@rpcbase/server 0.593.0 → 0.595.0

package/dist/rts/index.js

@@ -1,1235 +1,1028 @@
-import { randomUUID } from "node:crypto";
+import { a as resolveRtsQueryDependencyModelNames, c as runRtsQuery, i as normalizeRtsQueryOptions, l as syncAuthenticatedSessionFromRequest, s as runRtsCount, t as RTS_QUERY_WINDOW_MAX_COUNT } from "../queryWindow-DP8zD0lb.js";
 import { models } from "@rpcbase/db";
+import { randomUUID } from "node:crypto";
 import { buildAbilityFromSession } from "@rpcbase/db/acl";
 import { WebSocketServer } from "ws";
-import { d as syncAuthenticatedSessionFromRequest, n as normalizeRtsQueryOptions, e as resolveRtsQueryDependencyModelNames, R as RTS_QUERY_WINDOW_MAX_COUNT, a as runRtsQuery, c as runRtsCount } from "../queryWindow-Cdr7K-S1.js";
-const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BqoKvylN.js") })
-}).reduce((acc, [path, mod]) => {
-  acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
-  return acc;
+//#region src/rts/routes.ts
+var routes = Object.entries({ .../* #__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-Fk-5fOSm.js") }) }).reduce((acc, [path, mod]) => {
+	acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
+	return acc;
 }, {});
-const QUERY_KEY_MAX_LEN = 4096;
-const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
-const DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024;
-const DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256;
-const DEFAULT_DISPATCH_DEBOUNCE_MS = 25;
-const initializedServers = /* @__PURE__ */ new WeakSet();
-const customHandlers = [];
-const sockets = /* @__PURE__ */ new Map();
-const socketMeta = /* @__PURE__ */ new Map();
-const socketWrappers = /* @__PURE__ */ new Map();
-const socketCleanup = /* @__PURE__ */ new Map();
-const socketSubscriptions = /* @__PURE__ */ new Map();
-const socketCountSubscriptions = /* @__PURE__ */ new Map();
-const subscriptions = /* @__PURE__ */ new Map();
-const countSubscriptions = /* @__PURE__ */ new Map();
-const changeStreams = /* @__PURE__ */ new Map();
-const dispatchTimers = /* @__PURE__ */ new Map();
-const upgradeMeta = /* @__PURE__ */ new WeakMap();
-let maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES;
-let maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET;
-let dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS;
-let allowInternalModels = false;
-const isValidQueryWindowCount = (value) => typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= RTS_QUERY_WINDOW_MAX_COUNT;
-class RtsSocket {
-  id;
-  tenantId;
-  userId;
-  ws;
-  handlers = /* @__PURE__ */ new Map();
-  messageHandlers = /* @__PURE__ */ new Map();
-  constructor({
-    id,
-    ws,
-    meta
-  }) {
-    this.id = id;
-    this.ws = ws;
-    this.tenantId = meta.tenantId;
-    this.userId = meta.userId;
-  }
-  on(event, handler) {
-    const set = this.handlers.get(event) ?? /* @__PURE__ */ new Set();
-    set.add(handler);
-    this.handlers.set(event, set);
-    return () => this.off(event, handler);
-  }
-  off(event, handler) {
-    const set = this.handlers.get(event);
-    if (!set) return;
-    set.delete(handler);
-    if (!set.size) this.handlers.delete(event);
-  }
-  emit(event, payload) {
-    sendWs(this.ws, {
-      type: "event",
-      event,
-      payload
-    });
-  }
-  onRtsMessage(channel, handler) {
-    const set = this.messageHandlers.get(channel) ?? /* @__PURE__ */ new Set();
-    set.add(handler);
-    this.messageHandlers.set(channel, set);
-    return () => this.offRtsMessage(channel, handler);
-  }
-  offRtsMessage(channel, handler) {
-    const set = this.messageHandlers.get(channel);
-    if (!set) return;
-    set.delete(handler);
-    if (!set.size) this.messageHandlers.delete(channel);
-  }
-  emitRtsMessage(channel, payload) {
-    sendWs(this.ws, {
-      type: "rts-message",
-      channel,
-      payload
-    });
-  }
-  close() {
-    try {
-      this.ws.close();
-    } catch {
-    }
-  }
-  dispatch(event, payload) {
-    const set = this.handlers.get(event);
-    if (!set) return;
-    for (const handler of set) {
-      handler(payload);
-    }
-  }
-  dispatchRtsMessage(channel, payload) {
-    const set = this.messageHandlers.get(channel);
-    if (!set) return;
-    for (const handler of set) {
-      handler(payload);
-    }
-  }
-}
-const rawToText = (raw) => {
-  if (typeof raw === "string") return raw;
-  if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString();
-  if (Array.isArray(raw)) return Buffer.concat(raw).toString();
-  return raw.toString();
+//#endregion
+//#region src/rts/index.ts
+var QUERY_KEY_MAX_LEN = 4096;
+var INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RBRtsChange", "RBRtsCounter"]);
+var DEFAULT_MAX_PAYLOAD_BYTES = 1024 * 1024;
+var DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET = 256;
+var DEFAULT_DISPATCH_DEBOUNCE_MS = 25;
+var initializedServers = /* @__PURE__ */ new WeakSet();
+var customHandlers = [];
+var sockets = /* @__PURE__ */ new Map();
+var socketMeta = /* @__PURE__ */ new Map();
+var socketWrappers = /* @__PURE__ */ new Map();
+var socketCleanup = /* @__PURE__ */ new Map();
+var socketSubscriptions = /* @__PURE__ */ new Map();
+var socketCountSubscriptions = /* @__PURE__ */ new Map();
+var subscriptions = /* @__PURE__ */ new Map();
+var countSubscriptions = /* @__PURE__ */ new Map();
+var changeStreams = /* @__PURE__ */ new Map();
+var dispatchTimers = /* @__PURE__ */ new Map();
+var upgradeMeta = /* @__PURE__ */ new WeakMap();
+var maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES;
+var maxSubscriptionsPerSocket = DEFAULT_MAX_SUBSCRIPTIONS_PER_SOCKET;
+var dispatchDebounceMs = DEFAULT_DISPATCH_DEBOUNCE_MS;
+var allowInternalModels = false;
+var isValidQueryWindowCount = (value) => typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 4096;
+var RtsSocket = class {
+	id;
+	tenantId;
+	userId;
+	ws;
+	handlers = /* @__PURE__ */ new Map();
+	messageHandlers = /* @__PURE__ */ new Map();
+	constructor({ id, ws, meta }) {
+		this.id = id;
+		this.ws = ws;
+		this.tenantId = meta.tenantId;
+		this.userId = meta.userId;
+	}
+	on(event, handler) {
+		const set = this.handlers.get(event) ?? /* @__PURE__ */ new Set();
+		set.add(handler);
+		this.handlers.set(event, set);
+		return () => this.off(event, handler);
+	}
+	off(event, handler) {
+		const set = this.handlers.get(event);
+		if (!set) return;
+		set.delete(handler);
+		if (!set.size) this.handlers.delete(event);
+	}
+	emit(event, payload) {
+		sendWs(this.ws, {
+			type: "event",
+			event,
+			payload
+		});
+	}
+	onRtsMessage(channel, handler) {
+		const set = this.messageHandlers.get(channel) ?? /* @__PURE__ */ new Set();
+		set.add(handler);
+		this.messageHandlers.set(channel, set);
+		return () => this.offRtsMessage(channel, handler);
+	}
+	offRtsMessage(channel, handler) {
+		const set = this.messageHandlers.get(channel);
+		if (!set) return;
+		set.delete(handler);
+		if (!set.size) this.messageHandlers.delete(channel);
+	}
+	emitRtsMessage(channel, payload) {
+		sendWs(this.ws, {
+			type: "rts-message",
+			channel,
+			payload
+		});
+	}
+	close() {
+		try {
+			this.ws.close();
+		} catch {}
+	}
+	dispatch(event, payload) {
+		const set = this.handlers.get(event);
+		if (!set) return;
+		for (const handler of set) handler(payload);
+	}
+	dispatchRtsMessage(channel, payload) {
+		const set = this.messageHandlers.get(channel);
+		if (!set) return;
+		for (const handler of set) handler(payload);
+	}
 };
-const safeJsonParse = (raw) => JSON.parse(rawToText(raw));
-const sendWs = (ws, message) => {
-  if (ws.readyState !== 1) return;
-  ws.send(JSON.stringify(message));
+var rawToText = (raw) => {
+	if (typeof raw === "string") return raw;
+	if (raw instanceof ArrayBuffer) return Buffer.from(raw).toString();
+	if (Array.isArray(raw)) return Buffer.concat(raw).toString();
+	return raw.toString();
 };
-const ensureSocketErrorHandler = (socket, context) => {
-  if (socket.listenerCount("error") > 0) return;
-  socket.on("error", (err) => {
-    const message = err instanceof Error ? err.message : String(err);
-    const name = err instanceof Error ? err.name : typeof err;
-    const stack = err instanceof Error ? err.stack : void 0;
-    const code = err && typeof err === "object" && "code" in err ? err.code : void 0;
-    if (code === "ECONNRESET" || code == null && message.includes("ECONNRESET")) return;
-    console.warn("[rb/rts] socket error", {
-      name,
-      code,
-      message,
-      stack,
-      remoteAddress: socket.remoteAddress,
-      remotePort: socket.remotePort,
-      localAddress: socket.localAddress,
-      localPort: socket.localPort,
-      ...context?.()
-    });
-  });
+var safeJsonParse = (raw) => JSON.parse(rawToText(raw));
+var sendWs = (ws, message) => {
+	if (ws.readyState !== 1) return;
+	ws.send(JSON.stringify(message));
 };
-const redactErrorMessage = (err) => {
-  const raw = err instanceof Error ? err.message : "Unknown error";
-  const trimmedModelList = raw.replace(/\.\s+Available models:[\s\S]*$/, "");
-  const maxLen = 256;
-  if (trimmedModelList.length <= maxLen) return trimmedModelList;
-  return trimmedModelList.slice(0, maxLen);
+var ensureSocketErrorHandler = (socket, context) => {
+	if (socket.listenerCount("error") > 0) return;
+	socket.on("error", (err) => {
+		const message = err instanceof Error ? err.message : String(err);
+		const name = err instanceof Error ? err.name : typeof err;
+		const stack = err instanceof Error ? err.stack : void 0;
+		const code = err && typeof err === "object" && "code" in err ? err.code : void 0;
+		if (code === "ECONNRESET" || code == null && message.includes("ECONNRESET")) return;
+		console.warn("[rb/rts] socket error", {
+			name,
+			code,
+			message,
+			stack,
+			remoteAddress: socket.remoteAddress,
+			remotePort: socket.remotePort,
+			localAddress: socket.localAddress,
+			localPort: socket.localPort,
+			...context?.()
+		});
+	});
 };
-const unauthorized = (socket, message = "Unauthorized") => {
-  ensureSocketErrorHandler(socket);
-  try {
-    socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
-    socket.write(`Error: ${message}\r
-`);
-    socket.end();
-  } catch {
-    socket.destroy();
-  }
+var redactErrorMessage = (err) => {
+	const trimmedModelList = (err instanceof Error ? err.message : "Unknown error").replace(/\.\s+Available models:[\s\S]*$/, "");
+	const maxLen = 256;
+	if (trimmedModelList.length <= maxLen) return trimmedModelList;
+	return trimmedModelList.slice(0, maxLen);
 };
-const badRequest = (socket, message = "Bad Request") => {
-  ensureSocketErrorHandler(socket);
-  try {
-    socket.write("HTTP/1.1 400 Bad Request\r\n\r\n");
-    socket.write(`Error: ${message}\r
-`);
-    socket.end();
-  } catch {
-    socket.destroy();
-  }
+var unauthorized = (socket, message = "Unauthorized") => {
+	ensureSocketErrorHandler(socket);
+	try {
+		socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+		socket.write(`Error: ${message}\r\n`);
+		socket.end();
+	} catch {
+		socket.destroy();
+	}
 };
-const runSessionMiddleware = async (sessionMiddleware, req) => {
-  await new Promise((resolve, reject) => {
-    const next = (err) => {
-      if (err) reject(err);
-      else resolve();
-    };
-    sessionMiddleware(req, {}, next);
-  });
+var badRequest = (socket, message = "Bad Request") => {
+	ensureSocketErrorHandler(socket);
+	try {
+		socket.write("HTTP/1.1 400 Bad Request\r\n\r\n");
+		socket.write(`Error: ${message}\r\n`);
+		socket.end();
+	} catch {
+		socket.destroy();
+	}
 };
-const parseUpgradeMeta = async ({
-  req,
-  url,
-  sessionMiddleware
-}) => {
-  const upgradeReq = req;
-  try {
-    await runSessionMiddleware(sessionMiddleware, upgradeReq);
-  } catch {
-    throw new Error("Failed to load session for RTS");
-  }
-  await syncAuthenticatedSessionFromRequest(upgradeReq);
-  const sessionUser = upgradeReq.session?.user;
-  const sessionUserId = sessionUser?.id?.trim();
-  if (!sessionUserId) {
-    throw new Error("Not signed in (missing session.user.id)");
-  }
-  const tenantId = sessionUser?.currentTenantId?.trim();
-  if (!tenantId) {
-    throw new Error("Missing current tenant in session");
-  }
-  const ability = buildAbilityFromSession({
-    tenantId,
-    session: upgradeReq.session
-  });
-  return {
-    tenantId,
-    userId: sessionUserId,
-    ability
-  };
+var runSessionMiddleware = async (sessionMiddleware, req) => {
+	await new Promise((resolve, reject) => {
+		const next = (err) => {
+			if (err) reject(err);
+			else resolve();
+		};
+		sessionMiddleware(req, {}, next);
+	});
 };
-const getTenantModel = async (tenantId, modelName) => {
-  const ctx = {
-    req: {
-      session: {
-        user: {
-          currentTenantId: tenantId
-        }
-      }
-    }
-  };
-  return models.getUnsafe(modelName, ctx);
+var parseUpgradeMeta = async ({ req, url, sessionMiddleware, postSyncSessionMiddleware }) => {
+	const upgradeReq = req;
+	try {
+		await runSessionMiddleware(sessionMiddleware, upgradeReq);
+	} catch {
+		throw new Error("Failed to load session for RTS");
+	}
+	await syncAuthenticatedSessionFromRequest(upgradeReq);
+	if (postSyncSessionMiddleware) try {
+		await runSessionMiddleware(postSyncSessionMiddleware, upgradeReq);
+	} catch {
+		throw new Error("RTS session authorization failed");
+	}
+	const sessionUser = upgradeReq.session?.user;
+	const sessionUserId = sessionUser?.id?.trim();
+	if (!sessionUserId) throw new Error("Not signed in (missing session.user.id)");
+	const tenantId = sessionUser?.currentTenantId?.trim();
+	if (!tenantId) throw new Error("Missing current tenant in session");
+	return {
+		tenantId,
+		userId: sessionUserId,
+		ability: buildAbilityFromSession({
+			tenantId,
+			session: upgradeReq.session
+		})
+	};
 };
-const makeDispatchKey = (tenantId, modelName) => `${tenantId}:${modelName}`;
-const clearDispatchTimer = (tenantId, modelName) => {
-  const key = makeDispatchKey(tenantId, modelName);
-  const timer = dispatchTimers.get(key);
-  if (!timer) return;
-  clearTimeout(timer);
-  dispatchTimers.delete(key);
+var getTenantModel = async (tenantId, modelName) => {
+	const ctx = { req: { session: { user: { currentTenantId: tenantId } } } };
+	return models.getUnsafe(modelName, ctx);
 };
-const scheduleDispatchSubscriptionsForModel = (tenantId, modelName) => {
-  const key = makeDispatchKey(tenantId, modelName);
-  if (dispatchTimers.has(key)) return;
-  const delay = Math.max(0, Math.min(1e3, Math.floor(dispatchDebounceMs)));
-  dispatchTimers.set(key, setTimeout(() => {
-    dispatchTimers.delete(key);
-    void Promise.all([dispatchSubscriptionsForModel(tenantId, modelName), dispatchCountSubscriptionsForModel(tenantId, modelName)]).catch(() => {
-    });
-  }, delay));
+var makeDispatchKey = (tenantId, modelName) => `${tenantId}:${modelName}`;
+var clearDispatchTimer = (tenantId, modelName) => {
+	const key = makeDispatchKey(tenantId, modelName);
+	const timer = dispatchTimers.get(key);
+	if (!timer) return;
+	clearTimeout(timer);
+	dispatchTimers.delete(key);
 };
-const runAndSendQuery = async ({
-  tenantId,
-  targetSocketIds,
-  ability,
-  modelName,
-  queryKey,
-  query,
-  options
-}) => {
-  const result = await runRtsQuery({
-    tenantId,
-    ability,
-    modelName,
-    query,
-    options,
-    allowInternalModels
-  });
-  const payload = {
-    type: "query-payload",
-    modelName,
-    queryKey,
-    data: result.data,
-    ...result.pageInfo ? {
-      pageInfo: result.pageInfo
-    } : {},
-    ...typeof result.totalCount === "number" ? {
-      totalCount: result.totalCount
-    } : {}
-  };
-  for (const socketId of targetSocketIds) {
-    const ws = sockets.get(socketId);
-    if (!ws) continue;
-    sendWs(ws, payload);
-  }
+var scheduleDispatchSubscriptionsForModel = (tenantId, modelName) => {
+	const key = makeDispatchKey(tenantId, modelName);
+	if (dispatchTimers.has(key)) return;
+	const delay = Math.max(0, Math.min(1e3, Math.floor(dispatchDebounceMs)));
+	dispatchTimers.set(key, setTimeout(() => {
+		dispatchTimers.delete(key);
+		Promise.all([dispatchSubscriptionsForModel(tenantId, modelName), dispatchCountSubscriptionsForModel(tenantId, modelName)]).catch(() => {});
+	}, delay));
 };
-const getHeadWindowOptions = (options, requestedCount) => {
-  if (!options.pagination) return options;
-  const pagination = {
-    ...options.pagination,
-    limit: requestedCount
-  };
-  delete pagination.cursor;
-  delete pagination.direction;
-  return {
-    ...options,
-    pagination
-  };
+var runAndSendQuery = async ({ tenantId, targetSocketIds, ability, modelName, queryKey, query, options }) => {
+	const result = await runRtsQuery({
+		tenantId,
+		ability,
+		modelName,
+		query,
+		options,
+		allowInternalModels
+	});
+	const payload = {
+		type: "query-payload",
+		modelName,
+		queryKey,
+		data: result.data,
+		...result.pageInfo ? { pageInfo: result.pageInfo } : {},
+		...typeof result.totalCount === "number" ? { totalCount: result.totalCount } : {}
+	};
+	for (const socketId of targetSocketIds) {
+		const ws = sockets.get(socketId);
+		if (!ws) continue;
+		sendWs(ws, payload);
+	}
 };
-const runAndSendSubscriptionQuery = async ({
-  tenantId,
-  targetSocketIds,
-  ability,
-  modelName,
-  queryKey,
-  subscription
-}) => {
-  if (!subscription.options.pagination) {
-    await runAndSendQuery({
-      tenantId,
-      targetSocketIds,
-      ability,
-      modelName,
-      queryKey,
-      query: subscription.query,
-      options: subscription.options
-    });
-    return;
-  }
-  const groups = /* @__PURE__ */ new Map();
-  for (const socketId of targetSocketIds) {
-    const state = subscription.windows.get(socketId);
-    if (!state) continue;
-    state.version += 1;
-    const targets = groups.get(state.requestedCount) ?? [];
-    targets.push({
-      socketId,
-      window: {
-        requestedCount: state.requestedCount,
-        version: state.version
-      }
-    });
-    groups.set(state.requestedCount, targets);
-  }
-  await Promise.all(Array.from(groups.entries()).map(async ([requestedCount, targets]) => {
-    try {
-      const result = await runRtsQuery({
-        tenantId,
-        ability,
-        modelName,
-        query: subscription.query,
-        options: getHeadWindowOptions(subscription.options, requestedCount),
-        allowInternalModels,
-        paginationMaxLimit: RTS_QUERY_WINDOW_MAX_COUNT,
-        includePaginationCursors: false
-      });
-      for (const target of targets) {
-        const current = subscription.windows.get(target.socketId);
-        if (!current || current.requestedCount !== target.window.requestedCount || current.version !== target.window.version) {
-          continue;
-        }
-        const ws = sockets.get(target.socketId);
-        if (!ws) continue;
-        sendWs(ws, {
-          type: "query-payload",
-          modelName,
-          queryKey,
-          data: result.data,
-          ...result.pageInfo ? {
-            pageInfo: result.pageInfo
-          } : {},
-          ...typeof result.totalCount === "number" ? {
-            totalCount: result.totalCount
-          } : {},
-          window: target.window
-        });
-      }
-    } catch (err) {
-      const error = redactErrorMessage(err);
-      for (const target of targets) {
-        const current = subscription.windows.get(target.socketId);
-        if (!current || current.requestedCount !== target.window.requestedCount || current.version !== target.window.version) {
-          continue;
-        }
-        const ws = sockets.get(target.socketId);
-        if (!ws) continue;
-        sendWs(ws, {
-          type: "query-payload",
-          modelName,
-          queryKey,
-          error,
-          window: target.window
-        });
-      }
-    }
-  }));
+var getHeadWindowOptions = (options, requestedCount) => {
+	if (!options.pagination) return options;
+	const pagination = {
+		...options.pagination,
+		limit: requestedCount
+	};
+	delete pagination.cursor;
+	delete pagination.direction;
+	return {
+		...options,
+		pagination
+	};
 };
-const runAndSendCount = async ({
-  tenantId,
-  targetSocketIds,
-  ability,
-  modelName,
-  queryKey,
-  query
-}) => {
-  const count = await runRtsCount({
-    tenantId,
-    ability,
-    modelName,
-    query,
-    allowInternalModels
-  });
-  const payload = {
-    type: "count-payload",
-    modelName,
-    queryKey,
-    count
-  };
-  for (const socketId of targetSocketIds) {
-    const ws = sockets.get(socketId);
-    if (!ws) continue;
-    sendWs(ws, payload);
-  }
+var runAndSendSubscriptionQuery = async ({ tenantId, targetSocketIds, ability, modelName, queryKey, subscription }) => {
+	if (!subscription.options.pagination) {
+		await runAndSendQuery({
+			tenantId,
+			targetSocketIds,
+			ability,
+			modelName,
+			queryKey,
+			query: subscription.query,
+			options: subscription.options
+		});
+		return;
+	}
+	const groups = /* @__PURE__ */ new Map();
+	for (const socketId of targetSocketIds) {
+		const state = subscription.windows.get(socketId);
+		if (!state) continue;
+		state.version += 1;
+		const targets = groups.get(state.requestedCount) ?? [];
+		targets.push({
+			socketId,
+			window: {
+				requestedCount: state.requestedCount,
+				version: state.version
+			}
+		});
+		groups.set(state.requestedCount, targets);
+	}
+	await Promise.all(Array.from(groups.entries()).map(async ([requestedCount, targets]) => {
+		try {
+			const result = await runRtsQuery({
+				tenantId,
+				ability,
+				modelName,
+				query: subscription.query,
+				options: getHeadWindowOptions(subscription.options, requestedCount),
+				allowInternalModels,
+				paginationMaxLimit: RTS_QUERY_WINDOW_MAX_COUNT,
+				includePaginationCursors: false
+			});
+			for (const target of targets) {
+				const current = subscription.windows.get(target.socketId);
+				if (!current || current.requestedCount !== target.window.requestedCount || current.version !== target.window.version) continue;
+				const ws = sockets.get(target.socketId);
+				if (!ws) continue;
+				sendWs(ws, {
+					type: "query-payload",
+					modelName,
+					queryKey,
+					data: result.data,
+					...result.pageInfo ? { pageInfo: result.pageInfo } : {},
+					...typeof result.totalCount === "number" ? { totalCount: result.totalCount } : {},
+					window: target.window
+				});
+			}
+		} catch (err) {
+			const error = redactErrorMessage(err);
+			for (const target of targets) {
+				const current = subscription.windows.get(target.socketId);
+				if (!current || current.requestedCount !== target.window.requestedCount || current.version !== target.window.version) continue;
+				const ws = sockets.get(target.socketId);
+				if (!ws) continue;
+				sendWs(ws, {
+					type: "query-payload",
+					modelName,
+					queryKey,
+					error,
+					window: target.window
+				});
+			}
+		}
+	}));
 };
-const subscriptionDependsOnModel = (changedModelName, ownerModelName, subscription) => {
-  if (ownerModelName === changedModelName) return true;
-  return subscription.dependencyModelNames.includes(changedModelName);
+var runAndSendCount = async ({ tenantId, targetSocketIds, ability, modelName, queryKey, query }) => {
+	const payload = {
+		type: "count-payload",
+		modelName,
+		queryKey,
+		count: await runRtsCount({
+			tenantId,
+			ability,
+			modelName,
+			query,
+			allowInternalModels
+		})
+	};
+	for (const socketId of targetSocketIds) {
+		const ws = sockets.get(socketId);
+		if (!ws) continue;
+		sendWs(ws, payload);
+	}
 };
-const hasAnySubscriptionsDependingOnModel = (tenantId, modelName) => {
-  const tenantSubs = subscriptions.get(tenantId);
-  if (!tenantSubs) return false;
-  for (const userSubs of tenantSubs.values()) {
-    for (const [ownerModelName, modelSubs] of userSubs.entries()) {
-      for (const subscription of modelSubs.values()) {
-        if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) {
-          return true;
-        }
-      }
-    }
-  }
-  return false;
+var subscriptionDependsOnModel = (changedModelName, ownerModelName, subscription) => {
+	if (ownerModelName === changedModelName) return true;
+	return subscription.dependencyModelNames.includes(changedModelName);
 };
-const hasAnyCountSubscriptionsForModel = (tenantId, modelName) => {
-  const tenantSubs = countSubscriptions.get(tenantId);
-  if (!tenantSubs) return false;
-  for (const userSubs of tenantSubs.values()) {
-    const modelSubs = userSubs.get(modelName);
-    if (modelSubs?.size) {
-      return true;
-    }
-  }
-  return false;
+var hasAnySubscriptionsDependingOnModel = (tenantId, modelName) => {
+	const tenantSubs = subscriptions.get(tenantId);
+	if (!tenantSubs) return false;
+	for (const userSubs of tenantSubs.values()) for (const [ownerModelName, modelSubs] of userSubs.entries()) for (const subscription of modelSubs.values()) if (subscriptionDependsOnModel(modelName, ownerModelName, subscription)) return true;
+	return false;
 };
-const dispatchSubscriptionsForModel = async (tenantId, modelName) => {
-  const tenantSubs = subscriptions.get(tenantId);
-  if (!tenantSubs || !tenantSubs.size) return;
-  for (const userSubs of tenantSubs.values()) {
-    for (const [ownerModelName, modelSubs] of userSubs.entries()) {
-      for (const [queryKey, sub] of modelSubs.entries()) {
-        if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue;
-        const targetSocketIds = Array.from(sub.socketIds);
-        if (!targetSocketIds.length) continue;
-        const socketId = targetSocketIds[0];
-        const meta = socketMeta.get(socketId);
-        const ability = meta?.ability;
-        if (!ability) continue;
-        try {
-          await runAndSendSubscriptionQuery({
-            tenantId,
-            targetSocketIds,
-            ability,
-            modelName: ownerModelName,
-            queryKey,
-            subscription: sub
-          });
-        } catch (err) {
-          const error = redactErrorMessage(err);
-          const payload = {
-            type: "query-payload",
-            modelName: ownerModelName,
-            queryKey,
-            error
-          };
-          for (const socketId2 of targetSocketIds) {
-            const ws = sockets.get(socketId2);
-            if (!ws) continue;
-            sendWs(ws, payload);
-          }
-        }
-      }
-    }
-  }
+var hasAnyCountSubscriptionsForModel = (tenantId, modelName) => {
+	const tenantSubs = countSubscriptions.get(tenantId);
+	if (!tenantSubs) return false;
+	for (const userSubs of tenantSubs.values()) if (userSubs.get(modelName)?.size) return true;
+	return false;
 };
-const dispatchCountSubscriptionsForModel = async (tenantId, modelName) => {
-  const tenantSubs = countSubscriptions.get(tenantId);
-  if (!tenantSubs || !tenantSubs.size) return;
-  for (const userSubs of tenantSubs.values()) {
-    const modelSubs = userSubs.get(modelName);
-    if (!modelSubs) continue;
-    for (const [queryKey, sub] of modelSubs.entries()) {
-      const targetSocketIds = Array.from(sub.socketIds);
-      if (!targetSocketIds.length) continue;
-      const socketId = targetSocketIds[0];
-      const meta = socketMeta.get(socketId);
-      const ability = meta?.ability;
-      if (!ability) continue;
-      try {
-        await runAndSendCount({
-          tenantId,
-          targetSocketIds,
-          ability,
-          modelName,
-          queryKey,
-          query: sub.query
-        });
-      } catch (err) {
-        const error = redactErrorMessage(err);
-        const payload = {
-          type: "count-payload",
-          modelName,
-          queryKey,
-          error
-        };
-        for (const targetSocketId of targetSocketIds) {
-          const ws = sockets.get(targetSocketId);
-          if (!ws) continue;
-          sendWs(ws, payload);
-        }
-      }
-    }
-  }
+var dispatchSubscriptionsForModel = async (tenantId, modelName) => {
+	const tenantSubs = subscriptions.get(tenantId);
+	if (!tenantSubs || !tenantSubs.size) return;
+	for (const userSubs of tenantSubs.values()) for (const [ownerModelName, modelSubs] of userSubs.entries()) for (const [queryKey, sub] of modelSubs.entries()) {
+		if (!subscriptionDependsOnModel(modelName, ownerModelName, sub)) continue;
+		const targetSocketIds = Array.from(sub.socketIds);
+		if (!targetSocketIds.length) continue;
+		const socketId = targetSocketIds[0];
+		const ability = socketMeta.get(socketId)?.ability;
+		if (!ability) continue;
+		try {
+			await runAndSendSubscriptionQuery({
+				tenantId,
+				targetSocketIds,
+				ability,
+				modelName: ownerModelName,
+				queryKey,
+				subscription: sub
+			});
+		} catch (err) {
+			const payload = {
+				type: "query-payload",
+				modelName: ownerModelName,
+				queryKey,
+				error: redactErrorMessage(err)
+			};
+			for (const socketId of targetSocketIds) {
+				const ws = sockets.get(socketId);
+				if (!ws) continue;
+				sendWs(ws, payload);
+			}
+		}
+	}
 };
-const ensureChangeStream = async (tenantId, modelName) => {
-  const tenantStreams = changeStreams.get(tenantId) ?? /* @__PURE__ */ new Map();
-  changeStreams.set(tenantId, tenantStreams);
-  if (tenantStreams.has(modelName)) return;
-  const model = await getTenantModel(tenantId, modelName);
-  const stream = model.watch([], {
-    fullDocument: "updateLookup"
-  });
-  stream.on("change", () => {
-    scheduleDispatchSubscriptionsForModel(tenantId, modelName);
-  });
-  stream.on("close", () => {
-    clearDispatchTimer(tenantId, modelName);
-    const map = changeStreams.get(tenantId);
-    map?.delete(modelName);
-    if (map && map.size === 0) changeStreams.delete(tenantId);
-  });
-  stream.on("error", () => {
-    try {
-      clearDispatchTimer(tenantId, modelName);
-      stream.close();
-    } catch {
-    }
-  });
-  tenantStreams.set(modelName, stream);
+var dispatchCountSubscriptionsForModel = async (tenantId, modelName) => {
+	const tenantSubs = countSubscriptions.get(tenantId);
+	if (!tenantSubs || !tenantSubs.size) return;
+	for (const userSubs of tenantSubs.values()) {
+		const modelSubs = userSubs.get(modelName);
+		if (!modelSubs) continue;
+		for (const [queryKey, sub] of modelSubs.entries()) {
+			const targetSocketIds = Array.from(sub.socketIds);
+			if (!targetSocketIds.length) continue;
+			const socketId = targetSocketIds[0];
+			const ability = socketMeta.get(socketId)?.ability;
+			if (!ability) continue;
+			try {
+				await runAndSendCount({
+					tenantId,
+					targetSocketIds,
+					ability,
+					modelName,
+					queryKey,
+					query: sub.query
+				});
+			} catch (err) {
+				const payload = {
+					type: "count-payload",
+					modelName,
+					queryKey,
+					error: redactErrorMessage(err)
+				};
+				for (const targetSocketId of targetSocketIds) {
+					const ws = sockets.get(targetSocketId);
+					if (!ws) continue;
+					sendWs(ws, payload);
+				}
+			}
+		}
+	}
 };
-const closeUnusedChangeStream = (tenantId, modelName) => {
-  if (hasAnySubscriptionsDependingOnModel(tenantId, modelName) || hasAnyCountSubscriptionsForModel(tenantId, modelName)) {
-    return;
-  }
-  const tenantStreams = changeStreams.get(tenantId);
-  const stream = tenantStreams?.get(modelName);
-  if (!stream) return;
-  try {
-    stream.close();
-  } catch {
-  }
-  clearDispatchTimer(tenantId, modelName);
-  tenantStreams?.delete(modelName);
-  if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
+var ensureChangeStream = async (tenantId, modelName) => {
+	const tenantStreams = changeStreams.get(tenantId) ?? /* @__PURE__ */ new Map();
+	changeStreams.set(tenantId, tenantStreams);
+	if (tenantStreams.has(modelName)) return;
+	const stream = (await getTenantModel(tenantId, modelName)).watch([], { fullDocument: "updateLookup" });
+	stream.on("change", () => {
+		scheduleDispatchSubscriptionsForModel(tenantId, modelName);
+	});
+	stream.on("close", () => {
+		clearDispatchTimer(tenantId, modelName);
+		const map = changeStreams.get(tenantId);
+		map?.delete(modelName);
+		if (map && map.size === 0) changeStreams.delete(tenantId);
+	});
+	stream.on("error", () => {
+		try {
+			clearDispatchTimer(tenantId, modelName);
+			stream.close();
+		} catch {}
+	});
+	tenantStreams.set(modelName, stream);
 };
-const addSocketSubscription = ({
-  socketId,
-  tenantId,
-  userId,
-  modelName,
-  queryKey,
-  query,
-  options,
-  dependencyModelNames
-}) => {
-  const tenantSubs = subscriptions.get(tenantId) ?? /* @__PURE__ */ new Map();
-  subscriptions.set(tenantId, tenantSubs);
-  const userSubs = tenantSubs.get(userId) ?? /* @__PURE__ */ new Map();
-  tenantSubs.set(userId, userSubs);
-  const modelSubs = userSubs.get(modelName) ?? /* @__PURE__ */ new Map();
-  userSubs.set(modelName, modelSubs);
-  const existing = modelSubs.get(queryKey);
-  if (existing) {
-    existing.socketIds.add(socketId);
-    existing.dependencyModelNames = Array.from(/* @__PURE__ */ new Set([...existing.dependencyModelNames, ...dependencyModelNames]));
-    if (options.pagination) {
-      existing.windows.set(socketId, {
-        requestedCount: options.pagination.limit,
-        version: 0
-      });
-    } else {
-      existing.windows.delete(socketId);
-    }
-  } else {
-    modelSubs.set(queryKey, {
-      query,
-      options,
-      dependencyModelNames: Array.from(new Set(dependencyModelNames)),
-      socketIds: /* @__PURE__ */ new Set([socketId]),
-      windows: options.pagination ? /* @__PURE__ */ new Map([[socketId, {
-        requestedCount: options.pagination.limit,
-        version: 0
-      }]]) : /* @__PURE__ */ new Map()
-    });
-  }
-  const byModel = socketSubscriptions.get(socketId) ?? /* @__PURE__ */ new Map();
-  socketSubscriptions.set(socketId, byModel);
-  const querySet = byModel.get(modelName) ?? /* @__PURE__ */ new Set();
-  byModel.set(modelName, querySet);
-  querySet.add(queryKey);
+var closeUnusedChangeStream = (tenantId, modelName) => {
+	if (hasAnySubscriptionsDependingOnModel(tenantId, modelName) || hasAnyCountSubscriptionsForModel(tenantId, modelName)) return;
+	const tenantStreams = changeStreams.get(tenantId);
+	const stream = tenantStreams?.get(modelName);
+	if (!stream) return;
+	try {
+		stream.close();
+	} catch {}
+	clearDispatchTimer(tenantId, modelName);
+	tenantStreams?.delete(modelName);
+	if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
 };
-const addSocketCountSubscription = ({
-  socketId,
-  tenantId,
-  userId,
-  modelName,
-  queryKey,
-  query
-}) => {
-  const tenantSubs = countSubscriptions.get(tenantId) ?? /* @__PURE__ */ new Map();
-  countSubscriptions.set(tenantId, tenantSubs);
-  const userSubs = tenantSubs.get(userId) ?? /* @__PURE__ */ new Map();
-  tenantSubs.set(userId, userSubs);
-  const modelSubs = userSubs.get(modelName) ?? /* @__PURE__ */ new Map();
-  userSubs.set(modelName, modelSubs);
-  const existing = modelSubs.get(queryKey);
-  if (existing) {
-    existing.socketIds.add(socketId);
-  } else {
-    modelSubs.set(queryKey, {
-      query,
-      socketIds: /* @__PURE__ */ new Set([socketId])
-    });
-  }
-  const byModel = socketCountSubscriptions.get(socketId) ?? /* @__PURE__ */ new Map();
-  socketCountSubscriptions.set(socketId, byModel);
-  const querySet = byModel.get(modelName) ?? /* @__PURE__ */ new Set();
-  byModel.set(modelName, querySet);
-  querySet.add(queryKey);
+var addSocketSubscription = ({ socketId, tenantId, userId, modelName, queryKey, query, options, dependencyModelNames }) => {
+	const tenantSubs = subscriptions.get(tenantId) ?? /* @__PURE__ */ new Map();
+	subscriptions.set(tenantId, tenantSubs);
+	const userSubs = tenantSubs.get(userId) ?? /* @__PURE__ */ new Map();
+	tenantSubs.set(userId, userSubs);
+	const modelSubs = userSubs.get(modelName) ?? /* @__PURE__ */ new Map();
+	userSubs.set(modelName, modelSubs);
+	const existing = modelSubs.get(queryKey);
+	if (existing) {
+		existing.socketIds.add(socketId);
+		existing.dependencyModelNames = Array.from(/* @__PURE__ */ new Set([...existing.dependencyModelNames, ...dependencyModelNames]));
+		if (options.pagination) existing.windows.set(socketId, {
+			requestedCount: options.pagination.limit,
+			version: 0
+		});
+		else existing.windows.delete(socketId);
+	} else modelSubs.set(queryKey, {
+		query,
+		options,
+		dependencyModelNames: Array.from(new Set(dependencyModelNames)),
+		socketIds: /* @__PURE__ */ new Set([socketId]),
+		windows: options.pagination ? /* @__PURE__ */ new Map([[socketId, {
+			requestedCount: options.pagination.limit,
+			version: 0
+		}]]) : /* @__PURE__ */ new Map()
+	});
+	const byModel = socketSubscriptions.get(socketId) ?? /* @__PURE__ */ new Map();
+	socketSubscriptions.set(socketId, byModel);
+	const querySet = byModel.get(modelName) ?? /* @__PURE__ */ new Set();
+	byModel.set(modelName, querySet);
+	querySet.add(queryKey);
 };
-const removeSocketSubscription = ({
-  socketId,
-  tenantId,
-  userId,
-  modelName,
-  queryKey
-}) => {
-  const tenantSubs = subscriptions.get(tenantId);
-  const userSubs = tenantSubs?.get(userId);
-  const modelSubs = userSubs?.get(modelName);
-  const sub = modelSubs?.get(queryKey);
-  const affectedModelNames = /* @__PURE__ */ new Set([modelName, ...sub?.dependencyModelNames ?? []]);
-  if (sub) {
-    sub.socketIds.delete(socketId);
-    sub.windows.delete(socketId);
-    if (!sub.socketIds.size) {
-      modelSubs?.delete(queryKey);
-    }
-  }
-  const byModel = socketSubscriptions.get(socketId);
-  const set = byModel?.get(modelName);
-  if (set) {
-    set.delete(queryKey);
-    if (!set.size) {
-      byModel?.delete(modelName);
-    }
-  }
-  if (modelSubs && modelSubs.size === 0) {
-    userSubs?.delete(modelName);
-  }
-  if (userSubs && userSubs.size === 0) {
-    tenantSubs?.delete(userId);
-  }
-  for (const affectedModelName of affectedModelNames) {
-    if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName) || hasAnyCountSubscriptionsForModel(tenantId, affectedModelName)) {
-      continue;
-    }
-    const tenantStreams = changeStreams.get(tenantId);
-    const stream = tenantStreams?.get(affectedModelName);
-    if (stream) {
-      try {
-        stream.close();
-      } catch {
-      }
-      clearDispatchTimer(tenantId, affectedModelName);
-      tenantStreams?.delete(affectedModelName);
-      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
-    }
-  }
-  if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId);
-  if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId);
+var addSocketCountSubscription = ({ socketId, tenantId, userId, modelName, queryKey, query }) => {
+	const tenantSubs = countSubscriptions.get(tenantId) ?? /* @__PURE__ */ new Map();
+	countSubscriptions.set(tenantId, tenantSubs);
+	const userSubs = tenantSubs.get(userId) ?? /* @__PURE__ */ new Map();
+	tenantSubs.set(userId, userSubs);
+	const modelSubs = userSubs.get(modelName) ?? /* @__PURE__ */ new Map();
+	userSubs.set(modelName, modelSubs);
+	const existing = modelSubs.get(queryKey);
+	if (existing) existing.socketIds.add(socketId);
+	else modelSubs.set(queryKey, {
+		query,
+		socketIds: /* @__PURE__ */ new Set([socketId])
+	});
+	const byModel = socketCountSubscriptions.get(socketId) ?? /* @__PURE__ */ new Map();
+	socketCountSubscriptions.set(socketId, byModel);
+	const querySet = byModel.get(modelName) ?? /* @__PURE__ */ new Set();
+	byModel.set(modelName, querySet);
+	querySet.add(queryKey);
 };
-const removeSocketCountSubscription = ({
-  socketId,
-  tenantId,
-  userId,
-  modelName,
-  queryKey
-}) => {
-  const tenantSubs = countSubscriptions.get(tenantId);
-  const userSubs = tenantSubs?.get(userId);
-  const modelSubs = userSubs?.get(modelName);
-  const sub = modelSubs?.get(queryKey);
-  if (sub) {
-    sub.socketIds.delete(socketId);
-    if (!sub.socketIds.size) {
-      modelSubs?.delete(queryKey);
-    }
-  }
-  const byModel = socketCountSubscriptions.get(socketId);
-  const set = byModel?.get(modelName);
-  if (set) {
-    set.delete(queryKey);
-    if (!set.size) {
-      byModel?.delete(modelName);
-    }
-  }
-  if (modelSubs && modelSubs.size === 0) {
-    userSubs?.delete(modelName);
-  }
-  if (userSubs && userSubs.size === 0) {
-    tenantSubs?.delete(userId);
-  }
-  if (!hasAnySubscriptionsDependingOnModel(tenantId, modelName) && !hasAnyCountSubscriptionsForModel(tenantId, modelName)) {
-    const tenantStreams = changeStreams.get(tenantId);
-    const stream = tenantStreams?.get(modelName);
-    if (stream) {
-      try {
-        stream.close();
-      } catch {
-      }
-      clearDispatchTimer(tenantId, modelName);
-      tenantStreams?.delete(modelName);
-      if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
-    }
-  }
-  if (tenantSubs && tenantSubs.size === 0) countSubscriptions.delete(tenantId);
-  if (byModel && byModel.size === 0) socketCountSubscriptions.delete(socketId);
+var removeSocketSubscription = ({ socketId, tenantId, userId, modelName, queryKey }) => {
+	const tenantSubs = subscriptions.get(tenantId);
+	const userSubs = tenantSubs?.get(userId);
+	const modelSubs = userSubs?.get(modelName);
+	const sub = modelSubs?.get(queryKey);
+	const affectedModelNames = /* @__PURE__ */ new Set([modelName, ...sub?.dependencyModelNames ?? []]);
+	if (sub) {
+		sub.socketIds.delete(socketId);
+		sub.windows.delete(socketId);
+		if (!sub.socketIds.size) modelSubs?.delete(queryKey);
+	}
+	const byModel = socketSubscriptions.get(socketId);
+	const set = byModel?.get(modelName);
+	if (set) {
+		set.delete(queryKey);
+		if (!set.size) byModel?.delete(modelName);
+	}
+	if (modelSubs && modelSubs.size === 0) userSubs?.delete(modelName);
+	if (userSubs && userSubs.size === 0) tenantSubs?.delete(userId);
+	for (const affectedModelName of affectedModelNames) {
+		if (hasAnySubscriptionsDependingOnModel(tenantId, affectedModelName) || hasAnyCountSubscriptionsForModel(tenantId, affectedModelName)) continue;
+		const tenantStreams = changeStreams.get(tenantId);
+		const stream = tenantStreams?.get(affectedModelName);
+		if (stream) {
+			try {
+				stream.close();
+			} catch {}
+			clearDispatchTimer(tenantId, affectedModelName);
+			tenantStreams?.delete(affectedModelName);
+			if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
+		}
+	}
+	if (tenantSubs && tenantSubs.size === 0) subscriptions.delete(tenantId);
+	if (byModel && byModel.size === 0) socketSubscriptions.delete(socketId);
 };
-const getSocketSubscriptionCount = (socketId) => {
-  let count = 0;
-  const querySubscriptionsByModel = socketSubscriptions.get(socketId);
-  if (querySubscriptionsByModel) {
-    for (const set of querySubscriptionsByModel.values()) count += set.size;
-  }
-  const countSubscriptionsByModel = socketCountSubscriptions.get(socketId);
-  if (countSubscriptionsByModel) {
-    for (const set of countSubscriptionsByModel.values()) count += set.size;
-  }
-  return count;
+var removeSocketCountSubscription = ({ socketId, tenantId, userId, modelName, queryKey }) => {
+	const tenantSubs = countSubscriptions.get(tenantId);
+	const userSubs = tenantSubs?.get(userId);
+	const modelSubs = userSubs?.get(modelName);
+	const sub = modelSubs?.get(queryKey);
+	if (sub) {
+		sub.socketIds.delete(socketId);
+		if (!sub.socketIds.size) modelSubs?.delete(queryKey);
+	}
+	const byModel = socketCountSubscriptions.get(socketId);
+	const set = byModel?.get(modelName);
+	if (set) {
+		set.delete(queryKey);
+		if (!set.size) byModel?.delete(modelName);
+	}
+	if (modelSubs && modelSubs.size === 0) userSubs?.delete(modelName);
+	if (userSubs && userSubs.size === 0) tenantSubs?.delete(userId);
+	if (!hasAnySubscriptionsDependingOnModel(tenantId, modelName) && !hasAnyCountSubscriptionsForModel(tenantId, modelName)) {
+		const tenantStreams = changeStreams.get(tenantId);
+		const stream = tenantStreams?.get(modelName);
+		if (stream) {
+			try {
+				stream.close();
+			} catch {}
+			clearDispatchTimer(tenantId, modelName);
+			tenantStreams?.delete(modelName);
+			if (tenantStreams && tenantStreams.size === 0) changeStreams.delete(tenantId);
+		}
+	}
+	if (tenantSubs && tenantSubs.size === 0) countSubscriptions.delete(tenantId);
+	if (byModel && byModel.size === 0) socketCountSubscriptions.delete(socketId);
 };
-const cleanupSocket = (socketId) => {
-  const meta = socketMeta.get(socketId);
-  if (meta) {
-    const byModel = socketSubscriptions.get(socketId);
-    if (byModel) {
-      for (const [modelName, keys] of byModel.entries()) {
-        for (const queryKey of keys.values()) {
-          removeSocketSubscription({
-            socketId,
-            tenantId: meta.tenantId,
-            userId: meta.userId,
-            modelName,
-            queryKey
-          });
-        }
-      }
-    }
-    const countByModel = socketCountSubscriptions.get(socketId);
-    if (countByModel) {
-      for (const [modelName, keys] of countByModel.entries()) {
-        for (const queryKey of keys.values()) {
-          removeSocketCountSubscription({
-            socketId,
-            tenantId: meta.tenantId,
-            userId: meta.userId,
-            modelName,
-            queryKey
-          });
-        }
-      }
-    }
-  }
-  socketSubscriptions.delete(socketId);
-  socketCountSubscriptions.delete(socketId);
-  const cleanupFns = socketCleanup.get(socketId) ?? [];
-  socketCleanup.delete(socketId);
-  for (const fn of cleanupFns) {
-    try {
-      fn();
-    } catch {
-    }
-  }
-  sockets.delete(socketId);
-  socketMeta.delete(socketId);
-  socketWrappers.delete(socketId);
+var getSocketSubscriptionCount = (socketId) => {
+	let count = 0;
+	const querySubscriptionsByModel = socketSubscriptions.get(socketId);
+	if (querySubscriptionsByModel) for (const set of querySubscriptionsByModel.values()) count += set.size;
+	const countSubscriptionsByModel = socketCountSubscriptions.get(socketId);
+	if (countSubscriptionsByModel) for (const set of countSubscriptionsByModel.values()) count += set.size;
+	return count;
 };
-const handleClientMessage = async ({
-  socketId,
-  meta,
-  message
-}) => {
-  const ws = sockets.get(socketId);
-  if (!ws) return;
-  if (message.type === "event") {
-    const wrapper = socketWrappers.get(socketId);
-    wrapper?.dispatch(message.event, message.payload);
-    return;
-  }
-  if (message.type === "rts-message") {
-    const wrapper = socketWrappers.get(socketId);
-    wrapper?.dispatchRtsMessage(message.channel, message.payload);
-    return;
-  }
-  const isCountMessage = message.type === "run-count" || message.type === "register-count" || message.type === "remove-count";
-  const sendAccessError = (error) => {
-    if (isCountMessage) {
-      sendWs(ws, {
-        type: "count-payload",
-        modelName: message.modelName ?? "",
-        queryKey: message.queryKey ?? "",
-        error
-      });
-      return;
-    }
-    sendWs(ws, {
-      type: "query-payload",
-      modelName: message.modelName ?? "",
-      queryKey: message.queryKey ?? "",
-      error
-    });
-  };
-  if (!message.modelName || typeof message.modelName !== "string") return;
-  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {
-    sendAccessError("Model not allowed");
-    return;
-  }
-  if (!message.queryKey || typeof message.queryKey !== "string") return;
-  if (message.queryKey.length > QUERY_KEY_MAX_LEN) return;
-  if (message.type === "remove-query") {
-    removeSocketSubscription({
-      socketId,
-      tenantId: meta.tenantId,
-      userId: meta.userId,
-      modelName: message.modelName,
-      queryKey: message.queryKey
-    });
-    return;
-  }
-  if (message.type === "remove-count") {
-    removeSocketCountSubscription({
-      socketId,
-      tenantId: meta.tenantId,
-      userId: meta.userId,
-      modelName: message.modelName,
-      queryKey: message.queryKey
-    });
-    return;
-  }
-  const ability = meta.ability;
-  if (!ability.can("read", message.modelName)) {
-    sendAccessError("forbidden");
-    return;
-  }
-  if (message.type === "set-query-window") {
-    if (!isValidQueryWindowCount(message.requestedCount)) {
-      sendWs(ws, {
-        type: "query-payload",
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        error: "Invalid requestedCount"
-      });
-      return;
-    }
-    const subscription = subscriptions.get(meta.tenantId)?.get(meta.userId)?.get(message.modelName)?.get(message.queryKey);
-    const window = subscription?.windows.get(socketId);
-    if (!subscription || !subscription.options.pagination || !window) {
-      sendWs(ws, {
-        type: "query-payload",
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        error: "Paginated query subscription not found"
-      });
-      return;
-    }
-    window.requestedCount = message.requestedCount;
-    await runAndSendSubscriptionQuery({
-      tenantId: meta.tenantId,
-      targetSocketIds: [socketId],
-      ability,
-      modelName: message.modelName,
-      queryKey: message.queryKey,
-      subscription
-    });
-    return;
-  }
-  if (!message.query || typeof message.query !== "object") return;
-  if (message.type === "register-query" || message.type === "run-query") {
-    const options = normalizeRtsQueryOptions(message.options);
-    if (message.type === "register-query") {
-      if (options.pagination && !isValidQueryWindowCount(options.pagination.limit)) {
-        sendWs(ws, {
-          type: "query-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error: "Invalid requestedCount"
-        });
-        return;
-      }
-      const existing = socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false;
-      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {
-        sendWs(ws, {
-          type: "query-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error: "Too many subscriptions"
-        });
-        return;
-      }
-      let dependencyModelNames = [];
-      if (options.populate !== void 0) {
-        try {
-          dependencyModelNames = await resolveRtsQueryDependencyModelNames({
-            tenantId: meta.tenantId,
-            ability,
-            modelName: message.modelName,
-            options,
-            allowInternalModels
-          });
-        } catch (err) {
-          const error = redactErrorMessage(err);
-          sendWs(ws, {
-            type: "query-payload",
-            modelName: message.modelName,
-            queryKey: message.queryKey,
-            error
-          });
-          return;
-        }
-      }
-      if (!sockets.has(socketId)) return;
-      addSocketSubscription({
-        socketId,
-        tenantId: meta.tenantId,
-        userId: meta.userId,
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        query: message.query,
-        options,
-        dependencyModelNames
-      });
-      try {
-        const modelNamesToWatch = /* @__PURE__ */ new Set([message.modelName, ...dependencyModelNames]);
-        for (const modelName of modelNamesToWatch) {
-          await ensureChangeStream(meta.tenantId, modelName);
-        }
-      } catch (err) {
-        const error = redactErrorMessage(err);
-        sendWs(ws, {
-          type: "query-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error
-        });
-        return;
-      }
-      if (!sockets.has(socketId)) {
-        for (const modelName of /* @__PURE__ */ new Set([message.modelName, ...dependencyModelNames])) {
-          closeUnusedChangeStream(meta.tenantId, modelName);
-        }
-        return;
-      }
-      if (message.runInitialQuery === false) {
-        return;
-      }
-      const subscription = subscriptions.get(meta.tenantId)?.get(meta.userId)?.get(message.modelName)?.get(message.queryKey);
-      if (!subscription) return;
-      try {
-        await runAndSendSubscriptionQuery({
-          tenantId: meta.tenantId,
-          targetSocketIds: [socketId],
-          ability,
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          subscription
-        });
-      } catch (err) {
-        const error = redactErrorMessage(err);
-        sendWs(ws, {
-          type: "query-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error
-        });
-      }
-      return;
-    }
-    try {
-      await runAndSendQuery({
-        tenantId: meta.tenantId,
-        targetSocketIds: [socketId],
-        ability,
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        query: message.query,
-        options
-      });
-    } catch (err) {
-      const error = redactErrorMessage(err);
-      sendWs(ws, {
-        type: "query-payload",
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        error
-      });
-    }
-    return;
-  }
-  if (message.type === "register-count" || message.type === "run-count") {
-    if (message.type === "register-count") {
-      const existing = socketCountSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false;
-      if (!existing && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {
-        sendWs(ws, {
-          type: "count-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error: "Too many subscriptions"
-        });
-        return;
-      }
-      addSocketCountSubscription({
-        socketId,
-        tenantId: meta.tenantId,
-        userId: meta.userId,
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        query: message.query
-      });
-      try {
-        await ensureChangeStream(meta.tenantId, message.modelName);
-      } catch (err) {
-        const error = redactErrorMessage(err);
-        sendWs(ws, {
-          type: "count-payload",
-          modelName: message.modelName,
-          queryKey: message.queryKey,
-          error
-        });
-        return;
-      }
-      if (!sockets.has(socketId)) {
-        closeUnusedChangeStream(meta.tenantId, message.modelName);
-        return;
-      }
-      if (message.runInitialQuery === false) {
-        return;
-      }
-    }
-    try {
-      await runAndSendCount({
-        tenantId: meta.tenantId,
-        targetSocketIds: [socketId],
-        ability,
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        query: message.query
-      });
-    } catch (err) {
-      const error = redactErrorMessage(err);
-      sendWs(ws, {
-        type: "count-payload",
-        modelName: message.modelName,
-        queryKey: message.queryKey,
-        error
-      });
-    }
-  }
+var cleanupSocket = (socketId) => {
+	const meta = socketMeta.get(socketId);
+	if (meta) {
+		const byModel = socketSubscriptions.get(socketId);
+		if (byModel) for (const [modelName, keys] of byModel.entries()) for (const queryKey of keys.values()) removeSocketSubscription({
+			socketId,
+			tenantId: meta.tenantId,
+			userId: meta.userId,
+			modelName,
+			queryKey
+		});
+		const countByModel = socketCountSubscriptions.get(socketId);
+		if (countByModel) for (const [modelName, keys] of countByModel.entries()) for (const queryKey of keys.values()) removeSocketCountSubscription({
+			socketId,
+			tenantId: meta.tenantId,
+			userId: meta.userId,
+			modelName,
+			queryKey
+		});
+	}
+	socketSubscriptions.delete(socketId);
+	socketCountSubscriptions.delete(socketId);
+	const cleanupFns = socketCleanup.get(socketId) ?? [];
+	socketCleanup.delete(socketId);
+	for (const fn of cleanupFns) try {
+		fn();
+	} catch {}
+	sockets.delete(socketId);
+	socketMeta.delete(socketId);
+	socketWrappers.delete(socketId);
 };
-const initRts = ({
-  server,
-  path = "/rts",
-  sessionMiddleware,
-  maxPayloadBytes: maxPayloadBytesArg,
-  maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg,
-  dispatchDebounceMs: dispatchDebounceMsArg,
-  allowInternalModels: allowInternalModelsArg
-}) => {
-  if (initializedServers.has(server)) return;
-  initializedServers.add(server);
-  if (typeof maxPayloadBytesArg === "number" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) {
-    maxPayloadBytes = Math.floor(maxPayloadBytesArg);
-  }
-  if (typeof maxSubscriptionsPerSocketArg === "number" && Number.isFinite(maxSubscriptionsPerSocketArg) && maxSubscriptionsPerSocketArg > 0) {
-    maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg);
-  }
-  if (typeof dispatchDebounceMsArg === "number" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) {
-    dispatchDebounceMs = Math.floor(dispatchDebounceMsArg);
-  }
-  allowInternalModels = Boolean(allowInternalModelsArg);
-  const wss = new WebSocketServer({
-    noServer: true,
-    maxPayload: maxPayloadBytes
-  });
-  server.on("upgrade", (req, socket, head) => {
-    ensureSocketErrorHandler(socket, () => ({
-      upgradeHost: req.headers.host ?? "",
-      upgradeUrl: req.url ?? "",
-      userAgent: typeof req.headers["user-agent"] === "string" ? req.headers["user-agent"] : ""
-    }));
-    upgradeMeta.delete(req);
-    let url;
-    try {
-      url = new URL(req.url ?? "", `http://${req.headers.host ?? "localhost"}`);
-    } catch {
-      badRequest(socket, "Invalid URL");
-      return;
-    }
-    if (url.pathname !== path) return;
-    void (async () => {
-      try {
-        const meta = await parseUpgradeMeta({
-          req,
-          url,
-          sessionMiddleware
-        });
-        upgradeMeta.set(req, meta);
-        wss.handleUpgrade(req, socket, head, (ws) => {
-          wss.emit("connection", ws, req);
-        });
-      } catch (err) {
-        const message = err instanceof Error ? err.message : "RTS upgrade failed";
-        const upgradeReq = req;
-        const sessionUser = upgradeReq.session?.user;
-        const sessionUserId = typeof sessionUser?.id === "string" ? sessionUser.id.trim() : "";
-        const sessionTenantId = typeof sessionUser?.currentTenantId === "string" ? sessionUser.currentTenantId.trim() : "";
-        const authenticatedUserIdHeader = req.headers["rb-authenticated-user-id"];
-        const authenticatedTenantIdHeader = req.headers["rb-authenticated-tenant-id"];
-        console.warn("[rb/rts] upgrade rejected", {
-          reason: message,
-          host: req.headers.host ?? "",
-          url: req.url ?? "",
-          hasSessionUserId: Boolean(sessionUserId),
-          hasCurrentTenantId: Boolean(sessionTenantId),
-          hasAuthenticatedUserIdHeader: Boolean(Array.isArray(authenticatedUserIdHeader) ? authenticatedUserIdHeader[0] : authenticatedUserIdHeader),
-          hasAuthenticatedTenantIdHeader: Boolean(Array.isArray(authenticatedTenantIdHeader) ? authenticatedTenantIdHeader[0] : authenticatedTenantIdHeader),
-          userAgent: typeof req.headers["user-agent"] === "string" ? req.headers["user-agent"] : ""
-        });
-        if (message === "Missing current tenant in session") {
-          badRequest(socket, message);
-          return;
-        }
-        unauthorized(socket, message);
-        return;
-      }
-    })().catch(() => {
-      badRequest(socket, "RTS upgrade failed");
-    });
-  });
-  wss.on("connection", (ws, req) => {
-    const meta = upgradeMeta.get(req);
-    upgradeMeta.delete(req);
-    if (!meta) {
-      try {
-        ws.close();
-      } catch {
-      }
-      return;
-    }
-    const socketId = randomUUID();
-    sockets.set(socketId, ws);
-    socketMeta.set(socketId, meta);
-    const wrapper = new RtsSocket({
-      id: socketId,
-      ws,
-      meta
-    });
-    socketWrappers.set(socketId, wrapper);
-    const cleanupFns = [];
-    for (const handler of customHandlers) {
-      try {
-        const cleanup = handler(wrapper);
-        if (typeof cleanup === "function") cleanupFns.push(cleanup);
-      } catch {
-      }
-    }
-    if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns);
-    let messageQueue = Promise.resolve();
-    ws.on("message", (raw) => {
-      let parsed;
-      try {
-        parsed = safeJsonParse(raw);
-      } catch {
-        return;
-      }
-      if (!parsed || typeof parsed !== "object") return;
-      const message = parsed;
-      if (message.type !== "event" && message.type !== "rts-message" && message.type !== "run-query" && message.type !== "register-query" && message.type !== "set-query-window" && message.type !== "remove-query" && message.type !== "run-count" && message.type !== "register-count" && message.type !== "remove-count") return;
-      messageQueue = messageQueue.then(() => handleClientMessage({
-        socketId,
-        meta,
-        message
-      })).catch(() => void 0);
-    });
-    ws.on("close", () => {
-      cleanupSocket(socketId);
-    });
-    ws.on("error", () => {
-      cleanupSocket(socketId);
-    });
-  });
+var handleClientMessage = async ({ socketId, meta, message }) => {
+	const ws = sockets.get(socketId);
+	if (!ws) return;
+	if (message.type === "event") {
+		socketWrappers.get(socketId)?.dispatch(message.event, message.payload);
+		return;
+	}
+	if (message.type === "rts-message") {
+		socketWrappers.get(socketId)?.dispatchRtsMessage(message.channel, message.payload);
+		return;
+	}
+	const isCountMessage = message.type === "run-count" || message.type === "register-count" || message.type === "remove-count";
+	const sendAccessError = (error) => {
+		if (isCountMessage) {
+			sendWs(ws, {
+				type: "count-payload",
+				modelName: message.modelName ?? "",
+				queryKey: message.queryKey ?? "",
+				error
+			});
+			return;
+		}
+		sendWs(ws, {
+			type: "query-payload",
+			modelName: message.modelName ?? "",
+			queryKey: message.queryKey ?? "",
+			error
+		});
+	};
+	if (!message.modelName || typeof message.modelName !== "string") return;
+	if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(message.modelName)) {
+		sendAccessError("Model not allowed");
+		return;
+	}
+	if (!message.queryKey || typeof message.queryKey !== "string") return;
+	if (message.queryKey.length > QUERY_KEY_MAX_LEN) return;
+	if (message.type === "remove-query") {
+		removeSocketSubscription({
+			socketId,
+			tenantId: meta.tenantId,
+			userId: meta.userId,
+			modelName: message.modelName,
+			queryKey: message.queryKey
+		});
+		return;
+	}
+	if (message.type === "remove-count") {
+		removeSocketCountSubscription({
+			socketId,
+			tenantId: meta.tenantId,
+			userId: meta.userId,
+			modelName: message.modelName,
+			queryKey: message.queryKey
+		});
+		return;
+	}
+	const ability = meta.ability;
+	if (!ability.can("read", message.modelName)) {
+		sendAccessError("forbidden");
+		return;
+	}
+	if (message.type === "set-query-window") {
+		if (!isValidQueryWindowCount(message.requestedCount)) {
+			sendWs(ws, {
+				type: "query-payload",
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				error: "Invalid requestedCount"
+			});
+			return;
+		}
+		const subscription = subscriptions.get(meta.tenantId)?.get(meta.userId)?.get(message.modelName)?.get(message.queryKey);
+		const window = subscription?.windows.get(socketId);
+		if (!subscription || !subscription.options.pagination || !window) {
+			sendWs(ws, {
+				type: "query-payload",
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				error: "Paginated query subscription not found"
+			});
+			return;
+		}
+		window.requestedCount = message.requestedCount;
+		await runAndSendSubscriptionQuery({
+			tenantId: meta.tenantId,
+			targetSocketIds: [socketId],
+			ability,
+			modelName: message.modelName,
+			queryKey: message.queryKey,
+			subscription
+		});
+		return;
+	}
+	if (!message.query || typeof message.query !== "object") return;
+	if (message.type === "register-query" || message.type === "run-query") {
+		const options = normalizeRtsQueryOptions(message.options);
+		if (message.type === "register-query") {
+			if (options.pagination && !isValidQueryWindowCount(options.pagination.limit)) {
+				sendWs(ws, {
+					type: "query-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error: "Invalid requestedCount"
+				});
+				return;
+			}
+			if (!(socketSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false) && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {
+				sendWs(ws, {
+					type: "query-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error: "Too many subscriptions"
+				});
+				return;
+			}
+			let dependencyModelNames = [];
+			if (options.populate !== void 0) try {
+				dependencyModelNames = await resolveRtsQueryDependencyModelNames({
+					tenantId: meta.tenantId,
+					ability,
+					modelName: message.modelName,
+					options,
+					allowInternalModels
+				});
+			} catch (err) {
+				const error = redactErrorMessage(err);
+				sendWs(ws, {
+					type: "query-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error
+				});
+				return;
+			}
+			if (!sockets.has(socketId)) return;
+			addSocketSubscription({
+				socketId,
+				tenantId: meta.tenantId,
+				userId: meta.userId,
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				query: message.query,
+				options,
+				dependencyModelNames
+			});
+			try {
+				const modelNamesToWatch = /* @__PURE__ */ new Set([message.modelName, ...dependencyModelNames]);
+				for (const modelName of modelNamesToWatch) await ensureChangeStream(meta.tenantId, modelName);
+			} catch (err) {
+				const error = redactErrorMessage(err);
+				sendWs(ws, {
+					type: "query-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error
+				});
+				return;
+			}
+			if (!sockets.has(socketId)) {
+				for (const modelName of /* @__PURE__ */ new Set([message.modelName, ...dependencyModelNames])) closeUnusedChangeStream(meta.tenantId, modelName);
+				return;
+			}
+			if (message.runInitialQuery === false) return;
+			const subscription = subscriptions.get(meta.tenantId)?.get(meta.userId)?.get(message.modelName)?.get(message.queryKey);
+			if (!subscription) return;
+			try {
+				await runAndSendSubscriptionQuery({
+					tenantId: meta.tenantId,
+					targetSocketIds: [socketId],
+					ability,
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					subscription
+				});
+			} catch (err) {
+				const error = redactErrorMessage(err);
+				sendWs(ws, {
+					type: "query-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error
+				});
+			}
+			return;
+		}
+		try {
+			await runAndSendQuery({
+				tenantId: meta.tenantId,
+				targetSocketIds: [socketId],
+				ability,
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				query: message.query,
+				options
+			});
+		} catch (err) {
+			const error = redactErrorMessage(err);
+			sendWs(ws, {
+				type: "query-payload",
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				error
+			});
+		}
+		return;
+	}
+	if (message.type === "register-count" || message.type === "run-count") {
+		if (message.type === "register-count") {
+			if (!(socketCountSubscriptions.get(socketId)?.get(message.modelName)?.has(message.queryKey) ?? false) && getSocketSubscriptionCount(socketId) >= maxSubscriptionsPerSocket) {
+				sendWs(ws, {
+					type: "count-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error: "Too many subscriptions"
+				});
+				return;
+			}
+			addSocketCountSubscription({
+				socketId,
+				tenantId: meta.tenantId,
+				userId: meta.userId,
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				query: message.query
+			});
+			try {
+				await ensureChangeStream(meta.tenantId, message.modelName);
+			} catch (err) {
+				const error = redactErrorMessage(err);
+				sendWs(ws, {
+					type: "count-payload",
+					modelName: message.modelName,
+					queryKey: message.queryKey,
+					error
+				});
+				return;
+			}
+			if (!sockets.has(socketId)) {
+				closeUnusedChangeStream(meta.tenantId, message.modelName);
+				return;
+			}
+			if (message.runInitialQuery === false) return;
+		}
+		try {
+			await runAndSendCount({
+				tenantId: meta.tenantId,
+				targetSocketIds: [socketId],
+				ability,
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				query: message.query
+			});
+		} catch (err) {
+			const error = redactErrorMessage(err);
+			sendWs(ws, {
+				type: "count-payload",
+				modelName: message.modelName,
+				queryKey: message.queryKey,
+				error
+			});
+		}
+	}
 };
-const registerRtsHandler = (handler) => {
-  customHandlers.push(handler);
+var initRts = ({ server, path = "/rts", sessionMiddleware, postSyncSessionMiddleware, maxPayloadBytes: maxPayloadBytesArg, maxSubscriptionsPerSocket: maxSubscriptionsPerSocketArg, dispatchDebounceMs: dispatchDebounceMsArg, allowInternalModels: allowInternalModelsArg }) => {
+	if (initializedServers.has(server)) return;
+	initializedServers.add(server);
+	if (typeof maxPayloadBytesArg === "number" && Number.isFinite(maxPayloadBytesArg) && maxPayloadBytesArg > 0) maxPayloadBytes = Math.floor(maxPayloadBytesArg);
+	if (typeof maxSubscriptionsPerSocketArg === "number" && Number.isFinite(maxSubscriptionsPerSocketArg) && maxSubscriptionsPerSocketArg > 0) maxSubscriptionsPerSocket = Math.floor(maxSubscriptionsPerSocketArg);
+	if (typeof dispatchDebounceMsArg === "number" && Number.isFinite(dispatchDebounceMsArg) && dispatchDebounceMsArg >= 0) dispatchDebounceMs = Math.floor(dispatchDebounceMsArg);
+	allowInternalModels = Boolean(allowInternalModelsArg);
+	const wss = new WebSocketServer({
+		noServer: true,
+		maxPayload: maxPayloadBytes
+	});
+	server.on("upgrade", (req, socket, head) => {
+		ensureSocketErrorHandler(socket, () => ({
+			upgradeHost: req.headers.host ?? "",
+			upgradeUrl: req.url ?? "",
+			userAgent: typeof req.headers["user-agent"] === "string" ? req.headers["user-agent"] : ""
+		}));
+		upgradeMeta.delete(req);
+		let url;
+		try {
+			url = new URL(req.url ?? "", `http://${req.headers.host ?? "localhost"}`);
+		} catch {
+			badRequest(socket, "Invalid URL");
+			return;
+		}
+		if (url.pathname !== path) return;
+		(async () => {
+			try {
+				const meta = await parseUpgradeMeta({
+					req,
+					url,
+					sessionMiddleware,
+					postSyncSessionMiddleware
+				});
+				upgradeMeta.set(req, meta);
+				wss.handleUpgrade(req, socket, head, (ws) => {
+					wss.emit("connection", ws, req);
+				});
+			} catch (err) {
+				const message = err instanceof Error ? err.message : "RTS upgrade failed";
+				const sessionUser = req.session?.user;
+				const sessionUserId = typeof sessionUser?.id === "string" ? sessionUser.id.trim() : "";
+				const sessionTenantId = typeof sessionUser?.currentTenantId === "string" ? sessionUser.currentTenantId.trim() : "";
+				const authenticatedUserIdHeader = req.headers["rb-authenticated-user-id"];
+				const authenticatedTenantIdHeader = req.headers["rb-authenticated-tenant-id"];
+				console.warn("[rb/rts] upgrade rejected", {
+					reason: message,
+					host: req.headers.host ?? "",
+					url: req.url ?? "",
+					hasSessionUserId: Boolean(sessionUserId),
+					hasCurrentTenantId: Boolean(sessionTenantId),
+					hasAuthenticatedUserIdHeader: Boolean(Array.isArray(authenticatedUserIdHeader) ? authenticatedUserIdHeader[0] : authenticatedUserIdHeader),
+					hasAuthenticatedTenantIdHeader: Boolean(Array.isArray(authenticatedTenantIdHeader) ? authenticatedTenantIdHeader[0] : authenticatedTenantIdHeader),
+					userAgent: typeof req.headers["user-agent"] === "string" ? req.headers["user-agent"] : ""
+				});
+				if (message === "Missing current tenant in session") {
+					badRequest(socket, message);
+					return;
+				}
+				unauthorized(socket, message);
+				return;
+			}
+		})().catch(() => {
+			badRequest(socket, "RTS upgrade failed");
+		});
+	});
+	wss.on("connection", (ws, req) => {
+		const meta = upgradeMeta.get(req);
+		upgradeMeta.delete(req);
+		if (!meta) {
+			try {
+				ws.close();
+			} catch {}
+			return;
+		}
+		const socketId = randomUUID();
+		sockets.set(socketId, ws);
+		socketMeta.set(socketId, meta);
+		const wrapper = new RtsSocket({
+			id: socketId,
+			ws,
+			meta
+		});
+		socketWrappers.set(socketId, wrapper);
+		const cleanupFns = [];
+		for (const handler of customHandlers) try {
+			const cleanup = handler(wrapper);
+			if (typeof cleanup === "function") cleanupFns.push(cleanup);
+		} catch {}
+		if (cleanupFns.length) socketCleanup.set(socketId, cleanupFns);
+		let messageQueue = Promise.resolve();
+		ws.on("message", (raw) => {
+			let parsed;
+			try {
+				parsed = safeJsonParse(raw);
+			} catch {
+				return;
+			}
+			if (!parsed || typeof parsed !== "object") return;
+			const message = parsed;
+			if (message.type !== "event" && message.type !== "rts-message" && message.type !== "run-query" && message.type !== "register-query" && message.type !== "set-query-window" && message.type !== "remove-query" && message.type !== "run-count" && message.type !== "register-count" && message.type !== "remove-count") return;
+			messageQueue = messageQueue.then(() => handleClientMessage({
+				socketId,
+				meta,
+				message
+			})).catch(() => void 0);
+		});
+		ws.on("close", () => {
+			cleanupSocket(socketId);
+		});
+		ws.on("error", () => {
+			cleanupSocket(socketId);
+		});
+	});
 };
-const publishRtsMessage = ({
-  tenantId,
-  userId,
-  channel,
-  payload
-}) => {
-  const normalizedTenantId = tenantId.trim();
-  const normalizedUserId = userId?.trim();
-  const normalizedChannel = channel.trim();
-  if (!normalizedTenantId || !normalizedChannel) return;
-  for (const [socketId, meta] of socketMeta.entries()) {
-    if (meta.tenantId !== normalizedTenantId) continue;
-    if (normalizedUserId && meta.userId !== normalizedUserId) continue;
-    const ws = sockets.get(socketId);
-    if (!ws) continue;
-    sendWs(ws, {
-      type: "rts-message",
-      channel: normalizedChannel,
-      payload
-    });
-  }
+var registerRtsHandler = (handler) => {
+	customHandlers.push(handler);
 };
-const notifyRtsModelChanged = (tenantId, modelName) => {
-  scheduleDispatchSubscriptionsForModel(tenantId, modelName);
+var publishRtsMessage = ({ tenantId, userId, channel, payload }) => {
+	const normalizedTenantId = tenantId.trim();
+	const normalizedUserId = userId?.trim();
+	const normalizedChannel = channel.trim();
+	if (!normalizedTenantId || !normalizedChannel) return;
+	for (const [socketId, meta] of socketMeta.entries()) {
+		if (meta.tenantId !== normalizedTenantId) continue;
+		if (normalizedUserId && meta.userId !== normalizedUserId) continue;
+		const ws = sockets.get(socketId);
+		if (!ws) continue;
+		sendWs(ws, {
+			type: "rts-message",
+			channel: normalizedChannel,
+			payload
+		});
+	}
 };
-export {
-  initRts,
-  notifyRtsModelChanged,
-  publishRtsMessage,
-  registerRtsHandler,
-  routes
+var notifyRtsModelChanged = (tenantId, modelName) => {
+	scheduleDispatchSubscriptionsForModel(tenantId, modelName);
 };
-//# sourceMappingURL=index.js.map
+//#endregion
+export { initRts, notifyRtsModelChanged, publishRtsMessage, registerRtsHandler, routes };
+
+//# sourceMappingURL=index.js.map