heliumts 0.5.7 → 0.5.8

package/dist/server/index.d.ts

@@ -7,6 +7,7 @@ export * from "./middleware.js";
 export type { HTTPRouter } from "./httpRouter.js";
 export { startProdServer } from "./prodServer.js";
 export type { RpcRegistry } from "./rpcRegistry.js";
+export { PublicError } from "./rpcRegistry.js";
 export { injectEnvToProcess, loadEnvFiles } from "../utils/envLoader.js";
 export { log } from "../utils/logger.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAGhC,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIpD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAGhC,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAI/C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/server/index.js

@@ -6,6 +6,7 @@ export * from "./defineMethod.js";
 export * from "./defineWorker.js";
 export * from "./middleware.js";
 export { startProdServer } from "./prodServer.js";
+export { PublicError } from "./rpcRegistry.js";
 // Internal utilities needed by generated server code (from helium build)
 // Note: These are exported for framework-generated code only, not for direct user consumption
 export { injectEnvToProcess, loadEnvFiles } from "../utils/envLoader.js";

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAIhC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,yEAAyE;AACzE,8FAA8F;AAC9F,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC","sourcesContent":["// Public API for users\nexport * from \"./config.js\";\nexport * from \"./context.js\";\nexport * from \"./defineHTTPRequest.js\";\nexport * from \"./defineMethod.js\";\nexport * from \"./defineWorker.js\";\nexport * from \"./middleware.js\";\n\n// Production server API\nexport type { HTTPRouter } from \"./httpRouter.js\";\nexport { startProdServer } from \"./prodServer.js\";\nexport type { RpcRegistry } from \"./rpcRegistry.js\";\n\n// Internal utilities needed by generated server code (from helium build)\n// Note: These are exported for framework-generated code only, not for direct user consumption\nexport { injectEnvToProcess, loadEnvFiles } from \"../utils/envLoader.js\";\nexport { log } from \"../utils/logger.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAIhC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,yEAAyE;AACzE,8FAA8F;AAC9F,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC","sourcesContent":["// Public API for users\nexport * from \"./config.js\";\nexport * from \"./context.js\";\nexport * from \"./defineHTTPRequest.js\";\nexport * from \"./defineMethod.js\";\nexport * from \"./defineWorker.js\";\nexport * from \"./middleware.js\";\n\n// Production server API\nexport type { HTTPRouter } from \"./httpRouter.js\";\nexport { startProdServer } from \"./prodServer.js\";\nexport type { RpcRegistry } from \"./rpcRegistry.js\";\nexport { PublicError } from \"./rpcRegistry.js\";\n\n// Internal utilities needed by generated server code (from helium build)\n// Note: These are exported for framework-generated code only, not for direct user consumption\nexport { injectEnvToProcess, loadEnvFiles } from \"../utils/envLoader.js\";\nexport { log } from \"../utils/logger.js\";\n"]}

package/dist/server/ipExtractor.d.ts

@@ -0,0 +1,48 @@
+import type http from "http";
+/**
+ * Extracts the client IP address from an HTTP request, taking into account proxy configurations.
+ *
+ * When behind proxies (like Vercel, Cloudflare, AWS ALB, etc.), the X-Forwarded-For header
+ * contains a chain of IP addresses. The format is: "client, proxy1, proxy2, ..."
+ *
+ * @param req - The HTTP request object
+ * @param trustProxyDepth - Number of proxy levels to trust
+ *   - 0: Only use req.socket.remoteAddress (no proxy trust)
+ *   - 1: Trust 1 proxy level (get the last IP before your server)
+ *   - 2+: Trust multiple proxy levels (for complex setups)
+ *
+ * Examples:
+ * - trustProxyDepth=0: Direct connection, no proxies
+ *   X-Forwarded-For: ignored
+ *   Result: req.socket.remoteAddress
+ *
+ * - trustProxyDepth=1: Behind one proxy (e.g., Vercel, Netlify)
+ *   X-Forwarded-For: "203.0.113.1, 198.51.100.1"
+ *   Result: "203.0.113.1" (client IP)
+ *
+ * - trustProxyDepth=2: Behind two proxies (e.g., Cloudflare -> Load Balancer)
+ *   X-Forwarded-For: "203.0.113.1, 198.51.100.1, 192.0.2.1"
+ *   Result: "203.0.113.1" (client IP)
+ *
+ * Common configurations:
+ * - Vercel/Netlify/Railway: trustProxyDepth=1
+ * - Cloudflare -> Origin: trustProxyDepth=1 or 2 (depending on your setup)
+ * - AWS ALB -> EC2: trustProxyDepth=1
+ * - Nginx -> Node: trustProxyDepth=1
+ * - Cloudflare -> Nginx -> Node: trustProxyDepth=2
+ */
+export declare function extractClientIP(req: http.IncomingMessage, trustProxyDepth?: number): string;
+/**
+ * Alternative extraction method that works from the right (trusts the rightmost IPs).
+ * This is useful when you want to trust the last N proxies in the chain.
+ *
+ * @param req - The HTTP request object
+ * @param trustProxyDepth - Number of proxy levels to trust from the right
+ *
+ * Example:
+ * X-Forwarded-For: "203.0.113.1, 198.51.100.1, 192.0.2.1"
+ * trustProxyDepth=1: Result is "198.51.100.1" (skip the last trusted proxy)
+ * trustProxyDepth=2: Result is "203.0.113.1" (skip the last 2 trusted proxies)
+ */
+export declare function extractClientIPFromRight(req: http.IncomingMessage, trustProxyDepth?: number): string;
+//# sourceMappingURL=ipExtractor.d.ts.map

package/dist/server/ipExtractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipExtractor.d.ts","sourceRoot":"","sources":["../../src/server/ipExtractor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAE,MAAU,GAAG,MAAM,CAqC9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAE,MAAU,GAAG,MAAM,CAsBvG"}

package/dist/server/ipExtractor.js

@@ -0,0 +1,96 @@
+/**
+ * Extracts the client IP address from an HTTP request, taking into account proxy configurations.
+ *
+ * When behind proxies (like Vercel, Cloudflare, AWS ALB, etc.), the X-Forwarded-For header
+ * contains a chain of IP addresses. The format is: "client, proxy1, proxy2, ..."
+ *
+ * @param req - The HTTP request object
+ * @param trustProxyDepth - Number of proxy levels to trust
+ *   - 0: Only use req.socket.remoteAddress (no proxy trust)
+ *   - 1: Trust 1 proxy level (get the last IP before your server)
+ *   - 2+: Trust multiple proxy levels (for complex setups)
+ *
+ * Examples:
+ * - trustProxyDepth=0: Direct connection, no proxies
+ *   X-Forwarded-For: ignored
+ *   Result: req.socket.remoteAddress
+ *
+ * - trustProxyDepth=1: Behind one proxy (e.g., Vercel, Netlify)
+ *   X-Forwarded-For: "203.0.113.1, 198.51.100.1"
+ *   Result: "203.0.113.1" (client IP)
+ *
+ * - trustProxyDepth=2: Behind two proxies (e.g., Cloudflare -> Load Balancer)
+ *   X-Forwarded-For: "203.0.113.1, 198.51.100.1, 192.0.2.1"
+ *   Result: "203.0.113.1" (client IP)
+ *
+ * Common configurations:
+ * - Vercel/Netlify/Railway: trustProxyDepth=1
+ * - Cloudflare -> Origin: trustProxyDepth=1 or 2 (depending on your setup)
+ * - AWS ALB -> EC2: trustProxyDepth=1
+ * - Nginx -> Node: trustProxyDepth=1
+ * - Cloudflare -> Nginx -> Node: trustProxyDepth=2
+ */
+export function extractClientIP(req, trustProxyDepth = 0) {
+    // If not trusting any proxies, return the direct connection IP
+    if (trustProxyDepth === 0) {
+        return req.socket.remoteAddress || "unknown";
+    }
+    // Get X-Forwarded-For header
+    const forwardedFor = req.headers["x-forwarded-for"];
+    if (!forwardedFor) {
+        // No X-Forwarded-For header, fall back to direct connection
+        return req.socket.remoteAddress || "unknown";
+    }
+    // Parse X-Forwarded-For header (can be a string or array of strings)
+    const forwardedIPs = (Array.isArray(forwardedFor) ? forwardedFor.join(",") : forwardedFor)
+        .split(",")
+        .map((ip) => ip.trim())
+        .filter((ip) => ip.length > 0);
+    if (forwardedIPs.length === 0) {
+        // Empty X-Forwarded-For, fall back to direct connection
+        return req.socket.remoteAddress || "unknown";
+    }
+    // The client IP is at the beginning of the chain
+    // We trust the chain up to trustProxyDepth levels
+    // Format: [clientIP, proxy1, proxy2, ..., lastProxy]
+    // We want the clientIP, but we need to verify we have enough trusted proxies
+    if (forwardedIPs.length < trustProxyDepth) {
+        // Not enough IPs in the chain, the chain might be incomplete or spoofed
+        // Fall back to direct connection for safety
+        return req.socket.remoteAddress || "unknown";
+    }
+    // Return the client IP (first in the chain)
+    return forwardedIPs[0];
+}
+/**
+ * Alternative extraction method that works from the right (trusts the rightmost IPs).
+ * This is useful when you want to trust the last N proxies in the chain.
+ *
+ * @param req - The HTTP request object
+ * @param trustProxyDepth - Number of proxy levels to trust from the right
+ *
+ * Example:
+ * X-Forwarded-For: "203.0.113.1, 198.51.100.1, 192.0.2.1"
+ * trustProxyDepth=1: Result is "198.51.100.1" (skip the last trusted proxy)
+ * trustProxyDepth=2: Result is "203.0.113.1" (skip the last 2 trusted proxies)
+ */
+export function extractClientIPFromRight(req, trustProxyDepth = 0) {
+    if (trustProxyDepth === 0) {
+        return req.socket.remoteAddress || "unknown";
+    }
+    const forwardedFor = req.headers["x-forwarded-for"];
+    if (!forwardedFor) {
+        return req.socket.remoteAddress || "unknown";
+    }
+    const forwardedIPs = (Array.isArray(forwardedFor) ? forwardedFor.join(",") : forwardedFor)
+        .split(",")
+        .map((ip) => ip.trim())
+        .filter((ip) => ip.length > 0);
+    if (forwardedIPs.length === 0) {
+        return req.socket.remoteAddress || "unknown";
+    }
+    // Calculate which IP to trust by skipping the rightmost N trusted proxies
+    const clientIPIndex = Math.max(0, forwardedIPs.length - trustProxyDepth - 1);
+    return forwardedIPs[clientIPIndex];
+}
+//# sourceMappingURL=ipExtractor.js.map

package/dist/server/ipExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipExtractor.js","sourceRoot":"","sources":["../../src/server/ipExtractor.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,eAAe,CAAC,GAAyB,EAAE,kBAA0B,CAAC;IAClF,+DAA+D;IAC/D,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,6BAA6B;IAC7B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,4DAA4D;QAC5D,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;SACrF,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,wDAAwD;QACxD,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,iDAAiD;IACjD,kDAAkD;IAClD,qDAAqD;IACrD,6EAA6E;IAE7E,IAAI,YAAY,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACxC,wEAAwE;QACxE,4CAA4C;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,4CAA4C;IAC5C,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAyB,EAAE,kBAA0B,CAAC;IAC3F,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;SACrF,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,CAAC;IAED,0EAA0E;IAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC;IAC7E,OAAO,YAAY,CAAC,aAAa,CAAC,CAAC;AACvC,CAAC"}

package/dist/server/rpcRegistry.d.ts

@@ -7,6 +7,9 @@ import type { RateLimiter } from "./rateLimiter.js";
 export interface HttpRpcResult {
     response: RpcResponse | RpcResponse[];
 }
+export declare class PublicError extends Error {
+    readonly public = true;
+}
 export declare class RpcRegistry {
     private methods;
     private middleware;

package/dist/server/rpcRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpcRegistry.d.ts","sourceRoot":"","sources":["../../src/server/rpcRegistry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,SAAS,MAAM,IAAI,CAAC;AAG3B,OAAO,KAAK,EAAc,WAAW,EAAY,MAAM,wBAAwB,CAAC;AAGhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAUpD,MAAM,WAAW,aAAa;IAC1B,QAAQ,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;CACzC;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,OAAO,CAAgD;IAC/D,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,YAAY,CAAc;IAElC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;IAKnD,aAAa,CAAC,UAAU,EAAE,gBAAgB;IAI1C,cAAc,CAAC,WAAW,EAAE,WAAW;IAIvC,eAAe,CAAC,IAAI,EAAE,MAAM;IAI5B;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,eAAe;IAI1E,OAAO,CAAC,QAAQ;YAmBF,cAAc;IAuEtB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;YAuC7C,kBAAkB;IAoEhC;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;CAsCvH"}
+{"version":3,"file":"rpcRegistry.d.ts","sourceRoot":"","sources":["../../src/server/rpcRegistry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,SAAS,MAAM,IAAI,CAAC;AAG3B,OAAO,KAAK,EAAc,WAAW,EAAY,MAAM,wBAAwB,CAAC;AAGhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAUpD,MAAM,WAAW,aAAa;IAC1B,QAAQ,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;CACzC;AAED,qBAAa,WAAY,SAAQ,KAAK;IAClC,SAAgB,MAAM,QAAQ;CACjC;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,OAAO,CAAgD;IAC/D,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,YAAY,CAAc;IAElC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;IAKnD,aAAa,CAAC,UAAU,EAAE,gBAAgB;IAI1C,cAAc,CAAC,WAAW,EAAE,WAAW;IAIvC,eAAe,CAAC,IAAI,EAAE,MAAM;IAI5B;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,eAAe;IAI1E,OAAO,CAAC,QAAQ;YAmBF,cAAc;IAuEtB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;YAuC7C,kBAAkB;IAoEhC;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;CAsCvH"}

package/dist/server/rpcRegistry.js

@@ -4,6 +4,12 @@ import { gzip } from "zlib";
 import { log } from "../utils/logger.js";
 import { prepareForMsgpack } from "./serializer.js";
 const gzipAsync = promisify(gzip);
+export class PublicError extends Error {
+    constructor() {
+        super(...arguments);
+        this.public = true;
+    }
+}
 export class RpcRegistry {
     constructor() {
         this.methods = new Map();
@@ -261,12 +267,37 @@ export class RpcRegistry {
  * In development, returns the actual error message for debugging.
  */
 function sanitizeErrorMessage(err) {
+    const message = getErrorMessage(err);
+    const isPublic = isPublicError(err);
     if (process.env.NODE_ENV === "production") {
+        if (isPublic && message) {
+            return message;
+        }
         return "Server error";
     }
+    if (message) {
+        return message;
+    }
+    return "Server error";
+}
+function isPublicError(err) {
+    if (err instanceof PublicError) {
+        return true;
+    }
+    if (!err || typeof err !== "object") {
+        return false;
+    }
+    const publicFlag = err.public;
+    return publicFlag === true;
+}
+function getErrorMessage(err) {
     if (err instanceof Error) {
         return err.message;
     }
-    return "Server error";
+    if (err && typeof err === "object") {
+        const message = err.message;
+        return typeof message === "string" ? message : null;
+    }
+    return null;
 }
 //# sourceMappingURL=rpcRegistry.js.map

package/dist/server/rpcRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpcRegistry.js","sourceRoot":"","sources":["../../src/server/rpcRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAWlC,MAAM,OAAO,WAAW;IAAxB;QACY,YAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;QACvD,eAAU,GAA4B,IAAI,CAAC;QAC3C,gBAAW,GAAuB,IAAI,CAAC;QACvC,mBAAc,GAAG,IAAI,OAAO,EAA6B,CAAC;QAC1D,iBAAY,GAAW,EAAE,CAAC;IA2QtC,CAAC;IAzQG,QAAQ,CAAC,EAAU,EAAE,GAA8B;QAC/C,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,cAAc,CAAC,WAAwB;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,IAAY;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAiB,EAAE,EAAU,EAAE,GAAyB;QACtE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IAEO,QAAQ,CAAC,MAAiB;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnE,OAAO;YACH,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;SAC9C,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAe,EAAE,MAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,kBAAkB,GAAG,CAAC,MAAM,EAAE;aACxC,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,sCAAsC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,GAAG,GAAkB;gBACvB,GAAG,EAAE;oBACD,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,SAAS;oBAC7B,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;oBACpC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG;oBACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM;oBAC5B,GAAG,EAAE,QAAQ,EAAE,GAA2B;iBAC7C;aACJ,CAAC;YACF,IAAI,MAAW,CAAC;YAEhB,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACzB;oBACI,GAAG;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,MAAM;iBACzB,EACD,KAAK,IAAI,EAAE;oBACP,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,CACJ,CAAC;gBAEF,+DAA+D;gBAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO;wBACH,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAC5B,KAAK,EAAE,+BAA+B;qBACzC,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,0CAA0C;gBAC1C,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;YAED,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,MAAM;aACT,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,GAAG,CAAC,OAAO,EAAE,eAAe,GAAG,CAAC,MAAM,WAAW,EAAE,GAAG,CAAC,CAAC;YACxD,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;aACnC,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAiB,EAAE,GAAoB;QACvD,IAAI,GAA8B,CAAC;QACnC,IAAI,CAAC;YACD,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,GAAG,aAAa,CAAC,MAAM,CAA8B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,aAAa,GAAgB;gBAC/B,EAAE,EAAE,OAAO;gBACX,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,cAAc,GAAG,CAAC,MAAM,uBAAuB,IAAI,CAAC,YAAY,EAAE;aAC5E,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAW,CAAC,CAAC;YACvE,OAAO;QACX,CAAC;QAED,IAAI,QAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,8BAA8B;QAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,OAAiB,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAe,EAAE,EAAU,EAAE,OAA6B;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,KAAK,EAAE,kBAAkB,GAAG,CAAC,MAAM,EAAE;aACxC,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,sCAAsC;YACtC,MAAM,GAAG,GAAkB;gBACvB,GAAG,EAAE;oBACD,EAAE;oBACF,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,GAAG,EAAE,OAAO;iBACf;aACJ,CAAC;YACF,IAAI,MAAe,CAAC;YAEpB,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACzB;oBACI,GAAG;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,MAAM;iBACzB,EACD,KAAK,IAAI,EAAE;oBACP,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,CACJ,CAAC;gBAEF,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO;wBACH,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;wBACzD,KAAK,EAAE,+BAA+B;qBACzC,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;YAED,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,MAAM;aACT,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAG,CAAC,MAAM,WAAW,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;aACnC,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAwB,EAAE,EAAU,EAAE,OAA6B;QACvF,IAAI,GAA8B,CAAC;QAEnC,IAAI,CAAC;YACD,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzE,GAAG,GAAG,aAAa,CAAC,MAAM,CAA8B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,aAAa,GAAgB;gBAC/B,EAAE,EAAE,SAAS;gBACb,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;gBAClD,KAAK,EAAE,wBAAwB;aAClC,CAAC;YACF,OAAO;gBACH,QAAQ,EAAE,aAAa;aAC1B,CAAC;QACN,CAAC;QAED,IAAI,QAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,2BAA2B;YAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,MAAM,aAAa,GAAgB;oBAC/B,EAAE,EAAE,OAAO;oBACX,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;oBAClD,KAAK,EAAE,cAAc,GAAG,CAAC,MAAM,uBAAuB,IAAI,CAAC,YAAY,EAAE;iBAC5E,CAAC;gBACF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YACvC,CAAC;YACD,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAiB,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxB,CAAC;CACJ;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACxC,OAAO,cAAc,CAAC;IAC1B,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,cAAc,CAAC;AAC1B,CAAC","sourcesContent":["import { decode as msgpackDecode, encode as msgpackEncode } from \"@msgpack/msgpack\";\nimport type http from \"http\";\nimport { promisify } from \"util\";\nimport WebSocket from \"ws\";\nimport { gzip } from \"zlib\";\n\nimport type { RpcRequest, RpcResponse, RpcStats } from \"../runtime/protocol.js\";\nimport { log } from \"../utils/logger.js\";\nimport type { HeliumContext } from \"./context.js\";\nimport type { HeliumMethodDef } from \"./defineMethod.js\";\nimport type { HeliumMiddleware } from \"./middleware.js\";\nimport type { RateLimiter } from \"./rateLimiter.js\";\nimport { prepareForMsgpack } from \"./serializer.js\";\n\nconst gzipAsync = promisify(gzip);\n\ninterface SocketMetadata {\n    ip: string;\n    req: http.IncomingMessage;\n}\n\nexport interface HttpRpcResult {\n    response: RpcResponse | RpcResponse[];\n}\n\nexport class RpcRegistry {\n    private methods = new Map<string, HeliumMethodDef<any, any>>();\n    private middleware: HeliumMiddleware | null = null;\n    private rateLimiter: RateLimiter | null = null;\n    private socketMetadata = new WeakMap<WebSocket, SocketMetadata>();\n    private maxBatchSize: number = 20;\n\n    register(id: string, def: HeliumMethodDef<any, any>) {\n        def.__id = id;\n        this.methods.set(id, def);\n    }\n\n    setMiddleware(middleware: HeliumMiddleware) {\n        this.middleware = middleware;\n    }\n\n    setRateLimiter(rateLimiter: RateLimiter) {\n        this.rateLimiter = rateLimiter;\n    }\n\n    setMaxBatchSize(size: number) {\n        this.maxBatchSize = size;\n    }\n\n    /**\n     * Store metadata about a WebSocket connection.\n     * Should be called when a new connection is established.\n     */\n    setSocketMetadata(socket: WebSocket, ip: string, req: http.IncomingMessage) {\n        this.socketMetadata.set(socket, { ip, req });\n    }\n\n    private getStats(socket: WebSocket): RpcStats {\n        if (!this.rateLimiter) {\n            return { remainingRequests: Infinity, resetInSeconds: 0 };\n        }\n\n        const stats = this.rateLimiter.getConnectionStats(socket);\n        if (!stats) {\n            return { remainingRequests: 0, resetInSeconds: 0 };\n        }\n\n        const now = Date.now();\n        const resetInSeconds = Math.ceil((stats.resetTimeMs - now) / 1000);\n\n        return {\n            remainingRequests: stats.remainingMessages,\n            resetInSeconds: Math.max(0, resetInSeconds),\n        };\n    }\n\n    private async processRequest(req: RpcRequest, socket: WebSocket): Promise<RpcResponse> {\n        const def = this.methods.get(req.method);\n        if (!def) {\n            return {\n                id: req.id,\n                ok: false,\n                stats: this.getStats(socket),\n                error: `Unknown method ${req.method}`,\n            };\n        }\n\n        try {\n            // Build context with request metadata\n            const metadata = this.socketMetadata.get(socket);\n            const ctx: HeliumContext = {\n                req: {\n                    ip: metadata?.ip || \"unknown\",\n                    headers: metadata?.req.headers || {},\n                    url: metadata?.req.url,\n                    method: metadata?.req.method,\n                    raw: metadata?.req as http.IncomingMessage,\n                },\n            };\n            let result: any;\n\n            // Execute middleware if present\n            if (this.middleware) {\n                let nextCalled = false;\n                await this.middleware.handler(\n                    {\n                        ctx,\n                        type: \"method\",\n                        methodName: req.method,\n                    },\n                    async () => {\n                        nextCalled = true;\n                        result = await def.handler(req.args, ctx);\n                    }\n                );\n\n                // If next() was not called, the middleware blocked the request\n                if (!nextCalled) {\n                    return {\n                        id: req.id,\n                        ok: false,\n                        stats: this.getStats(socket),\n                        error: \"Request blocked by middleware\",\n                    };\n                }\n            } else {\n                // No middleware, execute handler directly\n                result = await def.handler(req.args, ctx);\n            }\n\n            return {\n                id: req.id,\n                ok: true,\n                stats: this.getStats(socket),\n                result,\n            };\n        } catch (err: any) {\n            log(\"error\", `RPC method '${req.method}' failed:`, err);\n            return {\n                id: req.id,\n                ok: false,\n                stats: this.getStats(socket),\n                error: sanitizeErrorMessage(err),\n            };\n        }\n    }\n\n    async handleMessage(socket: WebSocket, raw: string | Buffer) {\n        let req: RpcRequest | RpcRequest[];\n        try {\n            // Always expect MessagePack\n            const buffer = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);\n            req = msgpackDecode(buffer) as RpcRequest | RpcRequest[];\n        } catch {\n            return;\n        }\n\n        // Security: cap batch size\n        if (Array.isArray(req) && req.length > this.maxBatchSize) {\n            const errorResponse: RpcResponse = {\n                id: \"batch\",\n                ok: false,\n                stats: this.getStats(socket),\n                error: `Batch size ${req.length} exceeds maximum of ${this.maxBatchSize}`,\n            };\n            socket.send(msgpackEncode(prepareForMsgpack(errorResponse)) as Buffer);\n            return;\n        }\n\n        let response: RpcResponse | RpcResponse[];\n        if (Array.isArray(req)) {\n            response = await Promise.all(req.map((r) => this.processRequest(r, socket)));\n        } else {\n            response = await this.processRequest(req, socket);\n        }\n\n        const encoded = msgpackEncode(prepareForMsgpack(response));\n        // Compress if larger than 1KB\n        if (encoded.length > 1024) {\n            const compressed = await gzipAsync(encoded);\n            socket.send(compressed);\n        } else {\n            socket.send(encoded as Buffer);\n        }\n    }\n\n    private async processRequestHttp(req: RpcRequest, ip: string, httpReq: http.IncomingMessage): Promise<RpcResponse> {\n        const def = this.methods.get(req.method);\n        if (!def) {\n            return {\n                id: req.id,\n                ok: false,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                error: `Unknown method ${req.method}`,\n            };\n        }\n\n        try {\n            // Build context with request metadata\n            const ctx: HeliumContext = {\n                req: {\n                    ip,\n                    headers: httpReq.headers,\n                    url: httpReq.url,\n                    method: httpReq.method,\n                    raw: httpReq,\n                },\n            };\n            let result: unknown;\n\n            // Execute middleware if present\n            if (this.middleware) {\n                let nextCalled = false;\n                await this.middleware.handler(\n                    {\n                        ctx,\n                        type: \"method\",\n                        methodName: req.method,\n                    },\n                    async () => {\n                        nextCalled = true;\n                        result = await def.handler(req.args, ctx);\n                    }\n                );\n\n                if (!nextCalled) {\n                    return {\n                        id: req.id,\n                        ok: false,\n                        stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                        error: \"Request blocked by middleware\",\n                    };\n                }\n            } else {\n                result = await def.handler(req.args, ctx);\n            }\n\n            return {\n                id: req.id,\n                ok: true,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                result,\n            };\n        } catch (err: unknown) {\n            log(\"error\", `HTTP RPC method '${req.method}' failed:`, err);\n            return {\n                id: req.id,\n                ok: false,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                error: sanitizeErrorMessage(err),\n            };\n        }\n    }\n\n    /**\n     * Handle an HTTP-based RPC request.\n     * This is an alternative to WebSocket for environments where HTTP performs better\n     * (e.g., mobile networks with high latency where HTTP/2 multiplexing helps).\n     */\n    async handleHttpRequest(reqBody: Buffer | string, ip: string, httpReq: http.IncomingMessage): Promise<HttpRpcResult> {\n        let req: RpcRequest | RpcRequest[];\n\n        try {\n            // Always expect MessagePack\n            const buffer = Buffer.isBuffer(reqBody) ? reqBody : Buffer.from(reqBody);\n            req = msgpackDecode(buffer) as RpcRequest | RpcRequest[];\n        } catch {\n            const errorResponse: RpcResponse = {\n                id: \"unknown\",\n                ok: false,\n                stats: { remainingRequests: 0, resetInSeconds: 0 },\n                error: \"Invalid request format\",\n            };\n            return {\n                response: errorResponse,\n            };\n        }\n\n        let response: RpcResponse | RpcResponse[];\n        if (Array.isArray(req)) {\n            // Security: cap batch size\n            if (req.length > this.maxBatchSize) {\n                const errorResponse: RpcResponse = {\n                    id: \"batch\",\n                    ok: false,\n                    stats: { remainingRequests: 0, resetInSeconds: 0 },\n                    error: `Batch size ${req.length} exceeds maximum of ${this.maxBatchSize}`,\n                };\n                return { response: errorResponse };\n            }\n            response = await Promise.all(req.map((r) => this.processRequestHttp(r, ip, httpReq)));\n        } else {\n            response = await this.processRequestHttp(req as RpcRequest, ip, httpReq);\n        }\n\n        return { response };\n    }\n}\n\n/**\n * Sanitize error messages before sending to clients.\n * In production, returns a generic message to prevent information leakage.\n * In development, returns the actual error message for debugging.\n */\nfunction sanitizeErrorMessage(err: unknown): string {\n    if (process.env.NODE_ENV === \"production\") {\n        return \"Server error\";\n    }\n    if (err instanceof Error) {\n        return err.message;\n    }\n    return \"Server error\";\n}\n"]}
+{"version":3,"file":"rpcRegistry.js","sourceRoot":"","sources":["../../src/server/rpcRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAWlC,MAAM,OAAO,WAAY,SAAQ,KAAK;IAAtC;;QACoB,WAAM,GAAG,IAAI,CAAC;IAClC,CAAC;CAAA;AAED,MAAM,OAAO,WAAW;IAAxB;QACY,YAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;QACvD,eAAU,GAA4B,IAAI,CAAC;QAC3C,gBAAW,GAAuB,IAAI,CAAC;QACvC,mBAAc,GAAG,IAAI,OAAO,EAA6B,CAAC;QAC1D,iBAAY,GAAW,EAAE,CAAC;IA2QtC,CAAC;IAzQG,QAAQ,CAAC,EAAU,EAAE,GAA8B;QAC/C,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,cAAc,CAAC,WAAwB;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,IAAY;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAiB,EAAE,EAAU,EAAE,GAAyB;QACtE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IAEO,QAAQ,CAAC,MAAiB;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnE,OAAO;YACH,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;SAC9C,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAe,EAAE,MAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,kBAAkB,GAAG,CAAC,MAAM,EAAE;aACxC,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,sCAAsC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,GAAG,GAAkB;gBACvB,GAAG,EAAE;oBACD,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,SAAS;oBAC7B,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;oBACpC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG;oBACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM;oBAC5B,GAAG,EAAE,QAAQ,EAAE,GAA2B;iBAC7C;aACJ,CAAC;YACF,IAAI,MAAW,CAAC;YAEhB,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACzB;oBACI,GAAG;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,MAAM;iBACzB,EACD,KAAK,IAAI,EAAE;oBACP,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,CACJ,CAAC;gBAEF,+DAA+D;gBAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO;wBACH,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAC5B,KAAK,EAAE,+BAA+B;qBACzC,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,0CAA0C;gBAC1C,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;YAED,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,MAAM;aACT,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,GAAG,CAAC,OAAO,EAAE,eAAe,GAAG,CAAC,MAAM,WAAW,EAAE,GAAG,CAAC,CAAC;YACxD,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;aACnC,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAiB,EAAE,GAAoB;QACvD,IAAI,GAA8B,CAAC;QACnC,IAAI,CAAC;YACD,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,GAAG,aAAa,CAAC,MAAM,CAA8B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,aAAa,GAAgB;gBAC/B,EAAE,EAAE,OAAO;gBACX,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,cAAc,GAAG,CAAC,MAAM,uBAAuB,IAAI,CAAC,YAAY,EAAE;aAC5E,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAW,CAAC,CAAC;YACvE,OAAO;QACX,CAAC;QAED,IAAI,QAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,8BAA8B;QAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,OAAiB,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAe,EAAE,EAAU,EAAE,OAA6B;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,KAAK,EAAE,kBAAkB,GAAG,CAAC,MAAM,EAAE;aACxC,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,sCAAsC;YACtC,MAAM,GAAG,GAAkB;gBACvB,GAAG,EAAE;oBACD,EAAE;oBACF,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,GAAG,EAAE,OAAO;iBACf;aACJ,CAAC;YACF,IAAI,MAAe,CAAC;YAEpB,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACzB;oBACI,GAAG;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,MAAM;iBACzB,EACD,KAAK,IAAI,EAAE;oBACP,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,CACJ,CAAC;gBAEF,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO;wBACH,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;wBACzD,KAAK,EAAE,+BAA+B;qBACzC,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;YAED,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,MAAM;aACT,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAG,CAAC,MAAM,WAAW,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO;gBACH,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;gBACzD,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;aACnC,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAwB,EAAE,EAAU,EAAE,OAA6B;QACvF,IAAI,GAA8B,CAAC;QAEnC,IAAI,CAAC;YACD,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzE,GAAG,GAAG,aAAa,CAAC,MAAM,CAA8B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,aAAa,GAAgB;gBAC/B,EAAE,EAAE,SAAS;gBACb,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;gBAClD,KAAK,EAAE,wBAAwB;aAClC,CAAC;YACF,OAAO;gBACH,QAAQ,EAAE,aAAa;aAC1B,CAAC;QACN,CAAC;QAED,IAAI,QAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,2BAA2B;YAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,MAAM,aAAa,GAAgB;oBAC/B,EAAE,EAAE,OAAO;oBACX,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;oBAClD,KAAK,EAAE,cAAc,GAAG,CAAC,MAAM,uBAAuB,IAAI,CAAC,YAAY,EAAE;iBAC5E,CAAC;gBACF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YACvC,CAAC;YACD,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAiB,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxB,CAAC;CACJ;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACxC,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAI,GAA4B,CAAC,MAAM,CAAC;IACxD,OAAO,UAAU,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,OAAO,GAAI,GAA6B,CAAC,OAAO,CAAC;QACvD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC","sourcesContent":["import { decode as msgpackDecode, encode as msgpackEncode } from \"@msgpack/msgpack\";\nimport type http from \"http\";\nimport { promisify } from \"util\";\nimport WebSocket from \"ws\";\nimport { gzip } from \"zlib\";\n\nimport type { RpcRequest, RpcResponse, RpcStats } from \"../runtime/protocol.js\";\nimport { log } from \"../utils/logger.js\";\nimport type { HeliumContext } from \"./context.js\";\nimport type { HeliumMethodDef } from \"./defineMethod.js\";\nimport type { HeliumMiddleware } from \"./middleware.js\";\nimport type { RateLimiter } from \"./rateLimiter.js\";\nimport { prepareForMsgpack } from \"./serializer.js\";\n\nconst gzipAsync = promisify(gzip);\n\ninterface SocketMetadata {\n    ip: string;\n    req: http.IncomingMessage;\n}\n\nexport interface HttpRpcResult {\n    response: RpcResponse | RpcResponse[];\n}\n\nexport class PublicError extends Error {\n    public readonly public = true;\n}\n\nexport class RpcRegistry {\n    private methods = new Map<string, HeliumMethodDef<any, any>>();\n    private middleware: HeliumMiddleware | null = null;\n    private rateLimiter: RateLimiter | null = null;\n    private socketMetadata = new WeakMap<WebSocket, SocketMetadata>();\n    private maxBatchSize: number = 20;\n\n    register(id: string, def: HeliumMethodDef<any, any>) {\n        def.__id = id;\n        this.methods.set(id, def);\n    }\n\n    setMiddleware(middleware: HeliumMiddleware) {\n        this.middleware = middleware;\n    }\n\n    setRateLimiter(rateLimiter: RateLimiter) {\n        this.rateLimiter = rateLimiter;\n    }\n\n    setMaxBatchSize(size: number) {\n        this.maxBatchSize = size;\n    }\n\n    /**\n     * Store metadata about a WebSocket connection.\n     * Should be called when a new connection is established.\n     */\n    setSocketMetadata(socket: WebSocket, ip: string, req: http.IncomingMessage) {\n        this.socketMetadata.set(socket, { ip, req });\n    }\n\n    private getStats(socket: WebSocket): RpcStats {\n        if (!this.rateLimiter) {\n            return { remainingRequests: Infinity, resetInSeconds: 0 };\n        }\n\n        const stats = this.rateLimiter.getConnectionStats(socket);\n        if (!stats) {\n            return { remainingRequests: 0, resetInSeconds: 0 };\n        }\n\n        const now = Date.now();\n        const resetInSeconds = Math.ceil((stats.resetTimeMs - now) / 1000);\n\n        return {\n            remainingRequests: stats.remainingMessages,\n            resetInSeconds: Math.max(0, resetInSeconds),\n        };\n    }\n\n    private async processRequest(req: RpcRequest, socket: WebSocket): Promise<RpcResponse> {\n        const def = this.methods.get(req.method);\n        if (!def) {\n            return {\n                id: req.id,\n                ok: false,\n                stats: this.getStats(socket),\n                error: `Unknown method ${req.method}`,\n            };\n        }\n\n        try {\n            // Build context with request metadata\n            const metadata = this.socketMetadata.get(socket);\n            const ctx: HeliumContext = {\n                req: {\n                    ip: metadata?.ip || \"unknown\",\n                    headers: metadata?.req.headers || {},\n                    url: metadata?.req.url,\n                    method: metadata?.req.method,\n                    raw: metadata?.req as http.IncomingMessage,\n                },\n            };\n            let result: any;\n\n            // Execute middleware if present\n            if (this.middleware) {\n                let nextCalled = false;\n                await this.middleware.handler(\n                    {\n                        ctx,\n                        type: \"method\",\n                        methodName: req.method,\n                    },\n                    async () => {\n                        nextCalled = true;\n                        result = await def.handler(req.args, ctx);\n                    }\n                );\n\n                // If next() was not called, the middleware blocked the request\n                if (!nextCalled) {\n                    return {\n                        id: req.id,\n                        ok: false,\n                        stats: this.getStats(socket),\n                        error: \"Request blocked by middleware\",\n                    };\n                }\n            } else {\n                // No middleware, execute handler directly\n                result = await def.handler(req.args, ctx);\n            }\n\n            return {\n                id: req.id,\n                ok: true,\n                stats: this.getStats(socket),\n                result,\n            };\n        } catch (err: any) {\n            log(\"error\", `RPC method '${req.method}' failed:`, err);\n            return {\n                id: req.id,\n                ok: false,\n                stats: this.getStats(socket),\n                error: sanitizeErrorMessage(err),\n            };\n        }\n    }\n\n    async handleMessage(socket: WebSocket, raw: string | Buffer) {\n        let req: RpcRequest | RpcRequest[];\n        try {\n            // Always expect MessagePack\n            const buffer = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);\n            req = msgpackDecode(buffer) as RpcRequest | RpcRequest[];\n        } catch {\n            return;\n        }\n\n        // Security: cap batch size\n        if (Array.isArray(req) && req.length > this.maxBatchSize) {\n            const errorResponse: RpcResponse = {\n                id: \"batch\",\n                ok: false,\n                stats: this.getStats(socket),\n                error: `Batch size ${req.length} exceeds maximum of ${this.maxBatchSize}`,\n            };\n            socket.send(msgpackEncode(prepareForMsgpack(errorResponse)) as Buffer);\n            return;\n        }\n\n        let response: RpcResponse | RpcResponse[];\n        if (Array.isArray(req)) {\n            response = await Promise.all(req.map((r) => this.processRequest(r, socket)));\n        } else {\n            response = await this.processRequest(req, socket);\n        }\n\n        const encoded = msgpackEncode(prepareForMsgpack(response));\n        // Compress if larger than 1KB\n        if (encoded.length > 1024) {\n            const compressed = await gzipAsync(encoded);\n            socket.send(compressed);\n        } else {\n            socket.send(encoded as Buffer);\n        }\n    }\n\n    private async processRequestHttp(req: RpcRequest, ip: string, httpReq: http.IncomingMessage): Promise<RpcResponse> {\n        const def = this.methods.get(req.method);\n        if (!def) {\n            return {\n                id: req.id,\n                ok: false,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                error: `Unknown method ${req.method}`,\n            };\n        }\n\n        try {\n            // Build context with request metadata\n            const ctx: HeliumContext = {\n                req: {\n                    ip,\n                    headers: httpReq.headers,\n                    url: httpReq.url,\n                    method: httpReq.method,\n                    raw: httpReq,\n                },\n            };\n            let result: unknown;\n\n            // Execute middleware if present\n            if (this.middleware) {\n                let nextCalled = false;\n                await this.middleware.handler(\n                    {\n                        ctx,\n                        type: \"method\",\n                        methodName: req.method,\n                    },\n                    async () => {\n                        nextCalled = true;\n                        result = await def.handler(req.args, ctx);\n                    }\n                );\n\n                if (!nextCalled) {\n                    return {\n                        id: req.id,\n                        ok: false,\n                        stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                        error: \"Request blocked by middleware\",\n                    };\n                }\n            } else {\n                result = await def.handler(req.args, ctx);\n            }\n\n            return {\n                id: req.id,\n                ok: true,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                result,\n            };\n        } catch (err: unknown) {\n            log(\"error\", `HTTP RPC method '${req.method}' failed:`, err);\n            return {\n                id: req.id,\n                ok: false,\n                stats: { remainingRequests: Infinity, resetInSeconds: 0 },\n                error: sanitizeErrorMessage(err),\n            };\n        }\n    }\n\n    /**\n     * Handle an HTTP-based RPC request.\n     * This is an alternative to WebSocket for environments where HTTP performs better\n     * (e.g., mobile networks with high latency where HTTP/2 multiplexing helps).\n     */\n    async handleHttpRequest(reqBody: Buffer | string, ip: string, httpReq: http.IncomingMessage): Promise<HttpRpcResult> {\n        let req: RpcRequest | RpcRequest[];\n\n        try {\n            // Always expect MessagePack\n            const buffer = Buffer.isBuffer(reqBody) ? reqBody : Buffer.from(reqBody);\n            req = msgpackDecode(buffer) as RpcRequest | RpcRequest[];\n        } catch {\n            const errorResponse: RpcResponse = {\n                id: \"unknown\",\n                ok: false,\n                stats: { remainingRequests: 0, resetInSeconds: 0 },\n                error: \"Invalid request format\",\n            };\n            return {\n                response: errorResponse,\n            };\n        }\n\n        let response: RpcResponse | RpcResponse[];\n        if (Array.isArray(req)) {\n            // Security: cap batch size\n            if (req.length > this.maxBatchSize) {\n                const errorResponse: RpcResponse = {\n                    id: \"batch\",\n                    ok: false,\n                    stats: { remainingRequests: 0, resetInSeconds: 0 },\n                    error: `Batch size ${req.length} exceeds maximum of ${this.maxBatchSize}`,\n                };\n                return { response: errorResponse };\n            }\n            response = await Promise.all(req.map((r) => this.processRequestHttp(r, ip, httpReq)));\n        } else {\n            response = await this.processRequestHttp(req as RpcRequest, ip, httpReq);\n        }\n\n        return { response };\n    }\n}\n\n/**\n * Sanitize error messages before sending to clients.\n * In production, returns a generic message to prevent information leakage.\n * In development, returns the actual error message for debugging.\n */\nfunction sanitizeErrorMessage(err: unknown): string {\n    const message = getErrorMessage(err);\n    const isPublic = isPublicError(err);\n\n    if (process.env.NODE_ENV === \"production\") {\n        if (isPublic && message) {\n            return message;\n        }\n        return \"Server error\";\n    }\n\n    if (message) {\n        return message;\n    }\n\n    return \"Server error\";\n}\n\nfunction isPublicError(err: unknown): boolean {\n    if (err instanceof PublicError) {\n        return true;\n    }\n\n    if (!err || typeof err !== \"object\") {\n        return false;\n    }\n\n    const publicFlag = (err as { public?: unknown }).public;\n    return publicFlag === true;\n}\n\nfunction getErrorMessage(err: unknown): string | null {\n    if (err instanceof Error) {\n        return err.message;\n    }\n\n    if (err && typeof err === \"object\") {\n        const message = (err as { message?: unknown }).message;\n        return typeof message === \"string\" ? message : null;\n    }\n\n    return null;\n}\n"]}

package/dist/utils/deepEqual.d.ts

@@ -0,0 +1 @@
+//# sourceMappingURL=deepEqual.d.ts.map

package/dist/utils/deepEqual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepEqual.d.ts","sourceRoot":"","sources":["../../src/utils/deepEqual.ts"],"names":[],"mappings":""}

package/dist/utils/deepEqual.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=deepEqual.js.map

package/dist/utils/deepEqual.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepEqual.js","sourceRoot":"","sources":["../../src/utils/deepEqual.ts"],"names":[],"mappings":""}

package/dist/utils/formatError.d.ts

@@ -0,0 +1,2 @@
+export declare function formatError(err: unknown): string;
+//# sourceMappingURL=formatError.d.ts.map

package/dist/utils/formatError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatError.d.ts","sourceRoot":"","sources":["../../src/utils/formatError.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAgBhD"}

package/dist/utils/formatError.js

@@ -0,0 +1,18 @@
+export function formatError(err) {
+    console.log("🚀 ~ formatError ~ err:", err);
+    if (err instanceof Error) {
+        return err.message;
+    }
+    if (typeof err === "object" && err !== null) {
+        if ("message" in err) {
+            return String(err.message);
+        }
+        // Format Record<string, string> errors
+        return JSON.stringify(err, null, 2);
+    }
+    if (typeof err === "string") {
+        return err;
+    }
+    return String(err);
+}
+//# sourceMappingURL=formatError.js.map

package/dist/utils/formatError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatError.js","sourceRoot":"","sources":["../../src/utils/formatError.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,GAAY;IACpC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC1C,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,uCAAuC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "heliumts",
-    "version": "0.5.7",
+    "version": "0.5.8",
     "description": "A lightweight full-stack React framework with file-based routing, RPC, and SSG support",
     "keywords": [
         "react",