
248
|
for (const socketId of targetSocketIds) {
|
|
281
249
|
const ws = sockets.get(socketId);
|
|
@@ -492,7 +460,7 @@ const handleClientMessage = async ({
|
|
|
492
460
|
return;
|
|
493
461
|
}
|
|
494
462
|
if (!message.query || typeof message.query !== "object") return;
|
|
495
|
-
const options =
|
|
463
|
+
const options = normalizeRtsQueryOptions(message.options);
|
|
496
464
|
const ability = meta.ability;
|
|
497
465
|
if (!ability.can("read", message.modelName)) {
|
|
498
466
|
sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error: "forbidden" });
|
|
@@ -527,6 +495,9 @@ const handleClientMessage = async ({
|
|
|
527
495
|
sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
|
|
528
496
|
return;
|
|
529
497
|
}
|
|
498
|
+
if (message.runInitialQuery === false) {
|
|
499
|
+
return;
|
|
500
|
+
}
|
|
530
501
|
}
|
|
531
502
|
try {
|
|
532
503
|
await runAndSendQuery({
|
package/dist/rts/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype QueryOptions = {\n projection?: JsonObject\n sort?: Record<string, 1 | -1>\n limit?: number\n}\n\ntype ClientMessage =\n | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | { type: \"register-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | { type: \"remove-query\"; modelName: string; queryKey: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n tenantId: string\n userId: string\n ability: AppAbility\n}\n\ntype SessionUser = {\n id?: string\n currentTenantId?: string\n signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n session?: {\n user?: SessionUser\n }\n}\n\ntype Subscription = {\n query: JsonObject\n options: QueryOptions\n socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nconst USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_KEY_MAX_LEN = 4096\nconst QUERY_MAX_LIMIT = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n public readonly id: string\n public readonly tenantId: string\n public readonly userId: string\n\n private readonly ws: WebSocket\n private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n public constructor({\n id,\n ws,\n meta,\n }: {\n id: string\n ws: WebSocket\n meta: SocketMeta\n }) {\n this.id = id\n this.ws = ws\n this.tenantId = meta.tenantId\n this.userId = meta.userId\n }\n\n public on(event: string, handler: (payload: unknown) => void): () => void {\n const set = this.handlers.get(event) ?? new Set()\n set.add(handler)\n this.handlers.set(event, set)\n return () => this.off(event, handler)\n }\n\n public off(event: string, handler: (payload: unknown) => void): void {\n const set = this.handlers.get(event)\n if (!set) return\n set.delete(handler)\n if (!set.size) this.handlers.delete(event)\n }\n\n public emit(event: string, payload?: unknown): void {\n sendWs(this.ws, { type: \"event\", event, payload })\n }\n\n public close(): void {\n try {\n this.ws.close()\n } catch {\n // ignore\n }\n }\n\n public dispatch(event: string, payload: unknown): void {\n const set = this.handlers.get(event)\n if (!set) return\n for (const handler of set) {\n handler(payload)\n }\n }\n}\n\nconst rawToText = (raw: RawData): string => {\n if (typeof raw === \"string\") return raw\n if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n if (ws.readyState !== 1) return\n ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n if (socket.listenerCount(\"error\") > 0) return\n\n socket.on(\"error\", (err: unknown) => {\n const message = err instanceof Error ? err.message : String(err)\n const name = err instanceof Error ? err.name : typeof err\n const stack = err instanceof Error ? err.stack : undefined\n const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n console.warn(\"[rb/rts] socket error\", {\n name,\n code,\n message,\n stack,\n remoteAddress: socket.remoteAddress,\n remotePort: socket.remotePort,\n localAddress: socket.localAddress,\n localPort: socket.localPort,\n ...context?.(),\n })\n })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n const raw = err instanceof Error ? err.message : \"Unknown error\"\n const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n const maxLen = 256\n if (trimmedModelList.length <= maxLen) return trimmedModelList\n return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n type MiddlewareReq = Parameters<RequestHandler>[0]\n type MiddlewareRes = Parameters<RequestHandler>[1]\n type MiddlewareNext = Parameters<RequestHandler>[2]\n\n await new Promise<void>((resolve, reject) => {\n const next: MiddlewareNext = (err) => {\n if (err) reject(err)\n else resolve()\n }\n\n sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n })\n}\n\nconst parseUpgradeMeta = async ({\n req,\n url,\n sessionMiddleware,\n}: {\n req: IncomingMessage\n url: URL\n sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n if (!tenantId) {\n throw new Error(\"Missing rb-tenant-id query parameter\")\n }\n\n if (sessionMiddleware) {\n const upgradeReq = req as UpgradeRequest\n try {\n await runSessionMiddleware(sessionMiddleware, upgradeReq)\n } catch {\n throw new Error(\"Failed to load session for RTS\")\n }\n\n const sessionUser = upgradeReq.session?.user\n const sessionUserId = sessionUser?.id\n if (!sessionUserId) {\n throw new Error(\"Not signed in (missing session.user.id)\")\n }\n\n const signedInTenants = sessionUser?.signedInTenants\n const currentTenantId = sessionUser?.currentTenantId\n\n if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n if (!signedInTenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else if (currentTenantId) {\n if (currentTenantId !== tenantId) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n return { tenantId, userId: sessionUserId, ability }\n }\n\n const raw = req.headers[USER_ID_HEADER]\n const headerUserId = Array.isArray(raw) ? raw[0] : raw\n if (!headerUserId) {\n throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nconst normalizeOptions = (options: QueryOptions | undefined): QueryOptions => {\n if (!options || typeof options !== \"object\") return {}\n const normalized: QueryOptions = {}\n\n if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n normalized.projection = options.projection\n }\n\n if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n normalized.sort = options.sort\n }\n\n normalized.limit = normalizeLimit(options.limit)\n\n return normalized\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n const timer = dispatchTimers.get(key)\n if (!timer) return\n clearTimeout(timer)\n dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n if (dispatchTimers.has(key)) return\n\n const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n dispatchTimers.set(key, setTimeout(() => {\n dispatchTimers.delete(key)\n void dispatchSubscriptionsForModel(tenantId, modelName)\n }, delay))\n}\n\nconst runAndSendQuery = async ({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query,\n options,\n}: {\n tenantId: string\n targetSocketIds: string[]\n ability: AppAbility\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): Promise<void> => {\n if (!ability.can(\"read\", modelName as AclSubjectType)) {\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error: \"forbidden\" }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n return\n }\n\n const model = await getTenantModel(tenantId, modelName)\n\n const projection = options.projection ?? undefined\n const sort = options.sort\n const limit = normalizeLimit(options.limit)\n\n const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n const queryPromise = model.find(finalQuery, projection)\n if (sort && Object.keys(sort).length) {\n queryPromise.sort(sort)\n }\n queryPromise.limit(limit)\n\n const data = await queryPromise\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantSubs = subscriptions.get(tenantId)\n if (!tenantSubs || !tenantSubs.size) return\n\n for (const userSubs of tenantSubs.values()) {\n const modelSubs = userSubs.get(modelName)\n if (!modelSubs || !modelSubs.size) continue\n\n for (const [queryKey, sub] of modelSubs.entries()) {\n const targetSocketIds = Array.from(sub.socketIds)\n if (!targetSocketIds.length) continue\n\n const socketId = targetSocketIds[0]\n const meta = socketMeta.get(socketId)\n const ability = meta?.ability\n if (!ability) continue\n\n try {\n await runAndSendQuery({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query: sub.query,\n options: sub.options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n }\n }\n }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n changeStreams.set(tenantId, tenantStreams)\n if (tenantStreams.has(modelName)) return\n\n const model = await getTenantModel(tenantId, modelName)\n\n const stream = model.watch([], {\n fullDocument: \"updateLookup\",\n })\n\n stream.on(\"change\", () => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n })\n\n stream.on(\"close\", () => {\n clearDispatchTimer(tenantId, modelName)\n const map = changeStreams.get(tenantId)\n map?.delete(modelName)\n if (map && map.size === 0) changeStreams.delete(tenantId)\n })\n\n stream.on(\"error\", () => {\n try {\n clearDispatchTimer(tenantId, modelName)\n stream.close()\n } catch {\n // ignore\n }\n })\n\n tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n query,\n options,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): void => {\n const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n subscriptions.set(tenantId, tenantSubs)\n\n const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n tenantSubs.set(userId, userSubs)\n\n const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n userSubs.set(modelName, modelSubs)\n\n const existing = modelSubs.get(queryKey)\n if (existing) {\n existing.socketIds.add(socketId)\n } else {\n modelSubs.set(queryKey, {\n query,\n options,\n socketIds: new Set([socketId]),\n })\n }\n\n const byModel = socketSubscriptions.get(socketId) ?? new Map()\n socketSubscriptions.set(socketId, byModel)\n\n const querySet = byModel.get(modelName) ?? new Set()\n byModel.set(modelName, querySet)\n querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n}): void => {\n const tenantSubs = subscriptions.get(tenantId)\n const userSubs = tenantSubs?.get(userId)\n const modelSubs = userSubs?.get(modelName)\n const sub = modelSubs?.get(queryKey)\n if (sub) {\n sub.socketIds.delete(socketId)\n if (!sub.socketIds.size) {\n modelSubs?.delete(queryKey)\n }\n }\n\n const byModel = socketSubscriptions.get(socketId)\n const set = byModel?.get(modelName)\n if (set) {\n set.delete(queryKey)\n if (!set.size) {\n byModel?.delete(modelName)\n }\n }\n\n if (modelSubs && modelSubs.size === 0) {\n userSubs?.delete(modelName)\n }\n\n if (userSubs && userSubs.size === 0) {\n tenantSubs?.delete(userId)\n }\n\n const hasAnyModelSubs = (() => {\n const byUser = subscriptions.get(tenantId)\n if (!byUser) return false\n for (const subs of byUser.values()) {\n const modelSubs = subs.get(modelName)\n if (modelSubs && modelSubs.size > 0) return true\n }\n return false\n })()\n\n if (!hasAnyModelSubs) {\n const tenantStreams = changeStreams.get(tenantId)\n const stream = tenantStreams?.get(modelName)\n if (stream) {\n try {\n stream.close()\n } catch {\n // ignore\n }\n clearDispatchTimer(tenantId, modelName)\n tenantStreams?.delete(modelName)\n if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n }\n }\n\n if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n const meta = socketMeta.get(socketId)\n if (meta) {\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const [modelName, keys] of byModel.entries()) {\n for (const queryKey of keys.values()) {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName,\n queryKey,\n })\n }\n }\n }\n }\n\n socketSubscriptions.delete(socketId)\n\n const cleanupFns = socketCleanup.get(socketId) ?? []\n socketCleanup.delete(socketId)\n for (const fn of cleanupFns) {\n try {\n fn()\n } catch {\n // ignore\n }\n }\n\n sockets.delete(socketId)\n socketMeta.delete(socketId)\n socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n socketId,\n meta,\n message,\n}: {\n socketId: string\n meta: SocketMeta\n message: ClientMessage\n}): Promise<void> => {\n const ws = sockets.get(socketId)\n if (!ws) return\n\n if (message.type === \"event\") {\n const wrapper = socketWrappers.get(socketId)\n wrapper?.dispatch(message.event, message.payload)\n return\n }\n\n if (!message.modelName || typeof message.modelName !== \"string\") return\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n return\n }\n if (!message.queryKey || typeof message.queryKey !== \"string\") return\n if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n if (message.type === \"remove-query\") {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n })\n return\n }\n\n if (!message.query || typeof message.query !== \"object\") return\n\n const options = normalizeOptions(message.options)\n const ability = meta.ability\n\n if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n return\n }\n\n if (message.type === \"register-query\") {\n const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n if (!existing) {\n let count = 0\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const set of byModel.values()) count += set.size\n }\n\n if (count >= maxSubscriptionsPerSocket) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n return\n }\n }\n\n addSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n\n try {\n await ensureChangeStream(meta.tenantId, message.modelName)\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n return\n }\n }\n\n try {\n await runAndSendQuery({\n tenantId: meta.tenantId,\n targetSocketIds: [socketId],\n ability,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n }\n}\n\nexport const initRts = ({\n server,\n path = \"/rts\",\n sessionMiddleware,\n maxPayloadBytes: maxPayloadBytesArg,\n maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n dispatchDebounceMs: dispatchDebounceMsArg,\n allowInternalModels: allowInternalModelsArg,\n}: {\n server: HttpServer\n path?: string\n sessionMiddleware?: RequestHandler\n maxPayloadBytes?: number\n maxSubscriptionsPerSocket?: number\n dispatchDebounceMs?: number\n allowInternalModels?: boolean\n}): void => {\n if (initializedServers.has(server)) return\n initializedServers.add(server)\n\n if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n }\n\n if (\n typeof maxSubscriptionsPerSocketArg === \"number\"\n && Number.isFinite(maxSubscriptionsPerSocketArg)\n && maxSubscriptionsPerSocketArg > 0\n ) {\n maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n }\n\n if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n }\n\n allowInternalModels = Boolean(allowInternalModelsArg)\n\n const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n ensureSocketErrorHandler(socket, () => ({\n upgradeHost: req.headers.host ?? \"\",\n upgradeUrl: req.url ?? \"\",\n userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n }))\n upgradeMeta.delete(req)\n\n let url: URL\n try {\n url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n } catch {\n badRequest(socket, \"Invalid URL\")\n return\n }\n\n if (url.pathname !== path) return\n\n void (async() => {\n try {\n const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n upgradeMeta.set(req, meta)\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit(\"connection\", ws, req)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n if (message.startsWith(\"Missing rb-tenant-id\")) {\n badRequest(socket, message)\n return\n }\n unauthorized(socket, message)\n return\n }\n })().catch(() => {\n badRequest(socket, \"RTS upgrade failed\")\n })\n })\n\n wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n const meta = upgradeMeta.get(req)\n upgradeMeta.delete(req)\n if (!meta) {\n try {\n ws.close()\n } catch {\n // ignore\n }\n return\n }\n\n const socketId = randomUUID()\n sockets.set(socketId, ws)\n socketMeta.set(socketId, meta)\n\n const wrapper = new RtsSocket({ id: socketId, ws, meta })\n socketWrappers.set(socketId, wrapper)\n\n const cleanupFns: Array<() => void> = []\n for (const handler of customHandlers) {\n try {\n const cleanup = handler(wrapper)\n if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n } catch {\n // ignore\n }\n }\n if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n ws.on(\"message\", (raw: RawData) => {\n let parsed: unknown\n try {\n parsed = safeJsonParse(raw)\n } catch {\n return\n }\n\n if (!parsed || typeof parsed !== \"object\") return\n const message = parsed as { type?: unknown }\n if (\n message.type !== \"event\"\n && message.type !== \"run-query\"\n && message.type !== \"register-query\"\n && message.type !== \"remove-query\"\n ) return\n void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n })\n\n ws.on(\"close\", () => {\n cleanupSocket(socketId)\n })\n\n ws.on(\"error\", () => {\n cleanupSocket(socketId)\n })\n })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["ability","payload","socketId","modelSubs"],"mappings":";;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;ACmDL,MAAM,wBAAwB;AAC9B,MAAM,iBAAiB;AAEvB,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;AAExB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAI,qBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMA,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQ,cAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEA,MAAM,mBAAmB,CAAC,YAAoD;AAC5E,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA2B,CAAA;AAEjC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAE/C,SAAO;AACT;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAMC,WAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,OAAO,YAAA;AACpF,eAAW,YAAY,iBAAiB;AACtC,YAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,UAAI,CAAC,GAAI;AACT,aAAO,IAAIA,QAAO;AAAA,IACpB;AACA;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAE1C,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,UAAM,YAAY,SAAS,IAAI,SAAS;AACxC,QAAI,CAAC,aAAa,CAAC,UAAU,KAAM;AAEnC,eAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,UAAI,CAAC,gBAAgB,OAAQ;AAE7B,YAAM,WAAW,gBAAgB,CAAC;AAClC,YAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,YAAM,UAAU,MAAM;AACtB,UAAI,CAAC,QAAS;AAEd,UAAI;AACF,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,IAAI;AAAA,UACX,SAAS,IAAI;AAAA,QAAA,CACd;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,cAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,MAAA;AAC7E,mBAAWC,aAAY,iBAAiB;AACtC,gBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,cAAI,CAAC,GAAI;AACT,iBAAO,IAAI,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAAA,EACjC,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,QAAM,mBAAmB,MAAM;AAC7B,UAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,QAAI,CAAC,OAAQ,QAAO;AACpB,eAAW,QAAQ,OAAO,UAAU;AAClC,YAAMC,aAAY,KAAK,IAAI,SAAS;AACpC,UAAIA,cAAaA,WAAU,OAAO,EAAG,QAAO;AAAA,IAC9C;AACA,WAAO;AAAA,EACT,GAAA;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,SAAS;AACtC,qBAAe,OAAO,SAAS;AAC/B,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,iBAAiB,QAAQ,OAAO;AAChD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,mBAAmB,KAAK,UAAU,QAAQ,SAAS;AAAA,IAC3D,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
|
|
1
|
+
{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n RTS_USER_ID_HEADER as USER_ID_HEADER,\n normalizeRtsQueryOptions,\n runRtsQuery,\n type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n | {\n type: \"register-query\"\n modelName: string\n queryKey: string\n query: JsonObject\n options?: QueryOptions\n runInitialQuery?: boolean\n }\n | { type: \"remove-query\"; modelName: string; queryKey: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n tenantId: string\n userId: string\n ability: AppAbility\n}\n\ntype SessionUser = {\n id?: string\n currentTenantId?: string\n signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n session?: {\n user?: SessionUser\n }\n}\n\ntype Subscription = {\n query: JsonObject\n options: QueryOptions\n socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n public readonly id: string\n public readonly tenantId: string\n public readonly userId: string\n\n private readonly ws: WebSocket\n private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n public constructor({\n id,\n ws,\n meta,\n }: {\n id: string\n ws: WebSocket\n meta: SocketMeta\n }) {\n this.id = id\n this.ws = ws\n this.tenantId = meta.tenantId\n this.userId = meta.userId\n }\n\n public on(event: string, handler: (payload: unknown) => void): () => void {\n const set = this.handlers.get(event) ?? new Set()\n set.add(handler)\n this.handlers.set(event, set)\n return () => this.off(event, handler)\n }\n\n public off(event: string, handler: (payload: unknown) => void): void {\n const set = this.handlers.get(event)\n if (!set) return\n set.delete(handler)\n if (!set.size) this.handlers.delete(event)\n }\n\n public emit(event: string, payload?: unknown): void {\n sendWs(this.ws, { type: \"event\", event, payload })\n }\n\n public close(): void {\n try {\n this.ws.close()\n } catch {\n // ignore\n }\n }\n\n public dispatch(event: string, payload: unknown): void {\n const set = this.handlers.get(event)\n if (!set) return\n for (const handler of set) {\n handler(payload)\n }\n }\n}\n\nconst rawToText = (raw: RawData): string => {\n if (typeof raw === \"string\") return raw\n if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n if (ws.readyState !== 1) return\n ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n if (socket.listenerCount(\"error\") > 0) return\n\n socket.on(\"error\", (err: unknown) => {\n const message = err instanceof Error ? err.message : String(err)\n const name = err instanceof Error ? err.name : typeof err\n const stack = err instanceof Error ? err.stack : undefined\n const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n console.warn(\"[rb/rts] socket error\", {\n name,\n code,\n message,\n stack,\n remoteAddress: socket.remoteAddress,\n remotePort: socket.remotePort,\n localAddress: socket.localAddress,\n localPort: socket.localPort,\n ...context?.(),\n })\n })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n const raw = err instanceof Error ? err.message : \"Unknown error\"\n const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n const maxLen = 256\n if (trimmedModelList.length <= maxLen) return trimmedModelList\n return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n ensureSocketErrorHandler(socket)\n try {\n socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n socket.write(`Error: ${message}\\r\\n`)\n socket.end()\n } catch {\n socket.destroy()\n }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n type MiddlewareReq = Parameters<RequestHandler>[0]\n type MiddlewareRes = Parameters<RequestHandler>[1]\n type MiddlewareNext = Parameters<RequestHandler>[2]\n\n await new Promise<void>((resolve, reject) => {\n const next: MiddlewareNext = (err) => {\n if (err) reject(err)\n else resolve()\n }\n\n sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n })\n}\n\nconst parseUpgradeMeta = async ({\n req,\n url,\n sessionMiddleware,\n}: {\n req: IncomingMessage\n url: URL\n sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n if (!tenantId) {\n throw new Error(\"Missing rb-tenant-id query parameter\")\n }\n\n if (sessionMiddleware) {\n const upgradeReq = req as UpgradeRequest\n try {\n await runSessionMiddleware(sessionMiddleware, upgradeReq)\n } catch {\n throw new Error(\"Failed to load session for RTS\")\n }\n\n const sessionUser = upgradeReq.session?.user\n const sessionUserId = sessionUser?.id\n if (!sessionUserId) {\n throw new Error(\"Not signed in (missing session.user.id)\")\n }\n\n const signedInTenants = sessionUser?.signedInTenants\n const currentTenantId = sessionUser?.currentTenantId\n\n if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n if (!signedInTenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else if (currentTenantId) {\n if (currentTenantId !== tenantId) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n } else {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n return { tenantId, userId: sessionUserId, ability }\n }\n\n const raw = req.headers[USER_ID_HEADER]\n const headerUserId = Array.isArray(raw) ? raw[0] : raw\n if (!headerUserId) {\n throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n }\n\n const rbCtx: LoadModelCtx = { req: { session: null } }\n const User = await models.getGlobal(\"RBUser\", rbCtx)\n const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n const tenantsRaw = user?.tenants\n const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n if (!tenants.includes(tenantId)) {\n throw new Error(\"Tenant not authorized for this session\")\n }\n\n const roles = getTenantRolesFromSessionUser(user, tenantId)\n const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n const ctx: LoadModelCtx = {\n req: {\n session: {\n user: {\n currentTenantId: tenantId,\n },\n },\n },\n }\n\n return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n const timer = dispatchTimers.get(key)\n if (!timer) return\n clearTimeout(timer)\n dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n const key = makeDispatchKey(tenantId, modelName)\n if (dispatchTimers.has(key)) return\n\n const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n dispatchTimers.set(key, setTimeout(() => {\n dispatchTimers.delete(key)\n void dispatchSubscriptionsForModel(tenantId, modelName)\n }, delay))\n}\n\nconst runAndSendQuery = async ({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query,\n options,\n}: {\n tenantId: string\n targetSocketIds: string[]\n ability: AppAbility\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): Promise<void> => {\n const data = await runRtsQuery({\n tenantId,\n ability,\n modelName,\n query,\n options,\n allowInternalModels,\n })\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantSubs = subscriptions.get(tenantId)\n if (!tenantSubs || !tenantSubs.size) return\n\n for (const userSubs of tenantSubs.values()) {\n const modelSubs = userSubs.get(modelName)\n if (!modelSubs || !modelSubs.size) continue\n\n for (const [queryKey, sub] of modelSubs.entries()) {\n const targetSocketIds = Array.from(sub.socketIds)\n if (!targetSocketIds.length) continue\n\n const socketId = targetSocketIds[0]\n const meta = socketMeta.get(socketId)\n const ability = meta?.ability\n if (!ability) continue\n\n try {\n await runAndSendQuery({\n tenantId,\n targetSocketIds,\n ability,\n modelName,\n queryKey,\n query: sub.query,\n options: sub.options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error }\n for (const socketId of targetSocketIds) {\n const ws = sockets.get(socketId)\n if (!ws) continue\n sendWs(ws, payload)\n }\n }\n }\n }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n changeStreams.set(tenantId, tenantStreams)\n if (tenantStreams.has(modelName)) return\n\n const model = await getTenantModel(tenantId, modelName)\n\n const stream = model.watch([], {\n fullDocument: \"updateLookup\",\n })\n\n stream.on(\"change\", () => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n })\n\n stream.on(\"close\", () => {\n clearDispatchTimer(tenantId, modelName)\n const map = changeStreams.get(tenantId)\n map?.delete(modelName)\n if (map && map.size === 0) changeStreams.delete(tenantId)\n })\n\n stream.on(\"error\", () => {\n try {\n clearDispatchTimer(tenantId, modelName)\n stream.close()\n } catch {\n // ignore\n }\n })\n\n tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n query,\n options,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n query: JsonObject\n options: QueryOptions\n}): void => {\n const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n subscriptions.set(tenantId, tenantSubs)\n\n const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n tenantSubs.set(userId, userSubs)\n\n const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n userSubs.set(modelName, modelSubs)\n\n const existing = modelSubs.get(queryKey)\n if (existing) {\n existing.socketIds.add(socketId)\n } else {\n modelSubs.set(queryKey, {\n query,\n options,\n socketIds: new Set([socketId]),\n })\n }\n\n const byModel = socketSubscriptions.get(socketId) ?? new Map()\n socketSubscriptions.set(socketId, byModel)\n\n const querySet = byModel.get(modelName) ?? new Set()\n byModel.set(modelName, querySet)\n querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n socketId,\n tenantId,\n userId,\n modelName,\n queryKey,\n}: {\n socketId: string\n tenantId: string\n userId: string\n modelName: string\n queryKey: string\n}): void => {\n const tenantSubs = subscriptions.get(tenantId)\n const userSubs = tenantSubs?.get(userId)\n const modelSubs = userSubs?.get(modelName)\n const sub = modelSubs?.get(queryKey)\n if (sub) {\n sub.socketIds.delete(socketId)\n if (!sub.socketIds.size) {\n modelSubs?.delete(queryKey)\n }\n }\n\n const byModel = socketSubscriptions.get(socketId)\n const set = byModel?.get(modelName)\n if (set) {\n set.delete(queryKey)\n if (!set.size) {\n byModel?.delete(modelName)\n }\n }\n\n if (modelSubs && modelSubs.size === 0) {\n userSubs?.delete(modelName)\n }\n\n if (userSubs && userSubs.size === 0) {\n tenantSubs?.delete(userId)\n }\n\n const hasAnyModelSubs = (() => {\n const byUser = subscriptions.get(tenantId)\n if (!byUser) return false\n for (const subs of byUser.values()) {\n const modelSubs = subs.get(modelName)\n if (modelSubs && modelSubs.size > 0) return true\n }\n return false\n })()\n\n if (!hasAnyModelSubs) {\n const tenantStreams = changeStreams.get(tenantId)\n const stream = tenantStreams?.get(modelName)\n if (stream) {\n try {\n stream.close()\n } catch {\n // ignore\n }\n clearDispatchTimer(tenantId, modelName)\n tenantStreams?.delete(modelName)\n if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n }\n }\n\n if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n const meta = socketMeta.get(socketId)\n if (meta) {\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const [modelName, keys] of byModel.entries()) {\n for (const queryKey of keys.values()) {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName,\n queryKey,\n })\n }\n }\n }\n }\n\n socketSubscriptions.delete(socketId)\n\n const cleanupFns = socketCleanup.get(socketId) ?? []\n socketCleanup.delete(socketId)\n for (const fn of cleanupFns) {\n try {\n fn()\n } catch {\n // ignore\n }\n }\n\n sockets.delete(socketId)\n socketMeta.delete(socketId)\n socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n socketId,\n meta,\n message,\n}: {\n socketId: string\n meta: SocketMeta\n message: ClientMessage\n}): Promise<void> => {\n const ws = sockets.get(socketId)\n if (!ws) return\n\n if (message.type === \"event\") {\n const wrapper = socketWrappers.get(socketId)\n wrapper?.dispatch(message.event, message.payload)\n return\n }\n\n if (!message.modelName || typeof message.modelName !== \"string\") return\n if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n return\n }\n if (!message.queryKey || typeof message.queryKey !== \"string\") return\n if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n if (message.type === \"remove-query\") {\n removeSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n })\n return\n }\n\n if (!message.query || typeof message.query !== \"object\") return\n\n const options = normalizeRtsQueryOptions(message.options)\n const ability = meta.ability\n\n if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n return\n }\n\n if (message.type === \"register-query\") {\n const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n if (!existing) {\n let count = 0\n const byModel = socketSubscriptions.get(socketId)\n if (byModel) {\n for (const set of byModel.values()) count += set.size\n }\n\n if (count >= maxSubscriptionsPerSocket) {\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n return\n }\n }\n\n addSocketSubscription({\n socketId,\n tenantId: meta.tenantId,\n userId: meta.userId,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n\n try {\n await ensureChangeStream(meta.tenantId, message.modelName)\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n return\n }\n\n if (message.runInitialQuery === false) {\n return\n }\n }\n\n try {\n await runAndSendQuery({\n tenantId: meta.tenantId,\n targetSocketIds: [socketId],\n ability,\n modelName: message.modelName,\n queryKey: message.queryKey,\n query: message.query,\n options,\n })\n } catch (err) {\n const error = redactErrorMessage(err)\n sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n }\n}\n\nexport const initRts = ({\n server,\n path = \"/rts\",\n sessionMiddleware,\n maxPayloadBytes: maxPayloadBytesArg,\n maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n dispatchDebounceMs: dispatchDebounceMsArg,\n allowInternalModels: allowInternalModelsArg,\n}: {\n server: HttpServer\n path?: string\n sessionMiddleware?: RequestHandler\n maxPayloadBytes?: number\n maxSubscriptionsPerSocket?: number\n dispatchDebounceMs?: number\n allowInternalModels?: boolean\n}): void => {\n if (initializedServers.has(server)) return\n initializedServers.add(server)\n\n if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n }\n\n if (\n typeof maxSubscriptionsPerSocketArg === \"number\"\n && Number.isFinite(maxSubscriptionsPerSocketArg)\n && maxSubscriptionsPerSocketArg > 0\n ) {\n maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n }\n\n if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n }\n\n allowInternalModels = Boolean(allowInternalModelsArg)\n\n const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n ensureSocketErrorHandler(socket, () => ({\n upgradeHost: req.headers.host ?? \"\",\n upgradeUrl: req.url ?? \"\",\n userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n }))\n upgradeMeta.delete(req)\n\n let url: URL\n try {\n url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n } catch {\n badRequest(socket, \"Invalid URL\")\n return\n }\n\n if (url.pathname !== path) return\n\n void (async() => {\n try {\n const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n upgradeMeta.set(req, meta)\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit(\"connection\", ws, req)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n if (message.startsWith(\"Missing rb-tenant-id\")) {\n badRequest(socket, message)\n return\n }\n unauthorized(socket, message)\n return\n }\n })().catch(() => {\n badRequest(socket, \"RTS upgrade failed\")\n })\n })\n\n wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n const meta = upgradeMeta.get(req)\n upgradeMeta.delete(req)\n if (!meta) {\n try {\n ws.close()\n } catch {\n // ignore\n }\n return\n }\n\n const socketId = randomUUID()\n sockets.set(socketId, ws)\n socketMeta.set(socketId, meta)\n\n const wrapper = new RtsSocket({ id: socketId, ws, meta })\n socketWrappers.set(socketId, wrapper)\n\n const cleanupFns: Array<() => void> = []\n for (const handler of customHandlers) {\n try {\n const cleanup = handler(wrapper)\n if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n } catch {\n // ignore\n }\n }\n if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n ws.on(\"message\", (raw: RawData) => {\n let parsed: unknown\n try {\n parsed = safeJsonParse(raw)\n } catch {\n return\n }\n\n if (!parsed || typeof parsed !== \"object\") return\n const message = parsed as { type?: unknown }\n if (\n message.type !== \"event\"\n && message.type !== \"run-query\"\n && message.type !== \"register-query\"\n && message.type !== \"remove-query\"\n ) return\n void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n })\n\n ws.on(\"close\", () => {\n cleanupSocket(socketId)\n })\n\n ws.on(\"error\", () => {\n cleanupSocket(socketId)\n })\n })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["TENANT_ID_QUERY_PARAM","ability","USER_ID_HEADER","socketId","modelSubs"],"mappings":";;;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;AC4DL,MAAM,oBAAoB;AAE1B,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAIA,yBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMC,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQC,kBAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,QAAM,OAAO,MAAM,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,UAAM,YAAY,SAAS,IAAI,SAAS;AACxC,QAAI,CAAC,aAAa,CAAC,UAAU,KAAM;AAEnC,eAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,UAAI,CAAC,gBAAgB,OAAQ;AAE7B,YAAM,WAAW,gBAAgB,CAAC;AAClC,YAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,YAAM,UAAU,MAAM;AACtB,UAAI,CAAC,QAAS;AAEd,UAAI;AACF,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,IAAI;AAAA,UACX,SAAS,IAAI;AAAA,QAAA,CACd;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,cAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,MAAA;AAC7E,mBAAWC,aAAY,iBAAiB;AACtC,gBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,cAAI,CAAC,GAAI;AACT,iBAAO,IAAI,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAAA,EACjC,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,QAAM,mBAAmB,MAAM;AAC7B,UAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,QAAI,CAAC,OAAQ,QAAO;AACpB,eAAW,QAAQ,OAAO,UAAU;AAClC,YAAMC,aAAY,KAAK,IAAI,SAAS;AACpC,UAAIA,cAAaA,WAAU,OAAO,EAAG,QAAO;AAAA,IAC9C;AACA,WAAO;AAAA,EACT,GAAA;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,SAAS;AACtC,qBAAe,OAAO,SAAS;AAC/B,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,yBAAyB,QAAQ,OAAO;AACxD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,mBAAmB,KAAK,UAAU,QAAQ,SAAS;AAAA,IAC3D,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI,QAAQ,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { Request } from 'express';
|
|
2
|
+
import { AppAbility } from '@rpcbase/db/acl';
|
|
3
|
+
type JsonObject = Record<string, unknown>;
|
|
4
|
+
export type RtsQueryOptions = {
|
|
5
|
+
projection?: JsonObject;
|
|
6
|
+
sort?: Record<string, 1 | -1>;
|
|
7
|
+
limit?: number;
|
|
8
|
+
};
|
|
9
|
+
export declare const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
|
|
10
|
+
export declare const RTS_USER_ID_HEADER = "rb-user-id";
|
|
11
|
+
export declare const resolveRtsRequestTenantId: (req: Request) => string | null;
|
|
12
|
+
export declare const resolveRtsRequestUserId: (req: Request) => string | null;
|
|
13
|
+
export declare const isRtsRequestAuthorized: (req: Request, tenantId: string) => boolean;
|
|
14
|
+
export declare const buildRtsAbilityFromRequest: (req: Request, tenantId: string) => Promise<{
|
|
15
|
+
ability: AppAbility;
|
|
16
|
+
userId: string | null;
|
|
17
|
+
}>;
|
|
18
|
+
export declare const normalizeRtsQueryOptions: (options: RtsQueryOptions | undefined) => RtsQueryOptions;
|
|
19
|
+
export declare const runRtsQuery: ({ tenantId, ability, modelName, query, options, allowInternalModels, }: {
|
|
20
|
+
tenantId: string;
|
|
21
|
+
ability: AppAbility;
|
|
22
|
+
modelName: string;
|
|
23
|
+
query: JsonObject;
|
|
24
|
+
options: RtsQueryOptions;
|
|
25
|
+
allowInternalModels?: boolean;
|
|
26
|
+
}) => Promise<unknown[]>;
|
|
27
|
+
export {};
|
|
28
|
+
//# sourceMappingURL=queryExecutor.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAIlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAQzC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AA2B9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAiCxD,CAAA;AAsBD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAe/E,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,OAAO,EAAE,CAyBpB,CAAA"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { Request } from 'express';
|
|
2
|
+
import { RtsSsrRuntime, StaticRpcbaseRtsHydrationData } from '@rpcbase/client';
|
|
3
|
+
export type RtsSsrCollector = {
|
|
4
|
+
runtime: RtsSsrRuntime;
|
|
5
|
+
hasRegistrations: () => boolean;
|
|
6
|
+
resolve: () => Promise<StaticRpcbaseRtsHydrationData | null>;
|
|
7
|
+
};
|
|
8
|
+
export declare const createRtsSsrCollector: (req: Request, opts?: {
|
|
9
|
+
maxQueries?: number;
|
|
10
|
+
maxDocsPerQuery?: number;
|
|
11
|
+
maxSerializedBytes?: number;
|
|
12
|
+
}) => RtsSsrCollector;
|
|
13
|
+
export declare const renderRtsHydrationScript: (data: StaticRpcbaseRtsHydrationData | null | undefined) => string;
|
|
14
|
+
//# sourceMappingURL=ssrHydration.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssrHydration.d.ts","sourceRoot":"","sources":["../../src/rts/ssrHydration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,6BAA6B,EACnC,MAAM,iBAAiB,CAAA;AA6BxB,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,aAAa,CAAA;IACtB,gBAAgB,EAAE,MAAM,OAAO,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAA;CAC7D,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,KAAK,OAAO,EACZ,OAAO;IACL,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,KACA,eAqGF,CAAA;AAED,eAAO,MAAM,wBAAwB,GACnC,MAAM,6BAA6B,GAAG,IAAI,GAAG,SAAS,KACrD,MAIF,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ssrMiddleware.d.ts","sourceRoot":"","sources":["../src/ssrMiddleware.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjI,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,OAAO,CAAA;AAErE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;
|
|
1
|
+
{"version":3,"file":"ssrMiddleware.d.ts","sourceRoot":"","sources":["../src/ssrMiddleware.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjI,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,OAAO,CAAA;AAErE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAO3C,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;AAmI9D,eAAO,MAAM,aAAa,GAAI,kFAM3B;IACD,YAAY,EAAE,aAAa,CAAC;IAC5B,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACxC,mBAAmB,CAAC,EAAE,aAAa,CAAC;QAAE,KAAK,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACtE,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B,MAAW,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,kBA4K1D,CAAA"}
|