@crowdedkingdoms/crowdy-dsh 0.3.3 → 0.3.4-dev.1

package/dist/dsh-web/BUILD.json

@@ -1,10 +1,10 @@
 {
   "package": "@crowdedkingdoms/crowdy-dsh",
-  "version": "0.3.3",
-  "builtAt": "2026-09-16T20:48:04.803Z",
+  "version": "0.3.4",
+  "builtAt": "2026-09-21T13:56:33.466Z",
   "source": {
     "repository": "CrowdedKingdoms/crowdy-dsh",
-    "commit": "a76e2ce03810958937708b9a22408249d5e74b76",
+    "commit": "82dfc27359cf226fd25238720d09807282c31118",
     "dirty": false
   },
   "upstream": {
@@ -15,7 +15,7 @@
   },
   "crowdyjs": {
     "name": "@crowdedkingdoms/crowdyjs",
-    "version": "17.5.0",
+    "version": "17.6.0-dev.1",
     "source": "node_modules"
   },
   "files": {
@@ -112,7 +112,7 @@
     "manifest.webmanifest": "sha256:9b54d57eea00f2fdd1affe6e7999a4209a515755f12ac1a3299da2d55e178d4c",
     "preview/bootstrap-CYECZNXt.js": "sha256:9f303a0485c0badfdd19fad0c357ef050c5b9a343744ab5bf0c70015e7d95092",
     "preview/crowdy-boot-Cklh1qNl.js": "sha256:b21e8eb126e1cd8a52159d2d577e610df6c8af36a436f9ed5028cfabd11a85ff",
-    "preview/vfs-image.tar.gz": "sha256:cf70d58230fc6e41e993178fe66a3dfcefa9be60e4b93032943335fa4e1850e4",
+    "preview/vfs-image.tar.gz": "sha256:f35752ca934b215b2634204b8532a81263c807a620af929c1c1806656e186af5",
     "preview/worker-C8-_ANaz.js": "sha256:81099e5732dfe0c32bacd5897316b7956c5a0a22da01b4a0c6e21d0a3b9d9aa1"
   }
 }

package/lib/vendor/crowdyjs-sdk.js

@@ -5889,6 +5889,11 @@ function packMessageBundle(members) {
 }
 var WireMessageType = {
   MESSAGE_BUNDLE: 2,
+  // Buddy v0.30.0: the client advertises what it can read; a session that
+  // advertised BUNDLE_SIGNED receives its bundles with ONE trailing HMAC over the
+  // datagram and members without per-member HMACs (containsAuth = 0).
+  CLIENT_CAPABILITIES: 29,
+  MESSAGE_BUNDLE_SIGNED: 30,
   GENERIC_ERROR_MESSAGE: 3,
   CHANNEL_MESSAGE_REQUEST: 17,
   CHANNEL_MESSAGE_NOTIFICATION: 18,
@@ -6016,6 +6021,16 @@ async function serializeSpatial(ctx, messageType, appId, chunk, distance, decayR
   tailView.setUint8(dataLen + HMAC_SIZE + 8, sequenceNumber & 255);
   return out;
 }
+var ClientCapability = {
+  /** This client parses MESSAGE_BUNDLE_SIGNED (one HMAC per downlink bundle). */
+  BUNDLE_SIGNED: 1
+};
+var SDK_CAPABILITIES = ClientCapability.BUNDLE_SIGNED;
+function serializeClientCapabilities(ctx, appId, flags = SDK_CAPABILITIES, sequenceNumber = 0) {
+  const payload = new Uint8Array(4);
+  new DataView(payload.buffer).setUint32(0, flags >>> 0, true);
+  return serializeSpatial(ctx, WireMessageType.CLIENT_CAPABILITIES, appId, { x: 0, y: 0, z: 0 }, 0, 0, "", payload, sequenceNumber);
+}
 function serializeActorUpdate(ctx, input) {
   return serializeSpatial(ctx, WireMessageType.ACTOR_UPDATE_REQUEST_2, input.appId, input.chunk, input.distance ?? 8, input.decayRate ?? 1, input.uuid, decodeBase64(input.state ?? ""), input.sequenceNumber ?? 0);
 }
@@ -6278,23 +6293,12 @@ function parseRelayFrame(bytes) {
   if (bytes.length < 1)
     return [];
   if (bytes[0] === WireMessageType.MESSAGE_BUNDLE) {
-    const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-    const out = [];
-    let off = 1;
-    while (off + 2 <= bytes.length) {
-      const len = view.getUint16(off, true);
-      off += 2;
-      if (off + len > bytes.length)
-        break;
-      try {
-        const parsed = parseOne(bytes.subarray(off, off + len));
-        if (parsed)
-          out.push(parsed);
-      } catch {
-      }
-      off += len;
-    }
-    return out;
+    return walkBundleMembers(bytes, bytes.length);
+  }
+  if (bytes[0] === WireMessageType.MESSAGE_BUNDLE_SIGNED) {
+    if (bytes.length <= 1 + HMAC_SIZE)
+      return [];
+    return walkBundleMembers(bytes, bytes.length - HMAC_SIZE);
   }
   try {
     const parsed = parseOne(bytes);
@@ -6303,6 +6307,25 @@ function parseRelayFrame(bytes) {
     return [];
   }
 }
+function walkBundleMembers(bytes, end) {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const out = [];
+  let off = 1;
+  while (off + 2 <= end) {
+    const len = view.getUint16(off, true);
+    off += 2;
+    if (off + len > end)
+      break;
+    try {
+      const parsed = parseOne(bytes.subarray(off, off + len));
+      if (parsed)
+        out.push(parsed);
+    } catch {
+    }
+    off += len;
+  }
+  return out;
+}
 
 var RELAY_SUBPROTOCOL = "crowdy-relay-v1";
 var BEARER_PREFIX = "bearer.";
@@ -6344,6 +6367,7 @@ var BinaryRelayTransport = class {
     this.everReady = false;
     this.retryTimer = null;
     this.generation = 0;
+    this.capsTimer = null;
     this.pendingMembers = [];
     this.pendingBytes = 0;
     this.bundleTimer = null;
@@ -6361,6 +6385,8 @@ var BinaryRelayTransport = class {
     this.retryMaxDelayMs = config.retryMaxDelayMs ?? 5e3;
     this.bundleSends = config.bundleSends ?? true;
     this.bundleWindowMs = Math.max(0, config.bundleWindowMs ?? 1);
+    this.advertiseCapabilities = config.advertiseCapabilities ?? true;
+    this.capabilitiesIntervalMs = Math.max(1e3, config.capabilitiesIntervalMs ?? 15e3);
   }
   /** Snapshot of the uplink counters. */
   stats() {
@@ -6389,9 +6415,11 @@ var BinaryRelayTransport = class {
       this.retryTimer = null;
     }
     this.generation += 1;
+    this.stopCapabilities();
     const ws = this.ws;
     this.ws = null;
     this.signContext = null;
+    this.stopCapabilities();
     if (ws) {
       try {
         ws.close(1e3, "client-disconnect");
@@ -6513,6 +6541,7 @@ var BinaryRelayTransport = class {
     ws.binaryType = "arraybuffer";
     this.ws = ws;
     this.signContext = null;
+    this.stopCapabilities();
     let sawReady = false;
     ws.onmessage = (event) => {
       if (generation !== this.generation)
@@ -6543,6 +6572,8 @@ var BinaryRelayTransport = class {
       this.ws = null;
       const hadReady = this.signContext != null || sawReady;
       this.signContext = null;
+      this.stopCapabilities();
+      this.stopCapabilities();
       if (!this.desired) {
         this.callbacks.onStatus("disconnected");
         return;
@@ -6586,6 +6617,44 @@ var BinaryRelayTransport = class {
     this.preReadyFailures = 0;
     this.retries = 0;
     this.callbacks.onStatus("connected");
+    this.startCapabilities();
+  }
+  /**
+   * Advertise this build's capabilities now and on a timer while ready. The
+   * server binds them to the router serving our flow; a token refresh or a
+   * relay-side Buddy migration silently resets that, and until the next
+   * advertisement we are served in the older per-member form, which we parse too.
+   */
+  startCapabilities() {
+    this.stopCapabilities();
+    if (!this.advertiseCapabilities)
+      return;
+    void this.sendCapabilities();
+    const timer = setInterval(() => {
+      void this.sendCapabilities();
+    }, this.capabilitiesIntervalMs);
+    timer.unref?.();
+    this.capsTimer = timer;
+  }
+  stopCapabilities() {
+    if (this.capsTimer) {
+      clearInterval(this.capsTimer);
+      this.capsTimer = null;
+    }
+  }
+  async sendCapabilities() {
+    const ctx = this.signContext;
+    if (!ctx || this.appId == null || !this.isReady())
+      return;
+    try {
+      const frame = await serializeClientCapabilities(ctx, this.appId);
+      if (this.signContext !== ctx)
+        return;
+      this.sendFrame(frame);
+      this.flushSends();
+    } catch (error) {
+      this.logger.debug?.(`capabilities not sent: ${String(error)}`);
+    }
   }
   /**
    * The server wants this client on a different instance.

package/lib/vendor/crowdyjs-sdk.version.json

@@ -1,5 +1,5 @@
 {
   "name": "@crowdedkingdoms/crowdyjs",
-  "version": "17.5.0",
+  "version": "17.6.0-dev.1",
   "source": "node_modules"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdedkingdoms/crowdy-dsh",
-  "version": "0.3.3",
+  "version": "0.3.4-dev.1",
   "private": false,
   "license": "MIT",
   "repository": {
@@ -94,11 +94,11 @@
   "crowdyDsh": {
     "build": {
       "package": "@crowdedkingdoms/crowdy-dsh",
-      "version": "0.3.3",
-      "builtAt": "2026-09-16T20:48:04.803Z",
+      "version": "0.3.4",
+      "builtAt": "2026-09-21T13:56:33.466Z",
       "source": {
         "repository": "CrowdedKingdoms/crowdy-dsh",
-        "commit": "a76e2ce03810958937708b9a22408249d5e74b76",
+        "commit": "82dfc27359cf226fd25238720d09807282c31118",
         "dirty": false
       },
       "upstream": {
@@ -109,7 +109,7 @@
       },
       "crowdyjs": {
         "name": "@crowdedkingdoms/crowdyjs",
-        "version": "17.5.0",
+        "version": "17.6.0-dev.1",
         "source": "node_modules"
       },
       "files": {
@@ -206,7 +206,7 @@
         "manifest.webmanifest": "sha256:9b54d57eea00f2fdd1affe6e7999a4209a515755f12ac1a3299da2d55e178d4c",
         "preview/bootstrap-CYECZNXt.js": "sha256:9f303a0485c0badfdd19fad0c357ef050c5b9a343744ab5bf0c70015e7d95092",
         "preview/crowdy-boot-Cklh1qNl.js": "sha256:b21e8eb126e1cd8a52159d2d577e610df6c8af36a436f9ed5028cfabd11a85ff",
-        "preview/vfs-image.tar.gz": "sha256:cf70d58230fc6e41e993178fe66a3dfcefa9be60e4b93032943335fa4e1850e4",
+        "preview/vfs-image.tar.gz": "sha256:f35752ca934b215b2634204b8532a81263c807a620af929c1c1806656e186af5",
         "preview/worker-C8-_ANaz.js": "sha256:81099e5732dfe0c32bacd5897316b7956c5a0a22da01b4a0c6e21d0a3b9d9aa1"
       }
     }