@chaos-overlords/server 0.1.0

package/NOTICE

@@ -0,0 +1,21 @@
+Chaos Overlords: New Chrome
+A clean-room MonoGame reimplementation of the 1996 turn-based strategy game.
+
+Copyright (C) 2026 kibertoad
+
+This program is free software: you can redistribute it and/or modify it under
+the terms of the GNU General Public License as published by the Free Software
+Foundation, version 3 of the License.
+
+This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License along with
+this program in the LICENSE file. If not, see <https://www.gnu.org/licenses/>.
+
+The GPL covers the original code in this repository. It does not cover or grant
+rights to the original Chaos Overlords assets. Those assets are not distributed
+by this project and must be imported locally from a legally owned copy.
+
+Project contact: https://github.com/kibertoad/chaos-overlords-new-chrome/issues

package/README.md

@@ -0,0 +1,33 @@
+# @chaos-overlords/server
+
+HTTP server for the [*Chaos Overlords: New Chrome*](https://github.com/kibertoad/chaos-overlords-new-chrome) multiplayer server.
+
+The Hono application both runtimes serve: REST intents, the server-sent events stream, bearer
+auth, rate limiting and the error envelope. It takes every port it needs through a container, so
+hosting it is a matter of supplying storage, a clock and an event hub.
+
+```ts
+import { createApp } from '@chaos-overlords/server'
+
+const app = createApp(container)
+```
+
+For a server you can just run, see `@chaos-overlords/node-server` or `@chaos-overlords/worker`.
+
+## Install
+
+```sh
+npm install @chaos-overlords/server
+```
+
+Requires Node.js 22 or newer.
+
+## Documentation
+
+The operator and contributor manual for the whole multiplayer workspace is in
+[`multiplayer/README.md`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/multiplayer/README.md); the design notes are in
+[`docs/MULTIPLAYER.md`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/docs/MULTIPLAYER.md).
+
+## Licence
+
+GPL-3.0-only. See [`LICENSE`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/LICENSE) and [`NOTICE`](https://github.com/kibertoad/chaos-overlords-new-chrome/blob/main/NOTICE).

package/dist/app.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import type { ServerContainer } from './container';
+import type { AppEnv } from './http/types';
+export declare const API_PREFIX = "/api/v1";
+/** The application both runtime facades serve; only the container differs between them. */
+export declare function createApp(container: ServerContainer): Hono<AppEnv>;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AASlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAO1C,eAAO,MAAM,UAAU,YAAY,CAAA;AAInC,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,CAYlE"}

package/dist/app.js

@@ -0,0 +1,60 @@
+import { BUG_REPORT_LIMITS, LIMITS } from '@chaos-overlords/contracts';
+import { Hono } from 'hono';
+import { bodyLimit } from 'hono/body-limit';
+import { handleError } from './http/errorHandler';
+import { bearerAuth, bugReportRateLimited, memberRateLimited, rateLimited, requestId, } from './http/middleware';
+import { registerBugReportRoutes } from './routes/bugReports';
+import { registerEventRoutes } from './routes/events';
+import { registerMemberLobbyRoutes, registerPublicLobbyRoutes } from './routes/lobby';
+import { registerSnapshotRoutes } from './routes/snapshots';
+import { registerTurnRoutes } from './routes/turns';
+export const API_PREFIX = '/api/v1';
+const SMALL_BODY = 16 * 1024;
+/** The application both runtime facades serve; only the container differs between them. */
+export function createApp(container) {
+    const app = new Hono();
+    app.onError(handleError);
+    app.use('*', async (c, next) => {
+        c.set('container', container);
+        await next();
+    });
+    app.use('*', requestId);
+    app.get('/health', (c) => c.json({ ok: true }));
+    app.route(API_PREFIX, apiRoutes());
+    return app;
+}
+/**
+ * The API, mounted from the contracts.
+ *
+ * **Registration order is load-bearing.** Hono composes every matching middleware and the first
+ * matching handler in the order they were registered, and a handler ends the chain. The
+ * unauthenticated doors are therefore registered before the `/matches/:matchId/*` auth mount, which
+ * would otherwise also match `/matches/join` and demand a token for it. Each body limit is
+ * registered before the route it guards, so it runs before the contract validator reads the body —
+ * a limit checked after the body has been parsed guards nothing.
+ */
+function apiRoutes() {
+    const api = new Hono();
+    // The doors a stranger can knock on, throttled per client address.
+    api.use('/matches', rateLimited, bodyLimit({ maxSize: LIMITS.gameSettingsBytes + SMALL_BODY }));
+    api.use('/matches/join', rateLimited, bodyLimit({ maxSize: SMALL_BODY }));
+    // The third one. It is unauthenticated like the other two and far larger than either, so it gets
+    // a budget of its own rather than borrowing the lobby's — see `RateLimiters.bugReport`.
+    api.use('/bug-reports', bugReportRateLimited, bodyLimit({ maxSize: BUG_REPORT_LIMITS.stateBase64Bytes + SMALL_BODY }));
+    registerPublicLobbyRoutes(api);
+    registerBugReportRoutes(api);
+    // `/:matchId/*` also matches the bare `/:matchId`, so this is the only mount: a second one for
+    // the bare path would authenticate (a token lookup plus a match read) and charge the member's
+    // rate limit twice on every request to it.
+    api.use('/matches/:matchId/*', bearerAuth, memberRateLimited());
+    api.use('/matches/:matchId/turns/:turn/orders', bodyLimit({ maxSize: LIMITS.ordersBytes }));
+    api.use('/matches/:matchId/turns/:turn/report', bodyLimit({ maxSize: SMALL_BODY }));
+    // A snapshot is a megabyte, so uploads carry their own tighter budget on top of the member one.
+    api.use('/matches/:matchId/snapshots', memberRateLimited('upload'), bodyLimit({ maxSize: LIMITS.snapshotBase64Bytes + SMALL_BODY }));
+    registerMemberLobbyRoutes(api);
+    registerTurnRoutes(api);
+    registerSnapshotRoutes(api);
+    registerEventRoutes(api);
+    return api;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,SAAS,GACV,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAA;AAEnC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AAE5B,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,SAA0B;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACxB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC7B,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAEvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/C,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IAClC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC,CAAC,CAAA;IAC/F,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IACzE,iGAAiG;IACjG,wFAAwF;IACxF,GAAG,CAAC,GAAG,CACL,cAAc,EACd,oBAAoB,EACpB,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,CACxE,CAAA;IAED,yBAAyB,CAAC,GAAG,CAAC,CAAA;IAC9B,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,+FAA+F;IAC/F,8FAA8F;IAC9F,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC/D,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAC3F,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IACnF,gGAAgG;IAChG,GAAG,CAAC,GAAG,CACL,6BAA6B,EAC7B,iBAAiB,CAAC,QAAQ,CAAC,EAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,mBAAmB,GAAG,UAAU,EAAE,CAAC,CAChE,CAAA;IAED,yBAAyB,CAAC,GAAG,CAAC,CAAA;IAC9B,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACvB,sBAAsB,CAAC,GAAG,CAAC,CAAA;IAC3B,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/container.d.ts

@@ -0,0 +1,61 @@
+import type { BugReportService } from '@chaos-overlords/bug-reports';
+import type { EventStreamOpener, Kernel, RateLimiter } from '@chaos-overlords/kernel';
+import type { Context } from 'hono';
+import type { AppEnv } from './http/types';
+export interface ServerConfig {
+    /** Serve `GET /api/v1/matches` (public lobby browsing). Off by default for self-hosted servers. */
+    publicListing: boolean;
+    /** Interval between SSE keepalive comments. */
+    sseHeartbeatMs: number;
+}
+/**
+ * The three doors that need throttling, each with its own budget and key.
+ *
+ * `anonymous` guards create and join per client address: the only calls a stranger can make, and the
+ * only ones a join code can be guessed through. The other two are keyed by player token, because an
+ * authenticated member is also a cost: order documents are a quarter of a megabyte each and snapshot
+ * uploads four times that, so a buggy client in a retry loop must not be able to write without
+ * bound. Windows are per process, which is all a single self-hosted server needs; a public
+ * deployment puts its platform's rate limiting in front as the real gate.
+ */
+export interface RateLimiters {
+    anonymous: RateLimiter;
+    member: RateLimiter;
+    upload: RateLimiter;
+    /**
+     * The bug report door, which is the only unauthenticated one that accepts megabytes.
+     *
+     * Its own tier rather than the anonymous one: a player filing a report and a player retrying a
+     * join are nothing alike in cost, and sharing a budget would mean a handful of reports locked
+     * somebody out of a lobby (or, the other way round, that a lobby's generous budget also bought
+     * thirty multi-megabyte uploads a minute from a stranger).
+     */
+    bugReport: RateLimiter;
+}
+export interface ServerContainer {
+    kernel: Kernel;
+    /**
+     * Bug report intake, backed by its own database. Absent on a deployment that has not configured
+     * one, where the route answers 404 rather than pretending to take reports.
+     */
+    bugReports?: BugReportService;
+    eventStream: EventStreamOpener;
+    rateLimiters: RateLimiters;
+    config: ServerConfig;
+    /** How the runtime identifies a caller for rate limiting; defaults to proxy headers. */
+    clientAddress?: (c: Context<AppEnv>) => string;
+}
+export declare const DEFAULT_SERVER_CONFIG: ServerConfig;
+/** Per-minute budgets. Generous for play, far below what a retry loop would spend. */
+export declare const DEFAULT_RATE_LIMITS: {
+    readonly anonymousPerMinute: 30;
+    readonly memberPerMinute: 240;
+    readonly uploadPerMinute: 10;
+    /**
+     * Five reports a minute per address. A player filing one files one; a player filing a second
+     * because the first did not seem to send is the case this has to leave room for, and everything
+     * beyond that is a client in a loop uploading whole match journals.
+     */
+    readonly bugReportPerMinute: 5;
+};
+//# sourceMappingURL=container.d.ts.map

package/dist/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE1C,MAAM,WAAW,YAAY;IAC3B,mGAAmG;IACnG,aAAa,EAAE,OAAO,CAAA;IACtB,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,WAAW,CAAA;IACtB,MAAM,EAAE,WAAW,CAAA;IACnB,MAAM,EAAE,WAAW,CAAA;IACnB;;;;;;;OAOG;IACH,SAAS,EAAE,WAAW,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,WAAW,EAAE,iBAAiB,CAAA;IAC9B,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,EAAE,YAAY,CAAA;IACpB,wFAAwF;IACxF,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAA;CAC/C;AAED,eAAO,MAAM,qBAAqB,EAAE,YAGnC,CAAA;AAED,sFAAsF;AACtF,eAAO,MAAM,mBAAmB;;;;IAI9B;;;;OAIG;;CAEK,CAAA"}

package/dist/container.js

@@ -0,0 +1,17 @@
+export const DEFAULT_SERVER_CONFIG = {
+    publicListing: false,
+    sseHeartbeatMs: 20_000,
+};
+/** Per-minute budgets. Generous for play, far below what a retry loop would spend. */
+export const DEFAULT_RATE_LIMITS = {
+    anonymousPerMinute: 30,
+    memberPerMinute: 240,
+    uploadPerMinute: 10,
+    /**
+     * Five reports a minute per address. A player filing one files one; a player filing a second
+     * because the first did not seem to send is the case this has to leave room for, and everything
+     * beyond that is a client in a loop uploading whole match journals.
+     */
+    bugReportPerMinute: 5,
+};
+//# sourceMappingURL=container.js.map

package/dist/container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAmDA,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,MAAM;CACvB,CAAA;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB,EAAE,EAAE;IACtB,eAAe,EAAE,GAAG;IACpB,eAAe,EAAE,EAAE;IACnB;;;;OAIG;IACH,kBAAkB,EAAE,CAAC;CACb,CAAA"}

package/dist/http/errorHandler.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from 'hono';
+import type { AppEnv } from './types';
+/** The ONE producer of the error envelope. Controllers throw; nothing else builds `{ error }`. */
+export declare function handleError(error: Error, c: Context<AppEnv>): Response;
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/http/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/http/errorHandler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CA0BtE"}

package/dist/http/errorHandler.js

@@ -0,0 +1,49 @@
+import { STATUS_BY_CODE } from '@chaos-overlords/contracts';
+import { isDomainError } from '@chaos-overlords/kernel';
+import { SchemaValidationError } from '@toad-contracts/core';
+import { HTTPException } from 'hono/http-exception';
+/** The ONE producer of the error envelope. Controllers throw; nothing else builds `{ error }`. */
+export function handleError(error, c) {
+    const requestId = c.get('requestId');
+    if (isDomainError(error)) {
+        return respond(c, error.code, error.message, error.details, requestId);
+    }
+    if (error instanceof SchemaValidationError) {
+        // The contract validator refused a path param, a query value or the body. The issue paths and
+        // messages come straight from valibot rather than being restated per endpoint, so a client is
+        // told which field it got wrong.
+        return respond(c, 'validation_failed', 'Request failed contract validation', { reason: 'invalid_request', issues: error.issues }, requestId);
+    }
+    if (error instanceof HTTPException) {
+        const code = codeForStatus(error.status);
+        return respond(c, code, error.message || code, { reason: `http_${error.status}` }, requestId);
+    }
+    c.get('container')?.kernel.deps.logger.error('unhandled request error', {
+        requestId,
+        error: error.stack ?? String(error),
+    });
+    return respond(c, 'internal', 'Internal server error', { reason: 'internal' }, requestId);
+}
+/**
+ * The error code a framework `HTTPException` maps to. Written out rather than derived by scanning
+ * `STATUS_BY_CODE` for a matching value: that scan silently picks whichever code was declared first
+ * the moment two of them share a status, and the mapping is worth being able to read.
+ */
+const CODE_BY_STATUS = {
+    400: 'bad_request',
+    401: 'unauthorized',
+    403: 'forbidden',
+    404: 'not_found',
+    409: 'conflict',
+    413: 'payload_too_large',
+    422: 'validation_failed',
+    429: 'rate_limited',
+};
+function codeForStatus(status) {
+    return CODE_BY_STATUS[status] ?? 'internal';
+}
+function respond(c, code, message, details, requestId) {
+    const body = { error: { code, message, details, requestId } };
+    return c.json(body, STATUS_BY_CODE[code]);
+}
+//# sourceMappingURL=errorHandler.js.map

package/dist/http/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/http/errorHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,KAAY,EAAE,CAAkB;IAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,8FAA8F;QAC9F,8FAA8F;QAC9F,iCAAiC;QACjC,OAAO,OAAO,CACZ,CAAC,EACD,mBAAmB,EACnB,oCAAoC,EACpC,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACnD,SAAS,CACV,CAAA;IACH,CAAC;IACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;IAC/F,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;QACtE,SAAS;QACT,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;KACpC,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,CAAA;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAwC;IAC1D,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,cAAc;CACpB,CAAA;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,UAAU,CAAA;AAC7C,CAAC;AAED,SAAS,OAAO,CACd,CAAkB,EAClB,IAAe,EACf,OAAe,EACf,OAAuD,EACvD,SAAiB;IAEjB,MAAM,IAAI,GAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;IAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAQ,CAAC,CAAA;AAClD,CAAC"}

package/dist/http/guards.d.ts

@@ -0,0 +1,12 @@
+import type { Principal } from '@chaos-overlords/kernel';
+/**
+ * The principal, checked against the `:matchId` the request named.
+ *
+ * A token for another match answers 404, never 403, so a player cannot probe which match ids exist.
+ *
+ * It takes the two values rather than the context because each contract handler's context is typed
+ * from its own contract, and Hono's `Context` is invariant in its env: one guard signature could
+ * not accept all of them.
+ */
+export declare function requireMember(principal: Principal, matchId: string): Principal;
+//# sourceMappingURL=guards.d.ts.map

package/dist/http/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/http/guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAGxD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAK9E"}

package/dist/http/guards.js

@@ -0,0 +1,17 @@
+import { NotFoundError } from '@chaos-overlords/kernel';
+/**
+ * The principal, checked against the `:matchId` the request named.
+ *
+ * A token for another match answers 404, never 403, so a player cannot probe which match ids exist.
+ *
+ * It takes the two values rather than the context because each contract handler's context is typed
+ * from its own contract, and Hono's `Context` is invariant in its env: one guard signature could
+ * not accept all of them.
+ */
+export function requireMember(principal, matchId) {
+    if (principal.match.id !== matchId) {
+        throw new NotFoundError('No such match', { reason: 'unknown_match' });
+    }
+    return principal;
+}
+//# sourceMappingURL=guards.js.map

package/dist/http/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/http/guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,SAAoB,EAAE,OAAe;IACjE,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/http/middleware.d.ts

@@ -0,0 +1,27 @@
+import type { Context, MiddlewareHandler } from 'hono';
+import type { RateLimiters } from '../container';
+import type { AppEnv } from './types';
+/**
+ * Mints or adopts `X-Request-Id`; it rides every error envelope so a player can quote it.
+ *
+ * The header is set before the handler runs, not after: a handler that throws never comes back
+ * here, and the response most worth correlating is exactly the one that failed.
+ */
+export declare const requestId: MiddlewareHandler<AppEnv>;
+/** Resolves the bearer token to a principal or refuses with 401. */
+export declare const bearerAuth: MiddlewareHandler<AppEnv>;
+/** Fixed-window limiter on the unauthenticated doors, keyed by client address. */
+export declare const rateLimited: MiddlewareHandler<AppEnv>;
+/**
+ * Limiter for the bug report door, keyed by client address like the other unauthenticated ones but
+ * spending its own budget: a report is a rare, large call and a join is a frequent, tiny one, and
+ * one must not be able to exhaust the other.
+ */
+export declare const bugReportRateLimited: MiddlewareHandler<AppEnv>;
+/**
+ * Limiter for an authenticated member, keyed by player rather than address so one player on a shared
+ * address cannot spend another's budget. Must run after `bearerAuth`.
+ */
+export declare function memberRateLimited(tier?: keyof RateLimiters): MiddlewareHandler<AppEnv>;
+export declare function defaultClientAddress(c: Context<AppEnv>): string;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/http/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/http/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAK/C,CAAA;AAED,oEAAoE;AACpE,eAAO,MAAM,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAUhD,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAKjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,CAAC,MAAM,CAK1D,CAAA;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAM,YAAuB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAMhG;AAiBD,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAM/D"}

package/dist/http/middleware.js

@@ -0,0 +1,70 @@
+import { RateLimitedError, UnauthorizedError } from '@chaos-overlords/kernel';
+/**
+ * Mints or adopts `X-Request-Id`; it rides every error envelope so a player can quote it.
+ *
+ * The header is set before the handler runs, not after: a handler that throws never comes back
+ * here, and the response most worth correlating is exactly the one that failed.
+ */
+export const requestId = async (c, next) => {
+    const id = c.req.header('x-request-id')?.slice(0, 64) || crypto.randomUUID();
+    c.set('requestId', id);
+    c.header('X-Request-Id', id);
+    await next();
+};
+/** Resolves the bearer token to a principal or refuses with 401. */
+export const bearerAuth = async (c, next) => {
+    const header = c.req.header('authorization') ?? '';
+    const [scheme, token] = header.split(' ', 2);
+    if (scheme?.toLowerCase() !== 'bearer' || !token) {
+        throw new UnauthorizedError('Send the player token as a Bearer credential', {
+            reason: 'missing_token',
+        });
+    }
+    c.set('principal', await c.get('container').kernel.auth.authenticate(token));
+    await next();
+};
+/** Fixed-window limiter on the unauthenticated doors, keyed by client address. */
+export const rateLimited = async (c, next) => {
+    const container = c.get('container');
+    const key = (container.clientAddress ?? defaultClientAddress)(c);
+    enforce(container.rateLimiters, 'anonymous', key, c);
+    await next();
+};
+/**
+ * Limiter for the bug report door, keyed by client address like the other unauthenticated ones but
+ * spending its own budget: a report is a rare, large call and a join is a frequent, tiny one, and
+ * one must not be able to exhaust the other.
+ */
+export const bugReportRateLimited = async (c, next) => {
+    const container = c.get('container');
+    const key = (container.clientAddress ?? defaultClientAddress)(c);
+    enforce(container.rateLimiters, 'bugReport', key, c);
+    await next();
+};
+/**
+ * Limiter for an authenticated member, keyed by player rather than address so one player on a shared
+ * address cannot spend another's budget. Must run after `bearerAuth`.
+ */
+export function memberRateLimited(tier = 'member') {
+    return async (c, next) => {
+        const container = c.get('container');
+        enforce(container.rateLimiters, tier, c.get('principal').player.id, c);
+        await next();
+    };
+}
+function enforce(limiters, tier, key, c) {
+    const retryAfter = limiters[tier].take(`${tier}:${key}`);
+    if (retryAfter === null)
+        return;
+    c.header('Retry-After', String(retryAfter));
+    throw new RateLimitedError('Too many attempts; slow down', {
+        reason: 'rate_limited',
+        retryAfterSeconds: retryAfter,
+    });
+}
+export function defaultClientAddress(c) {
+    return (c.req.header('cf-connecting-ip') ??
+        c.req.header('x-forwarded-for')?.split(',')[0]?.trim() ??
+        'unknown');
+}
+//# sourceMappingURL=middleware.js.map

package/dist/http/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/http/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAK7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAA8B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACpE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAA;IAC5E,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACtB,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IAC5B,MAAM,IAAI,EAAE,CAAA;AACd,CAAC,CAAA;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAA8B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;IAClD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAC5C,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CAAC,8CAA8C,EAAE;YAC1E,MAAM,EAAE,eAAe;SACxB,CAAC,CAAA;IACJ,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5E,MAAM,IAAI,EAAE,CAAA;AACd,CAAC,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAA8B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACtE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,IAAI,EAAE,CAAA;AACd,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAC/E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,IAAI,EAAE,CAAA;AACd,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B,QAAQ;IACnE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACtE,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CACd,QAAsB,EACtB,IAAwB,EACxB,GAAW,EACX,CAAkB;IAElB,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAA;IACxD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAM;IAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;IAC3C,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,EAAE;QACzD,MAAM,EAAE,cAAc;QACtB,iBAAiB,EAAE,UAAU;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAkB;IACrD,OAAO,CACL,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACtD,SAAS,CACV,CAAA;AACH,CAAC"}

package/dist/http/routes.d.ts

@@ -0,0 +1,11 @@
+import type { AppEnv } from './types';
+/**
+ * Route registration bound to this app's environment, so a contract handler's `c.get('container')`
+ * resolves alongside `c.req.valid(...)`.
+ *
+ * Every route is mounted from a contract in `@chaos-overlords/contracts`: the method, the path and
+ * the validation of each request target come from the one definition the TypeScript client calls
+ * through and the C# client's records are generated from. Nothing here restates a path.
+ */
+export declare const buildHonoRoute: <const TContract extends import("@toad-contracts/core").ApiContract, TSchema extends import("hono").Schema = import("hono/types").BlankSchema, TBasePath extends string = "/">(app: import("hono").Hono<AppEnv, TSchema, TBasePath>, contract: TContract, handler: import("@toad-contracts/hono").HonoContractHandler<TContract, AppEnv>, options?: import("@toad-contracts/hono").BuildHonoRouteOptions) => import("hono").Hono<AppEnv, TSchema, TBasePath>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/http/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/http/routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC;;;;;;;GAOG;AACH,eAAO,MAAQ,cAAc,8bAAiC,CAAA"}

package/dist/http/routes.js

@@ -0,0 +1,11 @@
+import { honoContractRoutes } from '@toad-contracts/hono';
+/**
+ * Route registration bound to this app's environment, so a contract handler's `c.get('container')`
+ * resolves alongside `c.req.valid(...)`.
+ *
+ * Every route is mounted from a contract in `@chaos-overlords/contracts`: the method, the path and
+ * the validation of each request target come from the one definition the TypeScript client calls
+ * through and the C# client's records are generated from. Nothing here restates a path.
+ */
+export const { buildHonoRoute } = honoContractRoutes();
+//# sourceMappingURL=routes.js.map

package/dist/http/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/http/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAGzD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,kBAAkB,EAAU,CAAA"}

package/dist/http/types.d.ts

@@ -0,0 +1,10 @@
+import type { Principal } from '@chaos-overlords/kernel';
+import type { ServerContainer } from '../container';
+export interface AppEnv {
+    Variables: {
+        container: ServerContainer;
+        requestId: string;
+        principal: Principal;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/http/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEnD,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE;QACT,SAAS,EAAE,eAAe,CAAA;QAC1B,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,SAAS,CAAA;KACrB,CAAA;CACF"}

package/dist/http/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/http/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { API_PREFIX, createApp } from './app';
+export { DEFAULT_RATE_LIMITS, DEFAULT_SERVER_CONFIG, type RateLimiters, type ServerConfig, type ServerContainer, } from './container';
+export { bugReportRateLimited, defaultClientAddress } from './http/middleware';
+export type { AppEnv } from './http/types';
+export { createSseResponse, type EventStreamSource, formatEvent } from './sse/createSseResponse';
+export { LocalEventHub } from './sse/LocalEventHub';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAC7C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC9E,YAAY,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { API_PREFIX, createApp } from './app';
+export { DEFAULT_RATE_LIMITS, DEFAULT_SERVER_CONFIG, } from './container';
+export { bugReportRateLimited, defaultClientAddress } from './http/middleware';
+export { createSseResponse, formatEvent } from './sse/createSseResponse';
+export { LocalEventHub } from './sse/LocalEventHub';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAC7C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAItB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE9E,OAAO,EAAE,iBAAiB,EAA0B,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/routes/bugReports.d.ts

@@ -0,0 +1,12 @@
+import type { Hono } from 'hono';
+import type { AppEnv } from '../http/types';
+/**
+ * The bug report door.
+ *
+ * Unauthenticated, and registered alongside the two lobby doors that are. A deployment that has not
+ * configured the intake answers 404 rather than 500: "this server does not take bug reports" is a
+ * true and actionable thing to tell a client, and it is the same shape the public lobby listing
+ * uses when it is switched off.
+ */
+export declare function registerBugReportRoutes(api: Hono<AppEnv>): void;
+//# sourceMappingURL=bugReports.d.ts.map

package/dist/routes/bugReports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bugReports.d.ts","sourceRoot":"","sources":["../../src/routes/bugReports.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAE3C;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAU/D"}

package/dist/routes/bugReports.js

@@ -0,0 +1,23 @@
+import { submitBugReportContract } from '@chaos-overlords/contracts';
+import { NotFoundError } from '@chaos-overlords/kernel';
+import { buildHonoRoute } from '../http/routes';
+/**
+ * The bug report door.
+ *
+ * Unauthenticated, and registered alongside the two lobby doors that are. A deployment that has not
+ * configured the intake answers 404 rather than 500: "this server does not take bug reports" is a
+ * true and actionable thing to tell a client, and it is the same shape the public lobby listing
+ * uses when it is switched off.
+ */
+export function registerBugReportRoutes(api) {
+    buildHonoRoute(api, submitBugReportContract, async (c) => {
+        const { bugReports } = c.get('container');
+        if (!bugReports) {
+            throw new NotFoundError('This server does not accept bug reports', {
+                reason: 'bug_reports_disabled',
+            });
+        }
+        return c.json(await bugReports.submit(c.req.valid('json')), 201);
+    });
+}
+//# sourceMappingURL=bugReports.js.map

package/dist/routes/bugReports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bugReports.js","sourceRoot":"","sources":["../../src/routes/bugReports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAG/C;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAiB;IACvD,cAAc,CAAC,GAAG,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,yCAAyC,EAAE;gBACjE,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/routes/events.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from 'hono';
+import type { AppEnv } from '../http/types';
+/** The event log: a paged REST read (the fallback) and the SSE stream over the same log. */
+export declare function registerEventRoutes(api: Hono<AppEnv>): void;
+//# sourceMappingURL=events.d.ts.map

package/dist/routes/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/routes/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAGhC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAE3C,4FAA4F;AAC5F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAmB3D"}

package/dist/routes/events.js

@@ -0,0 +1,39 @@
+import { listEventsContract, streamEventsContract } from '@chaos-overlords/contracts';
+import { requireMember } from '../http/guards';
+import { buildHonoRoute } from '../http/routes';
+/** The event log: a paged REST read (the fallback) and the SSE stream over the same log. */
+export function registerEventRoutes(api) {
+    buildHonoRoute(api, listEventsContract, async (c) => {
+        const principal = requireMember(c.get('principal'), c.req.valid('param').matchId);
+        const { after, limit } = c.req.valid('query');
+        const events = await c
+            .get('container')
+            .kernel.deps.storage.events.listAfter(principal.match.id, after, limit);
+        return c.json({ events }, 200);
+    });
+    buildHonoRoute(api, streamEventsContract, async (c) => {
+        const principal = requireMember(c.get('principal'), c.req.valid('param').matchId);
+        const afterSeq = resumePoint(c.req.header('last-event-id'), c.req.query('after'));
+        return c.get('container').eventStream.open({
+            matchId: principal.match.id,
+            afterSeq,
+            signal: c.req.raw.signal,
+        });
+    });
+}
+/**
+ * `Last-Event-ID` (what an EventSource resends) wins over `?after=`; both default to 0.
+ *
+ * The stream reads these itself rather than through a query schema because a browser's own
+ * `EventSource` sets the header and nothing else, and a resume point that failed validation should
+ * restart the stream from the beginning rather than refuse the connection.
+ */
+function resumePoint(lastEventId, after) {
+    for (const candidate of [lastEventId, after]) {
+        const parsed = Number(candidate);
+        if (candidate !== undefined && Number.isInteger(parsed) && parsed >= 0)
+            return parsed;
+    }
+    return 0;
+}
+//# sourceMappingURL=events.js.map