@fieldnotes/sync-server 0.12.0 → 0.14.0

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/resource-limits.ts","../src/create-sync-server.ts","../src/heartbeat.ts","../src/shutdown.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\nexport type { SyncHubOptions, Connection } from './sync-hub';\nexport { MemoryHubBackend } from './memory-hub-backend';\nexport type { HubBackend } from './hub-backend';\nexport { createSyncServer } from './create-sync-server';\nexport type { CreateSyncServerOptions } from './create-sync-server';\nexport { InMemoryHubFanout } from './hub-fanout';\nexport type { HubFanout } from './hub-fanout';\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\nexport type {\n  Authorize,\n  AuthorizeContext,\n  AuthorizeLayer,\n  AuthorizeLayerContext,\n  OwnedElement,\n  ReadContext,\n  CanRead,\n} from './authorize';\nexport { startHeartbeat } from './heartbeat';\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\n","import {\n  parseEnvelope,\n  isValidElement,\n  isNewerLayerRecord,\n  type LayerRecord,\n  type SyncOp,\n  type SyncEnvelope,\n} from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, AuthorizeLayer, CanRead, OwnedElement } from './authorize';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  hasJsonDepthAtMost,\n} from './resource-limits';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  authorizeLayer?: AuthorizeLayer;\n  canRead?: CanRead;\n  maxJsonDepth?: number;\n  presenceThrottleMs?: number;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\ntype LayerOp = Extract<SyncOp, { kind: 'layer-upsert' | 'layer-remove' }>;\n\nfunction isLayerOp(op: unknown): op is LayerOp {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  // Shape is re-validated by parseEnvelope on the serial path; fanout payloads\n  // come from a sibling hub that already validated them.\n  return k === 'layer-upsert' || k === 'layer-remove';\n}\n\nfunction layerOpToRecord(op: LayerOp): LayerRecord {\n  return op.kind === 'layer-upsert'\n    ? { id: op.layer.id, version: op.version, editor: op.editor, definition: op.layer }\n    : { id: op.id, version: op.version, editor: op.editor };\n}\n\nfunction layerRecordToOp(record: LayerRecord): LayerOp {\n  return record.definition\n    ? {\n        kind: 'layer-upsert',\n        layer: record.definition,\n        version: record.version,\n        editor: record.editor,\n      }\n    : { kind: 'layer-remove', id: record.id, version: record.version, editor: record.editor };\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly authorizeLayer?: AuthorizeLayer;\n  private readonly canRead?: CanRead;\n  /** Fallback layer-record store for backends without layer persistence. */\n  private readonly memoryLayers = new Map<string, Map<string, LayerRecord>>();\n  private readonly maxJsonDepth: number;\n  private readonly presenceThrottleMs: number;\n  private readonly lastPresenceAt = new Map<string, number>();\n  private readonly pendingPresence = new Map<\n    string,\n    { data: unknown; timer: ReturnType<typeof setTimeout> }\n  >();\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.authorizeLayer = options.authorizeLayer;\n    this.canRead = options.canRead;\n    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;\n    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    this.lastPresenceAt.delete(connId);\n    const pendingPresence = this.pendingPresence.get(connId);\n    if (pendingPresence) clearTimeout(pendingPresence.timer);\n    this.pendingPresence.delete(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  /**\n   * Broadcasts ephemeral server-owned presence data to every connection in a room.\n   * The returned count covers successful delivery on this hub instance only; configured fan-out\n   * forwards the same event to other instances on a best-effort basis.\n   */\n  broadcastPresence<T>(room: string, data: T): number {\n    const op = { kind: 'presence' as const, data };\n    const sent = this.relayToRoom(room, undefined, JSON.stringify({ from: HUB_FROM, op }));\n    this.safePublish(JSON.stringify({ o: this.instanceId, room, from: HUB_FROM, op }));\n    return sent;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.schedulePresence(conn, env.op.data); // off-queue, throttled independently\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const operation = prev.then(() => this.process(conn, env));\n    this.roomQueues.set(\n      room,\n      operation.catch(() => {\n        // Recover only the internal tail so one failed message never wedges the room queue.\n        // The caller still receives the operation rejection for observability.\n      }),\n    );\n    return operation;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      // Layer records are presentation-only and carry no element bytes, so no\n      // audience filter applies; the field is omitted while a room has never\n      // used layer sync, keeping snapshot frames byte-identical to before.\n      const layers = await this.getLayerRecords(conn.room);\n      conn.send(\n        // `to` is a private correlation address for the requesting SyncClient. It is never\n        // broadcast; every public sender identity below comes from the server-owned connection.\n        JSON.stringify({\n          from: HUB_FROM,\n          op:\n            layers.length > 0\n              ? { kind: 'snapshot', to: env.from, elements, layers }\n              : { kind: 'snapshot', to: env.from, elements },\n        }),\n      );\n    } else if (op.kind === 'layer-upsert' || op.kind === 'layer-remove') {\n      await this.processLayerOp(conn, op);\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      await this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  /**\n   * Applies a layer-definition edit on the room's serial queue. Convergence is\n   * last-writer-wins under the deterministic (version, editor) ordering — the\n   * same rule every client applies — so arrival order never decides a race. A\n   * stale or denied edit is answered with an authoritative correction to the\n   * sender only.\n   */\n  private async processLayerOp(conn: Connection, op: LayerOp): Promise<void> {\n    const record = layerOpToRecord(op);\n    const current = await this.getLayerRecord(conn.room, record.id);\n    if (this.authorizeLayer) {\n      const allowed = await this.authorizeLayer({\n        userId: conn.userId,\n        role: conn.role,\n        room: conn.room,\n        op,\n        currentRecord: current,\n      });\n      if (!allowed) {\n        // Revert the sender to the room's record; a tombstone when there is\n        // none, so the denied local edit disappears everywhere consistently.\n        const correction = current ?? { id: record.id, version: record.version, editor: HUB_FROM };\n        conn.send(JSON.stringify({ from: HUB_FROM, op: layerRecordToOp(correction) }));\n        return;\n      }\n    }\n    if (current && !isNewerLayerRecord(record, current)) {\n      // Stale under (version, editor): converge the sender, do not broadcast.\n      conn.send(JSON.stringify({ from: HUB_FROM, op: layerRecordToOp(current) }));\n      return;\n    }\n    await this.applyLayerRecord(conn.room, record);\n    await this.fanout.publish(\n      JSON.stringify({ o: this.instanceId, room: conn.room, from: conn.id, op }),\n    );\n    this.relayToRoom(conn.room, conn.id, JSON.stringify({ from: conn.id, op }));\n  }\n\n  private layerBackend(): Required<\n    Pick<HubBackend, 'layerRecords' | 'getLayerRecord' | 'applyLayerRecord'>\n  > | null {\n    const { layerRecords, getLayerRecord, applyLayerRecord } = this.backend;\n    if (!layerRecords || !getLayerRecord || !applyLayerRecord) return null;\n    return {\n      layerRecords: layerRecords.bind(this.backend),\n      getLayerRecord: getLayerRecord.bind(this.backend),\n      applyLayerRecord: applyLayerRecord.bind(this.backend),\n    };\n  }\n\n  private async getLayerRecords(room: string): Promise<LayerRecord[]> {\n    const backend = this.layerBackend();\n    if (backend) return backend.layerRecords(room);\n    return [...(this.memoryLayers.get(room)?.values() ?? [])];\n  }\n\n  private async getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined> {\n    const backend = this.layerBackend();\n    if (backend) return backend.getLayerRecord(room, id);\n    return this.memoryLayers.get(room)?.get(id);\n  }\n\n  private async applyLayerRecord(room: string, record: LayerRecord): Promise<void> {\n    const backend = this.layerBackend();\n    if (backend) {\n      await backend.applyLayerRecord(room, record);\n      return;\n    }\n    let map = this.memoryLayers.get(room);\n    if (!map) {\n      map = new Map();\n      this.memoryLayers.set(room, map);\n    }\n    map.set(record.id, record);\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      void Promise.resolve(this.fanout.publish(payload)).catch(() => {\n        /* presence is ephemeral; a broken publisher must not create an unhandled rejection */\n      });\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): number {\n    const members = this.rooms.get(room);\n    if (!members) return 0;\n    let sent = 0;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n        sent += 1;\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n    return sent;\n  }\n\n  private broadcastClientPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private schedulePresence(conn: Connection, data: unknown): void {\n    if (this.presenceThrottleMs <= 0) {\n      this.broadcastClientPresence(conn, data);\n      return;\n    }\n    const now = Date.now();\n    const lastSentAt = this.lastPresenceAt.get(conn.id);\n    if (lastSentAt === undefined || now - lastSentAt >= this.presenceThrottleMs) {\n      this.lastPresenceAt.set(conn.id, now);\n      this.broadcastClientPresence(conn, data);\n      return;\n    }\n\n    const existing = this.pendingPresence.get(conn.id);\n    if (existing) {\n      existing.data = data;\n      return;\n    }\n    const timer = setTimeout(\n      () => {\n        const pending = this.pendingPresence.get(conn.id);\n        this.pendingPresence.delete(conn.id);\n        if (!pending || !this.conns.has(conn.id)) return;\n        this.lastPresenceAt.set(conn.id, Date.now());\n        this.broadcastClientPresence(conn, pending.data);\n      },\n      this.presenceThrottleMs - (now - lastSentAt),\n    );\n    this.pendingPresence.set(conn.id, { data, timer });\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? this.mayRead(conn, current.audience)\n          ? { kind: 'upsert', element: current }\n          : { kind: 'remove', id: current.id }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current\n        ? this.mayRead(conn, current.audience)\n          ? { kind: 'upsert', element: current }\n          : { kind: 'remove', id: current.id }\n        : undefined;\n    } else if (op.kind === 'clear') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (isLayerOp(op)) {\n      // LWW-guarded local apply keeps memory-fallback instances converged; a\n      // shared backend already holds the record (the guarded re-apply is a\n      // no-op). Relay is unconditional — receiving clients LWW-drop stale ops.\n      void this.applyFanoutLayerOp(env.room, op).catch(() => {\n        /* a broken backend must not break the fanout relay */\n      });\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  private async applyFanoutLayerOp(room: string, op: LayerOp): Promise<void> {\n    const record = layerOpToRecord(op);\n    const current = await this.getLayerRecord(room, record.id);\n    if (current && !isNewerLayerRecord(record, current)) return;\n    await this.applyLayerRecord(room, record);\n  }\n\n  close(): void {\n    for (const pending of this.pendingPresence.values()) clearTimeout(pending.timer);\n    this.pendingPresence.clear();\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp, type LayerRecord } from '@fieldnotes/sync';\nimport type { CanvasElement } from '@fieldnotes/core';\nimport type { HubBackend } from './hub-backend';\n\nexport class MemoryHubBackend implements HubBackend {\n  private rooms = new Map<string, Map<string, CanvasElement>>();\n  private roomLayers = new Map<string, Map<string, LayerRecord>>();\n\n  private room(id: string): Map<string, CanvasElement> {\n    let r = this.rooms.get(id);\n    if (!r) {\n      r = new Map();\n      this.rooms.set(id, r);\n    }\n    return r;\n  }\n\n  private layers(room: string): Map<string, LayerRecord> {\n    let r = this.roomLayers.get(room);\n    if (!r) {\n      r = new Map();\n      this.roomLayers.set(room, r);\n    }\n    return r;\n  }\n\n  async snapshot(room: string): Promise<CanvasElement[]> {\n    return [...this.room(room).values()];\n  }\n\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\n    return this.room(room).get(id);\n  }\n\n  async apply(room: string, op: SyncOp): Promise<void> {\n    if (op.kind === 'clear') {\n      // Clears elements only; layer records are a separate, longer-lived ledger.\n      this.rooms.delete(room);\n      return;\n    }\n    applyOpToMap(this.room(room), op);\n  }\n\n  async layerRecords(room: string): Promise<LayerRecord[]> {\n    return [...this.layers(room).values()];\n  }\n\n  async getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined> {\n    return this.layers(room).get(id);\n  }\n\n  async applyLayerRecord(room: string, record: LayerRecord): Promise<void> {\n    this.layers(room).set(record.id, record);\n  }\n}\n","export interface HubFanout {\n  publish(payload: string): void | Promise<void>;\n  subscribe(handler: (payload: string) => void): () => void;\n  close?(): void;\n}\n\nexport class InMemoryHubFanout implements HubFanout {\n  private readonly handlers = new Set<(payload: string) => void>();\n\n  publish(payload: string): void {\n    for (const h of this.handlers) {\n      try {\n        h(payload);\n      } catch {\n        /* one throwing subscriber must not break the publish loop */\n      }\n    }\n  }\n\n  subscribe(handler: (payload: string) => void): () => void {\n    this.handlers.add(handler);\n    return () => this.handlers.delete(handler);\n  }\n}\n","export const DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;\nexport const DEFAULT_MAX_JSON_DEPTH = 32;\nexport const DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;\nexport const DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;\nexport const DEFAULT_MESSAGES_PER_SECOND = 120;\nexport const DEFAULT_MESSAGE_BURST = 240;\nexport const DEFAULT_PRESENCE_THROTTLE_MS = 50;\n\nexport function hasJsonDepthAtMost(message: string, maxDepth: number): boolean {\n  let depth = 0;\n  let inString = false;\n  let escaped = false;\n\n  for (const char of message) {\n    if (inString) {\n      if (escaped) escaped = false;\n      else if (char === '\\\\') escaped = true;\n      else if (char === '\"') inString = false;\n      continue;\n    }\n    if (char === '\"') inString = true;\n    else if (char === '{' || char === '[') {\n      depth += 1;\n      if (depth > maxDepth) return false;\n    } else if (char === '}' || char === ']') {\n      depth -= 1;\n      if (depth < 0) return false;\n    }\n  }\n\n  return depth === 0 && !inString;\n}\n\nexport class MessageRateLimiter {\n  private tokens: number;\n  private updatedAt: number;\n\n  constructor(\n    private readonly ratePerSecond: number,\n    private readonly burst: number,\n    now = Date.now(),\n  ) {\n    this.tokens = burst;\n    this.updatedAt = now;\n  }\n\n  take(now = Date.now()): boolean {\n    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1000;\n    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);\n    this.updatedAt = now;\n    if (this.tokens < 1) return false;\n    this.tokens -= 1;\n    return true;\n  }\n}\n","import { WebSocketServer, type RawData } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, AuthorizeLayer, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_MAX_MESSAGE_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_MESSAGES,\n  DEFAULT_MESSAGE_BURST,\n  DEFAULT_MESSAGES_PER_SECOND,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  MessageRateLimiter,\n} from './resource-limits';\nimport { DEFAULT_SHUTDOWN_GRACE_MS, drainWebSocketServer } from './shutdown';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  authorizeLayer?: AuthorizeLayer;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n  maxMessageBytes?: number;\n  maxJsonDepth?: number;\n  maxPendingAuthMessages?: number;\n  maxPendingAuthBytes?: number;\n  messagesPerSecond?: number;\n  messageBurst?: number;\n  presenceThrottleMs?: number;\n  shutdownGraceMs?: number;\n}\n\nfunction rawDataByteLength(data: RawData): number {\n  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);\n  return data.byteLength;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const shutdownGraceMs = options.shutdownGraceMs ?? DEFAULT_SHUTDOWN_GRACE_MS;\n  if (!Number.isFinite(shutdownGraceMs) || shutdownGraceMs < 0) {\n    throw new RangeError('shutdownGraceMs must be a non-negative finite number');\n  }\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    authorizeLayer: options.authorizeLayer,\n    canRead: options.canRead,\n    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,\n    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS,\n  });\n  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server, maxPayload: maxMessageBytes })\n    : new WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let shuttingDown = false;\n  let closePromise: Promise<void> | undefined;\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    if (shuttingDown) {\n      ws.close(1001, 'server shutting down');\n      return;\n    }\n    heartbeat.track(ws);\n    // Protocol/parser failures (including maxPayload) close the peer. Consuming the socket-level\n    // error keeps hostile input from becoming an uncaught process error.\n    ws.on('error', () => undefined);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    let admitted = false;\n    const queue: string[] = [];\n    let queuedBytes = 0;\n    const maxPendingAuthMessages =\n      options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;\n    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;\n    const limiter = new MessageRateLimiter(\n      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,\n      options.messageBurst ?? DEFAULT_MESSAGE_BURST,\n    );\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      if (state === 'rejected') return;\n      const messageBytes = rawDataByteLength(data);\n      if (messageBytes > maxMessageBytes) {\n        state = 'rejected';\n        ws.close(1009, 'message too large');\n        return;\n      }\n      if (!limiter.take()) {\n        state = 'rejected';\n        ws.close(4408, 'rate limit exceeded');\n        return;\n      }\n      const msg = String(data);\n      if (state === 'pending') {\n        if (\n          queue.length >= maxPendingAuthMessages ||\n          queuedBytes + messageBytes > maxPendingAuthBytes\n        ) {\n          state = 'rejected';\n          ws.close(4408, 'authentication queue limit exceeded');\n          return;\n        }\n        queue.push(msg);\n        queuedBytes += messageBytes;\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (admitted) hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed || state === 'rejected' || shuttingDown) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        admitted = true;\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n        queuedBytes = 0;\n      })\n      .catch(() => {\n        if (!closed && !shuttingDown) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  const close = (): Promise<void> => {\n    if (closePromise) return closePromise;\n    shuttingDown = true;\n    closePromise = drainWebSocketServer(wss, shutdownGraceMs).then(() => {\n      heartbeat.stop();\n      hub.close();\n    });\n    return closePromise;\n  };\n\n  return {\n    hub,\n    wss,\n    close,\n  };\n}\n","export interface HeartbeatSocket {\n  ping(): void;\n  terminate(): void;\n  on(event: 'pong', listener: () => void): void;\n}\nexport interface HeartbeatServer {\n  clients: Set<HeartbeatSocket>;\n}\nexport interface Heartbeat {\n  track(ws: HeartbeatSocket): void;\n  stop(): void;\n}\n\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\n  if (intervalMs <= 0) {\n    return {\n      track: () => {\n        /* disabled */\n      },\n      stop: () => {\n        /* disabled */\n      },\n    };\n  }\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\n  const track = (ws: HeartbeatSocket): void => {\n    alive.set(ws, true);\n    ws.on('pong', () => alive.set(ws, true));\n  };\n  const interval = setInterval(() => {\n    for (const ws of wss.clients) {\n      try {\n        if (alive.get(ws) === false) {\n          ws.terminate();\n          continue;\n        }\n        alive.set(ws, false);\n        ws.ping();\n      } catch {\n        /* socket dying mid-tick — skip it */\n      }\n    }\n  }, intervalMs);\n  return { track, stop: () => clearInterval(interval) };\n}\n","export const DEFAULT_SHUTDOWN_GRACE_MS = 5000;\n\nexport interface ShutdownSocket {\n  close(code?: number, reason?: string): void;\n  terminate(): void;\n}\n\nexport interface ShutdownServer {\n  clients: Set<ShutdownSocket>;\n  close(callback: (error?: Error) => void): void;\n}\n\n/** Stop admission, ask connected peers to leave, then forcefully reap stragglers. */\nexport function drainWebSocketServer(wss: ShutdownServer, graceMs: number): Promise<void> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(forceTimer);\n      resolve();\n    };\n    const forceTimer = setTimeout(() => {\n      for (const ws of wss.clients) {\n        try {\n          ws.terminate();\n        } catch {\n          /* socket already failed while shutdown was in progress */\n        }\n      }\n      finish();\n    }, graceMs);\n\n    // Calling close first prevents new connections. Its callback runs once all clients have left.\n    wss.close(() => finish());\n    for (const ws of wss.clients) {\n      try {\n        ws.close(1001, 'server shutting down');\n      } catch {\n        try {\n          ws.terminate();\n        } catch {\n          /* socket already closed */\n        }\n      }\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAOO;;;ACPP,kBAA4D;AAIrD,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EACpD,aAAa,oBAAI,IAAsC;AAAA,EAEvD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,OAAO,MAAwC;AACrD,QAAI,IAAI,KAAK,WAAW,IAAI,IAAI;AAChC,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,WAAW,IAAI,MAAM,CAAC;AAAA,IAC7B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AAEvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AAAA,EAEA,MAAM,aAAa,MAAsC;AACvD,WAAO,CAAC,GAAG,KAAK,OAAO,IAAI,EAAE,OAAO,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,eAAe,MAAc,IAA8C;AAC/E,WAAO,KAAK,OAAO,IAAI,EAAE,IAAI,EAAE;AAAA,EACjC;AAAA,EAEA,MAAM,iBAAiB,MAAc,QAAoC;AACvE,SAAK,OAAO,IAAI,EAAE,IAAI,OAAO,IAAI,MAAM;AAAA,EACzC;AACF;;;AChDO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;ACvBO,IAAM,4BAA4B,OAAO;AACzC,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC;AAC1C,IAAM,iCAAiC,IAAI,OAAO;AAClD,IAAM,8BAA8B;AACpC,IAAM,wBAAwB;AAC9B,IAAM,+BAA+B;AAErC,SAAS,mBAAmB,SAAiB,UAA2B;AAC7E,MAAI,QAAQ;AACZ,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,aAAW,QAAQ,SAAS;AAC1B,QAAI,UAAU;AACZ,UAAI,QAAS,WAAU;AAAA,eACd,SAAS,KAAM,WAAU;AAAA,eACzB,SAAS,IAAK,YAAW;AAClC;AAAA,IACF;AACA,QAAI,SAAS,IAAK,YAAW;AAAA,aACpB,SAAS,OAAO,SAAS,KAAK;AACrC,eAAS;AACT,UAAI,QAAQ,SAAU,QAAO;AAAA,IAC/B,WAAW,SAAS,OAAO,SAAS,KAAK;AACvC,eAAS;AACT,UAAI,QAAQ,EAAG,QAAO;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,UAAU,KAAK,CAAC;AACzB;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAI9B,YACmB,eACA,OACjB,MAAM,KAAK,IAAI,GACf;AAHiB;AACA;AAGjB,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AAAA,EAVQ;AAAA,EACA;AAAA,EAWR,KAAK,MAAM,KAAK,IAAI,GAAY;AAC9B,UAAM,iBAAiB,KAAK,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI;AAC3D,SAAK,SAAS,KAAK,IAAI,KAAK,OAAO,KAAK,SAAS,iBAAiB,KAAK,aAAa;AACpF,SAAK,YAAY;AACjB,QAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,SAAK,UAAU;AACf,WAAO;AAAA,EACT;AACF;;;AHjBA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,YAAO,6BAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAIA,SAAS,UAAU,IAA4B;AAC7C,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AAGrC,SAAO,MAAM,kBAAkB,MAAM;AACvC;AAEA,SAAS,gBAAgB,IAA0B;AACjD,SAAO,GAAG,SAAS,iBACf,EAAE,IAAI,GAAG,MAAM,IAAI,SAAS,GAAG,SAAS,QAAQ,GAAG,QAAQ,YAAY,GAAG,MAAM,IAChF,EAAE,IAAI,GAAG,IAAI,SAAS,GAAG,SAAS,QAAQ,GAAG,OAAO;AAC1D;AAEA,SAAS,gBAAgB,QAA8B;AACrD,SAAO,OAAO,aACV;AAAA,IACE,MAAM;AAAA,IACN,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,IACA,EAAE,MAAM,gBAAgB,IAAI,OAAO,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,OAAO;AAC5F;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,eAAe,oBAAI,IAAsC;AAAA,EACzD;AAAA,EACA;AAAA,EACA,iBAAiB,oBAAI,IAAoB;AAAA,EACzC,kBAAkB,oBAAI,IAGrC;AAAA,EAEF,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,UAAU,QAAQ;AACvB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,qBAAqB,QAAQ,sBAAsB;AACxD,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,SAAK,eAAe,OAAO,MAAM;AACjC,UAAM,kBAAkB,KAAK,gBAAgB,IAAI,MAAM;AACvD,QAAI,gBAAiB,cAAa,gBAAgB,KAAK;AACvD,SAAK,gBAAgB,OAAO,MAAM;AAClC,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,kBAAqB,MAAc,MAAiB;AAClD,UAAM,KAAK,EAAE,MAAM,YAAqB,KAAK;AAC7C,UAAM,OAAO,KAAK,YAAY,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,UAAU,GAAG,CAAC,CAAC;AACrF,SAAK,YAAY,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC;AACjF,WAAO;AAAA,EACT;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,QAAI,CAAC,mBAAmB,SAAS,KAAK,YAAY,EAAG,QAAO,QAAQ,QAAQ;AAC5E,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,iBAAiB,MAAM,IAAI,GAAG,IAAI;AACvC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,YAAY,KAAK,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC;AACzD,SAAK,WAAW;AAAA,MACd;AAAA,MACA,UAAU,MAAM,MAAM;AAAA,MAGtB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AAItF,YAAM,SAAS,MAAM,KAAK,gBAAgB,KAAK,IAAI;AACnD,WAAK;AAAA;AAAA;AAAA,QAGH,KAAK,UAAU;AAAA,UACb,MAAM;AAAA,UACN,IACE,OAAO,SAAS,IACZ,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,UAAU,OAAO,IACnD,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS;AAAA,QACnD,CAAC;AAAA,MACH;AAAA,IACF,WAAW,GAAG,SAAS,kBAAkB,GAAG,SAAS,gBAAgB;AACnE,YAAM,KAAK,eAAe,MAAM,EAAE;AAAA,IACpC,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,YAAM,KAAK,OAAO;AAAA,QAChB,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAAA,IACvF;AAAA,EAEF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,eAAe,MAAkB,IAA4B;AACzE,UAAM,SAAS,gBAAgB,EAAE;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,KAAK,MAAM,OAAO,EAAE;AAC9D,QAAI,KAAK,gBAAgB;AACvB,YAAM,UAAU,MAAM,KAAK,eAAe;AAAA,QACxC,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,UAAI,CAAC,SAAS;AAGZ,cAAM,aAAa,WAAW,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,SAAS,QAAQ,SAAS;AACzF,aAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,gBAAgB,UAAU,EAAE,CAAC,CAAC;AAC7E;AAAA,MACF;AAAA,IACF;AACA,QAAI,WAAW,KAAC,iCAAmB,QAAQ,OAAO,GAAG;AAEnD,WAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,gBAAgB,OAAO,EAAE,CAAC,CAAC;AAC1E;AAAA,IACF;AACA,UAAM,KAAK,iBAAiB,KAAK,MAAM,MAAM;AAC7C,UAAM,KAAK,OAAO;AAAA,MAChB,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,KAAK,MAAM,MAAM,KAAK,IAAI,GAAG,CAAC;AAAA,IAC3E;AACA,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC;AAAA,EAC5E;AAAA,EAEQ,eAEC;AACP,UAAM,EAAE,cAAc,gBAAgB,iBAAiB,IAAI,KAAK;AAChE,QAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,iBAAkB,QAAO;AAClE,WAAO;AAAA,MACL,cAAc,aAAa,KAAK,KAAK,OAAO;AAAA,MAC5C,gBAAgB,eAAe,KAAK,KAAK,OAAO;AAAA,MAChD,kBAAkB,iBAAiB,KAAK,KAAK,OAAO;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,gBAAgB,MAAsC;AAClE,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,QAAS,QAAO,QAAQ,aAAa,IAAI;AAC7C,WAAO,CAAC,GAAI,KAAK,aAAa,IAAI,IAAI,GAAG,OAAO,KAAK,CAAC,CAAE;AAAA,EAC1D;AAAA,EAEA,MAAc,eAAe,MAAc,IAA8C;AACvF,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,QAAS,QAAO,QAAQ,eAAe,MAAM,EAAE;AACnD,WAAO,KAAK,aAAa,IAAI,IAAI,GAAG,IAAI,EAAE;AAAA,EAC5C;AAAA,EAEA,MAAc,iBAAiB,MAAc,QAAoC;AAC/E,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,SAAS;AACX,YAAM,QAAQ,iBAAiB,MAAM,MAAM;AAC3C;AAAA,IACF;AACA,QAAI,MAAM,KAAK,aAAa,IAAI,IAAI;AACpC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,aAAa,IAAI,MAAM,GAAG;AAAA,IACjC;AACA,QAAI,IAAI,OAAO,IAAI,MAAM;AAAA,EAC3B;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,QAAQ,QAAQ,KAAK,OAAO,QAAQ,OAAO,CAAC,EAAE,MAAM,MAAM;AAAA,MAE/D,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAyB;AACxF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,OAAO;AACX,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AACjB,gBAAQ;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,wBAAwB,MAAkB,MAAqB;AACrE,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,iBAAiB,MAAkB,MAAqB;AAC9D,QAAI,KAAK,sBAAsB,GAAG;AAChC,WAAK,wBAAwB,MAAM,IAAI;AACvC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,aAAa,KAAK,eAAe,IAAI,KAAK,EAAE;AAClD,QAAI,eAAe,UAAa,MAAM,cAAc,KAAK,oBAAoB;AAC3E,WAAK,eAAe,IAAI,KAAK,IAAI,GAAG;AACpC,WAAK,wBAAwB,MAAM,IAAI;AACvC;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,gBAAgB,IAAI,KAAK,EAAE;AACjD,QAAI,UAAU;AACZ,eAAS,OAAO;AAChB;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AACJ,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK,EAAE;AAChD,aAAK,gBAAgB,OAAO,KAAK,EAAE;AACnC,YAAI,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,EAAG;AAC1C,aAAK,eAAe,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC;AAC3C,aAAK,wBAAwB,MAAM,QAAQ,IAAI;AAAA,MACjD;AAAA,MACA,KAAK,sBAAsB,MAAM;AAAA,IACnC;AACA,SAAK,gBAAgB,IAAI,KAAK,IAAI,EAAE,MAAM,MAAM,CAAC;AAAA,EACnD;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,KAAK,QAAQ,MAAM,QAAQ,QAAQ,IACjC,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,QAAQ,GAAG,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UACT,KAAK,QAAQ,MAAM,QAAQ,QAAQ,IACjC,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,QAAQ,GAAG,IACnC;AAAA,IACN,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,UAAU,EAAE,GAAG;AAIjB,WAAK,KAAK,mBAAmB,IAAI,MAAM,EAAE,EAAE,MAAM,MAAM;AAAA,MAEvD,CAAC;AACD,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,MAAc,mBAAmB,MAAc,IAA4B;AACzE,UAAM,SAAS,gBAAgB,EAAE;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,MAAM,OAAO,EAAE;AACzD,QAAI,WAAW,KAAC,iCAAmB,QAAQ,OAAO,EAAG;AACrD,UAAM,KAAK,iBAAiB,MAAM,MAAM;AAAA,EAC1C;AAAA,EAEA,QAAc;AACZ,eAAW,WAAW,KAAK,gBAAgB,OAAO,EAAG,cAAa,QAAQ,KAAK;AAC/E,SAAK,gBAAgB,MAAM;AAC3B,SAAK,YAAY;AAAA,EACnB;AACF;;;AI/iBA,gBAA8C;;;ACavC,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;AC5CO,IAAM,4BAA4B;AAalC,SAAS,qBAAqB,KAAqB,SAAgC;AACxF,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,MAAY;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,UAAU;AACvB,cAAQ;AAAA,IACV;AACA,UAAM,aAAa,WAAW,MAAM;AAClC,iBAAW,MAAM,IAAI,SAAS;AAC5B,YAAI;AACF,aAAG,UAAU;AAAA,QACf,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,OAAO;AAGV,QAAI,MAAM,MAAM,OAAO,CAAC;AACxB,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,WAAG,MAAM,MAAM,sBAAsB;AAAA,MACvC,QAAQ;AACN,YAAI;AACF,aAAG,UAAU;AAAA,QACf,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AFNA,SAAS,kBAAkB,MAAuB;AAChD,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,OAAO,CAAC,OAAO,UAAU,QAAQ,MAAM,YAAY,CAAC;AACzF,SAAO,KAAK;AACd;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,MAAI,CAAC,OAAO,SAAS,eAAe,KAAK,kBAAkB,GAAG;AAC5D,UAAM,IAAI,WAAW,sDAAsD;AAAA,EAC7E;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,gBAAgB,QAAQ;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,oBAAoB,QAAQ,sBAAsB;AAAA,EACpD,CAAC;AACD,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,QAAQ,YAAY,gBAAgB,CAAC,IAC3E,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,gBAAgB,CAAC;AAChF,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,eAAe;AACnB,MAAI;AACJ,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,QAAI,cAAc;AAChB,SAAG,MAAM,MAAM,sBAAsB;AACrC;AAAA,IACF;AACA,cAAU,MAAM,EAAE;AAGlB,OAAG,GAAG,SAAS,MAAM,MAAS;AAC9B,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,QAAI,WAAW;AACf,UAAM,QAAkB,CAAC;AACzB,QAAI,cAAc;AAClB,UAAM,yBACJ,QAAQ,0BAA0B;AACpC,UAAM,sBAAsB,QAAQ,uBAAuB;AAC3D,UAAM,UAAU,IAAI;AAAA,MAClB,QAAQ,qBAAqB;AAAA,MAC7B,QAAQ,gBAAgB;AAAA,IAC1B;AAEA,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,UAAI,UAAU,WAAY;AAC1B,YAAM,eAAe,kBAAkB,IAAI;AAC3C,UAAI,eAAe,iBAAiB;AAClC,gBAAQ;AACR,WAAG,MAAM,MAAM,mBAAmB;AAClC;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,gBAAQ;AACR,WAAG,MAAM,MAAM,qBAAqB;AACpC;AAAA,MACF;AACA,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAW;AACvB,YACE,MAAM,UAAU,0BAChB,cAAc,eAAe,qBAC7B;AACA,kBAAQ;AACR,aAAG,MAAM,MAAM,qCAAqC;AACpD;AAAA,QACF;AACA,cAAM,KAAK,GAAG;AACd,uBAAe;AACf;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,SAAU,KAAI,iBAAiB,MAAM;AAAA,IAC3C,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,UAAU,UAAU,cAAc,aAAc;AACpD,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,iBAAW;AACX,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AACf,oBAAc;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,UAAU,CAAC,cAAc;AAC5B,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,QAAM,QAAQ,MAAqB;AACjC,QAAI,aAAc,QAAO;AACzB,mBAAe;AACf,mBAAe,qBAAqB,KAAK,eAAe,EAAE,KAAK,MAAM;AACnE,gBAAU,KAAK;AACf,UAAI,MAAM;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["import_sync"]}
+{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/resource-limits.ts","../src/create-sync-server.ts","../src/heartbeat.ts","../src/shutdown.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\nexport type { SyncHubOptions, Connection } from './sync-hub';\nexport { MemoryHubBackend } from './memory-hub-backend';\nexport type { HubBackend, FogApplyResult, FogPatchApplyResult } from './hub-backend';\nexport { createSyncServer } from './create-sync-server';\nexport type { CreateSyncServerOptions } from './create-sync-server';\nexport { InMemoryHubFanout } from './hub-fanout';\nexport type { HubFanout } from './hub-fanout';\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\nexport type {\n  Authorize,\n  AuthorizeContext,\n  AuthorizeLayer,\n  AuthorizeLayerContext,\n  AuthorizeFog,\n  AuthorizeFogContext,\n  OwnedElement,\n  ReadContext,\n  CanRead,\n} from './authorize';\nexport { startHeartbeat } from './heartbeat';\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\n","import {\n  parseEnvelope,\n  isValidElement,\n  isNewerLayerRecord,\n  FogLedger,\n  type LayerRecord,\n  type SyncOp,\n  type SyncEnvelope,\n  type FogMetaRecord,\n  type FogTileRecord,\n  type FogSnapshot,\n} from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, AuthorizeLayer, AuthorizeFog, CanRead, OwnedElement } from './authorize';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_MAX_PRESENCE_LANES,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  hasJsonDepthAtMost,\n} from './resource-limits';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  authorizeLayer?: AuthorizeLayer;\n  authorizeFog?: AuthorizeFog;\n  canRead?: CanRead;\n  maxJsonDepth?: number;\n  presenceThrottleMs?: number;\n  maxPresenceLanes?: number;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\ntype LayerOp = Extract<SyncOp, { kind: 'layer-upsert' | 'layer-remove' }>;\n\ninterface PresenceLane {\n  lastSentAt: number | undefined;\n  pending: { data: unknown; timer: ReturnType<typeof setTimeout> } | null;\n}\n\nconst FALLBACK_PRESENCE_LANE = '';\nconst MAX_PRESENCE_LANE_LENGTH = 64;\n\nfunction presenceLaneOf(data: unknown): string {\n  if (typeof data !== 'object' || data === null) return FALLBACK_PRESENCE_LANE;\n  const kind = (data as { kind?: unknown }).kind;\n  if (typeof kind !== 'string' || kind.length === 0 || kind.length > MAX_PRESENCE_LANE_LENGTH) {\n    return FALLBACK_PRESENCE_LANE;\n  }\n  return kind;\n}\n\nfunction isLayerOp(op: unknown): op is LayerOp {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  // Shape is re-validated by parseEnvelope on the serial path; fanout payloads\n  // come from a sibling hub that already validated them.\n  return k === 'layer-upsert' || k === 'layer-remove';\n}\n\nfunction layerOpToRecord(op: LayerOp): LayerRecord {\n  return op.kind === 'layer-upsert'\n    ? { id: op.layer.id, version: op.version, editor: op.editor, definition: op.layer }\n    : { id: op.id, version: op.version, editor: op.editor };\n}\n\nfunction layerRecordToOp(record: LayerRecord): LayerOp {\n  return record.definition\n    ? {\n        kind: 'layer-upsert',\n        layer: record.definition,\n        version: record.version,\n        editor: record.editor,\n      }\n    : { kind: 'layer-remove', id: record.id, version: record.version, editor: record.editor };\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\ntype FogOp = Extract<SyncOp, { kind: 'fog-meta' | 'fog-patch' }>;\n\nfunction isFogOp(op: unknown): op is FogOp {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'fog-meta' || k === 'fog-patch';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly authorizeLayer?: AuthorizeLayer;\n  private readonly authorizeFog?: AuthorizeFog;\n  private readonly canRead?: CanRead;\n  private readonly memoryLayers = new Map<string, Map<string, LayerRecord>>();\n  private readonly memoryFog = new Map<string, FogLedger>();\n  private readonly maxJsonDepth: number;\n  private readonly presenceThrottleMs: number;\n  private readonly maxPresenceLanes: number;\n  /**\n   * Presence throttle state keyed by connection, then by lane. A lane is the\n   * payload's `kind` (a non-empty string of at most 64 chars) or the reserved\n   * fallback lane `''`, so a rapid stream of one kind (awareness cursors) can\n   * never replace a pending frame of another kind (a ping, a path `cleared`).\n   * Within a lane the newest payload wins. The lane count per connection is\n   * capped by `maxPresenceLanes`, counting the fallback lane, so a client\n   * cannot mint timers by varying `kind`.\n   */\n  private readonly presenceLanes = new Map<string, Map<string, PresenceLane>>();\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    const fogMethods = [\n      this.backend.fogSnapshot,\n      this.backend.applyFogMeta,\n      this.backend.applyFogPatch,\n    ];\n    if (\n      (fogMethods.some(Boolean) || Boolean(this.backend.applyFogTile)) &&\n      !fogMethods.every(Boolean)\n    ) {\n      throw new Error(\n        'HubBackend fog support is an all-or-none capability: fogSnapshot, applyFogMeta, and applyFogPatch are required',\n      );\n    }\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.authorizeLayer = options.authorizeLayer;\n    this.authorizeFog = options.authorizeFog;\n    this.canRead = options.canRead;\n    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;\n    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;\n    const maxPresenceLanes = options.maxPresenceLanes ?? DEFAULT_MAX_PRESENCE_LANES;\n    if (!Number.isFinite(maxPresenceLanes) || maxPresenceLanes < 1) {\n      throw new RangeError('maxPresenceLanes must be a finite number of at least 1');\n    }\n    this.maxPresenceLanes = Math.floor(maxPresenceLanes);\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    this.clearPresenceLanes(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  /**\n   * Broadcasts ephemeral server-owned presence data to every connection in a room.\n   * The returned count covers successful delivery on this hub instance only; configured fan-out\n   * forwards the same event to other instances on a best-effort basis.\n   */\n  broadcastPresence<T>(room: string, data: T): number {\n    const op = { kind: 'presence' as const, data };\n    const sent = this.relayToRoom(room, undefined, JSON.stringify({ from: HUB_FROM, op }));\n    this.safePublish(JSON.stringify({ o: this.instanceId, room, from: HUB_FROM, op }));\n    return sent;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.schedulePresence(conn, env.op.data); // off-queue, throttled independently\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const operation = prev.then(() => this.process(conn, env));\n    this.roomQueues.set(\n      room,\n      operation.catch(() => {\n        // Recover only the internal tail so one failed message never wedges the room queue.\n        // The caller still receives the operation rejection for observability.\n      }),\n    );\n    return operation;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      // Layer records are presentation-only and carry no element bytes, so no\n      // audience filter applies; the field is omitted while a room has never\n      // used layer sync, keeping snapshot frames byte-identical to before.\n      const layers = await this.getLayerRecords(conn.room);\n      const fog = await this.getFogSnapshot(conn.room);\n      const snapshotOp: Record<string, unknown> = {\n        kind: 'snapshot',\n        to: env.from,\n        elements,\n      };\n      if (layers.length > 0) snapshotOp['layers'] = layers;\n      if (fog) snapshotOp['fog'] = fog;\n      conn.send(JSON.stringify({ from: HUB_FROM, op: snapshotOp }));\n    } else if (op.kind === 'layer-upsert' || op.kind === 'layer-remove') {\n      await this.processLayerOp(conn, op);\n    } else if (op.kind === 'fog-meta' || op.kind === 'fog-patch') {\n      await this.processFogOp(conn, op);\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      await this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  /**\n   * Applies a layer-definition edit on the room's serial queue. Convergence is\n   * last-writer-wins under the deterministic (version, editor) ordering — the\n   * same rule every client applies — so arrival order never decides a race. A\n   * stale or denied edit is answered with an authoritative correction to the\n   * sender only.\n   */\n  private async processLayerOp(conn: Connection, op: LayerOp): Promise<void> {\n    const record = layerOpToRecord(op);\n    const current = await this.getLayerRecord(conn.room, record.id);\n    if (this.authorizeLayer) {\n      const allowed = await this.authorizeLayer({\n        userId: conn.userId,\n        role: conn.role,\n        room: conn.room,\n        op,\n        currentRecord: current,\n      });\n      if (!allowed) {\n        // Revert the sender to the room's record; a tombstone when there is\n        // none, so the denied local edit disappears everywhere consistently.\n        const correction = current ?? { id: record.id, version: record.version, editor: HUB_FROM };\n        conn.send(JSON.stringify({ from: HUB_FROM, op: layerRecordToOp(correction) }));\n        return;\n      }\n    }\n    if (current && !isNewerLayerRecord(record, current)) {\n      // Stale under (version, editor): converge the sender, do not broadcast.\n      conn.send(JSON.stringify({ from: HUB_FROM, op: layerRecordToOp(current) }));\n      return;\n    }\n    await this.applyLayerRecord(conn.room, record);\n    await this.fanout.publish(\n      JSON.stringify({ o: this.instanceId, room: conn.room, from: conn.id, op }),\n    );\n    this.relayToRoom(conn.room, conn.id, JSON.stringify({ from: conn.id, op }));\n  }\n\n  private layerBackend(): Required<\n    Pick<HubBackend, 'layerRecords' | 'getLayerRecord' | 'applyLayerRecord'>\n  > | null {\n    const { layerRecords, getLayerRecord, applyLayerRecord } = this.backend;\n    if (!layerRecords || !getLayerRecord || !applyLayerRecord) return null;\n    return {\n      layerRecords: layerRecords.bind(this.backend),\n      getLayerRecord: getLayerRecord.bind(this.backend),\n      applyLayerRecord: applyLayerRecord.bind(this.backend),\n    };\n  }\n\n  private async getLayerRecords(room: string): Promise<LayerRecord[]> {\n    const backend = this.layerBackend();\n    if (backend) return backend.layerRecords(room);\n    return [...(this.memoryLayers.get(room)?.values() ?? [])];\n  }\n\n  private async getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined> {\n    const backend = this.layerBackend();\n    if (backend) return backend.getLayerRecord(room, id);\n    return this.memoryLayers.get(room)?.get(id);\n  }\n\n  private async applyLayerRecord(room: string, record: LayerRecord): Promise<void> {\n    const backend = this.layerBackend();\n    if (backend) {\n      await backend.applyLayerRecord(room, record);\n      return;\n    }\n    let map = this.memoryLayers.get(room);\n    if (!map) {\n      map = new Map();\n      this.memoryLayers.set(room, map);\n    }\n    map.set(record.id, record);\n  }\n\n  // ── Fog processing ──\n\n  private fogBackend(): Required<\n    Pick<HubBackend, 'fogSnapshot' | 'applyFogMeta' | 'applyFogPatch'>\n  > | null {\n    const { fogSnapshot, applyFogMeta, applyFogPatch } = this.backend;\n    if (!fogSnapshot || !applyFogMeta || !applyFogPatch) return null;\n    return {\n      fogSnapshot: fogSnapshot.bind(this.backend),\n      applyFogMeta: applyFogMeta.bind(this.backend),\n      applyFogPatch: applyFogPatch.bind(this.backend),\n    };\n  }\n\n  private getFogLedger(room: string): FogLedger {\n    let ledger = this.memoryFog.get(room);\n    if (!ledger) {\n      ledger = new FogLedger();\n      this.memoryFog.set(room, ledger);\n    }\n    return ledger;\n  }\n\n  private async getFogSnapshot(room: string): Promise<FogSnapshot | undefined> {\n    const backend = this.fogBackend();\n    if (backend) return backend.fogSnapshot(room);\n    return this.getFogLedger(room).snapshot();\n  }\n\n  private async applyFogMeta(\n    room: string,\n    record: FogMetaRecord,\n  ): Promise<{ accepted: boolean; correction?: FogMetaRecord }> {\n    const backend = this.fogBackend();\n    if (backend) return backend.applyFogMeta(room, record);\n    return this.getFogLedger(room).applyMeta(record);\n  }\n\n  private async applyFogPatch(\n    room: string,\n    records: readonly FogTileRecord[],\n  ): Promise<{ accepted: FogTileRecord[]; corrections: FogTileRecord[] }> {\n    const backend = this.fogBackend();\n    if (backend) return backend.applyFogPatch(room, records);\n    return this.getFogLedger(room).applyPatch(records);\n  }\n\n  private async processFogOp(\n    conn: Connection,\n    op: Extract<SyncOp, { kind: 'fog-meta' | 'fog-patch' }>,\n  ): Promise<void> {\n    const current = await this.getFogSnapshot(conn.room);\n\n    if (this.authorizeFog) {\n      const allowed = await this.authorizeFog({\n        userId: conn.userId,\n        role: conn.role,\n        room: conn.room,\n        op,\n        current,\n      });\n      if (!allowed) {\n        if (op.kind === 'fog-meta') {\n          const correction =\n            current?.meta ?? ({ version: 1, editor: HUB_FROM } satisfies FogMetaRecord);\n          conn.send(\n            JSON.stringify({ from: HUB_FROM, op: { kind: 'fog-meta', record: correction } }),\n          );\n        } else if (current?.meta.definition) {\n          const corrections = op.tiles.map((t) => {\n            const existing = current.tiles.find((ct) => ct.x === t.x && ct.y === t.y);\n            return (\n              existing ?? {\n                generation: current.meta.definition?.generation ?? op.generation,\n                x: t.x,\n                y: t.y,\n                version: 1,\n                editor: HUB_FROM,\n              }\n            );\n          });\n          conn.send(\n            JSON.stringify({\n              from: HUB_FROM,\n              op: {\n                kind: 'fog-patch',\n                generation: current.meta.definition.generation,\n                tiles: corrections,\n              },\n            }),\n          );\n        } else {\n          conn.send(\n            JSON.stringify({\n              from: HUB_FROM,\n              op: {\n                kind: 'fog-meta',\n                record: current?.meta ?? { version: 1, editor: HUB_FROM },\n              },\n            }),\n          );\n        }\n        return;\n      }\n    }\n\n    let outbound: FogOp;\n    if (op.kind === 'fog-meta') {\n      const result = await this.applyFogMeta(conn.room, op.record);\n      if (!result.accepted) {\n        if (result.correction) {\n          conn.send(\n            JSON.stringify({ from: HUB_FROM, op: { kind: 'fog-meta', record: result.correction } }),\n          );\n        }\n        return;\n      }\n      outbound = op;\n    } else {\n      const { accepted, corrections } = await this.applyFogPatch(conn.room, op.tiles);\n      if (corrections.length > 0) {\n        const correctionGeneration = corrections[0]?.generation ?? op.generation;\n        conn.send(\n          JSON.stringify({\n            from: HUB_FROM,\n            op: { kind: 'fog-patch', generation: correctionGeneration, tiles: corrections },\n          }),\n        );\n      }\n      if (accepted.length === 0) return;\n      outbound = { kind: 'fog-patch', generation: op.generation, tiles: accepted };\n    }\n\n    await this.fanout.publish(\n      JSON.stringify({ o: this.instanceId, room: conn.room, from: conn.id, op: outbound }),\n    );\n    this.relayToRoom(conn.room, conn.id, JSON.stringify({ from: conn.id, op: outbound }));\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      void Promise.resolve(this.fanout.publish(payload)).catch(() => {\n        /* presence is ephemeral; a broken publisher must not create an unhandled rejection */\n      });\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): number {\n    const members = this.rooms.get(room);\n    if (!members) return 0;\n    let sent = 0;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n        sent += 1;\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n    return sent;\n  }\n\n  private broadcastClientPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private clearPresenceLanes(connId: string): void {\n    const lanes = this.presenceLanes.get(connId);\n    if (!lanes) return;\n    for (const lane of lanes.values()) {\n      if (lane.pending) clearTimeout(lane.pending.timer);\n    }\n    this.presenceLanes.delete(connId);\n  }\n\n  private schedulePresence(conn: Connection, data: unknown): void {\n    if (this.presenceThrottleMs <= 0) {\n      this.broadcastClientPresence(conn, data);\n      return;\n    }\n    const lane = this.presenceLaneFor(conn.id, presenceLaneOf(data));\n    const now = Date.now();\n    if (lane.lastSentAt === undefined || now - lane.lastSentAt >= this.presenceThrottleMs) {\n      if (lane.pending) {\n        clearTimeout(lane.pending.timer);\n        lane.pending = null;\n      }\n      lane.lastSentAt = now;\n      this.broadcastClientPresence(conn, data);\n      return;\n    }\n    if (lane.pending) {\n      lane.pending.data = data;\n      return;\n    }\n    const timer = setTimeout(\n      () => {\n        const pending = lane.pending;\n        lane.pending = null;\n        if (!pending || !this.conns.has(conn.id)) return;\n        lane.lastSentAt = Date.now();\n        this.broadcastClientPresence(conn, pending.data);\n      },\n      this.presenceThrottleMs - (now - lane.lastSentAt),\n    );\n    lane.pending = { data, timer };\n  }\n\n  private presenceLaneFor(connId: string, requested: string): PresenceLane {\n    let lanes = this.presenceLanes.get(connId);\n    if (!lanes) {\n      lanes = new Map();\n      this.presenceLanes.set(connId, lanes);\n    }\n    let key = requested;\n    if (key !== FALLBACK_PRESENCE_LANE && !lanes.has(key)) {\n      const named = lanes.size - (lanes.has(FALLBACK_PRESENCE_LANE) ? 1 : 0);\n      if (named >= this.maxPresenceLanes - 1) key = FALLBACK_PRESENCE_LANE;\n    }\n    let lane = lanes.get(key);\n    if (!lane) {\n      lane = { lastSentAt: undefined, pending: null };\n      lanes.set(key, lane);\n    }\n    return lane;\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? this.mayRead(conn, current.audience)\n          ? { kind: 'upsert', element: current }\n          : { kind: 'remove', id: current.id }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current\n        ? this.mayRead(conn, current.audience)\n          ? { kind: 'upsert', element: current }\n          : { kind: 'remove', id: current.id }\n        : undefined;\n    } else if (op.kind === 'clear') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (isLayerOp(op)) {\n      void this.applyFanoutLayerOp(env.room, op).catch(() => {\n        /* a broken backend must not break the fanout relay */\n      });\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (isFogOp(op)) {\n      const previous = this.roomQueues.get(env.room) ?? Promise.resolve();\n      const operation = previous.then(async () => {\n        const accepted = await this.applyFanoutFogOp(env.room as string, op);\n        if (accepted) {\n          this.relayToRoom(\n            env.room as string,\n            undefined,\n            JSON.stringify({ from: env.from, op: accepted }),\n          );\n        }\n      });\n      this.roomQueues.set(\n        env.room,\n        operation.catch(() => {\n          /* a broken backend must not wedge the room queue */\n        }),\n      );\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  private async applyFanoutLayerOp(room: string, op: LayerOp): Promise<void> {\n    const record = layerOpToRecord(op);\n    const current = await this.getLayerRecord(room, record.id);\n    if (current && !isNewerLayerRecord(record, current)) return;\n    await this.applyLayerRecord(room, record);\n  }\n\n  private async applyFanoutFogOp(room: string, op: FogOp): Promise<FogOp | null> {\n    if (this.backend.sharedAcrossInstances === true && this.fogBackend()) return op;\n    if (op.kind === 'fog-meta') {\n      const result = await this.applyFogMeta(room, op.record);\n      return result.accepted ? op : null;\n    }\n    const { accepted } = await this.applyFogPatch(room, op.tiles);\n    return accepted.length > 0 ? { ...op, tiles: accepted } : null;\n  }\n\n  close(): void {\n    for (const connId of [...this.presenceLanes.keys()]) this.clearPresenceLanes(connId);\n    this.fanoutUnsub();\n  }\n}\n","import {\n  applyOpToMap,\n  FogLedger,\n  type SyncOp,\n  type LayerRecord,\n  type FogSnapshot,\n  type FogMetaRecord,\n  type FogTileRecord,\n} from '@fieldnotes/sync';\nimport type { CanvasElement } from '@fieldnotes/core';\nimport type { FogApplyResult, FogPatchApplyResult, HubBackend } from './hub-backend';\n\nexport class MemoryHubBackend implements HubBackend {\n  private rooms = new Map<string, Map<string, CanvasElement>>();\n  private roomLayers = new Map<string, Map<string, LayerRecord>>();\n  private roomFog = new Map<string, FogLedger>();\n\n  private room(id: string): Map<string, CanvasElement> {\n    let r = this.rooms.get(id);\n    if (!r) {\n      r = new Map();\n      this.rooms.set(id, r);\n    }\n    return r;\n  }\n\n  private layers(room: string): Map<string, LayerRecord> {\n    let r = this.roomLayers.get(room);\n    if (!r) {\n      r = new Map();\n      this.roomLayers.set(room, r);\n    }\n    return r;\n  }\n\n  async snapshot(room: string): Promise<CanvasElement[]> {\n    return [...this.room(room).values()];\n  }\n\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\n    return this.room(room).get(id);\n  }\n\n  async apply(room: string, op: SyncOp): Promise<void> {\n    if (op.kind === 'clear') {\n      // Clears elements only; layer records are a separate, longer-lived ledger.\n      this.rooms.delete(room);\n      return;\n    }\n    applyOpToMap(this.room(room), op);\n  }\n\n  async layerRecords(room: string): Promise<LayerRecord[]> {\n    return [...this.layers(room).values()];\n  }\n\n  async getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined> {\n    return this.layers(room).get(id);\n  }\n\n  async applyLayerRecord(room: string, record: LayerRecord): Promise<void> {\n    this.layers(room).set(record.id, record);\n  }\n\n  private fog(room: string): FogLedger {\n    let ledger = this.roomFog.get(room);\n    if (!ledger) {\n      ledger = new FogLedger();\n      this.roomFog.set(room, ledger);\n    }\n    return ledger;\n  }\n\n  async fogSnapshot(room: string): Promise<FogSnapshot | undefined> {\n    return this.fog(room).snapshot();\n  }\n\n  async applyFogMeta(room: string, record: FogMetaRecord): Promise<FogApplyResult<FogMetaRecord>> {\n    return this.fog(room).applyMeta(record);\n  }\n\n  async applyFogTile(room: string, record: FogTileRecord): Promise<FogApplyResult<FogTileRecord>> {\n    return this.fog(room).applyTile(record);\n  }\n\n  async applyFogPatch(\n    room: string,\n    records: readonly FogTileRecord[],\n  ): Promise<FogPatchApplyResult> {\n    return this.fog(room).applyPatch(records);\n  }\n}\n","export interface HubFanout {\n  publish(payload: string): void | Promise<void>;\n  subscribe(handler: (payload: string) => void): () => void;\n  close?(): void;\n}\n\nexport class InMemoryHubFanout implements HubFanout {\n  private readonly handlers = new Set<(payload: string) => void>();\n\n  publish(payload: string): void {\n    for (const h of this.handlers) {\n      try {\n        h(payload);\n      } catch {\n        /* one throwing subscriber must not break the publish loop */\n      }\n    }\n  }\n\n  subscribe(handler: (payload: string) => void): () => void {\n    this.handlers.add(handler);\n    return () => this.handlers.delete(handler);\n  }\n}\n","export const DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;\nexport const DEFAULT_MAX_JSON_DEPTH = 32;\nexport const DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;\nexport const DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;\nexport const DEFAULT_MESSAGES_PER_SECOND = 120;\nexport const DEFAULT_MESSAGE_BURST = 240;\nexport const DEFAULT_PRESENCE_THROTTLE_MS = 50;\n/** Per-connection presence throttle lanes, INCLUDING the reserved fallback lane. */\nexport const DEFAULT_MAX_PRESENCE_LANES = 16;\n\nexport function hasJsonDepthAtMost(message: string, maxDepth: number): boolean {\n  let depth = 0;\n  let inString = false;\n  let escaped = false;\n\n  for (const char of message) {\n    if (inString) {\n      if (escaped) escaped = false;\n      else if (char === '\\\\') escaped = true;\n      else if (char === '\"') inString = false;\n      continue;\n    }\n    if (char === '\"') inString = true;\n    else if (char === '{' || char === '[') {\n      depth += 1;\n      if (depth > maxDepth) return false;\n    } else if (char === '}' || char === ']') {\n      depth -= 1;\n      if (depth < 0) return false;\n    }\n  }\n\n  return depth === 0 && !inString;\n}\n\nexport class MessageRateLimiter {\n  private tokens: number;\n  private updatedAt: number;\n\n  constructor(\n    private readonly ratePerSecond: number,\n    private readonly burst: number,\n    now = Date.now(),\n  ) {\n    this.tokens = burst;\n    this.updatedAt = now;\n  }\n\n  take(now = Date.now()): boolean {\n    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1000;\n    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);\n    this.updatedAt = now;\n    if (this.tokens < 1) return false;\n    this.tokens -= 1;\n    return true;\n  }\n}\n","import { WebSocketServer, type RawData } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, AuthorizeLayer, AuthorizeFog, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_MAX_MESSAGE_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_MESSAGES,\n  DEFAULT_MESSAGE_BURST,\n  DEFAULT_MESSAGES_PER_SECOND,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  MessageRateLimiter,\n} from './resource-limits';\nimport { DEFAULT_SHUTDOWN_GRACE_MS, drainWebSocketServer } from './shutdown';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  authorizeLayer?: AuthorizeLayer;\n  authorizeFog?: AuthorizeFog;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n  maxMessageBytes?: number;\n  maxJsonDepth?: number;\n  maxPendingAuthMessages?: number;\n  maxPendingAuthBytes?: number;\n  messagesPerSecond?: number;\n  messageBurst?: number;\n  presenceThrottleMs?: number;\n  maxPresenceLanes?: number;\n  shutdownGraceMs?: number;\n}\n\nfunction rawDataByteLength(data: RawData): number {\n  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);\n  return data.byteLength;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const shutdownGraceMs = options.shutdownGraceMs ?? DEFAULT_SHUTDOWN_GRACE_MS;\n  if (!Number.isFinite(shutdownGraceMs) || shutdownGraceMs < 0) {\n    throw new RangeError('shutdownGraceMs must be a non-negative finite number');\n  }\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    authorizeLayer: options.authorizeLayer,\n    authorizeFog: options.authorizeFog,\n    canRead: options.canRead,\n    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,\n    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS,\n    maxPresenceLanes: options.maxPresenceLanes,\n  });\n  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server, maxPayload: maxMessageBytes })\n    : new WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let shuttingDown = false;\n  let closePromise: Promise<void> | undefined;\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    if (shuttingDown) {\n      ws.close(1001, 'server shutting down');\n      return;\n    }\n    heartbeat.track(ws);\n    // Protocol/parser failures (including maxPayload) close the peer. Consuming the socket-level\n    // error keeps hostile input from becoming an uncaught process error.\n    ws.on('error', () => undefined);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    let admitted = false;\n    const queue: string[] = [];\n    let queuedBytes = 0;\n    const maxPendingAuthMessages =\n      options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;\n    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;\n    const limiter = new MessageRateLimiter(\n      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,\n      options.messageBurst ?? DEFAULT_MESSAGE_BURST,\n    );\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      if (state === 'rejected') return;\n      const messageBytes = rawDataByteLength(data);\n      if (messageBytes > maxMessageBytes) {\n        state = 'rejected';\n        ws.close(1009, 'message too large');\n        return;\n      }\n      if (!limiter.take()) {\n        state = 'rejected';\n        ws.close(4408, 'rate limit exceeded');\n        return;\n      }\n      const msg = String(data);\n      if (state === 'pending') {\n        if (\n          queue.length >= maxPendingAuthMessages ||\n          queuedBytes + messageBytes > maxPendingAuthBytes\n        ) {\n          state = 'rejected';\n          ws.close(4408, 'authentication queue limit exceeded');\n          return;\n        }\n        queue.push(msg);\n        queuedBytes += messageBytes;\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (admitted) hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed || state === 'rejected' || shuttingDown) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        admitted = true;\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n        queuedBytes = 0;\n      })\n      .catch(() => {\n        if (!closed && !shuttingDown) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  const close = (): Promise<void> => {\n    if (closePromise) return closePromise;\n    shuttingDown = true;\n    closePromise = drainWebSocketServer(wss, shutdownGraceMs).then(() => {\n      heartbeat.stop();\n      hub.close();\n    });\n    return closePromise;\n  };\n\n  return {\n    hub,\n    wss,\n    close,\n  };\n}\n","export interface HeartbeatSocket {\n  ping(): void;\n  terminate(): void;\n  on(event: 'pong', listener: () => void): void;\n}\nexport interface HeartbeatServer {\n  clients: Set<HeartbeatSocket>;\n}\nexport interface Heartbeat {\n  track(ws: HeartbeatSocket): void;\n  stop(): void;\n}\n\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\n  if (intervalMs <= 0) {\n    return {\n      track: () => {\n        /* disabled */\n      },\n      stop: () => {\n        /* disabled */\n      },\n    };\n  }\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\n  const track = (ws: HeartbeatSocket): void => {\n    alive.set(ws, true);\n    ws.on('pong', () => alive.set(ws, true));\n  };\n  const interval = setInterval(() => {\n    for (const ws of wss.clients) {\n      try {\n        if (alive.get(ws) === false) {\n          ws.terminate();\n          continue;\n        }\n        alive.set(ws, false);\n        ws.ping();\n      } catch {\n        /* socket dying mid-tick — skip it */\n      }\n    }\n  }, intervalMs);\n  return { track, stop: () => clearInterval(interval) };\n}\n","export const DEFAULT_SHUTDOWN_GRACE_MS = 5000;\n\nexport interface ShutdownSocket {\n  close(code?: number, reason?: string): void;\n  terminate(): void;\n}\n\nexport interface ShutdownServer {\n  clients: Set<ShutdownSocket>;\n  close(callback: (error?: Error) => void): void;\n}\n\n/** Stop admission, ask connected peers to leave, then forcefully reap stragglers. */\nexport function drainWebSocketServer(wss: ShutdownServer, graceMs: number): Promise<void> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(forceTimer);\n      resolve();\n    };\n    const forceTimer = setTimeout(() => {\n      for (const ws of wss.clients) {\n        try {\n          ws.terminate();\n        } catch {\n          /* socket already failed while shutdown was in progress */\n        }\n      }\n      finish();\n    }, graceMs);\n\n    // Calling close first prevents new connections. Its callback runs once all clients have left.\n    wss.close(() => finish());\n    for (const ws of wss.clients) {\n      try {\n        ws.close(1001, 'server shutting down');\n      } catch {\n        try {\n          ws.terminate();\n        } catch {\n          /* socket already closed */\n        }\n      }\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAWO;;;ACXP,kBAQO;AAIA,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EACpD,aAAa,oBAAI,IAAsC;AAAA,EACvD,UAAU,oBAAI,IAAuB;AAAA,EAErC,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,OAAO,MAAwC;AACrD,QAAI,IAAI,KAAK,WAAW,IAAI,IAAI;AAChC,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,WAAW,IAAI,MAAM,CAAC;AAAA,IAC7B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AAEvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AAAA,EAEA,MAAM,aAAa,MAAsC;AACvD,WAAO,CAAC,GAAG,KAAK,OAAO,IAAI,EAAE,OAAO,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,eAAe,MAAc,IAA8C;AAC/E,WAAO,KAAK,OAAO,IAAI,EAAE,IAAI,EAAE;AAAA,EACjC;AAAA,EAEA,MAAM,iBAAiB,MAAc,QAAoC;AACvE,SAAK,OAAO,IAAI,EAAE,IAAI,OAAO,IAAI,MAAM;AAAA,EACzC;AAAA,EAEQ,IAAI,MAAyB;AACnC,QAAI,SAAS,KAAK,QAAQ,IAAI,IAAI;AAClC,QAAI,CAAC,QAAQ;AACX,eAAS,IAAI,sBAAU;AACvB,WAAK,QAAQ,IAAI,MAAM,MAAM;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,MAAgD;AAChE,WAAO,KAAK,IAAI,IAAI,EAAE,SAAS;AAAA,EACjC;AAAA,EAEA,MAAM,aAAa,MAAc,QAA+D;AAC9F,WAAO,KAAK,IAAI,IAAI,EAAE,UAAU,MAAM;AAAA,EACxC;AAAA,EAEA,MAAM,aAAa,MAAc,QAA+D;AAC9F,WAAO,KAAK,IAAI,IAAI,EAAE,UAAU,MAAM;AAAA,EACxC;AAAA,EAEA,MAAM,cACJ,MACA,SAC8B;AAC9B,WAAO,KAAK,IAAI,IAAI,EAAE,WAAW,OAAO;AAAA,EAC1C;AACF;;;ACrFO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;ACvBO,IAAM,4BAA4B,OAAO;AACzC,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC;AAC1C,IAAM,iCAAiC,IAAI,OAAO;AAClD,IAAM,8BAA8B;AACpC,IAAM,wBAAwB;AAC9B,IAAM,+BAA+B;AAErC,IAAM,6BAA6B;AAEnC,SAAS,mBAAmB,SAAiB,UAA2B;AAC7E,MAAI,QAAQ;AACZ,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,aAAW,QAAQ,SAAS;AAC1B,QAAI,UAAU;AACZ,UAAI,QAAS,WAAU;AAAA,eACd,SAAS,KAAM,WAAU;AAAA,eACzB,SAAS,IAAK,YAAW;AAClC;AAAA,IACF;AACA,QAAI,SAAS,IAAK,YAAW;AAAA,aACpB,SAAS,OAAO,SAAS,KAAK;AACrC,eAAS;AACT,UAAI,QAAQ,SAAU,QAAO;AAAA,IAC/B,WAAW,SAAS,OAAO,SAAS,KAAK;AACvC,eAAS;AACT,UAAI,QAAQ,EAAG,QAAO;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,UAAU,KAAK,CAAC;AACzB;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAI9B,YACmB,eACA,OACjB,MAAM,KAAK,IAAI,GACf;AAHiB;AACA;AAGjB,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AAAA,EAVQ;AAAA,EACA;AAAA,EAWR,KAAK,MAAM,KAAK,IAAI,GAAY;AAC9B,UAAM,iBAAiB,KAAK,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI;AAC3D,SAAK,SAAS,KAAK,IAAI,KAAK,OAAO,KAAK,SAAS,iBAAiB,KAAK,aAAa;AACpF,SAAK,YAAY;AACjB,QAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,SAAK,UAAU;AACf,WAAO;AAAA,EACT;AACF;;;AHZA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,YAAO,6BAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AASA,IAAM,yBAAyB;AAC/B,IAAM,2BAA2B;AAEjC,SAAS,eAAe,MAAuB;AAC7C,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,OAAQ,KAA4B;AAC1C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,SAAS,0BAA0B;AAC3F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,UAAU,IAA4B;AAC7C,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AAGrC,SAAO,MAAM,kBAAkB,MAAM;AACvC;AAEA,SAAS,gBAAgB,IAA0B;AACjD,SAAO,GAAG,SAAS,iBACf,EAAE,IAAI,GAAG,MAAM,IAAI,SAAS,GAAG,SAAS,QAAQ,GAAG,QAAQ,YAAY,GAAG,MAAM,IAChF,EAAE,IAAI,GAAG,IAAI,SAAS,GAAG,SAAS,QAAQ,GAAG,OAAO;AAC1D;AAEA,SAAS,gBAAgB,QAA8B;AACrD,SAAO,OAAO,aACV;AAAA,IACE,MAAM;AAAA,IACN,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,IACA,EAAE,MAAM,gBAAgB,IAAI,OAAO,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,OAAO;AAC5F;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAIA,SAAS,QAAQ,IAA0B;AACzC,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe,oBAAI,IAAsC;AAAA,EACzD,YAAY,oBAAI,IAAuB;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,oBAAI,IAAuC;AAAA,EAE5E,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,UAAM,aAAa;AAAA,MACjB,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,IACf;AACA,SACG,WAAW,KAAK,OAAO,KAAK,QAAQ,KAAK,QAAQ,YAAY,MAC9D,CAAC,WAAW,MAAM,OAAO,GACzB;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,eAAe,QAAQ;AAC5B,SAAK,UAAU,QAAQ;AACvB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,qBAAqB,QAAQ,sBAAsB;AACxD,UAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAI,CAAC,OAAO,SAAS,gBAAgB,KAAK,mBAAmB,GAAG;AAC9D,YAAM,IAAI,WAAW,wDAAwD;AAAA,IAC/E;AACA,SAAK,mBAAmB,KAAK,MAAM,gBAAgB;AACnD,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,SAAK,mBAAmB,MAAM;AAC9B,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,kBAAqB,MAAc,MAAiB;AAClD,UAAM,KAAK,EAAE,MAAM,YAAqB,KAAK;AAC7C,UAAM,OAAO,KAAK,YAAY,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,UAAU,GAAG,CAAC,CAAC;AACrF,SAAK,YAAY,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC;AACjF,WAAO;AAAA,EACT;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,QAAI,CAAC,mBAAmB,SAAS,KAAK,YAAY,EAAG,QAAO,QAAQ,QAAQ;AAC5E,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,iBAAiB,MAAM,IAAI,GAAG,IAAI;AACvC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,YAAY,KAAK,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC;AACzD,SAAK,WAAW;AAAA,MACd;AAAA,MACA,UAAU,MAAM,MAAM;AAAA,MAGtB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AAItF,YAAM,SAAS,MAAM,KAAK,gBAAgB,KAAK,IAAI;AACnD,YAAM,MAAM,MAAM,KAAK,eAAe,KAAK,IAAI;AAC/C,YAAM,aAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,IAAI,IAAI;AAAA,QACR;AAAA,MACF;AACA,UAAI,OAAO,SAAS,EAAG,YAAW,QAAQ,IAAI;AAC9C,UAAI,IAAK,YAAW,KAAK,IAAI;AAC7B,WAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,IAC9D,WAAW,GAAG,SAAS,kBAAkB,GAAG,SAAS,gBAAgB;AACnE,YAAM,KAAK,eAAe,MAAM,EAAE;AAAA,IACpC,WAAW,GAAG,SAAS,cAAc,GAAG,SAAS,aAAa;AAC5D,YAAM,KAAK,aAAa,MAAM,EAAE;AAAA,IAClC,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,YAAM,KAAK,OAAO;AAAA,QAChB,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAAA,IACvF;AAAA,EAEF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,eAAe,MAAkB,IAA4B;AACzE,UAAM,SAAS,gBAAgB,EAAE;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,KAAK,MAAM,OAAO,EAAE;AAC9D,QAAI,KAAK,gBAAgB;AACvB,YAAM,UAAU,MAAM,KAAK,eAAe;AAAA,QACxC,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,UAAI,CAAC,SAAS;AAGZ,cAAM,aAAa,WAAW,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,SAAS,QAAQ,SAAS;AACzF,aAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,gBAAgB,UAAU,EAAE,CAAC,CAAC;AAC7E;AAAA,MACF;AAAA,IACF;AACA,QAAI,WAAW,KAAC,iCAAmB,QAAQ,OAAO,GAAG;AAEnD,WAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,gBAAgB,OAAO,EAAE,CAAC,CAAC;AAC1E;AAAA,IACF;AACA,UAAM,KAAK,iBAAiB,KAAK,MAAM,MAAM;AAC7C,UAAM,KAAK,OAAO;AAAA,MAChB,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,KAAK,MAAM,MAAM,KAAK,IAAI,GAAG,CAAC;AAAA,IAC3E;AACA,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC;AAAA,EAC5E;AAAA,EAEQ,eAEC;AACP,UAAM,EAAE,cAAc,gBAAgB,iBAAiB,IAAI,KAAK;AAChE,QAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,iBAAkB,QAAO;AAClE,WAAO;AAAA,MACL,cAAc,aAAa,KAAK,KAAK,OAAO;AAAA,MAC5C,gBAAgB,eAAe,KAAK,KAAK,OAAO;AAAA,MAChD,kBAAkB,iBAAiB,KAAK,KAAK,OAAO;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,gBAAgB,MAAsC;AAClE,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,QAAS,QAAO,QAAQ,aAAa,IAAI;AAC7C,WAAO,CAAC,GAAI,KAAK,aAAa,IAAI,IAAI,GAAG,OAAO,KAAK,CAAC,CAAE;AAAA,EAC1D;AAAA,EAEA,MAAc,eAAe,MAAc,IAA8C;AACvF,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,QAAS,QAAO,QAAQ,eAAe,MAAM,EAAE;AACnD,WAAO,KAAK,aAAa,IAAI,IAAI,GAAG,IAAI,EAAE;AAAA,EAC5C;AAAA,EAEA,MAAc,iBAAiB,MAAc,QAAoC;AAC/E,UAAM,UAAU,KAAK,aAAa;AAClC,QAAI,SAAS;AACX,YAAM,QAAQ,iBAAiB,MAAM,MAAM;AAC3C;AAAA,IACF;AACA,QAAI,MAAM,KAAK,aAAa,IAAI,IAAI;AACpC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,aAAa,IAAI,MAAM,GAAG;AAAA,IACjC;AACA,QAAI,IAAI,OAAO,IAAI,MAAM;AAAA,EAC3B;AAAA;AAAA,EAIQ,aAEC;AACP,UAAM,EAAE,aAAa,cAAc,cAAc,IAAI,KAAK;AAC1D,QAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,cAAe,QAAO;AAC5D,WAAO;AAAA,MACL,aAAa,YAAY,KAAK,KAAK,OAAO;AAAA,MAC1C,cAAc,aAAa,KAAK,KAAK,OAAO;AAAA,MAC5C,eAAe,cAAc,KAAK,KAAK,OAAO;AAAA,IAChD;AAAA,EACF;AAAA,EAEQ,aAAa,MAAyB;AAC5C,QAAI,SAAS,KAAK,UAAU,IAAI,IAAI;AACpC,QAAI,CAAC,QAAQ;AACX,eAAS,IAAI,uBAAU;AACvB,WAAK,UAAU,IAAI,MAAM,MAAM;AAAA,IACjC;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eAAe,MAAgD;AAC3E,UAAM,UAAU,KAAK,WAAW;AAChC,QAAI,QAAS,QAAO,QAAQ,YAAY,IAAI;AAC5C,WAAO,KAAK,aAAa,IAAI,EAAE,SAAS;AAAA,EAC1C;AAAA,EAEA,MAAc,aACZ,MACA,QAC4D;AAC5D,UAAM,UAAU,KAAK,WAAW;AAChC,QAAI,QAAS,QAAO,QAAQ,aAAa,MAAM,MAAM;AACrD,WAAO,KAAK,aAAa,IAAI,EAAE,UAAU,MAAM;AAAA,EACjD;AAAA,EAEA,MAAc,cACZ,MACA,SACsE;AACtE,UAAM,UAAU,KAAK,WAAW;AAChC,QAAI,QAAS,QAAO,QAAQ,cAAc,MAAM,OAAO;AACvD,WAAO,KAAK,aAAa,IAAI,EAAE,WAAW,OAAO;AAAA,EACnD;AAAA,EAEA,MAAc,aACZ,MACA,IACe;AACf,UAAM,UAAU,MAAM,KAAK,eAAe,KAAK,IAAI;AAEnD,QAAI,KAAK,cAAc;AACrB,YAAM,UAAU,MAAM,KAAK,aAAa;AAAA,QACtC,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,CAAC,SAAS;AACZ,YAAI,GAAG,SAAS,YAAY;AAC1B,gBAAM,aACJ,SAAS,QAAS,EAAE,SAAS,GAAG,QAAQ,SAAS;AACnD,eAAK;AAAA,YACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,QAAQ,WAAW,EAAE,CAAC;AAAA,UACjF;AAAA,QACF,WAAW,SAAS,KAAK,YAAY;AACnC,gBAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM;AACtC,kBAAM,WAAW,QAAQ,MAAM,KAAK,CAAC,OAAO,GAAG,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;AACxE,mBACE,YAAY;AAAA,cACV,YAAY,QAAQ,KAAK,YAAY,cAAc,GAAG;AAAA,cACtD,GAAG,EAAE;AAAA,cACL,GAAG,EAAE;AAAA,cACL,SAAS;AAAA,cACT,QAAQ;AAAA,YACV;AAAA,UAEJ,CAAC;AACD,eAAK;AAAA,YACH,KAAK,UAAU;AAAA,cACb,MAAM;AAAA,cACN,IAAI;AAAA,gBACF,MAAM;AAAA,gBACN,YAAY,QAAQ,KAAK,WAAW;AAAA,gBACpC,OAAO;AAAA,cACT;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,OAAO;AACL,eAAK;AAAA,YACH,KAAK,UAAU;AAAA,cACb,MAAM;AAAA,cACN,IAAI;AAAA,gBACF,MAAM;AAAA,gBACN,QAAQ,SAAS,QAAQ,EAAE,SAAS,GAAG,QAAQ,SAAS;AAAA,cAC1D;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI,GAAG,SAAS,YAAY;AAC1B,YAAM,SAAS,MAAM,KAAK,aAAa,KAAK,MAAM,GAAG,MAAM;AAC3D,UAAI,CAAC,OAAO,UAAU;AACpB,YAAI,OAAO,YAAY;AACrB,eAAK;AAAA,YACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,QAAQ,OAAO,WAAW,EAAE,CAAC;AAAA,UACxF;AAAA,QACF;AACA;AAAA,MACF;AACA,iBAAW;AAAA,IACb,OAAO;AACL,YAAM,EAAE,UAAU,YAAY,IAAI,MAAM,KAAK,cAAc,KAAK,MAAM,GAAG,KAAK;AAC9E,UAAI,YAAY,SAAS,GAAG;AAC1B,cAAM,uBAAuB,YAAY,CAAC,GAAG,cAAc,GAAG;AAC9D,aAAK;AAAA,UACH,KAAK,UAAU;AAAA,YACb,MAAM;AAAA,YACN,IAAI,EAAE,MAAM,aAAa,YAAY,sBAAsB,OAAO,YAAY;AAAA,UAChF,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,SAAS,WAAW,EAAG;AAC3B,iBAAW,EAAE,MAAM,aAAa,YAAY,GAAG,YAAY,OAAO,SAAS;AAAA,IAC7E;AAEA,UAAM,KAAK,OAAO;AAAA,MAChB,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,KAAK,MAAM,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC;AAAA,IACrF;AACA,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,CAAC;AAAA,EACtF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,QAAQ,QAAQ,KAAK,OAAO,QAAQ,OAAO,CAAC,EAAE,MAAM,MAAM;AAAA,MAE/D,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAyB;AACxF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,OAAO;AACX,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AACjB,gBAAQ;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,wBAAwB,MAAkB,MAAqB;AACrE,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,mBAAmB,QAAsB;AAC/C,UAAM,QAAQ,KAAK,cAAc,IAAI,MAAM;AAC3C,QAAI,CAAC,MAAO;AACZ,eAAW,QAAQ,MAAM,OAAO,GAAG;AACjC,UAAI,KAAK,QAAS,cAAa,KAAK,QAAQ,KAAK;AAAA,IACnD;AACA,SAAK,cAAc,OAAO,MAAM;AAAA,EAClC;AAAA,EAEQ,iBAAiB,MAAkB,MAAqB;AAC9D,QAAI,KAAK,sBAAsB,GAAG;AAChC,WAAK,wBAAwB,MAAM,IAAI;AACvC;AAAA,IACF;AACA,UAAM,OAAO,KAAK,gBAAgB,KAAK,IAAI,eAAe,IAAI,CAAC;AAC/D,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,KAAK,eAAe,UAAa,MAAM,KAAK,cAAc,KAAK,oBAAoB;AACrF,UAAI,KAAK,SAAS;AAChB,qBAAa,KAAK,QAAQ,KAAK;AAC/B,aAAK,UAAU;AAAA,MACjB;AACA,WAAK,aAAa;AAClB,WAAK,wBAAwB,MAAM,IAAI;AACvC;AAAA,IACF;AACA,QAAI,KAAK,SAAS;AAChB,WAAK,QAAQ,OAAO;AACpB;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AACJ,cAAM,UAAU,KAAK;AACrB,aAAK,UAAU;AACf,YAAI,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,EAAG;AAC1C,aAAK,aAAa,KAAK,IAAI;AAC3B,aAAK,wBAAwB,MAAM,QAAQ,IAAI;AAAA,MACjD;AAAA,MACA,KAAK,sBAAsB,MAAM,KAAK;AAAA,IACxC;AACA,SAAK,UAAU,EAAE,MAAM,MAAM;AAAA,EAC/B;AAAA,EAEQ,gBAAgB,QAAgB,WAAiC;AACvE,QAAI,QAAQ,KAAK,cAAc,IAAI,MAAM;AACzC,QAAI,CAAC,OAAO;AACV,cAAQ,oBAAI,IAAI;AAChB,WAAK,cAAc,IAAI,QAAQ,KAAK;AAAA,IACtC;AACA,QAAI,MAAM;AACV,QAAI,QAAQ,0BAA0B,CAAC,MAAM,IAAI,GAAG,GAAG;AACrD,YAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,sBAAsB,IAAI,IAAI;AACpE,UAAI,SAAS,KAAK,mBAAmB,EAAG,OAAM;AAAA,IAChD;AACA,QAAI,OAAO,MAAM,IAAI,GAAG;AACxB,QAAI,CAAC,MAAM;AACT,aAAO,EAAE,YAAY,QAAW,SAAS,KAAK;AAC9C,YAAM,IAAI,KAAK,IAAI;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,KAAK,QAAQ,MAAM,QAAQ,QAAQ,IACjC,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,QAAQ,GAAG,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UACT,KAAK,QAAQ,MAAM,QAAQ,QAAQ,IACjC,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,QAAQ,GAAG,IACnC;AAAA,IACN,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,UAAU,EAAE,GAAG;AACjB,WAAK,KAAK,mBAAmB,IAAI,MAAM,EAAE,EAAE,MAAM,MAAM;AAAA,MAEvD,CAAC;AACD,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,QAAQ,EAAE,GAAG;AACf,YAAM,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAClE,YAAM,YAAY,SAAS,KAAK,YAAY;AAC1C,cAAM,WAAW,MAAM,KAAK,iBAAiB,IAAI,MAAgB,EAAE;AACnE,YAAI,UAAU;AACZ,eAAK;AAAA,YACH,IAAI;AAAA,YACJ;AAAA,YACA,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,IAAI,SAAS,CAAC;AAAA,UACjD;AAAA,QACF;AAAA,MACF,CAAC;AACD,WAAK,WAAW;AAAA,QACd,IAAI;AAAA,QACJ,UAAU,MAAM,MAAM;AAAA,QAEtB,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,MAAc,mBAAmB,MAAc,IAA4B;AACzE,UAAM,SAAS,gBAAgB,EAAE;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,MAAM,OAAO,EAAE;AACzD,QAAI,WAAW,KAAC,iCAAmB,QAAQ,OAAO,EAAG;AACrD,UAAM,KAAK,iBAAiB,MAAM,MAAM;AAAA,EAC1C;AAAA,EAEA,MAAc,iBAAiB,MAAc,IAAkC;AAC7E,QAAI,KAAK,QAAQ,0BAA0B,QAAQ,KAAK,WAAW,EAAG,QAAO;AAC7E,QAAI,GAAG,SAAS,YAAY;AAC1B,YAAM,SAAS,MAAM,KAAK,aAAa,MAAM,GAAG,MAAM;AACtD,aAAO,OAAO,WAAW,KAAK;AAAA,IAChC;AACA,UAAM,EAAE,SAAS,IAAI,MAAM,KAAK,cAAc,MAAM,GAAG,KAAK;AAC5D,WAAO,SAAS,SAAS,IAAI,EAAE,GAAG,IAAI,OAAO,SAAS,IAAI;AAAA,EAC5D;AAAA,EAEA,QAAc;AACZ,eAAW,UAAU,CAAC,GAAG,KAAK,cAAc,KAAK,CAAC,EAAG,MAAK,mBAAmB,MAAM;AACnF,SAAK,YAAY;AAAA,EACnB;AACF;;;AIzyBA,gBAA8C;;;ACavC,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;AC5CO,IAAM,4BAA4B;AAalC,SAAS,qBAAqB,KAAqB,SAAgC;AACxF,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,MAAY;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,UAAU;AACvB,cAAQ;AAAA,IACV;AACA,UAAM,aAAa,WAAW,MAAM;AAClC,iBAAW,MAAM,IAAI,SAAS;AAC5B,YAAI;AACF,aAAG,UAAU;AAAA,QACf,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,OAAO;AAGV,QAAI,MAAM,MAAM,OAAO,CAAC;AACxB,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,WAAG,MAAM,MAAM,sBAAsB;AAAA,MACvC,QAAQ;AACN,YAAI;AACF,aAAG,UAAU;AAAA,QACf,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AFJA,SAAS,kBAAkB,MAAuB;AAChD,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,OAAO,CAAC,OAAO,UAAU,QAAQ,MAAM,YAAY,CAAC;AACzF,SAAO,KAAK;AACd;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,MAAI,CAAC,OAAO,SAAS,eAAe,KAAK,kBAAkB,GAAG;AAC5D,UAAM,IAAI,WAAW,sDAAsD;AAAA,EAC7E;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,gBAAgB,QAAQ;AAAA,IACxB,cAAc,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,kBAAkB,QAAQ;AAAA,EAC5B,CAAC;AACD,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,QAAQ,YAAY,gBAAgB,CAAC,IAC3E,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,gBAAgB,CAAC;AAChF,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,eAAe;AACnB,MAAI;AACJ,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,QAAI,cAAc;AAChB,SAAG,MAAM,MAAM,sBAAsB;AACrC;AAAA,IACF;AACA,cAAU,MAAM,EAAE;AAGlB,OAAG,GAAG,SAAS,MAAM,MAAS;AAC9B,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,QAAI,WAAW;AACf,UAAM,QAAkB,CAAC;AACzB,QAAI,cAAc;AAClB,UAAM,yBACJ,QAAQ,0BAA0B;AACpC,UAAM,sBAAsB,QAAQ,uBAAuB;AAC3D,UAAM,UAAU,IAAI;AAAA,MAClB,QAAQ,qBAAqB;AAAA,MAC7B,QAAQ,gBAAgB;AAAA,IAC1B;AAEA,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,UAAI,UAAU,WAAY;AAC1B,YAAM,eAAe,kBAAkB,IAAI;AAC3C,UAAI,eAAe,iBAAiB;AAClC,gBAAQ;AACR,WAAG,MAAM,MAAM,mBAAmB;AAClC;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,gBAAQ;AACR,WAAG,MAAM,MAAM,qBAAqB;AACpC;AAAA,MACF;AACA,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAW;AACvB,YACE,MAAM,UAAU,0BAChB,cAAc,eAAe,qBAC7B;AACA,kBAAQ;AACR,aAAG,MAAM,MAAM,qCAAqC;AACpD;AAAA,QACF;AACA,cAAM,KAAK,GAAG;AACd,uBAAe;AACf;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,SAAU,KAAI,iBAAiB,MAAM;AAAA,IAC3C,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,UAAU,UAAU,cAAc,aAAc;AACpD,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,iBAAW;AACX,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AACf,oBAAc;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,UAAU,CAAC,cAAc;AAC5B,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,QAAM,QAAQ,MAAqB;AACjC,QAAI,aAAc,QAAO;AACzB,mBAAe;AACf,mBAAe,qBAAqB,KAAK,eAAe,EAAE,KAAK,MAAM;AACnE,gBAAU,KAAK;AACf,UAAI,MAAM;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["import_sync"]}

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { CanvasElement } from '@fieldnotes/core';
-import { SyncOp, LayerRecord } from '@fieldnotes/sync';
+import { SyncOp, LayerRecord, FogSnapshot, FogMetaRecord, FogTileRecord } from '@fieldnotes/sync';
 import { WebSocketServer } from 'ws';
 import { IncomingMessage, Server } from 'http';
 
@@ -14,21 +14,27 @@ declare class InMemoryHubFanout implements HubFanout {
     subscribe(handler: (payload: string) => void): () => void;
 }
 
+interface FogApplyResult<T> {
+    readonly accepted: boolean;
+    readonly correction?: T;
+}
+interface FogPatchApplyResult {
+    readonly accepted: FogTileRecord[];
+    readonly corrections: FogTileRecord[];
+}
 interface HubBackend {
+    /** True when every hub instance addresses the same atomic backing state (for example Redis). */
+    readonly sharedAcrossInstances?: boolean;
     snapshot(room: string): Promise<CanvasElement[]>;
     get(room: string, id: string): Promise<CanvasElement | undefined>;
     apply(room: string, op: SyncOp): Promise<void>;
-    /**
-     * Optional versioned layer-definition persistence. The three methods are
-     * additive and must be implemented together; when absent, the hub keeps
-     * per-room layer records in its own memory (they then live and die with the
-     * hub instance, while elements keep whatever durability the backend has).
-     * Records include removal tombstones. An element `clear` op never touches
-     * layer records.
-     */
     layerRecords?(room: string): Promise<LayerRecord[]>;
     getLayerRecord?(room: string, id: string): Promise<LayerRecord | undefined>;
     applyLayerRecord?(room: string, record: LayerRecord): Promise<void>;
+    fogSnapshot?(room: string): Promise<FogSnapshot | undefined>;
+    applyFogMeta?(room: string, record: FogMetaRecord): Promise<FogApplyResult<FogMetaRecord>>;
+    applyFogTile?(room: string, record: FogTileRecord): Promise<FogApplyResult<FogTileRecord>>;
+    applyFogPatch?(room: string, records: readonly FogTileRecord[]): Promise<FogPatchApplyResult>;
 }
 
 type OwnedElement = CanvasElement & {
@@ -67,6 +73,16 @@ interface ReadContext {
     audience: string | undefined;
 }
 type CanRead = (ctx: ReadContext) => boolean;
+interface AuthorizeFogContext {
+    userId?: string;
+    role?: string;
+    room: string;
+    op: Extract<SyncOp, {
+        kind: 'fog-meta' | 'fog-patch';
+    }>;
+    current: FogSnapshot | undefined;
+}
+type AuthorizeFog = (ctx: AuthorizeFogContext) => boolean | Promise<boolean>;
 
 interface Connection {
     id: string;
@@ -81,9 +97,11 @@ interface SyncHubOptions {
     instanceId?: string;
     authorize?: Authorize;
     authorizeLayer?: AuthorizeLayer;
+    authorizeFog?: AuthorizeFog;
     canRead?: CanRead;
     maxJsonDepth?: number;
     presenceThrottleMs?: number;
+    maxPresenceLanes?: number;
 }
 declare class SyncHub {
     private readonly backend;
@@ -96,13 +114,23 @@ declare class SyncHub {
     private readonly fanoutUnsub;
     private readonly authorize?;
     private readonly authorizeLayer?;
+    private readonly authorizeFog?;
     private readonly canRead?;
-    /** Fallback layer-record store for backends without layer persistence. */
     private readonly memoryLayers;
+    private readonly memoryFog;
     private readonly maxJsonDepth;
     private readonly presenceThrottleMs;
-    private readonly lastPresenceAt;
-    private readonly pendingPresence;
+    private readonly maxPresenceLanes;
+    /**
+     * Presence throttle state keyed by connection, then by lane. A lane is the
+     * payload's `kind` (a non-empty string of at most 64 chars) or the reserved
+     * fallback lane `''`, so a rapid stream of one kind (awareness cursors) can
+     * never replace a pending frame of another kind (a ping, a path `cleared`).
+     * Within a lane the newest payload wins. The lane count per connection is
+     * capped by `maxPresenceLanes`, counting the fallback lane, so a client
+     * cannot mint timers by varying `kind`.
+     */
+    private readonly presenceLanes;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
@@ -127,22 +155,32 @@ declare class SyncHub {
     private getLayerRecords;
     private getLayerRecord;
     private applyLayerRecord;
+    private fogBackend;
+    private getFogLedger;
+    private getFogSnapshot;
+    private applyFogMeta;
+    private applyFogPatch;
+    private processFogOp;
     private mayRead;
     private safePublish;
     private relayToRoom;
     private broadcastClientPresence;
+    private clearPresenceLanes;
     private schedulePresence;
+    private presenceLaneFor;
     private broadcastLeave;
     private deliverToRoom;
     private sendCorrection;
     private onFanout;
     private applyFanoutLayerOp;
+    private applyFanoutFogOp;
     close(): void;
 }
 
 declare class MemoryHubBackend implements HubBackend {
     private rooms;
     private roomLayers;
+    private roomFog;
     private room;
     private layers;
     snapshot(room: string): Promise<CanvasElement[]>;
@@ -151,6 +189,11 @@ declare class MemoryHubBackend implements HubBackend {
     layerRecords(room: string): Promise<LayerRecord[]>;
     getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined>;
     applyLayerRecord(room: string, record: LayerRecord): Promise<void>;
+    private fog;
+    fogSnapshot(room: string): Promise<FogSnapshot | undefined>;
+    applyFogMeta(room: string, record: FogMetaRecord): Promise<FogApplyResult<FogMetaRecord>>;
+    applyFogTile(room: string, record: FogTileRecord): Promise<FogApplyResult<FogTileRecord>>;
+    applyFogPatch(room: string, records: readonly FogTileRecord[]): Promise<FogPatchApplyResult>;
 }
 
 interface AuthInfo {
@@ -172,6 +215,7 @@ interface CreateSyncServerOptions {
     authenticate?: Authenticate;
     authorize?: Authorize;
     authorizeLayer?: AuthorizeLayer;
+    authorizeFog?: AuthorizeFog;
     canRead?: CanRead;
     heartbeatIntervalMs?: number;
     maxMessageBytes?: number;
@@ -181,6 +225,7 @@ interface CreateSyncServerOptions {
     messagesPerSecond?: number;
     messageBurst?: number;
     presenceThrottleMs?: number;
+    maxPresenceLanes?: number;
     shutdownGraceMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
@@ -203,4 +248,4 @@ interface Heartbeat {
 }
 declare function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat;
 
-export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type AuthorizeLayer, type AuthorizeLayerContext, type CanRead, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };
+export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type AuthorizeFog, type AuthorizeFogContext, type AuthorizeLayer, type AuthorizeLayerContext, type CanRead, type Connection, type CreateSyncServerOptions, type FogApplyResult, type FogPatchApplyResult, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { CanvasElement } from '@fieldnotes/core';
-import { SyncOp, LayerRecord } from '@fieldnotes/sync';
+import { SyncOp, LayerRecord, FogSnapshot, FogMetaRecord, FogTileRecord } from '@fieldnotes/sync';
 import { WebSocketServer } from 'ws';
 import { IncomingMessage, Server } from 'http';
 
@@ -14,21 +14,27 @@ declare class InMemoryHubFanout implements HubFanout {
     subscribe(handler: (payload: string) => void): () => void;
 }
 
+interface FogApplyResult<T> {
+    readonly accepted: boolean;
+    readonly correction?: T;
+}
+interface FogPatchApplyResult {
+    readonly accepted: FogTileRecord[];
+    readonly corrections: FogTileRecord[];
+}
 interface HubBackend {
+    /** True when every hub instance addresses the same atomic backing state (for example Redis). */
+    readonly sharedAcrossInstances?: boolean;
     snapshot(room: string): Promise<CanvasElement[]>;
     get(room: string, id: string): Promise<CanvasElement | undefined>;
     apply(room: string, op: SyncOp): Promise<void>;
-    /**
-     * Optional versioned layer-definition persistence. The three methods are
-     * additive and must be implemented together; when absent, the hub keeps
-     * per-room layer records in its own memory (they then live and die with the
-     * hub instance, while elements keep whatever durability the backend has).
-     * Records include removal tombstones. An element `clear` op never touches
-     * layer records.
-     */
     layerRecords?(room: string): Promise<LayerRecord[]>;
     getLayerRecord?(room: string, id: string): Promise<LayerRecord | undefined>;
     applyLayerRecord?(room: string, record: LayerRecord): Promise<void>;
+    fogSnapshot?(room: string): Promise<FogSnapshot | undefined>;
+    applyFogMeta?(room: string, record: FogMetaRecord): Promise<FogApplyResult<FogMetaRecord>>;
+    applyFogTile?(room: string, record: FogTileRecord): Promise<FogApplyResult<FogTileRecord>>;
+    applyFogPatch?(room: string, records: readonly FogTileRecord[]): Promise<FogPatchApplyResult>;
 }
 
 type OwnedElement = CanvasElement & {
@@ -67,6 +73,16 @@ interface ReadContext {
     audience: string | undefined;
 }
 type CanRead = (ctx: ReadContext) => boolean;
+interface AuthorizeFogContext {
+    userId?: string;
+    role?: string;
+    room: string;
+    op: Extract<SyncOp, {
+        kind: 'fog-meta' | 'fog-patch';
+    }>;
+    current: FogSnapshot | undefined;
+}
+type AuthorizeFog = (ctx: AuthorizeFogContext) => boolean | Promise<boolean>;
 
 interface Connection {
     id: string;
@@ -81,9 +97,11 @@ interface SyncHubOptions {
     instanceId?: string;
     authorize?: Authorize;
     authorizeLayer?: AuthorizeLayer;
+    authorizeFog?: AuthorizeFog;
     canRead?: CanRead;
     maxJsonDepth?: number;
     presenceThrottleMs?: number;
+    maxPresenceLanes?: number;
 }
 declare class SyncHub {
     private readonly backend;
@@ -96,13 +114,23 @@ declare class SyncHub {
     private readonly fanoutUnsub;
     private readonly authorize?;
     private readonly authorizeLayer?;
+    private readonly authorizeFog?;
     private readonly canRead?;
-    /** Fallback layer-record store for backends without layer persistence. */
     private readonly memoryLayers;
+    private readonly memoryFog;
     private readonly maxJsonDepth;
     private readonly presenceThrottleMs;
-    private readonly lastPresenceAt;
-    private readonly pendingPresence;
+    private readonly maxPresenceLanes;
+    /**
+     * Presence throttle state keyed by connection, then by lane. A lane is the
+     * payload's `kind` (a non-empty string of at most 64 chars) or the reserved
+     * fallback lane `''`, so a rapid stream of one kind (awareness cursors) can
+     * never replace a pending frame of another kind (a ping, a path `cleared`).
+     * Within a lane the newest payload wins. The lane count per connection is
+     * capped by `maxPresenceLanes`, counting the fallback lane, so a client
+     * cannot mint timers by varying `kind`.
+     */
+    private readonly presenceLanes;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
@@ -127,22 +155,32 @@ declare class SyncHub {
     private getLayerRecords;
     private getLayerRecord;
     private applyLayerRecord;
+    private fogBackend;
+    private getFogLedger;
+    private getFogSnapshot;
+    private applyFogMeta;
+    private applyFogPatch;
+    private processFogOp;
     private mayRead;
     private safePublish;
     private relayToRoom;
     private broadcastClientPresence;
+    private clearPresenceLanes;
     private schedulePresence;
+    private presenceLaneFor;
     private broadcastLeave;
     private deliverToRoom;
     private sendCorrection;
     private onFanout;
     private applyFanoutLayerOp;
+    private applyFanoutFogOp;
     close(): void;
 }
 
 declare class MemoryHubBackend implements HubBackend {
     private rooms;
     private roomLayers;
+    private roomFog;
     private room;
     private layers;
     snapshot(room: string): Promise<CanvasElement[]>;
@@ -151,6 +189,11 @@ declare class MemoryHubBackend implements HubBackend {
     layerRecords(room: string): Promise<LayerRecord[]>;
     getLayerRecord(room: string, id: string): Promise<LayerRecord | undefined>;
     applyLayerRecord(room: string, record: LayerRecord): Promise<void>;
+    private fog;
+    fogSnapshot(room: string): Promise<FogSnapshot | undefined>;
+    applyFogMeta(room: string, record: FogMetaRecord): Promise<FogApplyResult<FogMetaRecord>>;
+    applyFogTile(room: string, record: FogTileRecord): Promise<FogApplyResult<FogTileRecord>>;
+    applyFogPatch(room: string, records: readonly FogTileRecord[]): Promise<FogPatchApplyResult>;
 }
 
 interface AuthInfo {
@@ -172,6 +215,7 @@ interface CreateSyncServerOptions {
     authenticate?: Authenticate;
     authorize?: Authorize;
     authorizeLayer?: AuthorizeLayer;
+    authorizeFog?: AuthorizeFog;
     canRead?: CanRead;
     heartbeatIntervalMs?: number;
     maxMessageBytes?: number;
@@ -181,6 +225,7 @@ interface CreateSyncServerOptions {
     messagesPerSecond?: number;
     messageBurst?: number;
     presenceThrottleMs?: number;
+    maxPresenceLanes?: number;
     shutdownGraceMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
@@ -203,4 +248,4 @@ interface Heartbeat {
 }
 declare function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat;
 
-export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type AuthorizeLayer, type AuthorizeLayerContext, type CanRead, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };
+export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type AuthorizeFog, type AuthorizeFogContext, type AuthorizeLayer, type AuthorizeLayerContext, type CanRead, type Connection, type CreateSyncServerOptions, type FogApplyResult, type FogPatchApplyResult, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };