@chaos-overlords/kernel 0.1.0

package/NOTICE

@@ -0,0 +1,21 @@
+Chaos Overlords: New Chrome
+A clean-room MonoGame reimplementation of the 1996 turn-based strategy game.
+
+Copyright (C) 2026 kibertoad
+
+This program is free software: you can redistribute it and/or modify it under
+the terms of the GNU General Public License as published by the Free Software
+Foundation, version 3 of the License.
+
+This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License along with
+this program in the LICENSE file. If not, see <https://www.gnu.org/licenses/>.
+
+The GPL covers the original code in this repository. It does not cover or grant
+rights to the original Chaos Overlords assets. Those assets are not distributed
+by this project and must be imported locally from a legally owned copy.
+
+Project contact: https://github.com/kibertoad/chaos-overlords-new-chrome/issues

package/README.md

@@ -0,0 +1,28 @@
+# @chaos-overlords/kernel
+
+Domain kernel for the [*Chaos Overlords: New Chrome*](https://github.com/kibertoad/chaos-overlords-new-chrome) multiplayer server.
+
+The runtime-neutral half of the multiplayer server: entities, the storage and runtime ports,
+pure turn logic, and the lobby, turn and snapshot services. It knows nothing about HTTP, SQL or the
+runtime it is hosted in — those arrive as ports, which is what lets the same domain run on Node.js
+and on Cloudflare Workers.
+
+`@chaos-overlords/kernel/testing` carries an in-memory storage for hermetic tests.
+
+## Install
+
+```sh
+npm install @chaos-overlords/kernel
+```
+
+Requires Node.js 22 or newer.
+
+## Documentation
+
+The operator and contributor manual for the whole multiplayer workspace is in
+[`multiplayer/README.md`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/multiplayer/README.md); the design notes are in
+[`docs/MULTIPLAYER.md`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/docs/MULTIPLAYER.md).
+
+## Licence
+
+GPL-3.0-only. See [`LICENSE`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/LICENSE) and [`NOTICE`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/NOTICE).

package/dist/domain/entities.d.ts

@@ -0,0 +1,91 @@
+import type { MatchEvent, MatchSettings, MatchStatus, OrderDocument, PlayerStatus, TurnStatus } from '@chaos-overlords/contracts';
+export interface Match {
+    id: string;
+    status: MatchStatus;
+    settings: MatchSettings;
+    hostPlayerId: string;
+    joinCode: string;
+    passwordHash: string | null;
+    seed: number | null;
+    /** 0 in the lobby; the open turn number once running. */
+    currentTurn: number;
+    /** Seats taken in the lobby; capacity is enforced on this counter atomically. */
+    seatCount: number;
+    /**
+     * Monotonic count of seats ever claimed. It never decreases, so the value handed to each player
+     * as `joinOrder` is a stable total order even after someone leaves and a newcomer takes the seat.
+     */
+    joinCounter: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface Player {
+    id: string;
+    matchId: string;
+    /** Assigned at match start; -1 while in the lobby. */
+    slot: number;
+    /** Position in the match's monotonic join sequence; the host is always 0. */
+    joinOrder: number;
+    displayName: string;
+    /**
+     * SHA-256 of the player's bearer token, or null once the membership is revoked (left or kicked
+     * from a running match). A null hash matches no token, so revocation needs no extra check.
+     */
+    tokenHash: string | null;
+    status: PlayerStatus;
+    joinedAt: Date;
+}
+/** One participant of a sealed turn: the slot its orders were hashed under. */
+export interface SealedSlot {
+    playerId: string;
+    slot: number;
+}
+export interface Turn {
+    matchId: string;
+    number: number;
+    status: TurnStatus;
+    openedAt: Date;
+    deadlineAt: Date | null;
+    sealedAt: Date | null;
+    orderSetHash: string | null;
+    /**
+     * The participants whose orders the seal folded into `orderSetHash`, frozen at seal time and
+     * never recomputed. Readers of the sealed set serve exactly these rows, so the set a client
+     * fetches always re-hashes to the digest that was announced, no matter who leaves afterwards.
+     */
+    sealedSlots: readonly SealedSlot[] | null;
+}
+/** One player's row for a turn. Rows are pre-created when the turn opens (see TurnRepository). */
+export interface TurnOrders {
+    matchId: string;
+    turn: number;
+    playerId: string;
+    orders: OrderDocument | null;
+    ordersHash: string | null;
+    ready: boolean;
+    submittedAt: Date | null;
+}
+export interface TurnReport {
+    matchId: string;
+    turn: number;
+    playerId: string;
+    stateHash: string;
+    finished: boolean;
+    reportedAt: Date;
+}
+export interface Snapshot {
+    matchId: string;
+    turn: number;
+    formatVersion: number;
+    stateHash: string;
+    uploadedByPlayerId: string;
+    uploadedAt: Date;
+    /** Base64 of the client's native snapshot bytes; the server never decodes it. */
+    body: string;
+}
+export type PersistedEvent = MatchEvent;
+export declare const ACTIVE_PLAYER: PlayerStatus;
+export declare function activePlayers(players: readonly Player[]): Player[];
+/** Human-controlled seats, including an absent player the lobby elected to keep waiting for. */
+export declare function humanParticipants(players: readonly Player[]): Player[];
+//# sourceMappingURL=entities.d.ts.map

package/dist/domain/entities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../src/domain/entities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACX,MAAM,4BAA4B,CAAA;AAEnC,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,WAAW,CAAA;IACnB,QAAQ,EAAE,aAAa,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAA;IACZ,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,EAAE,YAAY,CAAA;IACpB,QAAQ,EAAE,IAAI,CAAA;CACf;AAED,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,IAAI,CAAA;IACd,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAA;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;;;;OAIG;IACH,WAAW,EAAE,SAAS,UAAU,EAAE,GAAG,IAAI,CAAA;CAC1C;AAED,kGAAkG;AAClG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,KAAK,EAAE,OAAO,CAAA;IACd,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,UAAU,EAAE,IAAI,CAAA;IAChB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,CAAA;AAEvC,eAAO,MAAM,aAAa,EAAE,YAAuB,CAAA;AAEnD,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAItE"}

package/dist/domain/entities.js

@@ -0,0 +1,9 @@
+export const ACTIVE_PLAYER = 'active';
+export function activePlayers(players) {
+    return players.filter((player) => player.status === ACTIVE_PLAYER);
+}
+/** Human-controlled seats, including an absent player the lobby elected to keep waiting for. */
+export function humanParticipants(players) {
+    return players.filter((player) => player.status === 'active' || player.status === 'takeoverPending');
+}
+//# sourceMappingURL=entities.js.map

package/dist/domain/entities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.js","sourceRoot":"","sources":["../../src/domain/entities.ts"],"names":[],"mappings":"AAsGA,MAAM,CAAC,MAAM,aAAa,GAAiB,QAAQ,CAAA;AAEnD,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,CAAA;AACpE,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAC9E,CAAA;AACH,CAAC"}

package/dist/domain/errors.d.ts

@@ -0,0 +1,30 @@
+import type { ErrorCode } from '@chaos-overlords/contracts';
+export type ErrorDetails = Record<string, unknown> & {
+    reason?: string;
+};
+/** A refusal. Controllers throw these; the HTTP layer renders the one wire envelope. */
+export declare class DomainError extends Error {
+    readonly code: ErrorCode;
+    readonly details: ErrorDetails;
+    constructor(code: ErrorCode, message: string, details?: ErrorDetails);
+}
+export declare class NotFoundError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare class UnauthorizedError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare class ForbiddenError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare class ConflictError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare class ValidationError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare class RateLimitedError extends DomainError {
+    constructor(message: string, details?: ErrorDetails);
+}
+export declare function isDomainError(error: unknown): error is DomainError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/domain/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AAE3D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAExE,wFAAwF;AACxF,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,SAAS;IAExB,QAAQ,CAAC,OAAO,EAAE,YAAY;gBAFrB,IAAI,EAAE,SAAS,EACxB,OAAO,EAAE,MAAM,EACN,OAAO,GAAE,YAAiB;CAKtC;AAED,qBAAa,aAAc,SAAQ,WAAW;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AACD,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AACD,qBAAa,cAAe,SAAQ,WAAW;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AACD,qBAAa,aAAc,SAAQ,WAAW;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AACD,qBAAa,eAAgB,SAAQ,WAAW;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AACD,qBAAa,gBAAiB,SAAQ,WAAW;gBACnC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;CAGxD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE"}

package/dist/domain/errors.js

@@ -0,0 +1,45 @@
+/** A refusal. Controllers throw these; the HTTP layer renders the one wire envelope. */
+export class DomainError extends Error {
+    code;
+    details;
+    constructor(code, message, details = {}) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = new.target.name;
+    }
+}
+export class NotFoundError extends DomainError {
+    constructor(message, details = {}) {
+        super('not_found', message, details);
+    }
+}
+export class UnauthorizedError extends DomainError {
+    constructor(message, details = {}) {
+        super('unauthorized', message, details);
+    }
+}
+export class ForbiddenError extends DomainError {
+    constructor(message, details = {}) {
+        super('forbidden', message, details);
+    }
+}
+export class ConflictError extends DomainError {
+    constructor(message, details = {}) {
+        super('conflict', message, details);
+    }
+}
+export class ValidationError extends DomainError {
+    constructor(message, details = {}) {
+        super('validation_failed', message, details);
+    }
+}
+export class RateLimitedError extends DomainError {
+    constructor(message, details = {}) {
+        super('rate_limited', message, details);
+    }
+}
+export function isDomainError(error) {
+    return error instanceof DomainError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/domain/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAIA,wFAAwF;AACxF,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB;IAEA;IAHX,YACW,IAAe,EACxB,OAAe,EACN,UAAwB,EAAE;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAA;QAJL,SAAI,GAAJ,IAAI,CAAW;QAEf,YAAO,GAAP,OAAO,CAAmB;QAGnC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;CACF;AACD,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAChD,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACzC,CAAC;CACF;AACD,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;CACF;AACD,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC;CACF;AACD,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;CACF;AACD,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IAC/C,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACzC,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,WAAW,CAAA;AACrC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from './domain/entities';
+export * from './domain/errors';
+export * from './logic';
+export * from './ports';
+export * from './services';
+export * from './services/createKernel';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,SAAS,CAAA;AACvB,cAAc,SAAS,CAAA;AACvB,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from './domain/entities';
+export * from './domain/errors';
+export * from './logic';
+export * from './ports';
+export * from './services';
+export * from './services/createKernel';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,SAAS,CAAA;AACvB,cAAc,SAAS,CAAA;AACvB,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA"}

package/dist/logic/canonical-json.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Deterministic JSON, the form every order digest is taken over: object keys sorted by UTF-16 code
+ * unit (JavaScript's default string order, .NET's `StringComparer.Ordinal`), no whitespace, and
+ * numbers restricted to safe integers.
+ *
+ * The restriction is the point: a client written in another language has to reproduce this text
+ * byte for byte to verify `ordersHash`, and floating-point shortest round-trip text is not portable
+ * (`1e+21` here, `1E+21` in .NET). Integers, booleans, null and JSON-escaped strings are. Anything
+ * outside that is a programming error, not a runtime condition, so it throws rather than hashing
+ * something a peer cannot reproduce.
+ */
+export declare function canonicalJson(value: unknown): string;
+export declare class NonCanonicalValueError extends Error {
+    readonly path: string;
+    constructor(path: string, detail: string);
+}
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/logic/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/logic/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM;CAKjB"}

package/dist/logic/canonical-json.js

@@ -0,0 +1,44 @@
+/**
+ * Deterministic JSON, the form every order digest is taken over: object keys sorted by UTF-16 code
+ * unit (JavaScript's default string order, .NET's `StringComparer.Ordinal`), no whitespace, and
+ * numbers restricted to safe integers.
+ *
+ * The restriction is the point: a client written in another language has to reproduce this text
+ * byte for byte to verify `ordersHash`, and floating-point shortest round-trip text is not portable
+ * (`1e+21` here, `1E+21` in .NET). Integers, booleans, null and JSON-escaped strings are. Anything
+ * outside that is a programming error, not a runtime condition, so it throws rather than hashing
+ * something a peer cannot reproduce.
+ */
+export function canonicalJson(value) {
+    return JSON.stringify(canonicalize(value));
+}
+export class NonCanonicalValueError extends Error {
+    path;
+    constructor(path, detail) {
+        super(`cannot canonicalize ${path || 'value'}: ${detail}`);
+        this.path = path;
+        this.name = 'NonCanonicalValueError';
+    }
+}
+function canonicalize(value, path = '') {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isSafeInteger(value) || Object.is(value, -0)) {
+            throw new NonCanonicalValueError(path, `${value} is not a safe non-negative-zero integer`);
+        }
+        return value;
+    }
+    if (Array.isArray(value))
+        return value.map((item, index) => canonicalize(item, `${path}[${index}]`));
+    if (typeof value === 'object') {
+        const source = value;
+        const sorted = {};
+        for (const key of Object.keys(source).sort()) {
+            sorted[key] = canonicalize(source[key], path ? `${path}.${key}` : key);
+        }
+        return sorted;
+    }
+    throw new NonCanonicalValueError(path, `unsupported type ${typeof value}`);
+}
+//# sourceMappingURL=canonical-json.js.map

package/dist/logic/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/logic/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAEpC;IADX,YACW,IAAY,EACrB,MAAc;QAEd,KAAK,CAAC,uBAAuB,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC,CAAA;QAHjD,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAI,GAAG,EAAE;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,GAAG,KAAK,0CAA0C,CAAC,CAAA;QAC5F,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAA;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,OAAO,KAAK,EAAE,CAAC,CAAA;AAC5E,CAAC"}

package/dist/logic/crypto.d.ts

@@ -0,0 +1,29 @@
+export declare function sha256Hex(input: string | Uint8Array): Promise<string>;
+export declare function toHex(bytes: Uint8Array): string;
+export declare function randomBytes(length: number): Uint8Array;
+/** A bearer token: 256 random bits, prefixed so a leaked one is recognisable in logs. */
+export declare const TOKEN_PREFIX = "cop_";
+export declare function generateToken(): string;
+export declare function hashToken(token: string): Promise<string>;
+/**
+ * A join code of uniformly distributed glyphs. The alphabet's size does not divide 256, so bytes
+ * above the largest whole multiple are rejected and redrawn rather than folded with `%`, which
+ * would make the first glyphs ~3% likelier and cost entropy on a code that guards a lobby.
+ */
+export declare function generateJoinCode(length: number): string;
+/**
+ * A seed for the deterministic game core, in the range the core can actually hold.
+ *
+ * `MatchSetup.InitialSeed` is a C# `int`, so the wire value has to be a SIGNED 32-bit integer:
+ * drawing 32 unsigned bits would put half of all seeds above `int.MaxValue`, where the client's
+ * deserializer refuses them and the match never starts. `Int32Array` reinterprets the same four
+ * random bytes as the signed value the core will read, which keeps the full 32 bits of entropy.
+ */
+export declare function generateSeed(): number;
+export declare function hashOrderDocument(orders: unknown): Promise<string>;
+/** The digest every client can recompute from the sealed set it fetched, to verify integrity. */
+export declare function hashOrderSet(entries: ReadonlyArray<{
+    slot: number;
+    ordersHash: string;
+}>): Promise<string>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/logic/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/logic/crypto.ts"],"names":[],"mappings":"AAIA,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAI3E;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAI/C;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAItD;AAQD,yFAAyF;AACzF,eAAO,MAAM,YAAY,SAAS,CAAA;AAElC,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAExD;AAKD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAElE;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3D,OAAO,CAAC,MAAM,CAAC,CAKjB"}

package/dist/logic/crypto.js

@@ -0,0 +1,76 @@
+import { canonicalJson } from './canonical-json';
+const encoder = new TextEncoder();
+export async function sha256Hex(input) {
+    const bytes = typeof input === 'string' ? encoder.encode(input) : input;
+    const digest = await crypto.subtle.digest('SHA-256', bytes);
+    return toHex(new Uint8Array(digest));
+}
+export function toHex(bytes) {
+    let out = '';
+    for (const byte of bytes)
+        out += byte.toString(16).padStart(2, '0');
+    return out;
+}
+export function randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+}
+function toBase64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '');
+}
+/** A bearer token: 256 random bits, prefixed so a leaked one is recognisable in logs. */
+export const TOKEN_PREFIX = 'cop_';
+export function generateToken() {
+    return `${TOKEN_PREFIX}${toBase64Url(randomBytes(32))}`;
+}
+export function hashToken(token) {
+    return sha256Hex(token);
+}
+/** Crockford-ish alphabet without the glyphs players misread over voice chat (0/O, 1/I/L). */
+const JOIN_CODE_ALPHABET = 'ABCDEFGHJKMNPQRSTUVWXYZ23456789';
+/**
+ * A join code of uniformly distributed glyphs. The alphabet's size does not divide 256, so bytes
+ * above the largest whole multiple are rejected and redrawn rather than folded with `%`, which
+ * would make the first glyphs ~3% likelier and cost entropy on a code that guards a lobby.
+ */
+export function generateJoinCode(length) {
+    const limit = Math.floor(256 / JOIN_CODE_ALPHABET.length) * JOIN_CODE_ALPHABET.length;
+    let code = '';
+    while (code.length < length) {
+        for (const byte of randomBytes(length)) {
+            if (byte >= limit)
+                continue;
+            code += JOIN_CODE_ALPHABET[byte % JOIN_CODE_ALPHABET.length];
+            if (code.length === length)
+                break;
+        }
+    }
+    return code;
+}
+/**
+ * A seed for the deterministic game core, in the range the core can actually hold.
+ *
+ * `MatchSetup.InitialSeed` is a C# `int`, so the wire value has to be a SIGNED 32-bit integer:
+ * drawing 32 unsigned bits would put half of all seeds above `int.MaxValue`, where the client's
+ * deserializer refuses them and the match never starts. `Int32Array` reinterprets the same four
+ * random bytes as the signed value the core will read, which keeps the full 32 bits of entropy.
+ */
+export function generateSeed() {
+    const [value] = new Int32Array(randomBytes(4).buffer);
+    return value ?? 0;
+}
+export function hashOrderDocument(orders) {
+    return sha256Hex(canonicalJson(orders));
+}
+/** The digest every client can recompute from the sealed set it fetched, to verify integrity. */
+export function hashOrderSet(entries) {
+    const lines = [...entries]
+        .sort((a, b) => a.slot - b.slot)
+        .map((entry) => `${entry.slot}:${entry.ordersHash}`);
+    return sha256Hex(lines.join('\n'));
+}
+//# sourceMappingURL=crypto.js.map

package/dist/logic/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/logic/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAA0B;IACxD,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACvE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC,CAAA;IAC3E,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACnE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAA;AAElC,MAAM,UAAU,aAAa;IAC3B,OAAO,GAAG,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,8FAA8F;AAC9F,MAAM,kBAAkB,GAAG,iCAAiC,CAAA;AAE5D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAA;IACrF,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,OAAO,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,IAAI,KAAK;gBAAE,SAAQ;YAC3B,IAAI,IAAI,kBAAkB,CAAC,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAK;QACnC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACrD,OAAO,KAAK,IAAI,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,OAAO,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAC1B,OAA4D;IAE5D,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC;SACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;SAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IACtD,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/logic/index.d.ts

@@ -0,0 +1,5 @@
+export * from './canonical-json';
+export * from './crypto';
+export * from './password';
+export * from './turn-logic';
+//# sourceMappingURL=index.d.ts.map

package/dist/logic/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logic/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}

package/dist/logic/index.js

@@ -0,0 +1,5 @@
+export * from './canonical-json';
+export * from './crypto';
+export * from './password';
+export * from './turn-logic';
+//# sourceMappingURL=index.js.map

package/dist/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logic/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}

package/dist/logic/password.d.ts

@@ -0,0 +1,4 @@
+/** PBKDF2-SHA256 over WebCrypto, so the same code runs on Node and workerd. */
+export declare function hashPassword(password: string): Promise<string>;
+export declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+//# sourceMappingURL=password.d.ts.map

package/dist/logic/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/logic/password.ts"],"names":[],"mappings":"AAKA,+EAA+E;AAC/E,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpE;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKvF"}

package/dist/logic/password.js

@@ -0,0 +1,38 @@
+import { randomBytes, toHex } from './crypto';
+const ITERATIONS = 120_000;
+const encoder = new TextEncoder();
+/** PBKDF2-SHA256 over WebCrypto, so the same code runs on Node and workerd. */
+export async function hashPassword(password) {
+    const salt = randomBytes(16);
+    const derived = await derive(password, salt);
+    return `pbkdf2$${ITERATIONS}$${toHex(salt)}$${toHex(derived)}`;
+}
+export async function verifyPassword(password, stored) {
+    const [scheme, iterationsText, saltHex, hashHex] = stored.split('$');
+    if (scheme !== 'pbkdf2' || !iterationsText || !saltHex || !hashHex)
+        return false;
+    const derived = await derive(password, fromHex(saltHex), Number(iterationsText));
+    return constantTimeEqual(toHex(derived), hashHex);
+}
+async function derive(password, salt, iterations = ITERATIONS) {
+    const key = await crypto.subtle.importKey('raw', encoder.encode(password), 'PBKDF2', false, [
+        'deriveBits',
+    ]);
+    const bits = await crypto.subtle.deriveBits({ name: 'PBKDF2', hash: 'SHA-256', salt: salt, iterations }, key, 256);
+    return new Uint8Array(bits);
+}
+function fromHex(hex) {
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < bytes.length; i += 1)
+        bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    return bytes;
+}
+function constantTimeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i += 1)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+//# sourceMappingURL=password.js.map

package/dist/logic/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/logic/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAE7C,MAAM,UAAU,GAAG,OAAO,CAAA;AAC1B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC5C,OAAO,UAAU,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IACnE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpE,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;IAChF,OAAO,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,QAAgB,EAChB,IAAgB,EAChB,UAAU,GAAG,UAAU;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC1F,YAAY;KACb,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACzC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAoB,EAAE,UAAU,EAAE,EAC3E,GAAG,EACH,GAAG,CACJ,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7D,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC/E,OAAO,IAAI,KAAK,CAAC,CAAA;AACnB,CAAC"}

package/dist/logic/turn-logic.d.ts

@@ -0,0 +1,52 @@
+import type { Player, TurnOrders, TurnReport } from '../domain/entities';
+/** Every human seat still being waited on has marked ready. An empty roster is never "ready". */
+export declare function allActiveReady(players: readonly Player[], orders: readonly TurnOrders[]): boolean;
+export type Consensus = {
+    kind: 'pending';
+} | {
+    kind: 'confirmed';
+    stateHash: string;
+    finished: boolean;
+} | {
+    kind: 'desynced';
+    reports: Array<{
+        playerId: string;
+        stateHash: string;
+    }>;
+    /** The hashes tied for the most reports; what a recovery snapshot may claim. */
+    candidateStateHashes: string[];
+};
+/**
+ * The state hashes that the most active players reported, tied if more than one.
+ *
+ * This is the corroboration a recovery snapshot is held to. Letting the host name any hash at all
+ * would make the host's client authoritative over a disagreement it is itself a party to: upload a
+ * doctored snapshot after a deliberate desync and every other client is told to adopt it. A hash
+ * that more players than any other already computed independently cannot be minted by one of them.
+ *
+ * A genuine tie (most of all, the 1-1 split of a two-player match) leaves nothing to count, and
+ * there is no third party to ask, so the host breaks it. Lockstep of three or more is where this
+ * bites, and that is the case worth defending: consistency is what matters, so converging on the
+ * majority's state is right even when the host's own client happens to be the correct one.
+ */
+export declare function authoritativeCandidates(players: readonly Player[], reports: readonly TurnReport[]): string[];
+/**
+ * Compare the post-turn state hashes the active players reported.
+ *
+ * Without an authoritative hash: once everyone has reported, unanimous agreement confirms the
+ * turn and any disagreement flags a desync. With one (the host uploaded a snapshot for this
+ * turn), a report is counted only when it matches it, so stragglers reloading the snapshot can
+ * converge without tripping a second desync.
+ */
+export declare function evaluateConsensus(players: readonly Player[], reports: readonly TurnReport[], authoritativeHash: string | null): Consensus;
+/**
+ * Host takes slot 0; everyone else follows the match's monotonic join sequence. The sequence, not
+ * the join timestamp, is the key: two players seated in the same millisecond would otherwise be
+ * ordered by their random ids, and the slot order decides resolution order on every client.
+ */
+export declare function assignSlots(players: readonly Player[], hostPlayerId: string): Array<{
+    playerId: string;
+    slot: number;
+}>;
+export declare function turnDeadline(openedAt: Date, turnTimerSeconds: number): Date | null;
+//# sourceMappingURL=turn-logic.d.ts.map

package/dist/logic/turn-logic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-logic.d.ts","sourceRoot":"","sources":["../../src/logic/turn-logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAExE,iGAAiG;AACjG,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAOjG;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC3D;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvD,gFAAgF;IAChF,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B,CAAA;AAEL;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,SAAS,UAAU,EAAE,GAC7B,MAAM,EAAE,CAaV;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,SAAS,CAgCX;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,YAAY,EAAE,MAAM,GACnB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAU3C;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAElF"}