@fieldnotes/sync-server 0.5.0 → 0.7.0

package/README.md

@@ -152,7 +152,53 @@ createSyncServer({
   low-write use.
 - Reads / visibility (a player not **receiving** hidden content) are a separate, upcoming
   concern (D3). `authorize` gates writes only.
-- Denied ops are dropped **silently** — the client's optimistic local edit self-corrects
-  on its next reconnect/resync.
+- When `authorize` denies an op, the hub sends the offending client a **corrective op** so its
+  optimistic local edit self-corrects immediately — no client change, no waiting for reconnect:
+  a rejected new element is **removed**, a rejected edit/remove is re-**upserted** from the canonical
+  stored element, and a rejected `clear` gets a fresh **snapshot**. The correction reuses existing op
+  kinds and is sent only to the offending connection.
+
+## Read filtering
+
+Pass a `canRead` hook to gate **reads** — what each viewer **receives**. Unlike client-side
+hiding, the hub filters ops before they leave the server, so hidden elements never reach an
+unauthorized client on either path: the live broadcast **and** the snapshot a client gets on join.
+
+```ts
+canRead({ userId, role, room, audience }) => boolean
+```
+
+`audience` is the opaque tag the client stamps on its own outgoing upserts via `@fieldnotes/sync`'s
+`resolveAudience` (e.g. `'dm'` / `'shared'`, derived from the app's layers). With **no hook**,
+everyone sees everything.
+
+A two-tier DM / player policy — the relay's `canRead` paired with the client's `resolveAudience`:
+
+```ts
+// relay
+createSyncServer({
+  port: 8080,
+  authenticate: /* … supplies userId + role … */,
+  canRead: ({ role, audience }) => audience !== 'dm' || role === 'dm',
+});
+
+// client (@fieldnotes/sync)
+new SyncClient({ store, transport, resolveAudience: (el) => layerOf(el) }); // → 'dm' | 'shared'
+```
+
+Moving an element between audiences re-evaluates visibility per viewer: a viewer who loses access
+gets a synthetic **remove**, one who gains it gets an **add**.
+
+**Preconditions:**
+
+- **Stable identity.** Meaningful policy needs a stable `userId`/`role` from `authenticate`; the
+  no-hook anonymous default is per-connection (`userId = connId`) and changes on reconnect.
+- **Same `canRead` on every instance.** Unlike `authorize` (which runs on the write's origin
+  instance only), `canRead` runs on **every** instance — each re-filters fanned-out ops for its own
+  local members — so all relay instances must inject the **same** `canRead`, alongside the existing
+  shared-backend + shared-fanout requirement.
+- **Labeling integrity.** `audience` is client-asserted, so read secrecy is only as trustworthy as
+  the `authorize` (write) policy that stops a player from stamping `dm` on content they shouldn't
+  control.
 
 A Redis `HubBackend` and cross-instance fan-out ship in [`@fieldnotes/sync-redis`](../sync-redis).

package/dist/index.cjs

@@ -82,6 +82,13 @@ function generateInstanceId() {
     return crypto.randomUUID();
   return `i-${Math.random().toString(36).slice(2)}`;
 }
+function isFanoutOp(op) {
+  if (typeof op !== "object" || op === null) return false;
+  const o = op;
+  if (o.kind === "upsert") return (0, import_sync2.isValidElement)(o.element);
+  if (o.kind === "remove") return typeof o.id === "string";
+  return o.kind === "clear";
+}
 var SyncHub = class {
   backend;
   conns = /* @__PURE__ */ new Map();
@@ -93,11 +100,13 @@ var SyncHub = class {
   fanout;
   fanoutUnsub;
   authorize;
+  canRead;
   constructor(options = {}) {
     this.backend = options.backend ?? new MemoryHubBackend();
     this.instanceId = options.instanceId ?? generateInstanceId();
     this.fanout = options.fanout ?? new InMemoryHubFanout();
     this.authorize = options.authorize;
+    this.canRead = options.canRead;
     this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));
   }
   addConnection(conn) {
@@ -140,16 +149,17 @@ var SyncHub = class {
     if (!env) return;
     const op = env.op;
     if (op.kind === "request-snapshot") {
-      const elements = await this.backend.snapshot(conn.room);
+      const all = await this.backend.snapshot(conn.room);
+      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;
       conn.send(
         JSON.stringify({ from: HUB_FROM, op: { kind: "snapshot", to: env.from, elements } })
       );
     } else if (op.kind === "upsert" || op.kind === "remove" || op.kind === "clear") {
+      const id = op.kind === "upsert" ? op.element.id : op.kind === "remove" ? op.id : void 0;
+      const needCurrent = (this.authorize || this.canRead) && id !== void 0;
+      const current = needCurrent ? await this.backend.get(conn.room, id) : void 0;
       let outboundOp = op;
-      let outboundMessage = message;
       if (this.authorize) {
-        const id = op.kind === "upsert" ? op.element.id : op.kind === "remove" ? op.id : void 0;
-        const current = id !== void 0 ? await this.backend.get(conn.room, id) : void 0;
         const allowed = await this.authorize({
           userId: conn.userId,
           role: conn.role,
@@ -157,27 +167,89 @@ var SyncHub = class {
           op,
           currentElement: current
         });
-        if (!allowed) return;
+        if (!allowed) {
+          await this.sendCorrection(conn, env.from, op, current);
+          return;
+        }
         if (op.kind === "upsert") {
           const ownerId = current?.ownerId ?? conn.userId;
           const stampedElement = { ...op.element, ownerId };
           outboundOp = { kind: "upsert", element: stampedElement };
-          outboundMessage = JSON.stringify({ from: env.from, op: outboundOp });
         }
       }
       await this.backend.apply(conn.room, outboundOp);
-      const members = this.rooms.get(conn.room);
-      if (members) {
-        for (const id of members) {
-          if (id === conn.id) continue;
-          this.conns.get(id)?.send(outboundMessage);
-        }
-      }
+      const prevExisted = current !== void 0;
+      const prevAudience = current?.audience;
+      this.deliverToRoom(conn.room, conn.id, env.from, outboundOp, prevAudience, prevExisted);
       this.fanout.publish(
-        JSON.stringify({ o: this.instanceId, room: conn.room, m: outboundMessage })
+        JSON.stringify({
+          o: this.instanceId,
+          room: conn.room,
+          from: env.from,
+          op: outboundOp,
+          prev: prevAudience,
+          existed: prevExisted
+        })
       );
     }
   }
+  mayRead(conn, audience) {
+    if (!this.canRead) return true;
+    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });
+  }
+  deliverToRoom(room, excludeId, from, op, prevAudience, prevExisted) {
+    const members = this.rooms.get(room);
+    if (!members) return;
+    const send = (conn, msg) => {
+      try {
+        conn.send(msg);
+      } catch {
+      }
+    };
+    if (op.kind === "upsert") {
+      const audience = op.element.audience;
+      const upsertMsg = JSON.stringify({ from, op });
+      const removeMsg = JSON.stringify({
+        from: HUB_FROM,
+        op: { kind: "remove", id: op.element.id }
+      });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (!conn) continue;
+        if (this.mayRead(conn, audience)) send(conn, upsertMsg);
+        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);
+      }
+    } else if (op.kind === "remove") {
+      const removeMsg = JSON.stringify({ from, op });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (!conn) continue;
+        const wasVisible = !this.canRead || prevExisted && this.mayRead(conn, prevAudience);
+        if (wasVisible) send(conn, removeMsg);
+      }
+    } else if (op.kind === "clear") {
+      const clearMsg = JSON.stringify({ from, op });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (conn) send(conn, clearMsg);
+      }
+    }
+  }
+  async sendCorrection(conn, from, op, current) {
+    let correction;
+    if (op.kind === "upsert") {
+      correction = current ? { kind: "upsert", element: current } : { kind: "remove", id: op.element.id };
+    } else if (op.kind === "remove") {
+      correction = current ? { kind: "upsert", element: current } : void 0;
+    } else if (op.kind === "clear") {
+      const elements = await this.backend.snapshot(conn.room);
+      correction = { kind: "snapshot", to: from, elements };
+    }
+    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));
+  }
   onFanout(payload) {
     let env;
     try {
@@ -185,18 +257,14 @@ var SyncHub = class {
     } catch {
       return;
     }
-    if (typeof env.o !== "string" || typeof env.room !== "string" || typeof env.m !== "string")
+    if (typeof env.o !== "string" || typeof env.room !== "string" || typeof env.from !== "string")
       return;
     if (env.o === this.instanceId) return;
-    const members = this.rooms.get(env.room);
-    if (!members) return;
-    const m = env.m;
-    for (const id of members) {
-      try {
-        this.conns.get(id)?.send(m);
-      } catch {
-      }
-    }
+    const op = env.op;
+    if (!isFanoutOp(op)) return;
+    const prevAudience = typeof env.prev === "string" ? env.prev : void 0;
+    const prevExisted = env.existed === true;
+    this.deliverToRoom(env.room, void 0, env.from, op, prevAudience, prevExisted);
   }
   close() {
     this.fanoutUnsub();
@@ -243,7 +311,8 @@ function createSyncServer(options = {}) {
     backend: options.backend,
     fanout: options.fanout,
     instanceId: options.instanceId,
-    authorize: options.authorize
+    authorize: options.authorize,
+    canRead: options.canRead
   });
   const wss = options.server ? new import_ws.WebSocketServer({ server: options.server }) : new import_ws.WebSocketServer({ port: options.port ?? 0 });
   const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 3e4);

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\nexport type { SyncHubOptions, Connection } from './sync-hub';\nexport { MemoryHubBackend } from './memory-hub-backend';\nexport type { HubBackend } from './hub-backend';\nexport { createSyncServer } from './create-sync-server';\nexport type { CreateSyncServerOptions } from './create-sync-server';\nexport { InMemoryHubFanout } from './hub-fanout';\nexport type { HubFanout } from './hub-fanout';\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\nexport type { Authorize, AuthorizeContext, OwnedElement } from './authorize';\nexport { startHeartbeat } from './heartbeat';\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\n","import { parseEnvelope, type SyncOp } from '@fieldnotes/sync';\r\nimport { MemoryHubBackend } from './memory-hub-backend';\r\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\r\nimport type { HubBackend } from './hub-backend';\r\nimport type { Authorize, OwnedElement } from './authorize';\r\n\r\nexport interface Connection {\r\n  id: string;\r\n  room: string;\r\n  userId?: string;\r\n  role?: string;\r\n  send(message: string): void;\r\n}\r\n\r\nexport interface SyncHubOptions {\r\n  backend?: HubBackend;\r\n  fanout?: HubFanout;\r\n  instanceId?: string;\r\n  authorize?: Authorize;\r\n}\r\n\r\nconst HUB_FROM = 'hub';\r\n\r\nfunction generateInstanceId(): string {\r\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\r\n    return crypto.randomUUID();\r\n  return `i-${Math.random().toString(36).slice(2)}`;\r\n}\r\n\r\nexport class SyncHub {\r\n  private readonly backend: HubBackend;\r\n  private readonly conns = new Map<string, Connection>();\r\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\r\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\r\n  private readonly instanceId: string;\r\n  private readonly fanout: HubFanout;\r\n  private readonly fanoutUnsub: () => void;\r\n  private readonly authorize?: Authorize;\r\n\r\n  constructor(options: SyncHubOptions = {}) {\r\n    this.backend = options.backend ?? new MemoryHubBackend();\r\n    this.instanceId = options.instanceId ?? generateInstanceId();\r\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\r\n    this.authorize = options.authorize;\r\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\r\n  }\r\n\r\n  addConnection(conn: Connection): void {\r\n    this.conns.set(conn.id, conn);\r\n    let set = this.rooms.get(conn.room);\r\n    if (!set) {\r\n      set = new Set();\r\n      this.rooms.set(conn.room, set);\r\n    }\r\n    set.add(conn.id);\r\n  }\r\n\r\n  removeConnection(connId: string): void {\r\n    const conn = this.conns.get(connId);\r\n    if (!conn) return;\r\n    this.conns.delete(connId);\r\n    const members = this.rooms.get(conn.room);\r\n    if (members) {\r\n      members.delete(connId);\r\n      if (members.size === 0) {\r\n        this.rooms.delete(conn.room);\r\n        this.roomQueues.delete(conn.room);\r\n      }\r\n    }\r\n  }\r\n\r\n  roomCount(): number {\r\n    return this.rooms.size;\r\n  }\r\n\r\n  handleMessage(connId: string, message: string): Promise<void> {\r\n    const conn = this.conns.get(connId);\r\n    if (!conn) return Promise.resolve();\r\n    const room = conn.room;\r\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\r\n    const next = prev\r\n      .then(() => this.process(conn, message))\r\n      .catch(() => {\r\n        // swallow so one failed message never wedges the room's serial queue\r\n      });\r\n    this.roomQueues.set(room, next);\r\n    return next;\r\n  }\r\n\r\n  private async process(conn: Connection, message: string): Promise<void> {\r\n    const env = parseEnvelope(message);\r\n    if (!env) return;\r\n    const op = env.op;\r\n    if (op.kind === 'request-snapshot') {\r\n      const elements = await this.backend.snapshot(conn.room);\r\n      conn.send(\r\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\r\n      );\r\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\r\n      let outboundOp: SyncOp = op;\r\n      let outboundMessage = message;\r\n      if (this.authorize) {\r\n        const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\r\n        const current: OwnedElement | undefined =\r\n          id !== undefined ? await this.backend.get(conn.room, id) : undefined;\r\n        const allowed = await this.authorize({\r\n          userId: conn.userId,\r\n          role: conn.role,\r\n          room: conn.room,\r\n          op,\r\n          currentElement: current,\r\n        });\r\n        if (!allowed) return;\r\n        if (op.kind === 'upsert') {\r\n          const ownerId = current?.ownerId ?? conn.userId;\r\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\r\n          outboundOp = { kind: 'upsert', element: stampedElement };\r\n          outboundMessage = JSON.stringify({ from: env.from, op: outboundOp });\r\n        }\r\n      }\r\n      await this.backend.apply(conn.room, outboundOp);\r\n      const members = this.rooms.get(conn.room);\r\n      if (members) {\r\n        for (const id of members) {\r\n          if (id === conn.id) continue;\r\n          this.conns.get(id)?.send(outboundMessage);\r\n        }\r\n      }\r\n      this.fanout.publish(\r\n        JSON.stringify({ o: this.instanceId, room: conn.room, m: outboundMessage }),\r\n      );\r\n    }\r\n    // 'snapshot' from a client → ignored\r\n  }\r\n\r\n  private onFanout(payload: string): void {\r\n    // Off the serial queue on purpose: forward-only (no backend re-apply — the origin already applied to the\r\n    // SHARED backend), and delivery is already ordered. Do not wrap this in roomQueues.\r\n    let env: { o?: unknown; room?: unknown; m?: unknown };\r\n    try {\r\n      env = JSON.parse(payload);\r\n    } catch {\r\n      return;\r\n    }\r\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.m !== 'string')\r\n      return;\r\n    if (env.o === this.instanceId) return; // our own publish — already forwarded locally\r\n    const members = this.rooms.get(env.room);\r\n    if (!members) return;\r\n    const m = env.m;\r\n    for (const id of members) {\r\n      try {\r\n        this.conns.get(id)?.send(m);\r\n      } catch {\r\n        /* a throwing socket must not break the fanout loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  close(): void {\r\n    this.fanoutUnsub();\r\n  }\r\n}\r\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\nimport type { CanvasElement } from '@fieldnotes/core';\nimport type { HubBackend } from './hub-backend';\n\nexport class MemoryHubBackend implements HubBackend {\n  private rooms = new Map<string, Map<string, CanvasElement>>();\n\n  private room(id: string): Map<string, CanvasElement> {\n    let r = this.rooms.get(id);\n    if (!r) {\n      r = new Map();\n      this.rooms.set(id, r);\n    }\n    return r;\n  }\n\n  async snapshot(room: string): Promise<CanvasElement[]> {\n    return [...this.room(room).values()];\n  }\n\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\n    return this.room(room).get(id);\n  }\n\n  async apply(room: string, op: SyncOp): Promise<void> {\n    if (op.kind === 'clear') {\n      this.rooms.delete(room);\n      return;\n    }\n    applyOpToMap(this.room(room), op);\n  }\n}\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize } from './authorize';\nimport { startHeartbeat } from './heartbeat';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  heartbeatIntervalMs?: number;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n  });\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server })\n    : new WebSocketServer({ port: options.port ?? 0 });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    const queue: string[] = [];\n    const MAX_QUEUE = 100;\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      const msg = String(data);\n      if (state === 'rejected') return;\n      if (state === 'pending') {\n        if (queue.length < MAX_QUEUE) queue.push(msg);\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (state === 'ready') hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\n  ping(): void;\n  terminate(): void;\n  on(event: 'pong', listener: () => void): void;\n}\nexport interface HeartbeatServer {\n  clients: Set<HeartbeatSocket>;\n}\nexport interface Heartbeat {\n  track(ws: HeartbeatSocket): void;\n  stop(): void;\n}\n\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\n  if (intervalMs <= 0) {\n    return {\n      track: () => {\n        /* disabled */\n      },\n      stop: () => {\n        /* disabled */\n      },\n    };\n  }\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\n  const track = (ws: HeartbeatSocket): void => {\n    alive.set(ws, true);\n    ws.on('pong', () => alive.set(ws, true));\n  };\n  const interval = setInterval(() => {\n    for (const ws of wss.clients) {\n      try {\n        if (alive.get(ws) === false) {\n          ws.terminate();\n          continue;\n        }\n        alive.set(ws, false);\n        ws.ping();\n      } catch {\n        /* socket dying mid-tick — skip it */\n      }\n    }\n  }, intervalMs);\n  return { track, stop: () => clearInterval(interval) };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAA2C;;;ACA3C,kBAA0C;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFFA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,KAAK,IAAI;AAC3B,aAAK,WAAW,OAAO,KAAK,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,OAAO,KAAK;AAClB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,OAAO,CAAC,EACtC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,SAAgC;AACtE,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK;AACV,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,WAAK;AAAA,QACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,UAAI,aAAqB;AACzB,UAAI,kBAAkB;AACtB,UAAI,KAAK,WAAW;AAClB,cAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,cAAM,UACJ,OAAO,SAAY,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IAAI;AAC7D,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,QAAS;AACd,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AACvD,4BAAkB,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,IAAI,WAAW,CAAC;AAAA,QACrE;AAAA,MACF;AACA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAC9C,YAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,UAAI,SAAS;AACX,mBAAW,MAAM,SAAS;AACxB,cAAI,OAAO,KAAK,GAAI;AACpB,eAAK,MAAM,IAAI,EAAE,GAAG,KAAK,eAAe;AAAA,QAC1C;AAAA,MACF;AACA,WAAK,OAAO;AAAA,QACV,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,KAAK,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC5E;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,MAAM;AAChF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI,IAAI;AACvC,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,IAAI;AACd,eAAW,MAAM,SAAS;AACxB,UAAI;AACF,aAAK,MAAM,IAAI,EAAE,GAAG,KAAK,CAAC;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AGlKA,gBAAgC;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADxBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":["import_sync"]}
+{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\nexport type { SyncHubOptions, Connection } from './sync-hub';\nexport { MemoryHubBackend } from './memory-hub-backend';\nexport type { HubBackend } from './hub-backend';\nexport { createSyncServer } from './create-sync-server';\nexport type { CreateSyncServerOptions } from './create-sync-server';\nexport { InMemoryHubFanout } from './hub-fanout';\nexport type { HubFanout } from './hub-fanout';\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\nexport type { Authorize, AuthorizeContext, OwnedElement, ReadContext, CanRead } from './authorize';\nexport { startHeartbeat } from './heartbeat';\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\n","import { parseEnvelope, isValidElement, type SyncOp } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const members = this.rooms.get(conn.room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(conn.room);\n        this.roomQueues.delete(conn.room);\n      }\n    }\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, message))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, message: string): Promise<void> {\n    const env = parseEnvelope(message);\n    if (!env) return;\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, env.from, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: env.from,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    canRead: options.canRead,\n  });\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server })\n    : new WebSocketServer({ port: options.port ?? 0 });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    const queue: string[] = [];\n    const MAX_QUEUE = 100;\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      const msg = String(data);\n      if (state === 'rejected') return;\n      if (state === 'pending') {\n        if (queue.length < MAX_QUEUE) queue.push(msg);\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (state === 'ready') hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAA2D;;;ACA3D,kBAA0C;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFDA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,YAAO,6BAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,KAAK,IAAI;AAC3B,aAAK,WAAW,OAAO,KAAK,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,OAAO,CAAC,EACtC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,SAAgC;AACtE,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK;AACV,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA,QACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc,WAAW;AAEtF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,IAAI;AAAA,UACV,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AG1QA,gBAAgC;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADvBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":["import_sync"]}

package/dist/index.d.cts

@@ -22,6 +22,7 @@ interface HubBackend {
 
 type OwnedElement = CanvasElement & {
     ownerId?: string;
+    audience?: string;
 };
 interface AuthorizeContext {
     userId?: string;
@@ -31,6 +32,13 @@ interface AuthorizeContext {
     currentElement?: OwnedElement;
 }
 type Authorize = (ctx: AuthorizeContext) => boolean | Promise<boolean>;
+interface ReadContext {
+    userId?: string;
+    role?: string;
+    room: string;
+    audience: string | undefined;
+}
+type CanRead = (ctx: ReadContext) => boolean;
 
 interface Connection {
     id: string;
@@ -44,6 +52,7 @@ interface SyncHubOptions {
     fanout?: HubFanout;
     instanceId?: string;
     authorize?: Authorize;
+    canRead?: CanRead;
 }
 declare class SyncHub {
     private readonly backend;
@@ -54,12 +63,16 @@ declare class SyncHub {
     private readonly fanout;
     private readonly fanoutUnsub;
     private readonly authorize?;
+    private readonly canRead?;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
     roomCount(): number;
     handleMessage(connId: string, message: string): Promise<void>;
     private process;
+    private mayRead;
+    private deliverToRoom;
+    private sendCorrection;
     private onFanout;
     close(): void;
 }
@@ -90,6 +103,7 @@ interface CreateSyncServerOptions {
     instanceId?: string;
     authenticate?: Authenticate;
     authorize?: Authorize;
+    canRead?: CanRead;
     heartbeatIntervalMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
@@ -112,4 +126,4 @@ interface Heartbeat {
 }
 declare function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat;
 
-export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };
+export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type CanRead, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };

package/dist/index.d.ts

@@ -22,6 +22,7 @@ interface HubBackend {
 
 type OwnedElement = CanvasElement & {
     ownerId?: string;
+    audience?: string;
 };
 interface AuthorizeContext {
     userId?: string;
@@ -31,6 +32,13 @@ interface AuthorizeContext {
     currentElement?: OwnedElement;
 }
 type Authorize = (ctx: AuthorizeContext) => boolean | Promise<boolean>;
+interface ReadContext {
+    userId?: string;
+    role?: string;
+    room: string;
+    audience: string | undefined;
+}
+type CanRead = (ctx: ReadContext) => boolean;
 
 interface Connection {
     id: string;
@@ -44,6 +52,7 @@ interface SyncHubOptions {
     fanout?: HubFanout;
     instanceId?: string;
     authorize?: Authorize;
+    canRead?: CanRead;
 }
 declare class SyncHub {
     private readonly backend;
@@ -54,12 +63,16 @@ declare class SyncHub {
     private readonly fanout;
     private readonly fanoutUnsub;
     private readonly authorize?;
+    private readonly canRead?;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
     roomCount(): number;
     handleMessage(connId: string, message: string): Promise<void>;
     private process;
+    private mayRead;
+    private deliverToRoom;
+    private sendCorrection;
     private onFanout;
     close(): void;
 }
@@ -90,6 +103,7 @@ interface CreateSyncServerOptions {
     instanceId?: string;
     authenticate?: Authenticate;
     authorize?: Authorize;
+    canRead?: CanRead;
     heartbeatIntervalMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
@@ -112,4 +126,4 @@ interface Heartbeat {
 }
 declare function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat;
 
-export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };
+export { type AuthInfo, type AuthResult, type Authenticate, type Authorize, type AuthorizeContext, type CanRead, type Connection, type CreateSyncServerOptions, type Heartbeat, type HeartbeatServer, type HeartbeatSocket, type HubBackend, type HubFanout, InMemoryHubFanout, MemoryHubBackend, type OwnedElement, type ReadContext, SyncHub, type SyncHubOptions, createSyncServer, startHeartbeat };

package/dist/index.js

@@ -1,5 +1,5 @@
 // src/sync-hub.ts
-import { parseEnvelope } from "@fieldnotes/sync";
+import { parseEnvelope, isValidElement } from "@fieldnotes/sync";
 
 // src/memory-hub-backend.ts
 import { applyOpToMap } from "@fieldnotes/sync";
@@ -52,6 +52,13 @@ function generateInstanceId() {
     return crypto.randomUUID();
   return `i-${Math.random().toString(36).slice(2)}`;
 }
+function isFanoutOp(op) {
+  if (typeof op !== "object" || op === null) return false;
+  const o = op;
+  if (o.kind === "upsert") return isValidElement(o.element);
+  if (o.kind === "remove") return typeof o.id === "string";
+  return o.kind === "clear";
+}
 var SyncHub = class {
   backend;
   conns = /* @__PURE__ */ new Map();
@@ -63,11 +70,13 @@ var SyncHub = class {
   fanout;
   fanoutUnsub;
   authorize;
+  canRead;
   constructor(options = {}) {
     this.backend = options.backend ?? new MemoryHubBackend();
     this.instanceId = options.instanceId ?? generateInstanceId();
     this.fanout = options.fanout ?? new InMemoryHubFanout();
     this.authorize = options.authorize;
+    this.canRead = options.canRead;
     this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));
   }
   addConnection(conn) {
@@ -110,16 +119,17 @@ var SyncHub = class {
     if (!env) return;
     const op = env.op;
     if (op.kind === "request-snapshot") {
-      const elements = await this.backend.snapshot(conn.room);
+      const all = await this.backend.snapshot(conn.room);
+      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;
       conn.send(
         JSON.stringify({ from: HUB_FROM, op: { kind: "snapshot", to: env.from, elements } })
       );
     } else if (op.kind === "upsert" || op.kind === "remove" || op.kind === "clear") {
+      const id = op.kind === "upsert" ? op.element.id : op.kind === "remove" ? op.id : void 0;
+      const needCurrent = (this.authorize || this.canRead) && id !== void 0;
+      const current = needCurrent ? await this.backend.get(conn.room, id) : void 0;
       let outboundOp = op;
-      let outboundMessage = message;
       if (this.authorize) {
-        const id = op.kind === "upsert" ? op.element.id : op.kind === "remove" ? op.id : void 0;
-        const current = id !== void 0 ? await this.backend.get(conn.room, id) : void 0;
         const allowed = await this.authorize({
           userId: conn.userId,
           role: conn.role,
@@ -127,27 +137,89 @@ var SyncHub = class {
           op,
           currentElement: current
         });
-        if (!allowed) return;
+        if (!allowed) {
+          await this.sendCorrection(conn, env.from, op, current);
+          return;
+        }
         if (op.kind === "upsert") {
           const ownerId = current?.ownerId ?? conn.userId;
           const stampedElement = { ...op.element, ownerId };
           outboundOp = { kind: "upsert", element: stampedElement };
-          outboundMessage = JSON.stringify({ from: env.from, op: outboundOp });
         }
       }
       await this.backend.apply(conn.room, outboundOp);
-      const members = this.rooms.get(conn.room);
-      if (members) {
-        for (const id of members) {
-          if (id === conn.id) continue;
-          this.conns.get(id)?.send(outboundMessage);
-        }
-      }
+      const prevExisted = current !== void 0;
+      const prevAudience = current?.audience;
+      this.deliverToRoom(conn.room, conn.id, env.from, outboundOp, prevAudience, prevExisted);
       this.fanout.publish(
-        JSON.stringify({ o: this.instanceId, room: conn.room, m: outboundMessage })
+        JSON.stringify({
+          o: this.instanceId,
+          room: conn.room,
+          from: env.from,
+          op: outboundOp,
+          prev: prevAudience,
+          existed: prevExisted
+        })
       );
     }
   }
+  mayRead(conn, audience) {
+    if (!this.canRead) return true;
+    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });
+  }
+  deliverToRoom(room, excludeId, from, op, prevAudience, prevExisted) {
+    const members = this.rooms.get(room);
+    if (!members) return;
+    const send = (conn, msg) => {
+      try {
+        conn.send(msg);
+      } catch {
+      }
+    };
+    if (op.kind === "upsert") {
+      const audience = op.element.audience;
+      const upsertMsg = JSON.stringify({ from, op });
+      const removeMsg = JSON.stringify({
+        from: HUB_FROM,
+        op: { kind: "remove", id: op.element.id }
+      });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (!conn) continue;
+        if (this.mayRead(conn, audience)) send(conn, upsertMsg);
+        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);
+      }
+    } else if (op.kind === "remove") {
+      const removeMsg = JSON.stringify({ from, op });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (!conn) continue;
+        const wasVisible = !this.canRead || prevExisted && this.mayRead(conn, prevAudience);
+        if (wasVisible) send(conn, removeMsg);
+      }
+    } else if (op.kind === "clear") {
+      const clearMsg = JSON.stringify({ from, op });
+      for (const cid of members) {
+        if (cid === excludeId) continue;
+        const conn = this.conns.get(cid);
+        if (conn) send(conn, clearMsg);
+      }
+    }
+  }
+  async sendCorrection(conn, from, op, current) {
+    let correction;
+    if (op.kind === "upsert") {
+      correction = current ? { kind: "upsert", element: current } : { kind: "remove", id: op.element.id };
+    } else if (op.kind === "remove") {
+      correction = current ? { kind: "upsert", element: current } : void 0;
+    } else if (op.kind === "clear") {
+      const elements = await this.backend.snapshot(conn.room);
+      correction = { kind: "snapshot", to: from, elements };
+    }
+    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));
+  }
   onFanout(payload) {
     let env;
     try {
@@ -155,18 +227,14 @@ var SyncHub = class {
     } catch {
       return;
     }
-    if (typeof env.o !== "string" || typeof env.room !== "string" || typeof env.m !== "string")
+    if (typeof env.o !== "string" || typeof env.room !== "string" || typeof env.from !== "string")
       return;
     if (env.o === this.instanceId) return;
-    const members = this.rooms.get(env.room);
-    if (!members) return;
-    const m = env.m;
-    for (const id of members) {
-      try {
-        this.conns.get(id)?.send(m);
-      } catch {
-      }
-    }
+    const op = env.op;
+    if (!isFanoutOp(op)) return;
+    const prevAudience = typeof env.prev === "string" ? env.prev : void 0;
+    const prevExisted = env.existed === true;
+    this.deliverToRoom(env.room, void 0, env.from, op, prevAudience, prevExisted);
   }
   close() {
     this.fanoutUnsub();
@@ -213,7 +281,8 @@ function createSyncServer(options = {}) {
     backend: options.backend,
     fanout: options.fanout,
     instanceId: options.instanceId,
-    authorize: options.authorize
+    authorize: options.authorize,
+    canRead: options.canRead
   });
   const wss = options.server ? new WebSocketServer({ server: options.server }) : new WebSocketServer({ port: options.port ?? 0 });
   const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 3e4);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["import { parseEnvelope, type SyncOp } from '@fieldnotes/sync';\r\nimport { MemoryHubBackend } from './memory-hub-backend';\r\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\r\nimport type { HubBackend } from './hub-backend';\r\nimport type { Authorize, OwnedElement } from './authorize';\r\n\r\nexport interface Connection {\r\n  id: string;\r\n  room: string;\r\n  userId?: string;\r\n  role?: string;\r\n  send(message: string): void;\r\n}\r\n\r\nexport interface SyncHubOptions {\r\n  backend?: HubBackend;\r\n  fanout?: HubFanout;\r\n  instanceId?: string;\r\n  authorize?: Authorize;\r\n}\r\n\r\nconst HUB_FROM = 'hub';\r\n\r\nfunction generateInstanceId(): string {\r\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\r\n    return crypto.randomUUID();\r\n  return `i-${Math.random().toString(36).slice(2)}`;\r\n}\r\n\r\nexport class SyncHub {\r\n  private readonly backend: HubBackend;\r\n  private readonly conns = new Map<string, Connection>();\r\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\r\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\r\n  private readonly instanceId: string;\r\n  private readonly fanout: HubFanout;\r\n  private readonly fanoutUnsub: () => void;\r\n  private readonly authorize?: Authorize;\r\n\r\n  constructor(options: SyncHubOptions = {}) {\r\n    this.backend = options.backend ?? new MemoryHubBackend();\r\n    this.instanceId = options.instanceId ?? generateInstanceId();\r\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\r\n    this.authorize = options.authorize;\r\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\r\n  }\r\n\r\n  addConnection(conn: Connection): void {\r\n    this.conns.set(conn.id, conn);\r\n    let set = this.rooms.get(conn.room);\r\n    if (!set) {\r\n      set = new Set();\r\n      this.rooms.set(conn.room, set);\r\n    }\r\n    set.add(conn.id);\r\n  }\r\n\r\n  removeConnection(connId: string): void {\r\n    const conn = this.conns.get(connId);\r\n    if (!conn) return;\r\n    this.conns.delete(connId);\r\n    const members = this.rooms.get(conn.room);\r\n    if (members) {\r\n      members.delete(connId);\r\n      if (members.size === 0) {\r\n        this.rooms.delete(conn.room);\r\n        this.roomQueues.delete(conn.room);\r\n      }\r\n    }\r\n  }\r\n\r\n  roomCount(): number {\r\n    return this.rooms.size;\r\n  }\r\n\r\n  handleMessage(connId: string, message: string): Promise<void> {\r\n    const conn = this.conns.get(connId);\r\n    if (!conn) return Promise.resolve();\r\n    const room = conn.room;\r\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\r\n    const next = prev\r\n      .then(() => this.process(conn, message))\r\n      .catch(() => {\r\n        // swallow so one failed message never wedges the room's serial queue\r\n      });\r\n    this.roomQueues.set(room, next);\r\n    return next;\r\n  }\r\n\r\n  private async process(conn: Connection, message: string): Promise<void> {\r\n    const env = parseEnvelope(message);\r\n    if (!env) return;\r\n    const op = env.op;\r\n    if (op.kind === 'request-snapshot') {\r\n      const elements = await this.backend.snapshot(conn.room);\r\n      conn.send(\r\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\r\n      );\r\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\r\n      let outboundOp: SyncOp = op;\r\n      let outboundMessage = message;\r\n      if (this.authorize) {\r\n        const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\r\n        const current: OwnedElement | undefined =\r\n          id !== undefined ? await this.backend.get(conn.room, id) : undefined;\r\n        const allowed = await this.authorize({\r\n          userId: conn.userId,\r\n          role: conn.role,\r\n          room: conn.room,\r\n          op,\r\n          currentElement: current,\r\n        });\r\n        if (!allowed) return;\r\n        if (op.kind === 'upsert') {\r\n          const ownerId = current?.ownerId ?? conn.userId;\r\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\r\n          outboundOp = { kind: 'upsert', element: stampedElement };\r\n          outboundMessage = JSON.stringify({ from: env.from, op: outboundOp });\r\n        }\r\n      }\r\n      await this.backend.apply(conn.room, outboundOp);\r\n      const members = this.rooms.get(conn.room);\r\n      if (members) {\r\n        for (const id of members) {\r\n          if (id === conn.id) continue;\r\n          this.conns.get(id)?.send(outboundMessage);\r\n        }\r\n      }\r\n      this.fanout.publish(\r\n        JSON.stringify({ o: this.instanceId, room: conn.room, m: outboundMessage }),\r\n      );\r\n    }\r\n    // 'snapshot' from a client → ignored\r\n  }\r\n\r\n  private onFanout(payload: string): void {\r\n    // Off the serial queue on purpose: forward-only (no backend re-apply — the origin already applied to the\r\n    // SHARED backend), and delivery is already ordered. Do not wrap this in roomQueues.\r\n    let env: { o?: unknown; room?: unknown; m?: unknown };\r\n    try {\r\n      env = JSON.parse(payload);\r\n    } catch {\r\n      return;\r\n    }\r\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.m !== 'string')\r\n      return;\r\n    if (env.o === this.instanceId) return; // our own publish — already forwarded locally\r\n    const members = this.rooms.get(env.room);\r\n    if (!members) return;\r\n    const m = env.m;\r\n    for (const id of members) {\r\n      try {\r\n        this.conns.get(id)?.send(m);\r\n      } catch {\r\n        /* a throwing socket must not break the fanout loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  close(): void {\r\n    this.fanoutUnsub();\r\n  }\r\n}\r\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\nimport type { CanvasElement } from '@fieldnotes/core';\nimport type { HubBackend } from './hub-backend';\n\nexport class MemoryHubBackend implements HubBackend {\n  private rooms = new Map<string, Map<string, CanvasElement>>();\n\n  private room(id: string): Map<string, CanvasElement> {\n    let r = this.rooms.get(id);\n    if (!r) {\n      r = new Map();\n      this.rooms.set(id, r);\n    }\n    return r;\n  }\n\n  async snapshot(room: string): Promise<CanvasElement[]> {\n    return [...this.room(room).values()];\n  }\n\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\n    return this.room(room).get(id);\n  }\n\n  async apply(room: string, op: SyncOp): Promise<void> {\n    if (op.kind === 'clear') {\n      this.rooms.delete(room);\n      return;\n    }\n    applyOpToMap(this.room(room), op);\n  }\n}\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize } from './authorize';\nimport { startHeartbeat } from './heartbeat';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  heartbeatIntervalMs?: number;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n  });\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server })\n    : new WebSocketServer({ port: options.port ?? 0 });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    const queue: string[] = [];\n    const MAX_QUEUE = 100;\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      const msg = String(data);\n      if (state === 'rejected') return;\n      if (state === 'pending') {\n        if (queue.length < MAX_QUEUE) queue.push(msg);\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (state === 'ready') hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\n  ping(): void;\n  terminate(): void;\n  on(event: 'pong', listener: () => void): void;\n}\nexport interface HeartbeatServer {\n  clients: Set<HeartbeatSocket>;\n}\nexport interface Heartbeat {\n  track(ws: HeartbeatSocket): void;\n  stop(): void;\n}\n\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\n  if (intervalMs <= 0) {\n    return {\n      track: () => {\n        /* disabled */\n      },\n      stop: () => {\n        /* disabled */\n      },\n    };\n  }\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\n  const track = (ws: HeartbeatSocket): void => {\n    alive.set(ws, true);\n    ws.on('pong', () => alive.set(ws, true));\n  };\n  const interval = setInterval(() => {\n    for (const ws of wss.clients) {\n      try {\n        if (alive.get(ws) === false) {\n          ws.terminate();\n          continue;\n        }\n        alive.set(ws, false);\n        ws.ping();\n      } catch {\n        /* socket dying mid-tick — skip it */\n      }\n    }\n  }, intervalMs);\n  return { track, stop: () => clearInterval(interval) };\n}\n"],"mappings":";AAAA,SAAS,qBAAkC;;;ACA3C,SAAS,oBAAiC;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,iBAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFFA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,KAAK,IAAI;AAC3B,aAAK,WAAW,OAAO,KAAK,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,OAAO,KAAK;AAClB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,OAAO,CAAC,EACtC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,SAAgC;AACtE,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,CAAC,IAAK;AACV,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,WAAK;AAAA,QACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,UAAI,aAAqB;AACzB,UAAI,kBAAkB;AACtB,UAAI,KAAK,WAAW;AAClB,cAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,cAAM,UACJ,OAAO,SAAY,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IAAI;AAC7D,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,QAAS;AACd,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AACvD,4BAAkB,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,IAAI,WAAW,CAAC;AAAA,QACrE;AAAA,MACF;AACA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAC9C,YAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,UAAI,SAAS;AACX,mBAAW,MAAM,SAAS;AACxB,cAAI,OAAO,KAAK,GAAI;AACpB,eAAK,MAAM,IAAI,EAAE,GAAG,KAAK,eAAe;AAAA,QAC1C;AAAA,MACF;AACA,WAAK,OAAO;AAAA,QACV,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,KAAK,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC5E;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,MAAM;AAChF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI,IAAI;AACvC,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,IAAI;AACd,eAAW,MAAM,SAAS;AACxB,UAAI;AACF,aAAK,MAAM,IAAI,EAAE,GAAG,KAAK,CAAC;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AGlKA,SAAS,uBAAuB;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADxBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,gBAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,gBAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":[]}
+{"version":3,"sources":["../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["import { parseEnvelope, isValidElement, type SyncOp } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const members = this.rooms.get(conn.room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(conn.room);\n        this.roomQueues.delete(conn.room);\n      }\n    }\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, message))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, message: string): Promise<void> {\n    const env = parseEnvelope(message);\n    if (!env) return;\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, env.from, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: env.from,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    canRead: options.canRead,\n  });\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server })\n    : new WebSocketServer({ port: options.port ?? 0 });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    const queue: string[] = [];\n    const MAX_QUEUE = 100;\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      const msg = String(data);\n      if (state === 'rejected') return;\n      if (state === 'pending') {\n        if (queue.length < MAX_QUEUE) queue.push(msg);\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (state === 'ready') hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed) return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";AAAA,SAAS,eAAe,sBAAmC;;;ACA3D,SAAS,oBAAiC;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,iBAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFDA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,QAAO,eAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,UAAU,KAAK,MAAM,IAAI,KAAK,IAAI;AACxC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,KAAK,IAAI;AAC3B,aAAK,WAAW,OAAO,KAAK,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,OAAO,CAAC,EACtC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,SAAgC;AACtE,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,CAAC,IAAK;AACV,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA,QACH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc,WAAW;AAEtF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,IAAI;AAAA,UACV,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AG1QA,SAAS,uBAAuB;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADvBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,gBAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,gBAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fieldnotes/sync-server",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Authoritative WebSocket relay server for Field Notes real-time sync",
   "type": "module",
   "sideEffects": false,
@@ -38,14 +38,14 @@
   ],
   "dependencies": {
     "ws": "^8.18.0",
-    "@fieldnotes/sync": "0.5.1"
+    "@fieldnotes/sync": "0.6.0"
   },
   "devDependencies": {
     "@types/ws": "^8.5.12",
     "@vitest/coverage-v8": "^4.1.0",
     "tsup": "^8.5.1",
     "vitest": "^4.1.0",
-    "@fieldnotes/core": "0.46.0"
+    "@fieldnotes/core": "0.46.1"
   },
   "scripts": {
     "build": "tsup",