@rpcbase/server 0.600.0 → 0.602.0

package/dist/{handler-BqlcQ9sE.js → handler-LRLmxrsg.js}

@@ -1,4 +1,5 @@
-import { d as getUploadKeyHash, i as getBucketName, p as getUserId, u as getTenantId } from "./shared-DfrVDSp0.js";
+import { _ as getUserId, h as getUploadKeyHash, m as getTenantId, s as getBucketName, y as resolveStoredUploadAccessScope } from "./shared-Zt17vuAT.js";
+import { i as findUploadFileReference, r as deleteUploadFileReference } from "./fileReferences-Ca0tivFd.js";
 import { GridFSBucket, ObjectId } from "mongodb";
 import { getTenantFilesystemDb } from "@rpcbase/db";
 //#region src/uploads/api/files/handlers/deleteFile.ts
@@ -45,7 +46,8 @@ var deleteFile = async (_payload, ctx) => {
 			error: "filesystem_db_unavailable"
 		};
 	}
-	const bucket = new GridFSBucket(nativeDb, { bucketName: getBucketName() });
+	const bucketName = getBucketName();
+	const bucket = new GridFSBucket(nativeDb, { bucketName });
 	const userId = getUserId(ctx);
 	const uploadKeyHash = getUploadKeyHash(ctx);
 	if (!userId && !uploadKeyHash) {
@@ -55,6 +57,35 @@ var deleteFile = async (_payload, ctx) => {
 			error: "unauthorized"
 		};
 	}
+	const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId);
+	if (reference) {
+		const referenceMetadata = reference;
+		const metadataUserId = resolveHeaderString$1(reference.userId);
+		const ownerKeyHash = resolveHeaderString$1(reference.ownerKeyHash);
+		const accessScope = resolveStoredUploadAccessScope(referenceMetadata);
+		if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash) && !(accessScope === "tenant" && Boolean(userId))) {
+			ctx.res.status(401);
+			return {
+				ok: false,
+				error: "unauthorized"
+			};
+		}
+		try {
+			await deleteUploadFileReference({
+				tenantId,
+				bucketName,
+				referenceId: fileObjectId
+			});
+		} catch {
+			ctx.res.status(500);
+			return {
+				ok: false,
+				error: "delete_failed"
+			};
+		}
+		ctx.res.status(204);
+		return { ok: true };
+	}
 	const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray();
 	if (!file) {
 		ctx.res.status(204);
@@ -62,13 +93,23 @@ var deleteFile = async (_payload, ctx) => {
 	}
 	const metadataUserId = resolveHeaderString$1(file?.metadata?.userId);
 	const ownerKeyHash = resolveHeaderString$1(file?.metadata?.ownerKeyHash);
-	if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)) {
+	const rawMetadata = file?.metadata;
+	const fileMetadata = rawMetadata && typeof rawMetadata === "object" ? rawMetadata : {};
+	const accessScope = resolveStoredUploadAccessScope(fileMetadata);
+	if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash) && !(accessScope === "tenant" && Boolean(userId))) {
 		ctx.res.status(401);
 		return {
 			ok: false,
 			error: "unauthorized"
 		};
 	}
+	if (fileMetadata.deduplication && typeof fileMetadata.deduplication === "object") {
+		ctx.res.status(409);
+		return {
+			ok: false,
+			error: "file_reference_required"
+		};
+	}
 	try {
 		const variantIds = (await bucket.find({ "metadata.variantOf": fileObjectId.toHexString() }).toArray()).map((variant) => variant?._id).filter((id) => id instanceof ObjectId);
 		await deleteGridFsFile(bucket, fileObjectId);
@@ -90,15 +131,6 @@ var resolveHeaderString = (value) => {
 	const normalized = value.trim();
 	return normalized ? normalized : null;
 };
-var resolveHeaderBoolean = (value) => {
-	if (typeof value === "boolean") return value;
-	if (typeof value !== "string") return null;
-	const normalized = value.trim().toLowerCase();
-	if (!normalized) return null;
-	if (normalized === "true") return true;
-	if (normalized === "false") return false;
-	return null;
-};
 var escapeHeaderFilename = (filename) => filename.replace(/[\\"]/g, "_");
 var parseRequestedWidth = (value) => {
 	if (typeof value !== "string") return null;
@@ -168,28 +200,41 @@ var getFile = async (_payload, ctx) => {
 		ctx.res.status(500).end();
 		return {};
 	}
-	const bucket = new GridFSBucket(nativeDb, { bucketName: getBucketName() });
-	const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray();
+	const bucketName = getBucketName();
+	const bucket = new GridFSBucket(nativeDb, { bucketName });
+	const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId);
+	const blobObjectId = reference?.blobId ?? fileObjectId;
+	const [file] = await bucket.find({ _id: blobObjectId }).limit(1).toArray();
 	if (!file) {
 		ctx.res.status(404).end();
 		return {};
 	}
-	if (!(resolveHeaderBoolean(file?.metadata?.isPublic) ?? false)) {
+	const rawMetadata = reference ?? file?.metadata;
+	const fileMetadata = rawMetadata && typeof rawMetadata === "object" ? rawMetadata : {};
+	const accessScope = resolveStoredUploadAccessScope(fileMetadata);
+	if (accessScope !== "public") {
 		const userId = getUserId(ctx);
-		const uploadKeyHash = getUploadKeyHash(ctx);
-		const metadataUserId = resolveHeaderString(file?.metadata?.userId);
-		const ownerKeyHash = resolveHeaderString(file?.metadata?.ownerKeyHash);
-		if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)) {
-			ctx.res.status(401).end();
-			return {};
+		if (accessScope === "tenant") {
+			if (!userId) {
+				ctx.res.status(401).end();
+				return {};
+			}
+		} else {
+			const uploadKeyHash = getUploadKeyHash(ctx);
+			const metadataUserId = resolveHeaderString(fileMetadata.userId);
+			const ownerKeyHash = resolveHeaderString(fileMetadata.ownerKeyHash);
+			if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)) {
+				ctx.res.status(401).end();
+				return {};
+			}
 		}
 	}
 	const variantFileObjectId = selectVariantFileId(file, parseRequestedWidth(ctx.req.query?.w), ctx.req.query?.variant);
 	const [variantFile] = variantFileObjectId ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray() : [];
-	const selectedFileObjectId = variantFile ? variantFileObjectId : fileObjectId;
+	const selectedFileObjectId = variantFile ? variantFileObjectId : blobObjectId;
 	const selectedFile = variantFile ?? file;
 	const mimeType = resolveHeaderString(selectedFile?.metadata?.mimeType) ?? "application/octet-stream";
-	const filenameSafe = escapeHeaderFilename(resolveHeaderString(selectedFile?.filename) ?? fileIdRaw);
+	const filenameSafe = escapeHeaderFilename(resolveHeaderString(reference?.filename ?? selectedFile?.filename) ?? fileIdRaw);
 	const cacheControl = "private, max-age=0, must-revalidate";
 	const md5 = resolveHeaderString(selectedFile?.md5);
 	const uploadDate = selectedFile?.uploadDate instanceof Date ? selectedFile.uploadDate : null;
@@ -242,4 +287,4 @@ var handler_default = (api) => {
 //#endregion
 export { handler_default as default };
 
-//# sourceMappingURL=handler-BqlcQ9sE.js.map
+//# sourceMappingURL=handler-LRLmxrsg.js.map

package/dist/handler-LRLmxrsg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-LRLmxrsg.js","names":["ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","deleteUploadFileReference","findUploadFileReference","getBucketName","getTenantId","getUploadKeyHash","getUserId","resolveStoredUploadAccessScope","SessionUser","DeleteResponsePayload","ok","error","resolveHeaderString","value","normalized","trim","isFileNotFoundError","message","Error","String","includes","deleteGridFsFile","bucket","fileId","Promise","delete","deleteFile","Record","_payload","ctx","tenantId","res","status","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","userId","uploadKeyHash","reference","referenceMetadata","metadataUserId","ownerKeyHash","accessScope","authorizedByUser","Boolean","authorizedByKey","authorizedByTenant","referenceId","file","find","_id","limit","toArray","metadata","rawMetadata","fileMetadata","deduplication","variants","toHexString","variantIds","map","variant","filter","id","variantId","ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","findUploadFileReference","getBucketName","getTenantId","getUploadKeyHash","getUserId","resolveStoredUploadAccessScope","SessionUser","resolveHeaderString","value","normalized","trim","escapeHeaderFilename","filename","replace","parseRequestedWidth","parsed","Number","isFinite","Math","floor","resolveImageVariants","file","Record","metadata","image","variants","resolveVariantFileId","variant","fileId","selectVariantFileId","requestedWidth","requestedVariant","aliasWidth","toLowerCase","variantFileId","String","targetWidth","widths","Object","keys","map","width","filter","isInteger","sort","a","b","selectedWidth","reduce","selected","selectedDistance","abs","distance","getFile","_payload","ctx","Promise","tenantId","res","status","end","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","bucket","reference","blobObjectId","blobId","find","_id","limit","toArray","rawMetadata","fileMetadata","accessScope","userId","uploadKeyHash","metadataUserId","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","query","w","variantFileObjectId","variantFile","selectedFileObjectId","selectedFile","mimeTypeFromMetadata","mimeType","filenameFromDb","filenameSafe","cacheControl","md5","uploadDate","Date","etagValue","toHexString","length","getTime","etag","ifNoneMatch","headers","candidates","split","includes","setHeader","flushHeaders","method","stream","openDownloadStream","on","destroy","pipe","Route","GetRoute","DeleteRoute"],"sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport {\n  deleteUploadFileReference,\n  findUploadFileReference,\n} from \"../../file-uploads/fileReferences\"\nimport {\n  getBucketName,\n  getTenantId,\n  getUploadKeyHash,\n  getUserId,\n  resolveStoredUploadAccessScope,\n  type SessionUser,\n} from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst isFileNotFoundError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes(\"FileNotFound\")\n}\n\nconst deleteGridFsFile = async (bucket: GridFSBucket, fileId: ObjectId): Promise<void> => {\n  try {\n    await bucket.delete(fileId)\n  } catch (error) {\n    if (!isFileNotFoundError(error)) throw error\n  }\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId)\n  if (reference) {\n    const referenceMetadata = reference as unknown as Record<string, unknown>\n    const metadataUserId = resolveHeaderString(reference.userId)\n    const ownerKeyHash = resolveHeaderString(reference.ownerKeyHash)\n    const accessScope = resolveStoredUploadAccessScope(referenceMetadata)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n    const authorizedByTenant = accessScope === \"tenant\" && Boolean(userId)\n\n    if (!authorizedByUser && !authorizedByKey && !authorizedByTenant) {\n      ctx.res.status(401)\n      return { ok: false, error: \"unauthorized\" }\n    }\n\n    try {\n      await deleteUploadFileReference({\n        tenantId,\n        bucketName,\n        referenceId: fileObjectId,\n      })\n    } catch {\n      ctx.res.status(500)\n      return { ok: false, error: \"delete_failed\" }\n    }\n\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n  const rawMetadata = (file as any)?.metadata\n  const fileMetadata = rawMetadata && typeof rawMetadata === \"object\"\n    ? rawMetadata as Record<string, unknown>\n    : {}\n  const accessScope = resolveStoredUploadAccessScope(fileMetadata)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n  const authorizedByTenant = accessScope === \"tenant\" && Boolean(userId)\n\n  if (!authorizedByUser && !authorizedByKey && !authorizedByTenant) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  if (fileMetadata.deduplication && typeof fileMetadata.deduplication === \"object\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"file_reference_required\" }\n  }\n\n  try {\n    const variants = await bucket.find({ \"metadata.variantOf\": fileObjectId.toHexString() }).toArray()\n    const variantIds = variants\n      .map((variant) => (variant as any)?._id)\n      .filter((id): id is ObjectId => id instanceof ObjectId)\n\n    await deleteGridFsFile(bucket, fileObjectId)\n    for (const variantId of variantIds) {\n      await deleteGridFsFile(bucket, variantId)\n    }\n  } catch {\n    ctx.res.status(500)\n    return { ok: false, error: \"delete_failed\" }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { findUploadFileReference } from \"../../file-uploads/fileReferences\"\nimport {\n  getBucketName,\n  getTenantId,\n  getUploadKeyHash,\n  getUserId,\n  resolveStoredUploadAccessScope,\n  type SessionUser,\n} from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nconst parseRequestedWidth = (value: unknown): number | null => {\n  if (typeof value !== \"string\") return null\n  const parsed = Number(value.trim())\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nconst resolveImageVariants = (file: unknown): Record<string, unknown> | null => {\n  const metadata = (file as any)?.metadata\n  if (!metadata || typeof metadata !== \"object\") return null\n  const image = (metadata as Record<string, unknown>).image\n  if (!image || typeof image !== \"object\") return null\n  const variants = (image as Record<string, unknown>).variants\n  if (!variants || typeof variants !== \"object\") return null\n  return variants as Record<string, unknown>\n}\n\nconst resolveVariantFileId = (variant: unknown): ObjectId | null => {\n  if (!variant || typeof variant !== \"object\") return null\n  const fileId = (variant as Record<string, unknown>).fileId\n  if (typeof fileId !== \"string\") return null\n  try {\n    return new ObjectId(fileId)\n  } catch {\n    return null\n  }\n}\n\nconst selectVariantFileId = (file: unknown, requestedWidth: number | null, requestedVariant: unknown): ObjectId | null => {\n  const variants = resolveImageVariants(file)\n  if (!variants) return null\n\n  let aliasWidth: number | null = null\n  if (typeof requestedVariant === \"string\") {\n    const normalized = requestedVariant.trim().toLowerCase()\n    aliasWidth = normalized === \"thumb\" ? 320 : normalized === \"small\" ? 640 : normalized === \"medium\" ? 960 : normalized === \"large\" ? 1600 : null\n    if (aliasWidth) {\n      const variantFileId = resolveVariantFileId(variants[String(aliasWidth)])\n      if (variantFileId) return variantFileId\n    }\n  }\n\n  const targetWidth = aliasWidth ?? requestedWidth\n  if (!targetWidth) return null\n\n  const widths = Object.keys(variants)\n    .map((width) => Number(width))\n    .filter((width) => Number.isInteger(width) && width > 0)\n    .sort((a, b) => a - b)\n\n  const selectedWidth = widths.reduce<number | null>((selected, width) => {\n    if (selected === null) return width\n\n    const selectedDistance = Math.abs(selected - targetWidth)\n    const distance = Math.abs(width - targetWidth)\n    if (distance < selectedDistance) return width\n    if (distance === selectedDistance && width > selected) return width\n    return selected\n  }, null)\n  return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null\n}\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n  const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId)\n  const blobObjectId = reference?.blobId ?? fileObjectId\n\n  const [file] = await bucket.find({ _id: blobObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const rawMetadata = reference ?? (file as any)?.metadata\n  const fileMetadata = rawMetadata && typeof rawMetadata === \"object\"\n    ? rawMetadata as Record<string, unknown>\n    : {}\n  const accessScope = resolveStoredUploadAccessScope(fileMetadata)\n  if (accessScope !== \"public\") {\n    const userId = getUserId(ctx)\n    if (accessScope === \"tenant\") {\n      if (!userId) {\n        ctx.res.status(401).end()\n        return {}\n      }\n    } else {\n      const uploadKeyHash = getUploadKeyHash(ctx)\n      const metadataUserId = resolveHeaderString(fileMetadata.userId)\n      const ownerKeyHash = resolveHeaderString(fileMetadata.ownerKeyHash)\n\n      const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n      const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n      if (!authorizedByUser && !authorizedByKey) {\n        ctx.res.status(401).end()\n        return {}\n      }\n    }\n  }\n\n  const requestedWidth = parseRequestedWidth((ctx.req.query as any)?.w)\n  const variantFileObjectId = selectVariantFileId(file, requestedWidth, (ctx.req.query as any)?.variant)\n  const [variantFile] = variantFileObjectId\n    ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray()\n    : []\n  const selectedFileObjectId = variantFile ? variantFileObjectId as ObjectId : blobObjectId\n  const selectedFile = variantFile ?? file\n\n  const mimeTypeFromMetadata = resolveHeaderString((selectedFile as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString(reference?.filename ?? (selectedFile as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((selectedFile as any)?.md5)\n  const uploadDate = (selectedFile as any)?.uploadDate instanceof Date ? (selectedFile as any).uploadDate : null\n  const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String((selectedFile as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((selectedFile as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(selectedFileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const Route = \"/api/rb/files/:fileId\"\n\nexport const GetRoute = Route\nexport const DeleteRoute = Route\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.GetRoute, getFile)\n  api.delete(Files.DeleteRoute, deleteFile)\n}\n"],"mappings":";;;;;AAuBA,IAAMe,yBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,uBAAuBL,UAA4B;CAEvD,QADgBA,iBAAiBO,QAAQP,MAAMM,UAAUE,OAAOR,KAAK,EAAA,CACtDS,SAAS,cAAc;AACxC;AAEA,IAAMC,mBAAmB,OAAOC,QAAsBC,WAAoC;CACxF,IAAI;EACF,MAAMD,OAAOG,OAAOF,MAAM;CAC5B,SAASZ,OAAO;EACd,IAAI,CAACK,oBAAoBL,KAAK,GAAG,MAAMA;CACzC;AACF;AAEA,IAAae,aAAoF,OAC/FE,UACAC,QACmC;CACnC,MAAMC,WAAW1B,YAAYyB,GAAG;CAChC,IAAI,CAACC,UAAU;EACbD,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMsB,YAAYd,OAAOU,IAAIK,IAAIC,QAAQZ,UAAU,EAAE,CAAC,CAACR,KAAK;CAC5D,IAAIqB;CACJ,IAAI;EACFA,eAAe,IAAIpC,SAASiC,SAAS;CACvC,QAAQ;EACNJ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAGA,MAAM2B,YAAWD,MADEvC,sBAAsBgC,QAAQ,EAAA,CAC3BS;CACtB,IAAI,CAACD,UAAU;EACbT,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAA4B;CACzD;CAEA,MAAM6B,aAAarC,cAAc;CACjC,MAAMmB,SAAS,IAAIvB,aAAauC,UAAU,EAAEE,WAAW,CAAC;CAExD,MAAMC,SAASnC,UAAUuB,GAAG;CAC5B,MAAMa,gBAAgBrC,iBAAiBwB,GAAG;CAC1C,IAAI,CAACY,UAAU,CAACC,eAAe;EAC7Bb,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMgC,YAAY,MAAMzC,wBAAwBoC,UAAUE,YAAYJ,YAAY;CAClF,IAAIO,WAAW;EACb,MAAMC,oBAAoBD;EAC1B,MAAME,iBAAiBjC,sBAAoB+B,UAAUF,MAAM;EAC3D,MAAMK,eAAelC,sBAAoB+B,UAAUG,YAAY;EAC/D,MAAMC,cAAcxC,+BAA+BqC,iBAAiB;EAMpE,IAAI,CAJqBK,QAAQR,UAAUI,kBAAkBJ,WAAWI,cAInEG,KAAoB,CAHDC,QAAQP,iBAAiBI,gBAAgBJ,kBAAkBI,YAGzDI,KAAmB,EAFlBH,gBAAgB,YAAYE,QAAQR,MAAM,IAEH;GAChEZ,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEtB,IAAI;IAAOC,OAAO;GAAe;EAC5C;EAEA,IAAI;GACF,MAAMV,0BAA0B;IAC9B6B;IACAU;IACAY,aAAahB;GACf,CAAC;EACH,QAAQ;GACNP,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEtB,IAAI;IAAOC,OAAO;GAAgB;EAC7C;EAEAkB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO,EAAEtB,IAAI,KAAK;CACpB;CAEA,MAAM,CAAC2C,QAAQ,MAAM/B,OAAOgC,KAAK,EAAEC,KAAKnB,aAAa,CAAC,CAAC,CAACoB,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACJ,MAAM;EACTxB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO,EAAEtB,IAAI,KAAK;CACpB;CAEA,MAAMmC,iBAAiBjC,sBAAqByC,MAAcK,UAAUjB,MAAM;CAC1E,MAAMK,eAAelC,sBAAqByC,MAAcK,UAAUZ,YAAY;CAC9E,MAAMa,cAAeN,MAAcK;CACnC,MAAME,eAAeD,eAAe,OAAOA,gBAAgB,WACvDA,cACA,CAAC;CACL,MAAMZ,cAAcxC,+BAA+BqD,YAAY;CAM/D,IAAI,CAJqBX,QAAQR,UAAUI,kBAAkBJ,WAAWI,cAInEG,KAAoB,CAHDC,QAAQP,iBAAiBI,gBAAgBJ,kBAAkBI,YAGzDI,KAAmB,EAFlBH,gBAAgB,YAAYE,QAAQR,MAAM,IAEH;EAChEZ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,IAAIiD,aAAaC,iBAAiB,OAAOD,aAAaC,kBAAkB,UAAU;EAChFhC,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,IAAI;EAEF,MAAMqD,cAAaF,MADIxC,OAAOgC,KAAK,EAAE,sBAAsBlB,aAAa2B,YAAY,EAAE,CAAC,CAAC,CAACN,QAAQ,EAAA,CAE9FQ,KAAKC,YAAaA,SAAiBX,GAAG,CAAC,CACvCY,QAAQC,OAAuBA,cAAcpE,QAAQ;EAExD,MAAMqB,iBAAiBC,QAAQc,YAAY;EAC3C,KAAK,MAAMiC,aAAaL,YACtB,MAAM3C,iBAAiBC,QAAQ+C,SAAS;CAE5C,QAAQ;EACNxC,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAgB;CAC7C;CAEAkB,IAAIE,IAAIC,OAAO,GAAG;CAClB,OAAO,EAAEtB,IAAI,KAAK;AACpB;;;AC3IA,IAAMuE,uBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,wBAAwBC,aAA6BA,SAASC,QAAQ,UAAU,GAAG;AAEzF,IAAMC,uBAAuBN,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMO,SAASC,OAAOR,MAAME,KAAK,CAAC;CAClC,IAAI,CAACM,OAAOC,SAASF,MAAM,KAAKA,UAAU,GAAG,OAAO;CACpD,OAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,IAAMK,wBAAwBC,SAAkD;CAC9E,MAAME,WAAYF,MAAcE;CAChC,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,MAAMC,QAASD,SAAqCC;CACpD,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMC,WAAYD,MAAkCC;CACpD,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,OAAOA;AACT;AAEA,IAAMC,wBAAwBC,YAAsC;CAClE,IAAI,CAACA,WAAW,OAAOA,YAAY,UAAU,OAAO;CACpD,MAAMC,SAAUD,QAAoCC;CACpD,IAAI,OAAOA,WAAW,UAAU,OAAO;CACvC,IAAI;EACF,OAAO,IAAI7B,SAAS6B,MAAM;CAC5B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAMC,uBAAuBR,MAAeS,gBAA+BC,qBAA+C;CACxH,MAAMN,WAAWL,qBAAqBC,IAAI;CAC1C,IAAI,CAACI,UAAU,OAAO;CAEtB,IAAIO,aAA4B;CAChC,IAAI,OAAOD,qBAAqB,UAAU;EACxC,MAAMtB,aAAasB,iBAAiBrB,KAAK,CAAC,CAACuB,YAAY;EACvDD,aAAavB,eAAe,UAAU,MAAMA,eAAe,UAAU,MAAMA,eAAe,WAAW,MAAMA,eAAe,UAAU,OAAO;EAC3I,IAAIuB,YAAY;GACd,MAAME,gBAAgBR,qBAAqBD,SAASU,OAAOH,UAAU,EAAE;GACvE,IAAIE,eAAe,OAAOA;EAC5B;CACF;CAEA,MAAME,cAAcJ,cAAcF;CAClC,IAAI,CAACM,aAAa,OAAO;CAOzB,MAAMW,gBALST,OAAOC,KAAKd,QAAQ,CAAC,CACjCe,KAAKC,UAAUzB,OAAOyB,KAAK,CAAC,CAAC,CAC7BC,QAAQD,UAAUzB,OAAO2B,UAAUF,KAAK,KAAKA,QAAQ,CAAC,CAAC,CACvDG,MAAMC,GAAGC,MAAMD,IAAIC,CAEAT,CAAAA,CAAOW,QAAuBC,UAAUR,UAAU;EACtE,IAAIQ,aAAa,MAAM,OAAOR;EAE9B,MAAMS,mBAAmBhC,KAAKiC,IAAIF,WAAWb,WAAW;EACxD,MAAMgB,WAAWlC,KAAKiC,IAAIV,QAAQL,WAAW;EAC7C,IAAIgB,WAAWF,kBAAkB,OAAOT;EACxC,IAAIW,aAAaF,oBAAoBT,QAAQQ,UAAU,OAAOR;EAC9D,OAAOQ;CACT,GAAG,IAAI;CACP,OAAOF,gBAAgBrB,qBAAqBD,SAASU,OAAOY,aAAa,EAAE,IAAI;AACjF;AAEA,IAAaM,UAAiF,OAC5FC,UACAC,QACmC;CACnC,MAAME,WAAWvD,YAAYqD,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMC,YAAY1B,OAAOoB,IAAIO,IAAIC,QAAQnC,UAAU,EAAE,CAAC,CAAClB,KAAK;CAC5D,IAAIsD;CACJ,IAAI;EACFA,eAAe,IAAIjE,SAAS8D,SAAS;CACvC,QAAQ;EACNN,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAGA,MAAMM,YAAWD,MADEpE,sBAAsB4D,QAAQ,EAAA,CAC3BU;CACtB,IAAI,CAACD,UAAU;EACbX,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMQ,aAAanE,cAAc;CACjC,MAAMoE,SAAS,IAAIvE,aAAaoE,UAAU,EAAEE,WAAW,CAAC;CACxD,MAAME,YAAY,MAAMtE,wBAAwBkE,UAAUE,YAAYJ,YAAY;CAClF,MAAMO,eAAeD,WAAWE,UAAUR;CAE1C,MAAM,CAAC3C,QAAQ,MAAMgD,OAAOI,KAAK,EAAEC,KAAKH,aAAa,CAAC,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACvD,MAAM;EACTkC,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMiB,cAAcP,aAAcjD,MAAcE;CAChD,MAAMuD,eAAeD,eAAe,OAAOA,gBAAgB,WACvDA,cACA,CAAC;CACL,MAAME,cAAc1E,+BAA+ByE,YAAY;CAC/D,IAAIC,gBAAgB,UAAU;EAC5B,MAAMC,SAAS5E,UAAUmD,GAAG;EAC5B,IAAIwB,gBAAgB;OACd,CAACC,QAAQ;IACXzB,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;IACxB,OAAO,CAAC;GACV;SACK;GACL,MAAMqB,gBAAgB9E,iBAAiBoD,GAAG;GAC1C,MAAM2B,iBAAiB3E,oBAAoBuE,aAAaE,MAAM;GAC9D,MAAMG,eAAe5E,oBAAoBuE,aAAaK,YAAY;GAKlE,IAAI,CAHqBE,QAAQL,UAAUE,kBAAkBF,WAAWE,cAGnEE,KAAoB,CAFDC,QAAQJ,iBAAiBE,gBAAgBF,kBAAkBE,YAEzDG,GAAiB;IACzC/B,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;IACxB,OAAO,CAAC;GACV;EACF;CACF;CAGA,MAAM6B,sBAAsB5D,oBAAoBR,MADzBP,oBAAqByC,IAAIO,IAAIyB,OAAeC,CACb1D,GAAiByB,IAAIO,IAAIyB,OAAe5D,OAAO;CACrG,MAAM,CAAC+D,eAAeD,sBAClB,MAAMpB,OAAOI,KAAK,EAAEC,KAAKe,oBAAoB,CAAC,CAAC,CAACd,MAAM,CAAC,CAAC,CAACC,QAAQ,IACjE,CAAA;CACJ,MAAMe,uBAAuBD,cAAcD,sBAAkClB;CAC7E,MAAMqB,eAAeF,eAAerE;CAGpC,MAAMyE,WADuBvF,oBAAqBqF,cAAsBrE,UAAUuE,QACjED,KAAwB;CAGzC,MAAMG,eAAerF,qBAFEJ,oBAAoB+D,WAAW1D,YAAagF,cAAsBhF,QACxEmF,KAAkBlC,SACe;CAElD,MAAMoC,eAAe;CACrB,MAAMC,MAAM3F,oBAAqBqF,cAAsBM,GAAG;CAC1D,MAAMC,aAAcP,cAAsBO,sBAAsBC,OAAQR,aAAqBO,aAAa;CAC1G,MAAME,YAAYH,OAAO,GAAGP,qBAAqBW,YAAY,EAAC,GAAInE,OAAQyD,cAAsBW,UAAU,CAAC,EAAC,GAAIpE,OAAOgE,YAAYK,QAAQ,KAAK,CAAC;CACjJ,MAAMC,OAAOP,MAAM,IAAIG,UAAS,KAAM,MAAMA,UAAS;CACrD,MAAMK,cAAcnG,oBAAqBgD,IAAIO,IAAI6C,UAAkB,gBAAgB;CACnF,IAAID,aAAa;EACf,MAAME,aAAaF,YAAYG,MAAM,GAAG,CAAC,CAACrE,KAAKhC,UAAUA,MAAME,KAAK,CAAC,CAAC,CAACgC,OAAO2C,OAAO;EACrF,IAAIuB,WAAWE,SAAS,GAAG,KAAKF,WAAWE,SAASL,IAAI,GAAG;GACzDlD,IAAIG,IAAIC,OAAO,GAAG;GAClBJ,IAAIG,IAAIqD,UAAU,iBAAiBd,YAAY;GAC/C1C,IAAIG,IAAIqD,UAAU,QAAQN,IAAI;GAC9BlD,IAAIG,IAAIE,IAAI;GACZ,OAAO,CAAC;EACV;CACF;CAEAL,IAAIG,IAAIC,OAAO,GAAG;CAClBJ,IAAIG,IAAIqD,UAAU,gBAAgBjB,QAAQ;CAC1CvC,IAAIG,IAAIqD,UAAU,kBAAkB5E,OAAQyD,cAAsBW,UAAU,CAAC,CAAC;CAC9EhD,IAAIG,IAAIqD,UAAU,uBAAuB,qBAAqBf,aAAY,EAAG;CAC7EzC,IAAIG,IAAIqD,UAAU,iBAAiBd,YAAY;CAC/C1C,IAAIG,IAAIqD,UAAU,QAAQN,IAAI;CAC9BlD,IAAIG,IAAIqD,UAAU,0BAA0B,SAAS;CACrD,IAAIjB,aAAa,iBACfvC,IAAIG,IAAIqD,UACN,2BACA,6FACF;CAEFxD,IAAIG,IAAIsD,aAAa;CAErB,IAAIzD,IAAIO,IAAImD,WAAW,QAAQ;EAC7B1D,IAAIG,IAAIE,IAAI;EACZ,OAAO,CAAC;CACV;CAEA,MAAMsD,SAAS7C,OAAO8C,mBAAmBxB,oBAAoB;CAE7DuB,OAAOE,GAAG,eAAe;EACvB,IAAI;GACF7D,IAAIG,IAAI2D,QAAQ;EAClB,QAAQ,CACN;CAEJ,CAAC;CAEDH,OAAOI,KAAK/D,IAAIG,GAAG;CACnB,OAAO,CAAC;AACV;;;ACpNA,IAAa6D,QAAQ;AAErB,IAAaC,WAAWD;AACxB,IAAaE,cAAcF;;;ACK3B,IAAA,mBAAgB,QAAa;CAC3B,IAAI,IAAI,UAAgB,OAAO;CAC/B,IAAI,OAAO,aAAmB,UAAU;AAC1C"}

package/dist/index.d.ts

@@ -6,4 +6,5 @@ export * from './passwordHashStorage';
 export * from './ssrMiddleware';
 export type { HtmlOutlets } from './htmlTemplate';
 export * from './email';
+export * from './serviceWorker';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,iBAAiB,CAAA;AAC/B,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,cAAc,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,iBAAiB,CAAA;AAC/B,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,cAAc,SAAS,CAAA;AACvB,cAAc,iBAAiB,CAAA"}

package/dist/index.js

@@ -1,4 +1,4 @@
-import { i as __toESM, n as sendEmail, r as __commonJSMin, t as EmailDeliveryError } from "./email-Co1GNjlT.js";
+import { a as __commonJSMin, i as sendEmail, n as configureEmailTransport, o as __toESM, r as createResendEmailTransport, t as EmailDeliveryError } from "./email-CK8NNDQY.js";
 import { c as runRtsQuery, d as getDerivedKey, i as normalizeRtsQueryOptions, n as buildRtsAbilityFromRequest, o as resolveRtsRequestTenantId, r as isRtsRequestAuthorized, s as runRtsCount, t as RTS_QUERY_WINDOW_MAX_COUNT, u as syncAuthenticatedSessionMiddleware } from "./queryWindow-DP8zD0lb.js";
 import session from "express-session";
 import { RedisStore } from "connect-redis";
@@ -4152,6 +4152,149 @@ var developmentSessionMiddleware = (sessionMiddleware) => {
 	};
 };
 //#endregion
+//#region src/serviceWorker.ts
+var RPCBASE_SERVICE_WORKER_PATH = "/rpcbase-service-worker.js";
+var RPCBASE_SERVICE_WORKER_MESSAGE_SOURCE = "@rpcbase/service-worker";
+var rpcbaseServiceWorkerSource = `
+const MESSAGE_SOURCE = ${JSON.stringify(RPCBASE_SERVICE_WORKER_MESSAGE_SOURCE)}
+
+const getSameOriginWindowClients = async () => {
+  const windowClients = await self.clients.matchAll({ type: "window", includeUncontrolled: true })
+  return windowClients.filter((client) => {
+    try {
+      return new URL(client.url).origin === self.location.origin
+    } catch {
+      return false
+    }
+  })
+}
+
+const normalizeMessage = (value) => {
+  if (!value || typeof value !== "object") return null
+  if (value.source !== MESSAGE_SOURCE || typeof value.type !== "string" || !value.type.trim()) return null
+  return {
+    source: MESSAGE_SOURCE,
+    type: value.type.trim(),
+    ...(value.payload === undefined ? {} : { payload: value.payload }),
+  }
+}
+
+const broadcastMessage = async (message, excludedClientId) => {
+  const windowClients = await getSameOriginWindowClients()
+  for (const client of windowClients) {
+    if (client.id === excludedClientId) continue
+    client.postMessage(message)
+  }
+}
+
+const showNotificationFromMessage = async (message) => {
+  if (message.type !== "notifications.show") return false
+  const payload = message.payload
+  if (!payload || typeof payload !== "object") return false
+  const title = typeof payload.title === "string" ? payload.title.trim() : ""
+  if (!title) return false
+  const options = payload.options && typeof payload.options === "object" ? payload.options : undefined
+  await self.registration.showNotification(title, options)
+  return true
+}
+
+const getTargetUrl = (link, linkMode, client) => {
+  try {
+    if (linkMode === "merge_current_search" && client) {
+      const currentUrl = new URL(client.url)
+      const actionUrl = new URL(link, currentUrl)
+      actionUrl.searchParams.forEach((value, key) => currentUrl.searchParams.set(key, value))
+      if (actionUrl.hash) currentUrl.hash = actionUrl.hash
+      return currentUrl.origin === self.location.origin ? currentUrl.href : null
+    }
+
+    const targetUrl = new URL(link, self.location.origin)
+    return targetUrl.origin === self.location.origin ? targetUrl.href : null
+  } catch {
+    return null
+  }
+}
+
+self.addEventListener("install", (event) => event.waitUntil(self.skipWaiting()))
+
+self.addEventListener("activate", (event) => {
+  event.waitUntil((async () => {
+    await self.clients.claim()
+    await broadcastMessage({ source: MESSAGE_SOURCE, type: "worker.ready" })
+  })())
+})
+
+self.addEventListener("message", (event) => {
+  const message = normalizeMessage(event.data)
+  if (!message) return
+
+  event.waitUntil((async () => {
+    if (await showNotificationFromMessage(message)) return
+    const sourceClientId = event.source && typeof event.source.id === "string"
+      ? event.source.id
+      : undefined
+    await broadcastMessage(message, sourceClientId)
+  })())
+})
+
+self.addEventListener("push", (event) => {
+  let message = null
+  try {
+    message = normalizeMessage(event.data ? event.data.json() : null)
+  } catch {
+    return
+  }
+  if (!message || message.type !== "notifications.show") return
+  event.waitUntil(showNotificationFromMessage(message))
+})
+
+self.addEventListener("notificationclick", (event) => {
+  event.notification.close()
+  event.waitUntil((async () => {
+    const data = event.notification.data && typeof event.notification.data === "object"
+      ? event.notification.data
+      : {}
+    const link = typeof data.link === "string" ? data.link.trim() : ""
+    const linkMode = data.linkMode === "merge_current_search" ? "merge_current_search" : "navigate"
+    const windowClients = await getSameOriginWindowClients()
+    const client = windowClients.find((candidate) => candidate.focused) ?? windowClients[0]
+
+    if (!link) {
+      if (client) await client.focus()
+      return
+    }
+
+    const targetUrl = getTargetUrl(link, linkMode, client)
+    if (!targetUrl) return
+
+    if (client) {
+      try {
+        const navigatedClient = await client.navigate(targetUrl)
+        await (navigatedClient ?? client).focus()
+        return
+      } catch {
+        await self.clients.openWindow(targetUrl)
+        return
+      }
+    }
+
+    await self.clients.openWindow(targetUrl)
+  })())
+})
+`.trimStart();
+var rpcbaseServiceWorkerRequestHandler = (_req, res) => {
+	res.set({
+		"Cache-Control": "no-cache",
+		"Content-Type": "application/javascript; charset=utf-8",
+		"Service-Worker-Allowed": "/",
+		"X-Content-Type-Options": "nosniff"
+	});
+	res.send(rpcbaseServiceWorkerSource);
+};
+var registerRpcbaseServiceWorkerRoute = (app) => {
+	app.get(RPCBASE_SERVICE_WORKER_PATH, rpcbaseServiceWorkerRequestHandler);
+};
+//#endregion
 //#region src/initServer.ts
 process.env = {
 	...env,
@@ -4228,6 +4371,7 @@ var initServer = async (app, serverEnv) => {
 		}
 		next();
 	});
+	registerRpcbaseServiceWorkerRoute(app);
 	metricsIngestProxyMiddleware(app);
 	const posthog = getPosthogClient(serverEnv);
 	if (posthog) {
@@ -4615,8 +4759,6 @@ async function applyRouteLoaders(req, res, dataRoutes) {
 		statusCode: 200
 	};
 	const runLoaderWithTimeout = async (route, params) => {
-		await resolveLazyRoute(route);
-		if (!route.loader) return null;
 		let timeoutId;
 		const timeoutPromise = new Promise((_, reject) => {
 			timeoutId = setTimeout(() => {
@@ -4636,6 +4778,8 @@ async function applyRouteLoaders(req, res, dataRoutes) {
 		});
 		const loaderPromise = (async () => {
 			try {
+				await resolveLazyRoute(route);
+				if (!route.loader) return null;
 				const data = await route.loader({
 					params,
 					ctx: {
@@ -5374,6 +5518,6 @@ var ssrMiddleware = ({ viteInstance, dataRoutes, errorExtraComponent, getHtmlOut
 	}
 };
 //#endregion
-export { EmailDeliveryError, bindShutdownSignals, getDerivedKey, hashPassword, hashPasswordForStorage, initServer, onShutdown, sendEmail, ssrMiddleware, verifyPasswordFromStorage };
+export { EmailDeliveryError, RPCBASE_SERVICE_WORKER_MESSAGE_SOURCE, RPCBASE_SERVICE_WORKER_PATH, bindShutdownSignals, configureEmailTransport, createResendEmailTransport, getDerivedKey, hashPassword, hashPasswordForStorage, initServer, onShutdown, registerRpcbaseServiceWorkerRoute, rpcbaseServiceWorkerRequestHandler, rpcbaseServiceWorkerSource, sendEmail, ssrMiddleware, verifyPasswordFromStorage };
 
 //# sourceMappingURL=index.js.map