@rpcbase/server 0.534.0 → 0.536.0

package/dist/rts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["routes","Object","entries","import","meta","glob","reduce","Record","acc","path","mod","replace","randomUUID","IncomingMessage","Server","HttpServer","Socket","RequestHandler","PaginationPageInfo","models","LoadModelCtx","buildAbility","buildAbilityFromSession","getTenantRolesFromSessionUser","AclSubjectType","AppAbility","ChangeStream","Model","WebSocketServer","RawData","WebSocket","RTS_TENANT_ID_QUERY_PARAM","TENANT_ID_QUERY_PARAM","RTS_USER_ID_HEADER","USER_ID_HEADER","normalizeRtsQueryOptions","resolveRtsQueryDependencyModelNames","runRtsCount","runRtsQuery","RtsQueryOptions","QueryOptions","JsonObject","Record","CountOptions","key","ClientMessage","type","modelName","queryKey","query","options","runInitialQuery","event","payload","ServerMessage","data","error","txnId","pageInfo","totalCount","count","SocketMeta","tenantId","userId","ability","SessionUser","id","currentTenantId","signedInTenants","HeaderUserDoc","tenants","tenantRoles","UpgradeRequest","session","user","Subscription","dependencyModelNames","socketIds","Set","CountSubscription","HandlerFn","socket","RtsSocket","QUERY_KEY_MAX_LEN","INTERNAL_MODEL_NAMES","DEFAULT_MAX_PAYLOAD_BYTES","DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET","DEFAULT_DISPATCH_DEBOUNCE_MS","initializedServers","WeakSet","customHandlers","sockets","Map","socketMeta","socketWrappers","socketCleanup","Array","socketSubscriptions","socketCountSubscriptions","subscriptions","countSubscriptions","changeStreams","dispatchTimers","ReturnType","setTimeout","upgradeMeta","WeakMap","maxPayloadBytes","maxSubscriptionsPerSocket","dispatchDebounceMs","allowInternalModels","ws","handlers","constructor","meta","on","handler","set","get","add","off","delete","size","emit","sendWs","close","dispatch","rawToText","raw","ArrayBuffer","Buffer","from","toString","isArray","concat","safeJsonParse","JSON","parse","message","readyState","send","stringify","ensureSocketErrorHandler","context","listenerCount","err","Error","String","name","stack","undefined","code","includes","console","warn","remoteAddress","remotePort","localAddress","localPort","redactErrorMessage","trimmedModelList","replace","maxLen","length","slice","unauthorized","write","end","destroy","badRequest","runSessionMiddleware","sessionMiddleware","req","Promise","MiddlewareReq","Parameters","MiddlewareRes","MiddlewareNext","resolve","reject","next","parseUpgradeMeta","url","URL","searchParams","upgradeReq","sessionUser","sessionUserId","headers","headerUserId","rbCtx","User","getGlobal","findById","lean","tenantsRaw","map","t","roles","getTenantModel","ctx","getUnsafe","makeDispatchKey","clearDispatchTimer","timer","clearTimeout","scheduleDispatchSubscriptionsForModel","has","delay","Math","max","min","floor","all","dispatchSubscriptionsForModel","dispatchCountSubscriptionsForModel","catch","runAndSendQuery","targetSocketIds","result","socketId","runAndSendCount","subscriptionDependsOnModel","changedModelName","ownerModelName","subscription","hasAnySubscriptionsDependingOnModel","tenantSubs","userSubs","values","modelSubs","entries","hasAnyCountSubscriptionsForModel","sub","targetSocketId","ensureChangeStream","tenantStreams","model","stream","watch","fullDocument","addSocketSubscription","existing","byModel","querySet","addSocketCountSubscription","removeSocketSubscription","affectedModelNames","affectedModelName","removeSocketCountSubscription","getSocketSubscriptionCount","querySubscriptionsByModel","countSubscriptionsByModel","cleanupSocket","keys","countByModel","cleanupFns","fn","handleClientMessage","wrapper","isCountMessage","sendAccessError","can","populate","modelNamesToWatch","initRts","server","path","maxPayloadBytesArg","maxSubscriptionsPerSocketArg","dispatchDebounceMsArg","allowInternalModelsArg","Number","isFinite","Boolean","wss","noServer","maxPayload","head","upgradeHost","host","upgradeUrl","userAgent","pathname","handleUpgrade","startsWith","cleanup","push","parsed","registerRtsHandler","notifyRtsModelChanged"],"sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsCount,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype CountOptions = {\n  key?: string\n}\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"run-count\"; modelName: string; queryKey: string; query: JsonObject; options?: CountOptions }\n  | {\n    type: \"register-count\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: CountOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-count\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n    totalCount?: number\n  }\n  | {\n    type: \"count-payload\"\n    modelName: string\n    queryKey: string\n    count?: number\n    error?: string\n    txnId?: string\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype CountSubscription = {\n  query: JsonObject\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst socketCountSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst countSubscriptions = new Map<string, Map<string, Map<string, Map<string, CountSubscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.getUnsafe(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void Promise.all([\n      dispatchSubscriptionsForModel(tenantId, modelName),\n      dispatchCountSubscriptionsForModel(tenantId, modelName),\n    ]).catch(() => {})\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n    ...(typeof result.totalCount === \"number\" ? { totalCount: result.totalCount } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst runAndSendCount = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n}): Promise<void> => {\n  const count = await runRtsCount({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"count-payload\",\n    modelName,\n    queryKey,\n    count,\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst hasAnyCountSubscriptionsForModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    const modelSubs = userSubs.get(modelName)\n    if (modelSubs?.size) {\n      return true\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst dispatchCountSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    const modelSubs = userSubs.get(modelName)\n    if (!modelSubs) continue\n\n    for (const [queryKey, sub] of modelSubs.entries()) {\n      const targetSocketIds = Array.from(sub.socketIds)\n      if (!targetSocketIds.length) continue\n\n      const socketId = targetSocketIds[0]\n      const meta = socketMeta.get(socketId)\n      const ability = meta?.ability\n      if (!ability) continue\n\n      try {\n        await runAndSendCount({\n          tenantId,\n          targetSocketIds,\n          ability,\n          modelName,\n          queryKey,\n          query: sub.query,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        const payload: ServerMessage = { type: \"count-payload\", modelName, queryKey, error }\n        for (const targetSocketId of targetSocketIds) {\n          const ws = sockets.get(targetSocketId)\n          if (!ws) continue\n          sendWs(ws, payload)\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst addSocketCountSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n}): void => {\n  const tenantSubs = countSubscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, CountSubscription>>>()\n  countSubscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, CountSubscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, CountSubscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketCountSubscriptions.get(socketId) ?? new Map()\n  socketCountSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (\n      hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)\n      || hasAnyCountSubscriptionsForModel(tenantId, affectedModelName)\n    ) {\n      continue\n    }\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst removeSocketCountSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketCountSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  if (!hasAnySubscriptionsDependingOnModel(tenantId, modelName) && !hasAnyCountSubscriptionsForModel(tenantId, modelName)) {\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(modelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, modelName)\n      tenantStreams?.delete(modelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) countSubscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketCountSubscriptions.delete(socketId)\n}\n\nconst getSocketSubscriptionCount = (socketId: string): number => {\n  let count = 0\n  const querySubscriptionsByModel = socketSubscriptions.get(socketId)\n  if (querySubscriptionsByModel) {\n    for (const set of querySubscriptionsByModel.values()) count += set.size\n  }\n\n  const countSubscriptionsByModel = socketCountSubscriptions.get(socketId)\n  if (countSubscriptionsByModel) {\n    for (const set of countSubscriptionsByModel.values()) count += set.size\n  }\n\n  return count\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n\n    const countByModel = socketCountSubscriptions.get(socketId)\n    if (countByModel) {\n      for (const [modelName, keys] of countByModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketCountSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n  socketCountSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  const isCountMessage =\n    message.type === \"run-count\"\n    || message.type === \"register-count\"\n    || message.type === \"remove-count\"\n  const sendAccessError = (error: string) => {\n    if (isCountMessage) {\n      sendWs(ws, { type: \"count-payload\", modelName: message.modelName ?? \"\", queryKey: message.queryKey ?? \"\", error })\n      return\n    }\n\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName ?? \"\", queryKey: message.queryKey ?? \"\", error })\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendAccessError(\"Model not allowed\")\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (message.type === \"remove-count\") {\n    removeSocketCountSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendAccessError(\"forbidden\")\n    return\n  }\n\n  if (message.type === \"register-query\" || message.type === \"run-query\") {\n    const options = normalizeRtsQueryOptions(message.options)\n    if (message.type === \"register-query\") {\n      const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n\n      let dependencyModelNames: string[] = []\n      if (options.populate !== undefined) {\n        try {\n          dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n            tenantId: meta.tenantId,\n            ability,\n            modelName: message.modelName,\n            options,\n            allowInternalModels,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n          return\n        }\n      }\n\n      addSocketSubscription({\n        socketId,\n        tenantId: meta.tenantId,\n        userId: meta.userId,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n        options,\n        dependencyModelNames,\n      })\n\n      try {\n        const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n        for (const modelName of modelNamesToWatch) {\n          await ensureChangeStream(meta.tenantId, modelName)\n        }\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n\n      if (message.runInitialQuery === false) {\n        return\n      }\n    }\n\n    try {\n      await runAndSendQuery({\n        tenantId: meta.tenantId,\n        targetSocketIds: [socketId],\n        ability,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n        options,\n      })\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n    }\n    return\n  }\n\n  if (message.type === \"register-count\" || message.type === \"run-count\") {\n    if (message.type === \"register-count\") {\n      const existing = socketCountSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n\n      addSocketCountSubscription({\n        socketId,\n        tenantId: meta.tenantId,\n        userId: meta.userId,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n      })\n\n      try {\n        await ensureChangeStream(meta.tenantId, message.modelName)\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n\n      if (message.runInitialQuery === false) {\n        return\n      }\n    }\n\n    try {\n      await runAndSendCount({\n        tenantId: meta.tenantId,\n        targetSocketIds: [socketId],\n        ability,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n      })\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n    }\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n        && message.type !== \"run-count\"\n        && message.type !== \"register-count\"\n        && message.type !== \"remove-count\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"mappings":";;;;;;AAAA,IAAaA,SAASC,OAAOC,QAAQ,EACnC,GAAGC,uBAAAA,OAAAA,EAAAA,kCAAAA,OAAAA,2BAAAA,CAAsC,EAC1C,CAAC,CAACG,QAAiCE,KAAK,CAACC,MAAMC,SAAS;AACvDF,KAAIC,KAAKE,QAAQ,UAAU,2BAA2B,IAAID;AAC1D,QAAOF;GACN,EAAE,CAAC;;;ACyGN,IAAM2E,oBAAoB;AAE1B,IAAMC,uBAAuB,IAAIN,IAAI,CAAC,eAAe,eAAe,CAAC;AAErE,IAAMO,4BAA4B,OAAO;AACzC,IAAMC,uCAAuC;AAC7C,IAAMC,+BAA+B;AAErC,IAAMC,qCAAqB,IAAIC,SAAqB;AACpD,IAAMC,iBAA8B,EAAE;AAEtC,IAAMC,0BAAU,IAAIC,KAAwB;AAC5C,IAAMC,6BAAa,IAAID,KAAyB;AAChD,IAAME,iCAAiB,IAAIF,KAAwB;AACnD,IAAMG,gCAAgB,IAAIH,KAAgC;AAE1D,IAAMK,sCAAsB,IAAIL,KAAuC;AACvE,IAAMM,2CAA2B,IAAIN,KAAuC;AAC5E,IAAMO,gCAAgB,IAAIP,KAAkE;AAC5F,IAAMQ,qCAAqB,IAAIR,KAAuE;AACtG,IAAMS,gCAAgB,IAAIT,KAAwC;AAClE,IAAMU,iCAAiB,IAAIV,KAA4C;AACvE,IAAMa,8BAAc,IAAIC,SAAsC;AAE9D,IAAIC,kBAAkBtB;AACtB,IAAIuB,4BAA4BtB;AAChC,IAAIuB,qBAAqBtB;AACzB,IAAIuB,sBAAsB;AAE1B,IAAM5B,YAAN,MAAgB;CACd;CACA;CACA;CAEA;CACA,2BAA4B,IAAIU,KAA8C;CAE9E,YAAmB,EACjB1B,IACA6C,IACAG,QAKC;AACD,OAAKhD,KAAKA;AACV,OAAK6C,KAAKA;AACV,OAAKjD,WAAWoD,KAAKpD;AACrB,OAAKC,SAASmD,KAAKnD;;CAGrB,GAAUX,OAAegE,SAAiD;EACxE,MAAMC,MAAM,KAAKL,SAASM,IAAIlE,MAAM,oBAAI,IAAI0B,KAAK;AACjDuC,MAAIE,IAAIH,QAAQ;AAChB,OAAKJ,SAASK,IAAIjE,OAAOiE,IAAI;AAC7B,eAAa,KAAKG,IAAIpE,OAAOgE,QAAQ;;CAGvC,IAAWhE,OAAegE,SAA2C;EACnE,MAAMC,MAAM,KAAKL,SAASM,IAAIlE,MAAM;AACpC,MAAI,CAACiE,IAAK;AACVA,MAAII,OAAOL,QAAQ;AACnB,MAAI,CAACC,IAAIK,KAAM,MAAKV,SAASS,OAAOrE,MAAM;;CAG5C,KAAYA,OAAeC,SAAyB;AAClDuE,SAAO,KAAKb,IAAI;GAAEjE,MAAM;GAASM;GAAOC;GAAS,CAAC;;CAGpD,QAAqB;AACnB,MAAI;AACF,QAAK0D,GAAGc,OAAO;UACT;;CAKV,SAAgBzE,OAAeC,SAAwB;EACrD,MAAMgE,MAAM,KAAKL,SAASM,IAAIlE,MAAM;AACpC,MAAI,CAACiE,IAAK;AACV,OAAK,MAAMD,WAAWC,IACpBD,SAAQ/D,QAAQ;;;AAKtB,IAAM0E,aAAaC,QAAyB;AAC1C,KAAI,OAAOA,QAAQ,SAAU,QAAOA;AACpC,KAAIA,eAAeC,YAAa,QAAOC,OAAOC,KAAKH,IAAI,CAACI,UAAU;AAClE,KAAIpC,MAAMqC,QAAQL,IAAI,CAAE,QAAOE,OAAOI,OAAON,IAAI,CAACI,UAAU;AAC5D,QAAOJ,IAAII,UAAU;;AAGvB,IAAMG,iBAAiBP,QAA0BQ,KAAKC,MAAMV,UAAUC,IAAI,CAAC;AAE3E,IAAMJ,UAAUb,IAAe2B,YAAiC;AAC9D,KAAI3B,GAAG4B,eAAe,EAAG;AACzB5B,IAAG6B,KAAKJ,KAAKK,UAAUH,QAAQ,CAAC;;AAGlC,IAAMI,4BAA4B7D,QAAgB8D,YAAkD;AAClG,KAAI9D,OAAO+D,cAAc,QAAQ,GAAG,EAAG;AAEvC/D,QAAOkC,GAAG,UAAU8B,QAAiB;EACnC,MAAMP,UAAUO,eAAeC,QAAQD,IAAIP,UAAUS,OAAOF,IAAI;EAChE,MAAMG,OAAOH,eAAeC,QAAQD,IAAIG,OAAO,OAAOH;EACtD,MAAMI,QAAQJ,eAAeC,QAAQD,IAAII,QAAQC,KAAAA;EACjD,MAAMC,OAAON,OAAO,OAAOA,QAAQ,YAAY,UAAUA,MAAOA,IAAYM,OAAOD,KAAAA;AAEnF,MAAIC,SAAS,gBAAiBA,QAAQ,QAAQb,QAAQc,SAAS,aAAc,CAAE;AAE/EC,UAAQC,KAAK,yBAAyB;GACpCN;GACAG;GACAb;GACAW;GACAM,eAAe1E,OAAO0E;GACtBC,YAAY3E,OAAO2E;GACnBC,cAAc5E,OAAO4E;GACrBC,WAAW7E,OAAO6E;GAClB,GAAGf,WAAU;GACd,CAAC;GACF;;AAGJ,IAAMgB,sBAAsBd,QAAyB;CAEnD,MAAMe,oBADMf,eAAeC,QAAQD,IAAIP,UAAU,iBACpBuB,QAAQ,kCAAkC,GAAG;CAC1E,MAAMC,SAAS;AACf,KAAIF,iBAAiBG,UAAUD,OAAQ,QAAOF;AAC9C,QAAOA,iBAAiBI,MAAM,GAAGF,OAAO;;AAG1C,IAAMG,gBAAgBpF,QAAgByD,UAAU,mBAAyB;AACvEI,0BAAyB7D,OAAO;AAChC,KAAI;AACFA,SAAOqF,MAAM,oCAAoC;AACjDrF,SAAOqF,MAAM,UAAU5B,QAAO,MAAO;AACrCzD,SAAOsF,KAAK;SACN;AACNtF,SAAOuF,SAAS;;;AAIpB,IAAMC,cAAcxF,QAAgByD,UAAU,kBAAwB;AACpEI,0BAAyB7D,OAAO;AAChC,KAAI;AACFA,SAAOqF,MAAM,mCAAmC;AAChDrF,SAAOqF,MAAM,UAAU5B,QAAO,MAAO;AACrCzD,SAAOsF,KAAK;SACN;AACNtF,SAAOuF,SAAS;;;AAIpB,IAAME,uBAAuB,OAAOC,mBAAmCC,QAAuC;AAK5G,OAAM,IAAIC,SAAeK,SAASC,WAAW;EAC3C,MAAMC,QAAwBnC,QAAQ;AACpC,OAAIA,IAAKkC,QAAOlC,IAAI;OACfiC,UAAS;;AAGhBP,oBAAkBC,KAAiC,EAAE,EAA8BQ,KAAK;GACxF;;AAGJ,IAAMC,mBAAmB,OAAO,EAC9BT,KACAU,KACAX,wBAKyB;CACzB,MAAM7G,WAAWwH,IAAIE,aAAalE,IAAItF,0BAAsB;AAC5D,KAAI,CAAC8B,SACH,OAAM,IAAIoF,MAAM,uCAAuC;AAGzD,KAAIyB,mBAAmB;EACrB,MAAMc,aAAab;AACnB,MAAI;AACF,SAAMF,qBAAqBC,mBAAmBc,WAAW;UACnD;AACN,SAAM,IAAIvC,MAAM,iCAAiC;;EAGnD,MAAMwC,cAAcD,WAAWhH,SAASC;EACxC,MAAMiH,gBAAgBD,aAAaxH;AACnC,MAAI,CAACyH,cACH,OAAM,IAAIzC,MAAM,0CAA0C;EAG5D,MAAM9E,kBAAkBsH,aAAatH;EACrC,MAAMD,kBAAkBuH,aAAavH;AAErC,MAAI6B,MAAMqC,QAAQjE,gBAAgB,IAAIA,gBAAgB+F,SAAS;OACzD,CAAC/F,gBAAgBoF,SAAS1F,SAAS,CACrC,OAAM,IAAIoF,MAAM,yCAAyC;aAElD/E;OACLA,oBAAoBL,SACtB,OAAM,IAAIoF,MAAM,yCAAyC;QAG3D,OAAM,IAAIA,MAAM,yCAAyC;AAI3D,SAAO;GAAEpF;GAAUC,QAAQ4H;GAAe3H,SAD1B1C,wBAAwB;IAAEwC;IAAUW,SAASgH,WAAWhH;IAAS,CAAC;GAC/B;;CAGrD,MAAMuD,MAAM4C,IAAIgB,QAAQ1J;CACxB,MAAM2J,eAAe7F,MAAMqC,QAAQL,IAAI,GAAGA,IAAI,KAAKA;AACnD,KAAI,CAAC6D,aACH,OAAM,IAAI3C,MAAM,iFAAiF;CAKnG,MAAMxE,OAAO,OADA,MAAMvD,OAAO6K,UAAU,UADR,EAAEpB,KAAK,EAAEnG,SAAS,MAAK,EAAG,CACF,EAC5BwH,SAASJ,cAAc;EAAEvH,SAAS;EAAGC,aAAa;EAAG,CAAC,CAAC2H,MAAM;CACrF,MAAMC,aAAazH,MAAMJ;AAEzB,KAAI,EADY0B,MAAMqC,QAAQ8D,WAAW,GAAGA,WAAWC,KAAKC,MAAMlD,OAAOkD,EAAE,CAAC,GAAG,EAAE,EACpE7C,SAAS1F,SAAS,CAC7B,OAAM,IAAIoF,MAAM,yCAAyC;CAG3D,MAAMoD,QAAQ/K,8BAA8BmD,MAAMZ,SAAS;AAG3D,QAAO;EAAEA;EAAUC,QAAQ8H;EAAc7H,SAFzB3C,aAAa;GAAEyC;GAAUC,QAAQ8H;GAAcS,OAAOA,MAAMnC,SAASmC,QAAQ,CAAC,QAAO;GAAG,CAAC;EAEvD;;AAGpD,IAAMC,iBAAiB,OAAOzI,UAAkBf,cAA2C;CACzF,MAAMyJ,MAAoB,EACxB5B,KAAK,EACHnG,SAAS,EACPC,MAAM,EACJP,iBAAiBL,UACnB,EACF,EACF,EACD;AAED,QAAO3C,OAAOsL,UAAU1J,WAAWyJ,IAAI;;AAGzC,IAAME,mBAAmB5I,UAAkBf,cAA8B,GAAGe,SAAQ,GAAIf;AAExF,IAAM4J,sBAAsB7I,UAAkBf,cAA4B;CACxE,MAAMH,MAAM8J,gBAAgB5I,UAAUf,UAAU;CAChD,MAAM6J,QAAQtG,eAAegB,IAAI1E,IAAI;AACrC,KAAI,CAACgK,MAAO;AACZC,cAAaD,MAAM;AACnBtG,gBAAemB,OAAO7E,IAAI;;AAG5B,IAAMkK,yCAAyChJ,UAAkBf,cAA4B;CAC3F,MAAMH,MAAM8J,gBAAgB5I,UAAUf,UAAU;AAChD,KAAIuD,eAAeyG,IAAInK,IAAI,CAAE;CAE7B,MAAMoK,QAAQC,KAAKC,IAAI,GAAGD,KAAKE,IAAI,KAAMF,KAAKG,MAAMvG,mBAAmB,CAAC,CAAC;AACzEP,gBAAee,IAAIzE,KAAK4D,iBAAiB;AACvCF,iBAAemB,OAAO7E,IAAI;AACrBiI,UAAQwC,IAAI,CACfC,8BAA8BxJ,UAAUf,UAAU,EAClDwK,mCAAmCzJ,UAAUf,UAAU,CACxD,CAAC,CAACyK,YAAY,GAAG;IACjBR,MAAM,CAAC;;AAGZ,IAAMS,kBAAkB,OAAO,EAC7B3J,UACA4J,iBACA1J,SACAjB,WACAC,UACAC,OACAC,cASmB;CACnB,MAAMyK,SAAS,MAAMrL,YAAY;EAC/BwB;EACAE;EACAjB;EACAE;EACAC;EACA4D;EACD,CAAC;CACF,MAAMzD,UAAyB;EAC7BP,MAAM;EACNC;EACAC;EACAO,MAAMoK,OAAOpK;EACb,GAAIoK,OAAOjK,WAAW,EAAEA,UAAUiK,OAAOjK,UAAU,GAAG,EAAE;EACxD,GAAI,OAAOiK,OAAOhK,eAAe,WAAW,EAAEA,YAAYgK,OAAOhK,YAAY,GAAG,EAAE;EACnF;AAED,MAAK,MAAMiK,YAAYF,iBAAiB;EACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,MAAI,CAAC7G,GAAI;AACTa,SAAOb,IAAI1D,QAAQ;;;AAIvB,IAAMwK,kBAAkB,OAAO,EAC7B/J,UACA4J,iBACA1J,SACAjB,WACAC,UACAC,YAQmB;CAQnB,MAAMI,UAAyB;EAC7BP,MAAM;EACNC;EACAC;EACAY,OAXY,MAAMvB,YAAY;GAC9ByB;GACAE;GACAjB;GACAE;GACA6D;GACD,CAAC;EAMD;AAED,MAAK,MAAM8G,YAAYF,iBAAiB;EACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,MAAI,CAAC7G,GAAI;AACTa,SAAOb,IAAI1D,QAAQ;;;AAIvB,IAAMyK,8BACJC,kBACAC,gBACAC,iBACY;AACZ,KAAID,mBAAmBD,iBAAkB,QAAO;AAChD,QAAOE,aAAarJ,qBAAqB4E,SAASuE,iBAAiB;;AAGrE,IAAMG,uCACJpK,UACAf,cACY;CACZ,MAAMoL,aAAahI,cAAcmB,IAAIxD,SAAS;AAC9C,KAAI,CAACqK,WAAY,QAAO;AAExB,MAAK,MAAMC,YAAYD,WAAWE,QAAQ,CACxC,MAAK,MAAM,CAACL,gBAAgBM,cAAcF,SAASG,SAAS,CAC1D,MAAK,MAAMN,gBAAgBK,UAAUD,QAAQ,CAC3C,KAAIP,2BAA2B/K,WAAWiL,gBAAgBC,aAAa,CACrE,QAAO;AAMf,QAAO;;AAGT,IAAMO,oCACJ1K,UACAf,cACY;CACZ,MAAMoL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;AACnD,KAAI,CAACqK,WAAY,QAAO;AAExB,MAAK,MAAMC,YAAYD,WAAWE,QAAQ,CAExC,KADkBD,SAAS9G,IAAIvE,UAAU,EAC1B2E,KACb,QAAO;AAIX,QAAO;;AAGT,IAAM4F,gCAAgC,OAAOxJ,UAAkBf,cAAqC;CAClG,MAAMoL,aAAahI,cAAcmB,IAAIxD,SAAS;AAC9C,KAAI,CAACqK,cAAc,CAACA,WAAWzG,KAAM;AAErC,MAAK,MAAM0G,YAAYD,WAAWE,QAAQ,CACxC,MAAK,MAAM,CAACL,gBAAgBM,cAAcF,SAASG,SAAS,CAC1D,MAAK,MAAM,CAACvL,UAAUyL,QAAQH,UAAUC,SAAS,EAAE;AACjD,MAAI,CAACT,2BAA2B/K,WAAWiL,gBAAgBS,IAAI,CAAE;EAEjE,MAAMf,kBAAkB1H,MAAMmC,KAAKsG,IAAI5J,UAAU;AACjD,MAAI,CAAC6I,gBAAgBvD,OAAQ;EAE7B,MAAMyD,WAAWF,gBAAgB;EAEjC,MAAM1J,UADO6B,WAAWyB,IAAIsG,SAAS,EACf5J;AACtB,MAAI,CAACA,QAAS;AAEd,MAAI;AACF,SAAMyJ,gBAAgB;IACpB3J;IACA4J;IACA1J;IACAjB,WAAWiL;IACXhL;IACAC,OAAOwL,IAAIxL;IACXC,SAASuL,IAAIvL;IACd,CAAC;WACK+F,KAAK;GAEZ,MAAM5F,UAAyB;IAAEP,MAAM;IAAiBC,WAAWiL;IAAgBhL;IAAUQ,OAD/EuG,mBAAmBd,IAAI;IAC+D;AACpG,QAAK,MAAM2E,YAAYF,iBAAiB;IACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,QAAI,CAAC7G,GAAI;AACTa,WAAOb,IAAI1D,QAAQ;;;;;AAQ/B,IAAMkK,qCAAqC,OAAOzJ,UAAkBf,cAAqC;CACvG,MAAMoL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;AACnD,KAAI,CAACqK,cAAc,CAACA,WAAWzG,KAAM;AAErC,MAAK,MAAM0G,YAAYD,WAAWE,QAAQ,EAAE;EAC1C,MAAMC,YAAYF,SAAS9G,IAAIvE,UAAU;AACzC,MAAI,CAACuL,UAAW;AAEhB,OAAK,MAAM,CAACtL,UAAUyL,QAAQH,UAAUC,SAAS,EAAE;GACjD,MAAMb,kBAAkB1H,MAAMmC,KAAKsG,IAAI5J,UAAU;AACjD,OAAI,CAAC6I,gBAAgBvD,OAAQ;GAE7B,MAAMyD,WAAWF,gBAAgB;GAEjC,MAAM1J,UADO6B,WAAWyB,IAAIsG,SAAS,EACf5J;AACtB,OAAI,CAACA,QAAS;AAEd,OAAI;AACF,UAAM6J,gBAAgB;KACpB/J;KACA4J;KACA1J;KACAjB;KACAC;KACAC,OAAOwL,IAAIxL;KACZ,CAAC;YACKgG,KAAK;IAEZ,MAAM5F,UAAyB;KAAEP,MAAM;KAAiBC;KAAWC;KAAUQ,OAD/DuG,mBAAmBd,IAAI;KAC+C;AACpF,SAAK,MAAMyF,kBAAkBhB,iBAAiB;KAC5C,MAAM3G,KAAKpB,QAAQ2B,IAAIoH,eAAe;AACtC,SAAI,CAAC3H,GAAI;AACTa,YAAOb,IAAI1D,QAAQ;;;;;;AAO7B,IAAMsL,qBAAqB,OAAO7K,UAAkBf,cAAqC;CACvF,MAAM6L,gBAAgBvI,cAAciB,IAAIxD,SAAS,oBAAI,IAAI8B,KAAK;AAC9DS,eAAcgB,IAAIvD,UAAU8K,cAAc;AAC1C,KAAIA,cAAc7B,IAAIhK,UAAU,CAAE;CAIlC,MAAM+L,UAFQ,MAAMvC,eAAezI,UAAUf,UAAU,EAElCgM,MAAM,EAAE,EAAE,EAC7BC,cAAc,gBACf,CAAC;AAEFF,QAAO3H,GAAG,gBAAgB;AACxB2F,wCAAsChJ,UAAUf,UAAU;GAC1D;AAEF+L,QAAO3H,GAAG,eAAe;AACvBwF,qBAAmB7I,UAAUf,UAAU;EACvC,MAAMqJ,MAAM/F,cAAciB,IAAIxD,SAAS;AACvCsI,OAAK3E,OAAO1E,UAAU;AACtB,MAAIqJ,OAAOA,IAAI1E,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;GACzD;AAEFgL,QAAO3H,GAAG,eAAe;AACvB,MAAI;AACFwF,sBAAmB7I,UAAUf,UAAU;AACvC+L,UAAOjH,OAAO;UACR;GAGR;AAEF+G,eAAcvH,IAAItE,WAAW+L,OAAO;;AAGtC,IAAMG,yBAAyB,EAC7BrB,UACA9J,UACAC,QACAhB,WACAC,UACAC,OACAC,SACA0B,2BAUU;CACV,MAAMuJ,aAAahI,cAAcmB,IAAIxD,SAAS,oBAAI,IAAI8B,KAAqD;AAC3GO,eAAckB,IAAIvD,UAAUqK,WAAW;CAEvC,MAAMC,WAAWD,WAAW7G,IAAIvD,OAAO,oBAAI,IAAI6B,KAAwC;AACvFuI,YAAW9G,IAAItD,QAAQqK,SAAS;CAEhC,MAAME,YAAYF,SAAS9G,IAAIvE,UAAU,oBAAI,IAAI6C,KAA2B;AAC5EwI,UAAS/G,IAAItE,WAAWuL,UAAU;CAElC,MAAMY,WAAWZ,UAAUhH,IAAItE,SAAS;AACxC,KAAIkM,UAAU;AACZA,WAASrK,UAAU0C,IAAIqG,SAAS;AAChCsB,WAAStK,uBAAuBoB,MAAMmC,KAAK,IAAIrD,IAAI,CAAC,GAAGoK,SAAStK,sBAAsB,GAAGA,qBAAqB,CAAC,CAAC;OAEhH0J,WAAUjH,IAAIrE,UAAU;EACtBC;EACAC;EACA0B,sBAAsBoB,MAAMmC,KAAK,IAAIrD,IAAIF,qBAAqB,CAAC;EAC/DC,WAAW,IAAIC,IAAI,CAAC8I,SAAS,CAAA;EAC9B,CAAC;CAGJ,MAAMuB,UAAUlJ,oBAAoBqB,IAAIsG,SAAS,oBAAI,IAAIhI,KAAK;AAC9DK,qBAAoBoB,IAAIuG,UAAUuB,QAAQ;CAE1C,MAAMC,WAAWD,QAAQ7H,IAAIvE,UAAU,oBAAI,IAAI+B,KAAK;AACpDqK,SAAQ9H,IAAItE,WAAWqM,SAAS;AAChCA,UAAS7H,IAAIvE,SAAS;;AAGxB,IAAMqM,8BAA8B,EAClCzB,UACA9J,UACAC,QACAhB,WACAC,UACAC,YAQU;CACV,MAAMkL,aAAa/H,mBAAmBkB,IAAIxD,SAAS,oBAAI,IAAI8B,KAA0D;AACrHQ,oBAAmBiB,IAAIvD,UAAUqK,WAAW;CAE5C,MAAMC,WAAWD,WAAW7G,IAAIvD,OAAO,oBAAI,IAAI6B,KAA6C;AAC5FuI,YAAW9G,IAAItD,QAAQqK,SAAS;CAEhC,MAAME,YAAYF,SAAS9G,IAAIvE,UAAU,oBAAI,IAAI6C,KAAgC;AACjFwI,UAAS/G,IAAItE,WAAWuL,UAAU;CAElC,MAAMY,WAAWZ,UAAUhH,IAAItE,SAAS;AACxC,KAAIkM,SACFA,UAASrK,UAAU0C,IAAIqG,SAAS;KAEhCU,WAAUjH,IAAIrE,UAAU;EACtBC;EACA4B,WAAW,IAAIC,IAAI,CAAC8I,SAAS,CAAA;EAC9B,CAAC;CAGJ,MAAMuB,UAAUjJ,yBAAyBoB,IAAIsG,SAAS,oBAAI,IAAIhI,KAAK;AACnEM,0BAAyBmB,IAAIuG,UAAUuB,QAAQ;CAE/C,MAAMC,WAAWD,QAAQ7H,IAAIvE,UAAU,oBAAI,IAAI+B,KAAK;AACpDqK,SAAQ9H,IAAItE,WAAWqM,SAAS;AAChCA,UAAS7H,IAAIvE,SAAS;;AAGxB,IAAMsM,4BAA4B,EAChC1B,UACA9J,UACAC,QACAhB,WACAC,eAOU;CACV,MAAMmL,aAAahI,cAAcmB,IAAIxD,SAAS;CAC9C,MAAMsK,WAAWD,YAAY7G,IAAIvD,OAAO;CACxC,MAAMuK,YAAYF,UAAU9G,IAAIvE,UAAU;CAC1C,MAAM0L,MAAMH,WAAWhH,IAAItE,SAAS;CACpC,MAAMuM,qBAAqB,IAAIzK,IAAY,CAAC/B,WAAW,GAAI0L,KAAK7J,wBAAwB,EAAE,CAAE,CAAC;AAC7F,KAAI6J,KAAK;AACPA,MAAI5J,UAAU4C,OAAOmG,SAAS;AAC9B,MAAI,CAACa,IAAI5J,UAAU6C,KACjB4G,YAAW7G,OAAOzE,SAAS;;CAI/B,MAAMmM,UAAUlJ,oBAAoBqB,IAAIsG,SAAS;CACjD,MAAMvG,MAAM8H,SAAS7H,IAAIvE,UAAU;AACnC,KAAIsE,KAAK;AACPA,MAAII,OAAOzE,SAAS;AACpB,MAAI,CAACqE,IAAIK,KACPyH,UAAS1H,OAAO1E,UAAU;;AAI9B,KAAIuL,aAAaA,UAAU5G,SAAS,EAClC0G,WAAU3G,OAAO1E,UAAU;AAG7B,KAAIqL,YAAYA,SAAS1G,SAAS,EAChCyG,aAAY1G,OAAO1D,OAAO;AAG5B,MAAK,MAAMyL,qBAAqBD,oBAAoB;AAClD,MACErB,oCAAoCpK,UAAU0L,kBAAkB,IAC7DhB,iCAAiC1K,UAAU0L,kBAAkB,CAEhE;EAGF,MAAMZ,gBAAgBvI,cAAciB,IAAIxD,SAAS;EACjD,MAAMgL,SAASF,eAAetH,IAAIkI,kBAAkB;AACpD,MAAIV,QAAQ;AACV,OAAI;AACFA,WAAOjH,OAAO;WACR;AAGR8E,sBAAmB7I,UAAU0L,kBAAkB;AAC/CZ,kBAAenH,OAAO+H,kBAAkB;AACxC,OAAIZ,iBAAiBA,cAAclH,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;;;AAIjF,KAAIqK,cAAcA,WAAWzG,SAAS,EAAGvB,eAAcsB,OAAO3D,SAAS;AACvE,KAAIqL,WAAWA,QAAQzH,SAAS,EAAGzB,qBAAoBwB,OAAOmG,SAAS;;AAGzE,IAAM6B,iCAAiC,EACrC7B,UACA9J,UACAC,QACAhB,WACAC,eAOU;CACV,MAAMmL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;CACnD,MAAMsK,WAAWD,YAAY7G,IAAIvD,OAAO;CACxC,MAAMuK,YAAYF,UAAU9G,IAAIvE,UAAU;CAC1C,MAAM0L,MAAMH,WAAWhH,IAAItE,SAAS;AACpC,KAAIyL,KAAK;AACPA,MAAI5J,UAAU4C,OAAOmG,SAAS;AAC9B,MAAI,CAACa,IAAI5J,UAAU6C,KACjB4G,YAAW7G,OAAOzE,SAAS;;CAI/B,MAAMmM,UAAUjJ,yBAAyBoB,IAAIsG,SAAS;CACtD,MAAMvG,MAAM8H,SAAS7H,IAAIvE,UAAU;AACnC,KAAIsE,KAAK;AACPA,MAAII,OAAOzE,SAAS;AACpB,MAAI,CAACqE,IAAIK,KACPyH,UAAS1H,OAAO1E,UAAU;;AAI9B,KAAIuL,aAAaA,UAAU5G,SAAS,EAClC0G,WAAU3G,OAAO1E,UAAU;AAG7B,KAAIqL,YAAYA,SAAS1G,SAAS,EAChCyG,aAAY1G,OAAO1D,OAAO;AAG5B,KAAI,CAACmK,oCAAoCpK,UAAUf,UAAU,IAAI,CAACyL,iCAAiC1K,UAAUf,UAAU,EAAE;EACvH,MAAM6L,gBAAgBvI,cAAciB,IAAIxD,SAAS;EACjD,MAAMgL,SAASF,eAAetH,IAAIvE,UAAU;AAC5C,MAAI+L,QAAQ;AACV,OAAI;AACFA,WAAOjH,OAAO;WACR;AAGR8E,sBAAmB7I,UAAUf,UAAU;AACvC6L,kBAAenH,OAAO1E,UAAU;AAChC,OAAI6L,iBAAiBA,cAAclH,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;;;AAIjF,KAAIqK,cAAcA,WAAWzG,SAAS,EAAGtB,oBAAmBqB,OAAO3D,SAAS;AAC5E,KAAIqL,WAAWA,QAAQzH,SAAS,EAAGxB,0BAAyBuB,OAAOmG,SAAS;;AAG9E,IAAM8B,8BAA8B9B,aAA6B;CAC/D,IAAIhK,QAAQ;CACZ,MAAM+L,4BAA4B1J,oBAAoBqB,IAAIsG,SAAS;AACnE,KAAI+B,0BACF,MAAK,MAAMtI,OAAOsI,0BAA0BtB,QAAQ,CAAEzK,UAASyD,IAAIK;CAGrE,MAAMkI,4BAA4B1J,yBAAyBoB,IAAIsG,SAAS;AACxE,KAAIgC,0BACF,MAAK,MAAMvI,OAAOuI,0BAA0BvB,QAAQ,CAAEzK,UAASyD,IAAIK;AAGrE,QAAO9D;;AAGT,IAAMiM,iBAAiBjC,aAA2B;CAChD,MAAM1G,OAAOrB,WAAWyB,IAAIsG,SAAS;AACrC,KAAI1G,MAAM;EACR,MAAMiI,UAAUlJ,oBAAoBqB,IAAIsG,SAAS;AACjD,MAAIuB,QACF,MAAK,MAAM,CAACpM,WAAW+M,SAASX,QAAQZ,SAAS,CAC/C,MAAK,MAAMvL,YAAY8M,KAAKzB,QAAQ,CAClCiB,0BAAyB;GACvB1B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB;GACAC;GACD,CAAC;EAKR,MAAM+M,eAAe7J,yBAAyBoB,IAAIsG,SAAS;AAC3D,MAAImC,aACF,MAAK,MAAM,CAAChN,WAAW+M,SAASC,aAAaxB,SAAS,CACpD,MAAK,MAAMvL,YAAY8M,KAAKzB,QAAQ,CAClCoB,+BAA8B;GAC5B7B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB;GACAC;GACD,CAAC;;AAMViD,qBAAoBwB,OAAOmG,SAAS;AACpC1H,0BAAyBuB,OAAOmG,SAAS;CAEzC,MAAMoC,aAAajK,cAAcuB,IAAIsG,SAAS,IAAI,EAAE;AACpD7H,eAAc0B,OAAOmG,SAAS;AAC9B,MAAK,MAAMqC,MAAMD,WACf,KAAI;AACFC,MAAI;SACE;AAKVtK,SAAQ8B,OAAOmG,SAAS;AACxB/H,YAAW4B,OAAOmG,SAAS;AAC3B9H,gBAAe2B,OAAOmG,SAAS;;AAGjC,IAAMsC,sBAAsB,OAAO,EACjCtC,UACA1G,MACAwB,cAKmB;CACnB,MAAM3B,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,KAAI,CAAC7G,GAAI;AAET,KAAI2B,QAAQ5F,SAAS,SAAS;AACZgD,iBAAewB,IAAIsG,SAAS,EACnC9F,SAASY,QAAQtF,OAAOsF,QAAQrF,QAAQ;AACjD;;CAGF,MAAM+M,iBACJ1H,QAAQ5F,SAAS,eACd4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS;CACtB,MAAMuN,mBAAmB7M,UAAkB;AACzC,MAAI4M,gBAAgB;AAClBxI,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F,aAAa;IAAIC,UAAU0F,QAAQ1F,YAAY;IAAIQ;IAAO,CAAC;AAClH;;AAGFoE,SAAOb,IAAI;GAAEjE,MAAM;GAAiBC,WAAW2F,QAAQ3F,aAAa;GAAIC,UAAU0F,QAAQ1F,YAAY;GAAIQ;GAAO,CAAC;;AAGpH,KAAI,CAACkF,QAAQ3F,aAAa,OAAO2F,QAAQ3F,cAAc,SAAU;AACjE,KAAI,CAAC+D,uBAAuB1B,qBAAqB2H,IAAIrE,QAAQ3F,UAAU,EAAE;AACvEsN,kBAAgB,oBAAoB;AACpC;;AAEF,KAAI,CAAC3H,QAAQ1F,YAAY,OAAO0F,QAAQ1F,aAAa,SAAU;AAC/D,KAAI0F,QAAQ1F,SAASmH,SAAShF,kBAAmB;AAEjD,KAAIuD,QAAQ5F,SAAS,gBAAgB;AACnCwM,2BAAyB;GACvB1B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB,WAAW2F,QAAQ3F;GACnBC,UAAU0F,QAAQ1F;GACnB,CAAC;AACF;;AAGF,KAAI0F,QAAQ5F,SAAS,gBAAgB;AACnC2M,gCAA8B;GAC5B7B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB,WAAW2F,QAAQ3F;GACnBC,UAAU0F,QAAQ1F;GACnB,CAAC;AACF;;AAGF,KAAI,CAAC0F,QAAQzF,SAAS,OAAOyF,QAAQzF,UAAU,SAAU;CAEzD,MAAMe,UAAUkD,KAAKlD;AAErB,KAAI,CAACA,QAAQsM,IAAI,QAAQ5H,QAAQ3F,UAA4B,EAAE;AAC7DsN,kBAAgB,YAAY;AAC5B;;AAGF,KAAI3H,QAAQ5F,SAAS,oBAAoB4F,QAAQ5F,SAAS,aAAa;EACrE,MAAMI,UAAUf,yBAAyBuG,QAAQxF,QAAQ;AACzD,MAAIwF,QAAQ5F,SAAS,kBAAkB;AAErC,OAAI,EADamD,oBAAoBqB,IAAIsG,SAAS,EAAEtG,IAAIoB,QAAQ3F,UAAU,EAAEgK,IAAIrE,QAAQ1F,SAAS,IAAI,UACpF0M,2BAA2B9B,SAAS,IAAIhH,2BAA2B;AAClFgB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ,OAAO;KAA0B,CAAC;AAChI;;GAGF,IAAIoB,uBAAiC,EAAE;AACvC,OAAI1B,QAAQqN,aAAajH,KAAAA,EACvB,KAAI;AACF1E,2BAAuB,MAAMxC,oCAAoC;KAC/D0B,UAAUoD,KAAKpD;KACfE;KACAjB,WAAW2F,QAAQ3F;KACnBG;KACA4D;KACD,CAAC;YACKmC,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAIJyL,yBAAsB;IACpBrB;IACA9J,UAAUoD,KAAKpD;IACfC,QAAQmD,KAAKnD;IACbhB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IACfC;IACA0B;IACD,CAAC;AAEF,OAAI;IACF,MAAM4L,oBAAoB,IAAI1L,IAAY,CAAC4D,QAAQ3F,WAAW,GAAG6B,qBAAqB,CAAC;AACvF,SAAK,MAAM7B,aAAayN,kBACtB,OAAM7B,mBAAmBzH,KAAKpD,UAAUf,UAAU;YAE7CkG,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAGF,OAAIkF,QAAQvF,oBAAoB,MAC9B;;AAIJ,MAAI;AACF,SAAMsK,gBAAgB;IACpB3J,UAAUoD,KAAKpD;IACf4J,iBAAiB,CAACE,SAAS;IAC3B5J;IACAjB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IACfC;IACD,CAAC;WACK+F,KAAK;GACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F;IAAWC,UAAU0F,QAAQ1F;IAAUQ;IAAO,CAAC;;AAExG;;AAGF,KAAIkF,QAAQ5F,SAAS,oBAAoB4F,QAAQ5F,SAAS,aAAa;AACrE,MAAI4F,QAAQ5F,SAAS,kBAAkB;AAErC,OAAI,EADaoD,yBAAyBoB,IAAIsG,SAAS,EAAEtG,IAAIoB,QAAQ3F,UAAU,EAAEgK,IAAIrE,QAAQ1F,SAAS,IAAI,UACzF0M,2BAA2B9B,SAAS,IAAIhH,2BAA2B;AAClFgB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ,OAAO;KAA0B,CAAC;AAChI;;AAGF6L,8BAA2B;IACzBzB;IACA9J,UAAUoD,KAAKpD;IACfC,QAAQmD,KAAKnD;IACbhB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IAChB,CAAC;AAEF,OAAI;AACF,UAAM0L,mBAAmBzH,KAAKpD,UAAU4E,QAAQ3F,UAAU;YACnDkG,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAGF,OAAIkF,QAAQvF,oBAAoB,MAC9B;;AAIJ,MAAI;AACF,SAAM0K,gBAAgB;IACpB/J,UAAUoD,KAAKpD;IACf4J,iBAAiB,CAACE,SAAS;IAC3B5J;IACAjB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IAChB,CAAC;WACKgG,KAAK;GACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F;IAAWC,UAAU0F,QAAQ1F;IAAUQ;IAAO,CAAC;;;;AAK5G,IAAaiN,WAAW,EACtBC,QACAC,OAAO,QACPhG,mBACAhE,iBAAiBiK,oBACjBhK,2BAA2BiK,8BAC3BhK,oBAAoBiK,uBACpBhK,qBAAqBiK,6BASX;AACV,KAAIvL,mBAAmBuH,IAAI2D,OAAO,CAAE;AACpClL,oBAAmB+B,IAAImJ,OAAO;AAE9B,KAAI,OAAOE,uBAAuB,YAAYI,OAAOC,SAASL,mBAAmB,IAAIA,qBAAqB,EACxGjK,mBAAkBsG,KAAKG,MAAMwD,mBAAmB;AAGlD,KACE,OAAOC,iCAAiC,YACrCG,OAAOC,SAASJ,6BAA6B,IAC7CA,+BAA+B,EAElCjK,6BAA4BqG,KAAKG,MAAMyD,6BAA6B;AAGtE,KAAI,OAAOC,0BAA0B,YAAYE,OAAOC,SAASH,sBAAsB,IAAIA,yBAAyB,EAClHjK,sBAAqBoG,KAAKG,MAAM0D,sBAAsB;AAGxDhK,uBAAsBoK,QAAQH,uBAAuB;CAErD,MAAMI,MAAM,IAAIvP,gBAAgB;EAAEwP,UAAU;EAAMC,YAAY1K;EAAiB,CAAC;AAEhF+J,QAAOvJ,GAAG,YAAYyD,KAAsB3F,QAAgBqM,SAAiB;AAC3ExI,2BAAyB7D,eAAe;GACtCsM,aAAa3G,IAAIgB,QAAQ4F,QAAQ;GACjCC,YAAY7G,IAAIU,OAAO;GACvBoG,WAAW,OAAO9G,IAAIgB,QAAQ,kBAAkB,WAAWhB,IAAIgB,QAAQ,gBAAgB;GACxF,EAAE;AACHnF,cAAYgB,OAAOmD,IAAI;EAEvB,IAAIU;AACJ,MAAI;AACFA,SAAM,IAAIC,IAAIX,IAAIU,OAAO,IAAI,UAAUV,IAAIgB,QAAQ4F,QAAQ,cAAc;UACnE;AACN/G,cAAWxF,QAAQ,cAAc;AACjC;;AAGF,MAAIqG,IAAIqG,aAAahB,KAAM;AAE3B,GAAM,YAAW;AACf,OAAI;IACF,MAAMzJ,OAAO,MAAMmE,iBAAiB;KAAET;KAAKU;KAAKX;KAAmB,CAAC;AACpElE,gBAAYY,IAAIuD,KAAK1D,KAAK;AAE1BiK,QAAIS,cAAchH,KAAK3F,QAAQqM,OAAOvK,OAAkB;AACtDoK,SAAIxJ,KAAK,cAAcZ,IAAI6D,IAAI;MAC/B;YACK3B,KAAK;IACZ,MAAMP,UAAUO,eAAeC,QAAQD,IAAIP,UAAU;AACrD,QAAIA,QAAQmJ,WAAW,uBAAuB,EAAE;AAC9CpH,gBAAWxF,QAAQyD,QAAQ;AAC3B;;AAEF2B,iBAAapF,QAAQyD,QAAQ;AAC7B;;MAEA,CAAC8E,YAAY;AACf/C,cAAWxF,QAAQ,qBAAqB;IACxC;GACF;AAEFkM,KAAIhK,GAAG,eAAeJ,IAAe6D,QAAyB;EAC5D,MAAM1D,OAAOT,YAAYa,IAAIsD,IAAI;AACjCnE,cAAYgB,OAAOmD,IAAI;AACvB,MAAI,CAAC1D,MAAM;AACT,OAAI;AACFH,OAAGc,OAAO;WACJ;AAGR;;EAGF,MAAM+F,WAAWhN,YAAY;AAC7B+E,UAAQ0B,IAAIuG,UAAU7G,GAAG;AACzBlB,aAAWwB,IAAIuG,UAAU1G,KAAK;EAE9B,MAAMiJ,UAAU,IAAIjL,UAAU;GAAEhB,IAAI0J;GAAU7G;GAAIG;GAAM,CAAC;AACzDpB,iBAAeuB,IAAIuG,UAAUuC,QAAQ;EAErC,MAAMH,aAAgC,EAAE;AACxC,OAAK,MAAM5I,WAAW1B,eACpB,KAAI;GACF,MAAMoM,UAAU1K,QAAQ+I,QAAQ;AAChC,OAAI,OAAO2B,YAAY,WAAY9B,YAAW+B,KAAKD,QAAQ;UACrD;AAIV,MAAI9B,WAAW7F,OAAQpE,eAAcsB,IAAIuG,UAAUoC,WAAW;AAE9DjJ,KAAGI,GAAG,YAAYa,QAAiB;GACjC,IAAIgK;AACJ,OAAI;AACFA,aAASzJ,cAAcP,IAAI;WACrB;AACN;;AAGF,OAAI,CAACgK,UAAU,OAAOA,WAAW,SAAU;GAC3C,MAAMtJ,UAAUsJ;AAChB,OACEtJ,QAAQ5F,SAAS,WACd4F,QAAQ5F,SAAS,eACjB4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS,kBACjB4F,QAAQ5F,SAAS,eACjB4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS,eACpB;AACGoN,uBAAoB;IAAEtC;IAAU1G;IAAewB;IAA0B,CAAC;IAC/E;AAEF3B,KAAGI,GAAG,eAAe;AACnB0I,iBAAcjC,SAAS;IACvB;AAEF7G,KAAGI,GAAG,eAAe;AACnB0I,iBAAcjC,SAAS;IACvB;GACF;;AAGJ,IAAaqE,sBAAsB7K,YAA6B;AAC9D1B,gBAAeqM,KAAK3K,QAAQ;;AAG9B,IAAa8K,yBAAyBpO,UAAkBf,cAA4B;AAClF+J,uCAAsChJ,UAAUf,UAAU"}
+{"version":3,"file":"index.js","names":["routes","Object","entries","import","meta","glob","reduce","Record","acc","path","mod","replace","randomUUID","IncomingMessage","Server","HttpServer","Socket","RequestHandler","PaginationPageInfo","models","LoadModelCtx","buildAbility","buildAbilityFromSession","getTenantRolesFromSessionUser","AclSubjectType","AppAbility","ChangeStream","Model","WebSocketServer","RawData","WebSocket","RTS_TENANT_ID_QUERY_PARAM","TENANT_ID_QUERY_PARAM","RTS_USER_ID_HEADER","USER_ID_HEADER","normalizeRtsQueryOptions","resolveRtsQueryDependencyModelNames","runRtsCount","runRtsQuery","RtsQueryOptions","QueryOptions","JsonObject","Record","CountOptions","key","ClientMessage","type","modelName","queryKey","query","options","runInitialQuery","event","payload","ServerMessage","data","error","txnId","pageInfo","totalCount","count","SocketMeta","tenantId","userId","ability","SessionUser","id","currentTenantId","signedInTenants","HeaderUserDoc","tenants","tenantRoles","UpgradeRequest","session","user","Subscription","dependencyModelNames","socketIds","Set","CountSubscription","HandlerFn","socket","RtsSocket","QUERY_KEY_MAX_LEN","INTERNAL_MODEL_NAMES","DEFAULT_MAX_PAYLOAD_BYTES","DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET","DEFAULT_DISPATCH_DEBOUNCE_MS","initializedServers","WeakSet","customHandlers","sockets","Map","socketMeta","socketWrappers","socketCleanup","Array","socketSubscriptions","socketCountSubscriptions","subscriptions","countSubscriptions","changeStreams","dispatchTimers","ReturnType","setTimeout","upgradeMeta","WeakMap","maxPayloadBytes","maxSubscriptionsPerSocket","dispatchDebounceMs","allowInternalModels","ws","handlers","constructor","meta","on","handler","set","get","add","off","delete","size","emit","sendWs","close","dispatch","rawToText","raw","ArrayBuffer","Buffer","from","toString","isArray","concat","safeJsonParse","JSON","parse","message","readyState","send","stringify","ensureSocketErrorHandler","context","listenerCount","err","Error","String","name","stack","undefined","code","includes","console","warn","remoteAddress","remotePort","localAddress","localPort","redactErrorMessage","trimmedModelList","replace","maxLen","length","slice","unauthorized","write","end","destroy","badRequest","runSessionMiddleware","sessionMiddleware","req","Promise","MiddlewareReq","Parameters","MiddlewareRes","MiddlewareNext","resolve","reject","next","parseUpgradeMeta","url","URL","searchParams","upgradeReq","sessionUser","sessionUserId","headers","headerUserId","rbCtx","User","getGlobal","findById","lean","tenantsRaw","map","t","roles","getTenantModel","ctx","getUnsafe","makeDispatchKey","clearDispatchTimer","timer","clearTimeout","scheduleDispatchSubscriptionsForModel","has","delay","Math","max","min","floor","all","dispatchSubscriptionsForModel","dispatchCountSubscriptionsForModel","catch","runAndSendQuery","targetSocketIds","result","socketId","runAndSendCount","subscriptionDependsOnModel","changedModelName","ownerModelName","subscription","hasAnySubscriptionsDependingOnModel","tenantSubs","userSubs","values","modelSubs","entries","hasAnyCountSubscriptionsForModel","sub","targetSocketId","ensureChangeStream","tenantStreams","model","stream","watch","fullDocument","addSocketSubscription","existing","byModel","querySet","addSocketCountSubscription","removeSocketSubscription","affectedModelNames","affectedModelName","removeSocketCountSubscription","getSocketSubscriptionCount","querySubscriptionsByModel","countSubscriptionsByModel","cleanupSocket","keys","countByModel","cleanupFns","fn","clearTenantDispatchTimers","prefix","startsWith","cleanupRtsTenant","normalizedTenantId","trim","tenantSocketIds","filter","handleClientMessage","wrapper","isCountMessage","sendAccessError","can","populate","modelNamesToWatch","initRts","server","path","maxPayloadBytesArg","maxSubscriptionsPerSocketArg","dispatchDebounceMsArg","allowInternalModelsArg","Number","isFinite","Boolean","wss","noServer","maxPayload","head","upgradeHost","host","upgradeUrl","userAgent","pathname","handleUpgrade","cleanup","push","parsed","registerRtsHandler","notifyRtsModelChanged"],"sources":["../../src/rts/routes.ts","../../src/rts/index.ts"],"sourcesContent":["export const routes = Object.entries({\n  ...import.meta.glob(\"./api/**/handler.ts\"),\n}).reduce<Record<string, unknown>>((acc, [path, mod]) => {\n  acc[path.replace(\"./api/\", \"@rpcbase/server/rts/api/\")] = mod\n  return acc\n}, {})\n\n","import { randomUUID } from \"node:crypto\"\nimport type { IncomingMessage, Server as HttpServer } from \"node:http\"\nimport type { Socket } from \"node:net\"\n\nimport type { RequestHandler } from \"express\"\nimport type { PaginationPageInfo } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbility, buildAbilityFromSession, getTenantRolesFromSessionUser, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { ChangeStream } from \"mongodb\"\nimport type { Model } from \"mongoose\"\nimport { WebSocketServer, type RawData, type WebSocket } from \"ws\"\n\nimport {\n  RTS_TENANT_ID_QUERY_PARAM as TENANT_ID_QUERY_PARAM,\n  RTS_USER_ID_HEADER as USER_ID_HEADER,\n  normalizeRtsQueryOptions,\n  resolveRtsQueryDependencyModelNames,\n  runRtsCount,\n  runRtsQuery,\n  type RtsQueryOptions as QueryOptions,\n} from \"./queryExecutor\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype CountOptions = {\n  key?: string\n}\n\ntype ClientMessage =\n  | { type: \"run-query\"; modelName: string; queryKey: string; query: JsonObject; options?: QueryOptions }\n  | {\n    type: \"register-query\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: QueryOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-query\"; modelName: string; queryKey: string }\n  | { type: \"run-count\"; modelName: string; queryKey: string; query: JsonObject; options?: CountOptions }\n  | {\n    type: \"register-count\"\n    modelName: string\n    queryKey: string\n    query: JsonObject\n    options?: CountOptions\n    runInitialQuery?: boolean\n  }\n  | { type: \"remove-count\"; modelName: string; queryKey: string }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype ServerMessage =\n  | {\n    type: \"query-payload\"\n    modelName: string\n    queryKey: string\n    data?: unknown\n    error?: string\n    txnId?: string\n    pageInfo?: PaginationPageInfo\n    totalCount?: number\n  }\n  | {\n    type: \"count-payload\"\n    modelName: string\n    queryKey: string\n    count?: number\n    error?: string\n    txnId?: string\n  }\n  | { type: \"event\"; event: string; payload?: unknown }\n\ntype SocketMeta = {\n  tenantId: string\n  userId: string\n  ability: AppAbility\n}\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype HeaderUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\ntype UpgradeRequest = IncomingMessage & {\n  session?: {\n    user?: SessionUser\n  }\n}\n\ntype Subscription = {\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n  socketIds: Set<string>\n}\n\ntype CountSubscription = {\n  query: JsonObject\n  socketIds: Set<string>\n}\n\ntype HandlerFn = (socket: RtsSocket) => void | (() => void)\n\nconst QUERY_KEY_MAX_LEN = 4096\n\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\n\nconst DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024\nconst DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256\nconst DEFAULT_DISPATCH_DEBOUNCE_MS = 25\n\nconst initializedServers = new WeakSet<HttpServer>()\nconst customHandlers: HandlerFn[] = []\n\nconst sockets = new Map<string, WebSocket>()\nconst socketMeta = new Map<string, SocketMeta>()\nconst socketWrappers = new Map<string, RtsSocket>()\nconst socketCleanup = new Map<string, Array<() => void>>()\n\nconst socketSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst socketCountSubscriptions = new Map<string, Map<string, Set<string>>>()\nconst subscriptions = new Map<string, Map<string, Map<string, Map<string, Subscription>>>>()\nconst countSubscriptions = new Map<string, Map<string, Map<string, Map<string, CountSubscription>>>>()\nconst changeStreams = new Map<string, Map<string, ChangeStream>>()\nconst dispatchTimers = new Map<string, ReturnType<typeof setTimeout>>()\nconst upgradeMeta = new WeakMap<IncomingMessage, SocketMeta>()\n\nlet maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES\nlet maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET\nlet dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS\nlet allowInternalModels = false\n\nclass RtsSocket {\n  public readonly id: string\n  public readonly tenantId: string\n  public readonly userId: string\n\n  private readonly ws: WebSocket\n  private readonly handlers = new Map<string, Set<(payload: unknown) => void>>()\n\n  public constructor({\n    id,\n    ws,\n    meta,\n  }: {\n    id: string\n    ws: WebSocket\n    meta: SocketMeta\n  }) {\n    this.id = id\n    this.ws = ws\n    this.tenantId = meta.tenantId\n    this.userId = meta.userId\n  }\n\n  public on(event: string, handler: (payload: unknown) => void): () => void {\n    const set = this.handlers.get(event) ?? new Set()\n    set.add(handler)\n    this.handlers.set(event, set)\n    return () => this.off(event, handler)\n  }\n\n  public off(event: string, handler: (payload: unknown) => void): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    set.delete(handler)\n    if (!set.size) this.handlers.delete(event)\n  }\n\n  public emit(event: string, payload?: unknown): void {\n    sendWs(this.ws, { type: \"event\", event, payload })\n  }\n\n  public close(): void {\n    try {\n      this.ws.close()\n    } catch {\n      // ignore\n    }\n  }\n\n  public dispatch(event: string, payload: unknown): void {\n    const set = this.handlers.get(event)\n    if (!set) return\n    for (const handler of set) {\n      handler(payload)\n    }\n  }\n}\n\nconst rawToText = (raw: RawData): string => {\n  if (typeof raw === \"string\") return raw\n  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString()\n  if (Array.isArray(raw)) return Buffer.concat(raw).toString()\n  return raw.toString()\n}\n\nconst safeJsonParse = (raw: RawData): unknown => JSON.parse(rawToText(raw))\n\nconst sendWs = (ws: WebSocket, message: ServerMessage): void => {\n  if (ws.readyState !== 1) return\n  ws.send(JSON.stringify(message))\n}\n\nconst ensureSocketErrorHandler = (socket: Socket, context?: () => Record<string, unknown>): void => {\n  if (socket.listenerCount(\"error\") > 0) return\n\n  socket.on(\"error\", (err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err)\n    const name = err instanceof Error ? err.name : typeof err\n    const stack = err instanceof Error ? err.stack : undefined\n    const code = err && typeof err === \"object\" && \"code\" in err ? (err as any).code : undefined\n\n    if (code === \"ECONNRESET\" || (code == null && message.includes(\"ECONNRESET\"))) return\n\n    console.warn(\"[rb/rts] socket error\", {\n      name,\n      code,\n      message,\n      stack,\n      remoteAddress: socket.remoteAddress,\n      remotePort: socket.remotePort,\n      localAddress: socket.localAddress,\n      localPort: socket.localPort,\n      ...context?.(),\n    })\n  })\n}\n\nconst redactErrorMessage = (err: unknown): string => {\n  const raw = err instanceof Error ? err.message : \"Unknown error\"\n  const trimmedModelList = raw.replace(/\\.\\s+Available models:[\\s\\S]*$/, \"\")\n  const maxLen = 256\n  if (trimmedModelList.length <= maxLen) return trimmedModelList\n  return trimmedModelList.slice(0, maxLen)\n}\n\nconst unauthorized = (socket: Socket, message = \"Unauthorized\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst badRequest = (socket: Socket, message = \"Bad Request\"): void => {\n  ensureSocketErrorHandler(socket)\n  try {\n    socket.write(\"HTTP/1.1 400 Bad Request\\r\\n\\r\\n\")\n    socket.write(`Error: ${message}\\r\\n`)\n    socket.end()\n  } catch {\n    socket.destroy()\n  }\n}\n\nconst runSessionMiddleware = async (sessionMiddleware: RequestHandler, req: UpgradeRequest): Promise<void> => {\n  type MiddlewareReq = Parameters<RequestHandler>[0]\n  type MiddlewareRes = Parameters<RequestHandler>[1]\n  type MiddlewareNext = Parameters<RequestHandler>[2]\n\n  await new Promise<void>((resolve, reject) => {\n    const next: MiddlewareNext = (err) => {\n      if (err) reject(err)\n      else resolve()\n    }\n\n    sessionMiddleware(req as unknown as MiddlewareReq, {} as unknown as MiddlewareRes, next)\n  })\n}\n\nconst parseUpgradeMeta = async ({\n  req,\n  url,\n  sessionMiddleware,\n}: {\n  req: IncomingMessage\n  url: URL\n  sessionMiddleware?: RequestHandler\n}): Promise<SocketMeta> => {\n  const tenantId = url.searchParams.get(TENANT_ID_QUERY_PARAM)\n  if (!tenantId) {\n    throw new Error(\"Missing rb-tenant-id query parameter\")\n  }\n\n  if (sessionMiddleware) {\n    const upgradeReq = req as UpgradeRequest\n    try {\n      await runSessionMiddleware(sessionMiddleware, upgradeReq)\n    } catch {\n      throw new Error(\"Failed to load session for RTS\")\n    }\n\n    const sessionUser = upgradeReq.session?.user\n    const sessionUserId = sessionUser?.id\n    if (!sessionUserId) {\n      throw new Error(\"Not signed in (missing session.user.id)\")\n    }\n\n    const signedInTenants = sessionUser?.signedInTenants\n    const currentTenantId = sessionUser?.currentTenantId\n\n    if (Array.isArray(signedInTenants) && signedInTenants.length > 0) {\n      if (!signedInTenants.includes(tenantId)) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else if (currentTenantId) {\n      if (currentTenantId !== tenantId) {\n        throw new Error(\"Tenant not authorized for this session\")\n      }\n    } else {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    const ability = buildAbilityFromSession({ tenantId, session: upgradeReq.session })\n    return { tenantId, userId: sessionUserId, ability }\n  }\n\n  const raw = req.headers[USER_ID_HEADER]\n  const headerUserId = Array.isArray(raw) ? raw[0] : raw\n  if (!headerUserId) {\n    throw new Error(\"Missing rb-user-id header (reverse-proxy) and no session middleware configured\")\n  }\n\n  const rbCtx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", rbCtx)\n  const user = await User.findById(headerUserId, { tenants: 1, tenantRoles: 1 }).lean() as HeaderUserDoc | null\n  const tenantsRaw = user?.tenants\n  const tenants = Array.isArray(tenantsRaw) ? tenantsRaw.map((t) => String(t)) : []\n  if (!tenants.includes(tenantId)) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  const roles = getTenantRolesFromSessionUser(user, tenantId)\n  const ability = buildAbility({ tenantId, userId: headerUserId, roles: roles.length ? roles : [\"owner\"] })\n\n  return { tenantId, userId: headerUserId, ability }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n  }\n\n  return models.getUnsafe(modelName, ctx)\n}\n\nconst makeDispatchKey = (tenantId: string, modelName: string): string => `${tenantId}:${modelName}`\n\nconst clearDispatchTimer = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  const timer = dispatchTimers.get(key)\n  if (!timer) return\n  clearTimeout(timer)\n  dispatchTimers.delete(key)\n}\n\nconst scheduleDispatchSubscriptionsForModel = (tenantId: string, modelName: string): void => {\n  const key = makeDispatchKey(tenantId, modelName)\n  if (dispatchTimers.has(key)) return\n\n  const delay = Math.max(0, Math.min(1000, Math.floor(dispatchDebounceMs)))\n  dispatchTimers.set(key, setTimeout(() => {\n    dispatchTimers.delete(key)\n    void Promise.all([\n      dispatchSubscriptionsForModel(tenantId, modelName),\n      dispatchCountSubscriptionsForModel(tenantId, modelName),\n    ]).catch(() => {})\n  }, delay))\n}\n\nconst runAndSendQuery = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n  options,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n}): Promise<void> => {\n  const result = await runRtsQuery({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    options,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"query-payload\",\n    modelName,\n    queryKey,\n    data: result.data,\n    ...(result.pageInfo ? { pageInfo: result.pageInfo } : {}),\n    ...(typeof result.totalCount === \"number\" ? { totalCount: result.totalCount } : {}),\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst runAndSendCount = async ({\n  tenantId,\n  targetSocketIds,\n  ability,\n  modelName,\n  queryKey,\n  query,\n}: {\n  tenantId: string\n  targetSocketIds: string[]\n  ability: AppAbility\n  modelName: string\n  queryKey: string\n  query: JsonObject\n}): Promise<void> => {\n  const count = await runRtsCount({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n  const payload: ServerMessage = {\n    type: \"count-payload\",\n    modelName,\n    queryKey,\n    count,\n  }\n\n  for (const socketId of targetSocketIds) {\n    const ws = sockets.get(socketId)\n    if (!ws) continue\n    sendWs(ws, payload)\n  }\n}\n\nconst subscriptionDependsOnModel = (\n  changedModelName: string,\n  ownerModelName: string,\n  subscription: Subscription,\n): boolean => {\n  if (ownerModelName === changedModelName) return true\n  return subscription.dependencyModelNames.includes(changedModelName)\n}\n\nconst hasAnySubscriptionsDependingOnModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const subscription of modelSubs.values()) {\n        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {\n          return true\n        }\n      }\n    }\n  }\n\n  return false\n}\n\nconst hasAnyCountSubscriptionsForModel = (\n  tenantId: string,\n  modelName: string,\n): boolean => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  if (!tenantSubs) return false\n\n  for (const userSubs of tenantSubs.values()) {\n    const modelSubs = userSubs.get(modelName)\n    if (modelSubs?.size) {\n      return true\n    }\n  }\n\n  return false\n}\n\nconst dispatchSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = subscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    for (const [ownerModelName, modelSubs] of userSubs.entries()) {\n      for (const [queryKey, sub] of modelSubs.entries()) {\n        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue\n\n        const targetSocketIds = Array.from(sub.socketIds)\n        if (!targetSocketIds.length) continue\n\n        const socketId = targetSocketIds[0]\n        const meta = socketMeta.get(socketId)\n        const ability = meta?.ability\n        if (!ability) continue\n\n        try {\n          await runAndSendQuery({\n            tenantId,\n            targetSocketIds,\n            ability,\n            modelName: ownerModelName,\n            queryKey,\n            query: sub.query,\n            options: sub.options,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          const payload: ServerMessage = { type: \"query-payload\", modelName: ownerModelName, queryKey, error }\n          for (const socketId of targetSocketIds) {\n            const ws = sockets.get(socketId)\n            if (!ws) continue\n            sendWs(ws, payload)\n          }\n        }\n      }\n    }\n  }\n}\n\nconst dispatchCountSubscriptionsForModel = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  if (!tenantSubs || !tenantSubs.size) return\n\n  for (const userSubs of tenantSubs.values()) {\n    const modelSubs = userSubs.get(modelName)\n    if (!modelSubs) continue\n\n    for (const [queryKey, sub] of modelSubs.entries()) {\n      const targetSocketIds = Array.from(sub.socketIds)\n      if (!targetSocketIds.length) continue\n\n      const socketId = targetSocketIds[0]\n      const meta = socketMeta.get(socketId)\n      const ability = meta?.ability\n      if (!ability) continue\n\n      try {\n        await runAndSendCount({\n          tenantId,\n          targetSocketIds,\n          ability,\n          modelName,\n          queryKey,\n          query: sub.query,\n        })\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        const payload: ServerMessage = { type: \"count-payload\", modelName, queryKey, error }\n        for (const targetSocketId of targetSocketIds) {\n          const ws = sockets.get(targetSocketId)\n          if (!ws) continue\n          sendWs(ws, payload)\n        }\n      }\n    }\n  }\n}\n\nconst ensureChangeStream = async (tenantId: string, modelName: string): Promise<void> => {\n  const tenantStreams = changeStreams.get(tenantId) ?? new Map()\n  changeStreams.set(tenantId, tenantStreams)\n  if (tenantStreams.has(modelName)) return\n\n  const model = await getTenantModel(tenantId, modelName)\n\n  const stream = model.watch([], {\n    fullDocument: \"updateLookup\",\n  })\n\n  stream.on(\"change\", () => {\n    scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n  })\n\n  stream.on(\"close\", () => {\n    clearDispatchTimer(tenantId, modelName)\n    const map = changeStreams.get(tenantId)\n    map?.delete(modelName)\n    if (map && map.size === 0) changeStreams.delete(tenantId)\n  })\n\n  stream.on(\"error\", () => {\n    try {\n      clearDispatchTimer(tenantId, modelName)\n      stream.close()\n    } catch {\n      // ignore\n    }\n  })\n\n  tenantStreams.set(modelName, stream)\n}\n\nconst addSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n  options,\n  dependencyModelNames,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n  options: QueryOptions\n  dependencyModelNames: string[]\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, Subscription>>>()\n  subscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, Subscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, Subscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n    existing.dependencyModelNames = Array.from(new Set([...existing.dependencyModelNames, ...dependencyModelNames]))\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      options,\n      dependencyModelNames: Array.from(new Set(dependencyModelNames)),\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketSubscriptions.get(socketId) ?? new Map()\n  socketSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst addSocketCountSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n  query,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n  query: JsonObject\n}): void => {\n  const tenantSubs = countSubscriptions.get(tenantId) ?? new Map<string, Map<string, Map<string, CountSubscription>>>()\n  countSubscriptions.set(tenantId, tenantSubs)\n\n  const userSubs = tenantSubs.get(userId) ?? new Map<string, Map<string, CountSubscription>>()\n  tenantSubs.set(userId, userSubs)\n\n  const modelSubs = userSubs.get(modelName) ?? new Map<string, CountSubscription>()\n  userSubs.set(modelName, modelSubs)\n\n  const existing = modelSubs.get(queryKey)\n  if (existing) {\n    existing.socketIds.add(socketId)\n  } else {\n    modelSubs.set(queryKey, {\n      query,\n      socketIds: new Set([socketId]),\n    })\n  }\n\n  const byModel = socketCountSubscriptions.get(socketId) ?? new Map()\n  socketCountSubscriptions.set(socketId, byModel)\n\n  const querySet = byModel.get(modelName) ?? new Set()\n  byModel.set(modelName, querySet)\n  querySet.add(queryKey)\n}\n\nconst removeSocketSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = subscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  const affectedModelNames = new Set<string>([modelName, ...(sub?.dependencyModelNames ?? [])])\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  for (const affectedModelName of affectedModelNames) {\n    if (\n      hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName)\n      || hasAnyCountSubscriptionsForModel(tenantId, affectedModelName)\n    ) {\n      continue\n    }\n\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(affectedModelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, affectedModelName)\n      tenantStreams?.delete(affectedModelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId)\n}\n\nconst removeSocketCountSubscription = ({\n  socketId,\n  tenantId,\n  userId,\n  modelName,\n  queryKey,\n}: {\n  socketId: string\n  tenantId: string\n  userId: string\n  modelName: string\n  queryKey: string\n}): void => {\n  const tenantSubs = countSubscriptions.get(tenantId)\n  const userSubs = tenantSubs?.get(userId)\n  const modelSubs = userSubs?.get(modelName)\n  const sub = modelSubs?.get(queryKey)\n  if (sub) {\n    sub.socketIds.delete(socketId)\n    if (!sub.socketIds.size) {\n      modelSubs?.delete(queryKey)\n    }\n  }\n\n  const byModel = socketCountSubscriptions.get(socketId)\n  const set = byModel?.get(modelName)\n  if (set) {\n    set.delete(queryKey)\n    if (!set.size) {\n      byModel?.delete(modelName)\n    }\n  }\n\n  if (modelSubs && modelSubs.size === 0) {\n    userSubs?.delete(modelName)\n  }\n\n  if (userSubs && userSubs.size === 0) {\n    tenantSubs?.delete(userId)\n  }\n\n  if (!hasAnySubscriptionsDependingOnModel(tenantId, modelName) && !hasAnyCountSubscriptionsForModel(tenantId, modelName)) {\n    const tenantStreams = changeStreams.get(tenantId)\n    const stream = tenantStreams?.get(modelName)\n    if (stream) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(tenantId, modelName)\n      tenantStreams?.delete(modelName)\n      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId)\n    }\n  }\n\n  if (tenantSubs && tenantSubs.size === 0) countSubscriptions.delete(tenantId)\n  if (byModel && byModel.size === 0) socketCountSubscriptions.delete(socketId)\n}\n\nconst getSocketSubscriptionCount = (socketId: string): number => {\n  let count = 0\n  const querySubscriptionsByModel = socketSubscriptions.get(socketId)\n  if (querySubscriptionsByModel) {\n    for (const set of querySubscriptionsByModel.values()) count += set.size\n  }\n\n  const countSubscriptionsByModel = socketCountSubscriptions.get(socketId)\n  if (countSubscriptionsByModel) {\n    for (const set of countSubscriptionsByModel.values()) count += set.size\n  }\n\n  return count\n}\n\nconst cleanupSocket = (socketId: string): void => {\n  const meta = socketMeta.get(socketId)\n  if (meta) {\n    const byModel = socketSubscriptions.get(socketId)\n    if (byModel) {\n      for (const [modelName, keys] of byModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n\n    const countByModel = socketCountSubscriptions.get(socketId)\n    if (countByModel) {\n      for (const [modelName, keys] of countByModel.entries()) {\n        for (const queryKey of keys.values()) {\n          removeSocketCountSubscription({\n            socketId,\n            tenantId: meta.tenantId,\n            userId: meta.userId,\n            modelName,\n            queryKey,\n          })\n        }\n      }\n    }\n  }\n\n  socketSubscriptions.delete(socketId)\n  socketCountSubscriptions.delete(socketId)\n\n  const cleanupFns = socketCleanup.get(socketId) ?? []\n  socketCleanup.delete(socketId)\n  for (const fn of cleanupFns) {\n    try {\n      fn()\n    } catch {\n      // ignore\n    }\n  }\n\n  sockets.delete(socketId)\n  socketMeta.delete(socketId)\n  socketWrappers.delete(socketId)\n}\n\nconst clearTenantDispatchTimers = (tenantId: string): void => {\n  const prefix = `${tenantId}:`\n  for (const key of Array.from(dispatchTimers.keys())) {\n    if (!key.startsWith(prefix)) continue\n    const timer = dispatchTimers.get(key)\n    if (timer) {\n      clearTimeout(timer)\n    }\n    dispatchTimers.delete(key)\n  }\n}\n\nexport const cleanupRtsTenant = (tenantId: string): void => {\n  const normalizedTenantId = tenantId.trim()\n  if (!normalizedTenantId) return\n\n  const tenantSocketIds = Array.from(socketMeta.entries())\n    .filter(([, meta]) => meta.tenantId === normalizedTenantId)\n    .map(([socketId]) => socketId)\n\n  for (const socketId of tenantSocketIds) {\n    const ws = sockets.get(socketId)\n    cleanupSocket(socketId)\n    if (ws) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n    }\n  }\n\n  clearTenantDispatchTimers(normalizedTenantId)\n\n  const tenantStreams = changeStreams.get(normalizedTenantId)\n  if (tenantStreams) {\n    for (const [modelName, stream] of tenantStreams.entries()) {\n      try {\n        stream.close()\n      } catch {\n        // ignore\n      }\n      clearDispatchTimer(normalizedTenantId, modelName)\n    }\n    changeStreams.delete(normalizedTenantId)\n  }\n\n  subscriptions.delete(normalizedTenantId)\n  countSubscriptions.delete(normalizedTenantId)\n}\n\nconst handleClientMessage = async ({\n  socketId,\n  meta,\n  message,\n}: {\n  socketId: string\n  meta: SocketMeta\n  message: ClientMessage\n}): Promise<void> => {\n  const ws = sockets.get(socketId)\n  if (!ws) return\n\n  if (message.type === \"event\") {\n    const wrapper = socketWrappers.get(socketId)\n    wrapper?.dispatch(message.event, message.payload)\n    return\n  }\n\n  const isCountMessage =\n    message.type === \"run-count\"\n    || message.type === \"register-count\"\n    || message.type === \"remove-count\"\n  const sendAccessError = (error: string) => {\n    if (isCountMessage) {\n      sendWs(ws, { type: \"count-payload\", modelName: message.modelName ?? \"\", queryKey: message.queryKey ?? \"\", error })\n      return\n    }\n\n    sendWs(ws, { type: \"query-payload\", modelName: message.modelName ?? \"\", queryKey: message.queryKey ?? \"\", error })\n  }\n\n  if (!message.modelName || typeof message.modelName !== \"string\") return\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {\n    sendAccessError(\"Model not allowed\")\n    return\n  }\n  if (!message.queryKey || typeof message.queryKey !== \"string\") return\n  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return\n\n  if (message.type === \"remove-query\") {\n    removeSocketSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (message.type === \"remove-count\") {\n    removeSocketCountSubscription({\n      socketId,\n      tenantId: meta.tenantId,\n      userId: meta.userId,\n      modelName: message.modelName,\n      queryKey: message.queryKey,\n    })\n    return\n  }\n\n  if (!message.query || typeof message.query !== \"object\") return\n\n  const ability = meta.ability\n\n  if (!ability.can(\"read\", message.modelName as AclSubjectType)) {\n    sendAccessError(\"forbidden\")\n    return\n  }\n\n  if (message.type === \"register-query\" || message.type === \"run-query\") {\n    const options = normalizeRtsQueryOptions(message.options)\n    if (message.type === \"register-query\") {\n      const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n\n      let dependencyModelNames: string[] = []\n      if (options.populate !== undefined) {\n        try {\n          dependencyModelNames = await resolveRtsQueryDependencyModelNames({\n            tenantId: meta.tenantId,\n            ability,\n            modelName: message.modelName,\n            options,\n            allowInternalModels,\n          })\n        } catch (err) {\n          const error = redactErrorMessage(err)\n          sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n          return\n        }\n      }\n\n      addSocketSubscription({\n        socketId,\n        tenantId: meta.tenantId,\n        userId: meta.userId,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n        options,\n        dependencyModelNames,\n      })\n\n      try {\n        const modelNamesToWatch = new Set<string>([message.modelName, ...dependencyModelNames])\n        for (const modelName of modelNamesToWatch) {\n          await ensureChangeStream(meta.tenantId, modelName)\n        }\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n\n      if (message.runInitialQuery === false) {\n        return\n      }\n    }\n\n    try {\n      await runAndSendQuery({\n        tenantId: meta.tenantId,\n        targetSocketIds: [socketId],\n        ability,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n        options,\n      })\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"query-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n    }\n    return\n  }\n\n  if (message.type === \"register-count\" || message.type === \"run-count\") {\n    if (message.type === \"register-count\") {\n      const existing = socketCountSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false\n      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {\n        sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error: \"Too many subscriptions\" })\n        return\n      }\n\n      addSocketCountSubscription({\n        socketId,\n        tenantId: meta.tenantId,\n        userId: meta.userId,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n      })\n\n      try {\n        await ensureChangeStream(meta.tenantId, message.modelName)\n      } catch (err) {\n        const error = redactErrorMessage(err)\n        sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n        return\n      }\n\n      if (message.runInitialQuery === false) {\n        return\n      }\n    }\n\n    try {\n      await runAndSendCount({\n        tenantId: meta.tenantId,\n        targetSocketIds: [socketId],\n        ability,\n        modelName: message.modelName,\n        queryKey: message.queryKey,\n        query: message.query,\n      })\n    } catch (err) {\n      const error = redactErrorMessage(err)\n      sendWs(ws, { type: \"count-payload\", modelName: message.modelName, queryKey: message.queryKey, error })\n    }\n  }\n}\n\nexport const initRts = ({\n  server,\n  path = \"/rts\",\n  sessionMiddleware,\n  maxPayloadBytes: maxPayloadBytesArg,\n  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,\n  dispatchDebounceMs: dispatchDebounceMsArg,\n  allowInternalModels: allowInternalModelsArg,\n}: {\n  server: HttpServer\n  path?: string\n  sessionMiddleware?: RequestHandler\n  maxPayloadBytes?: number\n  maxSubscriptionsPerSocket?: number\n  dispatchDebounceMs?: number\n  allowInternalModels?: boolean\n}): void => {\n  if (initializedServers.has(server)) return\n  initializedServers.add(server)\n\n  if (typeof maxPayloadBytesArg === \"number\" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {\n    maxPayloadBytes = Math.floor(maxPayloadBytesArg)\n  }\n\n  if (\n    typeof maxSubscriptionsPerSocketArg === \"number\"\n    && Number.isFinite(maxSubscriptionsPerSocketArg)\n    && maxSubscriptionsPerSocketArg > 0\n  ) {\n    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg)\n  }\n\n  if (typeof dispatchDebounceMsArg === \"number\" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {\n    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg)\n  }\n\n  allowInternalModels = Boolean(allowInternalModelsArg)\n\n  const wss = new WebSocketServer({ noServer: true, maxPayload: maxPayloadBytes })\n\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Socket, head: Buffer) => {\n    ensureSocketErrorHandler(socket, () => ({\n      upgradeHost: req.headers.host ?? \"\",\n      upgradeUrl: req.url ?? \"\",\n      userAgent: typeof req.headers[\"user-agent\"] === \"string\" ? req.headers[\"user-agent\"] : \"\",\n    }))\n    upgradeMeta.delete(req)\n\n    let url: URL\n    try {\n      url = new URL(req.url ?? \"\", `http://${req.headers.host ?? \"localhost\"}`)\n    } catch {\n      badRequest(socket, \"Invalid URL\")\n      return\n    }\n\n    if (url.pathname !== path) return\n\n    void (async() => {\n      try {\n        const meta = await parseUpgradeMeta({ req, url, sessionMiddleware })\n        upgradeMeta.set(req, meta)\n\n        wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n          wss.emit(\"connection\", ws, req)\n        })\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"RTS upgrade failed\"\n        if (message.startsWith(\"Missing rb-tenant-id\")) {\n          badRequest(socket, message)\n          return\n        }\n        unauthorized(socket, message)\n        return\n      }\n    })().catch(() => {\n      badRequest(socket, \"RTS upgrade failed\")\n    })\n  })\n\n  wss.on(\"connection\", (ws: WebSocket, req: IncomingMessage) => {\n    const meta = upgradeMeta.get(req)\n    upgradeMeta.delete(req)\n    if (!meta) {\n      try {\n        ws.close()\n      } catch {\n        // ignore\n      }\n      return\n    }\n\n    const socketId = randomUUID()\n    sockets.set(socketId, ws)\n    socketMeta.set(socketId, meta)\n\n    const wrapper = new RtsSocket({ id: socketId, ws, meta })\n    socketWrappers.set(socketId, wrapper)\n\n    const cleanupFns: Array<() => void> = []\n    for (const handler of customHandlers) {\n      try {\n        const cleanup = handler(wrapper)\n        if (typeof cleanup === \"function\") cleanupFns.push(cleanup)\n      } catch {\n        // ignore\n      }\n    }\n    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns)\n\n    ws.on(\"message\", (raw: RawData) => {\n      let parsed: unknown\n      try {\n        parsed = safeJsonParse(raw)\n      } catch {\n        return\n      }\n\n      if (!parsed || typeof parsed !== \"object\") return\n      const message = parsed as { type?: unknown }\n      if (\n        message.type !== \"event\"\n        && message.type !== \"run-query\"\n        && message.type !== \"register-query\"\n        && message.type !== \"remove-query\"\n        && message.type !== \"run-count\"\n        && message.type !== \"register-count\"\n        && message.type !== \"remove-count\"\n      ) return\n      void handleClientMessage({ socketId, meta, message: message as ClientMessage })\n    })\n\n    ws.on(\"close\", () => {\n      cleanupSocket(socketId)\n    })\n\n    ws.on(\"error\", () => {\n      cleanupSocket(socketId)\n    })\n  })\n}\n\nexport const registerRtsHandler = (handler: HandlerFn): void => {\n  customHandlers.push(handler)\n}\n\nexport const notifyRtsModelChanged = (tenantId: string, modelName: string): void => {\n  scheduleDispatchSubscriptionsForModel(tenantId, modelName)\n}\n\nexport * from \"./routes\"\n"],"mappings":";;;;;;AAAA,IAAaA,SAASC,OAAOC,QAAQ,EACnC,GAAGC,uBAAAA,OAAAA;CAAAA,kCAAAA,OAAAA;CAAAA,kCAAAA,OAAAA;CAAAA,CAAsC,EAC1C,CAAC,CAACG,QAAiCE,KAAK,CAACC,MAAMC,SAAS;AACvDF,KAAIC,KAAKE,QAAQ,UAAU,2BAA2B,IAAID;AAC1D,QAAOF;GACN,EAAE,CAAC;;;ACyGN,IAAM2E,oBAAoB;AAE1B,IAAMC,uBAAuB,IAAIN,IAAI,CAAC,eAAe,eAAe,CAAC;AAErE,IAAMO,4BAA4B,OAAO;AACzC,IAAMC,uCAAuC;AAC7C,IAAMC,+BAA+B;AAErC,IAAMC,qCAAqB,IAAIC,SAAqB;AACpD,IAAMC,iBAA8B,EAAE;AAEtC,IAAMC,0BAAU,IAAIC,KAAwB;AAC5C,IAAMC,6BAAa,IAAID,KAAyB;AAChD,IAAME,iCAAiB,IAAIF,KAAwB;AACnD,IAAMG,gCAAgB,IAAIH,KAAgC;AAE1D,IAAMK,sCAAsB,IAAIL,KAAuC;AACvE,IAAMM,2CAA2B,IAAIN,KAAuC;AAC5E,IAAMO,gCAAgB,IAAIP,KAAkE;AAC5F,IAAMQ,qCAAqB,IAAIR,KAAuE;AACtG,IAAMS,gCAAgB,IAAIT,KAAwC;AAClE,IAAMU,iCAAiB,IAAIV,KAA4C;AACvE,IAAMa,8BAAc,IAAIC,SAAsC;AAE9D,IAAIC,kBAAkBtB;AACtB,IAAIuB,4BAA4BtB;AAChC,IAAIuB,qBAAqBtB;AACzB,IAAIuB,sBAAsB;AAE1B,IAAM5B,YAAN,MAAgB;CACd;CACA;CACA;CAEA;CACA,2BAA4B,IAAIU,KAA8C;CAE9E,YAAmB,EACjB1B,IACA6C,IACAG,QAKC;AACD,OAAKhD,KAAKA;AACV,OAAK6C,KAAKA;AACV,OAAKjD,WAAWoD,KAAKpD;AACrB,OAAKC,SAASmD,KAAKnD;;CAGrB,GAAUX,OAAegE,SAAiD;EACxE,MAAMC,MAAM,KAAKL,SAASM,IAAIlE,MAAM,oBAAI,IAAI0B,KAAK;AACjDuC,MAAIE,IAAIH,QAAQ;AAChB,OAAKJ,SAASK,IAAIjE,OAAOiE,IAAI;AAC7B,eAAa,KAAKG,IAAIpE,OAAOgE,QAAQ;;CAGvC,IAAWhE,OAAegE,SAA2C;EACnE,MAAMC,MAAM,KAAKL,SAASM,IAAIlE,MAAM;AACpC,MAAI,CAACiE,IAAK;AACVA,MAAII,OAAOL,QAAQ;AACnB,MAAI,CAACC,IAAIK,KAAM,MAAKV,SAASS,OAAOrE,MAAM;;CAG5C,KAAYA,OAAeC,SAAyB;AAClDuE,SAAO,KAAKb,IAAI;GAAEjE,MAAM;GAASM;GAAOC;GAAS,CAAC;;CAGpD,QAAqB;AACnB,MAAI;AACF,QAAK0D,GAAGc,OAAO;UACT;;CAKV,SAAgBzE,OAAeC,SAAwB;EACrD,MAAMgE,MAAM,KAAKL,SAASM,IAAIlE,MAAM;AACpC,MAAI,CAACiE,IAAK;AACV,OAAK,MAAMD,WAAWC,IACpBD,SAAQ/D,QAAQ;;;AAKtB,IAAM0E,aAAaC,QAAyB;AAC1C,KAAI,OAAOA,QAAQ,SAAU,QAAOA;AACpC,KAAIA,eAAeC,YAAa,QAAOC,OAAOC,KAAKH,IAAI,CAACI,UAAU;AAClE,KAAIpC,MAAMqC,QAAQL,IAAI,CAAE,QAAOE,OAAOI,OAAON,IAAI,CAACI,UAAU;AAC5D,QAAOJ,IAAII,UAAU;;AAGvB,IAAMG,iBAAiBP,QAA0BQ,KAAKC,MAAMV,UAAUC,IAAI,CAAC;AAE3E,IAAMJ,UAAUb,IAAe2B,YAAiC;AAC9D,KAAI3B,GAAG4B,eAAe,EAAG;AACzB5B,IAAG6B,KAAKJ,KAAKK,UAAUH,QAAQ,CAAC;;AAGlC,IAAMI,4BAA4B7D,QAAgB8D,YAAkD;AAClG,KAAI9D,OAAO+D,cAAc,QAAQ,GAAG,EAAG;AAEvC/D,QAAOkC,GAAG,UAAU8B,QAAiB;EACnC,MAAMP,UAAUO,eAAeC,QAAQD,IAAIP,UAAUS,OAAOF,IAAI;EAChE,MAAMG,OAAOH,eAAeC,QAAQD,IAAIG,OAAO,OAAOH;EACtD,MAAMI,QAAQJ,eAAeC,QAAQD,IAAII,QAAQC,KAAAA;EACjD,MAAMC,OAAON,OAAO,OAAOA,QAAQ,YAAY,UAAUA,MAAOA,IAAYM,OAAOD,KAAAA;AAEnF,MAAIC,SAAS,gBAAiBA,QAAQ,QAAQb,QAAQc,SAAS,aAAc,CAAE;AAE/EC,UAAQC,KAAK,yBAAyB;GACpCN;GACAG;GACAb;GACAW;GACAM,eAAe1E,OAAO0E;GACtBC,YAAY3E,OAAO2E;GACnBC,cAAc5E,OAAO4E;GACrBC,WAAW7E,OAAO6E;GAClB,GAAGf,WAAU;GACd,CAAC;GACF;;AAGJ,IAAMgB,sBAAsBd,QAAyB;CAEnD,MAAMe,oBADMf,eAAeC,QAAQD,IAAIP,UAAU,iBACpBuB,QAAQ,kCAAkC,GAAG;CAC1E,MAAMC,SAAS;AACf,KAAIF,iBAAiBG,UAAUD,OAAQ,QAAOF;AAC9C,QAAOA,iBAAiBI,MAAM,GAAGF,OAAO;;AAG1C,IAAMG,gBAAgBpF,QAAgByD,UAAU,mBAAyB;AACvEI,0BAAyB7D,OAAO;AAChC,KAAI;AACFA,SAAOqF,MAAM,oCAAoC;AACjDrF,SAAOqF,MAAM,UAAU5B,QAAO,MAAO;AACrCzD,SAAOsF,KAAK;SACN;AACNtF,SAAOuF,SAAS;;;AAIpB,IAAMC,cAAcxF,QAAgByD,UAAU,kBAAwB;AACpEI,0BAAyB7D,OAAO;AAChC,KAAI;AACFA,SAAOqF,MAAM,mCAAmC;AAChDrF,SAAOqF,MAAM,UAAU5B,QAAO,MAAO;AACrCzD,SAAOsF,KAAK;SACN;AACNtF,SAAOuF,SAAS;;;AAIpB,IAAME,uBAAuB,OAAOC,mBAAmCC,QAAuC;AAK5G,OAAM,IAAIC,SAAeK,SAASC,WAAW;EAC3C,MAAMC,QAAwBnC,QAAQ;AACpC,OAAIA,IAAKkC,QAAOlC,IAAI;OACfiC,UAAS;;AAGhBP,oBAAkBC,KAAiC,EAAE,EAA8BQ,KAAK;GACxF;;AAGJ,IAAMC,mBAAmB,OAAO,EAC9BT,KACAU,KACAX,wBAKyB;CACzB,MAAM7G,WAAWwH,IAAIE,aAAalE,IAAItF,0BAAsB;AAC5D,KAAI,CAAC8B,SACH,OAAM,IAAIoF,MAAM,uCAAuC;AAGzD,KAAIyB,mBAAmB;EACrB,MAAMc,aAAab;AACnB,MAAI;AACF,SAAMF,qBAAqBC,mBAAmBc,WAAW;UACnD;AACN,SAAM,IAAIvC,MAAM,iCAAiC;;EAGnD,MAAMwC,cAAcD,WAAWhH,SAASC;EACxC,MAAMiH,gBAAgBD,aAAaxH;AACnC,MAAI,CAACyH,cACH,OAAM,IAAIzC,MAAM,0CAA0C;EAG5D,MAAM9E,kBAAkBsH,aAAatH;EACrC,MAAMD,kBAAkBuH,aAAavH;AAErC,MAAI6B,MAAMqC,QAAQjE,gBAAgB,IAAIA,gBAAgB+F,SAAS;OACzD,CAAC/F,gBAAgBoF,SAAS1F,SAAS,CACrC,OAAM,IAAIoF,MAAM,yCAAyC;aAElD/E;OACLA,oBAAoBL,SACtB,OAAM,IAAIoF,MAAM,yCAAyC;QAG3D,OAAM,IAAIA,MAAM,yCAAyC;AAI3D,SAAO;GAAEpF;GAAUC,QAAQ4H;GAAe3H,SAD1B1C,wBAAwB;IAAEwC;IAAUW,SAASgH,WAAWhH;IAAS,CAAC;GAC/B;;CAGrD,MAAMuD,MAAM4C,IAAIgB,QAAQ1J;CACxB,MAAM2J,eAAe7F,MAAMqC,QAAQL,IAAI,GAAGA,IAAI,KAAKA;AACnD,KAAI,CAAC6D,aACH,OAAM,IAAI3C,MAAM,iFAAiF;CAKnG,MAAMxE,OAAO,OADA,MAAMvD,OAAO6K,UAAU,UADR,EAAEpB,KAAK,EAAEnG,SAAS,MAAK,EAAG,CACF,EAC5BwH,SAASJ,cAAc;EAAEvH,SAAS;EAAGC,aAAa;EAAG,CAAC,CAAC2H,MAAM;CACrF,MAAMC,aAAazH,MAAMJ;AAEzB,KAAI,EADY0B,MAAMqC,QAAQ8D,WAAW,GAAGA,WAAWC,KAAKC,MAAMlD,OAAOkD,EAAE,CAAC,GAAG,EAAE,EACpE7C,SAAS1F,SAAS,CAC7B,OAAM,IAAIoF,MAAM,yCAAyC;CAG3D,MAAMoD,QAAQ/K,8BAA8BmD,MAAMZ,SAAS;AAG3D,QAAO;EAAEA;EAAUC,QAAQ8H;EAAc7H,SAFzB3C,aAAa;GAAEyC;GAAUC,QAAQ8H;GAAcS,OAAOA,MAAMnC,SAASmC,QAAQ,CAAC,QAAO;GAAG,CAAC;EAEvD;;AAGpD,IAAMC,iBAAiB,OAAOzI,UAAkBf,cAA2C;CACzF,MAAMyJ,MAAoB,EACxB5B,KAAK,EACHnG,SAAS,EACPC,MAAM,EACJP,iBAAiBL,UACnB,EACF,EACF,EACD;AAED,QAAO3C,OAAOsL,UAAU1J,WAAWyJ,IAAI;;AAGzC,IAAME,mBAAmB5I,UAAkBf,cAA8B,GAAGe,SAAQ,GAAIf;AAExF,IAAM4J,sBAAsB7I,UAAkBf,cAA4B;CACxE,MAAMH,MAAM8J,gBAAgB5I,UAAUf,UAAU;CAChD,MAAM6J,QAAQtG,eAAegB,IAAI1E,IAAI;AACrC,KAAI,CAACgK,MAAO;AACZC,cAAaD,MAAM;AACnBtG,gBAAemB,OAAO7E,IAAI;;AAG5B,IAAMkK,yCAAyChJ,UAAkBf,cAA4B;CAC3F,MAAMH,MAAM8J,gBAAgB5I,UAAUf,UAAU;AAChD,KAAIuD,eAAeyG,IAAInK,IAAI,CAAE;CAE7B,MAAMoK,QAAQC,KAAKC,IAAI,GAAGD,KAAKE,IAAI,KAAMF,KAAKG,MAAMvG,mBAAmB,CAAC,CAAC;AACzEP,gBAAee,IAAIzE,KAAK4D,iBAAiB;AACvCF,iBAAemB,OAAO7E,IAAI;AACrBiI,UAAQwC,IAAI,CACfC,8BAA8BxJ,UAAUf,UAAU,EAClDwK,mCAAmCzJ,UAAUf,UAAU,CACxD,CAAC,CAACyK,YAAY,GAAG;IACjBR,MAAM,CAAC;;AAGZ,IAAMS,kBAAkB,OAAO,EAC7B3J,UACA4J,iBACA1J,SACAjB,WACAC,UACAC,OACAC,cASmB;CACnB,MAAMyK,SAAS,MAAMrL,YAAY;EAC/BwB;EACAE;EACAjB;EACAE;EACAC;EACA4D;EACD,CAAC;CACF,MAAMzD,UAAyB;EAC7BP,MAAM;EACNC;EACAC;EACAO,MAAMoK,OAAOpK;EACb,GAAIoK,OAAOjK,WAAW,EAAEA,UAAUiK,OAAOjK,UAAU,GAAG,EAAE;EACxD,GAAI,OAAOiK,OAAOhK,eAAe,WAAW,EAAEA,YAAYgK,OAAOhK,YAAY,GAAG,EAAE;EACnF;AAED,MAAK,MAAMiK,YAAYF,iBAAiB;EACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,MAAI,CAAC7G,GAAI;AACTa,SAAOb,IAAI1D,QAAQ;;;AAIvB,IAAMwK,kBAAkB,OAAO,EAC7B/J,UACA4J,iBACA1J,SACAjB,WACAC,UACAC,YAQmB;CAQnB,MAAMI,UAAyB;EAC7BP,MAAM;EACNC;EACAC;EACAY,OAXY,MAAMvB,YAAY;GAC9ByB;GACAE;GACAjB;GACAE;GACA6D;GACD,CAAC;EAMD;AAED,MAAK,MAAM8G,YAAYF,iBAAiB;EACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,MAAI,CAAC7G,GAAI;AACTa,SAAOb,IAAI1D,QAAQ;;;AAIvB,IAAMyK,8BACJC,kBACAC,gBACAC,iBACY;AACZ,KAAID,mBAAmBD,iBAAkB,QAAO;AAChD,QAAOE,aAAarJ,qBAAqB4E,SAASuE,iBAAiB;;AAGrE,IAAMG,uCACJpK,UACAf,cACY;CACZ,MAAMoL,aAAahI,cAAcmB,IAAIxD,SAAS;AAC9C,KAAI,CAACqK,WAAY,QAAO;AAExB,MAAK,MAAMC,YAAYD,WAAWE,QAAQ,CACxC,MAAK,MAAM,CAACL,gBAAgBM,cAAcF,SAASG,SAAS,CAC1D,MAAK,MAAMN,gBAAgBK,UAAUD,QAAQ,CAC3C,KAAIP,2BAA2B/K,WAAWiL,gBAAgBC,aAAa,CACrE,QAAO;AAMf,QAAO;;AAGT,IAAMO,oCACJ1K,UACAf,cACY;CACZ,MAAMoL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;AACnD,KAAI,CAACqK,WAAY,QAAO;AAExB,MAAK,MAAMC,YAAYD,WAAWE,QAAQ,CAExC,KADkBD,SAAS9G,IAAIvE,UAAU,EAC1B2E,KACb,QAAO;AAIX,QAAO;;AAGT,IAAM4F,gCAAgC,OAAOxJ,UAAkBf,cAAqC;CAClG,MAAMoL,aAAahI,cAAcmB,IAAIxD,SAAS;AAC9C,KAAI,CAACqK,cAAc,CAACA,WAAWzG,KAAM;AAErC,MAAK,MAAM0G,YAAYD,WAAWE,QAAQ,CACxC,MAAK,MAAM,CAACL,gBAAgBM,cAAcF,SAASG,SAAS,CAC1D,MAAK,MAAM,CAACvL,UAAUyL,QAAQH,UAAUC,SAAS,EAAE;AACjD,MAAI,CAACT,2BAA2B/K,WAAWiL,gBAAgBS,IAAI,CAAE;EAEjE,MAAMf,kBAAkB1H,MAAMmC,KAAKsG,IAAI5J,UAAU;AACjD,MAAI,CAAC6I,gBAAgBvD,OAAQ;EAE7B,MAAMyD,WAAWF,gBAAgB;EAEjC,MAAM1J,UADO6B,WAAWyB,IAAIsG,SAAS,EACf5J;AACtB,MAAI,CAACA,QAAS;AAEd,MAAI;AACF,SAAMyJ,gBAAgB;IACpB3J;IACA4J;IACA1J;IACAjB,WAAWiL;IACXhL;IACAC,OAAOwL,IAAIxL;IACXC,SAASuL,IAAIvL;IACd,CAAC;WACK+F,KAAK;GAEZ,MAAM5F,UAAyB;IAAEP,MAAM;IAAiBC,WAAWiL;IAAgBhL;IAAUQ,OAD/EuG,mBAAmBd,IAAI;IAC+D;AACpG,QAAK,MAAM2E,YAAYF,iBAAiB;IACtC,MAAM3G,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,QAAI,CAAC7G,GAAI;AACTa,WAAOb,IAAI1D,QAAQ;;;;;AAQ/B,IAAMkK,qCAAqC,OAAOzJ,UAAkBf,cAAqC;CACvG,MAAMoL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;AACnD,KAAI,CAACqK,cAAc,CAACA,WAAWzG,KAAM;AAErC,MAAK,MAAM0G,YAAYD,WAAWE,QAAQ,EAAE;EAC1C,MAAMC,YAAYF,SAAS9G,IAAIvE,UAAU;AACzC,MAAI,CAACuL,UAAW;AAEhB,OAAK,MAAM,CAACtL,UAAUyL,QAAQH,UAAUC,SAAS,EAAE;GACjD,MAAMb,kBAAkB1H,MAAMmC,KAAKsG,IAAI5J,UAAU;AACjD,OAAI,CAAC6I,gBAAgBvD,OAAQ;GAE7B,MAAMyD,WAAWF,gBAAgB;GAEjC,MAAM1J,UADO6B,WAAWyB,IAAIsG,SAAS,EACf5J;AACtB,OAAI,CAACA,QAAS;AAEd,OAAI;AACF,UAAM6J,gBAAgB;KACpB/J;KACA4J;KACA1J;KACAjB;KACAC;KACAC,OAAOwL,IAAIxL;KACZ,CAAC;YACKgG,KAAK;IAEZ,MAAM5F,UAAyB;KAAEP,MAAM;KAAiBC;KAAWC;KAAUQ,OAD/DuG,mBAAmBd,IAAI;KAC+C;AACpF,SAAK,MAAMyF,kBAAkBhB,iBAAiB;KAC5C,MAAM3G,KAAKpB,QAAQ2B,IAAIoH,eAAe;AACtC,SAAI,CAAC3H,GAAI;AACTa,YAAOb,IAAI1D,QAAQ;;;;;;AAO7B,IAAMsL,qBAAqB,OAAO7K,UAAkBf,cAAqC;CACvF,MAAM6L,gBAAgBvI,cAAciB,IAAIxD,SAAS,oBAAI,IAAI8B,KAAK;AAC9DS,eAAcgB,IAAIvD,UAAU8K,cAAc;AAC1C,KAAIA,cAAc7B,IAAIhK,UAAU,CAAE;CAIlC,MAAM+L,UAFQ,MAAMvC,eAAezI,UAAUf,UAAU,EAElCgM,MAAM,EAAE,EAAE,EAC7BC,cAAc,gBACf,CAAC;AAEFF,QAAO3H,GAAG,gBAAgB;AACxB2F,wCAAsChJ,UAAUf,UAAU;GAC1D;AAEF+L,QAAO3H,GAAG,eAAe;AACvBwF,qBAAmB7I,UAAUf,UAAU;EACvC,MAAMqJ,MAAM/F,cAAciB,IAAIxD,SAAS;AACvCsI,OAAK3E,OAAO1E,UAAU;AACtB,MAAIqJ,OAAOA,IAAI1E,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;GACzD;AAEFgL,QAAO3H,GAAG,eAAe;AACvB,MAAI;AACFwF,sBAAmB7I,UAAUf,UAAU;AACvC+L,UAAOjH,OAAO;UACR;GAGR;AAEF+G,eAAcvH,IAAItE,WAAW+L,OAAO;;AAGtC,IAAMG,yBAAyB,EAC7BrB,UACA9J,UACAC,QACAhB,WACAC,UACAC,OACAC,SACA0B,2BAUU;CACV,MAAMuJ,aAAahI,cAAcmB,IAAIxD,SAAS,oBAAI,IAAI8B,KAAqD;AAC3GO,eAAckB,IAAIvD,UAAUqK,WAAW;CAEvC,MAAMC,WAAWD,WAAW7G,IAAIvD,OAAO,oBAAI,IAAI6B,KAAwC;AACvFuI,YAAW9G,IAAItD,QAAQqK,SAAS;CAEhC,MAAME,YAAYF,SAAS9G,IAAIvE,UAAU,oBAAI,IAAI6C,KAA2B;AAC5EwI,UAAS/G,IAAItE,WAAWuL,UAAU;CAElC,MAAMY,WAAWZ,UAAUhH,IAAItE,SAAS;AACxC,KAAIkM,UAAU;AACZA,WAASrK,UAAU0C,IAAIqG,SAAS;AAChCsB,WAAStK,uBAAuBoB,MAAMmC,KAAK,IAAIrD,IAAI,CAAC,GAAGoK,SAAStK,sBAAsB,GAAGA,qBAAqB,CAAC,CAAC;OAEhH0J,WAAUjH,IAAIrE,UAAU;EACtBC;EACAC;EACA0B,sBAAsBoB,MAAMmC,KAAK,IAAIrD,IAAIF,qBAAqB,CAAC;EAC/DC,WAAW,IAAIC,IAAI,CAAC8I,SAAS,CAAA;EAC9B,CAAC;CAGJ,MAAMuB,UAAUlJ,oBAAoBqB,IAAIsG,SAAS,oBAAI,IAAIhI,KAAK;AAC9DK,qBAAoBoB,IAAIuG,UAAUuB,QAAQ;CAE1C,MAAMC,WAAWD,QAAQ7H,IAAIvE,UAAU,oBAAI,IAAI+B,KAAK;AACpDqK,SAAQ9H,IAAItE,WAAWqM,SAAS;AAChCA,UAAS7H,IAAIvE,SAAS;;AAGxB,IAAMqM,8BAA8B,EAClCzB,UACA9J,UACAC,QACAhB,WACAC,UACAC,YAQU;CACV,MAAMkL,aAAa/H,mBAAmBkB,IAAIxD,SAAS,oBAAI,IAAI8B,KAA0D;AACrHQ,oBAAmBiB,IAAIvD,UAAUqK,WAAW;CAE5C,MAAMC,WAAWD,WAAW7G,IAAIvD,OAAO,oBAAI,IAAI6B,KAA6C;AAC5FuI,YAAW9G,IAAItD,QAAQqK,SAAS;CAEhC,MAAME,YAAYF,SAAS9G,IAAIvE,UAAU,oBAAI,IAAI6C,KAAgC;AACjFwI,UAAS/G,IAAItE,WAAWuL,UAAU;CAElC,MAAMY,WAAWZ,UAAUhH,IAAItE,SAAS;AACxC,KAAIkM,SACFA,UAASrK,UAAU0C,IAAIqG,SAAS;KAEhCU,WAAUjH,IAAIrE,UAAU;EACtBC;EACA4B,WAAW,IAAIC,IAAI,CAAC8I,SAAS,CAAA;EAC9B,CAAC;CAGJ,MAAMuB,UAAUjJ,yBAAyBoB,IAAIsG,SAAS,oBAAI,IAAIhI,KAAK;AACnEM,0BAAyBmB,IAAIuG,UAAUuB,QAAQ;CAE/C,MAAMC,WAAWD,QAAQ7H,IAAIvE,UAAU,oBAAI,IAAI+B,KAAK;AACpDqK,SAAQ9H,IAAItE,WAAWqM,SAAS;AAChCA,UAAS7H,IAAIvE,SAAS;;AAGxB,IAAMsM,4BAA4B,EAChC1B,UACA9J,UACAC,QACAhB,WACAC,eAOU;CACV,MAAMmL,aAAahI,cAAcmB,IAAIxD,SAAS;CAC9C,MAAMsK,WAAWD,YAAY7G,IAAIvD,OAAO;CACxC,MAAMuK,YAAYF,UAAU9G,IAAIvE,UAAU;CAC1C,MAAM0L,MAAMH,WAAWhH,IAAItE,SAAS;CACpC,MAAMuM,qBAAqB,IAAIzK,IAAY,CAAC/B,WAAW,GAAI0L,KAAK7J,wBAAwB,EAAE,CAAE,CAAC;AAC7F,KAAI6J,KAAK;AACPA,MAAI5J,UAAU4C,OAAOmG,SAAS;AAC9B,MAAI,CAACa,IAAI5J,UAAU6C,KACjB4G,YAAW7G,OAAOzE,SAAS;;CAI/B,MAAMmM,UAAUlJ,oBAAoBqB,IAAIsG,SAAS;CACjD,MAAMvG,MAAM8H,SAAS7H,IAAIvE,UAAU;AACnC,KAAIsE,KAAK;AACPA,MAAII,OAAOzE,SAAS;AACpB,MAAI,CAACqE,IAAIK,KACPyH,UAAS1H,OAAO1E,UAAU;;AAI9B,KAAIuL,aAAaA,UAAU5G,SAAS,EAClC0G,WAAU3G,OAAO1E,UAAU;AAG7B,KAAIqL,YAAYA,SAAS1G,SAAS,EAChCyG,aAAY1G,OAAO1D,OAAO;AAG5B,MAAK,MAAMyL,qBAAqBD,oBAAoB;AAClD,MACErB,oCAAoCpK,UAAU0L,kBAAkB,IAC7DhB,iCAAiC1K,UAAU0L,kBAAkB,CAEhE;EAGF,MAAMZ,gBAAgBvI,cAAciB,IAAIxD,SAAS;EACjD,MAAMgL,SAASF,eAAetH,IAAIkI,kBAAkB;AACpD,MAAIV,QAAQ;AACV,OAAI;AACFA,WAAOjH,OAAO;WACR;AAGR8E,sBAAmB7I,UAAU0L,kBAAkB;AAC/CZ,kBAAenH,OAAO+H,kBAAkB;AACxC,OAAIZ,iBAAiBA,cAAclH,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;;;AAIjF,KAAIqK,cAAcA,WAAWzG,SAAS,EAAGvB,eAAcsB,OAAO3D,SAAS;AACvE,KAAIqL,WAAWA,QAAQzH,SAAS,EAAGzB,qBAAoBwB,OAAOmG,SAAS;;AAGzE,IAAM6B,iCAAiC,EACrC7B,UACA9J,UACAC,QACAhB,WACAC,eAOU;CACV,MAAMmL,aAAa/H,mBAAmBkB,IAAIxD,SAAS;CACnD,MAAMsK,WAAWD,YAAY7G,IAAIvD,OAAO;CACxC,MAAMuK,YAAYF,UAAU9G,IAAIvE,UAAU;CAC1C,MAAM0L,MAAMH,WAAWhH,IAAItE,SAAS;AACpC,KAAIyL,KAAK;AACPA,MAAI5J,UAAU4C,OAAOmG,SAAS;AAC9B,MAAI,CAACa,IAAI5J,UAAU6C,KACjB4G,YAAW7G,OAAOzE,SAAS;;CAI/B,MAAMmM,UAAUjJ,yBAAyBoB,IAAIsG,SAAS;CACtD,MAAMvG,MAAM8H,SAAS7H,IAAIvE,UAAU;AACnC,KAAIsE,KAAK;AACPA,MAAII,OAAOzE,SAAS;AACpB,MAAI,CAACqE,IAAIK,KACPyH,UAAS1H,OAAO1E,UAAU;;AAI9B,KAAIuL,aAAaA,UAAU5G,SAAS,EAClC0G,WAAU3G,OAAO1E,UAAU;AAG7B,KAAIqL,YAAYA,SAAS1G,SAAS,EAChCyG,aAAY1G,OAAO1D,OAAO;AAG5B,KAAI,CAACmK,oCAAoCpK,UAAUf,UAAU,IAAI,CAACyL,iCAAiC1K,UAAUf,UAAU,EAAE;EACvH,MAAM6L,gBAAgBvI,cAAciB,IAAIxD,SAAS;EACjD,MAAMgL,SAASF,eAAetH,IAAIvE,UAAU;AAC5C,MAAI+L,QAAQ;AACV,OAAI;AACFA,WAAOjH,OAAO;WACR;AAGR8E,sBAAmB7I,UAAUf,UAAU;AACvC6L,kBAAenH,OAAO1E,UAAU;AAChC,OAAI6L,iBAAiBA,cAAclH,SAAS,EAAGrB,eAAcoB,OAAO3D,SAAS;;;AAIjF,KAAIqK,cAAcA,WAAWzG,SAAS,EAAGtB,oBAAmBqB,OAAO3D,SAAS;AAC5E,KAAIqL,WAAWA,QAAQzH,SAAS,EAAGxB,0BAAyBuB,OAAOmG,SAAS;;AAG9E,IAAM8B,8BAA8B9B,aAA6B;CAC/D,IAAIhK,QAAQ;CACZ,MAAM+L,4BAA4B1J,oBAAoBqB,IAAIsG,SAAS;AACnE,KAAI+B,0BACF,MAAK,MAAMtI,OAAOsI,0BAA0BtB,QAAQ,CAAEzK,UAASyD,IAAIK;CAGrE,MAAMkI,4BAA4B1J,yBAAyBoB,IAAIsG,SAAS;AACxE,KAAIgC,0BACF,MAAK,MAAMvI,OAAOuI,0BAA0BvB,QAAQ,CAAEzK,UAASyD,IAAIK;AAGrE,QAAO9D;;AAGT,IAAMiM,iBAAiBjC,aAA2B;CAChD,MAAM1G,OAAOrB,WAAWyB,IAAIsG,SAAS;AACrC,KAAI1G,MAAM;EACR,MAAMiI,UAAUlJ,oBAAoBqB,IAAIsG,SAAS;AACjD,MAAIuB,QACF,MAAK,MAAM,CAACpM,WAAW+M,SAASX,QAAQZ,SAAS,CAC/C,MAAK,MAAMvL,YAAY8M,KAAKzB,QAAQ,CAClCiB,0BAAyB;GACvB1B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB;GACAC;GACD,CAAC;EAKR,MAAM+M,eAAe7J,yBAAyBoB,IAAIsG,SAAS;AAC3D,MAAImC,aACF,MAAK,MAAM,CAAChN,WAAW+M,SAASC,aAAaxB,SAAS,CACpD,MAAK,MAAMvL,YAAY8M,KAAKzB,QAAQ,CAClCoB,+BAA8B;GAC5B7B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB;GACAC;GACD,CAAC;;AAMViD,qBAAoBwB,OAAOmG,SAAS;AACpC1H,0BAAyBuB,OAAOmG,SAAS;CAEzC,MAAMoC,aAAajK,cAAcuB,IAAIsG,SAAS,IAAI,EAAE;AACpD7H,eAAc0B,OAAOmG,SAAS;AAC9B,MAAK,MAAMqC,MAAMD,WACf,KAAI;AACFC,MAAI;SACE;AAKVtK,SAAQ8B,OAAOmG,SAAS;AACxB/H,YAAW4B,OAAOmG,SAAS;AAC3B9H,gBAAe2B,OAAOmG,SAAS;;AAGjC,IAAMsC,6BAA6BpM,aAA2B;CAC5D,MAAMqM,SAAS,GAAGrM,SAAQ;AAC1B,MAAK,MAAMlB,OAAOoD,MAAMmC,KAAK7B,eAAewJ,MAAM,CAAC,EAAE;AACnD,MAAI,CAAClN,IAAIwN,WAAWD,OAAO,CAAE;EAC7B,MAAMvD,QAAQtG,eAAegB,IAAI1E,IAAI;AACrC,MAAIgK,MACFC,cAAaD,MAAM;AAErBtG,iBAAemB,OAAO7E,IAAI;;;AAI9B,IAAayN,oBAAoBvM,aAA2B;CAC1D,MAAMwM,qBAAqBxM,SAASyM,MAAM;AAC1C,KAAI,CAACD,mBAAoB;CAEzB,MAAME,kBAAkBxK,MAAMmC,KAAKtC,WAAW0I,SAAS,CAAC,CACrDkC,QAAQ,GAAGvJ,UAAUA,KAAKpD,aAAawM,mBAAmB,CAC1DlE,KAAK,CAACwB,cAAcA,SAAS;AAEhC,MAAK,MAAMA,YAAY4C,iBAAiB;EACtC,MAAMzJ,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChCiC,gBAAcjC,SAAS;AACvB,MAAI7G,GACF,KAAI;AACFA,MAAGc,OAAO;UACJ;;AAMZqI,2BAA0BI,mBAAmB;CAE7C,MAAM1B,gBAAgBvI,cAAciB,IAAIgJ,mBAAmB;AAC3D,KAAI1B,eAAe;AACjB,OAAK,MAAM,CAAC7L,WAAW+L,WAAWF,cAAcL,SAAS,EAAE;AACzD,OAAI;AACFO,WAAOjH,OAAO;WACR;AAGR8E,sBAAmB2D,oBAAoBvN,UAAU;;AAEnDsD,gBAAcoB,OAAO6I,mBAAmB;;AAG1CnK,eAAcsB,OAAO6I,mBAAmB;AACxClK,oBAAmBqB,OAAO6I,mBAAmB;;AAG/C,IAAMI,sBAAsB,OAAO,EACjC9C,UACA1G,MACAwB,cAKmB;CACnB,MAAM3B,KAAKpB,QAAQ2B,IAAIsG,SAAS;AAChC,KAAI,CAAC7G,GAAI;AAET,KAAI2B,QAAQ5F,SAAS,SAAS;AACZgD,iBAAewB,IAAIsG,SAAS,EACnC9F,SAASY,QAAQtF,OAAOsF,QAAQrF,QAAQ;AACjD;;CAGF,MAAMuN,iBACJlI,QAAQ5F,SAAS,eACd4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS;CACtB,MAAM+N,mBAAmBrN,UAAkB;AACzC,MAAIoN,gBAAgB;AAClBhJ,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F,aAAa;IAAIC,UAAU0F,QAAQ1F,YAAY;IAAIQ;IAAO,CAAC;AAClH;;AAGFoE,SAAOb,IAAI;GAAEjE,MAAM;GAAiBC,WAAW2F,QAAQ3F,aAAa;GAAIC,UAAU0F,QAAQ1F,YAAY;GAAIQ;GAAO,CAAC;;AAGpH,KAAI,CAACkF,QAAQ3F,aAAa,OAAO2F,QAAQ3F,cAAc,SAAU;AACjE,KAAI,CAAC+D,uBAAuB1B,qBAAqB2H,IAAIrE,QAAQ3F,UAAU,EAAE;AACvE8N,kBAAgB,oBAAoB;AACpC;;AAEF,KAAI,CAACnI,QAAQ1F,YAAY,OAAO0F,QAAQ1F,aAAa,SAAU;AAC/D,KAAI0F,QAAQ1F,SAASmH,SAAShF,kBAAmB;AAEjD,KAAIuD,QAAQ5F,SAAS,gBAAgB;AACnCwM,2BAAyB;GACvB1B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB,WAAW2F,QAAQ3F;GACnBC,UAAU0F,QAAQ1F;GACnB,CAAC;AACF;;AAGF,KAAI0F,QAAQ5F,SAAS,gBAAgB;AACnC2M,gCAA8B;GAC5B7B;GACA9J,UAAUoD,KAAKpD;GACfC,QAAQmD,KAAKnD;GACbhB,WAAW2F,QAAQ3F;GACnBC,UAAU0F,QAAQ1F;GACnB,CAAC;AACF;;AAGF,KAAI,CAAC0F,QAAQzF,SAAS,OAAOyF,QAAQzF,UAAU,SAAU;CAEzD,MAAMe,UAAUkD,KAAKlD;AAErB,KAAI,CAACA,QAAQ8M,IAAI,QAAQpI,QAAQ3F,UAA4B,EAAE;AAC7D8N,kBAAgB,YAAY;AAC5B;;AAGF,KAAInI,QAAQ5F,SAAS,oBAAoB4F,QAAQ5F,SAAS,aAAa;EACrE,MAAMI,UAAUf,yBAAyBuG,QAAQxF,QAAQ;AACzD,MAAIwF,QAAQ5F,SAAS,kBAAkB;AAErC,OAAI,EADamD,oBAAoBqB,IAAIsG,SAAS,EAAEtG,IAAIoB,QAAQ3F,UAAU,EAAEgK,IAAIrE,QAAQ1F,SAAS,IAAI,UACpF0M,2BAA2B9B,SAAS,IAAIhH,2BAA2B;AAClFgB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ,OAAO;KAA0B,CAAC;AAChI;;GAGF,IAAIoB,uBAAiC,EAAE;AACvC,OAAI1B,QAAQ6N,aAAazH,KAAAA,EACvB,KAAI;AACF1E,2BAAuB,MAAMxC,oCAAoC;KAC/D0B,UAAUoD,KAAKpD;KACfE;KACAjB,WAAW2F,QAAQ3F;KACnBG;KACA4D;KACD,CAAC;YACKmC,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAIJyL,yBAAsB;IACpBrB;IACA9J,UAAUoD,KAAKpD;IACfC,QAAQmD,KAAKnD;IACbhB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IACfC;IACA0B;IACD,CAAC;AAEF,OAAI;IACF,MAAMoM,oBAAoB,IAAIlM,IAAY,CAAC4D,QAAQ3F,WAAW,GAAG6B,qBAAqB,CAAC;AACvF,SAAK,MAAM7B,aAAaiO,kBACtB,OAAMrC,mBAAmBzH,KAAKpD,UAAUf,UAAU;YAE7CkG,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAGF,OAAIkF,QAAQvF,oBAAoB,MAC9B;;AAIJ,MAAI;AACF,SAAMsK,gBAAgB;IACpB3J,UAAUoD,KAAKpD;IACf4J,iBAAiB,CAACE,SAAS;IAC3B5J;IACAjB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IACfC;IACD,CAAC;WACK+F,KAAK;GACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F;IAAWC,UAAU0F,QAAQ1F;IAAUQ;IAAO,CAAC;;AAExG;;AAGF,KAAIkF,QAAQ5F,SAAS,oBAAoB4F,QAAQ5F,SAAS,aAAa;AACrE,MAAI4F,QAAQ5F,SAAS,kBAAkB;AAErC,OAAI,EADaoD,yBAAyBoB,IAAIsG,SAAS,EAAEtG,IAAIoB,QAAQ3F,UAAU,EAAEgK,IAAIrE,QAAQ1F,SAAS,IAAI,UACzF0M,2BAA2B9B,SAAS,IAAIhH,2BAA2B;AAClFgB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ,OAAO;KAA0B,CAAC;AAChI;;AAGF6L,8BAA2B;IACzBzB;IACA9J,UAAUoD,KAAKpD;IACfC,QAAQmD,KAAKnD;IACbhB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IAChB,CAAC;AAEF,OAAI;AACF,UAAM0L,mBAAmBzH,KAAKpD,UAAU4E,QAAQ3F,UAAU;YACnDkG,KAAK;IACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,WAAOb,IAAI;KAAEjE,MAAM;KAAiBC,WAAW2F,QAAQ3F;KAAWC,UAAU0F,QAAQ1F;KAAUQ;KAAO,CAAC;AACtG;;AAGF,OAAIkF,QAAQvF,oBAAoB,MAC9B;;AAIJ,MAAI;AACF,SAAM0K,gBAAgB;IACpB/J,UAAUoD,KAAKpD;IACf4J,iBAAiB,CAACE,SAAS;IAC3B5J;IACAjB,WAAW2F,QAAQ3F;IACnBC,UAAU0F,QAAQ1F;IAClBC,OAAOyF,QAAQzF;IAChB,CAAC;WACKgG,KAAK;GACZ,MAAMzF,QAAQuG,mBAAmBd,IAAI;AACrCrB,UAAOb,IAAI;IAAEjE,MAAM;IAAiBC,WAAW2F,QAAQ3F;IAAWC,UAAU0F,QAAQ1F;IAAUQ;IAAO,CAAC;;;;AAK5G,IAAayN,WAAW,EACtBC,QACAC,OAAO,QACPxG,mBACAhE,iBAAiByK,oBACjBxK,2BAA2ByK,8BAC3BxK,oBAAoByK,uBACpBxK,qBAAqByK,6BASX;AACV,KAAI/L,mBAAmBuH,IAAImE,OAAO,CAAE;AACpC1L,oBAAmB+B,IAAI2J,OAAO;AAE9B,KAAI,OAAOE,uBAAuB,YAAYI,OAAOC,SAASL,mBAAmB,IAAIA,qBAAqB,EACxGzK,mBAAkBsG,KAAKG,MAAMgE,mBAAmB;AAGlD,KACE,OAAOC,iCAAiC,YACrCG,OAAOC,SAASJ,6BAA6B,IAC7CA,+BAA+B,EAElCzK,6BAA4BqG,KAAKG,MAAMiE,6BAA6B;AAGtE,KAAI,OAAOC,0BAA0B,YAAYE,OAAOC,SAASH,sBAAsB,IAAIA,yBAAyB,EAClHzK,sBAAqBoG,KAAKG,MAAMkE,sBAAsB;AAGxDxK,uBAAsB4K,QAAQH,uBAAuB;CAErD,MAAMI,MAAM,IAAI/P,gBAAgB;EAAEgQ,UAAU;EAAMC,YAAYlL;EAAiB,CAAC;AAEhFuK,QAAO/J,GAAG,YAAYyD,KAAsB3F,QAAgB6M,SAAiB;AAC3EhJ,2BAAyB7D,eAAe;GACtC8M,aAAanH,IAAIgB,QAAQoG,QAAQ;GACjCC,YAAYrH,IAAIU,OAAO;GACvB4G,WAAW,OAAOtH,IAAIgB,QAAQ,kBAAkB,WAAWhB,IAAIgB,QAAQ,gBAAgB;GACxF,EAAE;AACHnF,cAAYgB,OAAOmD,IAAI;EAEvB,IAAIU;AACJ,MAAI;AACFA,SAAM,IAAIC,IAAIX,IAAIU,OAAO,IAAI,UAAUV,IAAIgB,QAAQoG,QAAQ,cAAc;UACnE;AACNvH,cAAWxF,QAAQ,cAAc;AACjC;;AAGF,MAAIqG,IAAI6G,aAAahB,KAAM;AAE3B,GAAM,YAAW;AACf,OAAI;IACF,MAAMjK,OAAO,MAAMmE,iBAAiB;KAAET;KAAKU;KAAKX;KAAmB,CAAC;AACpElE,gBAAYY,IAAIuD,KAAK1D,KAAK;AAE1ByK,QAAIS,cAAcxH,KAAK3F,QAAQ6M,OAAO/K,OAAkB;AACtD4K,SAAIhK,KAAK,cAAcZ,IAAI6D,IAAI;MAC/B;YACK3B,KAAK;IACZ,MAAMP,UAAUO,eAAeC,QAAQD,IAAIP,UAAU;AACrD,QAAIA,QAAQ0H,WAAW,uBAAuB,EAAE;AAC9C3F,gBAAWxF,QAAQyD,QAAQ;AAC3B;;AAEF2B,iBAAapF,QAAQyD,QAAQ;AAC7B;;MAEA,CAAC8E,YAAY;AACf/C,cAAWxF,QAAQ,qBAAqB;IACxC;GACF;AAEF0M,KAAIxK,GAAG,eAAeJ,IAAe6D,QAAyB;EAC5D,MAAM1D,OAAOT,YAAYa,IAAIsD,IAAI;AACjCnE,cAAYgB,OAAOmD,IAAI;AACvB,MAAI,CAAC1D,MAAM;AACT,OAAI;AACFH,OAAGc,OAAO;WACJ;AAGR;;EAGF,MAAM+F,WAAWhN,YAAY;AAC7B+E,UAAQ0B,IAAIuG,UAAU7G,GAAG;AACzBlB,aAAWwB,IAAIuG,UAAU1G,KAAK;EAE9B,MAAMyJ,UAAU,IAAIzL,UAAU;GAAEhB,IAAI0J;GAAU7G;GAAIG;GAAM,CAAC;AACzDpB,iBAAeuB,IAAIuG,UAAU+C,QAAQ;EAErC,MAAMX,aAAgC,EAAE;AACxC,OAAK,MAAM5I,WAAW1B,eACpB,KAAI;GACF,MAAM2M,UAAUjL,QAAQuJ,QAAQ;AAChC,OAAI,OAAO0B,YAAY,WAAYrC,YAAWsC,KAAKD,QAAQ;UACrD;AAIV,MAAIrC,WAAW7F,OAAQpE,eAAcsB,IAAIuG,UAAUoC,WAAW;AAE9DjJ,KAAGI,GAAG,YAAYa,QAAiB;GACjC,IAAIuK;AACJ,OAAI;AACFA,aAAShK,cAAcP,IAAI;WACrB;AACN;;AAGF,OAAI,CAACuK,UAAU,OAAOA,WAAW,SAAU;GAC3C,MAAM7J,UAAU6J;AAChB,OACE7J,QAAQ5F,SAAS,WACd4F,QAAQ5F,SAAS,eACjB4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS,kBACjB4F,QAAQ5F,SAAS,eACjB4F,QAAQ5F,SAAS,oBACjB4F,QAAQ5F,SAAS,eACpB;AACG4N,uBAAoB;IAAE9C;IAAU1G;IAAewB;IAA0B,CAAC;IAC/E;AAEF3B,KAAGI,GAAG,eAAe;AACnB0I,iBAAcjC,SAAS;IACvB;AAEF7G,KAAGI,GAAG,eAAe;AACnB0I,iBAAcjC,SAAS;IACvB;GACF;;AAGJ,IAAa4E,sBAAsBpL,YAA6B;AAC9D1B,gBAAe4M,KAAKlL,QAAQ;;AAG9B,IAAaqL,yBAAyB3O,UAAkBf,cAA4B;AAClF+J,uCAAsChJ,UAAUf,UAAU"}

package/dist/{shared-BfMSZm2P.js → shared-DhZ_rDdo.js}

@@ -84,4 +84,4 @@ var getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(abil
 //#endregion
 export { getChunkSizeBytes as a, getRawBodyLimitBytes as c, getUploadKeyHash as d, getUploadSessionAccessQuery as f, toBufferPayload as h, getBucketName as i, getSessionTtlMs as l, normalizeSha256Hex as m, computeSha256Hex as n, getMaxClientUploadBytesPerSecond as o, getUserId as p, ensureUploadIndexes as r, getModelCtx as s, buildUploadsAbility as t, getTenantId as u };
 
-//# sourceMappingURL=shared-BfMSZm2P.js.map
+//# sourceMappingURL=shared-DhZ_rDdo.js.map

package/dist/{shared-BfMSZm2P.js.map → shared-DhZ_rDdo.js.map}

@@ -1 +1 @@
-{"version":3,"file":"shared-BfMSZm2P.js","names":["createHash","timingSafeEqual","Ctx","IRBUploadChunk","IRBUploadSession","LoadModelCtx","buildAbilityFromSession","getAccessibleByQuery","AppAbility","Model","SessionUser","id","currentTenantId","UploadSessionDoc","UploadChunkDoc","Omit","data","Buffer","DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","getTenantId","rawSession","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","Promise","dbName","String","db","name","has","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","getUploadSessionAccessQuery","action","Record","timingSafeEqualHex","left","right","length","getOwnershipSelector","Pick","ownerKeyHash"],"sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"mappings":";;;AAoBA,IAAMkB,2BAA2B,IAAI,OAAO;AAC5C,IAAMC,uBAAuB,KAAK,OAAO;AAEzC,IAAMC,sCAAsC,KAAK,OAAO;AAExD,IAAMC,wBAAwB,OAAU;AAExC,IAAMC,sCAAsB,IAAIC,KAAa;AAE7C,IAAMC,4BAA4BC,aAAqC;AACrE,KAAI,OAAOA,aAAa,SAAU,QAAO;CACzC,MAAMC,aAAaD,SAASE,MAAM;AAClC,KAAI,CAACD,WAAY,QAAO;CACxB,MAAME,SAASC,OAAOH,WAAW;AACjC,KAAI,CAACG,OAAOC,SAASF,OAAO,IAAIA,UAAU,EAAG,QAAO;AACpD,QAAOG,KAAKC,MAAMJ,OAAO;;AAG3B,IAAaK,0BAAkC;CAE7C,MAAMK,WADad,yBAAyBW,QAAQC,IAAIC,2BAA2B,IACpDnB;AAC/B,QAAOa,KAAKQ,IAAIpB,sBAAsBmB,SAAS;;AAGjD,IAAaE,yCAAwD;AAEnE,QADmBhB,yBAAyBW,QAAQC,IAAIK,sCAAsC,IACzErB;;AAGvB,IAAasB,wBAAgC;AAE3C,SADmBlB,yBAAyBW,QAAQC,IAAIQ,wBAAwB,IAAIvB,yBAChE;;AAGtB,IAAawB,wBAAwBC,mBAAmCA,iBAAiB,OAAO;AAEhG,IAAaC,uBAA+BZ,QAAQC,IAAIY,6BAA6B,IAAIrB,MAAM,IAAI;AAEnG,IAAasB,aAAaC,QAAyC;CACjE,MAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAM3C;AACnC,KAAI,OAAOwC,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAa6B,eAAeL,QAAyC;CACnE,MAAMM,aAAaN,IAAIE,IAAIC,SAASC,MAAM1C;CAC1C,MAAM6C,kBAAkB,OAAOD,eAAe,WAAWA,WAAW7B,MAAM,GAAG;CAE7E,MAAM+B,SAAST,UAAUC,IAAI;CAC7B,MAAMS,WAAWT,IAAIE,IAAIQ,QAAQ;CACjC,MAAMC,gBAAgBC,MAAMC,QAAQJ,SAAS,GAAGA,SAAS,KAAKA;CAC9D,MAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAclC,MAAM,GAAGkC,cAAclC,MAAM,GAAG;AAEtG,KAAI,CAAC+B,UAAUM,WAAY,QAAOA;AAElC,KAAIN,OAAQ,QAAOD,mBAAmB;AAEtC,KAAIA,gBAAiB,QAAOA;AAE5B,QAAOO;;AAGT,IAAaC,oBAAoBjD,SAAyBhB,WAAW,SAAS,CAACkE,OAAOlD,KAAK,CAACmD,OAAO,MAAM;AAEzG,IAAaC,sBAAsBC,UAA0BA,MAAM1C,MAAM,CAAC2C,aAAa;AAEvF,IAAaC,eAAeC,MAAwBC,UAAkBC,aAAwC;CAC5GtB,KAAK,EACHC,SAAS,EACPC,MAAM,EACJ1C,iBAAiB6D,UACnB,EACF,EACD;CACDC;CACD;AAED,IAAaC,mBAAmBC,YAAoC;AAClE,KAAI3D,OAAO4D,SAASD,QAAQ,CAAE,QAAOA;AACrC,KAAIA,mBAAmBE,WAAY,QAAO7D,OAAO8D,KAAKH,QAAQ;AAC9D,QAAO;;AAGT,IAAaI,sBAAsB,OACjCC,eACAC,gBACkB;CAClB,MAAME,SAASC,OAAQJ,eAA0DK,IAAIC,QAAQ,GAAG;AAChG,KAAIH,UAAU9D,oBAAoBkE,IAAIJ,OAAO,CAAE;AAE/C,OAAMD,QAAQM,IAAI,CAChBR,cAAcS,eAAe,EAC7BR,YAAYQ,eAAe,CAC5B,CAAC;AAEF,KAAIN,OAAQ9D,qBAAoBqE,IAAIP,OAAO;;AAG7C,IAAMQ,sBAAsBzC,QAAgC;AAC1D,KAAI,OAAOA,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAamE,oBAAoB3C,QAAyC;CACxE,MAAM4C,YAAYF,mBAAmB1C,IAAIE,IAAI2C,IAAI,eAAe,CAAC;AACjE,KAAI,CAACD,UAAW,QAAO;AACvB,QAAO7B,iBAAiBhD,OAAO8D,KAAKe,UAAU,CAAC;;AAGjD,IAAaE,uBAAuB9C,KAAuBuB,aAAiC;CAC1F,MAAMwB,gBAAgBJ,iBAAiB3C,IAAI;CAC3C,MAAMgD,SAASD,gBAAgB,EAAEA,eAAe,GAAGE,KAAAA;AACnD,QAAO7F,wBAAwB;EAAEmE;EAAUpB,SAASH,IAAIE,IAAIC;EAAS6C;EAAQ,CAAC;;AAGhF,IAAaE,+BACX1B,SACA2B,WAC4B9F,qBAAqBmE,SAAS2B,QAAQ,kBAAkB"}
+{"version":3,"file":"shared-DhZ_rDdo.js","names":["createHash","timingSafeEqual","Ctx","IRBUploadChunk","IRBUploadSession","LoadModelCtx","buildAbilityFromSession","getAccessibleByQuery","AppAbility","Model","SessionUser","id","currentTenantId","UploadSessionDoc","UploadChunkDoc","Omit","data","Buffer","DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","getTenantId","rawSession","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","Promise","dbName","String","db","name","has","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","getUploadSessionAccessQuery","action","Record","timingSafeEqualHex","left","right","length","getOwnershipSelector","Pick","ownerKeyHash"],"sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"mappings":";;;AAoBA,IAAMkB,2BAA2B,IAAI,OAAO;AAC5C,IAAMC,uBAAuB,KAAK,OAAO;AAEzC,IAAMC,sCAAsC,KAAK,OAAO;AAExD,IAAMC,wBAAwB,OAAU;AAExC,IAAMC,sCAAsB,IAAIC,KAAa;AAE7C,IAAMC,4BAA4BC,aAAqC;AACrE,KAAI,OAAOA,aAAa,SAAU,QAAO;CACzC,MAAMC,aAAaD,SAASE,MAAM;AAClC,KAAI,CAACD,WAAY,QAAO;CACxB,MAAME,SAASC,OAAOH,WAAW;AACjC,KAAI,CAACG,OAAOC,SAASF,OAAO,IAAIA,UAAU,EAAG,QAAO;AACpD,QAAOG,KAAKC,MAAMJ,OAAO;;AAG3B,IAAaK,0BAAkC;CAE7C,MAAMK,WADad,yBAAyBW,QAAQC,IAAIC,2BAA2B,IACpDnB;AAC/B,QAAOa,KAAKQ,IAAIpB,sBAAsBmB,SAAS;;AAGjD,IAAaE,yCAAwD;AAEnE,QADmBhB,yBAAyBW,QAAQC,IAAIK,sCAAsC,IACzErB;;AAGvB,IAAasB,wBAAgC;AAE3C,SADmBlB,yBAAyBW,QAAQC,IAAIQ,wBAAwB,IAAIvB,yBAChE;;AAGtB,IAAawB,wBAAwBC,mBAAmCA,iBAAiB,OAAO;AAEhG,IAAaC,uBAA+BZ,QAAQC,IAAIY,6BAA6B,IAAIrB,MAAM,IAAI;AAEnG,IAAasB,aAAaC,QAAyC;CACjE,MAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAM3C;AACnC,KAAI,OAAOwC,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAa6B,eAAeL,QAAyC;CACnE,MAAMM,aAAaN,IAAIE,IAAIC,SAASC,MAAM1C;CAC1C,MAAM6C,kBAAkB,OAAOD,eAAe,WAAWA,WAAW7B,MAAM,GAAG;CAE7E,MAAM+B,SAAST,UAAUC,IAAI;CAC7B,MAAMS,WAAWT,IAAIE,IAAIQ,QAAQ;CACjC,MAAMC,gBAAgBC,MAAMC,QAAQJ,SAAS,GAAGA,SAAS,KAAKA;CAC9D,MAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAclC,MAAM,GAAGkC,cAAclC,MAAM,GAAG;AAEtG,KAAI,CAAC+B,UAAUM,WAAY,QAAOA;AAElC,KAAIN,OAAQ,QAAOD,mBAAmB;AAEtC,KAAIA,gBAAiB,QAAOA;AAE5B,QAAOO;;AAGT,IAAaC,oBAAoBjD,SAAyBhB,WAAW,SAAS,CAACkE,OAAOlD,KAAK,CAACmD,OAAO,MAAM;AAEzG,IAAaC,sBAAsBC,UAA0BA,MAAM1C,MAAM,CAAC2C,aAAa;AAEvF,IAAaC,eAAeC,MAAwBC,UAAkBC,aAAwC;CAC5GtB,KAAK,EACHC,SAAS,EACPC,MAAM,EACJ1C,iBAAiB6D,UACnB,EACF,EACD;CACDC;CACD;AAED,IAAaC,mBAAmBC,YAAoC;AAClE,KAAI3D,OAAO4D,SAASD,QAAQ,CAAE,QAAOA;AACrC,KAAIA,mBAAmBE,WAAY,QAAO7D,OAAO8D,KAAKH,QAAQ;AAC9D,QAAO;;AAGT,IAAaI,sBAAsB,OACjCC,eACAC,gBACkB;CAClB,MAAME,SAASC,OAAQJ,eAA0DK,IAAIC,QAAQ,GAAG;AAChG,KAAIH,UAAU9D,oBAAoBkE,IAAIJ,OAAO,CAAE;AAE/C,OAAMD,QAAQM,IAAI,CAChBR,cAAcS,eAAe,EAC7BR,YAAYQ,eAAe,CAC5B,CAAC;AAEF,KAAIN,OAAQ9D,qBAAoBqE,IAAIP,OAAO;;AAG7C,IAAMQ,sBAAsBzC,QAAgC;AAC1D,KAAI,OAAOA,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAamE,oBAAoB3C,QAAyC;CACxE,MAAM4C,YAAYF,mBAAmB1C,IAAIE,IAAI2C,IAAI,eAAe,CAAC;AACjE,KAAI,CAACD,UAAW,QAAO;AACvB,QAAO7B,iBAAiBhD,OAAO8D,KAAKe,UAAU,CAAC;;AAGjD,IAAaE,uBAAuB9C,KAAuBuB,aAAiC;CAC1F,MAAMwB,gBAAgBJ,iBAAiB3C,IAAI;CAC3C,MAAMgD,SAASD,gBAAgB,EAAEA,eAAe,GAAGE,KAAAA;AACnD,QAAO7F,wBAAwB;EAAEmE;EAAUpB,SAASH,IAAIE,IAAIC;EAAS6C;EAAQ,CAAC;;AAGhF,IAAaE,+BACX1B,SACA2B,WAC4B9F,qBAAqBmE,SAAS2B,QAAQ,kBAAkB"}

package/dist/uploads.js

@@ -1,7 +1,7 @@
 //#region src/uploads/routes.ts
 var routes = Object.entries({ .../* @__PURE__ */ Object.assign({
-	"./api/file-uploads/handler.ts": () => import("./handler-Cx_ZP_NB.js"),
-	"./api/files/handler.ts": () => import("./handler-Cq-OJ0Rf.js")
+	"./api/file-uploads/handler.ts": () => import("./handler-BU_tEK6x.js"),
+	"./api/files/handler.ts": () => import("./handler-BBzEodA0.js")
 }) }).reduce((acc, [path, mod]) => {
 	acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
 	return acc;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.534.0",
+  "version": "0.536.0",
   "type": "module",
   "files": [
     "dist"