@claxedo/workspace-relay 0.5.2 → 0.7.0

package/dist/worker.d.ts

@@ -40,11 +40,23 @@ export declare class WorkspaceRelayRoom {
     private loading?;
     constructor(state: unknown, env: WorkspaceRelayWorkerEnv);
     private hibernation;
+    /**
+     * The DO alarm surface, used for the hibernation-safe revocation re-check.
+     * Alarms are the only periodic mechanism that survives hibernation, so this is
+     * what enforces revocation on an idle hibernated connection.
+     */
+    private alarms;
     private loadRoom;
     fetch(request: Request): Promise<Response>;
     webSocketMessage(socket: WorkspaceRelayDurableObjectSocket, message: string | ArrayBuffer): Promise<void>;
     webSocketClose(socket: WorkspaceRelayDurableObjectSocket, code: number, reason: string, wasClean: boolean): Promise<void>;
     webSocketError(socket: WorkspaceRelayDurableObjectSocket, error: unknown): Promise<void>;
+    /**
+     * Forwarded so the room's hibernation-safe revocation sweep actually runs. The
+     * DO has ONE alarm slot; the room only ever moves it earlier and never clears
+     * it, so adding another alarm user here stays safe.
+     */
+    alarm(): Promise<void>;
 }
 declare const _default: {
     fetch(request: Request, env: WorkspaceRelayWorkerEnv): Promise<Response>;

package/dist/workerd-fixture/binary-frame-worker.d.ts

@@ -0,0 +1,33 @@
+type FixtureSocket = {
+    accept: () => void;
+    send: (message: string | ArrayBuffer | Uint8Array) => void;
+    close: (code?: number, reason?: string) => void;
+    binaryType?: string;
+    addEventListener: (type: "message" | "close" | "error", listener: (event: {
+        data?: unknown;
+    }) => void) => void;
+};
+type FixtureState = {
+    acceptWebSocket: (socket: FixtureSocket) => void;
+};
+type FixtureNamespace = {
+    idFromName: (name: string) => unknown;
+    get: (id: unknown) => {
+        fetch: (request: Request) => Promise<Response>;
+    };
+};
+export declare class BinaryFrameRoom {
+    private state;
+    constructor(state: FixtureState);
+    fetch(request: Request): Promise<Response>;
+    /** Hibernation delivery path — survives eviction, so no listener exists. */
+    webSocketMessage(socket: FixtureSocket, message: unknown): Promise<void>;
+    webSocketClose(): Promise<void>;
+    private report;
+}
+declare const _default: {
+    fetch(request: Request, env: {
+        ROOM: FixtureNamespace;
+    }): Promise<Response>;
+};
+export default _default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claxedo/workspace-relay",
-  "version": "0.5.2",
+  "version": "0.7.0",
   "type": "module",
   "description": "Relay/tunnel server that routes authenticated traffic to workspace runtimes: JWT workspace tokens, header-stripping trust boundary, Bun and Cloudflare adapters",
   "license": "MIT",
@@ -43,20 +43,27 @@
     "build": "tsx scripts/build.ts",
     "prepublishOnly": "npm run build",
     "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "bun test src"
+    "typecheck:bench": "tsc --noEmit -p bench/tsconfig.json",
+    "test": "mkdir -p .artifacts/unit && bun test src bench --reporter=junit --reporter-outfile=.artifacts/unit/junit.xml",
+    "bench:gate": "bun bench/local-dry-run.ts",
+    "bench:gate:cf": "bun bench/cf-dev-smoke.ts"
   },
   "dependencies": {
-    "@claxedo/workspace-relay-protocol": "0.5.2",
-    "@sentry/bun": "10.64.0",
+    "@claxedo/workspace-relay-protocol": "0.7.0",
     "hono": "4.10.7",
-    "jose": "6.0.11"
+    "jose": "6.0.11",
+    "posthog-node": "4.18.0"
   },
   "devDependencies": {
+    "@claxedo/sandbox-manager": "0.7.0",
+    "@daytona/sdk": "0.192.0",
     "@tsconfig/node-lts": "22.0.4",
     "@types/bun": "1.3.13",
     "esbuild": "0.25.12",
+    "miniflare": "4.20260722.0",
     "tsx": "4.22.3",
     "typescript": "catalog:",
-    "@daytona/sdk": "0.192.0"
+    "wrangler": "4.114.0",
+    "@cloudflare/workers-types": "catalog:"
   }
 }