@edge-base/server 0.2.4 → 0.2.5

package/admin-build/_app/immutable/nodes/{9.DOkvfmir.js → 9.Dmxf6zAC.js}

@@ -1 +1 @@
-import"../chunks/CWj6FrbW.js";import{o as U}from"../chunks/Bn2NtlTj.js";import{p as j,a as z,f as G,c as b,g as t,s as m,r as g,u as n,b as y,d as D,t as J}from"../chunks/BdTBlfLy.js";import{d as K,s as N,a as O}from"../chunks/DtZk82gG.js";import{a as Q,t as V,e as W,i as X}from"../chunks/C6lpZLE2.js";import{a as F,f as I}from"../chunks/DEELgv7K.js";import{s as Y}from"../chunks/CoI6jjbg.js";import{P as Z}from"../chunks/B8s_s9QY.js";import{a as tt}from"../chunks/Q2nPFxS6.js";import{M as _,T as et}from"../chunks/5RQRbp5q.js";import{D as at,T as rt}from"../chunks/BgDzp0i0.js";var nt=I("<button> </button>"),st=I('<div class="range-selector"></div>'),ot=I('<div class="analytics-grid"><!> <!> <!> <!></div> <div class="analytics-chart"><!></div> <div class="analytics-bottom"><!> <!></div>',1);function bt(w,M){j(M,!0);let s=D(!0),o=D(null),p=D("24h");const T=[{value:"1h",label:"1H"},{value:"6h",label:"6H"},{value:"24h",label:"24H"},{value:"7d",label:"7D"},{value:"30d",label:"30D"}],k=n(()=>()=>{switch(t(p)){case"1h":return"minute";case"6h":case"24h":return"hour";default:return"day"}});async function $(){try{const e=await Q.fetch(`data/analytics?range=${t(p)}&category=function&metric=overview&groupBy=${t(k)()}`);y(o,e,!0)}catch(e){V(e instanceof Error?e.message:"Failed to load functions analytics")}finally{y(s,!1)}}function A(e){y(p,e,!0),y(s,!0),$()}U(()=>{$();const e=setInterval($,3e4);return()=>clearInterval(e)});const H=n(()=>()=>{var c;if(!((c=t(o))!=null&&c.summary))return 0;const{totalRequests:e,totalErrors:a}=t(o).summary;return e>0?a/e*100:0}),B=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.timeSeries)||[]).map(a=>({timestamp:a.timestamp,value:a.requests??a.value??0}))}),C=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.breakdown)||[]).map(a=>({label:a.label||"other",value:a.count}))}),E=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.topItems)||[]).map(a=>({label:a.label,count:a.count,secondary:`${Math.round(a.avgLatency)}ms · ${a.errorRate.toFixed(1)}% 5xx`}))});Z(w,{title:"Functions Analytics",description:"Serverless function execution and performance metrics",get docsHref(){return tt},actions:a=>{var c=st();W(c,21,()=>T,X,(f,d)=>{var l=nt();let v;var h=b(l,!0);g(l),J(()=>{v=Y(l,1,"range-btn",null,v,{"range-btn--active":t(p)===t(d).value}),N(h,t(d).label)}),O("click",l,()=>A(t(d).value)),F(f,l)}),g(c),F(a,c)},children:(a,c)=>{var f=ot(),d=G(f),l=b(d);{let r=n(()=>{var i,u;return((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.totalRequests)??0});_(l,{label:"Invocations",get value(){return t(r)},get loading(){return t(s)}})}var v=m(l,2);{let r=n(()=>{var i,u;return((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.uniqueUsers)??0});_(v,{label:"Unique Users",get value(){return t(r)},get loading(){return t(s)}})}var h=m(v,2);{let r=n(()=>t(H)().toFixed(1));_(h,{label:"5xx Rate",get value(){return t(r)},unit:"%",get loading(){return t(s)}})}var L=m(h,2);{let r=n(()=>{var i,u;return Math.round(((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.avgLatency)??0)});_(L,{label:"Avg Duration",get value(){return t(r)},unit:"ms",get loading(){return t(s)}})}g(d);var x=m(d,2),P=b(x);{let r=n(()=>t(B)());et(P,{get data(){return t(r)},type:"bar",height:240,label:"Function invocations over time",get loading(){return t(s)},color:"#dc2626"})}g(x);var R=m(x,2),q=b(R);{let r=n(()=>t(C)());at(q,{get items(){return t(r)},title:"Functions by invocation count",get loading(){return t(s)}})}var S=m(q,2);{let r=n(()=>t(E)());rt(S,{get items(){return t(r)},title:"Top Functions",get loading(){return t(s)}})}g(R),F(a,f)}}),z()}K(["click"]);export{bt as component};
+import"../chunks/CWj6FrbW.js";import{o as U}from"../chunks/Bn2NtlTj.js";import{p as j,a as z,f as G,c as b,g as t,s as m,r as g,u as n,b as y,d as D,t as J}from"../chunks/BdTBlfLy.js";import{d as K,s as N,a as O}from"../chunks/DtZk82gG.js";import{a as Q,t as V,e as W,i as X}from"../chunks/BEW7Ez_g.js";import{a as F,f as I}from"../chunks/DEELgv7K.js";import{s as Y}from"../chunks/CoI6jjbg.js";import{P as Z}from"../chunks/B8s_s9QY.js";import{a as tt}from"../chunks/Q2nPFxS6.js";import{M as _,T as et}from"../chunks/BqTb6Mxk.js";import{D as at,T as rt}from"../chunks/D2j3I1VQ.js";var nt=I("<button> </button>"),st=I('<div class="range-selector"></div>'),ot=I('<div class="analytics-grid"><!> <!> <!> <!></div> <div class="analytics-chart"><!></div> <div class="analytics-bottom"><!> <!></div>',1);function bt(w,M){j(M,!0);let s=D(!0),o=D(null),p=D("24h");const T=[{value:"1h",label:"1H"},{value:"6h",label:"6H"},{value:"24h",label:"24H"},{value:"7d",label:"7D"},{value:"30d",label:"30D"}],k=n(()=>()=>{switch(t(p)){case"1h":return"minute";case"6h":case"24h":return"hour";default:return"day"}});async function $(){try{const e=await Q.fetch(`data/analytics?range=${t(p)}&category=function&metric=overview&groupBy=${t(k)()}`);y(o,e,!0)}catch(e){V(e instanceof Error?e.message:"Failed to load functions analytics")}finally{y(s,!1)}}function A(e){y(p,e,!0),y(s,!0),$()}U(()=>{$();const e=setInterval($,3e4);return()=>clearInterval(e)});const H=n(()=>()=>{var c;if(!((c=t(o))!=null&&c.summary))return 0;const{totalRequests:e,totalErrors:a}=t(o).summary;return e>0?a/e*100:0}),B=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.timeSeries)||[]).map(a=>({timestamp:a.timestamp,value:a.requests??a.value??0}))}),C=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.breakdown)||[]).map(a=>({label:a.label||"other",value:a.count}))}),E=n(()=>()=>{var e;return(((e=t(o))==null?void 0:e.topItems)||[]).map(a=>({label:a.label,count:a.count,secondary:`${Math.round(a.avgLatency)}ms · ${a.errorRate.toFixed(1)}% 5xx`}))});Z(w,{title:"Functions Analytics",description:"Serverless function execution and performance metrics",get docsHref(){return tt},actions:a=>{var c=st();W(c,21,()=>T,X,(f,d)=>{var l=nt();let v;var h=b(l,!0);g(l),J(()=>{v=Y(l,1,"range-btn",null,v,{"range-btn--active":t(p)===t(d).value}),N(h,t(d).label)}),O("click",l,()=>A(t(d).value)),F(f,l)}),g(c),F(a,c)},children:(a,c)=>{var f=ot(),d=G(f),l=b(d);{let r=n(()=>{var i,u;return((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.totalRequests)??0});_(l,{label:"Invocations",get value(){return t(r)},get loading(){return t(s)}})}var v=m(l,2);{let r=n(()=>{var i,u;return((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.uniqueUsers)??0});_(v,{label:"Unique Users",get value(){return t(r)},get loading(){return t(s)}})}var h=m(v,2);{let r=n(()=>t(H)().toFixed(1));_(h,{label:"5xx Rate",get value(){return t(r)},unit:"%",get loading(){return t(s)}})}var L=m(h,2);{let r=n(()=>{var i,u;return Math.round(((u=(i=t(o))==null?void 0:i.summary)==null?void 0:u.avgLatency)??0)});_(L,{label:"Avg Duration",get value(){return t(r)},unit:"ms",get loading(){return t(s)}})}g(d);var x=m(d,2),P=b(x);{let r=n(()=>t(B)());et(P,{get data(){return t(r)},type:"bar",height:240,label:"Function invocations over time",get loading(){return t(s)},color:"#dc2626"})}g(x);var R=m(x,2),q=b(R);{let r=n(()=>t(C)());at(q,{get items(){return t(r)},title:"Functions by invocation count",get loading(){return t(s)}})}var S=m(q,2);{let r=n(()=>t(E)());rt(S,{get items(){return t(r)},title:"Top Functions",get loading(){return t(s)}})}g(R),F(a,f)}}),z()}K(["click"]);export{bt as component};

package/admin-build/_app/version.json

@@ -1 +1 @@
-{"version":"1774395752593"}
+{"version":"1774526372532"}

package/admin-build/index.html

@@ -5,12 +5,12 @@
         <meta name="viewport" content="width=device-width, initial-scale=1" />
         <title>EdgeBase Admin</title>
         <link rel="icon" href="/admin/favicon.svg" type="image/svg+xml" />
-        <link href="/admin/_app/immutable/entry/start.CtsqDyfj.js" rel="modulepreload">
-		<link href="/admin/_app/immutable/chunks/D__dwMuW.js" rel="modulepreload">
+        <link href="/admin/_app/immutable/entry/start.Cl6sLxnz.js" rel="modulepreload">
+		<link href="/admin/_app/immutable/chunks/CrOZMmdF.js" rel="modulepreload">
 		<link href="/admin/_app/immutable/chunks/BdTBlfLy.js" rel="modulepreload">
 		<link href="/admin/_app/immutable/chunks/Bn2NtlTj.js" rel="modulepreload">
-		<link href="/admin/_app/immutable/chunks/DBsVqhuh.js" rel="modulepreload">
-		<link href="/admin/_app/immutable/entry/app.C8ylfBe6.js" rel="modulepreload">
+		<link href="/admin/_app/immutable/chunks/Cw6OYcq-.js" rel="modulepreload">
+		<link href="/admin/_app/immutable/entry/app.D3flihMw.js" rel="modulepreload">
 		<link href="/admin/_app/immutable/chunks/B2bEC_Hm.js" rel="modulepreload">
 		<link href="/admin/_app/immutable/chunks/Bb0e0sAP.js" rel="modulepreload">
 		<link href="/admin/_app/immutable/chunks/DtZk82gG.js" rel="modulepreload">
@@ -26,7 +26,7 @@
         <div style="display: contents">
 			<script>
 				{
-					__sveltekit_x4yv2o = {
+					__sveltekit_1k0lbsj = {
 						base: "/admin",
 						assets: "/admin"
 					};
@@ -34,8 +34,8 @@
 					const element = document.currentScript.parentElement;
 
 					Promise.all([
-						import("/admin/_app/immutable/entry/start.CtsqDyfj.js"),
-						import("/admin/_app/immutable/entry/app.C8ylfBe6.js")
+						import("/admin/_app/immutable/entry/start.Cl6sLxnz.js"),
+						import("/admin/_app/immutable/entry/app.D3flihMw.js")
 					]).then(([kit, app]) => {
 						kit.start(app, element);
 					});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-base/server",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "EdgeBase runtime assets consumed by the EdgeBase CLI",
   "license": "MIT",
   "repository": {
@@ -34,8 +34,8 @@
     "jose": "^6.0.0",
     "pg": "^8.16.3",
     "zod": "^4.3.6",
-    "@edge-base/core": "0.2.4",
-    "@edge-base/shared": "0.2.4"
+    "@edge-base/core": "0.2.5",
+    "@edge-base/shared": "0.2.5"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.8.71",

package/src/__tests__/database-do-route-validation.test.ts

@@ -25,11 +25,12 @@ function createCtx() {
   } as unknown as DurableObjectState;
 }
 
-function createEnv() {
+function createEnv(config?: unknown) {
   return {
     DATABASE_LIVE: {} as DurableObjectNamespace,
     DATABASE: {} as DurableObjectNamespace,
     AUTH: {} as DurableObjectNamespace,
+    EDGEBASE_CONFIG: config,
   };
 }
 
@@ -39,7 +40,7 @@ describe('DatabaseDO route validation', () => {
   });
 
   it('rejects id-suffixed doNames for single-instance namespaces', async () => {
-    setConfig(defineConfig({
+    const config = defineConfig({
       release: true,
       databases: {
         app: {
@@ -49,11 +50,12 @@ describe('DatabaseDO route validation', () => {
           },
         },
       },
-    }));
+    });
+    setConfig(config);
 
     const { DatabaseDO } = await import('../durable-objects/database-do.js');
     const ctx = createCtx();
-    const databaseDo = new DatabaseDO(ctx, createEnv() as never);
+    const databaseDo = new DatabaseDO(ctx, createEnv(config) as never);
 
     const response = await databaseDo.fetch(new Request('http://do/tables/posts', {
       headers: {
@@ -71,7 +73,7 @@ describe('DatabaseDO route validation', () => {
   });
 
   it('rejects missing instance ids for dynamic namespaces', async () => {
-    setConfig(defineConfig({
+    const config = defineConfig({
       release: true,
       databases: {
         workspace: {
@@ -82,11 +84,12 @@ describe('DatabaseDO route validation', () => {
           },
         },
       },
-    }));
+    });
+    setConfig(config);
 
     const { DatabaseDO } = await import('../durable-objects/database-do.js');
     const ctx = createCtx();
-    const databaseDo = new DatabaseDO(ctx, createEnv() as never);
+    const databaseDo = new DatabaseDO(ctx, createEnv(config) as never);
 
     const response = await databaseDo.fetch(new Request('http://do/tables/users', {
       headers: {

package/src/__tests__/meta-route-registration.test.ts

@@ -1,10 +1,10 @@
 /**
  * Meta-test: route registration completeness.
  *
- * Ensures every route file imported in index.ts is also registered via app.route().
- * The expected route exports are derived from the current route files.
+ * Ensures every route module imported in index.ts is also registered via app.route().
+ * The expected route exports are derived from the route modules the entrypoint actually loads.
  */
-import { readFileSync, readdirSync } from 'fs';
+import { readFileSync } from 'fs';
 import { resolve } from 'path';
 import { fileURLToPath } from 'url';
 import { describe, it, expect } from 'vitest';
@@ -15,9 +15,11 @@ describe('index.ts route registration completeness', () => {
     'utf-8',
   );
   const routesDir = resolve(fileURLToPath(new URL('../routes', import.meta.url)));
-  const EXPECTED_ROUTES = readdirSync(routesDir)
-    .filter((fileName) => fileName.endsWith('.ts'))
-    .sort()
+  const ROUTE_IMPORTS = [...source.matchAll(/import\('\.\/routes\/([^']+\.js)'\)/g)]
+    .map((match) => match[1])
+    .sort();
+  const ROUTE_FILES = ROUTE_IMPORTS.map((fileName) => fileName.replace(/\.js$/, '.ts'));
+  const EXPECTED_ROUTES = ROUTE_FILES
     .flatMap((fileName) => {
       const routeSource = readFileSync(resolve(routesDir, fileName), 'utf-8');
       const directExports = [...routeSource.matchAll(/export const (\w+)\s*=\s*new OpenAPIHono/g)].map(
@@ -29,20 +31,23 @@ describe('index.ts route registration completeness', () => {
       return [...directExports, ...aliasExports];
     });
 
-  const EXPECTED_COUNT = EXPECTED_ROUTES.length;
-
-  it(`total route imports = ${EXPECTED_COUNT}`, () => {
-    const importMatches = source.match(/import \{ \w+ \} from '\.\/routes\//g) || [];
-    expect(importMatches.length).toBe(EXPECTED_COUNT);
+  it(`total route module imports = ${ROUTE_FILES.length}`, () => {
+    expect(ROUTE_IMPORTS.length).toBe(ROUTE_FILES.length);
   });
 
-  for (const routeVar of EXPECTED_ROUTES) {
-    it(`${routeVar} is imported`, () => {
-      expect(source).toMatch(new RegExp(`import\\s*\\{[^}]*\\b${routeVar}\\b[^}]*\\}\\s*from '\\./routes/`));
+  for (const routeFile of ROUTE_FILES) {
+    const routePath = routeFile.replace(/\.ts$/, '.js');
+
+    it(`${routeFile} is dynamically imported`, () => {
+      expect(source).toContain(`import('./routes/${routePath}')`);
     });
+  }
 
+  for (const routeVar of EXPECTED_ROUTES) {
     it(`${routeVar} is registered via app.route()`, () => {
-      expect(source).toMatch(new RegExp(`app\\.route\\([^)]+,\\s*${routeVar}\\)`));
+      const directRegistration = new RegExp(`app\\.route\\([^)]+,\\s*${routeVar}\\)`);
+      const moduleRegistration = new RegExp(`app\\.route\\([^)]+,\\s*\\w+\\.${routeVar}\\)`);
+      expect(directRegistration.test(source) || moduleRegistration.test(source)).toBe(true);
     });
   }
 });

package/src/__tests__/room-auth-state-loss.test.ts

@@ -5,6 +5,128 @@ vi.mock('cloudflare:workers', () => ({
 }));
 
 describe('room auth-state loss recovery', () => {
+  it('treats ephemeral timer persistence failures as non-fatal', async () => {
+    const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
+
+    const room: any = Object.create(RoomRuntimeBaseDO.prototype);
+    const pending: Promise<unknown>[] = [];
+    const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {});
+
+    room.pendingAuth = new Map([['conn-1', Date.now() + 5_000]]);
+    room.disconnectTimers = new Map();
+    room.namespace = 'game';
+    room.roomId = 'room-1';
+    room.ctx = {
+      storage: {
+        put: vi.fn().mockRejectedValue(new Error('Exceeded allowed rows written in Durable Objects free tier.')),
+        delete: vi.fn(),
+      },
+      waitUntil: vi.fn((promise: Promise<unknown>) => {
+        pending.push(promise);
+      }),
+    };
+
+    expect(() => room.syncEphemeralTimersToStorage()).not.toThrow();
+    await Promise.allSettled(pending);
+
+    expect(warnSpy).toHaveBeenCalledWith(
+      '[Room] Ephemeral timer persistence skipped',
+      expect.objectContaining({
+        room: 'game::room-1',
+        pendingAuthCount: 1,
+        disconnectCount: 0,
+        message: 'Exceeded allowed rows written in Durable Objects free tier.',
+      }),
+    );
+
+    warnSpy.mockRestore();
+  });
+
+  it('persists alarm-backed room deadlines alongside auth and disconnect timers', async () => {
+    const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
+
+    const pending: Promise<unknown>[] = [];
+    const putSpy = vi.fn().mockResolvedValue(undefined);
+    const room: any = Object.create(RoomRuntimeBaseDO.prototype);
+    room.pendingAuth = new Map([['conn-1', 11_111]]);
+    room.disconnectTimers = new Map([['user-1', { fireAt: 22_222, connectionId: 'conn-1' }]]);
+    room._stateSaveAt = 33_333;
+    room._emptyRoomCleanupAt = 44_444;
+    room._stateTTLAlarmAt = 55_555;
+    room.ctx = {
+      storage: {
+        put: putSpy,
+        delete: vi.fn(),
+      },
+      waitUntil: vi.fn((promise: Promise<unknown>) => {
+        pending.push(promise);
+      }),
+    };
+
+    room.syncEphemeralTimersToStorage();
+    await Promise.allSettled(pending);
+
+    expect(putSpy).toHaveBeenCalledWith('roomEphemeralTimers', {
+      pendingAuth: { 'conn-1': 11_111 },
+      disconnects: { 'user-1': { fireAt: 22_222, connectionId: 'conn-1' } },
+      stateSaveAt: 33_333,
+      emptyRoomCleanupAt: 44_444,
+      stateTTLAlarmAt: 55_555,
+    });
+  });
+
+  it('does not rewrite ephemeral timer storage when state is already dirty', async () => {
+    const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
+
+    const room: any = Object.create(RoomRuntimeBaseDO.prototype);
+    room.dirty = false;
+    room._stateSaveAt = 33_333;
+    room.namespaceConfig = {};
+    room.syncEphemeralTimersToStorage = vi.fn();
+    room._scheduleNextAlarm = vi.fn();
+
+    room.markDirty();
+
+    expect(room.dirty).toBe(true);
+    expect(room._stateSaveAt).toBe(33_333);
+    expect(room.syncEphemeralTimersToStorage).not.toHaveBeenCalled();
+    expect(room._scheduleNextAlarm).toHaveBeenCalledTimes(1);
+  });
+
+  it('recovers persisted timers before alarm processing after a cold wake without sockets', async () => {
+    const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
+
+    const room: any = Object.create(RoomRuntimeBaseDO.prototype);
+    room.stateRecoveryNeeded = false;
+    room.roomCreated = false;
+    room.sharedState = {};
+    room.playerStates = new Map();
+    room.serverState = {};
+    room.players = new Map();
+    room.userToConnections = new Map();
+    room.pendingAuth = new Map();
+    room.disconnectTimers = new Map();
+    room._timers = new Map();
+    room._stateSaveAt = null;
+    room._emptyRoomCleanupAt = null;
+    room._stateTTLAlarmAt = null;
+    room._metadata = {};
+    room.config = {};
+    room.ctx = {
+      getWebSockets: vi.fn(() => []),
+    };
+    room.ensureRuntimeReady = vi.fn(async () => {});
+    room.recoverFromStorage = vi.fn(async () => {});
+    room.findWebSocketByConnectionId = vi.fn(() => null);
+    room.finalizePlayerLeave = vi.fn(async () => {});
+    room.syncEphemeralTimersToStorage = vi.fn();
+    room._scheduleNextAlarm = vi.fn();
+
+    await room.alarm();
+
+    expect(room.recoverFromStorage).toHaveBeenCalledTimes(1);
+  });
+
   it('marks websocket metadata rebuilt from hibernation tags as auth-state-lost', async () => {
     const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
 

package/src/__tests__/room-handler-context.test.ts

@@ -48,7 +48,7 @@ describe('RoomsDO handler context', () => {
       },
     };
 
-    const ctx = room.buildHandlerContext();
+    const ctx = await room.buildHandlerContext();
     const inserted = await ctx.admin.db('shared').table('signals').insert({ title: 'Room inserted' });
 
     expect(inserted).toEqual({ id: 'sig-1', title: 'Room inserted' });
@@ -63,7 +63,7 @@ describe('RoomsDO handler context', () => {
         }),
       }),
     );
-  });
+  }, 15_000);
 
   it('routes admin.db().upsert() through the database durable object', async () => {
     const { RoomsDO } = await import('../durable-objects/rooms-do.js');
@@ -104,7 +104,7 @@ describe('RoomsDO handler context', () => {
       },
     };
 
-    const ctx = room.buildHandlerContext();
+    const ctx = await room.buildHandlerContext();
     const upserted = await ctx.admin.db('shared').table('signals').upsert({
       id: 'sig-1',
       title: 'Room upserted',
@@ -126,7 +126,7 @@ describe('RoomsDO handler context', () => {
         }),
       }),
     );
-  });
+  }, 15_000);
 
   it('returns 409 when creating a Cloudflare RealtimeKit session while media is already published', async () => {
     const { RoomsDO } = await import('../durable-objects/rooms-do.js');

package/src/__tests__/room-rate-limit-scopes.test.ts

@@ -0,0 +1,38 @@
+import { describe, expect, it, vi } from 'vitest';
+
+vi.mock('cloudflare:workers', () => ({
+  DurableObject: class DurableObject {},
+}));
+
+describe('room rate-limit scopes', () => {
+  it('keeps signal/media/admin buckets independent per connection', async () => {
+    const { RoomRuntimeBaseDO } = await import('../durable-objects/room-runtime-base.js');
+
+    const room: any = Object.create(RoomRuntimeBaseDO.prototype);
+    room.namespaceConfig = {
+      rateLimit: {
+        actions: 2,
+        signals: 4,
+        media: 1,
+        admin: 1,
+      },
+    };
+    room.rateBuckets = new Map();
+
+    expect(room.checkRateLimit('conn-1', 'signals')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'signals')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'signals')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'signals')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'signals')).toBe(false);
+
+    expect(room.checkRateLimit('conn-1', 'media')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'media')).toBe(false);
+
+    expect(room.checkRateLimit('conn-1', 'admin')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'admin')).toBe(false);
+
+    expect(room.checkRateLimit('conn-1', 'actions')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'actions')).toBe(true);
+    expect(room.checkRateLimit('conn-1', 'actions')).toBe(false);
+  });
+});

package/src/__tests__/runtime-startup.test.ts

@@ -0,0 +1,49 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+vi.mock('cloudflare:workers', () => ({
+  DurableObject: class DurableObject {},
+}));
+
+afterEach(() => {
+  vi.resetModules();
+  if (typeof globalThis === 'object' && globalThis !== null) {
+    delete (globalThis as Record<string, unknown>).__EDGEBASE_RUNTIME_CONFIG__;
+  }
+});
+
+describe('runtime startup bootstrap', () => {
+  it('initializes runtime config idempotently for lazy server and DO entrypoints', async () => {
+    const { ensureServerStartup } = await import('../lib/runtime-startup.js');
+    const { parseConfig } = await import('../lib/do-router.js');
+
+    await expect(ensureServerStartup()).resolves.toBeUndefined();
+    const firstConfig = parseConfig();
+
+    await expect(ensureServerStartup()).resolves.toBeUndefined();
+    const secondConfig = parseConfig();
+
+    expect(firstConfig).toEqual(secondConfig);
+    expect(secondConfig).toBeTypeOf('object');
+  });
+
+  it('does not clobber an explicitly injected runtime config', async () => {
+    const { ensureServerStartup } = await import('../lib/runtime-startup.js');
+    const { parseConfig, setConfig } = await import('../lib/do-router.js');
+
+    setConfig({
+      release: false,
+      auth: {
+        allowedRedirectUrls: ['http://localhost:4173'],
+      },
+    });
+
+    await expect(ensureServerStartup()).resolves.toBeUndefined();
+
+    expect(parseConfig()).toMatchObject({
+      release: false,
+      auth: {
+        allowedRedirectUrls: ['http://localhost:4173'],
+      },
+    });
+  });
+});

package/src/durable-objects/database-do.ts

@@ -60,6 +60,7 @@ import { buildDbLiveChannel, DATABASE_LIVE_HUB_DO_NAME } from '../lib/database-l
 import { resolveRootServiceKey } from '../lib/service-key.js';
 import { resolveDbLiveBatchThreshold } from '../lib/database-live-config.js';
 import { buildTableHookRuntimeServices } from '../lib/table-hook-runtime.js';
+import { ensureServerStartup } from '../lib/runtime-startup.js';
 import type { Env } from '../types.js';
 
 // ─── Types ───
@@ -80,6 +81,7 @@ export class DatabaseDO extends DurableObject<DOEnv> {
   private config: EdgeBaseConfig;
   private initialized = false;
   private doName = '';
+  private runtimeReadyPromise: Promise<void> | null = null;
 
   constructor(ctx: DurableObjectState, env: DOEnv) {
     super(ctx, env);
@@ -92,6 +94,7 @@ export class DatabaseDO extends DurableObject<DOEnv> {
   }
 
   async fetch(request: Request): Promise<Response> {
+    await this.ensureRuntimeReady();
     // Determine DO name from header or URL
     const doNameHeader = request.headers.get('X-DO-Name');
 
@@ -1991,6 +1994,17 @@ export class DatabaseDO extends DurableObject<DOEnv> {
     return getGlobalConfig(env);
   }
 
+  private async ensureRuntimeReady(): Promise<void> {
+    if (!this.runtimeReadyPromise) {
+      this.runtimeReadyPromise = (async () => {
+        await ensureServerStartup();
+        this.config = this.parseConfig(this.env);
+      })();
+    }
+
+    await this.runtimeReadyPromise;
+  }
+
   // ─── Database Live Event Emission ───
 
   /**

package/src/durable-objects/database-live-do.ts

@@ -7,6 +7,7 @@ import { verifyAccessToken } from '../lib/jwt.js';
 import { parseConfig as getGlobalConfig } from '../lib/do-router.js';
 import { isDbLiveChannel } from '../lib/database-live-emitter.js';
 import { resolveDbLiveAuthTimeoutMs } from '../lib/database-live-config.js';
+import { ensureServerStartup } from '../lib/runtime-startup.js';
 
 interface DOEnv {
   JWT_USER_SECRET?: string;
@@ -142,6 +143,7 @@ export class DatabaseLiveDO extends DurableObject<DOEnv> {
   private pendingAuth = new Map<string, ReturnType<typeof setTimeout>>();
   private metaCache = new Map<WebSocket, WSMeta>();
   private recentDeliveryIds = new Map<string, number>();
+  private runtimeReadyPromise: Promise<void> | null = null;
 
   constructor(ctx: DurableObjectState, env: DOEnv) {
     super(ctx, env);
@@ -149,6 +151,7 @@ export class DatabaseLiveDO extends DurableObject<DOEnv> {
   }
 
   async fetch(request: Request): Promise<Response> {
+    await this.ensureRuntimeReady();
     const url = new URL(request.url);
 
     if (url.pathname === '/internal/event') {
@@ -218,6 +221,7 @@ export class DatabaseLiveDO extends DurableObject<DOEnv> {
   }
 
   async webSocketMessage(ws: WebSocket, message: string | ArrayBuffer): Promise<void> {
+    await this.ensureRuntimeReady();
     if (typeof message !== 'string') return;
 
     let msg: Record<string, unknown>;
@@ -922,6 +926,17 @@ export class DatabaseLiveDO extends DurableObject<DOEnv> {
     if (parts.length >= 5) return parts[3];
     return null;
   }
+
+  private async ensureRuntimeReady(): Promise<void> {
+    if (!this.runtimeReadyPromise) {
+      this.runtimeReadyPromise = (async () => {
+        await ensureServerStartup();
+        this.config = getGlobalConfig(this.env);
+      })();
+    }
+
+    await this.runtimeReadyPromise;
+  }
 }
 
 export function evaluateDatabaseLiveFilters(