@rpcbase/server 0.513.0 → 0.514.0

package/dist/rts/index.js

@@ -2,9 +2,9 @@ import { randomUUID } from "node:crypto";
 import { models } from "@rpcbase/db";
 import { buildAbilityFromSession, getTenantRolesFromSessionUser, buildAbility } from "@rpcbase/db/acl";
 import { WebSocketServer } from "ws";
-import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, d as resolveRtsQueryDependencyModelNames, a as runRtsQuery } from "../queryExecutor-DSCpsVI8.js";
+import { R as RTS_TENANT_ID_QUERY_PARAM, c as RTS_USER_ID_HEADER, n as normalizeRtsQueryOptions, d as resolveRtsQueryDependencyModelNames, a as runRtsQuery } from "../queryExecutor-Dn62mIDL.js";
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BNrqh1Kb.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BsauvgjA.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
   return acc;
@@ -58,7 +58,11 @@ class RtsSocket {
     if (!set.size) this.handlers.delete(event);
   }
   emit(event, payload) {
-    sendWs(this.ws, { type: "event", event, payload });
+    sendWs(this.ws, {
+      type: "event",
+      event,
+      payload
+    });
   }
   close() {
     try {
@@ -178,25 +182,47 @@ const parseUpgradeMeta = async ({
     } else {
       throw new Error("Tenant not authorized for this session");
     }
-    const ability2 = buildAbilityFromSession({ tenantId, session: upgradeReq.session });
-    return { tenantId, userId: sessionUserId, ability: ability2 };
+    const ability2 = buildAbilityFromSession({
+      tenantId,
+      session: upgradeReq.session
+    });
+    return {
+      tenantId,
+      userId: sessionUserId,
+      ability: ability2
+    };
   }
   const raw = req.headers[RTS_USER_ID_HEADER];
   const headerUserId = Array.isArray(raw) ? raw[0] : raw;
   if (!headerUserId) {
     throw new Error("Missing rb-user-id header (reverse-proxy) and no session middleware configured");
   }
-  const rbCtx = { req: { session: null } };
+  const rbCtx = {
+    req: {
+      session: null
+    }
+  };
   const User = await models.getGlobal("RBUser", rbCtx);
-  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean();
+  const user = await User.findById(headerUserId, {
+    tenants: 1,
+    tenantRoles: 1
+  }).lean();
   const tenantsRaw = user?.tenants;
   const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : [];
   if (!tenants.includes(tenantId)) {
     throw new Error("Tenant not authorized for this session");
   }
   const roles = getTenantRolesFromSessionUser(user, tenantId);
-  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : ["owner"] });
-  return { tenantId, userId: headerUserId, ability };
+  const ability = buildAbility({
+    tenantId,
+    userId: headerUserId,
+    roles: roles.length ? roles : ["owner"]
+  });
+  return {
+    tenantId,
+    userId: headerUserId,
+    ability
+  };
 };
 const getTenantModel = async (tenantId, modelName) => {
   const ctx = {
@@ -249,7 +275,9 @@ const runAndSendQuery = async ({
     modelName,
     queryKey,
     data: result.data,
-    ...result.pageInfo ? { pageInfo: result.pageInfo } : {}
+    ...result.pageInfo ? {
+      pageInfo: result.pageInfo
+    } : {}
   };
   for (const socketId of targetSocketIds) {
     const ws = sockets.get(socketId);
@@ -300,7 +328,12 @@ const dispatchSubscriptionsForModel = async (tenantId, modelName) => {
           });
         } catch (err) {
           const error = redactErrorMessage(err);
-          const payload = { type: "query-payload", modelName: ownerModelName, queryKey, error };
+          const payload = {
+            type: "query-payload",
+            modelName: ownerModelName,
+            queryKey,
+            error
+          };
           for (const socketId2 of targetSocketIds) {
             const ws = sockets.get(socketId2);
             if (!ws) continue;
@@ -465,7 +498,12 @@ const handleClientMessage = async ({
   }
   if (!message.modelName || typeof message.modelName !== "string") return;
   if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {
-    sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey ?? "", error: "Model not allowed" });
+    sendWs(ws, {
+      type: "query-payload",
+      modelName: message.modelName,
+      queryKey: message.queryKey ?? "",
+      error: "Model not allowed"
+    });
     return;
   }
   if (!message.queryKey || typeof message.queryKey !== "string") return;
@@ -484,7 +522,12 @@ const handleClientMessage = async ({
   const options = normalizeRtsQueryOptions(message.options);
   const ability = meta.ability;
   if (!ability.can("read", message.modelName)) {
-    sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error: "forbidden" });
+    sendWs(ws, {
+      type: "query-payload",
+      modelName: message.modelName,
+      queryKey: message.queryKey,
+      error: "forbidden"
+    });
     return;
   }
   if (message.type === "register-query") {
@@ -496,7 +539,12 @@ const handleClientMessage = async ({
         for (const set of byModel.values()) count += set.size;
       }
       if (count >= maxSubscriptionsPerSocket) {
-        sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error: "Too many subscriptions" });
+        sendWs(ws, {
+          type: "query-payload",
+          modelName: message.modelName,
+          queryKey: message.queryKey,
+          error: "Too many subscriptions"
+        });
         return;
       }
     }
@@ -512,7 +560,12 @@ const handleClientMessage = async ({
         });
       } catch (err) {
         const error = redactErrorMessage(err);
-        sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
+        sendWs(ws, {
+          type: "query-payload",
+          modelName: message.modelName,
+          queryKey: message.queryKey,
+          error
+        });
         return;
       }
     }
@@ -533,7 +586,12 @@ const handleClientMessage = async ({
       }
     } catch (err) {
       const error = redactErrorMessage(err);
-      sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
+      sendWs(ws, {
+        type: "query-payload",
+        modelName: message.modelName,
+        queryKey: message.queryKey,
+        error
+      });
       return;
     }
     if (message.runInitialQuery === false) {
@@ -552,7 +610,12 @@ const handleClientMessage = async ({
     });
   } catch (err) {
     const error = redactErrorMessage(err);
-    sendWs(ws, { type: "query-payload", modelName: message.modelName, queryKey: message.queryKey, error });
+    sendWs(ws, {
+      type: "query-payload",
+      modelName: message.modelName,
+      queryKey: message.queryKey,
+      error
+    });
   }
 };
 const initRts = ({
@@ -576,7 +639,10 @@ const initRts = ({
     dispatchDebounceMs = Math.floor(dispatchDebounceMsArg);
   }
   allowInternalModels = Boolean(allowInternalModelsArg);
-  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes });
+  const wss = new WebSocketServer({
+    noServer: true,
+    maxPayload: maxPayloadBytes
+  });
   server.on("upgrade", (req, socket, head) => {
     ensureSocketErrorHandler(socket, () => ({
       upgradeHost: req.headers.host ?? "",
@@ -594,7 +660,11 @@ const initRts = ({
     if (url.pathname !== path) return;
     void (async () => {
       try {
-        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware });
+        const meta = await parseUpgradeMeta({
+          req,
+          url,
+          sessionMiddleware
+        });
         upgradeMeta.set(req, meta);
         wss.handleUpgrade(req, socket, head, (ws) => {
           wss.emit("connection", ws, req);
@@ -625,7 +695,11 @@ const initRts = ({
     const socketId = randomUUID();
     sockets.set(socketId, ws);
     socketMeta.set(socketId, meta);
-    const wrapper = new RtsSocket({ id: socketId, ws, meta });
+    const wrapper = new RtsSocket({
+      id: socketId,
+      ws,
+      meta
+    });
     socketWrappers.set(socketId, wrapper);
     const cleanupFns = [];
     for (const handler of customHandlers) {
@@ -646,7 +720,11 @@ const initRts = ({
       if (!parsed || typeof parsed !== "object") return;
       const message = parsed;
       if (message.type !== "event" && message.type !== "run-query" && message.type !== "register-query" && message.type !== "remove-query") return;
-      void handleClientMessage({ socketId, meta, message });
+      void handleClientMessage({
+        socketId,
+        meta,
+        message
+      });
     });
     ws.on("close", () => {
       cleanupSocket(socketId);

package/dist/rts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    let dependencyModelNames: string[] = []\n    if (options.populate !== undefined) {\n      try {\n        dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n          tenantId: meta.tenantId,\n          ability,\n          modelName: message.modelName,\n          options,\n          allowInternalModels,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n      dependencyModelNames,\n    })\n\n    try {\n      const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n      for (const modelName of modelNamesToWatch) {\n        await ensureChangeStream(meta.tenantId, modelName)\n      }\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["TENANT_ID_QUERY_PARAM","ability","USER_ID_HEADER","socketId"],"mappings":";;;;;AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,4BAAA,MAAA,OAAA,wBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,0BAA0B,CAAC,IAAI;AAC1D,SAAO;AACT,GAAG,CAAA,CAAE;AC4EL,MAAM,oBAAoB;AAE1B,MAAM,uBAAuB,oBAAI,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAM,4BAA4B,OAAO;AACzC,MAAM,uCAAuC;AAC7C,MAAM,+BAA+B;AAErC,MAAM,yCAAyB,QAAA;AAC/B,MAAM,iBAA8B,CAAA;AAEpC,MAAM,8BAAc,IAAA;AACpB,MAAM,iCAAiB,IAAA;AACvB,MAAM,qCAAqB,IAAA;AAC3B,MAAM,oCAAoB,IAAA;AAE1B,MAAM,0CAA0B,IAAA;AAChC,MAAM,oCAAoB,IAAA;AAC1B,MAAM,oCAAoB,IAAA;AAC1B,MAAM,qCAAqB,IAAA;AAC3B,MAAM,kCAAkB,QAAA;AAExB,IAAI,kBAAkB;AACtB,IAAI,4BAA4B;AAChC,IAAI,qBAAqB;AACzB,IAAI,sBAAsB;AAE1B,MAAM,UAAU;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEC;AAAA,EACA,+BAAe,IAAA;AAAA,EAEzB,YAAY;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EAAA,GAKC;AACD,SAAK,KAAK;AACV,SAAK,KAAK;AACV,SAAK,WAAW,KAAK;AACrB,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAEO,GAAG,OAAe,SAAiD;AACxE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK,yBAAS,IAAA;AAC5C,QAAI,IAAI,OAAO;AACf,SAAK,SAAS,IAAI,OAAO,GAAG;AAC5B,WAAO,MAAM,KAAK,IAAI,OAAO,OAAO;AAAA,EACtC;AAAA,EAEO,IAAI,OAAe,SAA2C;AACnE,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,OAAO;AAClB,QAAI,CAAC,IAAI,KAAM,MAAK,SAAS,OAAO,KAAK;AAAA,EAC3C;AAAA,EAEO,KAAK,OAAe,SAAyB;AAClD,WAAO,KAAK,IAAI,EAAE,MAAM,SAAS,OAAO,SAAS;AAAA,EACnD;AAAA,EAEO,QAAc;AACnB,QAAI;AACF,WAAK,GAAG,MAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEO,SAAS,OAAe,SAAwB;AACrD,UAAM,MAAM,KAAK,SAAS,IAAI,KAAK;AACnC,QAAI,CAAC,IAAK;AACV,eAAW,WAAW,KAAK;AACzB,cAAQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,QAAyB;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAA;AACxD,MAAI,MAAM,QAAQ,GAAG,UAAU,OAAO,OAAO,GAAG,EAAE,SAAA;AAClD,SAAO,IAAI,SAAA;AACb;AAEA,MAAM,gBAAgB,CAAC,QAA0B,KAAK,MAAM,UAAU,GAAG,CAAC;AAE1E,MAAM,SAAS,CAAC,IAAe,YAAiC;AAC9D,MAAI,GAAG,eAAe,EAAG;AACzB,KAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AACjC;AAEA,MAAM,2BAA2B,CAAC,QAAgB,YAAkD;AAClG,MAAI,OAAO,cAAc,OAAO,IAAI,EAAG;AAEvC,SAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,eAAe,QAAQ,IAAI,OAAO,OAAO;AACtD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,UAAM,OAAO,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAY,OAAO;AAEnF,QAAI,SAAS,gBAAiB,QAAQ,QAAQ,QAAQ,SAAS,YAAY,EAAI;AAE/E,YAAQ,KAAK,yBAAyB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,OAAO;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,MAClB,GAAG,UAAA;AAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAM,qBAAqB,CAAC,QAAyB;AACnD,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU;AACjD,QAAM,mBAAmB,IAAI,QAAQ,kCAAkC,EAAE;AACzE,QAAM,SAAS;AACf,MAAI,iBAAiB,UAAU,OAAQ,QAAO;AAC9C,SAAO,iBAAiB,MAAM,GAAG,MAAM;AACzC;AAEA,MAAM,eAAe,CAAC,QAAgB,UAAU,mBAAyB;AACvE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,mCAAmC;AAChD,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,aAAa,CAAC,QAAgB,UAAU,kBAAwB;AACpE,2BAAyB,MAAM;AAC/B,MAAI;AACF,WAAO,MAAM,kCAAkC;AAC/C,WAAO,MAAM,UAAU,OAAO;AAAA,CAAM;AACpC,WAAO,IAAA;AAAA,EACT,QAAQ;AACN,WAAO,QAAA;AAAA,EACT;AACF;AAEA,MAAM,uBAAuB,OAAO,mBAAmC,QAAuC;AAK5G,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,OAAuB,CAAC,QAAQ;AACpC,UAAI,YAAY,GAAG;AAAA,UACd,SAAA;AAAA,IACP;AAEA,sBAAkB,KAAiC,CAAA,GAAgC,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAM,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,MAI2B;AACzB,QAAM,WAAW,IAAI,aAAa,IAAIA,yBAAqB;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,mBAAmB;AACrB,UAAM,aAAa;AACnB,QAAI;AACF,YAAM,qBAAqB,mBAAmB,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,WAAW,SAAS;AACxC,UAAM,gBAAgB,aAAa;AACnC,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,kBAAkB,aAAa;AACrC,UAAM,kBAAkB,aAAa;AAErC,QAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,GAAG;AAChE,UAAI,CAAC,gBAAgB,SAAS,QAAQ,GAAG;AACvC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAW,iBAAiB;AAC1B,UAAI,oBAAoB,UAAU;AAChC,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMC,WAAU,wBAAwB,EAAE,UAAU,SAAS,WAAW,SAAS;AACjF,WAAO,EAAE,UAAU,QAAQ,eAAe,SAAAA,SAAAA;AAAAA,EAC5C;AAEA,QAAM,MAAM,IAAI,QAAQC,kBAAc;AACtC,QAAM,eAAe,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACnD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM,QAAsB,EAAE,KAAK,EAAE,SAAS,OAAK;AACnD,QAAM,OAAO,MAAM,OAAO,UAAU,UAAU,KAAK;AACnD,QAAM,OAAO,MAAM,KAAK,SAAS,cAAc,EAAE,SAAS,GAAG,aAAa,EAAA,CAAG,EAAE,KAAA;AAC/E,QAAM,aAAa,MAAM;AACzB,QAAM,UAAU,MAAM,QAAQ,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAM,QAAQ,8BAA8B,MAAM,QAAQ;AAC1D,QAAM,UAAU,aAAa,EAAE,UAAU,QAAQ,cAAc,OAAO,MAAM,SAAS,QAAQ,CAAC,OAAO,GAAG;AAExG,SAAO,EAAE,UAAU,QAAQ,cAAc,QAAA;AAC3C;AAEA,MAAM,iBAAiB,OAAO,UAAkB,cAA2C;AACzF,QAAM,MAAoB;AAAA,IACxB,KAAK;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,iBAAiB;AAAA,QAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO,OAAO,IAAI,WAAW,GAAG;AAClC;AAEA,MAAM,kBAAkB,CAAC,UAAkB,cAA8B,GAAG,QAAQ,IAAI,SAAS;AAEjG,MAAM,qBAAqB,CAAC,UAAkB,cAA4B;AACxE,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,QAAM,QAAQ,eAAe,IAAI,GAAG;AACpC,MAAI,CAAC,MAAO;AACZ,eAAa,KAAK;AAClB,iBAAe,OAAO,GAAG;AAC3B;AAEA,MAAM,wCAAwC,CAAC,UAAkB,cAA4B;AAC3F,QAAM,MAAM,gBAAgB,UAAU,SAAS;AAC/C,MAAI,eAAe,IAAI,GAAG,EAAG;AAE7B,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,kBAAkB,CAAC,CAAC;AACxE,iBAAe,IAAI,KAAK,WAAW,MAAM;AACvC,mBAAe,OAAO,GAAG;AACzB,SAAK,8BAA8B,UAAU,SAAS;AAAA,EACxD,GAAG,KAAK,CAAC;AACX;AAEA,MAAM,kBAAkB,OAAO;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQqB;AACnB,QAAM,SAAS,MAAM,YAAY;AAAA,IAC/B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,QAAM,UAAyB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAA,IAAa,CAAA;AAAA,EAAC;AAGzD,aAAW,YAAY,iBAAiB;AACtC,UAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,QAAI,CAAC,GAAI;AACT,WAAO,IAAI,OAAO;AAAA,EACpB;AACF;AAEA,MAAM,6BAA6B,CACjC,kBACA,gBACA,iBACY;AACZ,MAAI,mBAAmB,iBAAkB,QAAO;AAChD,SAAO,aAAa,qBAAqB,SAAS,gBAAgB;AACpE;AAEA,MAAM,sCAAsC,CAC1C,UACA,cACY;AACZ,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,WAAY,QAAO;AAExB,aAAW,YAAY,WAAW,UAAU;AAC1C,eAAW,CAAC,gBAAgB,SAAS,KAAK,SAAS,WAAW;AAC5D,iBAAW,gBAAgB,UAAU,UAAU;AAC7C,YAAI,2BAA2B,WAAW,gBAAgB,YAAY,GAAG;AACvE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,MAAM,gCAAgC,OAAO,UAAkB,cAAqC;AAClG,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,MAAI,CAAC,cAAc,CAAC,WAAW,KAAM;AAErC,aAAW,YAAY,WAAW,UAAU;AAC1C,eAAW,CAAC,gBAAgB,SAAS,KAAK,SAAS,WAAW;AAC5D,iBAAW,CAAC,UAAU,GAAG,KAAK,UAAU,WAAW;AACjD,YAAI,CAAC,2BAA2B,WAAW,gBAAgB,GAAG,EAAG;AAEjE,cAAM,kBAAkB,MAAM,KAAK,IAAI,SAAS;AAChD,YAAI,CAAC,gBAAgB,OAAQ;AAE7B,cAAM,WAAW,gBAAgB,CAAC;AAClC,cAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,cAAM,UAAU,MAAM;AACtB,YAAI,CAAC,QAAS;AAEd,YAAI;AACF,gBAAM,gBAAgB;AAAA,YACpB;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,OAAO,IAAI;AAAA,YACX,SAAS,IAAI;AAAA,UAAA,CACd;AAAA,QACH,SAAS,KAAK;AACZ,gBAAM,QAAQ,mBAAmB,GAAG;AACpC,gBAAM,UAAyB,EAAE,MAAM,iBAAiB,WAAW,gBAAgB,UAAU,MAAA;AAC7F,qBAAWC,aAAY,iBAAiB;AACtC,kBAAM,KAAK,QAAQ,IAAIA,SAAQ;AAC/B,gBAAI,CAAC,GAAI;AACT,mBAAO,IAAI,OAAO;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,OAAO,UAAkB,cAAqC;AACvF,QAAM,gBAAgB,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACzD,gBAAc,IAAI,UAAU,aAAa;AACzC,MAAI,cAAc,IAAI,SAAS,EAAG;AAElC,QAAM,QAAQ,MAAM,eAAe,UAAU,SAAS;AAEtD,QAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC7B,cAAc;AAAA,EAAA,CACf;AAED,SAAO,GAAG,UAAU,MAAM;AACxB,0CAAsC,UAAU,SAAS;AAAA,EAC3D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,uBAAmB,UAAU,SAAS;AACtC,UAAM,MAAM,cAAc,IAAI,QAAQ;AACtC,SAAK,OAAO,SAAS;AACrB,QAAI,OAAO,IAAI,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,EAC1D,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,yBAAmB,UAAU,SAAS;AACtC,aAAO,MAAA;AAAA,IACT,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,gBAAc,IAAI,WAAW,MAAM;AACrC;AAEA,MAAM,wBAAwB,CAAC;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MASY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ,yBAAS,IAAA;AACtD,gBAAc,IAAI,UAAU,UAAU;AAEtC,QAAM,WAAW,WAAW,IAAI,MAAM,yBAAS,IAAA;AAC/C,aAAW,IAAI,QAAQ,QAAQ;AAE/B,QAAM,YAAY,SAAS,IAAI,SAAS,yBAAS,IAAA;AACjD,WAAS,IAAI,WAAW,SAAS;AAEjC,QAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,MAAI,UAAU;AACZ,aAAS,UAAU,IAAI,QAAQ;AAC/B,aAAS,uBAAuB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,SAAS,sBAAsB,GAAG,oBAAoB,CAAC,CAAC;AAAA,EACjH,OAAO;AACL,cAAU,IAAI,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,sBAAsB,MAAM,KAAK,IAAI,IAAI,oBAAoB,CAAC;AAAA,MAC9D,WAAW,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ,yBAAS,IAAA;AACzD,sBAAoB,IAAI,UAAU,OAAO;AAEzC,QAAM,WAAW,QAAQ,IAAI,SAAS,yBAAS,IAAA;AAC/C,UAAQ,IAAI,WAAW,QAAQ;AAC/B,WAAS,IAAI,QAAQ;AACvB;AAEA,MAAM,2BAA2B,CAAC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMY;AACV,QAAM,aAAa,cAAc,IAAI,QAAQ;AAC7C,QAAM,WAAW,YAAY,IAAI,MAAM;AACvC,QAAM,YAAY,UAAU,IAAI,SAAS;AACzC,QAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,QAAM,qBAAqB,oBAAI,IAAY,CAAC,WAAW,GAAI,KAAK,wBAAwB,CAAA,CAAG,CAAC;AAC5F,MAAI,KAAK;AACP,QAAI,UAAU,OAAO,QAAQ;AAC7B,QAAI,CAAC,IAAI,UAAU,MAAM;AACvB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAM,MAAM,SAAS,IAAI,SAAS;AAClC,MAAI,KAAK;AACP,QAAI,OAAO,QAAQ;AACnB,QAAI,CAAC,IAAI,MAAM;AACb,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,aAAa,UAAU,SAAS,GAAG;AACrC,cAAU,OAAO,SAAS;AAAA,EAC5B;AAEA,MAAI,YAAY,SAAS,SAAS,GAAG;AACnC,gBAAY,OAAO,MAAM;AAAA,EAC3B;AAEA,aAAW,qBAAqB,oBAAoB;AAClD,QAAI,oCAAoC,UAAU,iBAAiB,EAAG;AAEtE,UAAM,gBAAgB,cAAc,IAAI,QAAQ;AAChD,UAAM,SAAS,eAAe,IAAI,iBAAiB;AACnD,QAAI,QAAQ;AACV,UAAI;AACF,eAAO,MAAA;AAAA,MACT,QAAQ;AAAA,MAER;AACA,yBAAmB,UAAU,iBAAiB;AAC9C,qBAAe,OAAO,iBAAiB;AACvC,UAAI,iBAAiB,cAAc,SAAS,EAAG,eAAc,OAAO,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,SAAS,EAAG,eAAc,OAAO,QAAQ;AACtE,MAAI,WAAW,QAAQ,SAAS,EAAG,qBAAoB,OAAO,QAAQ;AACxE;AAEA,MAAM,gBAAgB,CAAC,aAA2B;AAChD,QAAM,OAAO,WAAW,IAAI,QAAQ;AACpC,MAAI,MAAM;AACR,UAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,QAAI,SAAS;AACX,iBAAW,CAAC,WAAW,IAAI,KAAK,QAAQ,WAAW;AACjD,mBAAW,YAAY,KAAK,UAAU;AACpC,mCAAyB;AAAA,YACvB;AAAA,YACA,UAAU,KAAK;AAAA,YACf,QAAQ,KAAK;AAAA,YACb;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,sBAAoB,OAAO,QAAQ;AAEnC,QAAM,aAAa,cAAc,IAAI,QAAQ,KAAK,CAAA;AAClD,gBAAc,OAAO,QAAQ;AAC7B,aAAW,MAAM,YAAY;AAC3B,QAAI;AACF,SAAA;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,OAAO,QAAQ;AACvB,aAAW,OAAO,QAAQ;AAC1B,iBAAe,OAAO,QAAQ;AAChC;AAEA,MAAM,sBAAsB,OAAO;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF,MAIqB;AACnB,QAAM,KAAK,QAAQ,IAAI,QAAQ;AAC/B,MAAI,CAAC,GAAI;AAET,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,UAAU,eAAe,IAAI,QAAQ;AAC3C,aAAS,SAAS,QAAQ,OAAO,QAAQ,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,SAAU;AACjE,MAAI,CAAC,uBAAuB,qBAAqB,IAAI,QAAQ,SAAS,GAAG;AACvE,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,YAAY,IAAI,OAAO,qBAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,OAAO,QAAQ,aAAa,SAAU;AAC/D,MAAI,QAAQ,SAAS,SAAS,kBAAmB;AAEjD,MAAI,QAAQ,SAAS,gBAAgB;AACnC,6BAAyB;AAAA,MACvB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,SAAU;AAEzD,QAAM,UAAU,yBAAyB,QAAQ,OAAO;AACxD,QAAM,UAAU,KAAK;AAErB,MAAI,CAAC,QAAQ,IAAI,QAAQ,QAAQ,SAA2B,GAAG;AAC7D,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,YAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,UAAM,WAAW,oBAAoB,IAAI,QAAQ,GAAG,IAAI,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACrG,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ;AACZ,YAAM,UAAU,oBAAoB,IAAI,QAAQ;AAChD,UAAI,SAAS;AACX,mBAAW,OAAO,QAAQ,OAAA,YAAmB,IAAI;AAAA,MACnD;AAEA,UAAI,SAAS,2BAA2B;AACtC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,OAAO,yBAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,QAAI,uBAAiC,CAAA;AACrC,QAAI,QAAQ,aAAa,QAAW;AAClC,UAAI;AACF,+BAAuB,MAAM,oCAAoC;AAAA,UAC/D,UAAU,KAAK;AAAA,UACf;AAAA,UACA,WAAW,QAAQ;AAAA,UACnB;AAAA,UACA;AAAA,QAAA,CACD;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,QAAQ,mBAAmB,GAAG;AACpC,eAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,MACF;AAAA,IACF;AAEA,0BAAsB;AAAA,MACpB;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,MACA;AAAA,IAAA,CACD;AAED,QAAI;AACF,YAAM,wCAAwB,IAAY,CAAC,QAAQ,WAAW,GAAG,oBAAoB,CAAC;AACtF,iBAAW,aAAa,mBAAmB;AACzC,cAAM,mBAAmB,KAAK,UAAU,SAAS;AAAA,MACnD;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,QAAQ,mBAAmB,GAAG;AACpC,aAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI,QAAQ,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,iBAAiB,CAAC,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,IAAA,CACD;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,IAAI,EAAE,MAAM,iBAAiB,WAAW,QAAQ,WAAW,UAAU,QAAQ,UAAU,MAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM,UAAU,CAAC;AAAA,EACtB;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,qBAAqB;AACvB,MAQY;AACV,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAE7B,MAAI,OAAO,uBAAuB,YAAY,OAAO,SAAS,kBAAkB,KAAK,qBAAqB,GAAG;AAC3G,sBAAkB,KAAK,MAAM,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAO,iCAAiC,YACrC,OAAO,SAAS,4BAA4B,KAC5C,+BAA+B,GAClC;AACA,gCAA4B,KAAK,MAAM,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAO,0BAA0B,YAAY,OAAO,SAAS,qBAAqB,KAAK,yBAAyB,GAAG;AACrH,yBAAqB,KAAK,MAAM,qBAAqB;AAAA,EACvD;AAEA,wBAAsB,QAAQ,sBAAsB;AAEpD,QAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,YAAY,iBAAiB;AAE/E,SAAO,GAAG,WAAW,CAAC,KAAsB,QAAgB,SAAiB;AAC3E,6BAAyB,QAAQ,OAAO;AAAA,MACtC,aAAa,IAAI,QAAQ,QAAQ;AAAA,MACjC,YAAY,IAAI,OAAO;AAAA,MACvB,WAAW,OAAO,IAAI,QAAQ,YAAY,MAAM,WAAW,IAAI,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF,gBAAY,OAAO,GAAG;AAEtB,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACN,iBAAW,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAM,OAAO,MAAM,iBAAiB,EAAE,KAAK,KAAK,mBAAmB;AACnE,oBAAY,IAAI,KAAK,IAAI;AAEzB,YAAI,cAAc,KAAK,QAAQ,MAAM,CAAC,OAAkB;AACtD,cAAI,KAAK,cAAc,IAAI,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,YAAI,QAAQ,WAAW,sBAAsB,GAAG;AAC9C,qBAAW,QAAQ,OAAO;AAC1B;AAAA,QACF;AACA,qBAAa,QAAQ,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK,MAAM,MAAM;AACf,iBAAW,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAAyB;AAC5D,UAAM,OAAO,YAAY,IAAI,GAAG;AAChC,gBAAY,OAAO,GAAG;AACtB,QAAI,CAAC,MAAM;AACT,UAAI;AACF,WAAG,MAAA;AAAA,MACL,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AAEA,UAAM,WAAW,WAAA;AACjB,YAAQ,IAAI,UAAU,EAAE;AACxB,eAAW,IAAI,UAAU,IAAI;AAE7B,UAAM,UAAU,IAAI,UAAU,EAAE,IAAI,UAAU,IAAI,MAAM;AACxD,mBAAe,IAAI,UAAU,OAAO;AAEpC,UAAM,aAAgC,CAAA;AACtC,eAAW,WAAW,gBAAgB;AACpC,UAAI;AACF,cAAM,UAAU,QAAQ,OAAO;AAC/B,YAAI,OAAO,YAAY,WAAY,YAAW,KAAK,OAAO;AAAA,MAC5D,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,WAAW,OAAQ,eAAc,IAAI,UAAU,UAAU;AAE7D,OAAG,GAAG,WAAW,CAAC,QAAiB;AACjC,UAAI;AACJ,UAAI;AACF,iBAAS,cAAc,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,YAAM,UAAU;AAChB,UACE,QAAQ,SAAS,WACd,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB,QAAQ,SAAS,eACpB;AACF,WAAK,oBAAoB,EAAE,UAAU,MAAM,SAAmC;AAAA,IAChF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAM,qBAAqB,CAAC,YAA6B;AAC9D,iBAAe,KAAK,OAAO;AAC7B;AAEO,MAAM,wBAAwB,CAAC,UAAkB,cAA4B;AAClF,wCAAsC,UAAU,SAAS;AAC3D;"}
+{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    let dependencyModelNames: string[] = []\n    if (options.populate !== undefined) {\n      try {\n        dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n          tenantId: meta.tenantId,\n          ability,\n          modelName: message.modelName,\n          options,\n          allowInternalModels,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n      dependencyModelNames,\n    })\n\n    try {\n      const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n      for (const modelName of modelNamesToWatch) {\n        await ensureChangeStream(meta.tenantId, modelName)\n      }\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace","QUERY_KEY_MAX_LEN","INTERNAL_MODEL_NAMES","Set","DEFAULT_MAX_PAYLOAD_BYTES","DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET","DEFAULT_DISPATCH_DEBOUNCE_MS","initializedServers","WeakSet","customHandlers","sockets","Map","socketMeta","socketWrappers","socketCleanup","socketSubscriptions","subscriptions","changeStreams","dispatchTimers","upgradeMeta","WeakMap","maxPayloadBytes","maxSubscriptionsPerSocket","dispatchDebounceMs","allowInternalModels","RtsSocket","id","tenantId","userId","ws","handlers","constructor","meta","on","event","handler","set","get","add","off","delete","size","emit","payload","sendWs","type","close","dispatch","rawToText","raw","ArrayBuffer","Buffer","from","toString","Array","isArray","concat","safeJsonParse","JSON","parse","message","readyState","send","stringify","ensureSocketErrorHandler","socket","context","listenerCount","err","Error","String","name","stack","undefined","code","includes","console","warn","remoteAddress","remotePort","localAddress","localPort","redactErrorMessage","trimmedModelList","maxLen","length","slice","unauthorized","write","end","destroy","badRequest","runSessionMiddleware","sessionMiddleware","req","Promise","resolve","reject","next","parseUpgradeMeta","url","searchParams","TENANT_ID_QUERY_PARAM","upgradeReq","sessionUser","session","user","sessionUserId","signedInTenants","currentTenantId","ability","buildAbilityFromSession","headers","USER_ID_HEADER","headerUserId","rbCtx","User","models","getGlobal","findById","tenants","tenantRoles","lean","tenantsRaw","map","t","roles","getTenantRolesFromSessionUser","buildAbility","getTenantModel","modelName","ctx","makeDispatchKey","clearDispatchTimer","key","timer","clearTimeout","scheduleDispatchSubscriptionsForModel","has","delay","Math","max","min","floor","setTimeout","dispatchSubscriptionsForModel","runAndSendQuery","targetSocketIds","queryKey","query","options","result","runRtsQuery","data","pageInfo","socketId","subscriptionDependsOnModel","changedModelName","ownerModelName","subscription","dependencyModelNames","hasAnySubscriptionsDependingOnModel","tenantSubs","userSubs","values","modelSubs","sub","socketIds","error","ensureChangeStream","tenantStreams","model","stream","watch","fullDocument","addSocketSubscription","existing","byModel","querySet","removeSocketSubscription","affectedModelNames","affectedModelName","cleanupSocket","keys","cleanupFns","fn","handleClientMessage","wrapper","normalizeRtsQueryOptions","can","count","populate","resolveRtsQueryDependencyModelNames","modelNamesToWatch","runInitialQuery","initRts","server","maxPayloadBytesArg","maxSubscriptionsPerSocketArg","dispatchDebounceMsArg","allowInternalModelsArg","Number","isFinite","Boolean","wss","WebSocketServer","noServer","maxPayload","head","upgradeHost","host","upgradeUrl","userAgent","URL","pathname","handleUpgrade","startsWith","catch","randomUUID","cleanup","push","parsed","registerRtsHandler","notifyRtsModelChanged"],"mappings":";;;;;AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,4BAAAA,MAAAA,OAAAA,wBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,0BAA0B,CAAC,IAAID;AAC1D,SAAOF;AACT,GAAG,CAAA,CAAE;AC4EL,MAAMI,oBAAoB;AAE1B,MAAMC,uBAAuB,oBAAIC,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAMC,4BAA4B,OAAO;AACzC,MAAMC,uCAAuC;AAC7C,MAAMC,+BAA+B;AAErC,MAAMC,yCAAyBC,QAAAA;AAC/B,MAAMC,iBAA8B,CAAA;AAEpC,MAAMC,8BAAcC,IAAAA;AACpB,MAAMC,iCAAiBD,IAAAA;AACvB,MAAME,qCAAqBF,IAAAA;AAC3B,MAAMG,oCAAoBH,IAAAA;AAE1B,MAAMI,0CAA0BJ,IAAAA;AAChC,MAAMK,oCAAoBL,IAAAA;AAC1B,MAAMM,oCAAoBN,IAAAA;AAC1B,MAAMO,qCAAqBP,IAAAA;AAC3B,MAAMQ,kCAAkBC,QAAAA;AAExB,IAAIC,kBAAkBjB;AACtB,IAAIkB,4BAA4BjB;AAChC,IAAIkB,qBAAqBjB;AACzB,IAAIkB,sBAAsB;AAE1B,MAAMC,UAAU;AAAA,EACEC;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EAECC;AAAAA,EACAC,+BAAenB,IAAAA;AAAAA,EAEzBoB,YAAY;AAAA,IACjBL;AAAAA,IACAG;AAAAA,IACAG;AAAAA,EAAAA,GAKC;AACD,SAAKN,KAAKA;AACV,SAAKG,KAAKA;AACV,SAAKF,WAAWK,KAAKL;AACrB,SAAKC,SAASI,KAAKJ;AAAAA,EACrB;AAAA,EAEOK,GAAGC,OAAeC,SAAiD;AACxE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK,yBAAS/B,IAAAA;AAC5CiC,QAAIE,IAAIH,OAAO;AACf,SAAKL,SAASM,IAAIF,OAAOE,GAAG;AAC5B,WAAO,MAAM,KAAKG,IAAIL,OAAOC,OAAO;AAAA,EACtC;AAAA,EAEOI,IAAIL,OAAeC,SAA2C;AACnE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACVA,QAAII,OAAOL,OAAO;AAClB,QAAI,CAACC,IAAIK,KAAM,MAAKX,SAASU,OAAON,KAAK;AAAA,EAC3C;AAAA,EAEOQ,KAAKR,OAAeS,SAAyB;AAClDC,WAAO,KAAKf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAASX;AAAAA,MAAOS;AAAAA,IAAAA,CAAS;AAAA,EACnD;AAAA,EAEOG,QAAc;AACnB,QAAI;AACF,WAAKjB,GAAGiB,MAAAA;AAAAA,IACV,QAAQ;AAAA,IACN;AAAA,EAEJ;AAAA,EAEOC,SAASb,OAAeS,SAAwB;AACrD,UAAMP,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACV,eAAWD,WAAWC,KAAK;AACzBD,cAAQQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAMK,YAAYA,CAACC,QAAyB;AAC1C,MAAI,OAAOA,QAAQ,SAAU,QAAOA;AACpC,MAAIA,eAAeC,YAAa,QAAOC,OAAOC,KAAKH,GAAG,EAAEI,SAAAA;AACxD,MAAIC,MAAMC,QAAQN,GAAG,UAAUE,OAAOK,OAAOP,GAAG,EAAEI,SAAAA;AAClD,SAAOJ,IAAII,SAAAA;AACb;AAEA,MAAMI,gBAAgBA,CAACR,QAA0BS,KAAKC,MAAMX,UAAUC,GAAG,CAAC;AAE1E,MAAML,SAASA,CAACf,IAAe+B,YAAiC;AAC9D,MAAI/B,GAAGgC,eAAe,EAAG;AACzBhC,KAAGiC,KAAKJ,KAAKK,UAAUH,OAAO,CAAC;AACjC;AAEA,MAAMI,2BAA2BA,CAACC,QAAgBC,YAAkD;AAClG,MAAID,OAAOE,cAAc,OAAO,IAAI,EAAG;AAEvCF,SAAOhC,GAAG,SAAS,CAACmC,QAAiB;AACnC,UAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAUU,OAAOF,GAAG;AAC/D,UAAMG,OAAOH,eAAeC,QAAQD,IAAIG,OAAO,OAAOH;AACtD,UAAMI,QAAQJ,eAAeC,QAAQD,IAAII,QAAQC;AACjD,UAAMC,OAAON,OAAO,OAAOA,QAAQ,YAAY,UAAUA,MAAOA,IAAYM,OAAOD;AAEnF,QAAIC,SAAS,gBAAiBA,QAAQ,QAAQd,QAAQe,SAAS,YAAY,EAAI;AAE/EC,YAAQC,KAAK,yBAAyB;AAAA,MACpCN;AAAAA,MACAG;AAAAA,MACAd;AAAAA,MACAY;AAAAA,MACAM,eAAeb,OAAOa;AAAAA,MACtBC,YAAYd,OAAOc;AAAAA,MACnBC,cAAcf,OAAOe;AAAAA,MACrBC,WAAWhB,OAAOgB;AAAAA,MAClB,GAAGf,UAAAA;AAAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAMgB,qBAAqBA,CAACd,QAAyB;AACnD,QAAMnB,MAAMmB,eAAeC,QAAQD,IAAIR,UAAU;AACjD,QAAMuB,mBAAmBlC,IAAIjD,QAAQ,kCAAkC,EAAE;AACzE,QAAMoF,SAAS;AACf,MAAID,iBAAiBE,UAAUD,OAAQ,QAAOD;AAC9C,SAAOA,iBAAiBG,MAAM,GAAGF,MAAM;AACzC;AAEA,MAAMG,eAAeA,CAACtB,QAAgBL,UAAU,mBAAyB;AACvEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,mCAAmC;AAChDvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAMC,aAAaA,CAAC1B,QAAgBL,UAAU,kBAAwB;AACpEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,kCAAkC;AAC/CvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAME,uBAAuB,OAAOC,mBAAmCC,QAAuC;AAK5G,QAAM,IAAIC,QAAc,CAACC,SAASC,WAAW;AAC3C,UAAMC,OAAwB9B,CAAAA,QAAQ;AACpC,UAAIA,YAAYA,GAAG;AAAA,UACd4B,SAAAA;AAAAA,IACP;AAEAH,sBAAkBC,KAAiC,CAAA,GAAgCI,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAMC,mBAAmB,OAAO;AAAA,EAC9BL;AAAAA,EACAM;AAAAA,EACAP;AAKF,MAA2B;AACzB,QAAMlE,WAAWyE,IAAIC,aAAahE,IAAIiE,yBAAqB;AAC3D,MAAI,CAAC3E,UAAU;AACb,UAAM,IAAI0C,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAIwB,mBAAmB;AACrB,UAAMU,aAAaT;AACnB,QAAI;AACF,YAAMF,qBAAqBC,mBAAmBU,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAIlC,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAMmC,cAAcD,WAAWE,SAASC;AACxC,UAAMC,gBAAgBH,aAAa9E;AACnC,QAAI,CAACiF,eAAe;AAClB,YAAM,IAAItC,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAMuC,kBAAkBJ,aAAaI;AACrC,UAAMC,kBAAkBL,aAAaK;AAErC,QAAIvD,MAAMC,QAAQqD,eAAe,KAAKA,gBAAgBvB,SAAS,GAAG;AAChE,UAAI,CAACuB,gBAAgBjC,SAAShD,QAAQ,GAAG;AACvC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAWwC,iBAAiB;AAC1B,UAAIA,oBAAoBlF,UAAU;AAChC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAIA,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMyC,WAAUC,wBAAwB;AAAA,MAAEpF;AAAAA,MAAU8E,SAASF,WAAWE;AAAAA,IAAAA,CAAS;AACjF,WAAO;AAAA,MAAE9E;AAAAA,MAAUC,QAAQ+E;AAAAA,MAAeG,SAAAA;AAAAA,IAAAA;AAAAA,EAC5C;AAEA,QAAM7D,MAAM6C,IAAIkB,QAAQC,kBAAc;AACtC,QAAMC,eAAe5D,MAAMC,QAAQN,GAAG,IAAIA,IAAI,CAAC,IAAIA;AACnD,MAAI,CAACiE,cAAc;AACjB,UAAM,IAAI7C,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM8C,QAAsB;AAAA,IAAErB,KAAK;AAAA,MAAEW,SAAS;AAAA,IAAA;AAAA,EAAK;AACnD,QAAMW,OAAO,MAAMC,OAAOC,UAAU,UAAUH,KAAK;AACnD,QAAMT,OAAO,MAAMU,KAAKG,SAASL,cAAc;AAAA,IAAEM,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG,EAAEC,KAAAA;AAC/E,QAAMC,aAAajB,MAAMc;AACzB,QAAMA,UAAUlE,MAAMC,QAAQoE,UAAU,IAAIA,WAAWC,IAAKC,CAAAA,MAAMvD,OAAOuD,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAACL,QAAQ7C,SAAShD,QAAQ,GAAG;AAC/B,UAAM,IAAI0C,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAMyD,QAAQC,8BAA8BrB,MAAM/E,QAAQ;AAC1D,QAAMmF,UAAUkB,aAAa;AAAA,IAAErG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcY,OAAOA,MAAMzC,SAASyC,QAAQ,CAAC,OAAO;AAAA,EAAA,CAAG;AAExG,SAAO;AAAA,IAAEnG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcJ;AAAAA,EAAAA;AAC3C;AAEA,MAAMmB,iBAAiB,OAAOtG,UAAkBuG,cAA2C;AACzF,QAAMC,MAAoB;AAAA,IACxBrC,KAAK;AAAA,MACHW,SAAS;AAAA,QACPC,MAAM;AAAA,UACJG,iBAAiBlF;AAAAA,QAAAA;AAAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO0F,OAAOhF,IAAI6F,WAAWC,GAAG;AAClC;AAEA,MAAMC,kBAAkBA,CAACzG,UAAkBuG,cAA8B,GAAGvG,QAAQ,IAAIuG,SAAS;AAEjG,MAAMG,qBAAqBA,CAAC1G,UAAkBuG,cAA4B;AACxE,QAAMI,MAAMF,gBAAgBzG,UAAUuG,SAAS;AAC/C,QAAMK,QAAQrH,eAAemB,IAAIiG,GAAG;AACpC,MAAI,CAACC,MAAO;AACZC,eAAaD,KAAK;AAClBrH,iBAAesB,OAAO8F,GAAG;AAC3B;AAEA,MAAMG,wCAAwCA,CAAC9G,UAAkBuG,cAA4B;AAC3F,QAAMI,MAAMF,gBAAgBzG,UAAUuG,SAAS;AAC/C,MAAIhH,eAAewH,IAAIJ,GAAG,EAAG;AAE7B,QAAMK,QAAQC,KAAKC,IAAI,GAAGD,KAAKE,IAAI,KAAMF,KAAKG,MAAMxH,kBAAkB,CAAC,CAAC;AACxEL,iBAAekB,IAAIkG,KAAKU,WAAW,MAAM;AACvC9H,mBAAesB,OAAO8F,GAAG;AACzB,SAAKW,8BAA8BtH,UAAUuG,SAAS;AAAA,EACxD,GAAGS,KAAK,CAAC;AACX;AAEA,MAAMO,kBAAkB,OAAO;AAAA,EAC7BvH;AAAAA,EACAwH;AAAAA,EACArC;AAAAA,EACAoB;AAAAA,EACAkB;AAAAA,EACAC;AAAAA,EACAC;AASF,MAAqB;AACnB,QAAMC,SAAS,MAAMC,YAAY;AAAA,IAC/B7H;AAAAA,IACAmF;AAAAA,IACAoB;AAAAA,IACAmB;AAAAA,IACAC;AAAAA,IACA9H;AAAAA,EAAAA,CACD;AACD,QAAMmB,UAAyB;AAAA,IAC7BE,MAAM;AAAA,IACNqF;AAAAA,IACAkB;AAAAA,IACAK,MAAMF,OAAOE;AAAAA,IACb,GAAIF,OAAOG,WAAW;AAAA,MAAEA,UAAUH,OAAOG;AAAAA,IAAAA,IAAa,CAAA;AAAA,EAAC;AAGzD,aAAWC,YAAYR,iBAAiB;AACtC,UAAMtH,KAAKnB,QAAQ2B,IAAIsH,QAAQ;AAC/B,QAAI,CAAC9H,GAAI;AACTe,WAAOf,IAAIc,OAAO;AAAA,EACpB;AACF;AAEA,MAAMiH,6BAA6BA,CACjCC,kBACAC,gBACAC,iBACY;AACZ,MAAID,mBAAmBD,iBAAkB,QAAO;AAChD,SAAOE,aAAaC,qBAAqBrF,SAASkF,gBAAgB;AACpE;AAEA,MAAMI,sCAAsCA,CAC1CtI,UACAuG,cACY;AACZ,QAAMgC,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACuI,WAAY,QAAO;AAExB,aAAWC,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAASzK,WAAW;AAC5D,iBAAWqK,gBAAgBM,UAAUD,UAAU;AAC7C,YAAIR,2BAA2B1B,WAAW4B,gBAAgBC,YAAY,GAAG;AACvE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,MAAMd,gCAAgC,OAAOtH,UAAkBuG,cAAqC;AAClG,QAAMgC,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACuI,cAAc,CAACA,WAAWzH,KAAM;AAErC,aAAW0H,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAASzK,WAAW;AAC5D,iBAAW,CAAC0J,UAAUkB,GAAG,KAAKD,UAAU3K,WAAW;AACjD,YAAI,CAACkK,2BAA2B1B,WAAW4B,gBAAgBQ,GAAG,EAAG;AAEjE,cAAMnB,kBAAkB7F,MAAMF,KAAKkH,IAAIC,SAAS;AAChD,YAAI,CAACpB,gBAAgB9D,OAAQ;AAE7B,cAAMsE,WAAWR,gBAAgB,CAAC;AAClC,cAAMnH,OAAOpB,WAAWyB,IAAIsH,QAAQ;AACpC,cAAM7C,UAAU9E,MAAM8E;AACtB,YAAI,CAACA,QAAS;AAEd,YAAI;AACF,gBAAMoC,gBAAgB;AAAA,YACpBvH;AAAAA,YACAwH;AAAAA,YACArC;AAAAA,YACAoB,WAAW4B;AAAAA,YACXV;AAAAA,YACAC,OAAOiB,IAAIjB;AAAAA,YACXC,SAASgB,IAAIhB;AAAAA,UAAAA,CACd;AAAA,QACH,SAASlF,KAAK;AACZ,gBAAMoG,QAAQtF,mBAAmBd,GAAG;AACpC,gBAAMzB,UAAyB;AAAA,YAAEE,MAAM;AAAA,YAAiBqF,WAAW4B;AAAAA,YAAgBV;AAAAA,YAAUoB;AAAAA,UAAAA;AAC7F,qBAAWb,aAAYR,iBAAiB;AACtC,kBAAMtH,KAAKnB,QAAQ2B,IAAIsH,SAAQ;AAC/B,gBAAI,CAAC9H,GAAI;AACTe,mBAAOf,IAAIc,OAAO;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM8H,qBAAqB,OAAO9I,UAAkBuG,cAAqC;AACvF,QAAMwC,gBAAgBzJ,cAAcoB,IAAIV,QAAQ,yBAAShB,IAAAA;AACzDM,gBAAcmB,IAAIT,UAAU+I,aAAa;AACzC,MAAIA,cAAchC,IAAIR,SAAS,EAAG;AAElC,QAAMyC,QAAQ,MAAM1C,eAAetG,UAAUuG,SAAS;AAEtD,QAAM0C,SAASD,MAAME,MAAM,IAAI;AAAA,IAC7BC,cAAc;AAAA,EAAA,CACf;AAEDF,SAAO3I,GAAG,UAAU,MAAM;AACxBwG,0CAAsC9G,UAAUuG,SAAS;AAAA,EAC3D,CAAC;AAED0C,SAAO3I,GAAG,SAAS,MAAM;AACvBoG,uBAAmB1G,UAAUuG,SAAS;AACtC,UAAMN,MAAM3G,cAAcoB,IAAIV,QAAQ;AACtCiG,SAAKpF,OAAO0F,SAAS;AACrB,QAAIN,OAAOA,IAAInF,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,EAC1D,CAAC;AAEDiJ,SAAO3I,GAAG,SAAS,MAAM;AACvB,QAAI;AACFoG,yBAAmB1G,UAAUuG,SAAS;AACtC0C,aAAO9H,MAAAA;AAAAA,IACT,QAAQ;AAAA,IACN;AAAA,EAEJ,CAAC;AAED4H,gBAActI,IAAI8F,WAAW0C,MAAM;AACrC;AAEA,MAAMG,wBAAwBA,CAAC;AAAA,EAC7BpB;AAAAA,EACAhI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAkB;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EACAU;AAUF,MAAY;AACV,QAAME,aAAalJ,cAAcqB,IAAIV,QAAQ,yBAAShB,IAAAA;AACtDK,gBAAcoB,IAAIT,UAAUuI,UAAU;AAEtC,QAAMC,WAAWD,WAAW7H,IAAIT,MAAM,yBAASjB,IAAAA;AAC/CuJ,aAAW9H,IAAIR,QAAQuI,QAAQ;AAE/B,QAAME,YAAYF,SAAS9H,IAAI6F,SAAS,yBAASvH,IAAAA;AACjDwJ,WAAS/H,IAAI8F,WAAWmC,SAAS;AAEjC,QAAMW,WAAWX,UAAUhI,IAAI+G,QAAQ;AACvC,MAAI4B,UAAU;AACZA,aAAST,UAAUjI,IAAIqH,QAAQ;AAC/BqB,aAAShB,uBAAuB1G,MAAMF,KAAK,oBAAIjD,IAAI,CAAC,GAAG6K,SAAShB,sBAAsB,GAAGA,oBAAoB,CAAC,CAAC;AAAA,EACjH,OAAO;AACLK,cAAUjI,IAAIgH,UAAU;AAAA,MACtBC;AAAAA,MACAC;AAAAA,MACAU,sBAAsB1G,MAAMF,KAAK,IAAIjD,IAAI6J,oBAAoB,CAAC;AAAA,MAC9DO,WAAW,oBAAIpK,IAAI,CAACwJ,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAMsB,UAAUlK,oBAAoBsB,IAAIsH,QAAQ,yBAAShJ,IAAAA;AACzDI,sBAAoBqB,IAAIuH,UAAUsB,OAAO;AAEzC,QAAMC,WAAWD,QAAQ5I,IAAI6F,SAAS,yBAAS/H,IAAAA;AAC/C8K,UAAQ7I,IAAI8F,WAAWgD,QAAQ;AAC/BA,WAAS5I,IAAI8G,QAAQ;AACvB;AAEA,MAAM+B,2BAA2BA,CAAC;AAAA,EAChCxB;AAAAA,EACAhI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAkB;AAOF,MAAY;AACV,QAAMc,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,QAAMwI,WAAWD,YAAY7H,IAAIT,MAAM;AACvC,QAAMyI,YAAYF,UAAU9H,IAAI6F,SAAS;AACzC,QAAMoC,MAAMD,WAAWhI,IAAI+G,QAAQ;AACnC,QAAMgC,qBAAqB,oBAAIjL,IAAY,CAAC+H,WAAW,GAAIoC,KAAKN,wBAAwB,CAAA,CAAG,CAAC;AAC5F,MAAIM,KAAK;AACPA,QAAIC,UAAU/H,OAAOmH,QAAQ;AAC7B,QAAI,CAACW,IAAIC,UAAU9H,MAAM;AACvB4H,iBAAW7H,OAAO4G,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM6B,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,QAAMvH,MAAM6I,SAAS5I,IAAI6F,SAAS;AAClC,MAAI9F,KAAK;AACPA,QAAII,OAAO4G,QAAQ;AACnB,QAAI,CAAChH,IAAIK,MAAM;AACbwI,eAASzI,OAAO0F,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAImC,aAAaA,UAAU5H,SAAS,GAAG;AACrC0H,cAAU3H,OAAO0F,SAAS;AAAA,EAC5B;AAEA,MAAIiC,YAAYA,SAAS1H,SAAS,GAAG;AACnCyH,gBAAY1H,OAAOZ,MAAM;AAAA,EAC3B;AAEA,aAAWyJ,qBAAqBD,oBAAoB;AAClD,QAAInB,oCAAoCtI,UAAU0J,iBAAiB,EAAG;AAEtE,UAAMX,gBAAgBzJ,cAAcoB,IAAIV,QAAQ;AAChD,UAAMiJ,SAASF,eAAerI,IAAIgJ,iBAAiB;AACnD,QAAIT,QAAQ;AACV,UAAI;AACFA,eAAO9H,MAAAA;AAAAA,MACT,QAAQ;AAAA,MACN;AAEFuF,yBAAmB1G,UAAU0J,iBAAiB;AAC9CX,qBAAelI,OAAO6I,iBAAiB;AACvC,UAAIX,iBAAiBA,cAAcjI,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAIuI,cAAcA,WAAWzH,SAAS,EAAGzB,eAAcwB,OAAOb,QAAQ;AACtE,MAAIsJ,WAAWA,QAAQxI,SAAS,EAAG1B,qBAAoByB,OAAOmH,QAAQ;AACxE;AAEA,MAAM2B,gBAAgBA,CAAC3B,aAA2B;AAChD,QAAM3H,OAAOpB,WAAWyB,IAAIsH,QAAQ;AACpC,MAAI3H,MAAM;AACR,UAAMiJ,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,QAAIsB,SAAS;AACX,iBAAW,CAAC/C,WAAWqD,IAAI,KAAKN,QAAQvL,WAAW;AACjD,mBAAW0J,YAAYmC,KAAKnB,UAAU;AACpCe,mCAAyB;AAAA,YACvBxB;AAAAA,YACAhI,UAAUK,KAAKL;AAAAA,YACfC,QAAQI,KAAKJ;AAAAA,YACbsG;AAAAA,YACAkB;AAAAA,UAAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEArI,sBAAoByB,OAAOmH,QAAQ;AAEnC,QAAM6B,aAAa1K,cAAcuB,IAAIsH,QAAQ,KAAK,CAAA;AAClD7I,gBAAc0B,OAAOmH,QAAQ;AAC7B,aAAW8B,MAAMD,YAAY;AAC3B,QAAI;AACFC,SAAAA;AAAAA,IACF,QAAQ;AAAA,IACN;AAAA,EAEJ;AAEA/K,UAAQ8B,OAAOmH,QAAQ;AACvB/I,aAAW4B,OAAOmH,QAAQ;AAC1B9I,iBAAe2B,OAAOmH,QAAQ;AAChC;AAEA,MAAM+B,sBAAsB,OAAO;AAAA,EACjC/B;AAAAA,EACA3H;AAAAA,EACA4B;AAKF,MAAqB;AACnB,QAAM/B,KAAKnB,QAAQ2B,IAAIsH,QAAQ;AAC/B,MAAI,CAAC9H,GAAI;AAET,MAAI+B,QAAQf,SAAS,SAAS;AAC5B,UAAM8I,UAAU9K,eAAewB,IAAIsH,QAAQ;AAC3CgC,aAAS5I,SAASa,QAAQ1B,OAAO0B,QAAQjB,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAACiB,QAAQsE,aAAa,OAAOtE,QAAQsE,cAAc,SAAU;AACjE,MAAI,CAAC1G,uBAAuBtB,qBAAqBwI,IAAI9E,QAAQsE,SAAS,GAAG;AACvEtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF,YAAY;AAAA,MAAIoB,OAAO;AAAA,IAAA,CAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC5G,QAAQwF,YAAY,OAAOxF,QAAQwF,aAAa,SAAU;AAC/D,MAAIxF,QAAQwF,SAAS/D,SAASpF,kBAAmB;AAEjD,MAAI2D,QAAQf,SAAS,gBAAgB;AACnCsI,6BAAyB;AAAA,MACvBxB;AAAAA,MACAhI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,IAAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAACxF,QAAQyF,SAAS,OAAOzF,QAAQyF,UAAU,SAAU;AAEzD,QAAMC,UAAUsC,yBAAyBhI,QAAQ0F,OAAO;AACxD,QAAMxC,UAAU9E,KAAK8E;AAErB,MAAI,CAACA,QAAQ+E,IAAI,QAAQjI,QAAQsE,SAA2B,GAAG;AAC7DtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF;AAAAA,MAAUoB,OAAO;AAAA,IAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI5G,QAAQf,SAAS,kBAAkB;AACrC,UAAMmI,WAAWjK,oBAAoBsB,IAAIsH,QAAQ,GAAGtH,IAAIuB,QAAQsE,SAAS,GAAGQ,IAAI9E,QAAQwF,QAAQ,KAAK;AACrG,QAAI,CAAC4B,UAAU;AACb,UAAIc,QAAQ;AACZ,YAAMb,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,UAAIsB,SAAS;AACX,mBAAW7I,OAAO6I,QAAQb,OAAAA,YAAmBhI,IAAIK;AAAAA,MACnD;AAEA,UAAIqJ,SAASxK,2BAA2B;AACtCsB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWkB,UAAUxF,QAAQwF;AAAAA,UAAUoB,OAAO;AAAA,QAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,QAAIR,uBAAiC,CAAA;AACrC,QAAIV,QAAQyC,aAAatH,QAAW;AAClC,UAAI;AACFuF,+BAAuB,MAAMgC,oCAAoC;AAAA,UAC/DrK,UAAUK,KAAKL;AAAAA,UACfmF;AAAAA,UACAoB,WAAWtE,QAAQsE;AAAAA,UACnBoB;AAAAA,UACA9H;AAAAA,QAAAA,CACD;AAAA,MACH,SAAS4C,KAAK;AACZ,cAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWkB,UAAUxF,QAAQwF;AAAAA,UAAUoB;AAAAA,QAAAA,CAAO;AACrG;AAAA,MACF;AAAA,IACF;AAEAO,0BAAsB;AAAA,MACpBpB;AAAAA,MACAhI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,MAClBC,OAAOzF,QAAQyF;AAAAA,MACfC;AAAAA,MACAU;AAAAA,IAAAA,CACD;AAED,QAAI;AACF,YAAMiC,wCAAwB9L,IAAY,CAACyD,QAAQsE,WAAW,GAAG8B,oBAAoB,CAAC;AACtF,iBAAW9B,aAAa+D,mBAAmB;AACzC,cAAMxB,mBAAmBzI,KAAKL,UAAUuG,SAAS;AAAA,MACnD;AAAA,IACF,SAAS9D,KAAK;AACZ,YAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,aAAOf,IAAI;AAAA,QAAEgB,MAAM;AAAA,QAAiBqF,WAAWtE,QAAQsE;AAAAA,QAAWkB,UAAUxF,QAAQwF;AAAAA,QAAUoB;AAAAA,MAAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI5G,QAAQsI,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAMhD,gBAAgB;AAAA,MACpBvH,UAAUK,KAAKL;AAAAA,MACfwH,iBAAiB,CAACQ,QAAQ;AAAA,MAC1B7C;AAAAA,MACAoB,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,MAClBC,OAAOzF,QAAQyF;AAAAA,MACfC;AAAAA,IAAAA,CACD;AAAA,EACH,SAASlF,KAAK;AACZ,UAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF;AAAAA,MAAUoB;AAAAA,IAAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM2B,UAAUA,CAAC;AAAA,EACtBC;AAAAA,EACAtM,OAAO;AAAA,EACP+F;AAAAA,EACAxE,iBAAiBgL;AAAAA,EACjB/K,2BAA2BgL;AAAAA,EAC3B/K,oBAAoBgL;AAAAA,EACpB/K,qBAAqBgL;AASvB,MAAY;AACV,MAAIjM,mBAAmBmI,IAAI0D,MAAM,EAAG;AACpC7L,qBAAmB+B,IAAI8J,MAAM;AAE7B,MAAI,OAAOC,uBAAuB,YAAYI,OAAOC,SAASL,kBAAkB,KAAKA,qBAAqB,GAAG;AAC3GhL,sBAAkBuH,KAAKG,MAAMsD,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAOC,iCAAiC,YACrCG,OAAOC,SAASJ,4BAA4B,KAC5CA,+BAA+B,GAClC;AACAhL,gCAA4BsH,KAAKG,MAAMuD,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAOC,0BAA0B,YAAYE,OAAOC,SAASH,qBAAqB,KAAKA,yBAAyB,GAAG;AACrHhL,yBAAqBqH,KAAKG,MAAMwD,qBAAqB;AAAA,EACvD;AAEA/K,wBAAsBmL,QAAQH,sBAAsB;AAEpD,QAAMI,MAAM,IAAIC,gBAAgB;AAAA,IAAEC,UAAU;AAAA,IAAMC,YAAY1L;AAAAA,EAAAA,CAAiB;AAE/E+K,SAAOnK,GAAG,WAAW,CAAC6D,KAAsB7B,QAAgB+I,SAAiB;AAC3EhJ,6BAAyBC,QAAQ,OAAO;AAAA,MACtCgJ,aAAanH,IAAIkB,QAAQkG,QAAQ;AAAA,MACjCC,YAAYrH,IAAIM,OAAO;AAAA,MACvBgH,WAAW,OAAOtH,IAAIkB,QAAQ,YAAY,MAAM,WAAWlB,IAAIkB,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF7F,gBAAYqB,OAAOsD,GAAG;AAEtB,QAAIM;AACJ,QAAI;AACFA,YAAM,IAAIiH,IAAIvH,IAAIM,OAAO,IAAI,UAAUN,IAAIkB,QAAQkG,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACNvH,iBAAW1B,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAImC,IAAIkH,aAAaxN,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAMkC,OAAO,MAAMmE,iBAAiB;AAAA,UAAEL;AAAAA,UAAKM;AAAAA,UAAKP;AAAAA,QAAAA,CAAmB;AACnE1E,oBAAYiB,IAAI0D,KAAK9D,IAAI;AAEzB4K,YAAIW,cAAczH,KAAK7B,QAAQ+I,MAAM,CAACnL,OAAkB;AACtD+K,cAAIlK,KAAK,cAAcb,IAAIiE,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS1B,KAAK;AACZ,cAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAU;AACrD,YAAIA,QAAQ4J,WAAW,sBAAsB,GAAG;AAC9C7H,qBAAW1B,QAAQL,OAAO;AAC1B;AAAA,QACF;AACA2B,qBAAatB,QAAQL,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK6J,MAAM,MAAM;AACf9H,iBAAW1B,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED2I,MAAI3K,GAAG,cAAc,CAACJ,IAAeiE,QAAyB;AAC5D,UAAM9D,OAAOb,YAAYkB,IAAIyD,GAAG;AAChC3E,gBAAYqB,OAAOsD,GAAG;AACtB,QAAI,CAAC9D,MAAM;AACT,UAAI;AACFH,WAAGiB,MAAAA;AAAAA,MACL,QAAQ;AAAA,MACN;AAEF;AAAA,IACF;AAEA,UAAM6G,WAAW+D,WAAAA;AACjBhN,YAAQ0B,IAAIuH,UAAU9H,EAAE;AACxBjB,eAAWwB,IAAIuH,UAAU3H,IAAI;AAE7B,UAAM2J,UAAU,IAAIlK,UAAU;AAAA,MAAEC,IAAIiI;AAAAA,MAAU9H;AAAAA,MAAIG;AAAAA,IAAAA,CAAM;AACxDnB,mBAAeuB,IAAIuH,UAAUgC,OAAO;AAEpC,UAAMH,aAAgC,CAAA;AACtC,eAAWrJ,WAAW1B,gBAAgB;AACpC,UAAI;AACF,cAAMkN,UAAUxL,QAAQwJ,OAAO;AAC/B,YAAI,OAAOgC,YAAY,WAAYnC,YAAWoC,KAAKD,OAAO;AAAA,MAC5D,QAAQ;AAAA,MACN;AAAA,IAEJ;AACA,QAAInC,WAAWnG,OAAQvE,eAAcsB,IAAIuH,UAAU6B,UAAU;AAE7D3J,OAAGI,GAAG,WAAW,CAACgB,QAAiB;AACjC,UAAI4K;AACJ,UAAI;AACFA,iBAASpK,cAAcR,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC4K,UAAU,OAAOA,WAAW,SAAU;AAC3C,YAAMjK,UAAUiK;AAChB,UACEjK,QAAQf,SAAS,WACde,QAAQf,SAAS,eACjBe,QAAQf,SAAS,oBACjBe,QAAQf,SAAS,eACpB;AACF,WAAK6I,oBAAoB;AAAA,QAAE/B;AAAAA,QAAU3H;AAAAA,QAAM4B;AAAAA,MAAAA,CAAmC;AAAA,IAChF,CAAC;AAED/B,OAAGI,GAAG,SAAS,MAAM;AACnBqJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAED9H,OAAGI,GAAG,SAAS,MAAM;AACnBqJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAMmE,qBAAqBA,CAAC3L,YAA6B;AAC9D1B,iBAAemN,KAAKzL,OAAO;AAC7B;AAEO,MAAM4L,wBAAwBA,CAACpM,UAAkBuG,cAA4B;AAClFO,wCAAsC9G,UAAUuG,SAAS;AAC3D;"}

package/dist/{shared-BJomDDWK.js → shared-Dy9x-P7F.js}

@@ -65,10 +65,7 @@ const toBufferPayload = (payload) => {
 const ensureUploadIndexes = async (UploadSession, UploadChunk) => {
   const dbName = String(UploadSession?.db?.name ?? "");
   if (dbName && ensuredIndexDbNames.has(dbName)) return;
-  await Promise.all([
-    UploadSession.createIndexes(),
-    UploadChunk.createIndexes()
-  ]);
+  await Promise.all([UploadSession.createIndexes(), UploadChunk.createIndexes()]);
   if (dbName) ensuredIndexDbNames.add(dbName);
 };
 const normalizeUploadKey = (raw) => {
@@ -83,8 +80,14 @@ const getUploadKeyHash = (ctx) => {
 };
 const buildUploadsAbility = (ctx, tenantId) => {
   const uploadKeyHash = getUploadKeyHash(ctx);
-  const claims = uploadKeyHash ? { uploadKeyHash } : void 0;
-  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims });
+  const claims = uploadKeyHash ? {
+    uploadKeyHash
+  } : void 0;
+  return buildAbilityFromSession({
+    tenantId,
+    session: ctx.req.session,
+    claims
+  });
 };
 const getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(ability, action, "RBUploadSession");
 export {
@@ -104,4 +107,4 @@ export {
   normalizeSha256Hex as n,
   toBufferPayload as t
 };
-//# sourceMappingURL=shared-BJomDDWK.js.map
+//# sourceMappingURL=shared-Dy9x-P7F.js.map

package/dist/{shared-BJomDDWK.js.map → shared-Dy9x-P7F.js.map}

@@ -1 +1 @@
-{"version":3,"file":"shared-BJomDDWK.js","sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"names":[],"mappings":";;AAoBA,MAAM,2BAA2B,IAAI,OAAO;AAC5C,MAAM,uBAAuB,KAAK,OAAO;AAEzC,MAAM,sCAAsC,KAAK,OAAO;AAExD,MAAM,wBAAwB,KAAK,KAAK;AAExC,MAAM,0CAA0B,IAAA;AAEhC,MAAM,2BAA2B,CAAC,aAAqC;AACrE,MAAI,OAAO,aAAa,SAAU,QAAO;AACzC,QAAM,aAAa,SAAS,KAAA;AAC5B,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,SAAS,OAAO,UAAU;AAChC,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AACpD,SAAO,KAAK,MAAM,MAAM;AAC1B;AAEO,MAAM,oBAAoB,MAAc;AAC7C,QAAM,aAAa,yBAAyB,QAAQ,IAAI,0BAA0B;AAClF,QAAM,WAAW,cAAc;AAC/B,SAAO,KAAK,IAAI,sBAAsB,QAAQ;AAChD;AAEO,MAAM,mCAAmC,MAAqB;AACnE,QAAM,aAAa,yBAAyB,QAAQ,IAAI,qCAAqC;AAC7F,SAAO,cAAc;AACvB;AAEO,MAAM,kBAAkB,MAAc;AAC3C,QAAM,aAAa,yBAAyB,QAAQ,IAAI,uBAAuB,KAAK;AACpF,SAAO,aAAa;AACtB;AAEO,MAAM,uBAAuB,CAAC,mBAAmC,iBAAiB,OAAO;AAEzF,MAAM,gBAAgB,OAAe,QAAQ,IAAI,6BAA6B,IAAI,UAAU;AAE5F,MAAM,YAAY,CAAC,QAAyC;AACjE,QAAM,MAAM,IAAI,IAAI,SAAS,MAAM;AACnC,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,aAAa,IAAI,KAAA;AACvB,SAAO,aAAa,aAAa;AACnC;AAEO,MAAM,cAAc,CAAC,QAAyC;AACnE,QAAM,aAAa,IAAI,IAAI,SAAS,MAAM;AAC1C,QAAM,kBAAkB,OAAO,eAAe,WAAW,WAAW,SAAS;AAE7E,QAAM,SAAS,UAAU,GAAG;AAC5B,QAAM,WAAW,IAAI,IAAI,QAAQ,cAAc;AAC/C,QAAM,gBAAgB,MAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC,IAAI;AAC9D,QAAM,aAAa,OAAO,kBAAkB,YAAY,cAAc,SAAS,cAAc,KAAA,IAAS;AAEtG,MAAI,CAAC,UAAU,WAAY,QAAO;AAElC,MAAI,eAAe,mBAAmB;AAEtC,MAAI,gBAAiB,QAAO;AAE5B,SAAO;AACT;AAEO,MAAM,mBAAmB,CAAC,SAAyB,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAEjG,MAAM,qBAAqB,CAAC,UAA0B,MAAM,KAAA,EAAO,YAAA;AAEnE,MAAM,cAAc,CAAC,MAAwB,cAAoC;AAAA,EACtF,KAAK;AAAA,IACH,SAAS;AAAA,MACP,MAAM;AAAA,QACJ,iBAAiB;AAAA,MAAA;AAAA,IACnB;AAAA,EACF;AAEJ;AAEO,MAAM,kBAAkB,CAAC,YAAoC;AAClE,MAAI,OAAO,SAAS,OAAO,EAAG,QAAO;AACrC,MAAI,mBAAmB,WAAY,QAAO,OAAO,KAAK,OAAO;AAC7D,SAAO;AACT;AAEO,MAAM,sBAAsB,OACjC,eACA,gBACkB;AAClB,QAAM,SAAS,OAAQ,eAA0D,IAAI,QAAQ,EAAE;AAC/F,MAAI,UAAU,oBAAoB,IAAI,MAAM,EAAG;AAE/C,QAAM,QAAQ,IAAI;AAAA,IAChB,cAAc,cAAA;AAAA,IACd,YAAY,cAAA;AAAA,EAAc,CAC3B;AAED,MAAI,OAAQ,qBAAoB,IAAI,MAAM;AAC5C;AAEA,MAAM,qBAAqB,CAAC,QAAgC;AAC1D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,aAAa,IAAI,KAAA;AACvB,SAAO,aAAa,aAAa;AACnC;AAEO,MAAM,mBAAmB,CAAC,QAAyC;AACxE,QAAM,YAAY,mBAAmB,IAAI,IAAI,IAAI,cAAc,CAAC;AAChE,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChD;AAEO,MAAM,sBAAsB,CAAC,KAAuB,aAAiC;AAC1F,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAM,SAAS,gBAAgB,EAAE,cAAA,IAAkB;AACnD,SAAO,wBAAwB,EAAE,UAAU,SAAS,IAAI,IAAI,SAAS,QAAQ;AAC/E;AAEO,MAAM,8BAA8B,CACzC,SACA,WAC4B,qBAAqB,SAAS,QAAQ,iBAAiB;"}
+{"version":3,"file":"shared-Dy9x-P7F.js","sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"names":["DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","id","getTenantId","rawSession","currentTenantId","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","data","createHash","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","toBufferPayload","payload","Buffer","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","dbName","String","db","name","has","Promise","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","buildAbilityFromSession","getUploadSessionAccessQuery","ability","action","getAccessibleByQuery"],"mappings":";;AAoBA,MAAMA,2BAA2B,IAAI,OAAO;AAC5C,MAAMC,uBAAuB,KAAK,OAAO;AAEzC,MAAMC,sCAAsC,KAAK,OAAO;AAExD,MAAMC,wBAAwB,KAAK,KAAK;AAExC,MAAMC,0CAA0BC,IAAAA;AAEhC,MAAMC,2BAA2BA,CAACC,aAAqC;AACrE,MAAI,OAAOA,aAAa,SAAU,QAAO;AACzC,QAAMC,aAAaD,SAASE,KAAAA;AAC5B,MAAI,CAACD,WAAY,QAAO;AACxB,QAAME,SAASC,OAAOH,UAAU;AAChC,MAAI,CAACG,OAAOC,SAASF,MAAM,KAAKA,UAAU,EAAG,QAAO;AACpD,SAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEO,MAAMK,oBAAoBA,MAAc;AAC7C,QAAMC,aAAaV,yBAAyBW,QAAQC,IAAIC,0BAA0B;AAClF,QAAMC,WAAWJ,cAAchB;AAC/B,SAAOa,KAAKQ,IAAIpB,sBAAsBmB,QAAQ;AAChD;AAEO,MAAME,mCAAmCA,MAAqB;AACnE,QAAMN,aAAaV,yBAAyBW,QAAQC,IAAIK,qCAAqC;AAC7F,SAAOP,cAAcd;AACvB;AAEO,MAAMsB,kBAAkBA,MAAc;AAC3C,QAAMC,aAAanB,yBAAyBW,QAAQC,IAAIQ,uBAAuB,KAAKvB;AACpF,SAAOsB,aAAa;AACtB;AAEO,MAAME,uBAAuBA,CAACC,mBAAmCA,iBAAiB,OAAO;AAEzF,MAAMC,gBAAgBA,OAAeZ,QAAQC,IAAIY,6BAA6B,IAAIrB,UAAU;AAE5F,MAAMsB,YAAYA,CAACC,QAAyC;AACjE,QAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAMC;AACnC,MAAI,OAAOJ,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAM8B,cAAcA,CAACN,QAAyC;AACnE,QAAMO,aAAaP,IAAIE,IAAIC,SAASC,MAAMI;AAC1C,QAAMC,kBAAkB,OAAOF,eAAe,WAAWA,WAAW9B,SAAS;AAE7E,QAAMiC,SAASX,UAAUC,GAAG;AAC5B,QAAMW,WAAWX,IAAIE,IAAIU,QAAQ,cAAc;AAC/C,QAAMC,gBAAgBC,MAAMC,QAAQJ,QAAQ,IAAIA,SAAS,CAAC,IAAIA;AAC9D,QAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAcpC,SAASoC,cAAcpC,KAAAA,IAAS;AAEtG,MAAI,CAACiC,UAAUM,WAAY,QAAOA;AAElC,MAAIN,eAAeD,mBAAmB;AAEtC,MAAIA,gBAAiB,QAAOA;AAE5B,SAAOO;AACT;AAEO,MAAMC,mBAAmBA,CAACC,SAAyBC,WAAW,QAAQ,EAAEC,OAAOF,IAAI,EAAEG,OAAO,KAAK;AAEjG,MAAMC,qBAAqBA,CAACC,UAA0BA,MAAM9C,KAAAA,EAAO+C,YAAAA;AAEnE,MAAMC,cAAcA,CAACC,MAAwBC,cAAoC;AAAA,EACtFzB,KAAK;AAAA,IACHC,SAAS;AAAA,MACPC,MAAM;AAAA,QACJI,iBAAiBmB;AAAAA,MAAAA;AAAAA,IACnB;AAAA,EACF;AAEJ;AAEO,MAAMC,kBAAkBA,CAACC,YAAoC;AAClE,MAAIC,OAAOC,SAASF,OAAO,EAAG,QAAOA;AACrC,MAAIA,mBAAmBG,WAAY,QAAOF,OAAOG,KAAKJ,OAAO;AAC7D,SAAO;AACT;AAEO,MAAMK,sBAAsB,OACjCC,eACAC,gBACkB;AAClB,QAAMC,SAASC,OAAQH,eAA0DI,IAAIC,QAAQ,EAAE;AAC/F,MAAIH,UAAUjE,oBAAoBqE,IAAIJ,MAAM,EAAG;AAE/C,QAAMK,QAAQC,IAAI,CAChBR,cAAcS,iBACdR,YAAYQ,cAAAA,CAAe,CAC5B;AAED,MAAIP,OAAQjE,qBAAoByE,IAAIR,MAAM;AAC5C;AAEA,MAAMS,qBAAqBA,CAAC7C,QAAgC;AAC1D,MAAI,OAAOA,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAMuE,mBAAmBA,CAAC/C,QAAyC;AACxE,QAAMgD,YAAYF,mBAAmB9C,IAAIE,IAAI+C,IAAI,cAAc,CAAC;AAChE,MAAI,CAACD,UAAW,QAAO;AACvB,SAAO/B,iBAAiBa,OAAOG,KAAKe,SAAS,CAAC;AAChD;AAEO,MAAME,sBAAsBA,CAAClD,KAAuB2B,aAAiC;AAC1F,QAAMwB,gBAAgBJ,iBAAiB/C,GAAG;AAC1C,QAAMoD,SAASD,gBAAgB;AAAA,IAAEA;AAAAA,EAAAA,IAAkBE;AACnD,SAAOC,wBAAwB;AAAA,IAAE3B;AAAAA,IAAUxB,SAASH,IAAIE,IAAIC;AAAAA,IAASiD;AAAAA,EAAAA,CAAQ;AAC/E;AAEO,MAAMG,8BAA8BA,CACzCC,SACAC,WAC4BC,qBAAqBF,SAASC,QAAQ,iBAAiB;"}

package/dist/uploads.js

@@ -1,5 +1,5 @@
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-Bh3a6Br1.js"), "./api/files/handler.ts": () => import("./handler-Cohj3cz3.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-GZgk5k3c.js"), "./api/files/handler.ts": () => import("./handler-DY5UEwlw.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
   return acc;

package/dist/uploads.js.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.js","sources":["../src/uploads/routes.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/uploads/api/\")] = mod\n  return acc\n}, {})\n\n"],"names":[],"mappings":"AAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EACnC,GAAG,uBAAA,OAAA,EAAA,iCAAA,MAAA,OAAA,uBAAA,GAAA,0BAAA,MAAA,OAAA,uBAAA,EAAA,CAAA;AACL,CAAC,EAAE,OAAgC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;AACvD,MAAI,KAAK,QAAQ,UAAU,8BAA8B,CAAC,IAAI;AAC9D,SAAO;AACT,GAAG,CAAA,CAAE;"}
+{"version":3,"file":"uploads.js","sources":["../src/uploads/routes.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/uploads/api/\")] = mod\n  return acc\n}, {})\n\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace"],"mappings":"AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,iCAAAA,MAAAA,OAAAA,uBAAAA,GAAAA,0BAAAA,MAAAA,OAAAA,uBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,8BAA8B,CAAC,IAAID;AAC9D,SAAOF;AACT,GAAG,CAAA,CAAE;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.513.0",
+  "version": "0.514.0",
   "type": "module",
   "files": [
     "dist"