@claxedo/workspace-relay 0.7.0 → 0.8.0

package/dist/cloudflare.d.ts

@@ -100,8 +100,16 @@ export type WorkspaceRelayDurableObjectRoomOptions = WorkspaceRelayOptions & {
     /**
      * Interval for the alarm-based revocation re-check that covers hibernated
      * connections, where `setInterval` watchers cannot survive. 0 disables it.
+     * The hibernated host-generation check rides the same alarm.
      */
     hibernatedRevocationCheckIntervalMs?: number;
+    /**
+     * How often an established host tunnel's serving generation is re-checked
+     * against `resolveHostGeneration` on the non-hibernating path. Defaults to
+     * 30s; 0 disables it. The lookup may answer from its cache, so a superseded
+     * tunnel closes within this interval plus the lookup's cache TTL.
+     */
+    hostGenerationCheckIntervalMs?: number;
     /**
      * Durable Object alarm surface, supplied by the Worker (`state.storage`) so the
      * room can schedule the hibernation-safe revocation re-check. Absent on the
@@ -146,6 +154,11 @@ export type WorkspaceRelaySocketAttachment = {
     hostId: string;
     workspaceIds: string[];
     connectedAt: number;
+    /** Fence pair from the admitting Host Tunnel Token; absent on sockets attached before the fence existed. */
+    enrollmentId?: string;
+    generation?: number;
+    /** Consecutive unavailable generation lookups, persisted so hibernation cannot reset the outage grace. */
+    generationCheckFailures?: number;
 } | {
     kind: "user-hosted-client";
     channelId: string;
@@ -201,7 +214,7 @@ export declare function createWorkspaceRelayDurableObjectRoom(options: Workspace
     webSocketMessage(socket: WorkspaceRelayDurableObjectSocket, message: string | ArrayBuffer): Promise<void>;
     /**
      * Durable Object alarm entry point. Runs the hibernation-safe revocation
-     * sweep (W6b.2). The Worker must forward `alarm()` here.
+     * sweep. The Worker must forward `alarm()` here.
      */
     alarm(): Promise<void>;
     webSocketClose(socket: WorkspaceRelayDurableObjectSocket, code: number, reason: string): void;

package/dist/directory.d.ts

@@ -1,3 +1,8 @@
+/**
+ * One tunnel's presence, recorded once per workspace it serves. `workspaceIds`
+ * is the full set that tunnel registered, so a reader that found the entry
+ * through one workspace still sees the others.
+ */
 export type HostTunnelPresence = {
     hostId: string;
     workspaceIds: string[];
@@ -5,13 +10,21 @@ export type HostTunnelPresence = {
     lastPongAt: number;
     expiresAt: number;
 };
+/**
+ * Presence is keyed by (host, workspace): one host may hold a separate tunnel
+ * per workspace on a Bun relay, and a later registration for a workspace takes
+ * that workspace over without touching the host's other entries. `recordPong`
+ * and `disconnectHost` take the optional workspace set for the same reason —
+ * without it they act on every entry of the host, which is what a
+ * single-workspace Cloudflare room wants.
+ */
 export type WorkspaceRelayDirectory = {
     registerHostTunnel(input: {
         hostId: string;
         workspaceIds: string[];
     }): HostTunnelPresence;
-    recordPong(hostId: string): HostTunnelPresence | undefined;
-    disconnectHost(hostId: string): void;
+    recordPong(hostId: string, workspaceIds?: string[]): HostTunnelPresence | undefined;
+    disconnectHost(hostId: string, workspaceIds?: string[]): void;
     activeHost(input: {
         hostId: string;
         workspaceId: string;
@@ -29,10 +42,8 @@ export type WorkspaceRelayDirectory = {
      */
     dispose(): void;
     /**
-     * T31: count of currently-active (non-expired) host presence entries.
-     * Equivalent to running `sweep()` then returning the residual map size, but
-     * implemented as a single pass without mutating eviction state when the
-     * caller only wants a snapshot. Surfaced via the `/metrics` endpoint as
+     * Count of hosts with at least one non-expired presence entry, taken as a
+     * snapshot without evicting. Surfaced via `/metrics` as
      * `directory.activeHostCount`.
      */
     size(): number;

package/dist/http.d.ts

@@ -1,4 +1,5 @@
-export declare function bearerToken(header: string | null | undefined): string | undefined;
+import { bearerToken } from "@claxedo/helpers/string";
+export { bearerToken };
 export declare function errorBody(code: string, message: string): {
     error: {
         code: string;

package/dist/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./auth";
-export * from "./bun";
 export * from "./cloudflare";
 export * from "./cors-origins";
 export * from "./directory";