@couch-kit/host 1.7.12 → 1.7.14

package/lib/action-authorization.d.ts

@@ -1,28 +1,2 @@
-/** Error codes surfaced when a client ACTION is rejected before dispatch. */
-export type ActionRejectionCode = "FORBIDDEN_ACTION" | "NOT_JOINED";
-/** Outcome of authorizing an inbound client ACTION message. */
-export type ActionAuthorization = {
-    kind: "allow";
-    playerId: string;
-} | {
-    kind: "reject";
-    code: ActionRejectionCode;
-    message: string;
-};
-/**
- * Decide whether an inbound client ACTION may be dispatched.
- *
- * Rejects, in order:
- * - **Internal action types** — clients must not be able to inject framework
- *   actions (`__HYDRATE__`, `__PLAYER_JOINED__`, etc.) to forge state.
- * - **Un-joined sockets** — a socket with no resolved player ID never completed
- *   a JOIN, so its actions have no owner and must not mutate state.
- *
- * The decision is pure so it can be unit-tested without a WebSocket or React.
- *
- * @param actionType - The `type` field of the client's action payload.
- * @param resolvedPlayerId - The player ID cached for the socket at JOIN time, or
- *   `undefined` if the socket has not joined.
- */
-export declare function authorizeClientAction(actionType: string, resolvedPlayerId: string | undefined): ActionAuthorization;
+export { authorizeClientAction, type ActionAuthorization, type ActionRejectionCode, } from "@couch-kit/runtime";
 //# sourceMappingURL=action-authorization.d.ts.map

package/lib/action-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-authorization.d.ts","sourceRoot":"","sources":["../src/action-authorization.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG,YAAY,CAAC;AAEpE,+DAA+D;AAC/D,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAUnE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC,mBAAmB,CAkBrB"}
+{"version":3,"file":"action-authorization.d.ts","sourceRoot":"","sources":["../src/action-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC"}

package/lib/broadcast-scheduler.d.ts

@@ -1,30 +1,2 @@
-import { MessageTypes, type HostMessage } from "@couch-kit/core";
-/** Default state broadcast throttle (~30fps). */
-export declare const DEFAULT_STATE_THROTTLE_MS = 33;
-export type StateUpdateMessage = Extract<HostMessage, {
-    type: typeof MessageTypes.STATE_UPDATE;
-}>;
-export interface TimerScheduler<TTimer> {
-    setTimeout(callback: () => void, delayMs: number): TTimer;
-    clearTimeout(timer: TTimer): void;
-}
-export interface BroadcastSchedulerOptions<TTimer> {
-    stateThrottleMs?: number;
-    scheduler?: TimerScheduler<TTimer>;
-}
-/**
- * Debounced state-broadcast scheduler used by the host provider.
- * Rapid state changes are coalesced into one broadcast after the latest change.
- */
-export declare class BroadcastScheduler<TTimer = ReturnType<typeof setTimeout>> {
-    private stateThrottleMs;
-    private readonly scheduler;
-    private timer;
-    constructor(options?: BroadcastSchedulerOptions<TTimer>);
-    schedule(callback: () => void): void;
-    cancel(): void;
-    setStateThrottleMs(stateThrottleMs: number): void;
-    hasPendingBroadcast(): boolean;
-}
-export declare function createStateUpdateMessage(newState: unknown, actions: readonly unknown[], timestamp?: number): StateUpdateMessage;
+export { BroadcastScheduler, DEFAULT_STATE_THROTTLE_MS, createStateUpdateMessage, type BroadcastSchedulerOptions, type StateUpdateMessage, type TimerScheduler, } from "@couch-kit/runtime";
 //# sourceMappingURL=broadcast-scheduler.d.ts.map

package/lib/broadcast-scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast-scheduler.d.ts","sourceRoot":"","sources":["../src/broadcast-scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEjE,iDAAiD;AACjD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,WAAW,EACX;IAAE,IAAI,EAAE,OAAO,YAAY,CAAC,YAAY,CAAA;CAAE,CAC3C,CAAC;AAEF,MAAM,WAAW,cAAc,CAAC,MAAM;IACpC,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1D,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAOD,MAAM,WAAW,yBAAyB,CAAC,MAAM;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,qBAAa,kBAAkB,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC;IACpE,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,KAAK,CAAuB;gBAExB,OAAO,GAAE,yBAAyB,CAAC,MAAM,CAAM;IAQ3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI;IAQpC,MAAM,IAAI,IAAI;IAOd,kBAAkB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAIjD,mBAAmB,IAAI,OAAO;CAG/B;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,SAAS,GAAE,MAAmB,GAC7B,kBAAkB,CAapB"}
+{"version":3,"file":"broadcast-scheduler.d.ts","sourceRoot":"","sources":["../src/broadcast-scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC"}

package/lib/message-validation.d.ts

@@ -1,20 +1,2 @@
-import { MessageTypes, type ClientMessage } from "@couch-kit/core";
-type ClientMessageOf<TType extends ClientMessage["type"]> = Extract<ClientMessage, {
-    type: TType;
-}>;
-export type ValidatedClientMessage = {
-    type: typeof MessageTypes.JOIN;
-    payload: {
-        name: string;
-        secret?: unknown;
-        avatar?: unknown;
-        [key: string]: unknown;
-    };
-} | ClientMessageOf<"ACTION"> | ClientMessageOf<"PING"> | ClientMessageOf<"ASSETS_LOADED">;
-/**
- * Validates that an incoming message has the expected shape.
- * Returns true if the message has a processable client-message shape.
- */
-export declare function isValidClientMessage(msg: unknown): msg is ValidatedClientMessage;
-export {};
+export { DEFAULT_MAX_MESSAGE_BYTES, frameByteLength, isValidClientMessage, type ValidatedClientMessage, } from "@couch-kit/runtime";
 //# sourceMappingURL=message-validation.d.ts.map

package/lib/message-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-validation.d.ts","sourceRoot":"","sources":["../src/message-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEnE,KAAK,eAAe,CAAC,KAAK,SAAS,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,CACjE,aAAa,EACb;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,CAChB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B;IACE,IAAI,EAAE,OAAO,YAAY,CAAC,IAAI,CAAC;IAC/B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH,GACD,eAAe,CAAC,QAAQ,CAAC,GACzB,eAAe,CAAC,MAAM,CAAC,GACvB,eAAe,CAAC,eAAe,CAAC,CAAC;AAErC;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,GACX,GAAG,IAAI,sBAAsB,CA8B/B"}
+{"version":3,"file":"message-validation.d.ts","sourceRoot":"","sources":["../src/message-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC"}

package/lib/provider.d.ts

@@ -1,24 +1,17 @@
 import React from "react";
-import { type IGameState, type IAction } from "@couch-kit/core";
-export interface GameHostConfig<S extends IGameState, A extends IAction> {
-    initialState: S;
-    reducer: (state: S, action: A) => S;
+import { type IAction, type IGameState } from "@couch-kit/core";
+import { type GameHostRuntimeConfig } from "@couch-kit/runtime";
+export interface GameHostConfig<S extends IGameState, A extends IAction> extends GameHostRuntimeConfig<S, A> {
     port?: number;
     wsPort?: number;
     devMode?: boolean;
     devServerUrl?: string;
     staticDir?: string;
-    debug?: boolean;
-    /** Timeout (ms) before a disconnected player is permanently removed (default: 5 minutes). */
-    disconnectTimeout?: number;
-    /** State broadcast throttle interval in milliseconds (default: 33ms, ~30fps). */
-    stateThrottleMs?: number;
-    /** Called when a player successfully joins. */
-    onPlayerJoined?: (playerId: string, name: string) => void;
-    /** Called when a player disconnects. */
-    onPlayerLeft?: (playerId: string) => void;
-    /** Called when a server error occurs. */
-    onError?: (error: Error) => void;
+    /**
+     * Maximum size of an inbound client message before parsing.
+     * Defaults to 256 KiB.
+     */
+    maxMessageBytes?: number;
 }
 interface GameHostContextValue<S extends IGameState, A extends IAction> {
     state: S;
@@ -27,34 +20,17 @@ interface GameHostContextValue<S extends IGameState, A extends IAction> {
     serverError: Error | null;
 }
 /**
- * React context provider that turns a React Native TV app into a local game server.
+ * React Native adapter for the transport-neutral authoritative game runtime.
  *
- * Starts a static file server (for the web controller) and a WebSocket game server
- * (for real-time state sync). Manages the canonical game state using the provided
- * reducer and broadcasts state updates to all connected clients.
- *
- * @param config - Host configuration including reducer, initial state, ports, and callbacks.
- *
- * @example
- * ```tsx
- * <GameHostProvider config={{ reducer: gameReducer, initialState }}>
- *   <GameScreen />
- * </GameHostProvider>
- * ```
+ * The runtime owns canonical state and protocol behavior. This provider starts
+ * the native static/WebSocket servers and exposes runtime state through React.
  */
 export declare function GameHostProvider<S extends IGameState, A extends IAction>({ children, config, }: {
     children: React.ReactNode;
     config: GameHostConfig<S, A>;
 }): React.JSX.Element;
 /**
- * React hook to access the game host context.
- *
- * Must be used within a `<GameHostProvider>`. Returns the canonical game state,
- * a dispatch function for actions, the server URL (for QR codes), and any
- * server startup errors.
- *
- * @returns An object with `state`, `dispatch`, `serverUrl`, and `serverError`.
- * @throws If used outside of a `<GameHostProvider>`.
+ * Accesses canonical host state, trusted dispatch, and controller server URL.
  */
 export declare function useGameHost<S extends IGameState, A extends IAction>(): GameHostContextValue<S, A>;
 export {};

package/lib/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAQN,MAAM,OAAO,CAAC;AAGf,OAAO,EAQL,KAAK,UAAU,EACf,KAAK,OAAO,EAEb,MAAM,iBAAiB,CAAC;AAczB,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO;IACrE,YAAY,EAAE,CAAC,CAAC;IAChB,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,wCAAwC;IACxC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,yCAAyC;IACzC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,UAAU,oBAAoB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO;IACpE,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;CAC3B;AAQD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EAAE,EACxE,QAAQ,EACR,MAAM,GACP,EAAE;IACD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;CAC9B,qBAqWA;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,KAK/C,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7C"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAQN,MAAM,OAAO,CAAC;AACf,OAAO,EAGL,KAAK,OAAO,EACZ,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAI5B,MAAM,WAAW,cAAc,CAC7B,CAAC,SAAS,UAAU,EACpB,CAAC,SAAS,OAAO,CACjB,SAAQ,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,oBAAoB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO;IACpE,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;CAC3B;AAOD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EAAE,EACxE,QAAQ,EACR,MAAM,GACP,EAAE;IACD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;CAC9B,qBA4HA;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,KAK/C,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7C"}

package/lib/rate-limiter.d.ts

@@ -1,32 +1,2 @@
-/** Maximum actions per rate-limit window. */
-export declare const RATE_LIMIT_MAX = 60;
-/** Rate-limit window duration (ms). */
-export declare const RATE_LIMIT_WINDOW = 1000;
-export interface RateLimitInfo {
-    count: number;
-    windowStart: number;
-}
-export interface RateLimitResult extends RateLimitInfo {
-    allowed: boolean;
-}
-export interface ActionRateLimiterOptions {
-    maxActions?: number;
-    windowMs?: number;
-    now?: () => number;
-}
-/**
- * Per-socket action limiter that preserves the host provider's original
- * fixed-window algorithm.
- */
-export declare class ActionRateLimiter {
-    private readonly maxActions;
-    private readonly windowMs;
-    private readonly now;
-    private readonly limits;
-    constructor(options?: ActionRateLimiterOptions);
-    record(socketId: string): RateLimitResult;
-    reset(socketId: string): void;
-    clear(): void;
-    get(socketId: string): RateLimitInfo | undefined;
-}
+export { ActionRateLimiter, RATE_LIMIT_MAX, RATE_LIMIT_WINDOW, type ActionRateLimiterOptions, type RateLimitInfo, type RateLimitResult, } from "@couch-kit/runtime";
 //# sourceMappingURL=rate-limiter.d.ts.map

package/lib/rate-limiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAE/C,OAAO,GAAE,wBAA6B;IAMlD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAiBzC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI7B,KAAK,IAAI,IAAI;IAIb,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;CAGjD"}
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC"}

package/lib/session-manager.d.ts

@@ -1,62 +1,2 @@
-import { type IGameState, type InternalAction } from "@couch-kit/core";
-export interface SessionTimerScheduler<TTimer> {
-    setTimeout(callback: () => void, delayMs: number): TTimer;
-    clearTimeout(timer: TTimer): void;
-}
-export interface JoinSessionPayload {
-    name: string;
-    avatar?: string;
-    secret: string;
-}
-export interface HostSessionManagerOptions<TTimer> {
-    disconnectTimeout?: number;
-    getDisconnectTimeout?: () => number;
-    scheduler?: SessionTimerScheduler<TTimer>;
-    derivePlayerId?: (secret: string) => Promise<string>;
-    derivePlayerIdLegacy?: (secret: string) => string;
-}
-export type JoinSessionResult<S extends IGameState> = {
-    playerId: string;
-    socketId: string;
-    secret: string;
-    isReconnect: boolean;
-    action: InternalAction<S>;
-};
-export type DisconnectSessionResult<S extends IGameState> = {
-    kind: "unknown";
-} | {
-    kind: "stale";
-    playerId: string;
-    secret: string;
-} | {
-    kind: "left";
-    playerId: string;
-    secret: string;
-    action: InternalAction<S>;
-};
-type PlayersSource<S extends IGameState> = S["players"] | (() => S["players"]);
-/**
- * Tracks host player sessions by secret and socket ID, including reconnects and
- * delayed cleanup of disconnected players.
- */
-export declare class HostSessionManager<TTimer = ReturnType<typeof setTimeout>> {
-    private readonly sessions;
-    private readonly reverseMap;
-    private readonly cleanupTimers;
-    private readonly socketIdToPlayerId;
-    private readonly scheduler;
-    private readonly getDisconnectTimeout;
-    private readonly derivePlayerIdFn;
-    private readonly derivePlayerIdLegacyFn;
-    constructor(options?: HostSessionManagerOptions<TTimer>);
-    handleJoin<S extends IGameState>(socketId: string, payload: JoinSessionPayload, playersSource: PlayersSource<S>): Promise<JoinSessionResult<S>>;
-    handleDisconnect<S extends IGameState>(socketId: string): DisconnectSessionResult<S>;
-    scheduleRemoval(playerId: string, secret: string, onRemove: (playerId: string) => void): void;
-    cancelRemoval(playerId: string): void;
-    clearRemovalTimers(): void;
-    getPlayerIdForSocket(socketId: string): string | undefined;
-    getSocketIdForSecret(secret: string): string | undefined;
-    hasPendingRemoval(playerId: string): boolean;
-}
-export {};
+export { HostSessionManager, type DisconnectSessionResult, type HostSessionManagerOptions, type JoinSessionPayload, type JoinSessionResult, type SessionTimerScheduler, } from "@couch-kit/runtime";
 //# sourceMappingURL=session-manager.d.ts.map

package/lib/session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../src/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,qBAAqB,CAAC,MAAM;IAC3C,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1D,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AASD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC1C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD;AAED,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,UAAU,IAAI;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,UAAU,IACpD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;CAC3B,CAAC;AAEN,KAAK,aAAa,CAAC,CAAC,SAAS,UAAU,IACnC,CAAC,CAAC,SAAS,CAAC,GACZ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEzB;;;GAGG;AACH,qBAAa,kBAAkB,CAC7B,MAAM,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC;IAEtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAe;IACpD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA6B;gBAExD,OAAO,GAAE,yBAAyB,CAAC,MAAM,CAAM;IAYrD,UAAU,CAAC,CAAC,SAAS,UAAU,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAoChC,gBAAgB,CAAC,CAAC,SAAS,UAAU,EACnC,QAAQ,EAAE,MAAM,GACf,uBAAuB,CAAC,CAAC,CAAC;IAwB7B,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GACnC,IAAI;IAUP,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQrC,kBAAkB,IAAI,IAAI;IAO1B,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI1D,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxD,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAG7C"}
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../src/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,oBAAoB,CAAC"}

package/lib/websocket.d.ts

@@ -8,6 +8,13 @@ import { EventEmitter } from "./event-emitter";
 export interface WebSocketConfig {
     port: number;
     debug?: boolean;
+    /**
+     * Maximum size (in bytes) of an inbound client message. Frames larger than
+     * this are discarded before parsing, bounding the memory a single client can
+     * force the host to allocate. Defaults to {@link DEFAULT_MAX_MESSAGE_BYTES}
+     * (256 KiB).
+     */
+    maxMessageBytes?: number;
     /**
      * @deprecated No effect. The underlying nitro-http WebSocket transport
      * manages frame sizing internally and this value is never read. This field
@@ -41,6 +48,7 @@ export declare class GameWebSocketServer extends EventEmitter<WebSocketServerEve
     private clients;
     private port;
     private debug;
+    private maxMessageBytes;
     constructor(config: WebSocketConfig);
     private log;
     start(): Promise<void>;

package/lib/websocket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../src/websocket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,8CAA8C;AAC9C,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;CACvB,CAAC;AAOF,qBAAa,mBAAoB,SAAQ,YAAY,CAAC,qBAAqB,CAAC;IAC1E,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,OAAO,CAA2C;IAC1D,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,KAAK,CAAU;gBAEX,MAAM,EAAE,eAAe;IAUnC,OAAO,CAAC,GAAG;IAME,KAAK;IA6FL,IAAI;IAoBjB;;;OAGG;IACI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;IAsB3C;;;OAGG;IACI,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM;IAoBlD,yDAAyD;IACzD,IAAW,WAAW,IAAI,MAAM,CAE/B;CACF"}
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../src/websocket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAO/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,8CAA8C;AAC9C,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;CACvB,CAAC;AAOF,qBAAa,mBAAoB,SAAQ,YAAY,CAAC,qBAAqB,CAAC;IAC1E,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,OAAO,CAA2C;IAC1D,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,eAAe,CAAS;gBAEpB,MAAM,EAAE,eAAe;IAYnC,OAAO,CAAC,GAAG;IAME,KAAK;IAuGL,IAAI;IAoBjB;;;OAGG;IACI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;IAsB3C;;;OAGG;IACI,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM;IAoBlD,yDAAyD;IACzD,IAAW,WAAW,IAAI,MAAM,CAE/B;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@couch-kit/host",
-  "version": "1.7.12",
+  "version": "1.7.14",
   "publishConfig": {
     "access": "public",
     "provenance": true
@@ -58,17 +58,22 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@couch-kit/core": "0.9.2",
+    "@couch-kit/core": "0.9.3",
+    "@couch-kit/runtime": "0.1.0",
     "buffer": "^6.0.3",
     "js-sha1": "^0.7.0",
     "react-native-nitro-http-server": "^1.6.1"
   },
   "devDependencies": {
+    "@happy-dom/global-registrator": "^20.10.6",
+    "@testing-library/react": "^16.3.2",
     "@types/react": "^19.2.17",
-    "react": "19.0.4",
-    "react-native": "0.83.2",
-    "del-cli": "^5.1.0",
-    "jest": "^29.7.0"
+    "@types/react-dom": "^19",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "react-native": "0.86.0",
+    "del-cli": "^7.0.0",
+    "jest": "^30.0.0"
   },
   "peerDependencies": {
     "react": ">=18.2.0",

package/src/action-authorization.ts

@@ -1,55 +1,5 @@
-import { InternalActionTypes } from "@couch-kit/core";
-
-/** Error codes surfaced when a client ACTION is rejected before dispatch. */
-export type ActionRejectionCode = "FORBIDDEN_ACTION" | "NOT_JOINED";
-
-/** Outcome of authorizing an inbound client ACTION message. */
-export type ActionAuthorization =
-  | { kind: "allow"; playerId: string }
-  | { kind: "reject"; code: ActionRejectionCode; message: string };
-
-const INTERNAL_ACTION_TYPES = new Set<string>([
-  InternalActionTypes.HYDRATE,
-  InternalActionTypes.PLAYER_JOINED,
-  InternalActionTypes.PLAYER_LEFT,
-  InternalActionTypes.PLAYER_RECONNECTED,
-  InternalActionTypes.PLAYER_REMOVED,
-]);
-
-/**
- * Decide whether an inbound client ACTION may be dispatched.
- *
- * Rejects, in order:
- * - **Internal action types** — clients must not be able to inject framework
- *   actions (`__HYDRATE__`, `__PLAYER_JOINED__`, etc.) to forge state.
- * - **Un-joined sockets** — a socket with no resolved player ID never completed
- *   a JOIN, so its actions have no owner and must not mutate state.
- *
- * The decision is pure so it can be unit-tested without a WebSocket or React.
- *
- * @param actionType - The `type` field of the client's action payload.
- * @param resolvedPlayerId - The player ID cached for the socket at JOIN time, or
- *   `undefined` if the socket has not joined.
- */
-export function authorizeClientAction(
-  actionType: string,
-  resolvedPlayerId: string | undefined,
-): ActionAuthorization {
-  if (INTERNAL_ACTION_TYPES.has(actionType)) {
-    return {
-      kind: "reject",
-      code: "FORBIDDEN_ACTION",
-      message: "Internal action types cannot be dispatched by clients",
-    };
-  }
-
-  if (!resolvedPlayerId) {
-    return {
-      kind: "reject",
-      code: "NOT_JOINED",
-      message: "You must JOIN before dispatching actions",
-    };
-  }
-
-  return { kind: "allow", playerId: resolvedPlayerId };
-}
+export {
+  authorizeClientAction,
+  type ActionAuthorization,
+  type ActionRejectionCode,
+} from "@couch-kit/runtime";

package/src/broadcast-scheduler.ts

@@ -1,84 +1,8 @@
-import { MessageTypes, type HostMessage } from "@couch-kit/core";
-
-/** Default state broadcast throttle (~30fps). */
-export const DEFAULT_STATE_THROTTLE_MS = 33;
-
-export type StateUpdateMessage = Extract<
-  HostMessage,
-  { type: typeof MessageTypes.STATE_UPDATE }
->;
-
-export interface TimerScheduler<TTimer> {
-  setTimeout(callback: () => void, delayMs: number): TTimer;
-  clearTimeout(timer: TTimer): void;
-}
-
-const defaultTimerScheduler: TimerScheduler<ReturnType<typeof setTimeout>> = {
-  setTimeout: (callback, delayMs) => setTimeout(callback, delayMs),
-  clearTimeout: (timer) => clearTimeout(timer),
-};
-
-export interface BroadcastSchedulerOptions<TTimer> {
-  stateThrottleMs?: number;
-  scheduler?: TimerScheduler<TTimer>;
-}
-
-/**
- * Debounced state-broadcast scheduler used by the host provider.
- * Rapid state changes are coalesced into one broadcast after the latest change.
- */
-export class BroadcastScheduler<TTimer = ReturnType<typeof setTimeout>> {
-  private stateThrottleMs: number;
-  private readonly scheduler: TimerScheduler<TTimer>;
-  private timer: TTimer | null = null;
-
-  constructor(options: BroadcastSchedulerOptions<TTimer> = {}) {
-    this.stateThrottleMs =
-      options.stateThrottleMs ?? DEFAULT_STATE_THROTTLE_MS;
-    this.scheduler =
-      options.scheduler ??
-      (defaultTimerScheduler as unknown as TimerScheduler<TTimer>);
-  }
-
-  schedule(callback: () => void): void {
-    this.cancel();
-    this.timer = this.scheduler.setTimeout(() => {
-      this.timer = null;
-      callback();
-    }, this.stateThrottleMs);
-  }
-
-  cancel(): void {
-    if (this.timer) {
-      this.scheduler.clearTimeout(this.timer);
-      this.timer = null;
-    }
-  }
-
-  setStateThrottleMs(stateThrottleMs: number): void {
-    this.stateThrottleMs = stateThrottleMs;
-  }
-
-  hasPendingBroadcast(): boolean {
-    return this.timer !== null;
-  }
-}
-
-export function createStateUpdateMessage(
-  newState: unknown,
-  actions: readonly unknown[],
-  timestamp: number = Date.now(),
-): StateUpdateMessage {
-  return {
-    type: MessageTypes.STATE_UPDATE,
-    payload: {
-      newState,
-      timestamp,
-      ...(actions.length === 1
-        ? { action: actions[0] }
-        : actions.length > 1
-          ? { action: actions }
-          : {}),
-    },
-  };
-}
+export {
+  BroadcastScheduler,
+  DEFAULT_STATE_THROTTLE_MS,
+  createStateUpdateMessage,
+  type BroadcastSchedulerOptions,
+  type StateUpdateMessage,
+  type TimerScheduler,
+} from "@couch-kit/runtime";

package/src/message-validation.ts

@@ -1,58 +1,6 @@
-import { MessageTypes, type ClientMessage } from "@couch-kit/core";
-
-type ClientMessageOf<TType extends ClientMessage["type"]> = Extract<
-  ClientMessage,
-  { type: TType }
->;
-
-export type ValidatedClientMessage =
-  | {
-      type: typeof MessageTypes.JOIN;
-      payload: {
-        name: string;
-        secret?: unknown;
-        avatar?: unknown;
-        [key: string]: unknown;
-      };
-    }
-  | ClientMessageOf<"ACTION">
-  | ClientMessageOf<"PING">
-  | ClientMessageOf<"ASSETS_LOADED">;
-
-/**
- * Validates that an incoming message has the expected shape.
- * Returns true if the message has a processable client-message shape.
- */
-export function isValidClientMessage(
-  msg: unknown,
-): msg is ValidatedClientMessage {
-  if (typeof msg !== "object" || msg === null) return false;
-  const m = msg as Record<string, unknown>;
-  if (typeof m.type !== "string") return false;
-
-  switch (m.type) {
-    case MessageTypes.JOIN:
-      return (
-        typeof m.payload === "object" &&
-        m.payload !== null &&
-        typeof (m.payload as Record<string, unknown>).name === "string"
-      );
-    case MessageTypes.ACTION:
-      return (
-        typeof m.payload === "object" &&
-        m.payload !== null &&
-        typeof (m.payload as Record<string, unknown>).type === "string"
-      );
-    case MessageTypes.PING:
-      return (
-        typeof m.payload === "object" &&
-        m.payload !== null &&
-        typeof (m.payload as Record<string, unknown>).id === "string" &&
-        typeof (m.payload as Record<string, unknown>).timestamp === "number"
-      );
-    case MessageTypes.ASSETS_LOADED:
-      return m.payload === true;
-    default:
-      return false;
-  }
-}
+export {
+  DEFAULT_MAX_MESSAGE_BYTES,
+  frameByteLength,
+  isValidClientMessage,
+  type ValidatedClientMessage,
+} from "@couch-kit/runtime";