@supalive/core 1.5.1 → 1.7.0

package/dist/src/exports/server.d.ts

@@ -1,7 +1,7 @@
 import { $n as RegisterSubscriptionParamsSchema, At as DevScheduler, Bt as SupaliveDb, E as Context, Ft as JobScheduler, It as QStashScheduler, Jn as AffectedSubscription, Lt as QStashSchedulerOptions, Mt as EnqueueOptions, Nt as IncomingJobRequest, Pt as JobClient, Qn as RegisterSubscriptionParams, Rn as Database, Rt as ScheduleHandle, Xn as InvalidateWritesetParamsSchema, Yn as InvalidateWritesetParams, Zn as InvalidateWritesetResult, ar as UnregisterSubscriptionsResult, cr as UpdateSubscriptionReadSetResult, er as RegisterSubscriptionResult, ir as UnregisterSubscriptionsParams, jt as DevSchedulerOptions, nr as UnregisterSubscriptionParamsSchema, or as UpdateSubscriptionReadSetParams, qn as CacheLayer, rr as UnregisterSubscriptionResult, rt as Router, sr as UpdateSubscriptionReadSetParamsSchema, tr as UnregisterSubscriptionParams, zt as ScheduledJobDef } from "../../index-DTNBHQPY.js";
 import { t as MySqlDatabase } from "../../mysql-BRyidTZD.js";
 import { t as PgDatabase } from "../../postgres-Dh4ATweM.js";
-import { b as UpstashConfig, f as DatabaseConfig, u as SubId, v as SubscriptionManagerConfig, y as SupaliveServerConfig } from "../../types_server-CDu9dPnG.js";
+import { b as SupaliveServerConfig, p as DatabaseConfig, u as SubId, x as UpstashConfig, y as SubscriptionManagerConfig } from "../../types_server-DCD3Kqln.js";
 import pino, { Level } from "pino";
 import Redis$1 from "ioredis";
 
@@ -16,6 +16,8 @@ declare class SupaliveWebSocketServer<TContext extends Context> {
   private wss;
   private cache;
   private redisSub;
+  /** App-level pub/sub channels this instance listens on (see config.appPubSub). */
+  private readonly appPubSubChannels;
   private db;
   private contextRegistry;
   private router?;
@@ -167,6 +169,15 @@ declare class SupaliveWebSocketServer<TContext extends Context> {
    * omit to flush everyone's cache.
    */
   publishSchemaReload(tables?: string[]): Promise<void>;
+  /**
+   * Publish an app-level message (see {@link SupaliveServerConfig.appPubSub}) to
+   * a Redis channel. Rides the shared command connection and is delivered to
+   * every instance subscribed to `channel`, INCLUDING this one — so a handler
+   * should tolerate/skip self-originated messages if that matters. The message
+   * is an opaque string; the app owns encoding. Uses the standard Redis retry
+   * policy; callers typically fire-and-forget.
+   */
+  publishAppMessage(channel: string, message: string): Promise<void>;
   private handleRemoteInstanceMessage;
   private handleRemoteRecomputeRace;
   private publishSubscriptionUpdate;

package/dist/src/exports/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","names":[],"sources":["../../../src/server/supalive-server.ts","../../../src/logger.ts","../../../src/server/subscription-manager.ts","../../../src/server/subscription-manager-client.ts","../../../src/db/init_db.ts","../../../src/server/sub_hash.ts"],"mappings":";;;;;;;;;;;cA4Ha,uBAAA,kBAAyC,OAAA;EAAA,QAC5C,MAAA;EAAA,QACA,UAAA;EAAA,QAEA,UAAA;EAAA,QACA,GAAA;EAAA,QAEA,KAAA;EAAA,QACA,QAAA;EAAA,QACA,EAAA;EAAA,QACA,eAAA;EAAA,QACA,MAAA;EAAA,QAMA,kBAAA;EAAA,QAIA,WAAA;EAAA,QAEA,SAAA;EAAA,QACA,OAAA;EAAA,QACA,SAAA;EAAA,QACA,UAAA;EA6mCsC;EAAA,QA3mCtC,OAAA;EAAA,QAEA,QAAA;EAAA,QACA,mBAAA;EAAA,QACA,gBAAA;EAAA,QAEA,KAAA;cAMI,MAAA,EAAQ,oBAAA,CAAqB,QAAA;EApCjC;;;;;;;;;;;;EAAA,QAwIA,qBAAA;EAAA,QAqBA,kBAAA;EAOR,cAAA,CAAe,MAAA,EAAQ,MAAA,MAAY,QAAA;EAK7B,KAAA,IAAS,OAAA;EA7IP;;;;;;EAAA,QAqKM,gBAAA;EApCN;EAoDR,WAAA,CAAY,IAAA;EA7CW;;;;;EAsDjB,WAAA,CAAY,IAAA,UAAc,IAAA,WAAe,IAAA,GAAO,cAAA,GAAiB,OAAA,CAAQ,cAAA;EAT/E;EAeM,SAAA,CAAU,QAAA,WAAmB,OAAA;EAN7B;;;;EAeN,YAAA,IAAgB,SAAA;EAIV,IAAA,IAAQ,OAAA;EAUd,QAAA;;;;;;EASA,aAAA;EAnBc;;;;;EAAA,QA4BA,iBAAA;EAAA,QA6EN,sBAAA;EAAA,QAQM,gBAAA;EAAA,QAiDA,aAAA;EAAA,QAeA,cAAA;EAAA,QAiBA,UAAA;EAjBA;;;;;;;EAAA,QAoDN,eAAA;EAwVM;;;;;EAAA,QAhUA,kBAAA;EAAA,QAwBA,UAAA;EAAA,QA0GA,eAAA;EAAA,QAkHA,iBAAA;EAAA,QAuBA,gBAAA;EA2UN;;;;;;;;;;;AAyI+B;;;EAzI/B,QAtRM,qBAAA;EAAA,QAgEA,kBAAA;ECr+B+C;;;AAAA;AAC/D;;EAD+D,QDi/BrD,uBAAA;EAAA,QAmBM,oBAAA;ECngCsC;AACtD;;;;AAAmB;AAqBnB;;;;AAA+C;AAK/C;;EA3BsD,QDoiCtC,gBAAA;EAAA,QAgBN,kBAAA;EAAA,QAOM,oBAAA;EAAA,QAgCA,sBAAA;EAAA,QAqEA,gBAAA;EAAA,QAgBN,WAAA;EAAA,QAUA,cAAA;EAAA,QAMA,SAAA;EAAA,QAIM,0BAAA;ECzqCkB;;;;;;EAAA,QDgtClB,kBAAA;EChtCiF;;;AAAI;;;EDkuC7F,mBAAA,CAAoB,MAAA,cAAoB,OAAA;EAAA,QAUhC,2BAAA;EAAA,QAkCA,yBAAA;EAAA,QA0BA,yBAAA;AAAA;;;cCp0CH,aAAA;AAAA,cACA,YAAA;AAAA,cACA,MAAA,EAAM,IAAA,CAAA,MAAA;AAAA,iBAqBH,UAAA,CAAW,IAAA,WAAe,KAAK;AAAA,iBAK/B,iBAAA,wCAAyD,GAAA,EAAK,GAAA,CAAI,CAAA,EAAG,CAAA,IAAK,MAAA,CAAO,CAAA,EAAG,CAAA;;;;;;;;;AD2FpG;cEea,mBAAA;EAAA,QACH,GAAA;EAAA,QACA,IAAA;EAAA,QACA,OAAA;EAAA,QACA,aAAA;EAAA,wBACgB,iBAAA;cAEZ,MAAA,EAAQ,yBAAA;EAsBd,KAAA,IAAS,OAAA;EAuBT,IAAA,IAAQ,OAAA;EAAA,QAUA,eAAA;EFiJyD;;;EAAA,QErHzD,2BAAA;EAUd,WAAA;EAIA,cAAA,CAAe,KAAA;EAAA,QAIP,SAAA;EAAA,QAIA,eAAA;EAAA,QASA,SAAA;EAAA,QAIM,oBAAA;EAAA,QAKA,yBAAA;EAAA,QAwBA,yBAAA;EAAA,QAKA,sBAAA;EAAA,QAKA,uBAAA;EAAA,QAsBA,kBAAA;AAAA;;;;;;;;;;KClTJ,eAAA,IACV,QAAA,EAAU,oBAAA,OACP,OAAO;;;;;;;KAQA,cAAA,SAAuB,OAAO;AAAA,UAEzB,uBAAA;EACf,GAAA;EH0T+E;;;;;;EGnT/E,qBAAqB;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsCV,gBAAA;EAAA,QACH,MAAA;EAAA,QACA,KAAA;EAAA,QACA,gBAAA;EHiQR;EAAA,QG9PQ,YAAA;EAAA,QACA,YAAA;EHsQU;EAAA,QGnQV,iBAAA;EAAA,iBACS,WAAA;EAAA,QACT,yBAAA;EAAA,QAEA,cAAA;EAAA,QACA,eAAA;cAEI,YAAA,WAAuB,uBAAA;EHkQnB;;;;;EGxOhB,iBAAA,CAAkB,MAAA,EAAQ,cAAA;EH+P1B;;;;;EGtPA,kBAAA,CAAmB,OAAA,EAAS,eAAA;EAMtB,oBAAA,CACJ,MAAA,EAAQ,0BAAA,GACP,OAAA,CAAQ,0BAAA;EAIL,yBAAA,CACJ,MAAA,EAAQ,0BAAA,KACP,OAAA,CAAQ,0BAAA;EAIL,yBAAA,CACJ,MAAA,EAAQ,+BAAA,GACP,OAAA,CAAQ,+BAAA;EAIL,sBAAA,CACJ,MAAA,EAAQ,4BAAA,GACP,OAAA,CAAQ,4BAAA;EAIL,uBAAA,CACJ,MAAA,EAAQ,6BAAA,GACP,OAAA,CAAQ,6BAAA;EH8YG;;;;;;;EGnYR,kBAAA,CACJ,MAAA,EAAQ,wBAAA,GACP,OAAA,CAAQ,wBAAA;EH4zBG;;;;;;;EAAA,QG3yBA,IAAA;EAAA,QASN,cAAA;EAAA,QAeM,WAAA;EAAA,QAoBN,QAAA;EAAA,QAMA,SAAA;EAAA,QAMA,WAAA;EAAA,QAKA,UAAA;EAAA,QAWM,WAAA;EH4/BgC;;;EAsEhC;EG5iCd,OAAA;EH4iCuC;EG1iCvC,UAAA;AAAA;;;;AHnKF;;;;;;;;;;cIxGa,YAAA;;;;;;;;;;iBAWS,QAAA,CAAS,EAAA,EAAI,QAAA,GAAW,OAAO;;;;;;cA6BxC,mBAAA;AAAA,KAID,aAAA;EACR,QAAA,EAAU,cAAA;EACV,UAAA,EAAY,UAAU;EACtB,oBAAA;EACA,QAAA;AAAA;AAAA,iBAGkB,YAAA,CAAa,OAAA,EAAS,aAAA,GAAgB,OAAA,CAAQ,UAAA;AAAA,iBAWpD,cAAA,CAAe,MAAA,EAAQ,cAAA,EAAgB,QAAA,YAAoB,UAAA,GAAa,aAAA;;;;;;;;;;;iBAgDlE,gBAAA,CAAiB,EAAA,EAAI,UAAA,EAAY,KAAA,EAAO,UAAA,EAAY,WAAA,aAAsB,OAAA;AAAA,KAsBpF,qBAAA;EACR,OAAA,EAAS,aAAa;EAEtB,eAAA;EAEA,iBAAA;EAEA,iBAAA;EAEA,oBAAA;EAEA,eAAA;AAAA;AAAA,iBAGY,cAAA,CAAe,MAAA,EAAQ,qBAAA;EAA0B,UAAA,EAAY,UAAA;EAAY,cAAA,GAAiB,OAAA;AAAA;;;;iBC/JpF,SAAA,CAAU,KAAA,YAAiB,OAAO;;;;;cAS3C,kBAAA;;;;;;;;;iBAgDS,sBAAA,CACpB,SAAA,UACA,KAAA,oBACA,aAAA,WACC,OAAO;;;;;;iBAWY,gBAAA,CACpB,SAAA,UACA,KAAA,oBACA,aAAA,WACC,OAAO"}
+{"version":3,"file":"server.d.ts","names":[],"sources":["../../../src/server/supalive-server.ts","../../../src/logger.ts","../../../src/server/subscription-manager.ts","../../../src/server/subscription-manager-client.ts","../../../src/db/init_db.ts","../../../src/server/sub_hash.ts"],"mappings":";;;;;;;;;;;cA4Ha,uBAAA,kBAAyC,OAAA;EAAA,QAC5C,MAAA;EAAA,QACA,UAAA;EAAA,QAEA,UAAA;EAAA,QACA,GAAA;EAAA,QAEA,KAAA;EAAA,QACA,QAAA;EAmK2B;EAAA,iBAjKlB,iBAAA;EAAA,QACT,EAAA;EAAA,QACA,eAAA;EAAA,QACA,MAAA;EAAA,QAMA,kBAAA;EAAA,QAIA,WAAA;EAAA,QAEA,SAAA;EAAA,QACA,OAAA;EAAA,QACA,SAAA;EAAA,QACA,UAAA;EA2oC0D;EAAA,QAzoC1D,OAAA;EAAA,QAEA,QAAA;EAAA,QACA,mBAAA;EAAA,QACA,gBAAA;EAAA,QAEA,KAAA;cAMI,MAAA,EAAQ,oBAAA,CAAqB,QAAA;EArCjC;;;;;;;;;;;;EAAA,QA0IA,qBAAA;EAAA,QAqBA,kBAAA;EAOR,cAAA,CAAe,MAAA,EAAQ,MAAA,MAAY,QAAA;EAK7B,KAAA,IAAS,OAAA;EA9IP;;;;;;EAAA,QAsKM,gBAAA;EApCN;EAoDR,WAAA,CAAY,IAAA;EA7CW;;;;;EAsDjB,WAAA,CAAY,IAAA,UAAc,IAAA,WAAe,IAAA,GAAO,cAAA,GAAiB,OAAA,CAAQ,cAAA;EAT/E;EAeM,SAAA,CAAU,QAAA,WAAmB,OAAA;EAN7B;;;;EAeN,YAAA,IAAgB,SAAA;EAIV,IAAA,IAAQ,OAAA;EAUd,QAAA;;;;;;EASA,aAAA;EAnBc;;;;;EAAA,QA4BA,iBAAA;EAAA,QA6EN,sBAAA;EAAA,QAQM,gBAAA;EAAA,QAiDA,aAAA;EAAA,QAeA,cAAA;EAAA,QAiBA,UAAA;EAjBA;;;;;;;EAAA,QAoDN,eAAA;EAwVM;;;;;EAAA,QAhUA,kBAAA;EAAA,QAwBA,UAAA;EAAA,QA0GA,eAAA;EAAA,QAkHA,iBAAA;EAAA,QAuBA,gBAAA;EA2UN;;;;;;;;;;;;;;EAAA,QAtRM,qBAAA;EAAA,QAgEA,kBAAA;;;;ACx+BhB;;;UDo/BU,uBAAA;EAAA,QAmBM,oBAAA;ECtgCH;;;;AAAyC;AACtD;;;;AAAmB;AAqBnB;;;EAtBa,QDuiCG,gBAAA;EAAA,QAgBN,kBAAA;EAAA,QAOM,oBAAA;EAAA,QAgCA,sBAAA;EAAA,QAqEA,gBAAA;EAAA,QAgBN,WAAA;EAAA,QAUA,cAAA;EAAA,QAMA,SAAA;EAAA,QAIM,0BAAA;EC5qCoF;;;;;;EAAA,QD8tCpF,kBAAA;EC9tCkE;;;;;;EDgvC1E,mBAAA,CAAoB,MAAA,cAAoB,OAAA;EChvCqD;;;;AC0GrG;;;;EFwpCQ,iBAAA,CAAkB,OAAA,UAAiB,OAAA,WAAkB,OAAA;EAAA,QAI7C,2BAAA;EAAA,QAkCA,yBAAA;EAAA,QA0BA,yBAAA;AAAA;;;cC91CH,aAAA;AAAA,cACA,YAAA;AAAA,cACA,MAAA,EAAM,IAAA,CAAA,MAAA;AAAA,iBAqBH,UAAA,CAAW,IAAA,WAAe,KAAK;AAAA,iBAK/B,iBAAA,wCAAyD,GAAA,EAAK,GAAA,CAAI,CAAA,EAAG,CAAA,IAAK,MAAA,CAAO,CAAA,EAAG,CAAA;;;;;;;;;AD2FpG;cEea,mBAAA;EAAA,QACH,GAAA;EAAA,QACA,IAAA;EAAA,QACA,OAAA;EAAA,QACA,aAAA;EAAA,wBACgB,iBAAA;cAEZ,MAAA,EAAQ,yBAAA;EAsBd,KAAA,IAAS,OAAA;EAuBT,IAAA,IAAQ,OAAA;EAAA,QAUA,eAAA;EFoJyD;;;EAAA,QExHzD,2BAAA;EAUd,WAAA;EAIA,cAAA,CAAe,KAAA;EAAA,QAIP,SAAA;EAAA,QAIA,eAAA;EAAA,QASA,SAAA;EAAA,QAIM,oBAAA;EAAA,QAKA,yBAAA;EAAA,QAwBA,yBAAA;EAAA,QAKA,sBAAA;EAAA,QAKA,uBAAA;EAAA,QAsBA,kBAAA;AAAA;;;;;;;;;;KClTJ,eAAA,IACV,QAAA,EAAU,oBAAA,OACP,OAAO;;;;;;;KAQA,cAAA,SAAuB,OAAO;AAAA,UAEzB,uBAAA;EACf,GAAA;EH6T+E;;;;;;EGtT/E,qBAAqB;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsCV,gBAAA;EAAA,QACH,MAAA;EAAA,QACA,KAAA;EAAA,QACA,gBAAA;EH4NO;EAAA,QGzNP,YAAA;EAAA,QACA,YAAA;EHgQI;EAAA,QG7PJ,iBAAA;EAAA,iBACS,WAAA;EAAA,QACT,yBAAA;EAAA,QAEA,cAAA;EAAA,QACA,eAAA;cAEI,YAAA,WAAuB,uBAAA;EH+P4C;;;;;EGrO/E,iBAAA,CAAkB,MAAA,EAAQ,cAAA;EHwPpB;;;;;EG/ON,kBAAA,CAAmB,OAAA,EAAS,eAAA;EAMtB,oBAAA,CACJ,MAAA,EAAQ,0BAAA,GACP,OAAA,CAAQ,0BAAA;EAIL,yBAAA,CACJ,MAAA,EAAQ,0BAAA,KACP,OAAA,CAAQ,0BAAA;EAIL,yBAAA,CACJ,MAAA,EAAQ,+BAAA,GACP,OAAA,CAAQ,+BAAA;EAIL,sBAAA,CACJ,MAAA,EAAQ,4BAAA,GACP,OAAA,CAAQ,4BAAA;EAIL,uBAAA,CACJ,MAAA,EAAQ,6BAAA,GACP,OAAA,CAAQ,6BAAA;EHiXG;;;;;;;EGtWR,kBAAA,CACJ,MAAA,EAAQ,wBAAA,GACP,OAAA,CAAQ,wBAAA;EH0sBG;;;;;;;EAAA,QGzrBA,IAAA;EAAA,QASN,cAAA;EAAA,QAeM,WAAA;EAAA,QAoBN,QAAA;EAAA,QAMA,SAAA;EAAA,QAMA,WAAA;EAAA,QAKA,UAAA;EAAA,QAWM,WAAA;EH0gCR;;;EAkBA;EGtgCN,OAAA;EHsgCyC;EGpgCzC,UAAA;AAAA;;;;AHnKF;;;;;;;;;;cIxGa,YAAA;;;;;;;;;;iBAWS,QAAA,CAAS,EAAA,EAAI,QAAA,GAAW,OAAO;;;;;;cA6BxC,mBAAA;AAAA,KAID,aAAA;EACR,QAAA,EAAU,cAAA;EACV,UAAA,EAAY,UAAU;EACtB,oBAAA;EACA,QAAA;AAAA;AAAA,iBAGkB,YAAA,CAAa,OAAA,EAAS,aAAA,GAAgB,OAAA,CAAQ,UAAA;AAAA,iBAWpD,cAAA,CAAe,MAAA,EAAQ,cAAA,EAAgB,QAAA,YAAoB,UAAA,GAAa,aAAA;;;;;;;;;;;iBAgDlE,gBAAA,CAAiB,EAAA,EAAI,UAAA,EAAY,KAAA,EAAO,UAAA,EAAY,WAAA,aAAsB,OAAA;AAAA,KAsBpF,qBAAA;EACR,OAAA,EAAS,aAAa;EAEtB,eAAA;EAEA,iBAAA;EAEA,iBAAA;EAEA,oBAAA;EAEA,eAAA;AAAA;AAAA,iBAGY,cAAA,CAAe,MAAA,EAAQ,qBAAA;EAA0B,UAAA,EAAY,UAAA;EAAY,cAAA,GAAiB,OAAA;AAAA;;;;iBC/JpF,SAAA,CAAU,KAAA,YAAiB,OAAO;;;;;cAS3C,kBAAA;;;;;;;;;iBAgDS,sBAAA,CACpB,SAAA,UACA,KAAA,oBACA,aAAA,WACC,OAAO;;;;;;iBAWY,gBAAA,CACpB,SAAA,UACA,KAAA,oBACA,aAAA,WACC,OAAO"}

package/dist/src/exports/server.js

@@ -526,13 +526,17 @@ var FixedWindowRateLimiter = class {
 //#region src/server/http-rpc.ts
 const logger$3 = logger.child({ name: "HTTP_RPC" }, { level: logLevelOf("SERVER_LOG_LEVEL") });
 /**
-* Handles the one-shot HTTP RPC transport: `POST {path}/<procedureName>` for
-* `query`/`mutation`/`action`. Subscriptions are not offered here (WS only).
+* Handles the one-shot HTTP RPC transport: a single `POST {path}` endpoint for
+* `query`/`mutation`/`action`. The procedure name travels in the request body
+* (`{ name, input }`), not the URL — so the wire never reveals which procedures
+* exist and a transport-level error (which typically echoes the failing URL)
+* can't leak a procedure name. Subscriptions are not offered here (WS only).
 * Kept independent of the WebSocket server so it can be unit-tested against a
 * plain `http.Server` with a stub db/registry.
 *
-* Request flow: CORS → (OPTIONS preflight) → rate limit (pre-auth) → procedure
-* lookup (internal/job rejected) → auth → validate input → run → respond.
+* Request flow: CORS → (OPTIONS preflight) → rate limit (pre-auth) → read body →
+* parse `{ name, input }` → procedure lookup (internal/job rejected) → auth →
+* validate input → run → respond.
 */
 var HttpRpcHandler = class {
 	deps;
@@ -548,9 +552,10 @@ var HttpRpcHandler = class {
 			this.rateLimiter = new FixedWindowRateLimiter(rl.windowMs ?? 6e4, rl.max ?? 120);
 		}
 	}
-	/** True when this handler owns the given request path. */
+	/** True when this handler owns the given request path. The procedure name is
+	* carried in the body now, so a single exact path is the whole surface. */
 	handlesPath(path) {
-		return path === this.path || path.startsWith(`${this.path}/`);
+		return path === this.path;
 	}
 	stop() {
 		this.rateLimiter?.stop();
@@ -567,13 +572,6 @@ var HttpRpcHandler = class {
 			error: "method not allowed",
 			code: "METHOD_NOT_ALLOWED"
 		});
-		const prefix = `${this.path}/`;
-		const name = path.startsWith(prefix) ? decodeURIComponent(path.slice(prefix.length)) : "";
-		if (!name || name.includes("/")) return this.send(res, 404, {
-			success: false,
-			error: "unknown procedure",
-			code: "NOT_FOUND"
-		});
 		if (this.rateLimiter) {
 			const keyBy = this.rpc.rateLimit ? this.rpc.rateLimit.keyBy : void 0;
 			const key = keyBy ? keyBy(req) : clientIp(req);
@@ -587,10 +585,25 @@ var HttpRpcHandler = class {
 				});
 			}
 		}
+		const rawBody = await readBody(req);
+		let name;
+		let rawInput;
+		try {
+			const envelope = rawBody.trim().length > 0 ? JSON.parse(rawBody) : {};
+			if (!envelope || typeof envelope !== "object" || typeof envelope.name !== "string") throw new Error("missing procedure name");
+			name = envelope.name;
+			rawInput = envelope.input ?? {};
+		} catch {
+			return this.send(res, 400, {
+				success: false,
+				error: "invalid request",
+				code: "BAD_REQUEST"
+			});
+		}
 		const procedure = this.deps.getRegistry()?.getProcedure(name);
 		if (!procedure || procedure.internal || procedure.type === "job") return this.send(res, 404, {
 			success: false,
-			error: `Procedure "${name}" not found`,
+			error: "not found",
 			code: "NOT_FOUND"
 		});
 		const auth = await this.resolveAuth(req);
@@ -599,11 +612,9 @@ var HttpRpcHandler = class {
 			error: auth.message,
 			code: "UNAUTHENTICATED"
 		});
-		const rawBody = await readBody(req);
 		let input;
 		try {
-			const parsed = rawBody.trim().length > 0 ? JSON.parse(rawBody) : {};
-			input = procedure.inputSchema.parse(parsed);
+			input = procedure.inputSchema.parse(rawInput);
 		} catch (err) {
 			logger$3.warn(err, `RPC "${name}" received invalid input`);
 			return this.send(res, 400, {
@@ -787,6 +798,8 @@ var SupaliveWebSocketServer = class {
 	wss;
 	cache;
 	redisSub;
+	/** App-level pub/sub channels this instance listens on (see config.appPubSub). */
+	appPubSubChannels;
 	db;
 	contextRegistry;
 	router;
@@ -819,6 +832,7 @@ var SupaliveWebSocketServer = class {
 		this.subManagerClient = new SubManagerClient(config.subManagerUrl);
 		this.cache = config.cacheLayer;
 		this.redisSub = config.redisSubClient;
+		this.appPubSubChannels = new Set(config.appPubSub?.channels ?? []);
 		this.db = config.database;
 		this.storage = config.storage;
 		this.db.setOnAfterCommit((writeSet, commitTs) => {
@@ -1615,9 +1629,15 @@ var SupaliveWebSocketServer = class {
 		const instanceChannel = `sub:instance:${this.instanceId}`;
 		const schemaChannel = SCHEMA_RELOAD_CHANNEL;
 		const watermarkChannel = RETENTION_WATERMARK_CHANNEL;
-		await this.redisSub.subscribe(instanceChannel, schemaChannel, watermarkChannel);
+		const appChannels = [...this.appPubSubChannels];
+		await this.redisSub.subscribe(instanceChannel, schemaChannel, watermarkChannel, ...appChannels);
 		this.redisSub.on("connect", () => {
-			logger$2.info(`Subscribed to Redis channels: ${instanceChannel}, ${schemaChannel}, ${watermarkChannel}`);
+			logger$2.info(`Subscribed to Redis channels: ${[
+				instanceChannel,
+				schemaChannel,
+				watermarkChannel,
+				...appChannels
+			].join(", ")}`);
 		});
 		this.redisSub.on("message", (channel, message) => {
 			if (channel === instanceChannel) this.handleRemoteInstanceMessage(message).catch((err) => {
@@ -1631,6 +1651,7 @@ var SupaliveWebSocketServer = class {
 			} catch (err) {
 				logger$2.error(err, `Bad retention watermark message: ${message}`);
 			}
+			else if (this.appPubSubChannels.has(channel)) Promise.resolve(this.config.appPubSub?.onMessage(channel, message)).catch((err) => logger$2.error(err, `Error in appPubSub handler for channel ${channel}`));
 		});
 		this.redisSub.on("error", (err) => {
 			logger$2.error(err, `Subscriber error for channels: ${instanceChannel}, ${schemaChannel}`);
@@ -1667,6 +1688,17 @@ var SupaliveWebSocketServer = class {
 		});
 		await redisRetryPolicy.execute(() => this.cache.redis.publish(SCHEMA_RELOAD_CHANNEL, payload));
 	}
+	/**
+	* Publish an app-level message (see {@link SupaliveServerConfig.appPubSub}) to
+	* a Redis channel. Rides the shared command connection and is delivered to
+	* every instance subscribed to `channel`, INCLUDING this one — so a handler
+	* should tolerate/skip self-originated messages if that matters. The message
+	* is an opaque string; the app owns encoding. Uses the standard Redis retry
+	* policy; callers typically fire-and-forget.
+	*/
+	async publishAppMessage(channel, message) {
+		await redisRetryPolicy.execute(() => this.cache.redis.publish(channel, message));
+	}
 	async handleRemoteInstanceMessage(message) {
 		let parsed;
 		try {