@rpcbase/server 0.509.0 → 0.510.0

package/dist/index.js

@@ -21,7 +21,7 @@ import { StrictMode, createElement } from "react";
 import { renderToPipeableStream, renderToStaticMarkup } from "react-dom/server";
 import { jsx } from "react/jsx-runtime";
 import { createPath, matchRoutes, parsePath, createStaticRouter, StaticRouterProvider } from "@rpcbase/router";
-import { r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery } from "./queryExecutor-BZ0GSPM1.js";
+import { r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery } from "./queryExecutor-Xh88REQn.js";
 import { s } from "./email-DEw8keax.js";
 function getDefaultExportFromCjs(x) {
   return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, "default") ? x["default"] : x;

package/dist/queryExecutor-Xh88REQn.js

@@ -0,0 +1,345 @@
+import { models } from "@rpcbase/db";
+import { getAccessibleByQuery, buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
+const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
+const RTS_USER_ID_HEADER = "rb-user-id";
+const QUERY_MAX_LIMIT = 4096;
+const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
+const normalizeTenantId = (value) => {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized ? normalized : null;
+};
+const normalizeSignedInTenants = (value) => {
+  if (!Array.isArray(value)) return [];
+  return value.map((tenantId) => normalizeTenantId(String(tenantId))).filter((tenantId) => Boolean(tenantId));
+};
+const getTenantIdFromRequest = (req) => {
+  const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM];
+  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
+  const normalizedFromQuery = normalizeTenantId(queryTenantId);
+  if (normalizedFromQuery) return normalizedFromQuery;
+  return normalizeTenantId(req.session?.user?.currentTenantId);
+};
+const resolveRtsRequestTenantId = (req) => {
+  return getTenantIdFromRequest(req);
+};
+const isRtsRequestAuthorized = (req, tenantId) => {
+  const sessionUser = req.session?.user;
+  if (!sessionUser) return false;
+  const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants);
+  if (signedInTenants.length > 0) {
+    return signedInTenants.includes(tenantId);
+  }
+  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId);
+  if (!currentTenantId) return false;
+  return currentTenantId === tenantId;
+};
+const buildRtsAbilityFromRequest = async (req, tenantId) => {
+  const sessionUserId = normalizeTenantId(req.session?.user?.id);
+  if (sessionUserId) {
+    const ability = buildAbilityFromSession({ tenantId, session: req.session });
+    return { ability, userId: sessionUserId };
+  }
+  const headerValue = req.headers[RTS_USER_ID_HEADER];
+  const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue;
+  const headerUserId = normalizeTenantId(headerUserIdRaw);
+  if (!headerUserId) {
+    const ability = buildAbilityFromSession({ tenantId, session: req.session });
+    return { ability, userId: null };
+  }
+  const rbCtx = { req: { session: null } };
+  const User = await models.getGlobal("RBUser", rbCtx);
+  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean();
+  const tenantsRaw = user?.tenants;
+  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : [];
+  if (!tenants.includes(tenantId)) {
+    throw new Error("Tenant not authorized for this session");
+  }
+  const roles = getTenantRolesFromSessionUser(user, tenantId);
+  return {
+    ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : ["owner"] }),
+    userId: headerUserId
+  };
+};
+const getTenantModel = async (tenantId, modelName) => {
+  const ctx = {
+    req: {
+      session: {
+        user: {
+          currentTenantId: tenantId
+        }
+      }
+    }
+  };
+  return models.get(modelName, ctx);
+};
+const normalizeLimit = (limit) => {
+  if (typeof limit !== "number") return QUERY_MAX_LIMIT;
+  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
+  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
+};
+const normalizeString = (value) => {
+  return typeof value === "string" ? value.trim() : "";
+};
+const normalizeObject = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  return value;
+};
+const normalizePopulateSelect = (value) => {
+  if (typeof value === "string") {
+    const normalized = value.trim();
+    return normalized || void 0;
+  }
+  return normalizeObject(value);
+};
+const normalizePopulateOptions = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const raw = value;
+  const normalized = {};
+  if (raw.sort && typeof raw.sort === "object" && !Array.isArray(raw.sort)) {
+    normalized.sort = raw.sort;
+  }
+  if (typeof raw.limit === "number" && Number.isFinite(raw.limit)) {
+    normalized.limit = Math.max(0, Math.floor(Math.abs(raw.limit)));
+  }
+  if (!normalized.sort && normalized.limit === void 0) return void 0;
+  return normalized;
+};
+const normalizePopulateObject = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const raw = value;
+  const path = normalizeString(raw.path);
+  if (!path) return void 0;
+  const normalized = { path };
+  const model = normalizeString(raw.model);
+  if (model) normalized.model = model;
+  const select = normalizePopulateSelect(raw.select);
+  if (select !== void 0) normalized.select = select;
+  const match = normalizeObject(raw.match);
+  if (match) normalized.match = match;
+  const nestedPopulate = normalizeRtsPopulateOption(raw.populate);
+  if (nestedPopulate !== void 0) normalized.populate = nestedPopulate;
+  const options = normalizePopulateOptions(raw.options);
+  if (options) normalized.options = options;
+  return normalized;
+};
+const normalizeRtsPopulateOption = (value) => {
+  if (typeof value === "string") {
+    const normalized = value.trim();
+    return normalized || void 0;
+  }
+  if (Array.isArray(value)) {
+    const normalized = value.map((entry) => {
+      if (typeof entry === "string") {
+        const path = entry.trim();
+        return path || null;
+      }
+      return normalizePopulateObject(entry) ?? null;
+    }).filter((entry) => entry !== null);
+    return normalized.length > 0 ? normalized : void 0;
+  }
+  return normalizePopulateObject(value);
+};
+const normalizeModelName = (value) => {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized || null;
+};
+const resolvePopulateRefModelName = (model, path, explicitModelName) => {
+  if (explicitModelName) return explicitModelName;
+  const schema = model.schema;
+  const schemaPath = typeof schema.path === "function" ? schema.path(path) : null;
+  const directRef = normalizeModelName(schemaPath?.options?.ref);
+  if (directRef) return directRef;
+  const arrayRef = normalizeModelName(schemaPath?.caster?.options?.ref);
+  if (arrayRef) return arrayRef;
+  const virtualPath = typeof schema.virtualpath === "function" ? schema.virtualpath(path) : null;
+  const virtualRef = normalizeModelName(virtualPath?.options?.ref);
+  if (virtualRef) return virtualRef;
+  return null;
+};
+const mergePopulateMatchWithAcl = (populateMatch, aclMatch) => {
+  if (!populateMatch || Object.keys(populateMatch).length === 0) return aclMatch;
+  return { $and: [populateMatch, aclMatch] };
+};
+const resolvePopulateSpecForModel = async ({
+  tenantId,
+  model,
+  ability,
+  populate,
+  allowInternalModels,
+  modelCache,
+  dependencyModelNames
+}) => {
+  if (!populate) return void 0;
+  const getModelCached = async (targetModelName) => {
+    const cached = modelCache.get(targetModelName);
+    if (cached) return cached;
+    const loaded = await getTenantModel(tenantId, targetModelName);
+    modelCache.set(targetModelName, loaded);
+    return loaded;
+  };
+  const resolveOne = async (entry, parentModel) => {
+    if (typeof entry === "string") {
+      const path2 = entry.trim();
+      if (!path2) return null;
+      const refModelName2 = resolvePopulateRefModelName(parentModel, path2, null);
+      if (!refModelName2) return path2;
+      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName2)) {
+        throw new Error("Model not allowed");
+      }
+      if (!ability.can("read", refModelName2)) {
+        throw new Error("forbidden");
+      }
+      dependencyModelNames.add(refModelName2);
+      const aclMatch = getAccessibleByQuery(
+        ability,
+        "read",
+        refModelName2
+      );
+      return {
+        path: path2,
+        match: aclMatch
+      };
+    }
+    const path = entry.path.trim();
+    if (!path) return null;
+    const explicitModelName = normalizeModelName(entry.model);
+    const refModelName = resolvePopulateRefModelName(parentModel, path, explicitModelName);
+    let nestedModel = parentModel;
+    const normalizedEntry = {
+      path
+    };
+    if (entry.select !== void 0) normalizedEntry.select = entry.select;
+    if (entry.options !== void 0) normalizedEntry.options = entry.options;
+    if (explicitModelName) normalizedEntry.model = explicitModelName;
+    if (entry.match !== void 0) normalizedEntry.match = entry.match;
+    if (refModelName) {
+      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {
+        throw new Error("Model not allowed");
+      }
+      if (!ability.can("read", refModelName)) {
+        throw new Error("forbidden");
+      }
+      dependencyModelNames.add(refModelName);
+      nestedModel = await getModelCached(refModelName);
+      const aclMatch = getAccessibleByQuery(
+        ability,
+        "read",
+        refModelName
+      );
+      normalizedEntry.match = mergePopulateMatchWithAcl(
+        normalizedEntry.match,
+        aclMatch
+      );
+    } else if (entry.populate !== void 0) {
+      throw new Error("Populate path must reference a model when nested populate is used");
+    }
+    const nestedPopulate = await resolvePopulateSpecForModel({
+      tenantId,
+      model: nestedModel,
+      ability,
+      populate: entry.populate,
+      allowInternalModels,
+      modelCache,
+      dependencyModelNames
+    });
+    if (nestedPopulate !== void 0) normalizedEntry.populate = nestedPopulate;
+    return normalizedEntry;
+  };
+  if (Array.isArray(populate)) {
+    const resolved2 = await Promise.all(populate.map((entry) => resolveOne(entry, model)));
+    const filtered = resolved2.filter((entry) => entry !== null);
+    return filtered.length > 0 ? filtered : void 0;
+  }
+  const resolved = await resolveOne(populate, model);
+  return resolved ?? void 0;
+};
+const normalizeRtsQueryOptions = (options) => {
+  if (!options || typeof options !== "object") return {};
+  const normalized = {};
+  if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
+    normalized.projection = options.projection;
+  }
+  if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
+    normalized.sort = options.sort;
+  }
+  normalized.limit = normalizeLimit(options.limit);
+  normalized.populate = normalizeRtsPopulateOption(options.populate);
+  return normalized;
+};
+const resolveRtsQueryDependencyModelNames = async ({
+  tenantId,
+  ability,
+  modelName,
+  options,
+  allowInternalModels = false
+}) => {
+  const model = await getTenantModel(tenantId, modelName);
+  const modelCache = /* @__PURE__ */ new Map();
+  modelCache.set(modelName, model);
+  const dependencyModelNames = /* @__PURE__ */ new Set();
+  await resolvePopulateSpecForModel({
+    tenantId,
+    model,
+    ability,
+    populate: options.populate,
+    allowInternalModels,
+    modelCache,
+    dependencyModelNames
+  });
+  return Array.from(dependencyModelNames);
+};
+const runRtsQuery = async ({
+  tenantId,
+  ability,
+  modelName,
+  query,
+  options,
+  allowInternalModels = false
+}) => {
+  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {
+    throw new Error("Model not allowed");
+  }
+  if (!ability.can("read", modelName)) {
+    throw new Error("forbidden");
+  }
+  const model = await getTenantModel(tenantId, modelName);
+  const projection = options.projection ?? void 0;
+  const sort = options.sort;
+  const limit = normalizeLimit(options.limit);
+  const modelCache = /* @__PURE__ */ new Map();
+  modelCache.set(modelName, model);
+  const populate = await resolvePopulateSpecForModel({
+    tenantId,
+    model,
+    ability,
+    populate: options.populate,
+    allowInternalModels,
+    modelCache,
+    dependencyModelNames: /* @__PURE__ */ new Set()
+  });
+  const accessQuery = getAccessibleByQuery(ability, "read", modelName);
+  const finalQuery = { $and: [query, accessQuery] };
+  const queryPromise = model.find(finalQuery, projection);
+  if (populate !== void 0) {
+    queryPromise.populate(populate);
+  }
+  if (sort && Object.keys(sort).length) {
+    queryPromise.sort(sort);
+  }
+  queryPromise.limit(limit);
+  const data = await queryPromise;
+  return Array.isArray(data) ? data : [];
+};
+export {
+  RTS_TENANT_ID_QUERY_PARAM as R,
+  runRtsQuery as a,
+  buildRtsAbilityFromRequest as b,
+  RTS_USER_ID_HEADER as c,
+  resolveRtsQueryDependencyModelNames as d,
+  isRtsRequestAuthorized as i,
+  normalizeRtsQueryOptions as n,
+  resolveRtsRequestTenantId as r
+};
+//# sourceMappingURL=queryExecutor-Xh88REQn.js.map

package/dist/queryExecutor-Xh88REQn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryExecutor-Xh88REQn.js","sources":["../src/rts/queryExecutor.ts"],"sourcesContent":["import type { Request } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n  signedInTenants?: unknown\n}\n\nexport type RtsPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: RtsPopulateOption\n}\n\nexport type RtsPopulateOption =\n  | string\n  | RtsPopulateObject\n  | Array<string | RtsPopulateObject>\n\nexport type RtsQueryOptions = {\n  projection?: JsonObject\n  sort?: Record<string, 1 | -1>\n  limit?: number\n  populate?: RtsPopulateOption\n}\n\nexport const RTS_TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nexport const RTS_USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst normalizeTenantId = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst normalizeSignedInTenants = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((tenantId) => normalizeTenantId(String(tenantId)))\n    .filter((tenantId): tenantId is string => Boolean(tenantId))\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n  const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const normalizedFromQuery = normalizeTenantId(queryTenantId)\n  if (normalizedFromQuery) return normalizedFromQuery\n\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n  return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (sessionUserId) return sessionUserId\n\n  const headerValue = req.headers[RTS_USER_ID_HEADER]\n  const headerUserId = Array.isArray(headerValue) ? headerValue[0] : headerValue\n  return normalizeTenantId(headerUserId)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n  const sessionUser = req.session?.user as SessionUser | undefined\n  if (!sessionUser) return false\n\n  const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants)\n  if (signedInTenants.length > 0) {\n    return signedInTenants.includes(tenantId)\n  }\n\n  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n  if (!currentTenantId) return false\n  return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n  req: Request,\n  tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (sessionUserId) {\n    const ability = buildAbilityFromSession({ tenantId, session: req.session })\n    return { ability, userId: sessionUserId }\n  }\n\n  const headerValue = req.headers[RTS_USER_ID_HEADER]\n  const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue\n  const headerUserId = normalizeTenantId(headerUserIdRaw)\n  if (!headerUserId) {\n    const ability = buildAbilityFromSession({ tenantId, session: req.session })\n    return { ability, userId: null }\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as {\n    tenants?: unknown\n    tenantRoles?: unknown\n  } | null\n\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  return {\n    ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] }),\n    userId: headerUserId,\n  }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n  if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nconst normalizeString = (value: unknown): string => {\n  return typeof value === \"string\" ? value.trim() : \"\"\n}\n\nconst normalizeObject = (value: unknown): JsonObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  return value as JsonObject\n}\n\nconst normalizePopulateSelect = (value: unknown): string | JsonObject | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n  return normalizeObject(value)\n}\n\nconst normalizePopulateOptions = (value: unknown): RtsPopulateObject[\"options\"] | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as { sort?: unknown; limit?: unknown }\n  const normalized: RtsPopulateObject[\"options\"] = {}\n\n  if (raw.sort && typeof raw.sort === \"object\" && !Array.isArray(raw.sort)) {\n    normalized.sort = raw.sort as Record<string, 1 | -1>\n  }\n\n  if (typeof raw.limit === \"number\" && Number.isFinite(raw.limit)) {\n    normalized.limit = Math.max(0, Math.floor(Math.abs(raw.limit)))\n  }\n\n  if (!normalized.sort && normalized.limit === undefined) return undefined\n  return normalized\n}\n\nconst normalizePopulateObject = (value: unknown): RtsPopulateObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as Record<string, unknown>\n  const path = normalizeString(raw.path)\n  if (!path) return undefined\n\n  const normalized: RtsPopulateObject = { path }\n\n  const model = normalizeString(raw.model)\n  if (model) normalized.model = model\n\n  const select = normalizePopulateSelect(raw.select)\n  if (select !== undefined) normalized.select = select\n\n  const match = normalizeObject(raw.match)\n  if (match) normalized.match = match\n\n  const nestedPopulate = normalizeRtsPopulateOption(raw.populate)\n  if (nestedPopulate !== undefined) normalized.populate = nestedPopulate\n\n  const options = normalizePopulateOptions(raw.options)\n  if (options) normalized.options = options\n\n  return normalized\n}\n\nconst normalizeRtsPopulateOption = (value: unknown): RtsPopulateOption | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n\n  if (Array.isArray(value)) {\n    const normalized = value\n      .map((entry) => {\n        if (typeof entry === \"string\") {\n          const path = entry.trim()\n          return path || null\n        }\n        return normalizePopulateObject(entry) ?? null\n      })\n      .filter((entry): entry is string | RtsPopulateObject => entry !== null)\n\n    return normalized.length > 0 ? normalized : undefined\n  }\n\n  return normalizePopulateObject(value)\n}\n\nconst normalizeModelName = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst resolvePopulateRefModelName = (\n  model: Model<any>,\n  path: string,\n  explicitModelName: string | null,\n): string | null => {\n  if (explicitModelName) return explicitModelName\n\n  const schema = model.schema as any\n  const schemaPath = typeof schema.path === \"function\" ? schema.path(path) : null\n  const directRef = normalizeModelName(schemaPath?.options?.ref)\n  if (directRef) return directRef\n\n  const arrayRef = normalizeModelName(schemaPath?.caster?.options?.ref)\n  if (arrayRef) return arrayRef\n\n  const virtualPath = typeof schema.virtualpath === \"function\" ? schema.virtualpath(path) : null\n  const virtualRef = normalizeModelName(virtualPath?.options?.ref)\n  if (virtualRef) return virtualRef\n\n  return null\n}\n\nconst mergePopulateMatchWithAcl = (\n  populateMatch: JsonObject | undefined,\n  aclMatch: JsonObject,\n): JsonObject => {\n  if (!populateMatch || Object.keys(populateMatch).length === 0) return aclMatch\n  return { $and: [populateMatch, aclMatch] }\n}\n\ntype PreparedPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: PreparedPopulateOption\n}\n\ntype PreparedPopulateOption =\n  | string\n  | PreparedPopulateObject\n  | Array<string | PreparedPopulateObject>\n\nconst resolvePopulateSpecForModel = async ({\n  tenantId,\n  model,\n  ability,\n  populate,\n  allowInternalModels,\n  modelCache,\n  dependencyModelNames,\n}: {\n  tenantId: string\n  model: Model<any>\n  ability: AppAbility\n  populate: RtsPopulateOption | undefined\n  allowInternalModels: boolean\n  modelCache: Map<string, Model<any>>\n  dependencyModelNames: Set<string>\n}): Promise<PreparedPopulateOption | undefined> => {\n  if (!populate) return undefined\n\n  const getModelCached = async (targetModelName: string): Promise<Model<any>> => {\n    const cached = modelCache.get(targetModelName)\n    if (cached) return cached\n    const loaded = await getTenantModel(tenantId, targetModelName)\n    modelCache.set(targetModelName, loaded)\n    return loaded\n  }\n\n  const resolveOne = async (\n    entry: string | RtsPopulateObject,\n    parentModel: Model<any>,\n  ): Promise<string | PreparedPopulateObject | null> => {\n    if (typeof entry === \"string\") {\n      const path = entry.trim()\n      if (!path) return null\n\n      const refModelName = resolvePopulateRefModelName(parentModel, path, null)\n      if (!refModelName) return path\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      )\n      return {\n        path,\n        match: aclMatch as JsonObject,\n      }\n    }\n\n    const path = entry.path.trim()\n    if (!path) return null\n\n    const explicitModelName = normalizeModelName(entry.model)\n    const refModelName = resolvePopulateRefModelName(parentModel, path, explicitModelName)\n    let nestedModel = parentModel\n\n    const normalizedEntry: PreparedPopulateObject = {\n      path,\n    }\n\n    if (entry.select !== undefined) normalizedEntry.select = entry.select\n    if (entry.options !== undefined) normalizedEntry.options = entry.options\n    if (explicitModelName) normalizedEntry.model = explicitModelName\n    if (entry.match !== undefined) normalizedEntry.match = entry.match\n\n    if (refModelName) {\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n      nestedModel = await getModelCached(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      ) as JsonObject\n      normalizedEntry.match = mergePopulateMatchWithAcl(\n        normalizedEntry.match,\n        aclMatch,\n      )\n    } else if (entry.populate !== undefined) {\n      throw new Error(\"Populate path must reference a model when nested populate is used\")\n    }\n\n    const nestedPopulate = await resolvePopulateSpecForModel({\n      tenantId,\n      model: nestedModel,\n      ability,\n      populate: entry.populate,\n      allowInternalModels,\n      modelCache,\n      dependencyModelNames,\n    })\n    if (nestedPopulate !== undefined) normalizedEntry.populate = nestedPopulate\n\n    return normalizedEntry\n  }\n\n  if (Array.isArray(populate)) {\n    const resolved = await Promise.all(populate.map((entry) => resolveOne(entry, model)))\n    const filtered = resolved.filter((entry): entry is string | PreparedPopulateObject => entry !== null)\n    return filtered.length > 0 ? filtered : undefined\n  }\n\n  const resolved = await resolveOne(populate, model)\n  return resolved ?? undefined\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n  if (!options || typeof options !== \"object\") return {}\n  const normalized: RtsQueryOptions = {}\n\n  if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n    normalized.projection = options.projection\n  }\n\n  if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n    normalized.sort = options.sort\n  }\n\n  normalized.limit = normalizeLimit(options.limit)\n  normalized.populate = normalizeRtsPopulateOption(options.populate)\n\n  return normalized\n}\n\nexport const resolveRtsQueryDependencyModelNames = async ({\n  tenantId,\n  ability,\n  modelName,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<string[]> => {\n  const model = await getTenantModel(tenantId, modelName)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const dependencyModelNames = new Set<string>()\n  await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames,\n  })\n\n  return Array.from(dependencyModelNames)\n}\n\nexport const runRtsQuery = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<unknown[]> => {\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n    throw new Error(\"Model not allowed\")\n  }\n\n  if (!ability.can(\"read\", modelName as AclSubjectType)) {\n    throw new Error(\"forbidden\")\n  }\n\n  const model = await getTenantModel(tenantId, modelName)\n  const projection = options.projection ?? undefined\n  const sort = options.sort\n  const limit = normalizeLimit(options.limit)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const populate = await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames: new Set<string>(),\n  })\n\n  const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n  const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n  const queryPromise = model.find(finalQuery, projection)\n  if (populate !== undefined) {\n    queryPromise.populate(populate as any)\n  }\n  if (sort && Object.keys(sort).length) {\n    queryPromise.sort(sort)\n  }\n  queryPromise.limit(limit)\n\n  const data = await queryPromise\n  return Array.isArray(data) ? data : []\n}\n"],"names":["path","refModelName","resolved"],"mappings":";;AAsCO,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAElC,MAAM,kBAAkB;AACxB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,oBAAoB,CAAC,UAAkC;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEA,MAAM,2BAA2B,CAAC,UAA6B;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,SAAO,MACJ,IAAI,CAAC,aAAa,kBAAkB,OAAO,QAAQ,CAAC,CAAC,EACrD,OAAO,CAAC,aAAiC,QAAQ,QAAQ,CAAC;AAC/D;AAEA,MAAM,yBAAyB,CAAC,QAAgC;AAC9D,QAAM,WAAW,IAAI,QAAQ,yBAAyB;AACtD,QAAM,gBAAgB,MAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC,IAAI;AAC9D,QAAM,sBAAsB,kBAAkB,aAAa;AAC3D,MAAI,oBAAqB,QAAO;AAEhC,SAAO,kBAAmB,IAAI,SAAS,MAAkC,eAAe;AAC1F;AAEO,MAAM,4BAA4B,CAAC,QAAgC;AACxE,SAAO,uBAAuB,GAAG;AACnC;AAWO,MAAM,yBAAyB,CAAC,KAAc,aAA8B;AACjF,QAAM,cAAc,IAAI,SAAS;AACjC,MAAI,CAAC,YAAa,QAAO;AAEzB,QAAM,kBAAkB,yBAAyB,YAAY,eAAe;AAC5E,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,gBAAgB,SAAS,QAAQ;AAAA,EAC1C;AAEA,QAAM,kBAAkB,kBAAkB,YAAY,eAAe;AACrE,MAAI,CAAC,gBAAiB,QAAO;AAC7B,SAAO,oBAAoB;AAC7B;AAEO,MAAM,6BAA6B,OACxC,KACA,aAC4D;AAC5D,QAAM,gBAAgB,kBAAmB,IAAI,SAAS,MAAkC,EAAE;AAC1F,MAAI,eAAe;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,cAAA;AAAA,EAC5B;AAEA,QAAM,cAAc,IAAI,QAAQ,kBAAkB;AAClD,QAAM,kBAAkB,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI;AACtE,QAAM,eAAe,kBAAkB,eAAe;AACtD,MAAI,CAAC,cAAc;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,KAAA;AAAA,EAC5B;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAK/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC,IAAI,CAAA;AACzF,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,SAAO;AAAA,IACL,SAAS,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAAA,IACjG,QAAQ;AAAA,EAAA;AAEZ;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEA,MAAM,kBAAkB,CAAC,UAA2B;AAClD,SAAO,OAAO,UAAU,WAAW,MAAM,SAAS;AACpD;AAEA,MAAM,kBAAkB,CAAC,UAA2C;AAClE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,SAAO;AACT;AAEA,MAAM,0BAA0B,CAAC,UAAoD;AACnF,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,aAAa,MAAM,KAAA;AACzB,WAAO,cAAc;AAAA,EACvB;AACA,SAAO,gBAAgB,KAAK;AAC9B;AAEA,MAAM,2BAA2B,CAAC,UAA6D;AAC7F,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,MAAM;AACZ,QAAM,aAA2C,CAAA;AAEjD,MAAI,IAAI,QAAQ,OAAO,IAAI,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IAAI,GAAG;AACxE,eAAW,OAAO,IAAI;AAAA,EACxB;AAEA,MAAI,OAAO,IAAI,UAAU,YAAY,OAAO,SAAS,IAAI,KAAK,GAAG;AAC/D,eAAW,QAAQ,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC;AAAA,EAChE;AAEA,MAAI,CAAC,WAAW,QAAQ,WAAW,UAAU,OAAW,QAAO;AAC/D,SAAO;AACT;AAEA,MAAM,0BAA0B,CAAC,UAAkD;AACjF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,MAAM;AACZ,QAAM,OAAO,gBAAgB,IAAI,IAAI;AACrC,MAAI,CAAC,KAAM,QAAO;AAElB,QAAM,aAAgC,EAAE,KAAA;AAExC,QAAM,QAAQ,gBAAgB,IAAI,KAAK;AACvC,MAAI,kBAAkB,QAAQ;AAE9B,QAAM,SAAS,wBAAwB,IAAI,MAAM;AACjD,MAAI,WAAW,OAAW,YAAW,SAAS;AAE9C,QAAM,QAAQ,gBAAgB,IAAI,KAAK;AACvC,MAAI,kBAAkB,QAAQ;AAE9B,QAAM,iBAAiB,2BAA2B,IAAI,QAAQ;AAC9D,MAAI,mBAAmB,OAAW,YAAW,WAAW;AAExD,QAAM,UAAU,yBAAyB,IAAI,OAAO;AACpD,MAAI,oBAAoB,UAAU;AAElC,SAAO;AACT;AAEA,MAAM,6BAA6B,CAAC,UAAkD;AACpF,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,aAAa,MAAM,KAAA;AACzB,WAAO,cAAc;AAAA,EACvB;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,aAAa,MAChB,IAAI,CAAC,UAAU;AACd,UAAI,OAAO,UAAU,UAAU;AAC7B,cAAM,OAAO,MAAM,KAAA;AACnB,eAAO,QAAQ;AAAA,MACjB;AACA,aAAO,wBAAwB,KAAK,KAAK;AAAA,IAC3C,CAAC,EACA,OAAO,CAAC,UAA+C,UAAU,IAAI;AAExE,WAAO,WAAW,SAAS,IAAI,aAAa;AAAA,EAC9C;AAEA,SAAO,wBAAwB,KAAK;AACtC;AAEA,MAAM,qBAAqB,CAAC,UAAkC;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,cAAc;AACvB;AAEA,MAAM,8BAA8B,CAClC,OACA,MACA,sBACkB;AAClB,MAAI,kBAAmB,QAAO;AAE9B,QAAM,SAAS,MAAM;AACrB,QAAM,aAAa,OAAO,OAAO,SAAS,aAAa,OAAO,KAAK,IAAI,IAAI;AAC3E,QAAM,YAAY,mBAAmB,YAAY,SAAS,GAAG;AAC7D,MAAI,UAAW,QAAO;AAEtB,QAAM,WAAW,mBAAmB,YAAY,QAAQ,SAAS,GAAG;AACpE,MAAI,SAAU,QAAO;AAErB,QAAM,cAAc,OAAO,OAAO,gBAAgB,aAAa,OAAO,YAAY,IAAI,IAAI;AAC1F,QAAM,aAAa,mBAAmB,aAAa,SAAS,GAAG;AAC/D,MAAI,WAAY,QAAO;AAEvB,SAAO;AACT;AAEA,MAAM,4BAA4B,CAChC,eACA,aACe;AACf,MAAI,CAAC,iBAAiB,OAAO,KAAK,aAAa,EAAE,WAAW,EAAG,QAAO;AACtE,SAAO,EAAE,MAAM,CAAC,eAAe,QAAQ,EAAA;AACzC;AAmBA,MAAM,8BAA8B,OAAO;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQmD;AACjD,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,iBAAiB,OAAO,oBAAiD;AAC7E,UAAM,SAAS,WAAW,IAAI,eAAe;AAC7C,QAAI,OAAQ,QAAO;AACnB,UAAM,SAAS,MAAM,eAAe,UAAU,eAAe;AAC7D,eAAW,IAAI,iBAAiB,MAAM;AACtC,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,OACjB,OACA,gBACoD;AACpD,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAMA,QAAO,MAAM,KAAA;AACnB,UAAI,CAACA,MAAM,QAAO;AAElB,YAAMC,gBAAe,4BAA4B,aAAaD,OAAM,IAAI;AACxE,UAAI,CAACC,cAAc,QAAOD;AAC1B,UAAI,CAAC,uBAAuB,qBAAqB,IAAIC,aAAY,GAAG;AAClE,cAAM,IAAI,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAAC,QAAQ,IAAI,QAAQA,aAA8B,GAAG;AACxD,cAAM,IAAI,MAAM,WAAW;AAAA,MAC7B;AAEA,2BAAqB,IAAIA,aAAY;AAErC,YAAM,WAAW;AAAA,QACf;AAAA,QACA;AAAA,QACAA;AAAAA,MAAA;AAEF,aAAO;AAAA,QACL,MAAAD;AAAAA,QACA,OAAO;AAAA,MAAA;AAAA,IAEX;AAEA,UAAM,OAAO,MAAM,KAAK,KAAA;AACxB,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,oBAAoB,mBAAmB,MAAM,KAAK;AACxD,UAAM,eAAe,4BAA4B,aAAa,MAAM,iBAAiB;AACrF,QAAI,cAAc;AAElB,UAAM,kBAA0C;AAAA,MAC9C;AAAA,IAAA;AAGF,QAAI,MAAM,WAAW,OAAW,iBAAgB,SAAS,MAAM;AAC/D,QAAI,MAAM,YAAY,OAAW,iBAAgB,UAAU,MAAM;AACjE,QAAI,mCAAmC,QAAQ;AAC/C,QAAI,MAAM,UAAU,OAAW,iBAAgB,QAAQ,MAAM;AAE7D,QAAI,cAAc;AAChB,UAAI,CAAC,uBAAuB,qBAAqB,IAAI,YAAY,GAAG;AAClE,cAAM,IAAI,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAAC,QAAQ,IAAI,QAAQ,YAA8B,GAAG;AACxD,cAAM,IAAI,MAAM,WAAW;AAAA,MAC7B;AAEA,2BAAqB,IAAI,YAAY;AACrC,oBAAc,MAAM,eAAe,YAAY;AAE/C,YAAM,WAAW;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAEF,sBAAgB,QAAQ;AAAA,QACtB,gBAAgB;AAAA,QAChB;AAAA,MAAA;AAAA,IAEJ,WAAW,MAAM,aAAa,QAAW;AACvC,YAAM,IAAI,MAAM,mEAAmE;AAAA,IACrF;AAEA,UAAM,iBAAiB,MAAM,4BAA4B;AAAA,MACvD;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,IAAA,CACD;AACD,QAAI,mBAAmB,OAAW,iBAAgB,WAAW;AAE7D,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,UAAME,YAAW,MAAM,QAAQ,IAAI,SAAS,IAAI,CAAC,UAAU,WAAW,OAAO,KAAK,CAAC,CAAC;AACpF,UAAM,WAAWA,UAAS,OAAO,CAAC,UAAoD,UAAU,IAAI;AACpG,WAAO,SAAS,SAAS,IAAI,WAAW;AAAA,EAC1C;AAEA,QAAM,WAAW,MAAM,WAAW,UAAU,KAAK;AACjD,SAAO,YAAY;AACrB;AAEO,MAAM,2BAA2B,CAAC,YAA0D;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA8B,CAAA;AAEpC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAC/C,aAAW,WAAW,2BAA2B,QAAQ,QAAQ;AAEjE,SAAO;AACT;AAEO,MAAM,sCAAsC,OAAO;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB,MAMyB;AACvB,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AACtD,QAAM,iCAAiB,IAAA;AACvB,aAAW,IAAI,WAAW,KAAK;AAE/B,QAAM,2CAA2B,IAAA;AACjC,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AAED,SAAO,MAAM,KAAK,oBAAoB;AACxC;AAEO,MAAM,cAAc,OAAO;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB,MAO0B;AACxB,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,SAAS,GAAG;AAC/D,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AACtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAC1C,QAAM,iCAAiB,IAAA;AACvB,aAAW,IAAI,WAAW,KAAK;AAE/B,QAAM,WAAW,MAAM,4BAA4B;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB;AAAA,IACA;AAAA,IACA,0CAA0B,IAAA;AAAA,EAAY,CACvC;AAED,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,aAAa,QAAW;AAC1B,iBAAa,SAAS,QAAe;AAAA,EACvC;AACA,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,SAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AACtC;"}

package/dist/rts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAA6F,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAG5I,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AA8BlE,KAAK,UAAU,GAAG;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,UAAU,CAAA;CACpB,CAAA;AAoBD,KAAK,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAA;AA6B3D,cAAM,SAAS;IACb,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAA;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAA;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;gBAE3D,EACjB,EAAE,EACF,EAAE,EACF,IAAI,GACL,EAAE;QACD,EAAE,EAAE,MAAM,CAAA;QACV,EAAE,EAAE,SAAS,CAAA;QACb,IAAI,EAAE,UAAU,CAAA;KACjB;IAOM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAO7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5C,KAAK,IAAI,IAAI;IAQb,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAOvD;AAqiBD,eAAO,MAAM,OAAO,GAAI,4NAQrB;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,cAAc,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,IAyHH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,SAAS,SAAS,KAAG,IAEvD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,IAE3E,CAAA;AAED,cAAc,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rts/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAA6F,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAG5I,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AA+BlE,KAAK,UAAU,GAAG;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,UAAU,CAAA;CACpB,CAAA;AAqBD,KAAK,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAA;AA6B3D,cAAM,SAAS;IACb,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAA;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAA;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;gBAE3D,EACjB,EAAE,EACF,EAAE,EACF,IAAI,GACL,EAAE;QACD,EAAE,EAAE,MAAM,CAAA;QACV,EAAE,EAAE,SAAS,CAAA;QACb,IAAI,EAAE,UAAU,CAAA;KACjB;IAOM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAO7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5C,KAAK,IAAI,IAAI;IAQb,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAOvD;AAqlBD,eAAO,MAAM,OAAO,GAAI,4NAQrB;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,cAAc,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,IAyHH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,SAAS,SAAS,KAAG,IAEvD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,IAE3E,CAAA;AAED,cAAc,UAAU,CAAA"}

package/dist/rts/index.js

@@ -2,7 +2,7 @@ import { randomUUID } from "node:crypto";
 import { models } from "@rpcbase/db";
 import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
 import { WebSocketServer } from "ws";
-import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, a as runRtsQuery } from "../queryExecutor-BZ0GSPM1.js";
+import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, d as resolveRtsQueryDependencyModelNames, a as runRtsQuery } from "../queryExecutor-Xh88REQn.js";
 const routes = Object.entries({
   .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BNrqh1Kb.js") })
 }).reduce((acc, [path, mod]) => {
@@ -251,36 +251,55 @@ const runAndSendQuery = async ({
     sendWs(ws, payload);
   }
 };
+const subscriptionDependsOnModel = (changedModelName, ownerModelName, subscription) => {
+  if (ownerModelName === changedModelName) return true;
+  return subscription.dependencyModelNames.includes(changedModelName);
+};
+const hasAnySubscriptionsDependingOnModel = (tenantId, modelName) => {
+  const tenantSubs = subscriptions.get(tenantId);
+  if (!tenantSubs) return false;
+  for (const userSubs of tenantSubs.values()) {
+    for (const [ownerModelName, modelSubs] of userSubs.entries()) {
+      for (const subscription of modelSubs.values()) {
+        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {
+          return true;
+        }
+      }
+    }
+  }
+  return false;
+};
 const dispatchSubscriptionsForModel = async (tenantId, modelName) => {
   const tenantSubs = subscriptions.get(tenantId);
   if (!tenantSubs || !tenantSubs.size) return;
   for (const userSubs of tenantSubs.values()) {
-    const modelSubs = userSubs.get(modelName);
-    if (!modelSubs || !modelSubs.size) continue;
-    for (const [queryKey, sub] of modelSubs.entries()) {
-      const targetSocketIds = Array.from(sub.socketIds);
-      if (!targetSocketIds.length) continue;
-      const socketId = targetSocketIds[0];
-      const meta = socketMeta.get(socketId);
-      const ability = meta?.ability;
-      if (!ability) continue;
-      try {
-        await runAndSendQuery({
-          tenantId,
-          targetSocketIds,
-          ability,
-          modelName,
-          queryKey,
-          query: sub.query,
-          options: sub.options
-        });
-      } catch (err) {
-        const error = redactErrorMessage(err);
-        const payload = { type: "query-payload", modelName, queryKey, error };
-        for (const socketId2 of targetSocketIds) {
-          const ws = sockets.get(socketId2);
-          if (!ws) continue;
-          sendWs(ws, payload);
+    for (const [ownerModelName, modelSubs] of userSubs.entries()) {
+      for (const [queryKey, sub] of modelSubs.entries()) {
+        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue;
+        const targetSocketIds = Array.from(sub.socketIds);
+        if (!targetSocketIds.length) continue;
+        const socketId = targetSocketIds[0];
+        const meta = socketMeta.get(socketId);
+        const ability = meta?.ability;
+        if (!ability) continue;
+        try {
+          await runAndSendQuery({
+            tenantId,
+            targetSocketIds,
+            ability,
+            modelName: ownerModelName,
+            queryKey,
+            query: sub.query,
+            options: sub.options
+          });
+        } catch (err) {
+          const error = redactErrorMessage(err);
+          const payload = { type: "query-payload", modelName: ownerModelName, queryKey, error };
+          for (const socketId2 of targetSocketIds) {
+            const ws = sockets.get(socketId2);
+            if (!ws) continue;
+            sendWs(ws, payload);
+          }
         }
       }
     }
@@ -319,7 +338,8 @@ const addSocketSubscription = ({
   modelName,
   queryKey,
   query,
-  options
+  options,
+  dependencyModelNames
 }) => {
   const tenantSubs = subscriptions.get(tenantId) ?? /* @__PURE__ */ new Map();
   subscriptions.set(tenantId, tenantSubs);
@@ -330,10 +350,12 @@ const addSocketSubscription = ({
   const existing = modelSubs.get(queryKey);
   if (existing) {
     existing.socketIds.add(socketId);
+    existing.dependencyModelNames = Array.from(/* @__PURE__ */ new Set([...existing.dependencyModelNames, ...dependencyModelNames]));
   } else {
     modelSubs.set(queryKey, {
       query,
       options,
+      dependencyModelNames: Array.from(new Set(dependencyModelNames)),
       socketIds: /* @__PURE__ */ new Set([socketId])
     });
   }
@@ -354,6 +376,7 @@ const removeSocketSubscription = ({
   const userSubs = tenantSubs?.get(userId);
   const modelSubs = userSubs?.get(modelName);
   const sub = modelSubs?.get(queryKey);
+  const affectedModelNames = /* @__PURE__ */ new Set([modelName, ...sub?.dependencyModelNames ?? []]);
   if (sub) {
     sub.socketIds.delete(socketId);
     if (!sub.socketIds.size) {
@@ -374,25 +397,17 @@ const removeSocketSubscription = ({
   if (userSubs && userSubs.size === 0) {
     tenantSubs?.delete(userId);
   }
-  const hasAnyModelSubs = (() => {
-    const byUser = subscriptions.get(tenantId);
-    if (!byUser) return false;
-    for (const subs of byUser.values()) {
-      const modelSubs2 = subs.get(modelName);
-      if (modelSubs2 && modelSubs2.size > 0) return true;
-    }
-    return false;
-  })();
-  if (!hasAnyModelSubs) {
+  for (const affectedModelName of affectedModelNames) {
+    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue;
     const tenantStreams = changeStreams.get(tenantId);
-    const stream = tenantStreams?.get(modelName);
+    const stream = tenantStreams?.get(affectedModelName);
     if (stream) {
       try {
         stream.close();
       } catch {
       }
-      clearDispatchTimer(tenantId, modelName);
-      tenantStreams?.delete(modelName);
+      clearDispatchTimer(tenantId, affectedModelName);
+      tenantStreams?.delete(affectedModelName);
       if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
     }
   }
@@ -479,6 +494,22 @@ const handleClientMessage = async ({
         return;
       }
     }
+    let dependencyModelNames = [];
+    if (options.populate !== void 0) {
+      try {
+        dependencyModelNames = await resolveRtsQueryDependencyModelNames({
+          tenantId: meta.tenantId,
+          ability,
+          modelName: message.modelName,
+          options,
+          allowInternalModels
+        });
+      } catch (err) {
+        const error = redactErrorMessage(err);
+        sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
+        return;
+      }
+    }
     addSocketSubscription({
       socketId,
       tenantId: meta.tenantId,
@@ -486,10 +517,14 @@ const handleClientMessage = async ({
       modelName: message.modelName,
       queryKey: message.queryKey,
       query: message.query,
-      options
+      options,
+      dependencyModelNames
     });
     try {
-      await ensureChangeStream(meta.tenantId, message.modelName);
+      const modelNamesToWatch = /* @__PURE__ */ new Set([message.modelName, ...dependencyModelNames]);
+      for (const modelName of modelNamesToWatch) {
+        await ensureChangeStream(meta.tenantId, modelName);
+      }
     } catch (err) {
       const error = redactErrorMessage(err);
       sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });

package/dist/rts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const data = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    const modelSubs = userSubs.get(modelName)\n    if (!modelSubs || !modelSubs.size) continue\n\n    for (const [queryKey, sub] of modelSubs.entries()) {\n      const targetSocketIds = Array.from(sub.socketIds)\n      if (!targetSocketIds.length) continue\n\n      const socketId = targetSocketIds[0]\n      const meta = socketMeta.get(socketId)\n      const ability = meta?.ability\n      if (!ability) continue\n\n      try {\n        await runAndSendQuery({\n          tenantId,\n          targetSocketIds,\n          ability,\n          modelName,\n          queryKey,\n          query: sub.query,\n          options: sub.options,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, error }\n        for (const socketId of targetSocketIds) {\n          const ws = sockets.get(socketId)\n          if (!ws) continue\n          sendWs(ws, payload)\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  const hasAnyModelSubs = (() => {\n    const byUser = subscriptions.get(tenantId)\n    if (!byUser) return false\n    for (const subs of byUser.values()) {\n      const modelSubs = subs.get(modelName)\n      if (modelSubs && modelSubs.size > 0) return true\n    }\n    return false\n  })()\n\n  if (!hasAnyModelSubs) {\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(modelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, modelName)\n      tenantStreams?.delete(modelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n\n    try {\n      await ensureChangeStream(meta.tenantId, message.modelName)\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["TENANT_ID_QUERY_PARAM","ability","USER_ID_HEADER","socketId","modelSubs"],"mappings":";;;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;AC4DL,MAAM,oBAAoB;AAE1B,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAIA,yBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMC,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQC,kBAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,QAAM,OAAO,MAAM,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,UAAM,YAAY,SAAS,IAAI,SAAS;AACxC,QAAI,CAAC,aAAa,CAAC,UAAU,KAAM;AAEnC,eAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,UAAI,CAAC,gBAAgB,OAAQ;AAE7B,YAAM,WAAW,gBAAgB,CAAC;AAClC,YAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,YAAM,UAAU,MAAM;AACtB,UAAI,CAAC,QAAS;AAEd,UAAI;AACF,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,IAAI;AAAA,UACX,SAAS,IAAI;AAAA,QAAA,CACd;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,cAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,MAAA;AAC7E,mBAAWC,aAAY,iBAAiB;AACtC,gBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,cAAI,CAAC,GAAI;AACT,iBAAO,IAAI,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAAA,EACjC,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,QAAM,mBAAmB,MAAM;AAC7B,UAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,QAAI,CAAC,OAAQ,QAAO;AACpB,eAAW,QAAQ,OAAO,UAAU;AAClC,YAAMC,aAAY,KAAK,IAAI,SAAS;AACpC,UAAIA,cAAaA,WAAU,OAAO,EAAG,QAAO;AAAA,IAC9C;AACA,WAAO;AAAA,EACT,GAAA;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,SAAS;AACtC,qBAAe,OAAO,SAAS;AAC/B,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,yBAAyB,QAAQ,OAAO;AACxD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,mBAAmB,KAAK,UAAU,QAAQ,SAAS;AAAA,IAC3D,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI,QAAQ,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
+{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | { type: \"query-payload\"; modelName: string; queryKey: string; data?: unknown; error?: string; txnId?: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as { tenants?: unknown } | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const data = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = { type: \"query-payload\", modelName, queryKey, data }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    let dependencyModelNames: string[] = []\n    if (options.populate !== undefined) {\n      try {\n        dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n          tenantId: meta.tenantId,\n          ability,\n          modelName: message.modelName,\n          options,\n          allowInternalModels,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n      dependencyModelNames,\n    })\n\n    try {\n      const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n      for (const modelName of modelNamesToWatch) {\n        await ensureChangeStream(meta.tenantId, modelName)\n      }\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["TENANT_ID_QUERY_PARAM","ability","USER_ID_HEADER","socketId"],"mappings":";;;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;AC8DL,MAAM,oBAAoB;AAE1B,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAIA,yBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMC,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQC,kBAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,QAAM,OAAO,MAAM,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,QAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,UAAU,KAAA;AAE7E,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,6BAA6B,CACjC,kBACA,gBACA,iBACY;AACZ,MAAI,mBAAmB,iBAAkB,QAAO;AAChD,SAAO,aAAa,qBAAqB,SAAS,gBAAgB;AACpE;AAEA,MAAM,sCAAsC,CAC1C,UACA,cACY;AACZ,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,WAAY,QAAO;AAExB,aAAW,YAAY,WAAW,UAAU;AAC1C,eAAW,CAAC,gBAAgB,SAAS,KAAK,SAAS,WAAW;AAC5D,iBAAW,gBAAgB,UAAU,UAAU;AAC7C,YAAI,2BAA2B,WAAW,gBAAgB,YAAY,GAAG;AACvE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,eAAW,CAAC,gBAAgB,SAAS,KAAK,SAAS,WAAW;AAC5D,iBAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAI,CAAC,2BAA2B,WAAW,gBAAgB,GAAG,EAAG;AAEjE,cAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,YAAI,CAAC,gBAAgB,OAAQ;AAE7B,cAAM,WAAW,gBAAgB,CAAC;AAClC,cAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,cAAM,UAAU,MAAM;AACtB,YAAI,CAAC,QAAS;AAEd,YAAI;AACF,gBAAM,gBAAgB;AAAA,YACpB;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,OAAO,IAAI;AAAA,YACX,SAAS,IAAI;AAAA,UAAA,CACd;AAAA,QACH,SAAS,KAAK;AACZ,gBAAM,QAAQ,mBAAmB,GAAG;AACpC,gBAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,gBAAgB,UAAU,MAAA;AAC7F,qBAAWC,aAAY,iBAAiB;AACtC,kBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,gBAAI,CAAC,GAAI;AACT,mBAAO,IAAI,OAAO;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MASY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAC/B,aAAS,uBAAuB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,SAAS,sBAAsB,GAAG,oBAAoB,CAAC,CAAC;AAAA,EACjH,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,sBAAsB,MAAM,KAAK,IAAI,IAAI,oBAAoB,CAAC;AAAA,MAC9D,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,QAAM,qBAAqB,oBAAI,IAAY,CAAC,WAAW,GAAI,KAAK,wBAAwB,CAAA,CAAG,CAAC;AAC5F,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,aAAW,qBAAqB,oBAAoB;AAClD,QAAI,oCAAoC,UAAU,iBAAiB,EAAG;AAEtE,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,iBAAiB;AACnD,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,iBAAiB;AAC9C,qBAAe,OAAO,iBAAiB;AACvC,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,yBAAyB,QAAQ,OAAO;AACxD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,QAAI,uBAAiC,CAAA;AACrC,QAAI,QAAQ,aAAa,QAAW;AAClC,UAAI;AACF,+BAAuB,MAAM,oCAAoC;AAAA,UAC/D,UAAU,KAAK;AAAA,UACf;AAAA,UACA,WAAW,QAAQ;AAAA,UACnB;AAAA,UACA;AAAA,QAAA,CACD;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,MACA;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,wCAAwB,IAAY,CAAC,QAAQ,WAAW,GAAG,oBAAoB,CAAC;AACtF,iBAAW,aAAa,mBAAmB;AACzC,cAAM,mBAAmB,KAAK,UAAU,SAAS;AAAA,MACnD;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI,QAAQ,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}

package/dist/rts/queryExecutor.d.ts

@@ -1,10 +1,23 @@
 import { Request } from 'express';
 import { AppAbility } from '@rpcbase/db/acl';
 type JsonObject = Record<string, unknown>;
+export type RtsPopulateObject = {
+    path: string;
+    model?: string;
+    select?: string | JsonObject;
+    match?: JsonObject;
+    options?: {
+        sort?: Record<string, 1 | -1>;
+        limit?: number;
+    };
+    populate?: RtsPopulateOption;
+};
+export type RtsPopulateOption = string | RtsPopulateObject | Array<string | RtsPopulateObject>;
 export type RtsQueryOptions = {
     projection?: JsonObject;
     sort?: Record<string, 1 | -1>;
     limit?: number;
+    populate?: RtsPopulateOption;
 };
 export declare const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
 export declare const RTS_USER_ID_HEADER = "rb-user-id";
@@ -16,6 +29,13 @@ export declare const buildRtsAbilityFromRequest: (req: Request, tenantId: string
     userId: string | null;
 }>;
 export declare const normalizeRtsQueryOptions: (options: RtsQueryOptions | undefined) => RtsQueryOptions;
+export declare const resolveRtsQueryDependencyModelNames: ({ tenantId, ability, modelName, options, allowInternalModels, }: {
+    tenantId: string;
+    ability: AppAbility;
+    modelName: string;
+    options: RtsQueryOptions;
+    allowInternalModels?: boolean;
+}) => Promise<string[]>;
 export declare const runRtsQuery: ({ tenantId, ability, modelName, query, options, allowInternalModels, }: {
     tenantId: string;
     ability: AppAbility;

package/dist/rts/queryExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAIlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAQzC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AA2B9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAiCxD,CAAA;AAsBD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAe/E,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,OAAO,EAAE,CAyBpB,CAAA"}
+{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAIlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAQzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AA2B9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAiCxD,CAAA;AAuRD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAgB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,OAAO,EAAE,CAwCpB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.509.0",
+  "version": "0.510.0",
   "type": "module",
   "files": [
     "dist"

package/dist/queryExecutor-BZ0GSPM1.js

@@ -1,130 +0,0 @@
-import { models } from "@rpcbase/db";
-import { getAccessibleByQuery, buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
-const RTS_TENANT_ID_QUERY_PARAM = "rb-tenant-id";
-const RTS_USER_ID_HEADER = "rb-user-id";
-const QUERY_MAX_LIMIT = 4096;
-const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
-const normalizeTenantId = (value) => {
-  if (typeof value !== "string") return null;
-  const normalized = value.trim();
-  return normalized ? normalized : null;
-};
-const normalizeSignedInTenants = (value) => {
-  if (!Array.isArray(value)) return [];
-  return value.map((tenantId) => normalizeTenantId(String(tenantId))).filter((tenantId) => Boolean(tenantId));
-};
-const getTenantIdFromRequest = (req) => {
-  const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM];
-  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
-  const normalizedFromQuery = normalizeTenantId(queryTenantId);
-  if (normalizedFromQuery) return normalizedFromQuery;
-  return normalizeTenantId(req.session?.user?.currentTenantId);
-};
-const resolveRtsRequestTenantId = (req) => {
-  return getTenantIdFromRequest(req);
-};
-const isRtsRequestAuthorized = (req, tenantId) => {
-  const sessionUser = req.session?.user;
-  if (!sessionUser) return false;
-  const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants);
-  if (signedInTenants.length > 0) {
-    return signedInTenants.includes(tenantId);
-  }
-  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId);
-  if (!currentTenantId) return false;
-  return currentTenantId === tenantId;
-};
-const buildRtsAbilityFromRequest = async (req, tenantId) => {
-  const sessionUserId = normalizeTenantId(req.session?.user?.id);
-  if (sessionUserId) {
-    const ability = buildAbilityFromSession({ tenantId, session: req.session });
-    return { ability, userId: sessionUserId };
-  }
-  const headerValue = req.headers[RTS_USER_ID_HEADER];
-  const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue;
-  const headerUserId = normalizeTenantId(headerUserIdRaw);
-  if (!headerUserId) {
-    const ability = buildAbilityFromSession({ tenantId, session: req.session });
-    return { ability, userId: null };
-  }
-  const rbCtx = { req: { session: null } };
-  const User = await models.getGlobal("RBUser", rbCtx);
-  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean();
-  const tenantsRaw = user?.tenants;
-  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : [];
-  if (!tenants.includes(tenantId)) {
-    throw new Error("Tenant not authorized for this session");
-  }
-  const roles = getTenantRolesFromSessionUser(user, tenantId);
-  return {
-    ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : ["owner"] }),
-    userId: headerUserId
-  };
-};
-const getTenantModel = async (tenantId, modelName) => {
-  const ctx = {
-    req: {
-      session: {
-        user: {
-          currentTenantId: tenantId
-        }
-      }
-    }
-  };
-  return models.get(modelName, ctx);
-};
-const normalizeLimit = (limit) => {
-  if (typeof limit !== "number") return QUERY_MAX_LIMIT;
-  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT;
-  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit));
-};
-const normalizeRtsQueryOptions = (options) => {
-  if (!options || typeof options !== "object") return {};
-  const normalized = {};
-  if (options.projection && typeof options.projection === "object" && !Array.isArray(options.projection)) {
-    normalized.projection = options.projection;
-  }
-  if (options.sort && typeof options.sort === "object" && !Array.isArray(options.sort)) {
-    normalized.sort = options.sort;
-  }
-  normalized.limit = normalizeLimit(options.limit);
-  return normalized;
-};
-const runRtsQuery = async ({
-  tenantId,
-  ability,
-  modelName,
-  query,
-  options,
-  allowInternalModels = false
-}) => {
-  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {
-    throw new Error("Model not allowed");
-  }
-  if (!ability.can("read", modelName)) {
-    throw new Error("forbidden");
-  }
-  const model = await getTenantModel(tenantId, modelName);
-  const projection = options.projection ?? void 0;
-  const sort = options.sort;
-  const limit = normalizeLimit(options.limit);
-  const accessQuery = getAccessibleByQuery(ability, "read", modelName);
-  const finalQuery = { $and: [query, accessQuery] };
-  const queryPromise = model.find(finalQuery, projection);
-  if (sort && Object.keys(sort).length) {
-    queryPromise.sort(sort);
-  }
-  queryPromise.limit(limit);
-  const data = await queryPromise;
-  return Array.isArray(data) ? data : [];
-};
-export {
-  RTS_TENANT_ID_QUERY_PARAM as R,
-  runRtsQuery as a,
-  buildRtsAbilityFromRequest as b,
-  RTS_USER_ID_HEADER as c,
-  isRtsRequestAuthorized as i,
-  normalizeRtsQueryOptions as n,
-  resolveRtsRequestTenantId as r
-};
-//# sourceMappingURL=queryExecutor-BZ0GSPM1.js.map

package/dist/queryExecutor-BZ0GSPM1.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"queryExecutor-BZ0GSPM1.js","sources":["../src/rts/queryExecutor.ts"],"sourcesContent":["import type { Request } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getAccessibleByQuery, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n  signedInTenants?: unknown\n}\n\nexport type RtsQueryOptions = {\n  projection?: JsonObject\n  sort?: Record<string, 1 | -1>\n  limit?: number\n}\n\nexport const RTS_TENANT_ID_QUERY_PARAM = \"rb-tenant-id\"\nexport const RTS_USER_ID_HEADER = \"rb-user-id\"\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst normalizeTenantId = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst normalizeSignedInTenants = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((tenantId) => normalizeTenantId(String(tenantId)))\n    .filter((tenantId): tenantId is string => Boolean(tenantId))\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n  const rawQuery = req.query?.[RTS_TENANT_ID_QUERY_PARAM]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const normalizedFromQuery = normalizeTenantId(queryTenantId)\n  if (normalizedFromQuery) return normalizedFromQuery\n\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n  return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (sessionUserId) return sessionUserId\n\n  const headerValue = req.headers[RTS_USER_ID_HEADER]\n  const headerUserId = Array.isArray(headerValue) ? headerValue[0] : headerValue\n  return normalizeTenantId(headerUserId)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n  const sessionUser = req.session?.user as SessionUser | undefined\n  if (!sessionUser) return false\n\n  const signedInTenants = normalizeSignedInTenants(sessionUser.signedInTenants)\n  if (signedInTenants.length > 0) {\n    return signedInTenants.includes(tenantId)\n  }\n\n  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n  if (!currentTenantId) return false\n  return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n  req: Request,\n  tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (sessionUserId) {\n    const ability = buildAbilityFromSession({ tenantId, session: req.session })\n    return { ability, userId: sessionUserId }\n  }\n\n  const headerValue = req.headers[RTS_USER_ID_HEADER]\n  const headerUserIdRaw = Array.isArray(headerValue) ? headerValue[0] : headerValue\n  const headerUserId = normalizeTenantId(headerUserIdRaw)\n  if (!headerUserId) {\n    const ability = buildAbilityFromSession({ tenantId, session: req.session })\n    return { ability, userId: null }\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as unknown as {\n    tenants?: unknown\n    tenantRoles?: unknown\n  } | null\n\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((tenant) => String(tenant)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  return {\n    ability: buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] }),\n    userId: headerUserId,\n  }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n  if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n  if (!options || typeof options !== \"object\") return {}\n  const normalized: RtsQueryOptions = {}\n\n  if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n    normalized.projection = options.projection\n  }\n\n  if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n    normalized.sort = options.sort\n  }\n\n  normalized.limit = normalizeLimit(options.limit)\n\n  return normalized\n}\n\nexport const runRtsQuery = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<unknown[]> => {\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n    throw new Error(\"Model not allowed\")\n  }\n\n  if (!ability.can(\"read\", modelName as AclSubjectType)) {\n    throw new Error(\"forbidden\")\n  }\n\n  const model = await getTenantModel(tenantId, modelName)\n  const projection = options.projection ?? undefined\n  const sort = options.sort\n  const limit = normalizeLimit(options.limit)\n\n  const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n  const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n  const queryPromise = model.find(finalQuery, projection)\n  if (sort && Object.keys(sort).length) {\n    queryPromise.sort(sort)\n  }\n  queryPromise.limit(limit)\n\n  const data = await queryPromise\n  return Array.isArray(data) ? data : []\n}\n"],"names":[],"mappings":";;AAoBO,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAElC,MAAM,kBAAkB;AACxB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,oBAAoB,CAAC,UAAkC;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEA,MAAM,2BAA2B,CAAC,UAA6B;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,SAAO,MACJ,IAAI,CAAC,aAAa,kBAAkB,OAAO,QAAQ,CAAC,CAAC,EACrD,OAAO,CAAC,aAAiC,QAAQ,QAAQ,CAAC;AAC/D;AAEA,MAAM,yBAAyB,CAAC,QAAgC;AAC9D,QAAM,WAAW,IAAI,QAAQ,yBAAyB;AACtD,QAAM,gBAAgB,MAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC,IAAI;AAC9D,QAAM,sBAAsB,kBAAkB,aAAa;AAC3D,MAAI,oBAAqB,QAAO;AAEhC,SAAO,kBAAmB,IAAI,SAAS,MAAkC,eAAe;AAC1F;AAEO,MAAM,4BAA4B,CAAC,QAAgC;AACxE,SAAO,uBAAuB,GAAG;AACnC;AAWO,MAAM,yBAAyB,CAAC,KAAc,aAA8B;AACjF,QAAM,cAAc,IAAI,SAAS;AACjC,MAAI,CAAC,YAAa,QAAO;AAEzB,QAAM,kBAAkB,yBAAyB,YAAY,eAAe;AAC5E,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,gBAAgB,SAAS,QAAQ;AAAA,EAC1C;AAEA,QAAM,kBAAkB,kBAAkB,YAAY,eAAe;AACrE,MAAI,CAAC,gBAAiB,QAAO;AAC7B,SAAO,oBAAoB;AAC7B;AAEO,MAAM,6BAA6B,OACxC,KACA,aAC4D;AAC5D,QAAM,gBAAgB,kBAAmB,IAAI,SAAS,MAAkC,EAAE;AAC1F,MAAI,eAAe;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,cAAA;AAAA,EAC5B;AAEA,QAAM,cAAc,IAAI,QAAQ,kBAAkB;AAClD,QAAM,kBAAkB,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI;AACtE,QAAM,eAAe,kBAAkB,eAAe;AACtD,MAAI,CAAC,cAAc;AACjB,UAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,SAAS;AAC1E,WAAO,EAAE,SAAS,QAAQ,KAAA;AAAA,EAC5B;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAK/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC,IAAI,CAAA;AACzF,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,SAAO;AAAA,IACL,SAAS,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAAA,IACjG,QAAQ;AAAA,EAAA;AAEZ;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,iBAAiB,CAAC,UAA2B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,KAAK,CAAC;AAClD;AAEO,MAAM,2BAA2B,CAAC,YAA0D;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,iBAAiB,CAAA;AACpD,QAAM,aAA8B,CAAA;AAEpC,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,YAAY,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG;AACtG,eAAW,aAAa,QAAQ;AAAA,EAClC;AAEA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACpF,eAAW,OAAO,QAAQ;AAAA,EAC5B;AAEA,aAAW,QAAQ,eAAe,QAAQ,KAAK;AAE/C,SAAO;AACT;AAEO,MAAM,cAAc,OAAO;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB,MAO0B;AACxB,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,SAAS,GAAG;AAC/D,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAAC,QAAQ,IAAI,QAAQ,SAA2B,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AACtD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,eAAe,QAAQ,KAAK;AAE1C,QAAM,cAAc,qBAAqB,SAAS,QAAQ,SAA2C;AACrG,QAAM,aAAyB,EAAE,MAAM,CAAC,OAAO,WAAW,EAAA;AAE1D,QAAM,eAAe,MAAM,KAAK,YAAY,UAAU;AACtD,MAAI,QAAQ,OAAO,KAAK,IAAI,EAAE,QAAQ;AACpC,iBAAa,KAAK,IAAI;AAAA,EACxB;AACA,eAAa,MAAM,KAAK;AAExB,QAAM,OAAO,MAAM;AACnB,SAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AACtC;"}