@rpcbase/server 0.516.0 → 0.518.0

package/dist/rts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    let dependencyModelNames: string[] = []\n    if (options.populate !== undefined) {\n      try {\n        dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n          tenantId: meta.tenantId,\n          ability,\n          modelName: message.modelName,\n          options,\n          allowInternalModels,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n      dependencyModelNames,\n    })\n\n    try {\n      const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n      for (const modelName of modelNamesToWatch) {\n        await ensureChangeStream(meta.tenantId, modelName)\n      }\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace","QUERY_KEY_MAX_LEN","INTERNAL_MODEL_NAMES","Set","DEFAULT_MAX_PAYLOAD_BYTES","DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET","DEFAULT_DISPATCH_DEBOUNCE_MS","initializedServers","WeakSet","customHandlers","sockets","Map","socketMeta","socketWrappers","socketCleanup","socketSubscriptions","subscriptions","changeStreams","dispatchTimers","upgradeMeta","WeakMap","maxPayloadBytes","maxSubscriptionsPerSocket","dispatchDebounceMs","allowInternalModels","RtsSocket","id","tenantId","userId","ws","handlers","constructor","meta","on","event","handler","set","get","add","off","delete","size","emit","payload","sendWs","type","close","dispatch","rawToText","raw","ArrayBuffer","Buffer","from","toString","Array","isArray","concat","safeJsonParse","JSON","parse","message","readyState","send","stringify","ensureSocketErrorHandler","socket","context","listenerCount","err","Error","String","name","stack","undefined","code","includes","console","warn","remoteAddress","remotePort","localAddress","localPort","redactErrorMessage","trimmedModelList","maxLen","length","slice","unauthorized","write","end","destroy","badRequest","runSessionMiddleware","sessionMiddleware","req","Promise","resolve","reject","next","parseUpgradeMeta","url","searchParams","TENANT_ID_QUERY_PARAM","upgradeReq","sessionUser","session","user","sessionUserId","signedInTenants","currentTenantId","ability","buildAbilityFromSession","headers","USER_ID_HEADER","headerUserId","rbCtx","User","models","getGlobal","findById","tenants","tenantRoles","lean","tenantsRaw","map","t","roles","getTenantRolesFromSessionUser","buildAbility","getTenantModel","modelName","ctx","makeDispatchKey","clearDispatchTimer","key","timer","clearTimeout","scheduleDispatchSubscriptionsForModel","has","delay","Math","max","min","floor","setTimeout","dispatchSubscriptionsForModel","runAndSendQuery","targetSocketIds","queryKey","query","options","result","runRtsQuery","data","pageInfo","socketId","subscriptionDependsOnModel","changedModelName","ownerModelName","subscription","dependencyModelNames","hasAnySubscriptionsDependingOnModel","tenantSubs","userSubs","values","modelSubs","sub","socketIds","error","ensureChangeStream","tenantStreams","model","stream","watch","fullDocument","addSocketSubscription","existing","byModel","querySet","removeSocketSubscription","affectedModelNames","affectedModelName","cleanupSocket","keys","cleanupFns","fn","handleClientMessage","wrapper","normalizeRtsQueryOptions","can","count","populate","resolveRtsQueryDependencyModelNames","modelNamesToWatch","runInitialQuery","initRts","server","maxPayloadBytesArg","maxSubscriptionsPerSocketArg","dispatchDebounceMsArg","allowInternalModelsArg","Number","isFinite","Boolean","wss","WebSocketServer","noServer","maxPayload","head","upgradeHost","host","upgradeUrl","userAgent","URL","pathname","handleUpgrade","startsWith","catch","randomUUID","cleanup","push","parsed","registerRtsHandler","notifyRtsModelChanged"],"mappings":";;;;;AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,4BAAAA,MAAAA,OAAAA,wBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,0BAA0B,CAAC,IAAID;AAC1D,SAAOF;AACT,GAAG,CAAA,CAAE;AC4EL,MAAMI,oBAAoB;AAE1B,MAAMC,uBAAuB,oBAAIC,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAMC,4BAA4B,OAAO;AACzC,MAAMC,uCAAuC;AAC7C,MAAMC,+BAA+B;AAErC,MAAMC,yCAAyBC,QAAAA;AAC/B,MAAMC,iBAA8B,CAAA;AAEpC,MAAMC,8BAAcC,IAAAA;AACpB,MAAMC,iCAAiBD,IAAAA;AACvB,MAAME,qCAAqBF,IAAAA;AAC3B,MAAMG,oCAAoBH,IAAAA;AAE1B,MAAMI,0CAA0BJ,IAAAA;AAChC,MAAMK,oCAAoBL,IAAAA;AAC1B,MAAMM,oCAAoBN,IAAAA;AAC1B,MAAMO,qCAAqBP,IAAAA;AAC3B,MAAMQ,kCAAkBC,QAAAA;AAExB,IAAIC,kBAAkBjB;AACtB,IAAIkB,4BAA4BjB;AAChC,IAAIkB,qBAAqBjB;AACzB,IAAIkB,sBAAsB;AAE1B,MAAMC,UAAU;AAAA,EACEC;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EAECC;AAAAA,EACAC,+BAAenB,IAAAA;AAAAA,EAEzBoB,YAAY;AAAA,IACjBL;AAAAA,IACAG;AAAAA,IACAG;AAAAA,EAAAA,GAKC;AACD,SAAKN,KAAKA;AACV,SAAKG,KAAKA;AACV,SAAKF,WAAWK,KAAKL;AACrB,SAAKC,SAASI,KAAKJ;AAAAA,EACrB;AAAA,EAEOK,GAAGC,OAAeC,SAAiD;AACxE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK,yBAAS/B,IAAAA;AAC5CiC,QAAIE,IAAIH,OAAO;AACf,SAAKL,SAASM,IAAIF,OAAOE,GAAG;AAC5B,WAAO,MAAM,KAAKG,IAAIL,OAAOC,OAAO;AAAA,EACtC;AAAA,EAEOI,IAAIL,OAAeC,SAA2C;AACnE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACVA,QAAII,OAAOL,OAAO;AAClB,QAAI,CAACC,IAAIK,KAAM,MAAKX,SAASU,OAAON,KAAK;AAAA,EAC3C;AAAA,EAEOQ,KAAKR,OAAeS,SAAyB;AAClDC,WAAO,KAAKf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAASX;AAAAA,MAAOS;AAAAA,IAAAA,CAAS;AAAA,EACnD;AAAA,EAEOG,QAAc;AACnB,QAAI;AACF,WAAKjB,GAAGiB,MAAAA;AAAAA,IACV,QAAQ;AAAA,IACN;AAAA,EAEJ;AAAA,EAEOC,SAASb,OAAeS,SAAwB;AACrD,UAAMP,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACV,eAAWD,WAAWC,KAAK;AACzBD,cAAQQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAMK,YAAYA,CAACC,QAAyB;AAC1C,MAAI,OAAOA,QAAQ,SAAU,QAAOA;AACpC,MAAIA,eAAeC,YAAa,QAAOC,OAAOC,KAAKH,GAAG,EAAEI,SAAAA;AACxD,MAAIC,MAAMC,QAAQN,GAAG,UAAUE,OAAOK,OAAOP,GAAG,EAAEI,SAAAA;AAClD,SAAOJ,IAAII,SAAAA;AACb;AAEA,MAAMI,gBAAgBA,CAACR,QAA0BS,KAAKC,MAAMX,UAAUC,GAAG,CAAC;AAE1E,MAAML,SAASA,CAACf,IAAe+B,YAAiC;AAC9D,MAAI/B,GAAGgC,eAAe,EAAG;AACzBhC,KAAGiC,KAAKJ,KAAKK,UAAUH,OAAO,CAAC;AACjC;AAEA,MAAMI,2BAA2BA,CAACC,QAAgBC,YAAkD;AAClG,MAAID,OAAOE,cAAc,OAAO,IAAI,EAAG;AAEvCF,SAAOhC,GAAG,SAAS,CAACmC,QAAiB;AACnC,UAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAUU,OAAOF,GAAG;AAC/D,UAAMG,OAAOH,eAAeC,QAAQD,IAAIG,OAAO,OAAOH;AACtD,UAAMI,QAAQJ,eAAeC,QAAQD,IAAII,QAAQC;AACjD,UAAMC,OAAON,OAAO,OAAOA,QAAQ,YAAY,UAAUA,MAAOA,IAAYM,OAAOD;AAEnF,QAAIC,SAAS,gBAAiBA,QAAQ,QAAQd,QAAQe,SAAS,YAAY,EAAI;AAE/EC,YAAQC,KAAK,yBAAyB;AAAA,MACpCN;AAAAA,MACAG;AAAAA,MACAd;AAAAA,MACAY;AAAAA,MACAM,eAAeb,OAAOa;AAAAA,MACtBC,YAAYd,OAAOc;AAAAA,MACnBC,cAAcf,OAAOe;AAAAA,MACrBC,WAAWhB,OAAOgB;AAAAA,MAClB,GAAGf,UAAAA;AAAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAMgB,qBAAqBA,CAACd,QAAyB;AACnD,QAAMnB,MAAMmB,eAAeC,QAAQD,IAAIR,UAAU;AACjD,QAAMuB,mBAAmBlC,IAAIjD,QAAQ,kCAAkC,EAAE;AACzE,QAAMoF,SAAS;AACf,MAAID,iBAAiBE,UAAUD,OAAQ,QAAOD;AAC9C,SAAOA,iBAAiBG,MAAM,GAAGF,MAAM;AACzC;AAEA,MAAMG,eAAeA,CAACtB,QAAgBL,UAAU,mBAAyB;AACvEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,mCAAmC;AAChDvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAMC,aAAaA,CAAC1B,QAAgBL,UAAU,kBAAwB;AACpEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,kCAAkC;AAC/CvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAME,uBAAuB,OAAOC,mBAAmCC,QAAuC;AAK5G,QAAM,IAAIC,QAAc,CAACC,SAASC,WAAW;AAC3C,UAAMC,OAAwB9B,CAAAA,QAAQ;AACpC,UAAIA,YAAYA,GAAG;AAAA,UACd4B,SAAAA;AAAAA,IACP;AAEAH,sBAAkBC,KAAiC,CAAA,GAAgCI,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAMC,mBAAmB,OAAO;AAAA,EAC9BL;AAAAA,EACAM;AAAAA,EACAP;AAKF,MAA2B;AACzB,QAAMlE,WAAWyE,IAAIC,aAAahE,IAAIiE,yBAAqB;AAC3D,MAAI,CAAC3E,UAAU;AACb,UAAM,IAAI0C,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAIwB,mBAAmB;AACrB,UAAMU,aAAaT;AACnB,QAAI;AACF,YAAMF,qBAAqBC,mBAAmBU,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAIlC,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAMmC,cAAcD,WAAWE,SAASC;AACxC,UAAMC,gBAAgBH,aAAa9E;AACnC,QAAI,CAACiF,eAAe;AAClB,YAAM,IAAItC,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAMuC,kBAAkBJ,aAAaI;AACrC,UAAMC,kBAAkBL,aAAaK;AAErC,QAAIvD,MAAMC,QAAQqD,eAAe,KAAKA,gBAAgBvB,SAAS,GAAG;AAChE,UAAI,CAACuB,gBAAgBjC,SAAShD,QAAQ,GAAG;AACvC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAWwC,iBAAiB;AAC1B,UAAIA,oBAAoBlF,UAAU;AAChC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAIA,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMyC,WAAUC,wBAAwB;AAAA,MAAEpF;AAAAA,MAAU8E,SAASF,WAAWE;AAAAA,IAAAA,CAAS;AACjF,WAAO;AAAA,MAAE9E;AAAAA,MAAUC,QAAQ+E;AAAAA,MAAeG,SAAAA;AAAAA,IAAAA;AAAAA,EAC5C;AAEA,QAAM7D,MAAM6C,IAAIkB,QAAQC,kBAAc;AACtC,QAAMC,eAAe5D,MAAMC,QAAQN,GAAG,IAAIA,IAAI,CAAC,IAAIA;AACnD,MAAI,CAACiE,cAAc;AACjB,UAAM,IAAI7C,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM8C,QAAsB;AAAA,IAAErB,KAAK;AAAA,MAAEW,SAAS;AAAA,IAAA;AAAA,EAAK;AACnD,QAAMW,OAAO,MAAMC,OAAOC,UAAU,UAAUH,KAAK;AACnD,QAAMT,OAAO,MAAMU,KAAKG,SAASL,cAAc;AAAA,IAAEM,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG,EAAEC,KAAAA;AAC/E,QAAMC,aAAajB,MAAMc;AACzB,QAAMA,UAAUlE,MAAMC,QAAQoE,UAAU,IAAIA,WAAWC,IAAKC,CAAAA,MAAMvD,OAAOuD,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAACL,QAAQ7C,SAAShD,QAAQ,GAAG;AAC/B,UAAM,IAAI0C,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAMyD,QAAQC,8BAA8BrB,MAAM/E,QAAQ;AAC1D,QAAMmF,UAAUkB,aAAa;AAAA,IAAErG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcY,OAAOA,MAAMzC,SAASyC,QAAQ,CAAC,OAAO;AAAA,EAAA,CAAG;AAExG,SAAO;AAAA,IAAEnG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcJ;AAAAA,EAAAA;AAC3C;AAEA,MAAMmB,iBAAiB,OAAOtG,UAAkBuG,cAA2C;AACzF,QAAMC,MAAoB;AAAA,IACxBrC,KAAK;AAAA,MACHW,SAAS;AAAA,QACPC,MAAM;AAAA,UACJG,iBAAiBlF;AAAAA,QAAAA;AAAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO0F,OAAOhF,IAAI6F,WAAWC,GAAG;AAClC;AAEA,MAAMC,kBAAkBA,CAACzG,UAAkBuG,cAA8B,GAAGvG,QAAQ,IAAIuG,SAAS;AAEjG,MAAMG,qBAAqBA,CAAC1G,UAAkBuG,cAA4B;AACxE,QAAMI,MAAMF,gBAAgBzG,UAAUuG,SAAS;AAC/C,QAAMK,QAAQrH,eAAemB,IAAIiG,GAAG;AACpC,MAAI,CAACC,MAAO;AACZC,eAAaD,KAAK;AAClBrH,iBAAesB,OAAO8F,GAAG;AAC3B;AAEA,MAAMG,wCAAwCA,CAAC9G,UAAkBuG,cAA4B;AAC3F,QAAMI,MAAMF,gBAAgBzG,UAAUuG,SAAS;AAC/C,MAAIhH,eAAewH,IAAIJ,GAAG,EAAG;AAE7B,QAAMK,QAAQC,KAAKC,IAAI,GAAGD,KAAKE,IAAI,KAAMF,KAAKG,MAAMxH,kBAAkB,CAAC,CAAC;AACxEL,iBAAekB,IAAIkG,KAAKU,WAAW,MAAM;AACvC9H,mBAAesB,OAAO8F,GAAG;AACzB,SAAKW,8BAA8BtH,UAAUuG,SAAS;AAAA,EACxD,GAAGS,KAAK,CAAC;AACX;AAEA,MAAMO,kBAAkB,OAAO;AAAA,EAC7BvH;AAAAA,EACAwH;AAAAA,EACArC;AAAAA,EACAoB;AAAAA,EACAkB;AAAAA,EACAC;AAAAA,EACAC;AASF,MAAqB;AACnB,QAAMC,SAAS,MAAMC,YAAY;AAAA,IAC/B7H;AAAAA,IACAmF;AAAAA,IACAoB;AAAAA,IACAmB;AAAAA,IACAC;AAAAA,IACA9H;AAAAA,EAAAA,CACD;AACD,QAAMmB,UAAyB;AAAA,IAC7BE,MAAM;AAAA,IACNqF;AAAAA,IACAkB;AAAAA,IACAK,MAAMF,OAAOE;AAAAA,IACb,GAAIF,OAAOG,WAAW;AAAA,MAAEA,UAAUH,OAAOG;AAAAA,IAAAA,IAAa,CAAA;AAAA,EAAC;AAGzD,aAAWC,YAAYR,iBAAiB;AACtC,UAAMtH,KAAKnB,QAAQ2B,IAAIsH,QAAQ;AAC/B,QAAI,CAAC9H,GAAI;AACTe,WAAOf,IAAIc,OAAO;AAAA,EACpB;AACF;AAEA,MAAMiH,6BAA6BA,CACjCC,kBACAC,gBACAC,iBACY;AACZ,MAAID,mBAAmBD,iBAAkB,QAAO;AAChD,SAAOE,aAAaC,qBAAqBrF,SAASkF,gBAAgB;AACpE;AAEA,MAAMI,sCAAsCA,CAC1CtI,UACAuG,cACY;AACZ,QAAMgC,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACuI,WAAY,QAAO;AAExB,aAAWC,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAASzK,WAAW;AAC5D,iBAAWqK,gBAAgBM,UAAUD,UAAU;AAC7C,YAAIR,2BAA2B1B,WAAW4B,gBAAgBC,YAAY,GAAG;AACvE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,MAAMd,gCAAgC,OAAOtH,UAAkBuG,cAAqC;AAClG,QAAMgC,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACuI,cAAc,CAACA,WAAWzH,KAAM;AAErC,aAAW0H,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAASzK,WAAW;AAC5D,iBAAW,CAAC0J,UAAUkB,GAAG,KAAKD,UAAU3K,WAAW;AACjD,YAAI,CAACkK,2BAA2B1B,WAAW4B,gBAAgBQ,GAAG,EAAG;AAEjE,cAAMnB,kBAAkB7F,MAAMF,KAAKkH,IAAIC,SAAS;AAChD,YAAI,CAACpB,gBAAgB9D,OAAQ;AAE7B,cAAMsE,WAAWR,gBAAgB,CAAC;AAClC,cAAMnH,OAAOpB,WAAWyB,IAAIsH,QAAQ;AACpC,cAAM7C,UAAU9E,MAAM8E;AACtB,YAAI,CAACA,QAAS;AAEd,YAAI;AACF,gBAAMoC,gBAAgB;AAAA,YACpBvH;AAAAA,YACAwH;AAAAA,YACArC;AAAAA,YACAoB,WAAW4B;AAAAA,YACXV;AAAAA,YACAC,OAAOiB,IAAIjB;AAAAA,YACXC,SAASgB,IAAIhB;AAAAA,UAAAA,CACd;AAAA,QACH,SAASlF,KAAK;AACZ,gBAAMoG,QAAQtF,mBAAmBd,GAAG;AACpC,gBAAMzB,UAAyB;AAAA,YAAEE,MAAM;AAAA,YAAiBqF,WAAW4B;AAAAA,YAAgBV;AAAAA,YAAUoB;AAAAA,UAAAA;AAC7F,qBAAWb,aAAYR,iBAAiB;AACtC,kBAAMtH,KAAKnB,QAAQ2B,IAAIsH,SAAQ;AAC/B,gBAAI,CAAC9H,GAAI;AACTe,mBAAOf,IAAIc,OAAO;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM8H,qBAAqB,OAAO9I,UAAkBuG,cAAqC;AACvF,QAAMwC,gBAAgBzJ,cAAcoB,IAAIV,QAAQ,yBAAShB,IAAAA;AACzDM,gBAAcmB,IAAIT,UAAU+I,aAAa;AACzC,MAAIA,cAAchC,IAAIR,SAAS,EAAG;AAElC,QAAMyC,QAAQ,MAAM1C,eAAetG,UAAUuG,SAAS;AAEtD,QAAM0C,SAASD,MAAME,MAAM,IAAI;AAAA,IAC7BC,cAAc;AAAA,EAAA,CACf;AAEDF,SAAO3I,GAAG,UAAU,MAAM;AACxBwG,0CAAsC9G,UAAUuG,SAAS;AAAA,EAC3D,CAAC;AAED0C,SAAO3I,GAAG,SAAS,MAAM;AACvBoG,uBAAmB1G,UAAUuG,SAAS;AACtC,UAAMN,MAAM3G,cAAcoB,IAAIV,QAAQ;AACtCiG,SAAKpF,OAAO0F,SAAS;AACrB,QAAIN,OAAOA,IAAInF,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,EAC1D,CAAC;AAEDiJ,SAAO3I,GAAG,SAAS,MAAM;AACvB,QAAI;AACFoG,yBAAmB1G,UAAUuG,SAAS;AACtC0C,aAAO9H,MAAAA;AAAAA,IACT,QAAQ;AAAA,IACN;AAAA,EAEJ,CAAC;AAED4H,gBAActI,IAAI8F,WAAW0C,MAAM;AACrC;AAEA,MAAMG,wBAAwBA,CAAC;AAAA,EAC7BpB;AAAAA,EACAhI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAkB;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EACAU;AAUF,MAAY;AACV,QAAME,aAAalJ,cAAcqB,IAAIV,QAAQ,yBAAShB,IAAAA;AACtDK,gBAAcoB,IAAIT,UAAUuI,UAAU;AAEtC,QAAMC,WAAWD,WAAW7H,IAAIT,MAAM,yBAASjB,IAAAA;AAC/CuJ,aAAW9H,IAAIR,QAAQuI,QAAQ;AAE/B,QAAME,YAAYF,SAAS9H,IAAI6F,SAAS,yBAASvH,IAAAA;AACjDwJ,WAAS/H,IAAI8F,WAAWmC,SAAS;AAEjC,QAAMW,WAAWX,UAAUhI,IAAI+G,QAAQ;AACvC,MAAI4B,UAAU;AACZA,aAAST,UAAUjI,IAAIqH,QAAQ;AAC/BqB,aAAShB,uBAAuB1G,MAAMF,KAAK,oBAAIjD,IAAI,CAAC,GAAG6K,SAAShB,sBAAsB,GAAGA,oBAAoB,CAAC,CAAC;AAAA,EACjH,OAAO;AACLK,cAAUjI,IAAIgH,UAAU;AAAA,MACtBC;AAAAA,MACAC;AAAAA,MACAU,sBAAsB1G,MAAMF,KAAK,IAAIjD,IAAI6J,oBAAoB,CAAC;AAAA,MAC9DO,WAAW,oBAAIpK,IAAI,CAACwJ,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAMsB,UAAUlK,oBAAoBsB,IAAIsH,QAAQ,yBAAShJ,IAAAA;AACzDI,sBAAoBqB,IAAIuH,UAAUsB,OAAO;AAEzC,QAAMC,WAAWD,QAAQ5I,IAAI6F,SAAS,yBAAS/H,IAAAA;AAC/C8K,UAAQ7I,IAAI8F,WAAWgD,QAAQ;AAC/BA,WAAS5I,IAAI8G,QAAQ;AACvB;AAEA,MAAM+B,2BAA2BA,CAAC;AAAA,EAChCxB;AAAAA,EACAhI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAkB;AAOF,MAAY;AACV,QAAMc,aAAalJ,cAAcqB,IAAIV,QAAQ;AAC7C,QAAMwI,WAAWD,YAAY7H,IAAIT,MAAM;AACvC,QAAMyI,YAAYF,UAAU9H,IAAI6F,SAAS;AACzC,QAAMoC,MAAMD,WAAWhI,IAAI+G,QAAQ;AACnC,QAAMgC,qBAAqB,oBAAIjL,IAAY,CAAC+H,WAAW,GAAIoC,KAAKN,wBAAwB,CAAA,CAAG,CAAC;AAC5F,MAAIM,KAAK;AACPA,QAAIC,UAAU/H,OAAOmH,QAAQ;AAC7B,QAAI,CAACW,IAAIC,UAAU9H,MAAM;AACvB4H,iBAAW7H,OAAO4G,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM6B,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,QAAMvH,MAAM6I,SAAS5I,IAAI6F,SAAS;AAClC,MAAI9F,KAAK;AACPA,QAAII,OAAO4G,QAAQ;AACnB,QAAI,CAAChH,IAAIK,MAAM;AACbwI,eAASzI,OAAO0F,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAImC,aAAaA,UAAU5H,SAAS,GAAG;AACrC0H,cAAU3H,OAAO0F,SAAS;AAAA,EAC5B;AAEA,MAAIiC,YAAYA,SAAS1H,SAAS,GAAG;AACnCyH,gBAAY1H,OAAOZ,MAAM;AAAA,EAC3B;AAEA,aAAWyJ,qBAAqBD,oBAAoB;AAClD,QAAInB,oCAAoCtI,UAAU0J,iBAAiB,EAAG;AAEtE,UAAMX,gBAAgBzJ,cAAcoB,IAAIV,QAAQ;AAChD,UAAMiJ,SAASF,eAAerI,IAAIgJ,iBAAiB;AACnD,QAAIT,QAAQ;AACV,UAAI;AACFA,eAAO9H,MAAAA;AAAAA,MACT,QAAQ;AAAA,MACN;AAEFuF,yBAAmB1G,UAAU0J,iBAAiB;AAC9CX,qBAAelI,OAAO6I,iBAAiB;AACvC,UAAIX,iBAAiBA,cAAcjI,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAIuI,cAAcA,WAAWzH,SAAS,EAAGzB,eAAcwB,OAAOb,QAAQ;AACtE,MAAIsJ,WAAWA,QAAQxI,SAAS,EAAG1B,qBAAoByB,OAAOmH,QAAQ;AACxE;AAEA,MAAM2B,gBAAgBA,CAAC3B,aAA2B;AAChD,QAAM3H,OAAOpB,WAAWyB,IAAIsH,QAAQ;AACpC,MAAI3H,MAAM;AACR,UAAMiJ,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,QAAIsB,SAAS;AACX,iBAAW,CAAC/C,WAAWqD,IAAI,KAAKN,QAAQvL,WAAW;AACjD,mBAAW0J,YAAYmC,KAAKnB,UAAU;AACpCe,mCAAyB;AAAA,YACvBxB;AAAAA,YACAhI,UAAUK,KAAKL;AAAAA,YACfC,QAAQI,KAAKJ;AAAAA,YACbsG;AAAAA,YACAkB;AAAAA,UAAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEArI,sBAAoByB,OAAOmH,QAAQ;AAEnC,QAAM6B,aAAa1K,cAAcuB,IAAIsH,QAAQ,KAAK,CAAA;AAClD7I,gBAAc0B,OAAOmH,QAAQ;AAC7B,aAAW8B,MAAMD,YAAY;AAC3B,QAAI;AACFC,SAAAA;AAAAA,IACF,QAAQ;AAAA,IACN;AAAA,EAEJ;AAEA/K,UAAQ8B,OAAOmH,QAAQ;AACvB/I,aAAW4B,OAAOmH,QAAQ;AAC1B9I,iBAAe2B,OAAOmH,QAAQ;AAChC;AAEA,MAAM+B,sBAAsB,OAAO;AAAA,EACjC/B;AAAAA,EACA3H;AAAAA,EACA4B;AAKF,MAAqB;AACnB,QAAM/B,KAAKnB,QAAQ2B,IAAIsH,QAAQ;AAC/B,MAAI,CAAC9H,GAAI;AAET,MAAI+B,QAAQf,SAAS,SAAS;AAC5B,UAAM8I,UAAU9K,eAAewB,IAAIsH,QAAQ;AAC3CgC,aAAS5I,SAASa,QAAQ1B,OAAO0B,QAAQjB,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAACiB,QAAQsE,aAAa,OAAOtE,QAAQsE,cAAc,SAAU;AACjE,MAAI,CAAC1G,uBAAuBtB,qBAAqBwI,IAAI9E,QAAQsE,SAAS,GAAG;AACvEtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF,YAAY;AAAA,MAAIoB,OAAO;AAAA,IAAA,CAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC5G,QAAQwF,YAAY,OAAOxF,QAAQwF,aAAa,SAAU;AAC/D,MAAIxF,QAAQwF,SAAS/D,SAASpF,kBAAmB;AAEjD,MAAI2D,QAAQf,SAAS,gBAAgB;AACnCsI,6BAAyB;AAAA,MACvBxB;AAAAA,MACAhI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,IAAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAACxF,QAAQyF,SAAS,OAAOzF,QAAQyF,UAAU,SAAU;AAEzD,QAAMC,UAAUsC,yBAAyBhI,QAAQ0F,OAAO;AACxD,QAAMxC,UAAU9E,KAAK8E;AAErB,MAAI,CAACA,QAAQ+E,IAAI,QAAQjI,QAAQsE,SAA2B,GAAG;AAC7DtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF;AAAAA,MAAUoB,OAAO;AAAA,IAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI5G,QAAQf,SAAS,kBAAkB;AACrC,UAAMmI,WAAWjK,oBAAoBsB,IAAIsH,QAAQ,GAAGtH,IAAIuB,QAAQsE,SAAS,GAAGQ,IAAI9E,QAAQwF,QAAQ,KAAK;AACrG,QAAI,CAAC4B,UAAU;AACb,UAAIc,QAAQ;AACZ,YAAMb,UAAUlK,oBAAoBsB,IAAIsH,QAAQ;AAChD,UAAIsB,SAAS;AACX,mBAAW7I,OAAO6I,QAAQb,OAAAA,YAAmBhI,IAAIK;AAAAA,MACnD;AAEA,UAAIqJ,SAASxK,2BAA2B;AACtCsB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWkB,UAAUxF,QAAQwF;AAAAA,UAAUoB,OAAO;AAAA,QAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,QAAIR,uBAAiC,CAAA;AACrC,QAAIV,QAAQyC,aAAatH,QAAW;AAClC,UAAI;AACFuF,+BAAuB,MAAMgC,oCAAoC;AAAA,UAC/DrK,UAAUK,KAAKL;AAAAA,UACfmF;AAAAA,UACAoB,WAAWtE,QAAQsE;AAAAA,UACnBoB;AAAAA,UACA9H;AAAAA,QAAAA,CACD;AAAA,MACH,SAAS4C,KAAK;AACZ,cAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWkB,UAAUxF,QAAQwF;AAAAA,UAAUoB;AAAAA,QAAAA,CAAO;AACrG;AAAA,MACF;AAAA,IACF;AAEAO,0BAAsB;AAAA,MACpBpB;AAAAA,MACAhI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,MAClBC,OAAOzF,QAAQyF;AAAAA,MACfC;AAAAA,MACAU;AAAAA,IAAAA,CACD;AAED,QAAI;AACF,YAAMiC,wCAAwB9L,IAAY,CAACyD,QAAQsE,WAAW,GAAG8B,oBAAoB,CAAC;AACtF,iBAAW9B,aAAa+D,mBAAmB;AACzC,cAAMxB,mBAAmBzI,KAAKL,UAAUuG,SAAS;AAAA,MACnD;AAAA,IACF,SAAS9D,KAAK;AACZ,YAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,aAAOf,IAAI;AAAA,QAAEgB,MAAM;AAAA,QAAiBqF,WAAWtE,QAAQsE;AAAAA,QAAWkB,UAAUxF,QAAQwF;AAAAA,QAAUoB;AAAAA,MAAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI5G,QAAQsI,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAMhD,gBAAgB;AAAA,MACpBvH,UAAUK,KAAKL;AAAAA,MACfwH,iBAAiB,CAACQ,QAAQ;AAAA,MAC1B7C;AAAAA,MACAoB,WAAWtE,QAAQsE;AAAAA,MACnBkB,UAAUxF,QAAQwF;AAAAA,MAClBC,OAAOzF,QAAQyF;AAAAA,MACfC;AAAAA,IAAAA,CACD;AAAA,EACH,SAASlF,KAAK;AACZ,UAAMoG,QAAQtF,mBAAmBd,GAAG;AACpCxB,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWkB,UAAUxF,QAAQwF;AAAAA,MAAUoB;AAAAA,IAAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM2B,UAAUA,CAAC;AAAA,EACtBC;AAAAA,EACAtM,OAAO;AAAA,EACP+F;AAAAA,EACAxE,iBAAiBgL;AAAAA,EACjB/K,2BAA2BgL;AAAAA,EAC3B/K,oBAAoBgL;AAAAA,EACpB/K,qBAAqBgL;AASvB,MAAY;AACV,MAAIjM,mBAAmBmI,IAAI0D,MAAM,EAAG;AACpC7L,qBAAmB+B,IAAI8J,MAAM;AAE7B,MAAI,OAAOC,uBAAuB,YAAYI,OAAOC,SAASL,kBAAkB,KAAKA,qBAAqB,GAAG;AAC3GhL,sBAAkBuH,KAAKG,MAAMsD,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAOC,iCAAiC,YACrCG,OAAOC,SAASJ,4BAA4B,KAC5CA,+BAA+B,GAClC;AACAhL,gCAA4BsH,KAAKG,MAAMuD,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAOC,0BAA0B,YAAYE,OAAOC,SAASH,qBAAqB,KAAKA,yBAAyB,GAAG;AACrHhL,yBAAqBqH,KAAKG,MAAMwD,qBAAqB;AAAA,EACvD;AAEA/K,wBAAsBmL,QAAQH,sBAAsB;AAEpD,QAAMI,MAAM,IAAIC,gBAAgB;AAAA,IAAEC,UAAU;AAAA,IAAMC,YAAY1L;AAAAA,EAAAA,CAAiB;AAE/E+K,SAAOnK,GAAG,WAAW,CAAC6D,KAAsB7B,QAAgB+I,SAAiB;AAC3EhJ,6BAAyBC,QAAQ,OAAO;AAAA,MACtCgJ,aAAanH,IAAIkB,QAAQkG,QAAQ;AAAA,MACjCC,YAAYrH,IAAIM,OAAO;AAAA,MACvBgH,WAAW,OAAOtH,IAAIkB,QAAQ,YAAY,MAAM,WAAWlB,IAAIkB,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF7F,gBAAYqB,OAAOsD,GAAG;AAEtB,QAAIM;AACJ,QAAI;AACFA,YAAM,IAAIiH,IAAIvH,IAAIM,OAAO,IAAI,UAAUN,IAAIkB,QAAQkG,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACNvH,iBAAW1B,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAImC,IAAIkH,aAAaxN,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAMkC,OAAO,MAAMmE,iBAAiB;AAAA,UAAEL;AAAAA,UAAKM;AAAAA,UAAKP;AAAAA,QAAAA,CAAmB;AACnE1E,oBAAYiB,IAAI0D,KAAK9D,IAAI;AAEzB4K,YAAIW,cAAczH,KAAK7B,QAAQ+I,MAAM,CAACnL,OAAkB;AACtD+K,cAAIlK,KAAK,cAAcb,IAAIiE,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS1B,KAAK;AACZ,cAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAU;AACrD,YAAIA,QAAQ4J,WAAW,sBAAsB,GAAG;AAC9C7H,qBAAW1B,QAAQL,OAAO;AAC1B;AAAA,QACF;AACA2B,qBAAatB,QAAQL,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK6J,MAAM,MAAM;AACf9H,iBAAW1B,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED2I,MAAI3K,GAAG,cAAc,CAACJ,IAAeiE,QAAyB;AAC5D,UAAM9D,OAAOb,YAAYkB,IAAIyD,GAAG;AAChC3E,gBAAYqB,OAAOsD,GAAG;AACtB,QAAI,CAAC9D,MAAM;AACT,UAAI;AACFH,WAAGiB,MAAAA;AAAAA,MACL,QAAQ;AAAA,MACN;AAEF;AAAA,IACF;AAEA,UAAM6G,WAAW+D,WAAAA;AACjBhN,YAAQ0B,IAAIuH,UAAU9H,EAAE;AACxBjB,eAAWwB,IAAIuH,UAAU3H,IAAI;AAE7B,UAAM2J,UAAU,IAAIlK,UAAU;AAAA,MAAEC,IAAIiI;AAAAA,MAAU9H;AAAAA,MAAIG;AAAAA,IAAAA,CAAM;AACxDnB,mBAAeuB,IAAIuH,UAAUgC,OAAO;AAEpC,UAAMH,aAAgC,CAAA;AACtC,eAAWrJ,WAAW1B,gBAAgB;AACpC,UAAI;AACF,cAAMkN,UAAUxL,QAAQwJ,OAAO;AAC/B,YAAI,OAAOgC,YAAY,WAAYnC,YAAWoC,KAAKD,OAAO;AAAA,MAC5D,QAAQ;AAAA,MACN;AAAA,IAEJ;AACA,QAAInC,WAAWnG,OAAQvE,eAAcsB,IAAIuH,UAAU6B,UAAU;AAE7D3J,OAAGI,GAAG,WAAW,CAACgB,QAAiB;AACjC,UAAI4K;AACJ,UAAI;AACFA,iBAASpK,cAAcR,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC4K,UAAU,OAAOA,WAAW,SAAU;AAC3C,YAAMjK,UAAUiK;AAChB,UACEjK,QAAQf,SAAS,WACde,QAAQf,SAAS,eACjBe,QAAQf,SAAS,oBACjBe,QAAQf,SAAS,eACpB;AACF,WAAK6I,oBAAoB;AAAA,QAAE/B;AAAAA,QAAU3H;AAAAA,QAAM4B;AAAAA,MAAAA,CAAmC;AAAA,IAChF,CAAC;AAED/B,OAAGI,GAAG,SAAS,MAAM;AACnBqJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAED9H,OAAGI,GAAG,SAAS,MAAM;AACnBqJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAMmE,qBAAqBA,CAAC3L,YAA6B;AAC9D1B,iBAAemN,KAAKzL,OAAO;AAC7B;AAEO,MAAM4L,wBAAwBA,CAACpM,UAAkBuG,cAA4B;AAClFO,wCAAsC9G,UAAUuG,SAAS;AAC3D;"}
+{"version":3,"file":"index.js","sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.getUnsafe(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void dispatchSubscriptionsForModel(tenantId, modelName)\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)) continue\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey ?? \"\", error: \"Model not allowed\" })\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const options = normalizeRtsQueryOptions(message.options)\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"forbidden\" })\n    return\n  }\n\n  if (message.type === \"register-query\") {\n    const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n    if (!existing) {\n      let count = 0\n      const byModel = socketSubscriptions.get(socketId)\n      if (byModel) {\n        for (const set of byModel.values()) count += set.size\n      }\n\n      if (count >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n    }\n\n    let dependencyModelNames: string[] = []\n    if (options.populate !== undefined) {\n      try {\n        dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n          tenantId: meta.tenantId,\n          ability,\n          modelName: message.modelName,\n          options,\n          allowInternalModels,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n    }\n\n    addSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n      dependencyModelNames,\n    })\n\n    try {\n      const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n      for (const modelName of modelNamesToWatch) {\n        await ensureChangeStream(meta.tenantId, modelName)\n      }\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n      return\n    }\n\n    if (message.runInitialQuery === false) {\n      return\n    }\n  }\n\n  try {\n    await runAndSendQuery({\n      tenantId: meta.tenantId,\n      targetSocketIds: [socketId],\n      ability,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n      query: message.query,\n      options,\n    })\n  } catch (err) {\n    const error = redactErrorMessage(err)\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace","QUERY_KEY_MAX_LEN","INTERNAL_MODEL_NAMES","Set","DEFAULT_MAX_PAYLOAD_BYTES","DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET","DEFAULT_DISPATCH_DEBOUNCE_MS","initializedServers","WeakSet","customHandlers","sockets","Map","socketMeta","socketWrappers","socketCleanup","socketSubscriptions","subscriptions","changeStreams","dispatchTimers","upgradeMeta","WeakMap","maxPayloadBytes","maxSubscriptionsPerSocket","dispatchDebounceMs","allowInternalModels","RtsSocket","id","tenantId","userId","ws","handlers","constructor","meta","on","event","handler","set","get","add","off","delete","size","emit","payload","sendWs","type","close","dispatch","rawToText","raw","ArrayBuffer","Buffer","from","toString","Array","isArray","concat","safeJsonParse","JSON","parse","message","readyState","send","stringify","ensureSocketErrorHandler","socket","context","listenerCount","err","Error","String","name","stack","undefined","code","includes","console","warn","remoteAddress","remotePort","localAddress","localPort","redactErrorMessage","trimmedModelList","maxLen","length","slice","unauthorized","write","end","destroy","badRequest","runSessionMiddleware","sessionMiddleware","req","Promise","resolve","reject","next","parseUpgradeMeta","url","searchParams","TENANT_ID_QUERY_PARAM","upgradeReq","sessionUser","session","user","sessionUserId","signedInTenants","currentTenantId","ability","buildAbilityFromSession","headers","USER_ID_HEADER","headerUserId","rbCtx","User","models","getGlobal","findById","tenants","tenantRoles","lean","tenantsRaw","map","t","roles","getTenantRolesFromSessionUser","buildAbility","getTenantModel","modelName","ctx","getUnsafe","makeDispatchKey","clearDispatchTimer","key","timer","clearTimeout","scheduleDispatchSubscriptionsForModel","has","delay","Math","max","min","floor","setTimeout","dispatchSubscriptionsForModel","runAndSendQuery","targetSocketIds","queryKey","query","options","result","runRtsQuery","data","pageInfo","socketId","subscriptionDependsOnModel","changedModelName","ownerModelName","subscription","dependencyModelNames","hasAnySubscriptionsDependingOnModel","tenantSubs","userSubs","values","modelSubs","sub","socketIds","error","ensureChangeStream","tenantStreams","model","stream","watch","fullDocument","addSocketSubscription","existing","byModel","querySet","removeSocketSubscription","affectedModelNames","affectedModelName","cleanupSocket","keys","cleanupFns","fn","handleClientMessage","wrapper","normalizeRtsQueryOptions","can","count","populate","resolveRtsQueryDependencyModelNames","modelNamesToWatch","runInitialQuery","initRts","server","maxPayloadBytesArg","maxSubscriptionsPerSocketArg","dispatchDebounceMsArg","allowInternalModelsArg","Number","isFinite","Boolean","wss","WebSocketServer","noServer","maxPayload","head","upgradeHost","host","upgradeUrl","userAgent","URL","pathname","handleUpgrade","startsWith","catch","randomUUID","cleanup","push","parsed","registerRtsHandler","notifyRtsModelChanged"],"mappings":";;;;;AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,4BAAAA,MAAAA,OAAAA,wBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,0BAA0B,CAAC,IAAID;AAC1D,SAAOF;AACT,GAAG,CAAA,CAAE;AC4EL,MAAMI,oBAAoB;AAE1B,MAAMC,uBAAuB,oBAAIC,IAAI,CAAC,eAAe,cAAc,CAAC;AAEpE,MAAMC,4BAA4B,OAAO;AACzC,MAAMC,uCAAuC;AAC7C,MAAMC,+BAA+B;AAErC,MAAMC,yCAAyBC,QAAAA;AAC/B,MAAMC,iBAA8B,CAAA;AAEpC,MAAMC,8BAAcC,IAAAA;AACpB,MAAMC,iCAAiBD,IAAAA;AACvB,MAAME,qCAAqBF,IAAAA;AAC3B,MAAMG,oCAAoBH,IAAAA;AAE1B,MAAMI,0CAA0BJ,IAAAA;AAChC,MAAMK,oCAAoBL,IAAAA;AAC1B,MAAMM,oCAAoBN,IAAAA;AAC1B,MAAMO,qCAAqBP,IAAAA;AAC3B,MAAMQ,kCAAkBC,QAAAA;AAExB,IAAIC,kBAAkBjB;AACtB,IAAIkB,4BAA4BjB;AAChC,IAAIkB,qBAAqBjB;AACzB,IAAIkB,sBAAsB;AAE1B,MAAMC,UAAU;AAAA,EACEC;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EAECC;AAAAA,EACAC,+BAAenB,IAAAA;AAAAA,EAEzBoB,YAAY;AAAA,IACjBL;AAAAA,IACAG;AAAAA,IACAG;AAAAA,EAAAA,GAKC;AACD,SAAKN,KAAKA;AACV,SAAKG,KAAKA;AACV,SAAKF,WAAWK,KAAKL;AACrB,SAAKC,SAASI,KAAKJ;AAAAA,EACrB;AAAA,EAEOK,GAAGC,OAAeC,SAAiD;AACxE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK,yBAAS/B,IAAAA;AAC5CiC,QAAIE,IAAIH,OAAO;AACf,SAAKL,SAASM,IAAIF,OAAOE,GAAG;AAC5B,WAAO,MAAM,KAAKG,IAAIL,OAAOC,OAAO;AAAA,EACtC;AAAA,EAEOI,IAAIL,OAAeC,SAA2C;AACnE,UAAMC,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACVA,QAAII,OAAOL,OAAO;AAClB,QAAI,CAACC,IAAIK,KAAM,MAAKX,SAASU,OAAON,KAAK;AAAA,EAC3C;AAAA,EAEOQ,KAAKR,OAAeS,SAAyB;AAClDC,WAAO,KAAKf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAASX;AAAAA,MAAOS;AAAAA,IAAAA,CAAS;AAAA,EACnD;AAAA,EAEOG,QAAc;AACnB,QAAI;AACF,WAAKjB,GAAGiB,MAAAA;AAAAA,IACV,QAAQ;AAAA,IACN;AAAA,EAEJ;AAAA,EAEOC,SAASb,OAAeS,SAAwB;AACrD,UAAMP,MAAM,KAAKN,SAASO,IAAIH,KAAK;AACnC,QAAI,CAACE,IAAK;AACV,eAAWD,WAAWC,KAAK;AACzBD,cAAQQ,OAAO;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAMK,YAAYA,CAACC,QAAyB;AAC1C,MAAI,OAAOA,QAAQ,SAAU,QAAOA;AACpC,MAAIA,eAAeC,YAAa,QAAOC,OAAOC,KAAKH,GAAG,EAAEI,SAAAA;AACxD,MAAIC,MAAMC,QAAQN,GAAG,UAAUE,OAAOK,OAAOP,GAAG,EAAEI,SAAAA;AAClD,SAAOJ,IAAII,SAAAA;AACb;AAEA,MAAMI,gBAAgBA,CAACR,QAA0BS,KAAKC,MAAMX,UAAUC,GAAG,CAAC;AAE1E,MAAML,SAASA,CAACf,IAAe+B,YAAiC;AAC9D,MAAI/B,GAAGgC,eAAe,EAAG;AACzBhC,KAAGiC,KAAKJ,KAAKK,UAAUH,OAAO,CAAC;AACjC;AAEA,MAAMI,2BAA2BA,CAACC,QAAgBC,YAAkD;AAClG,MAAID,OAAOE,cAAc,OAAO,IAAI,EAAG;AAEvCF,SAAOhC,GAAG,SAAS,CAACmC,QAAiB;AACnC,UAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAUU,OAAOF,GAAG;AAC/D,UAAMG,OAAOH,eAAeC,QAAQD,IAAIG,OAAO,OAAOH;AACtD,UAAMI,QAAQJ,eAAeC,QAAQD,IAAII,QAAQC;AACjD,UAAMC,OAAON,OAAO,OAAOA,QAAQ,YAAY,UAAUA,MAAOA,IAAYM,OAAOD;AAEnF,QAAIC,SAAS,gBAAiBA,QAAQ,QAAQd,QAAQe,SAAS,YAAY,EAAI;AAE/EC,YAAQC,KAAK,yBAAyB;AAAA,MACpCN;AAAAA,MACAG;AAAAA,MACAd;AAAAA,MACAY;AAAAA,MACAM,eAAeb,OAAOa;AAAAA,MACtBC,YAAYd,OAAOc;AAAAA,MACnBC,cAAcf,OAAOe;AAAAA,MACrBC,WAAWhB,OAAOgB;AAAAA,MAClB,GAAGf,UAAAA;AAAAA,IAAU,CACd;AAAA,EACH,CAAC;AACH;AAEA,MAAMgB,qBAAqBA,CAACd,QAAyB;AACnD,QAAMnB,MAAMmB,eAAeC,QAAQD,IAAIR,UAAU;AACjD,QAAMuB,mBAAmBlC,IAAIjD,QAAQ,kCAAkC,EAAE;AACzE,QAAMoF,SAAS;AACf,MAAID,iBAAiBE,UAAUD,OAAQ,QAAOD;AAC9C,SAAOA,iBAAiBG,MAAM,GAAGF,MAAM;AACzC;AAEA,MAAMG,eAAeA,CAACtB,QAAgBL,UAAU,mBAAyB;AACvEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,mCAAmC;AAChDvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAMC,aAAaA,CAAC1B,QAAgBL,UAAU,kBAAwB;AACpEI,2BAAyBC,MAAM;AAC/B,MAAI;AACFA,WAAOuB,MAAM,kCAAkC;AAC/CvB,WAAOuB,MAAM,UAAU5B,OAAO;AAAA,CAAM;AACpCK,WAAOwB,IAAAA;AAAAA,EACT,QAAQ;AACNxB,WAAOyB,QAAAA;AAAAA,EACT;AACF;AAEA,MAAME,uBAAuB,OAAOC,mBAAmCC,QAAuC;AAK5G,QAAM,IAAIC,QAAc,CAACC,SAASC,WAAW;AAC3C,UAAMC,OAAwB9B,CAAAA,QAAQ;AACpC,UAAIA,YAAYA,GAAG;AAAA,UACd4B,SAAAA;AAAAA,IACP;AAEAH,sBAAkBC,KAAiC,CAAA,GAAgCI,IAAI;AAAA,EACzF,CAAC;AACH;AAEA,MAAMC,mBAAmB,OAAO;AAAA,EAC9BL;AAAAA,EACAM;AAAAA,EACAP;AAKF,MAA2B;AACzB,QAAMlE,WAAWyE,IAAIC,aAAahE,IAAIiE,yBAAqB;AAC3D,MAAI,CAAC3E,UAAU;AACb,UAAM,IAAI0C,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAIwB,mBAAmB;AACrB,UAAMU,aAAaT;AACnB,QAAI;AACF,YAAMF,qBAAqBC,mBAAmBU,UAAU;AAAA,IAC1D,QAAQ;AACN,YAAM,IAAIlC,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAMmC,cAAcD,WAAWE,SAASC;AACxC,UAAMC,gBAAgBH,aAAa9E;AACnC,QAAI,CAACiF,eAAe;AAClB,YAAM,IAAItC,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAMuC,kBAAkBJ,aAAaI;AACrC,UAAMC,kBAAkBL,aAAaK;AAErC,QAAIvD,MAAMC,QAAQqD,eAAe,KAAKA,gBAAgBvB,SAAS,GAAG;AAChE,UAAI,CAACuB,gBAAgBjC,SAAShD,QAAQ,GAAG;AACvC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,WAAWwC,iBAAiB;AAC1B,UAAIA,oBAAoBlF,UAAU;AAChC,cAAM,IAAI0C,MAAM,wCAAwC;AAAA,MAC1D;AAAA,IACF,OAAO;AACL,YAAM,IAAIA,MAAM,wCAAwC;AAAA,IAC1D;AAEA,UAAMyC,WAAUC,wBAAwB;AAAA,MAAEpF;AAAAA,MAAU8E,SAASF,WAAWE;AAAAA,IAAAA,CAAS;AACjF,WAAO;AAAA,MAAE9E;AAAAA,MAAUC,QAAQ+E;AAAAA,MAAeG,SAAAA;AAAAA,IAAAA;AAAAA,EAC5C;AAEA,QAAM7D,MAAM6C,IAAIkB,QAAQC,kBAAc;AACtC,QAAMC,eAAe5D,MAAMC,QAAQN,GAAG,IAAIA,IAAI,CAAC,IAAIA;AACnD,MAAI,CAACiE,cAAc;AACjB,UAAM,IAAI7C,MAAM,gFAAgF;AAAA,EAClG;AAEA,QAAM8C,QAAsB;AAAA,IAAErB,KAAK;AAAA,MAAEW,SAAS;AAAA,IAAA;AAAA,EAAK;AACnD,QAAMW,OAAO,MAAMC,OAAOC,UAAU,UAAUH,KAAK;AACnD,QAAMT,OAAO,MAAMU,KAAKG,SAASL,cAAc;AAAA,IAAEM,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG,EAAEC,KAAAA;AAC/E,QAAMC,aAAajB,MAAMc;AACzB,QAAMA,UAAUlE,MAAMC,QAAQoE,UAAU,IAAIA,WAAWC,IAAKC,CAAAA,MAAMvD,OAAOuD,CAAC,CAAC,IAAI,CAAA;AAC/E,MAAI,CAACL,QAAQ7C,SAAShD,QAAQ,GAAG;AAC/B,UAAM,IAAI0C,MAAM,wCAAwC;AAAA,EAC1D;AAEA,QAAMyD,QAAQC,8BAA8BrB,MAAM/E,QAAQ;AAC1D,QAAMmF,UAAUkB,aAAa;AAAA,IAAErG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcY,OAAOA,MAAMzC,SAASyC,QAAQ,CAAC,OAAO;AAAA,EAAA,CAAG;AAExG,SAAO;AAAA,IAAEnG;AAAAA,IAAUC,QAAQsF;AAAAA,IAAcJ;AAAAA,EAAAA;AAC3C;AAEA,MAAMmB,iBAAiB,OAAOtG,UAAkBuG,cAA2C;AACzF,QAAMC,MAAoB;AAAA,IACxBrC,KAAK;AAAA,MACHW,SAAS;AAAA,QACPC,MAAM;AAAA,UACJG,iBAAiBlF;AAAAA,QAAAA;AAAAA,MACnB;AAAA,IACF;AAAA,EACF;AAGF,SAAO0F,OAAOe,UAAUF,WAAWC,GAAG;AACxC;AAEA,MAAME,kBAAkBA,CAAC1G,UAAkBuG,cAA8B,GAAGvG,QAAQ,IAAIuG,SAAS;AAEjG,MAAMI,qBAAqBA,CAAC3G,UAAkBuG,cAA4B;AACxE,QAAMK,MAAMF,gBAAgB1G,UAAUuG,SAAS;AAC/C,QAAMM,QAAQtH,eAAemB,IAAIkG,GAAG;AACpC,MAAI,CAACC,MAAO;AACZC,eAAaD,KAAK;AAClBtH,iBAAesB,OAAO+F,GAAG;AAC3B;AAEA,MAAMG,wCAAwCA,CAAC/G,UAAkBuG,cAA4B;AAC3F,QAAMK,MAAMF,gBAAgB1G,UAAUuG,SAAS;AAC/C,MAAIhH,eAAeyH,IAAIJ,GAAG,EAAG;AAE7B,QAAMK,QAAQC,KAAKC,IAAI,GAAGD,KAAKE,IAAI,KAAMF,KAAKG,MAAMzH,kBAAkB,CAAC,CAAC;AACxEL,iBAAekB,IAAImG,KAAKU,WAAW,MAAM;AACvC/H,mBAAesB,OAAO+F,GAAG;AACzB,SAAKW,8BAA8BvH,UAAUuG,SAAS;AAAA,EACxD,GAAGU,KAAK,CAAC;AACX;AAEA,MAAMO,kBAAkB,OAAO;AAAA,EAC7BxH;AAAAA,EACAyH;AAAAA,EACAtC;AAAAA,EACAoB;AAAAA,EACAmB;AAAAA,EACAC;AAAAA,EACAC;AASF,MAAqB;AACnB,QAAMC,SAAS,MAAMC,YAAY;AAAA,IAC/B9H;AAAAA,IACAmF;AAAAA,IACAoB;AAAAA,IACAoB;AAAAA,IACAC;AAAAA,IACA/H;AAAAA,EAAAA,CACD;AACD,QAAMmB,UAAyB;AAAA,IAC7BE,MAAM;AAAA,IACNqF;AAAAA,IACAmB;AAAAA,IACAK,MAAMF,OAAOE;AAAAA,IACb,GAAIF,OAAOG,WAAW;AAAA,MAAEA,UAAUH,OAAOG;AAAAA,IAAAA,IAAa,CAAA;AAAA,EAAC;AAGzD,aAAWC,YAAYR,iBAAiB;AACtC,UAAMvH,KAAKnB,QAAQ2B,IAAIuH,QAAQ;AAC/B,QAAI,CAAC/H,GAAI;AACTe,WAAOf,IAAIc,OAAO;AAAA,EACpB;AACF;AAEA,MAAMkH,6BAA6BA,CACjCC,kBACAC,gBACAC,iBACY;AACZ,MAAID,mBAAmBD,iBAAkB,QAAO;AAChD,SAAOE,aAAaC,qBAAqBtF,SAASmF,gBAAgB;AACpE;AAEA,MAAMI,sCAAsCA,CAC1CvI,UACAuG,cACY;AACZ,QAAMiC,aAAanJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACwI,WAAY,QAAO;AAExB,aAAWC,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAAS1K,WAAW;AAC5D,iBAAWsK,gBAAgBM,UAAUD,UAAU;AAC7C,YAAIR,2BAA2B3B,WAAW6B,gBAAgBC,YAAY,GAAG;AACvE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,MAAMd,gCAAgC,OAAOvH,UAAkBuG,cAAqC;AAClG,QAAMiC,aAAanJ,cAAcqB,IAAIV,QAAQ;AAC7C,MAAI,CAACwI,cAAc,CAACA,WAAW1H,KAAM;AAErC,aAAW2H,YAAYD,WAAWE,UAAU;AAC1C,eAAW,CAACN,gBAAgBO,SAAS,KAAKF,SAAS1K,WAAW;AAC5D,iBAAW,CAAC2J,UAAUkB,GAAG,KAAKD,UAAU5K,WAAW;AACjD,YAAI,CAACmK,2BAA2B3B,WAAW6B,gBAAgBQ,GAAG,EAAG;AAEjE,cAAMnB,kBAAkB9F,MAAMF,KAAKmH,IAAIC,SAAS;AAChD,YAAI,CAACpB,gBAAgB/D,OAAQ;AAE7B,cAAMuE,WAAWR,gBAAgB,CAAC;AAClC,cAAMpH,OAAOpB,WAAWyB,IAAIuH,QAAQ;AACpC,cAAM9C,UAAU9E,MAAM8E;AACtB,YAAI,CAACA,QAAS;AAEd,YAAI;AACF,gBAAMqC,gBAAgB;AAAA,YACpBxH;AAAAA,YACAyH;AAAAA,YACAtC;AAAAA,YACAoB,WAAW6B;AAAAA,YACXV;AAAAA,YACAC,OAAOiB,IAAIjB;AAAAA,YACXC,SAASgB,IAAIhB;AAAAA,UAAAA,CACd;AAAA,QACH,SAASnF,KAAK;AACZ,gBAAMqG,QAAQvF,mBAAmBd,GAAG;AACpC,gBAAMzB,UAAyB;AAAA,YAAEE,MAAM;AAAA,YAAiBqF,WAAW6B;AAAAA,YAAgBV;AAAAA,YAAUoB;AAAAA,UAAAA;AAC7F,qBAAWb,aAAYR,iBAAiB;AACtC,kBAAMvH,KAAKnB,QAAQ2B,IAAIuH,SAAQ;AAC/B,gBAAI,CAAC/H,GAAI;AACTe,mBAAOf,IAAIc,OAAO;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM+H,qBAAqB,OAAO/I,UAAkBuG,cAAqC;AACvF,QAAMyC,gBAAgB1J,cAAcoB,IAAIV,QAAQ,yBAAShB,IAAAA;AACzDM,gBAAcmB,IAAIT,UAAUgJ,aAAa;AACzC,MAAIA,cAAchC,IAAIT,SAAS,EAAG;AAElC,QAAM0C,QAAQ,MAAM3C,eAAetG,UAAUuG,SAAS;AAEtD,QAAM2C,SAASD,MAAME,MAAM,IAAI;AAAA,IAC7BC,cAAc;AAAA,EAAA,CACf;AAEDF,SAAO5I,GAAG,UAAU,MAAM;AACxByG,0CAAsC/G,UAAUuG,SAAS;AAAA,EAC3D,CAAC;AAED2C,SAAO5I,GAAG,SAAS,MAAM;AACvBqG,uBAAmB3G,UAAUuG,SAAS;AACtC,UAAMN,MAAM3G,cAAcoB,IAAIV,QAAQ;AACtCiG,SAAKpF,OAAO0F,SAAS;AACrB,QAAIN,OAAOA,IAAInF,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,EAC1D,CAAC;AAEDkJ,SAAO5I,GAAG,SAAS,MAAM;AACvB,QAAI;AACFqG,yBAAmB3G,UAAUuG,SAAS;AACtC2C,aAAO/H,MAAAA;AAAAA,IACT,QAAQ;AAAA,IACN;AAAA,EAEJ,CAAC;AAED6H,gBAAcvI,IAAI8F,WAAW2C,MAAM;AACrC;AAEA,MAAMG,wBAAwBA,CAAC;AAAA,EAC7BpB;AAAAA,EACAjI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAmB;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EACAU;AAUF,MAAY;AACV,QAAME,aAAanJ,cAAcqB,IAAIV,QAAQ,yBAAShB,IAAAA;AACtDK,gBAAcoB,IAAIT,UAAUwI,UAAU;AAEtC,QAAMC,WAAWD,WAAW9H,IAAIT,MAAM,yBAASjB,IAAAA;AAC/CwJ,aAAW/H,IAAIR,QAAQwI,QAAQ;AAE/B,QAAME,YAAYF,SAAS/H,IAAI6F,SAAS,yBAASvH,IAAAA;AACjDyJ,WAAShI,IAAI8F,WAAWoC,SAAS;AAEjC,QAAMW,WAAWX,UAAUjI,IAAIgH,QAAQ;AACvC,MAAI4B,UAAU;AACZA,aAAST,UAAUlI,IAAIsH,QAAQ;AAC/BqB,aAAShB,uBAAuB3G,MAAMF,KAAK,oBAAIjD,IAAI,CAAC,GAAG8K,SAAShB,sBAAsB,GAAGA,oBAAoB,CAAC,CAAC;AAAA,EACjH,OAAO;AACLK,cAAUlI,IAAIiH,UAAU;AAAA,MACtBC;AAAAA,MACAC;AAAAA,MACAU,sBAAsB3G,MAAMF,KAAK,IAAIjD,IAAI8J,oBAAoB,CAAC;AAAA,MAC9DO,WAAW,oBAAIrK,IAAI,CAACyJ,QAAQ,CAAC;AAAA,IAAA,CAC9B;AAAA,EACH;AAEA,QAAMsB,UAAUnK,oBAAoBsB,IAAIuH,QAAQ,yBAASjJ,IAAAA;AACzDI,sBAAoBqB,IAAIwH,UAAUsB,OAAO;AAEzC,QAAMC,WAAWD,QAAQ7I,IAAI6F,SAAS,yBAAS/H,IAAAA;AAC/C+K,UAAQ9I,IAAI8F,WAAWiD,QAAQ;AAC/BA,WAAS7I,IAAI+G,QAAQ;AACvB;AAEA,MAAM+B,2BAA2BA,CAAC;AAAA,EAChCxB;AAAAA,EACAjI;AAAAA,EACAC;AAAAA,EACAsG;AAAAA,EACAmB;AAOF,MAAY;AACV,QAAMc,aAAanJ,cAAcqB,IAAIV,QAAQ;AAC7C,QAAMyI,WAAWD,YAAY9H,IAAIT,MAAM;AACvC,QAAM0I,YAAYF,UAAU/H,IAAI6F,SAAS;AACzC,QAAMqC,MAAMD,WAAWjI,IAAIgH,QAAQ;AACnC,QAAMgC,qBAAqB,oBAAIlL,IAAY,CAAC+H,WAAW,GAAIqC,KAAKN,wBAAwB,CAAA,CAAG,CAAC;AAC5F,MAAIM,KAAK;AACPA,QAAIC,UAAUhI,OAAOoH,QAAQ;AAC7B,QAAI,CAACW,IAAIC,UAAU/H,MAAM;AACvB6H,iBAAW9H,OAAO6G,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM6B,UAAUnK,oBAAoBsB,IAAIuH,QAAQ;AAChD,QAAMxH,MAAM8I,SAAS7I,IAAI6F,SAAS;AAClC,MAAI9F,KAAK;AACPA,QAAII,OAAO6G,QAAQ;AACnB,QAAI,CAACjH,IAAIK,MAAM;AACbyI,eAAS1I,OAAO0F,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,MAAIoC,aAAaA,UAAU7H,SAAS,GAAG;AACrC2H,cAAU5H,OAAO0F,SAAS;AAAA,EAC5B;AAEA,MAAIkC,YAAYA,SAAS3H,SAAS,GAAG;AACnC0H,gBAAY3H,OAAOZ,MAAM;AAAA,EAC3B;AAEA,aAAW0J,qBAAqBD,oBAAoB;AAClD,QAAInB,oCAAoCvI,UAAU2J,iBAAiB,EAAG;AAEtE,UAAMX,gBAAgB1J,cAAcoB,IAAIV,QAAQ;AAChD,UAAMkJ,SAASF,eAAetI,IAAIiJ,iBAAiB;AACnD,QAAIT,QAAQ;AACV,UAAI;AACFA,eAAO/H,MAAAA;AAAAA,MACT,QAAQ;AAAA,MACN;AAEFwF,yBAAmB3G,UAAU2J,iBAAiB;AAC9CX,qBAAenI,OAAO8I,iBAAiB;AACvC,UAAIX,iBAAiBA,cAAclI,SAAS,EAAGxB,eAAcuB,OAAOb,QAAQ;AAAA,IAC9E;AAAA,EACF;AAEA,MAAIwI,cAAcA,WAAW1H,SAAS,EAAGzB,eAAcwB,OAAOb,QAAQ;AACtE,MAAIuJ,WAAWA,QAAQzI,SAAS,EAAG1B,qBAAoByB,OAAOoH,QAAQ;AACxE;AAEA,MAAM2B,gBAAgBA,CAAC3B,aAA2B;AAChD,QAAM5H,OAAOpB,WAAWyB,IAAIuH,QAAQ;AACpC,MAAI5H,MAAM;AACR,UAAMkJ,UAAUnK,oBAAoBsB,IAAIuH,QAAQ;AAChD,QAAIsB,SAAS;AACX,iBAAW,CAAChD,WAAWsD,IAAI,KAAKN,QAAQxL,WAAW;AACjD,mBAAW2J,YAAYmC,KAAKnB,UAAU;AACpCe,mCAAyB;AAAA,YACvBxB;AAAAA,YACAjI,UAAUK,KAAKL;AAAAA,YACfC,QAAQI,KAAKJ;AAAAA,YACbsG;AAAAA,YACAmB;AAAAA,UAAAA,CACD;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEAtI,sBAAoByB,OAAOoH,QAAQ;AAEnC,QAAM6B,aAAa3K,cAAcuB,IAAIuH,QAAQ,KAAK,CAAA;AAClD9I,gBAAc0B,OAAOoH,QAAQ;AAC7B,aAAW8B,MAAMD,YAAY;AAC3B,QAAI;AACFC,SAAAA;AAAAA,IACF,QAAQ;AAAA,IACN;AAAA,EAEJ;AAEAhL,UAAQ8B,OAAOoH,QAAQ;AACvBhJ,aAAW4B,OAAOoH,QAAQ;AAC1B/I,iBAAe2B,OAAOoH,QAAQ;AAChC;AAEA,MAAM+B,sBAAsB,OAAO;AAAA,EACjC/B;AAAAA,EACA5H;AAAAA,EACA4B;AAKF,MAAqB;AACnB,QAAM/B,KAAKnB,QAAQ2B,IAAIuH,QAAQ;AAC/B,MAAI,CAAC/H,GAAI;AAET,MAAI+B,QAAQf,SAAS,SAAS;AAC5B,UAAM+I,UAAU/K,eAAewB,IAAIuH,QAAQ;AAC3CgC,aAAS7I,SAASa,QAAQ1B,OAAO0B,QAAQjB,OAAO;AAChD;AAAA,EACF;AAEA,MAAI,CAACiB,QAAQsE,aAAa,OAAOtE,QAAQsE,cAAc,SAAU;AACjE,MAAI,CAAC1G,uBAAuBtB,qBAAqByI,IAAI/E,QAAQsE,SAAS,GAAG;AACvEtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWmB,UAAUzF,QAAQyF,YAAY;AAAA,MAAIoB,OAAO;AAAA,IAAA,CAAqB;AAChI;AAAA,EACF;AACA,MAAI,CAAC7G,QAAQyF,YAAY,OAAOzF,QAAQyF,aAAa,SAAU;AAC/D,MAAIzF,QAAQyF,SAAShE,SAASpF,kBAAmB;AAEjD,MAAI2D,QAAQf,SAAS,gBAAgB;AACnCuI,6BAAyB;AAAA,MACvBxB;AAAAA,MACAjI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBmB,UAAUzF,QAAQyF;AAAAA,IAAAA,CACnB;AACD;AAAA,EACF;AAEA,MAAI,CAACzF,QAAQ0F,SAAS,OAAO1F,QAAQ0F,UAAU,SAAU;AAEzD,QAAMC,UAAUsC,yBAAyBjI,QAAQ2F,OAAO;AACxD,QAAMzC,UAAU9E,KAAK8E;AAErB,MAAI,CAACA,QAAQgF,IAAI,QAAQlI,QAAQsE,SAA2B,GAAG;AAC7DtF,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWmB,UAAUzF,QAAQyF;AAAAA,MAAUoB,OAAO;AAAA,IAAA,CAAa;AAClH;AAAA,EACF;AAEA,MAAI7G,QAAQf,SAAS,kBAAkB;AACrC,UAAMoI,WAAWlK,oBAAoBsB,IAAIuH,QAAQ,GAAGvH,IAAIuB,QAAQsE,SAAS,GAAGS,IAAI/E,QAAQyF,QAAQ,KAAK;AACrG,QAAI,CAAC4B,UAAU;AACb,UAAIc,QAAQ;AACZ,YAAMb,UAAUnK,oBAAoBsB,IAAIuH,QAAQ;AAChD,UAAIsB,SAAS;AACX,mBAAW9I,OAAO8I,QAAQb,OAAAA,YAAmBjI,IAAIK;AAAAA,MACnD;AAEA,UAAIsJ,SAASzK,2BAA2B;AACtCsB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWmB,UAAUzF,QAAQyF;AAAAA,UAAUoB,OAAO;AAAA,QAAA,CAA0B;AAC/H;AAAA,MACF;AAAA,IACF;AAEA,QAAIR,uBAAiC,CAAA;AACrC,QAAIV,QAAQyC,aAAavH,QAAW;AAClC,UAAI;AACFwF,+BAAuB,MAAMgC,oCAAoC;AAAA,UAC/DtK,UAAUK,KAAKL;AAAAA,UACfmF;AAAAA,UACAoB,WAAWtE,QAAQsE;AAAAA,UACnBqB;AAAAA,UACA/H;AAAAA,QAAAA,CACD;AAAA,MACH,SAAS4C,KAAK;AACZ,cAAMqG,QAAQvF,mBAAmBd,GAAG;AACpCxB,eAAOf,IAAI;AAAA,UAAEgB,MAAM;AAAA,UAAiBqF,WAAWtE,QAAQsE;AAAAA,UAAWmB,UAAUzF,QAAQyF;AAAAA,UAAUoB;AAAAA,QAAAA,CAAO;AACrG;AAAA,MACF;AAAA,IACF;AAEAO,0BAAsB;AAAA,MACpBpB;AAAAA,MACAjI,UAAUK,KAAKL;AAAAA,MACfC,QAAQI,KAAKJ;AAAAA,MACbsG,WAAWtE,QAAQsE;AAAAA,MACnBmB,UAAUzF,QAAQyF;AAAAA,MAClBC,OAAO1F,QAAQ0F;AAAAA,MACfC;AAAAA,MACAU;AAAAA,IAAAA,CACD;AAED,QAAI;AACF,YAAMiC,wCAAwB/L,IAAY,CAACyD,QAAQsE,WAAW,GAAG+B,oBAAoB,CAAC;AACtF,iBAAW/B,aAAagE,mBAAmB;AACzC,cAAMxB,mBAAmB1I,KAAKL,UAAUuG,SAAS;AAAA,MACnD;AAAA,IACF,SAAS9D,KAAK;AACZ,YAAMqG,QAAQvF,mBAAmBd,GAAG;AACpCxB,aAAOf,IAAI;AAAA,QAAEgB,MAAM;AAAA,QAAiBqF,WAAWtE,QAAQsE;AAAAA,QAAWmB,UAAUzF,QAAQyF;AAAAA,QAAUoB;AAAAA,MAAAA,CAAO;AACrG;AAAA,IACF;AAEA,QAAI7G,QAAQuI,oBAAoB,OAAO;AACrC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAMhD,gBAAgB;AAAA,MACpBxH,UAAUK,KAAKL;AAAAA,MACfyH,iBAAiB,CAACQ,QAAQ;AAAA,MAC1B9C;AAAAA,MACAoB,WAAWtE,QAAQsE;AAAAA,MACnBmB,UAAUzF,QAAQyF;AAAAA,MAClBC,OAAO1F,QAAQ0F;AAAAA,MACfC;AAAAA,IAAAA,CACD;AAAA,EACH,SAASnF,KAAK;AACZ,UAAMqG,QAAQvF,mBAAmBd,GAAG;AACpCxB,WAAOf,IAAI;AAAA,MAAEgB,MAAM;AAAA,MAAiBqF,WAAWtE,QAAQsE;AAAAA,MAAWmB,UAAUzF,QAAQyF;AAAAA,MAAUoB;AAAAA,IAAAA,CAAO;AAAA,EACvG;AACF;AAEO,MAAM2B,UAAUA,CAAC;AAAA,EACtBC;AAAAA,EACAvM,OAAO;AAAA,EACP+F;AAAAA,EACAxE,iBAAiBiL;AAAAA,EACjBhL,2BAA2BiL;AAAAA,EAC3BhL,oBAAoBiL;AAAAA,EACpBhL,qBAAqBiL;AASvB,MAAY;AACV,MAAIlM,mBAAmBoI,IAAI0D,MAAM,EAAG;AACpC9L,qBAAmB+B,IAAI+J,MAAM;AAE7B,MAAI,OAAOC,uBAAuB,YAAYI,OAAOC,SAASL,kBAAkB,KAAKA,qBAAqB,GAAG;AAC3GjL,sBAAkBwH,KAAKG,MAAMsD,kBAAkB;AAAA,EACjD;AAEA,MACE,OAAOC,iCAAiC,YACrCG,OAAOC,SAASJ,4BAA4B,KAC5CA,+BAA+B,GAClC;AACAjL,gCAA4BuH,KAAKG,MAAMuD,4BAA4B;AAAA,EACrE;AAEA,MAAI,OAAOC,0BAA0B,YAAYE,OAAOC,SAASH,qBAAqB,KAAKA,yBAAyB,GAAG;AACrHjL,yBAAqBsH,KAAKG,MAAMwD,qBAAqB;AAAA,EACvD;AAEAhL,wBAAsBoL,QAAQH,sBAAsB;AAEpD,QAAMI,MAAM,IAAIC,gBAAgB;AAAA,IAAEC,UAAU;AAAA,IAAMC,YAAY3L;AAAAA,EAAAA,CAAiB;AAE/EgL,SAAOpK,GAAG,WAAW,CAAC6D,KAAsB7B,QAAgBgJ,SAAiB;AAC3EjJ,6BAAyBC,QAAQ,OAAO;AAAA,MACtCiJ,aAAapH,IAAIkB,QAAQmG,QAAQ;AAAA,MACjCC,YAAYtH,IAAIM,OAAO;AAAA,MACvBiH,WAAW,OAAOvH,IAAIkB,QAAQ,YAAY,MAAM,WAAWlB,IAAIkB,QAAQ,YAAY,IAAI;AAAA,IAAA,EACvF;AACF7F,gBAAYqB,OAAOsD,GAAG;AAEtB,QAAIM;AACJ,QAAI;AACFA,YAAM,IAAIkH,IAAIxH,IAAIM,OAAO,IAAI,UAAUN,IAAIkB,QAAQmG,QAAQ,WAAW,EAAE;AAAA,IAC1E,QAAQ;AACNxH,iBAAW1B,QAAQ,aAAa;AAChC;AAAA,IACF;AAEA,QAAImC,IAAImH,aAAazN,KAAM;AAE3B,UAAM,YAAW;AACf,UAAI;AACF,cAAMkC,OAAO,MAAMmE,iBAAiB;AAAA,UAAEL;AAAAA,UAAKM;AAAAA,UAAKP;AAAAA,QAAAA,CAAmB;AACnE1E,oBAAYiB,IAAI0D,KAAK9D,IAAI;AAEzB6K,YAAIW,cAAc1H,KAAK7B,QAAQgJ,MAAM,CAACpL,OAAkB;AACtDgL,cAAInK,KAAK,cAAcb,IAAIiE,GAAG;AAAA,QAChC,CAAC;AAAA,MACH,SAAS1B,KAAK;AACZ,cAAMR,UAAUQ,eAAeC,QAAQD,IAAIR,UAAU;AACrD,YAAIA,QAAQ6J,WAAW,sBAAsB,GAAG;AAC9C9H,qBAAW1B,QAAQL,OAAO;AAC1B;AAAA,QACF;AACA2B,qBAAatB,QAAQL,OAAO;AAC5B;AAAA,MACF;AAAA,IACF,GAAA,EAAK8J,MAAM,MAAM;AACf/H,iBAAW1B,QAAQ,oBAAoB;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AAED4I,MAAI5K,GAAG,cAAc,CAACJ,IAAeiE,QAAyB;AAC5D,UAAM9D,OAAOb,YAAYkB,IAAIyD,GAAG;AAChC3E,gBAAYqB,OAAOsD,GAAG;AACtB,QAAI,CAAC9D,MAAM;AACT,UAAI;AACFH,WAAGiB,MAAAA;AAAAA,MACL,QAAQ;AAAA,MACN;AAEF;AAAA,IACF;AAEA,UAAM8G,WAAW+D,WAAAA;AACjBjN,YAAQ0B,IAAIwH,UAAU/H,EAAE;AACxBjB,eAAWwB,IAAIwH,UAAU5H,IAAI;AAE7B,UAAM4J,UAAU,IAAInK,UAAU;AAAA,MAAEC,IAAIkI;AAAAA,MAAU/H;AAAAA,MAAIG;AAAAA,IAAAA,CAAM;AACxDnB,mBAAeuB,IAAIwH,UAAUgC,OAAO;AAEpC,UAAMH,aAAgC,CAAA;AACtC,eAAWtJ,WAAW1B,gBAAgB;AACpC,UAAI;AACF,cAAMmN,UAAUzL,QAAQyJ,OAAO;AAC/B,YAAI,OAAOgC,YAAY,WAAYnC,YAAWoC,KAAKD,OAAO;AAAA,MAC5D,QAAQ;AAAA,MACN;AAAA,IAEJ;AACA,QAAInC,WAAWpG,OAAQvE,eAAcsB,IAAIwH,UAAU6B,UAAU;AAE7D5J,OAAGI,GAAG,WAAW,CAACgB,QAAiB;AACjC,UAAI6K;AACJ,UAAI;AACFA,iBAASrK,cAAcR,GAAG;AAAA,MAC5B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,CAAC6K,UAAU,OAAOA,WAAW,SAAU;AAC3C,YAAMlK,UAAUkK;AAChB,UACElK,QAAQf,SAAS,WACde,QAAQf,SAAS,eACjBe,QAAQf,SAAS,oBACjBe,QAAQf,SAAS,eACpB;AACF,WAAK8I,oBAAoB;AAAA,QAAE/B;AAAAA,QAAU5H;AAAAA,QAAM4B;AAAAA,MAAAA,CAAmC;AAAA,IAChF,CAAC;AAED/B,OAAGI,GAAG,SAAS,MAAM;AACnBsJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAED/H,OAAGI,GAAG,SAAS,MAAM;AACnBsJ,oBAAc3B,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AACH;AAEO,MAAMmE,qBAAqBA,CAAC5L,YAA6B;AAC9D1B,iBAAeoN,KAAK1L,OAAO;AAC7B;AAEO,MAAM6L,wBAAwBA,CAACrM,UAAkBuG,cAA4B;AAClFQ,wCAAsC/G,UAAUuG,SAAS;AAC3D;"}

package/dist/rts/queryExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAazC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;CAC9B,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAsC9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA8BxD,CAAA;AA4RD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,cAAc,CA0DzB,CAAA"}
+{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAmH,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMlK,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAazC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;CAC9B,CAAA;AAED,eAAO,MAAM,yBAAyB,iBAAiB,CAAA;AACvD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAsC9C,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAO/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAYvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA8BxD,CAAA;AA6RD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,cAAc,CA0DzB,CAAA"}

package/dist/{shared-Dy9x-P7F.js → shared-BqZiSOmf.js}

@@ -48,14 +48,15 @@ const getTenantId = (ctx) => {
 };
 const computeSha256Hex = (data) => createHash("sha256").update(data).digest("hex");
 const normalizeSha256Hex = (value) => value.trim().toLowerCase();
-const getModelCtx = (_ctx, tenantId) => ({
+const getModelCtx = (_ctx, tenantId, ability) => ({
   req: {
     session: {
       user: {
         currentTenantId: tenantId
       }
     }
-  }
+  },
+  ability
 });
 const toBufferPayload = (payload) => {
   if (Buffer.isBuffer(payload)) return payload;
@@ -107,4 +108,4 @@ export {
   normalizeSha256Hex as n,
   toBufferPayload as t
 };
-//# sourceMappingURL=shared-Dy9x-P7F.js.map
+//# sourceMappingURL=shared-BqZiSOmf.js.map

package/dist/shared-BqZiSOmf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-BqZiSOmf.js","sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"names":["DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","id","getTenantId","rawSession","currentTenantId","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","data","createHash","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","Buffer","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","dbName","String","db","name","has","Promise","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","buildAbilityFromSession","getUploadSessionAccessQuery","action","getAccessibleByQuery"],"mappings":";;AAoBA,MAAMA,2BAA2B,IAAI,OAAO;AAC5C,MAAMC,uBAAuB,KAAK,OAAO;AAEzC,MAAMC,sCAAsC,KAAK,OAAO;AAExD,MAAMC,wBAAwB,KAAK,KAAK;AAExC,MAAMC,0CAA0BC,IAAAA;AAEhC,MAAMC,2BAA2BA,CAACC,aAAqC;AACrE,MAAI,OAAOA,aAAa,SAAU,QAAO;AACzC,QAAMC,aAAaD,SAASE,KAAAA;AAC5B,MAAI,CAACD,WAAY,QAAO;AACxB,QAAME,SAASC,OAAOH,UAAU;AAChC,MAAI,CAACG,OAAOC,SAASF,MAAM,KAAKA,UAAU,EAAG,QAAO;AACpD,SAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEO,MAAMK,oBAAoBA,MAAc;AAC7C,QAAMC,aAAaV,yBAAyBW,QAAQC,IAAIC,0BAA0B;AAClF,QAAMC,WAAWJ,cAAchB;AAC/B,SAAOa,KAAKQ,IAAIpB,sBAAsBmB,QAAQ;AAChD;AAEO,MAAME,mCAAmCA,MAAqB;AACnE,QAAMN,aAAaV,yBAAyBW,QAAQC,IAAIK,qCAAqC;AAC7F,SAAOP,cAAcd;AACvB;AAEO,MAAMsB,kBAAkBA,MAAc;AAC3C,QAAMC,aAAanB,yBAAyBW,QAAQC,IAAIQ,uBAAuB,KAAKvB;AACpF,SAAOsB,aAAa;AACtB;AAEO,MAAME,uBAAuBA,CAACC,mBAAmCA,iBAAiB,OAAO;AAEzF,MAAMC,gBAAgBA,OAAeZ,QAAQC,IAAIY,6BAA6B,IAAIrB,UAAU;AAE5F,MAAMsB,YAAYA,CAACC,QAAyC;AACjE,QAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAMC;AACnC,MAAI,OAAOJ,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAM8B,cAAcA,CAACN,QAAyC;AACnE,QAAMO,aAAaP,IAAIE,IAAIC,SAASC,MAAMI;AAC1C,QAAMC,kBAAkB,OAAOF,eAAe,WAAWA,WAAW9B,SAAS;AAE7E,QAAMiC,SAASX,UAAUC,GAAG;AAC5B,QAAMW,WAAWX,IAAIE,IAAIU,QAAQ,cAAc;AAC/C,QAAMC,gBAAgBC,MAAMC,QAAQJ,QAAQ,IAAIA,SAAS,CAAC,IAAIA;AAC9D,QAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAcpC,SAASoC,cAAcpC,KAAAA,IAAS;AAEtG,MAAI,CAACiC,UAAUM,WAAY,QAAOA;AAElC,MAAIN,eAAeD,mBAAmB;AAEtC,MAAIA,gBAAiB,QAAOA;AAE5B,SAAOO;AACT;AAEO,MAAMC,mBAAmBA,CAACC,SAAyBC,WAAW,QAAQ,EAAEC,OAAOF,IAAI,EAAEG,OAAO,KAAK;AAEjG,MAAMC,qBAAqBA,CAACC,UAA0BA,MAAM9C,KAAAA,EAAO+C,YAAAA;AAEnE,MAAMC,cAAcA,CAACC,MAAwBC,UAAkBC,aAAwC;AAAA,EAC5G1B,KAAK;AAAA,IACHC,SAAS;AAAA,MACPC,MAAM;AAAA,QACJI,iBAAiBmB;AAAAA,MAAAA;AAAAA,IACnB;AAAA,EACF;AAAA,EAEFC;AACF;AAEO,MAAMC,kBAAkBA,CAACC,YAAoC;AAClE,MAAIC,OAAOC,SAASF,OAAO,EAAG,QAAOA;AACrC,MAAIA,mBAAmBG,WAAY,QAAOF,OAAOG,KAAKJ,OAAO;AAC7D,SAAO;AACT;AAEO,MAAMK,sBAAsB,OACjCC,eACAC,gBACkB;AAClB,QAAMC,SAASC,OAAQH,eAA0DI,IAAIC,QAAQ,EAAE;AAC/F,MAAIH,UAAUlE,oBAAoBsE,IAAIJ,MAAM,EAAG;AAE/C,QAAMK,QAAQC,IAAI,CAChBR,cAAcS,iBACdR,YAAYQ,cAAAA,CAAe,CAC5B;AAED,MAAIP,OAAQlE,qBAAoB0E,IAAIR,MAAM;AAC5C;AAEA,MAAMS,qBAAqBA,CAAC9C,QAAgC;AAC1D,MAAI,OAAOA,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAMwE,mBAAmBA,CAAChD,QAAyC;AACxE,QAAMiD,YAAYF,mBAAmB/C,IAAIE,IAAIgD,IAAI,cAAc,CAAC;AAChE,MAAI,CAACD,UAAW,QAAO;AACvB,SAAOhC,iBAAiBc,OAAOG,KAAKe,SAAS,CAAC;AAChD;AAEO,MAAME,sBAAsBA,CAACnD,KAAuB2B,aAAiC;AAC1F,QAAMyB,gBAAgBJ,iBAAiBhD,GAAG;AAC1C,QAAMqD,SAASD,gBAAgB;AAAA,IAAEA;AAAAA,EAAAA,IAAkBE;AACnD,SAAOC,wBAAwB;AAAA,IAAE5B;AAAAA,IAAUxB,SAASH,IAAIE,IAAIC;AAAAA,IAASkD;AAAAA,EAAAA,CAAQ;AAC/E;AAEO,MAAMG,8BAA8BA,CACzC5B,SACA6B,WAC4BC,qBAAqB9B,SAAS6B,QAAQ,iBAAiB;"}

package/dist/uploads/api/file-uploads/handlers/completeUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completeUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/completeUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AAEnC,OAAO,EACL,KAAK,WAAW,EASjB,MAAM,WAAW,CAAA;AAiDlB,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAqR1G,CAAA"}
+{"version":3,"file":"completeUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/completeUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AAGnC,OAAO,EACL,KAAK,WAAW,EASjB,MAAM,WAAW,CAAA;AAiDlB,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAoT1G,CAAA"}

package/dist/uploads/api/file-uploads/handlers/initUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/initUpload.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EAUjB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,CA4DvG,CAAA"}
+{"version":3,"file":"initUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/initUpload.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EAWjB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,CA6DvG,CAAA"}

package/dist/uploads/api/file-uploads/postProcessors.d.ts

@@ -0,0 +1,30 @@
+export type UploadPostProcessorContext = {
+    tenantId: string;
+    uploadId: string;
+    fileId: string;
+    filename: string;
+    mimeType: string;
+    clientMimeType: string;
+    totalSize: number;
+    isPublic?: boolean;
+    userId?: string;
+    ownerKeyHash?: string;
+    inlineProcessors: string[];
+    metadata: Record<string, unknown>;
+};
+export type UploadPostProcessor = {
+    id: string;
+    version?: number;
+    match?: (ctx: UploadPostProcessorContext) => boolean;
+    process: (ctx: UploadPostProcessorContext) => Promise<unknown> | unknown;
+};
+export declare const registerUploadPostProcessor: (processor: UploadPostProcessor) => void;
+export declare const registerUploadProcessor: (processor: UploadPostProcessor) => void;
+export declare const unregisterUploadPostProcessor: (id: string) => void;
+export declare const unregisterUploadProcessor: (id: string) => void;
+export declare const clearUploadPostProcessors: () => void;
+export declare const clearUploadProcessors: () => void;
+export declare const getUploadPostProcessors: () => UploadPostProcessor[];
+export declare const getUploadProcessors: () => UploadPostProcessor[];
+export declare const runUploadPostProcessors: (ctx: UploadPostProcessorContext) => Promise<void>;
+//# sourceMappingURL=postProcessors.d.ts.map

package/dist/uploads/api/file-uploads/postProcessors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postProcessors.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/postProcessors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,0BAA0B,KAAK,OAAO,CAAA;IACpD,OAAO,EAAE,CAAC,GAAG,EAAE,0BAA0B,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;CACzE,CAAA;AAYD,eAAO,MAAM,2BAA2B,GAAI,WAAW,mBAAmB,KAAG,IAa5E,CAAA;AAED,eAAO,MAAM,uBAAuB,cAfmB,mBAAmB,KAAG,IAeX,CAAA;AAElE,eAAO,MAAM,6BAA6B,GAAI,IAAI,MAAM,KAAG,IAI1D,CAAA;AAED,eAAO,MAAM,yBAAyB,OANY,MAAM,KAAG,IAMW,CAAA;AAEtE,eAAO,MAAM,yBAAyB,QAAO,IAI5C,CAAA;AAED,eAAO,MAAM,qBAAqB,QANW,IAMiB,CAAA;AAE9D,eAAO,MAAM,uBAAuB,QAAO,mBAAmB,EAAmC,CAAA;AAEjG,eAAO,MAAM,mBAAmB,QAFW,mBAAmB,EAEJ,CAAA;AAE1D,eAAO,MAAM,uBAAuB,GAAU,KAAK,0BAA0B,KAAG,OAAO,CAAC,IAAI,CAoC3F,CAAA"}

package/dist/uploads/api/file-uploads/shared.d.ts

@@ -19,7 +19,7 @@ export declare const getUserId: (ctx: Ctx<SessionUser>) => string | null;
 export declare const getTenantId: (ctx: Ctx<SessionUser>) => string | null;
 export declare const computeSha256Hex: (data: Buffer) => string;
 export declare const normalizeSha256Hex: (value: string) => string;
-export declare const getModelCtx: (_ctx: Ctx<SessionUser>, tenantId: string) => LoadModelCtx;
+export declare const getModelCtx: (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility) => LoadModelCtx;
 export declare const toBufferPayload: (payload: unknown) => Buffer | null;
 export declare const ensureUploadIndexes: (UploadSession: Model<UploadSessionDoc>, UploadChunk: Model<UploadChunkDoc>) => Promise<void>;
 export declare const getUploadKeyHash: (ctx: Ctx<SessionUser>) => string | null;

package/dist/uploads/api/file-uploads/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAoB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAgB5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,YAQrE,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,UAI7E,CAAA;AAED,eAAO,MAAM,2BAA2B,GACtC,SAAS,UAAU,EACnB,QAAQ,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6D,CAAA;AAWtF,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAoB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAgB5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,EAAE,UAAU,UAAU,KAAG,YAS3F,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,UAI7E,CAAA;AAED,eAAO,MAAM,2BAA2B,GACtC,SAAS,UAAU,EACnB,QAAQ,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6D,CAAA;AAWtF,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}

package/dist/uploads.d.ts

@@ -1,2 +1,3 @@
 export * from './uploads/routes';
+export * from './uploads/api/file-uploads/postProcessors';
 //# sourceMappingURL=uploads.d.ts.map

package/dist/uploads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../src/uploads.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../src/uploads.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,2CAA2C,CAAA"}

package/dist/uploads.js

@@ -1,10 +1,90 @@
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-GZgk5k3c.js"), "./api/files/handler.ts": () => import("./handler-DY5UEwlw.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-3uwH4f67.js"), "./api/files/handler.ts": () => import("./handler-DnSJAQ_B.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
   return acc;
 }, {});
+const processorsById = /* @__PURE__ */ Object.create(null);
+const normalizeProcessorId = (value) => typeof value === "string" ? value.trim() : "";
+const normalizeProcessorVersion = (value) => {
+  if (typeof value !== "number") return void 0;
+  if (!Number.isInteger(value) || value < 1) return void 0;
+  return value;
+};
+const registerUploadPostProcessor = (processor) => {
+  const normalizedId = normalizeProcessorId(processor.id);
+  if (!normalizedId) {
+    throw new Error("Upload post processor id is required.");
+  }
+  const normalizedVersion = normalizeProcessorVersion(processor.version);
+  processorsById[normalizedId] = {
+    ...processor,
+    id: normalizedId,
+    ...normalizedVersion ? {
+      version: normalizedVersion
+    } : {}
+  };
+};
+const registerUploadProcessor = registerUploadPostProcessor;
+const unregisterUploadPostProcessor = (id) => {
+  const normalizedId = normalizeProcessorId(id);
+  if (!normalizedId) return;
+  delete processorsById[normalizedId];
+};
+const unregisterUploadProcessor = unregisterUploadPostProcessor;
+const clearUploadPostProcessors = () => {
+  for (const id of Object.keys(processorsById)) {
+    delete processorsById[id];
+  }
+};
+const clearUploadProcessors = clearUploadPostProcessors;
+const getUploadPostProcessors = () => Object.values(processorsById);
+const getUploadProcessors = getUploadPostProcessors;
+const runUploadPostProcessors = async (ctx) => {
+  const processors = getUploadPostProcessors();
+  if (!processors.length) return;
+  for (const processor of processors) {
+    if (processor.match) {
+      try {
+        if (!processor.match(ctx)) continue;
+      } catch (error) {
+        console.error("Upload post processor failed", {
+          processorId: processor.id,
+          processorVersion: processor.version,
+          tenantId: ctx.tenantId,
+          uploadId: ctx.uploadId,
+          fileId: ctx.fileId,
+          stage: "match",
+          error
+        });
+        continue;
+      }
+    }
+    try {
+      await processor.process(ctx);
+    } catch (error) {
+      console.error("Upload post processor failed", {
+        processorId: processor.id,
+        processorVersion: processor.version,
+        tenantId: ctx.tenantId,
+        uploadId: ctx.uploadId,
+        fileId: ctx.fileId,
+        stage: "process",
+        error
+      });
+    }
+  }
+};
 export {
-  routes
+  clearUploadPostProcessors,
+  clearUploadProcessors,
+  getUploadPostProcessors,
+  getUploadProcessors,
+  registerUploadPostProcessor,
+  registerUploadProcessor,
+  routes,
+  runUploadPostProcessors,
+  unregisterUploadPostProcessor,
+  unregisterUploadProcessor
 };
 //# sourceMappingURL=uploads.js.map

package/dist/uploads.js.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.js","sources":["../src/uploads/routes.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/uploads/api/\")] = mod\n  return acc\n}, {})\n\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace"],"mappings":"AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,iCAAAA,MAAAA,OAAAA,uBAAAA,GAAAA,0BAAAA,MAAAA,OAAAA,uBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,8BAA8B,CAAC,IAAID;AAC9D,SAAOF;AACT,GAAG,CAAA,CAAE;"}
+{"version":3,"file":"uploads.js","sources":["../src/uploads/routes.ts","../src/uploads/api/file-uploads/postProcessors.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/uploads/api/\")] = mod\n  return acc\n}, {})\n\n","export type UploadPostProcessorContext = {\n  tenantId: string\n  uploadId: string\n  fileId: string\n  filename: string\n  mimeType: string\n  clientMimeType: string\n  totalSize: number\n  isPublic?: boolean\n  userId?: string\n  ownerKeyHash?: string\n  inlineProcessors: string[]\n  metadata: Record<string, unknown>\n}\n\nexport type UploadPostProcessor = {\n  id: string\n  version?: number\n  match?: (ctx: UploadPostProcessorContext) => boolean\n  process: (ctx: UploadPostProcessorContext) => Promise<unknown> | unknown\n}\n\nconst processorsById: Record<string, UploadPostProcessor> = Object.create(null)\n\nconst normalizeProcessorId = (value: unknown): string => (typeof value === \"string\" ? value.trim() : \"\")\n\nconst normalizeProcessorVersion = (value: unknown): number | undefined => {\n  if (typeof value !== \"number\") return undefined\n  if (!Number.isInteger(value) || value < 1) return undefined\n  return value\n}\n\nexport const registerUploadPostProcessor = (processor: UploadPostProcessor): void => {\n  const normalizedId = normalizeProcessorId(processor.id)\n  if (!normalizedId) {\n    throw new Error(\"Upload post processor id is required.\")\n  }\n\n  const normalizedVersion = normalizeProcessorVersion(processor.version)\n\n  processorsById[normalizedId] = {\n    ...processor,\n    id: normalizedId,\n    ...(normalizedVersion ? { version: normalizedVersion } : {}),\n  }\n}\n\nexport const registerUploadProcessor = registerUploadPostProcessor\n\nexport const unregisterUploadPostProcessor = (id: string): void => {\n  const normalizedId = normalizeProcessorId(id)\n  if (!normalizedId) return\n  delete processorsById[normalizedId]\n}\n\nexport const unregisterUploadProcessor = unregisterUploadPostProcessor\n\nexport const clearUploadPostProcessors = (): void => {\n  for (const id of Object.keys(processorsById)) {\n    delete processorsById[id]\n  }\n}\n\nexport const clearUploadProcessors = clearUploadPostProcessors\n\nexport const getUploadPostProcessors = (): UploadPostProcessor[] => Object.values(processorsById)\n\nexport const getUploadProcessors = getUploadPostProcessors\n\nexport const runUploadPostProcessors = async (ctx: UploadPostProcessorContext): Promise<void> => {\n  const processors = getUploadPostProcessors()\n  if (!processors.length) return\n\n  for (const processor of processors) {\n    if (processor.match) {\n      try {\n        if (!processor.match(ctx)) continue\n      } catch (error) {\n        console.error(\"Upload post processor failed\", {\n          processorId: processor.id,\n          processorVersion: processor.version,\n          tenantId: ctx.tenantId,\n          uploadId: ctx.uploadId,\n          fileId: ctx.fileId,\n          stage: \"match\",\n          error,\n        })\n        continue\n      }\n    }\n\n    try {\n      await processor.process(ctx)\n    } catch (error) {\n      console.error(\"Upload post processor failed\", {\n        processorId: processor.id,\n        processorVersion: processor.version,\n        tenantId: ctx.tenantId,\n        uploadId: ctx.uploadId,\n        fileId: ctx.fileId,\n        stage: \"process\",\n        error,\n      })\n    }\n  }\n}\n"],"names":["routes","Object","entries","import","reduce","acc","path","mod","replace","processorsById","create","normalizeProcessorId","value","trim","normalizeProcessorVersion","undefined","Number","isInteger","registerUploadPostProcessor","processor","normalizedId","id","Error","normalizedVersion","version","registerUploadProcessor","unregisterUploadPostProcessor","unregisterUploadProcessor","clearUploadPostProcessors","keys","clearUploadProcessors","getUploadPostProcessors","values","getUploadProcessors","runUploadPostProcessors","ctx","processors","length","match","error","console","processorId","processorVersion","tenantId","uploadId","fileId","stage","process"],"mappings":"AAAO,MAAMA,SAASC,OAAOC,QAAQ;AAAA,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,iCAAAA,MAAAA,OAAAA,uBAAAA,GAAAA,0BAAAA,MAAAA,OAAAA,uBAAAA,EAAAA,CAAAA;AACL,CAAC,EAAEC,OAAgC,CAACC,KAAK,CAACC,MAAMC,GAAG,MAAM;AACvDF,MAAIC,KAAKE,QAAQ,UAAU,8BAA8B,CAAC,IAAID;AAC9D,SAAOF;AACT,GAAG,CAAA,CAAE;ACiBL,MAAMI,iBAAsDR,uBAAOS,OAAO,IAAI;AAE9E,MAAMC,uBAAuBA,CAACC,UAA4B,OAAOA,UAAU,WAAWA,MAAMC,SAAS;AAErG,MAAMC,4BAA4BA,CAACF,UAAuC;AACxE,MAAI,OAAOA,UAAU,SAAU,QAAOG;AACtC,MAAI,CAACC,OAAOC,UAAUL,KAAK,KAAKA,QAAQ,EAAG,QAAOG;AAClD,SAAOH;AACT;AAEO,MAAMM,8BAA8BA,CAACC,cAAyC;AACnF,QAAMC,eAAeT,qBAAqBQ,UAAUE,EAAE;AACtD,MAAI,CAACD,cAAc;AACjB,UAAM,IAAIE,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAMC,oBAAoBT,0BAA0BK,UAAUK,OAAO;AAErEf,iBAAeW,YAAY,IAAI;AAAA,IAC7B,GAAGD;AAAAA,IACHE,IAAID;AAAAA,IACJ,GAAIG,oBAAoB;AAAA,MAAEC,SAASD;AAAAA,IAAAA,IAAsB,CAAA;AAAA,EAAC;AAE9D;AAEO,MAAME,0BAA0BP;AAEhC,MAAMQ,gCAAgCA,CAACL,OAAqB;AACjE,QAAMD,eAAeT,qBAAqBU,EAAE;AAC5C,MAAI,CAACD,aAAc;AACnB,SAAOX,eAAeW,YAAY;AACpC;AAEO,MAAMO,4BAA4BD;AAElC,MAAME,4BAA4BA,MAAY;AACnD,aAAWP,MAAMpB,OAAO4B,KAAKpB,cAAc,GAAG;AAC5C,WAAOA,eAAeY,EAAE;AAAA,EAC1B;AACF;AAEO,MAAMS,wBAAwBF;AAE9B,MAAMG,0BAA0BA,MAA6B9B,OAAO+B,OAAOvB,cAAc;AAEzF,MAAMwB,sBAAsBF;AAE5B,MAAMG,0BAA0B,OAAOC,QAAmD;AAC/F,QAAMC,aAAaL,wBAAAA;AACnB,MAAI,CAACK,WAAWC,OAAQ;AAExB,aAAWlB,aAAaiB,YAAY;AAClC,QAAIjB,UAAUmB,OAAO;AACnB,UAAI;AACF,YAAI,CAACnB,UAAUmB,MAAMH,GAAG,EAAG;AAAA,MAC7B,SAASI,OAAO;AACdC,gBAAQD,MAAM,gCAAgC;AAAA,UAC5CE,aAAatB,UAAUE;AAAAA,UACvBqB,kBAAkBvB,UAAUK;AAAAA,UAC5BmB,UAAUR,IAAIQ;AAAAA,UACdC,UAAUT,IAAIS;AAAAA,UACdC,QAAQV,IAAIU;AAAAA,UACZC,OAAO;AAAA,UACPP;AAAAA,QAAAA,CACD;AACD;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACF,YAAMpB,UAAU4B,QAAQZ,GAAG;AAAA,IAC7B,SAASI,OAAO;AACdC,cAAQD,MAAM,gCAAgC;AAAA,QAC5CE,aAAatB,UAAUE;AAAAA,QACvBqB,kBAAkBvB,UAAUK;AAAAA,QAC5BmB,UAAUR,IAAIQ;AAAAA,QACdC,UAAUT,IAAIS;AAAAA,QACdC,QAAQV,IAAIU;AAAAA,QACZC,OAAO;AAAA,QACPP;AAAAA,MAAAA,CACD;AAAA,IACH;AAAA,EACF;AACF;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.516.0",
+  "version": "0.518.0",
   "type": "module",
   "files": [
     "dist"