@arcote.tech/arc-host 0.3.3 → 0.4.1

package/dist/src/connection-manager.d.ts

@@ -11,7 +11,7 @@ export declare class ConnectionManager {
      */
     addClient(ws: ServerWebSocket<{
         clientId: string;
-    }>, token: TokenPayload | null, rawToken: string | null): ConnectedClient;
+    }>): ConnectedClient;
     /**
      * Remove a client connection
      */
@@ -26,6 +26,21 @@ export declare class ConnectionManager {
     getClientByWs(ws: ServerWebSocket<{
         clientId: string;
     }>): ConnectedClient | undefined;
+    /**
+     * Set a scope token for a client
+     */
+    setScopeToken(clientId: string, scope: string, decoded: TokenPayload, raw: string): void;
+    /**
+     * Get a specific scope token for a client
+     */
+    getScopeToken(clientId: string, scope: string): {
+        decoded: TokenPayload;
+        raw: string;
+    } | undefined;
+    /**
+     * Get all scope tokens for a client as an array of TokenPayload
+     */
+    getAllScopeTokens(clientId: string): TokenPayload[];
     /**
      * Update client's last synced event ID
      */

package/dist/src/connection-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-manager.d.ts","sourceRoot":"","sources":["../../src/connection-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAC3C,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,eAAe,CAAK;IAE5B;;OAEG;IACH,SAAS,CACP,EAAE,EAAE,eAAe,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,EACzC,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,eAAe;IAmBlB;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIxD;;OAEG;IACH,aAAa,CACX,EAAE,EAAE,eAAe,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GACxC,eAAe,GAAG,SAAS;IAM9B;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAOpE;;OAEG;IACH,aAAa,IAAI,eAAe,EAAE;IAIlC;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAarE;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,mBAAmB,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI;IAOvE;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAExB;CACF"}
+{"version":3,"file":"connection-manager.d.ts","sourceRoot":"","sources":["../../src/connection-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAC3C,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,eAAe,CAAK;IAE5B;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,eAAe;IAkBrE;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIxD;;OAEG;IACH,aAAa,CACX,EAAE,EAAE,eAAe,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GACxC,eAAe,GAAG,SAAS;IAM9B;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,MAAM,GACV,IAAI;IAOP;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAKrD;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE;IAMnD;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAOpE;;OAEG;IACH,aAAa,IAAI,eAAe,EAAE;IAIlC;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAarE;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,mBAAmB,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI;IAOvE;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAExB;CACF"}

package/dist/src/context-handler.d.ts

@@ -1,4 +1,4 @@
-import { type ArcContextAny, type ArcEventAny, type DatabaseAdapter, MasterDataStorage, Model } from "@arcote.tech/arc";
+import { type ArcContextAny, type ArcEventAny, type DatabaseAdapter, LocalEventPublisher, MasterDataStorage, Model } from "@arcote.tech/arc";
 import type { SyncableEvent, TokenPayload } from "./types";
 /**
  * Handles a single context on the host
@@ -8,7 +8,6 @@ export declare class ContextHandler {
     private model;
     private dataStorage;
     private eventPublisher;
-    private authAdapter;
     private eventDefinitions;
     private hostEventIdCounter;
     private initialized;
@@ -47,9 +46,8 @@ export declare class ContextHandler {
      */
     getEventDefinitions(): Map<string, ArcEventAny>;
     /**
-     * Set auth token on the adapter
-     * Used to apply view protection for queries
+     * Get event publisher for subscribing to data changes
      */
-    setAuthToken(rawToken: string | null): void;
+    getEventPublisher(): LocalEventPublisher;
 }
 //# sourceMappingURL=context-handler.d.ts.map

package/dist/src/context-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-handler.d.ts","sourceRoot":"","sources":["../../src/context-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,iBAAiB,EACjB,KAAK,EAEN,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE3D;;GAEG;AACH,qBAAa,cAAc;aAUP,OAAO,EAAE,aAAa;IATxC,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,cAAc,CAAsB;IAC5C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,WAAW,CAAS;gBAGV,OAAO,EAAE,aAAa,EACtC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC;IAuBrC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,GAAG,EACX,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,GAAG,CAAC;IA2Bf;;OAEG;IACG,aAAa,CACjB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,GAAG,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,EACF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GAAG,IAAI,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC;IA2C3B;;OAEG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE,YAAY,GAAG,IAAI,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC;IA8C3B;;OAEG;IACH,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC;IAIhC;;OAEG;IACH,cAAc,IAAI,iBAAiB;IAInC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;IAI/C;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;CAG5C"}
+{"version":3,"file":"context-handler.d.ts","sourceRoot":"","sources":["../../src/context-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,EAGN,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE3D;;GAEG;AACH,qBAAa,cAAc;aASP,OAAO,EAAE,aAAa;IARxC,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,cAAc,CAAsB;IAC5C,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,WAAW,CAAS;gBAGV,OAAO,EAAE,aAAa,EACtC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC;IAqBrC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,GAAG,EACX,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,GAAG,CAAC;IA8Bf;;OAEG;IACG,aAAa,CACjB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,GAAG,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,EACF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GAAG,IAAI,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC;IA2C3B;;OAEG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE,YAAY,GAAG,IAAI,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC;IA8C3B;;OAEG;IACH,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC;IAIhC;;OAEG;IACH,cAAc,IAAI,iBAAiB;IAInC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;IAI/C;;OAEG;IACH,iBAAiB,IAAI,mBAAmB;CAGzC"}

package/dist/src/create-server.d.ts

@@ -0,0 +1,36 @@
+import type { ArcContextAny, DatabaseAdapter } from "@arcote.tech/arc";
+import type { Server } from "bun";
+import { ConnectionManager } from "./connection-manager";
+import { ContextHandler } from "./context-handler";
+import { CronScheduler } from "./cron-scheduler";
+import type { ArcHttpHandler, ArcWsHandler } from "./middleware/types";
+type WebSocketData = {
+    clientId: string;
+};
+export interface ArcServerConfig {
+    context: ArcContextAny;
+    dbAdapterFactory: (ctx: any) => Promise<DatabaseAdapter>;
+    httpHandlers?: ArcHttpHandler[];
+    wsHandlers?: ArcWsHandler[];
+    port?: number;
+    jwtSecret?: string;
+    /** Extra callback when a WS client disconnects (e.g. to clean up platform state) */
+    onWsClose?: (clientId: string) => void;
+}
+export interface ArcServer {
+    server: Server<WebSocketData>;
+    contextHandler: ContextHandler;
+    connectionManager: ConnectionManager;
+    cronScheduler: CronScheduler;
+    stop: () => void;
+}
+/**
+ * Create an Arc server with composable HTTP + WS middleware.
+ *
+ * By default includes all Arc handlers (command, query, stream, route, eventSync, health,
+ * scope:auth, sync-events, request-sync, execute-command, view subscriptions).
+ * Platform servers add their own handlers on top.
+ */
+export declare function createArcServer(config: ArcServerConfig): Promise<ArcServer>;
+export {};
+//# sourceMappingURL=create-server.d.ts.map

package/dist/src/create-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../../src/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOjD,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EACb,MAAM,oBAAoB,CAAC;AAG5B,KAAK,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,SAAS,CAAC,CAkKpB"}

package/dist/src/cron-scheduler.d.ts

@@ -0,0 +1,30 @@
+/**
+ * CronScheduler
+ *
+ * Discovers aggregate cron methods from context elements and schedules them
+ * using node-cron. For each cron trigger, queries all instances of the aggregate
+ * and executes the command for each instance.
+ */
+import type { ContextHandler } from "./context-handler";
+export declare class CronScheduler {
+    private jobs;
+    private contextHandler;
+    constructor(contextHandler: ContextHandler);
+    /**
+     * Discover cron methods from all aggregates in the context and start scheduling.
+     */
+    start(): void;
+    /**
+     * Stop all cron jobs.
+     */
+    stop(): void;
+    /**
+     * Extract cron method entries from all aggregate context elements.
+     */
+    private discoverCronMethods;
+    /**
+     * Execute a cron method for all instances of the aggregate.
+     */
+    private executeCronMethod;
+}
+//# sourceMappingURL=cron-scheduler.d.ts.map

package/dist/src/cron-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-scheduler.d.ts","sourceRoot":"","sources":["../../src/cron-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOxD,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,cAAc,CAAiB;gBAE3B,cAAc,EAAE,cAAc;IAI1C;;OAEG;IACH,KAAK,IAAI,IAAI;IAuBb;;OAEG;IACH,IAAI,IAAI,IAAI;IAQZ;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAe3B;;OAEG;YACW,iBAAiB;CAwChC"}

package/dist/src/event-auth.d.ts

@@ -13,7 +13,12 @@ export declare function canTokenReceiveEvent(token: TokenPayload | null, event:
  */
 export declare function canTokenEmitEvent(token: TokenPayload | null, event: ArcEventAny, payload: any): boolean;
 /**
- * Filter events that a token can receive
+ * Filter events that a single token can receive
  */
 export declare function filterEventsForToken(token: TokenPayload | null, events: SyncableEvent[], eventDefinitions: Map<string, ArcEventAny>): SyncableEvent[];
+/**
+ * Filter events visible to ANY of the provided tokens.
+ * Used for multi-scope clients where an event visible to any scope should be sent.
+ */
+export declare function filterEventsForTokens(tokens: TokenPayload[], events: SyncableEvent[], eventDefinitions: Map<string, ArcEventAny>): SyncableEvent[];
 //# sourceMappingURL=event-auth.d.ts.map

package/dist/src/event-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-auth.d.ts","sourceRoot":"","sources":["../../src/event-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAqCT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,GAAG,GACX,OAAO,CA+BT;AAmBD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,MAAM,EAAE,aAAa,EAAE,EACvB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GACzC,aAAa,EAAE,CASjB"}
+{"version":3,"file":"event-auth.d.ts","sourceRoot":"","sources":["../../src/event-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAqCT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,GAAG,GACX,OAAO,CA+BT;AAmBD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,MAAM,EAAE,aAAa,EAAE,EACvB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GACzC,aAAa,EAAE,CASjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,YAAY,EAAE,EACtB,MAAM,EAAE,aAAa,EAAE,EACvB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GACzC,aAAa,EAAE,CAejB"}

package/dist/src/index.d.ts

@@ -1,6 +1,10 @@
-export { ArcHost } from "./arc-host";
+export { createArcServer } from "./create-server";
+export type { ArcServer, ArcServerConfig } from "./create-server";
+export { arcHttpHandlers, arcWsHandlers, cleanupClientSubs, cleanupStreams, commandHandler, eventSyncHandler, executeCommandHandler, healthHandler, queryHandler, requestSyncHandler, routeHandler, scopeAuthHandler, streamHandler, syncEventsHandler, querySubscriptionHandler, } from "./middleware";
+export type { ArcHttpHandler, ArcRequestContext, ArcWsContext, ArcWsHandler, } from "./middleware";
 export { ConnectionManager } from "./connection-manager";
 export { ContextHandler } from "./context-handler";
+export { CronScheduler } from "./cron-scheduler";
+export { canTokenEmitEvent, canTokenReceiveEvent, filterEventsForToken, filterEventsForTokens, } from "./event-auth";
 export type { ArcHostConfig, ClientToHostMessage, ConnectedClient, HostToClientMessage, SyncableEvent, TokenPayload, } from "./types";
-export { canTokenEmitEvent, canTokenReceiveEvent, filterEventsForToken, } from "./event-auth";
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,YAAY,GACb,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlE,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,YAAY,GACb,MAAM,SAAS,CAAC"}

package/dist/src/middleware/http.d.ts

@@ -0,0 +1,15 @@
+import type { ConnectionManager } from "../connection-manager";
+import type { ContextHandler } from "../context-handler";
+import type { ArcHttpHandler } from "./types";
+export declare function healthHandler(cm: ConnectionManager): ArcHttpHandler;
+export declare function commandHandler(ch: ContextHandler): ArcHttpHandler;
+export declare function queryHandler(ch: ContextHandler): ArcHttpHandler;
+export declare function streamHandler(ch: ContextHandler): ArcHttpHandler;
+export declare function eventSyncHandler(ch: ContextHandler): ArcHttpHandler;
+export declare function routeHandler(ch: ContextHandler): ArcHttpHandler;
+export declare function arcHttpHandlers(ch: ContextHandler, cm: ConnectionManager): ArcHttpHandler[];
+/**
+ * Cleanup all active SSE stream connections.
+ */
+export declare function cleanupStreams(): void;
+//# sourceMappingURL=http.d.ts.map

package/dist/src/middleware/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/middleware/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,SAAS,CAAC;AAoCjE,wBAAgB,aAAa,CAAC,EAAE,EAAE,iBAAiB,GAAG,cAAc,CAQnE;AAMD,wBAAgB,cAAc,CAAC,EAAE,EAAE,cAAc,GAAG,cAAc,CA+BjE;AAMD,wBAAgB,YAAY,CAAC,EAAE,EAAE,cAAc,GAAG,cAAc,CAoC/D;AAeD,wBAAgB,aAAa,CAAC,EAAE,EAAE,cAAc,GAAG,cAAc,CA+FhE;AAMD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,cAAc,GAAG,cAAc,CA4BnE;AAMD,wBAAgB,YAAY,CAAC,EAAE,EAAE,cAAc,GAAG,cAAc,CA8G/D;AAMD,wBAAgB,eAAe,CAC7B,EAAE,EAAE,cAAc,EAClB,EAAE,EAAE,iBAAiB,GACpB,cAAc,EAAE,CASlB;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAGrC"}

package/dist/src/middleware/index.d.ts

@@ -0,0 +1,4 @@
+export type { ArcHttpHandler, ArcRequestContext, ArcWsContext, ArcWsHandler, } from "./types";
+export { arcHttpHandlers, cleanupStreams, commandHandler, eventSyncHandler, healthHandler, queryHandler, routeHandler, streamHandler, } from "./http";
+export { arcWsHandlers, cleanupClientSubs, executeCommandHandler, requestSyncHandler, scopeAuthHandler, syncEventsHandler, querySubscriptionHandler, } from "./ws";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,MAAM,CAAC"}

package/dist/src/middleware/types.d.ts

@@ -0,0 +1,31 @@
+import type { ConnectionManager } from "../connection-manager";
+import type { ContextHandler } from "../context-handler";
+import type { ConnectedClient, TokenPayload } from "../types";
+/**
+ * Per-request context passed to HTTP handlers.
+ * Created by createArcServer before running the handler chain.
+ */
+export interface ArcRequestContext {
+    rawToken: string | null;
+    tokenPayload: TokenPayload | null;
+    corsHeaders: Record<string, string>;
+}
+/**
+ * HTTP middleware handler.
+ * Return a Response to stop the chain, or null to pass to the next handler.
+ */
+export type ArcHttpHandler = (req: Request, url: URL, ctx: ArcRequestContext) => Promise<Response | null> | Response | null;
+/**
+ * Server context shared by all WS handlers.
+ */
+export interface ArcWsContext {
+    contextHandler: ContextHandler;
+    connectionManager: ConnectionManager;
+    verifyToken: (token: string) => TokenPayload | null;
+}
+/**
+ * WebSocket message handler.
+ * Return true if handled, false to pass to the next handler.
+ */
+export type ArcWsHandler = (client: ConnectedClient, message: any, ctx: ArcWsContext) => Promise<boolean>;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/middleware/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/middleware/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE9D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,iBAAiB,KACnB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,GAAG,EACZ,GAAG,EAAE,YAAY,KACd,OAAO,CAAC,OAAO,CAAC,CAAC"}

package/dist/src/middleware/ws.d.ts

@@ -0,0 +1,9 @@
+import type { ArcWsHandler } from "./types";
+export declare function cleanupClientSubs(clientId: string): void;
+export declare function scopeAuthHandler(): ArcWsHandler;
+export declare function syncEventsHandler(): ArcWsHandler;
+export declare function requestSyncHandler(): ArcWsHandler;
+export declare function executeCommandHandler(): ArcWsHandler;
+export declare function querySubscriptionHandler(): ArcWsHandler;
+export declare function arcWsHandlers(): ArcWsHandler[];
+//# sourceMappingURL=ws.d.ts.map

package/dist/src/middleware/ws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../../../src/middleware/ws.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAgB,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ1D,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMxD;AAMD,wBAAgB,gBAAgB,IAAI,YAAY,CAc/C;AAMD,wBAAgB,iBAAiB,IAAI,YAAY,CAuChD;AAMD,wBAAgB,kBAAkB,IAAI,YAAY,CA+BjD;AAMD,wBAAgB,qBAAqB,IAAI,YAAY,CA6BpD;AAMD,wBAAgB,wBAAwB,IAAI,YAAY,CA2FvD;AAMD,wBAAgB,aAAa,IAAI,YAAY,EAAE,CAQ9C"}

package/dist/src/types.d.ts

@@ -33,10 +33,11 @@ export interface TokenPayload {
 export interface ConnectedClient {
     /** Unique client ID */
     id: string;
-    /** Token payload (decoded) */
-    token: TokenPayload | null;
-    /** Raw JWT token string */
-    rawToken: string | null;
+    /** Scope tokens: Map<scope, { decoded, raw }> */
+    scopeTokens: Map<string, {
+        decoded: TokenPayload;
+        raw: string;
+    }>;
     /** Last synced host event ID */
     lastHostEventId: string | null;
     /** WebSocket instance */
@@ -78,6 +79,22 @@ export type ClientToHostMessage = {
     commandName: string;
     params: any;
     requestId: string;
+} | {
+    type: "scope:auth";
+    scope: string;
+    token: string;
+} | {
+    type: "subscribe-query";
+    subscriptionId: string;
+    descriptor: {
+        element: string;
+        method: string;
+        args: any[];
+    };
+    scope?: string;
+} | {
+    type: "unsubscribe-query";
+    subscriptionId: string;
 };
 /**
  * Messages from host to client
@@ -96,5 +113,9 @@ export type HostToClientMessage = {
 } | {
     type: "error";
     message: string;
+} | {
+    type: "query-data";
+    subscriptionId: string;
+    data: any[];
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,+BAA+B;IAC/B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,kBAAkB;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gCAAgC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB;IACzB,EAAE,EAAE,GAAG,CAAC;CACT;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,GAAG,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,+BAA+B;IAC/B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,kBAAkB;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,gCAAgC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB;IACzB,EAAE,EAAE,GAAG,CAAC;CACT;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,GAAG,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,GAAG,EAAE,CAAC;CACb,CAAC"}

package/index.ts

@@ -3,7 +3,7 @@ export * from "./src";
 
 // Helper function to start host
 import type { ArcContextAny, DBAdapterFactory } from "@arcote.tech/arc";
-import { ArcHost } from "./src/arc-host";
+import { createArcServer } from "./src/create-server";
 
 /**
  * Start a host server for a context
@@ -12,10 +12,8 @@ export function hostLiveModel<C extends ArcContextAny>(
   context: C,
   dbAdapterFactory: DBAdapterFactory,
 ) {
-  const host = new ArcHost({
+  return createArcServer({
     context,
     dbAdapterFactory,
   });
-  host.start();
-  return host;
 }

package/package.json

@@ -4,11 +4,12 @@
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
-  "version": "0.3.3",
+  "version": "0.4.1",
   "private": false,
   "author": "Przemysław Krasiński [arcote.tech]",
   "dependencies": {
     "@arcote.tech/arc-adapter-db-sqlite": "^0.3.0",
+    "croner": "^9.0.0",
     "jsonwebtoken": "^9.0.2"
   },
   "scripts": {

package/src/connection-manager.ts

@@ -15,17 +15,12 @@ export class ConnectionManager {
   /**
    * Add a new client connection
    */
-  addClient(
-    ws: ServerWebSocket<{ clientId: string }>,
-    token: TokenPayload | null,
-    rawToken: string | null,
-  ): ConnectedClient {
+  addClient(ws: ServerWebSocket<{ clientId: string }>): ConnectedClient {
     const clientId = `client_${++this.clientIdCounter}_${Date.now()}`;
 
     const client: ConnectedClient = {
       id: clientId,
-      token,
-      rawToken,
+      scopeTokens: new Map(),
       lastHostEventId: null,
       ws,
     };
@@ -63,6 +58,41 @@ export class ConnectionManager {
     return this.clients.get(clientId);
   }
 
+  /**
+   * Set a scope token for a client
+   */
+  setScopeToken(
+    clientId: string,
+    scope: string,
+    decoded: TokenPayload,
+    raw: string,
+  ): void {
+    const client = this.clients.get(clientId);
+    if (client) {
+      client.scopeTokens.set(scope, { decoded, raw });
+    }
+  }
+
+  /**
+   * Get a specific scope token for a client
+   */
+  getScopeToken(
+    clientId: string,
+    scope: string,
+  ): { decoded: TokenPayload; raw: string } | undefined {
+    const client = this.clients.get(clientId);
+    return client?.scopeTokens.get(scope);
+  }
+
+  /**
+   * Get all scope tokens for a client as an array of TokenPayload
+   */
+  getAllScopeTokens(clientId: string): TokenPayload[] {
+    const client = this.clients.get(clientId);
+    if (!client) return [];
+    return Array.from(client.scopeTokens.values()).map((v) => v.decoded);
+  }
+
   /**
    * Update client's last synced event ID
    */

package/src/context-handler.ts

@@ -1,11 +1,11 @@
 import {
   type ArcContextAny,
   type ArcEventAny,
-  AuthAdapter,
   type DatabaseAdapter,
   LocalEventPublisher,
   MasterDataStorage,
   Model,
+  ScopedModel,
   mutationExecutor,
 } from "@arcote.tech/arc";
 import { canTokenEmitEvent, filterEventsForToken } from "./event-auth";
@@ -18,7 +18,6 @@ export class ContextHandler {
   private model: Model<ArcContextAny>;
   private dataStorage: MasterDataStorage;
   private eventPublisher: LocalEventPublisher;
-  private authAdapter: AuthAdapter;
   private eventDefinitions = new Map<string, ArcEventAny>();
   private hostEventIdCounter = 0;
   private initialized = false;
@@ -29,13 +28,11 @@ export class ContextHandler {
   ) {
     this.dataStorage = new MasterDataStorage(dbAdapter);
     this.eventPublisher = new LocalEventPublisher(this.dataStorage);
-    this.authAdapter = new AuthAdapter();
 
     this.model = new Model(context, {
       adapters: {
         dataStorage: this.dataStorage,
         eventPublisher: this.eventPublisher,
-        authAdapter: this.authAdapter,
       },
       environment: "server",
     });
@@ -65,28 +62,31 @@ export class ContextHandler {
     params: any,
     rawToken: string | null,
   ): Promise<any> {
-    const mutations = mutationExecutor(this.model);
-    const command = (mutations as any)[commandName];
+    // Create per-request scoped model with its own auth
+    const scoped = new ScopedModel(this.model, "request");
+    if (rawToken) scoped.setToken(rawToken);
+
+    const mutations = mutationExecutor(scoped);
+
+    // Support dotted names: "accounts.signIn" → mutations.accounts.signIn
+    let command: any;
+    if (commandName.includes(".")) {
+      const [elementName, methodName] = commandName.split(".");
+      const element = (mutations as any)[elementName];
+      command = element?.[methodName];
+    } else {
+      command = (mutations as any)[commandName];
+    }
 
     if (!command) {
       throw new Error(`Command '${commandName}' not found`);
     }
 
-    // Set auth token on adapter so commands can access $auth.params
-    // AuthAdapter decodes the JWT internally
-    this.authAdapter.setToken(rawToken);
-
-    // TODO: Check command protection with token
-
     try {
-      return await command(params);
+      const result = await command(params);
+      return result;
     } catch (error) {
-      console.error(`[ARC] Command '${commandName}' failed:`);
-      console.error(`[ARC] Params:`, JSON.stringify(params, null, 2));
-      console.error(`[ARC] Error:`, error);
-      if (error instanceof Error) {
-        console.error(`[ARC] Stack:`, error.stack);
-      }
+      console.error(`[ARC] Command '${commandName}' failed:`, error);
       throw error;
     }
   }
@@ -220,10 +220,9 @@ export class ContextHandler {
   }
 
   /**
-   * Set auth token on the adapter
-   * Used to apply view protection for queries
+   * Get event publisher for subscribing to data changes
    */
-  setAuthToken(rawToken: string | null): void {
-    this.authAdapter.setToken(rawToken);
+  getEventPublisher(): LocalEventPublisher {
+    return this.eventPublisher;
   }
 }