@fieldnotes/sync-server 0.8.2 → 0.9.0

package/README.md

@@ -51,6 +51,32 @@ createSyncServer({ port: 8080, heartbeatIntervalMs: 30000 });
 
 Browsers auto-pong at the protocol level, so **no client change** is needed.
 
+## Resource limits
+
+The reference server bounds work and memory per connection by default. Oversized WebSocket messages
+close with code `1009`; message-rate and pending-auth queue violations close with code `4408`.
+Messages with excessive JSON nesting are dropped. Presence sends immediately, then coalesces rapid
+updates so the latest state is forwarded at most once per throttle interval.
+
+```ts
+createSyncServer({
+  port: 8080,
+  maxMessageBytes: 1024 * 1024,
+  maxJsonDepth: 32,
+  maxPendingAuthMessages: 100,
+  maxPendingAuthBytes: 2 * 1024 * 1024,
+  messagesPerSecond: 120,
+  messageBurst: 240,
+  presenceThrottleMs: 50,
+});
+```
+
+These values are the defaults. Tune them to the largest legitimate board operation and expected
+client update rate. `maxMessageBytes` is enforced by the WebSocket parser before a complete message
+is allocated, including fragmented messages. The pending-auth limits bound messages held while an
+asynchronous `authenticate` hook is unresolved. Rate limits are per connection and use a token
+bucket: `messageBurst` is the short spike allowance and `messagesPerSecond` is the refill rate.
+
 ## Authentication
 
 Pass an `authenticate` hook to gate connections:

package/dist/index.cjs

@@ -75,6 +75,55 @@ var InMemoryHubFanout = class {
   }
 };
 
+// src/resource-limits.ts
+var DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;
+var DEFAULT_MAX_JSON_DEPTH = 32;
+var DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;
+var DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;
+var DEFAULT_MESSAGES_PER_SECOND = 120;
+var DEFAULT_MESSAGE_BURST = 240;
+var DEFAULT_PRESENCE_THROTTLE_MS = 50;
+function hasJsonDepthAtMost(message, maxDepth) {
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (const char of message) {
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (char === "\\") escaped = true;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') inString = true;
+    else if (char === "{" || char === "[") {
+      depth += 1;
+      if (depth > maxDepth) return false;
+    } else if (char === "}" || char === "]") {
+      depth -= 1;
+      if (depth < 0) return false;
+    }
+  }
+  return depth === 0 && !inString;
+}
+var MessageRateLimiter = class {
+  constructor(ratePerSecond, burst, now = Date.now()) {
+    this.ratePerSecond = ratePerSecond;
+    this.burst = burst;
+    this.tokens = burst;
+    this.updatedAt = now;
+  }
+  tokens;
+  updatedAt;
+  take(now = Date.now()) {
+    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1e3;
+    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);
+    this.updatedAt = now;
+    if (this.tokens < 1) return false;
+    this.tokens -= 1;
+    return true;
+  }
+};
+
 // src/sync-hub.ts
 var HUB_FROM = "hub";
 function generateInstanceId() {
@@ -107,12 +156,18 @@ var SyncHub = class {
   fanoutUnsub;
   authorize;
   canRead;
+  maxJsonDepth;
+  presenceThrottleMs;
+  lastPresenceAt = /* @__PURE__ */ new Map();
+  pendingPresence = /* @__PURE__ */ new Map();
   constructor(options = {}) {
     this.backend = options.backend ?? new MemoryHubBackend();
     this.instanceId = options.instanceId ?? generateInstanceId();
     this.fanout = options.fanout ?? new InMemoryHubFanout();
     this.authorize = options.authorize;
     this.canRead = options.canRead;
+    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;
+    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;
     this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));
   }
   addConnection(conn) {
@@ -130,6 +185,10 @@ var SyncHub = class {
     this.conns.delete(connId);
     const room = conn.room;
     const hadPresence = this.presenceConnections.delete(connId);
+    this.lastPresenceAt.delete(connId);
+    const pendingPresence = this.pendingPresence.get(connId);
+    if (pendingPresence) clearTimeout(pendingPresence.timer);
+    this.pendingPresence.delete(connId);
     const members = this.rooms.get(room);
     if (members) {
       members.delete(connId);
@@ -146,10 +205,11 @@ var SyncHub = class {
   handleMessage(connId, message) {
     const conn = this.conns.get(connId);
     if (!conn) return Promise.resolve();
+    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();
     const env = (0, import_sync2.parseEnvelope)(message);
     if (!env) return Promise.resolve();
     if (env.op.kind === "presence") {
-      this.broadcastPresence(conn, env.op.data);
+      this.schedulePresence(conn, env.op.data);
       return Promise.resolve();
     }
     const room = conn.room;
@@ -244,6 +304,35 @@ var SyncHub = class {
       })
     );
   }
+  schedulePresence(conn, data) {
+    if (this.presenceThrottleMs <= 0) {
+      this.broadcastPresence(conn, data);
+      return;
+    }
+    const now = Date.now();
+    const lastSentAt = this.lastPresenceAt.get(conn.id);
+    if (lastSentAt === void 0 || now - lastSentAt >= this.presenceThrottleMs) {
+      this.lastPresenceAt.set(conn.id, now);
+      this.broadcastPresence(conn, data);
+      return;
+    }
+    const existing = this.pendingPresence.get(conn.id);
+    if (existing) {
+      existing.data = data;
+      return;
+    }
+    const timer = setTimeout(
+      () => {
+        const pending = this.pendingPresence.get(conn.id);
+        this.pendingPresence.delete(conn.id);
+        if (!pending || !this.conns.has(conn.id)) return;
+        this.lastPresenceAt.set(conn.id, Date.now());
+        this.broadcastPresence(conn, pending.data);
+      },
+      this.presenceThrottleMs - (now - lastSentAt)
+    );
+    this.pendingPresence.set(conn.id, { data, timer });
+  }
   broadcastLeave(room, from) {
     const message = JSON.stringify({ from, op: { kind: "presence-leave" } });
     this.relayToRoom(room, void 0, message);
@@ -325,6 +414,8 @@ var SyncHub = class {
     this.deliverToRoom(env.room, void 0, env.from, op, prevAudience, prevExisted);
   }
   close() {
+    for (const pending of this.pendingPresence.values()) clearTimeout(pending.timer);
+    this.pendingPresence.clear();
     this.fanoutUnsub();
   }
 };
@@ -364,19 +455,27 @@ function startHeartbeat(wss, intervalMs) {
 }
 
 // src/create-sync-server.ts
+function rawDataByteLength(data) {
+  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);
+  return data.byteLength;
+}
 function createSyncServer(options = {}) {
   const hub = new SyncHub({
     backend: options.backend,
     fanout: options.fanout,
     instanceId: options.instanceId,
     authorize: options.authorize,
-    canRead: options.canRead
+    canRead: options.canRead,
+    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,
+    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS
   });
-  const wss = options.server ? new import_ws.WebSocketServer({ server: options.server }) : new import_ws.WebSocketServer({ port: options.port ?? 0 });
+  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;
+  const wss = options.server ? new import_ws.WebSocketServer({ server: options.server, maxPayload: maxMessageBytes }) : new import_ws.WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });
   const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 3e4);
   let counter = 0;
   wss.on("connection", (ws, req) => {
     heartbeat.track(ws);
+    ws.on("error", () => void 0);
     const url = new URL(req.url ?? "", "http://localhost");
     const room = url.searchParams.get("room");
     if (!room) {
@@ -386,8 +485,15 @@ function createSyncServer(options = {}) {
     const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;
     let state = "pending";
     let closed = false;
+    let admitted = false;
     const queue = [];
-    const MAX_QUEUE = 100;
+    let queuedBytes = 0;
+    const maxPendingAuthMessages = options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;
+    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;
+    const limiter = new MessageRateLimiter(
+      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,
+      options.messageBurst ?? DEFAULT_MESSAGE_BURST
+    );
     const send = (m) => {
       try {
         ws.send(m);
@@ -395,31 +501,50 @@ function createSyncServer(options = {}) {
       }
     };
     ws.on("message", (data) => {
-      const msg = String(data);
       if (state === "rejected") return;
+      const messageBytes = rawDataByteLength(data);
+      if (messageBytes > maxMessageBytes) {
+        state = "rejected";
+        ws.close(1009, "message too large");
+        return;
+      }
+      if (!limiter.take()) {
+        state = "rejected";
+        ws.close(4408, "rate limit exceeded");
+        return;
+      }
+      const msg = String(data);
       if (state === "pending") {
-        if (queue.length < MAX_QUEUE) queue.push(msg);
+        if (queue.length >= maxPendingAuthMessages || queuedBytes + messageBytes > maxPendingAuthBytes) {
+          state = "rejected";
+          ws.close(4408, "authentication queue limit exceeded");
+          return;
+        }
+        queue.push(msg);
+        queuedBytes += messageBytes;
         return;
       }
       void hub.handleMessage(connId, msg).catch((err) => console.error("[sync-server]", err));
     });
     ws.on("close", () => {
       closed = true;
-      if (state === "ready") hub.removeConnection(connId);
+      if (admitted) hub.removeConnection(connId);
     });
     Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId }).then((result) => {
-      if (closed) return;
+      if (closed || state === "rejected") return;
       if (!result) {
         state = "rejected";
         ws.close(4401, "unauthorized");
         return;
       }
       state = "ready";
+      admitted = true;
       hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });
       for (const m of queue) {
         void hub.handleMessage(connId, m).catch((err) => console.error("[sync-server]", err));
       }
       queue.length = 0;
+      queuedBytes = 0;
     }).catch(() => {
       if (!closed) {
         state = "rejected";

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\r\nexport type { SyncHubOptions, Connection } from './sync-hub';\r\nexport { MemoryHubBackend } from './memory-hub-backend';\r\nexport type { HubBackend } from './hub-backend';\r\nexport { createSyncServer } from './create-sync-server';\r\nexport type { CreateSyncServerOptions } from './create-sync-server';\r\nexport { InMemoryHubFanout } from './hub-fanout';\r\nexport type { HubFanout } from './hub-fanout';\r\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\r\nexport type { Authorize, AuthorizeContext, OwnedElement, ReadContext, CanRead } from './authorize';\r\nexport { startHeartbeat } from './heartbeat';\r\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\r\n","import { parseEnvelope, isValidElement, type SyncOp, type SyncEnvelope } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.broadcastPresence(conn, env.op.data); // off-queue, synchronous\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, env))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        // `to` is a private correlation address for the requesting SyncClient. It is never\n        // broadcast; every public sender identity below comes from the server-owned connection.\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      this.fanout.publish(payload);\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n  }\n\n  private broadcastPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\r\nimport type { Server } from 'http';\r\nimport { SyncHub } from './sync-hub';\r\nimport type { HubBackend } from './hub-backend';\r\nimport type { HubFanout } from './hub-fanout';\r\nimport type { Authenticate } from './authenticate';\r\nimport type { Authorize, CanRead } from './authorize';\r\nimport { startHeartbeat } from './heartbeat';\r\n\r\nexport interface CreateSyncServerOptions {\r\n  port?: number;\r\n  server?: Server;\r\n  backend?: HubBackend;\r\n  fanout?: HubFanout;\r\n  instanceId?: string;\r\n  authenticate?: Authenticate;\r\n  authorize?: Authorize;\r\n  canRead?: CanRead;\r\n  heartbeatIntervalMs?: number;\r\n}\r\n\r\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\r\n  hub: SyncHub;\r\n  wss: WebSocketServer;\r\n  close: () => Promise<void>;\r\n} {\r\n  const hub = new SyncHub({\r\n    backend: options.backend,\r\n    fanout: options.fanout,\r\n    instanceId: options.instanceId,\r\n    authorize: options.authorize,\r\n    canRead: options.canRead,\r\n  });\r\n  const wss = options.server\r\n    ? new WebSocketServer({ server: options.server })\r\n    : new WebSocketServer({ port: options.port ?? 0 });\r\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\r\n  let counter = 0;\r\n  wss.on('connection', (ws, req) => {\r\n    heartbeat.track(ws);\r\n    const url = new URL(req.url ?? '', 'http://localhost');\r\n    const room = url.searchParams.get('room');\r\n    if (!room) {\r\n      ws.close(4400, 'room required');\r\n      return;\r\n    }\r\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\r\n\r\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\r\n    let closed = false;\r\n    const queue: string[] = [];\r\n    const MAX_QUEUE = 100;\r\n\r\n    const send = (m: string) => {\r\n      try {\r\n        ws.send(m);\r\n      } catch {\r\n        /* socket closed mid-send */\r\n      }\r\n    };\r\n\r\n    ws.on('message', (data) => {\r\n      const msg = String(data);\r\n      if (state === 'rejected') return;\r\n      if (state === 'pending') {\r\n        if (queue.length < MAX_QUEUE) queue.push(msg);\r\n        return;\r\n      }\r\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\r\n    });\r\n    ws.on('close', () => {\r\n      closed = true;\r\n      if (state === 'ready') hub.removeConnection(connId);\r\n    });\r\n\r\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\r\n      .then((result) => {\r\n        if (closed) return;\r\n        if (!result) {\r\n          state = 'rejected';\r\n          ws.close(4401, 'unauthorized');\r\n          return;\r\n        }\r\n        state = 'ready';\r\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\r\n        for (const m of queue) {\r\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\r\n        }\r\n        queue.length = 0;\r\n      })\r\n      .catch(() => {\r\n        if (!closed) {\r\n          state = 'rejected';\r\n          ws.close(4401, 'unauthorized');\r\n        }\r\n      });\r\n  });\r\n  return {\r\n    hub,\r\n    wss,\r\n    close: () =>\r\n      new Promise<void>((resolve) => {\r\n        heartbeat.stop();\r\n        hub.close();\r\n        wss.close(() => resolve());\r\n      }),\r\n  };\r\n}\r\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAA8E;;;ACA9E,kBAA0C;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFDA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,YAAO,6BAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,kBAAkB,MAAM,IAAI,GAAG,IAAI;AACxC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC,EAClC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA;AAAA;AAAA,QAGH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAErF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,OAAO,QAAQ,OAAO;AAAA,IAC7B,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAuB;AACtF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAkB,MAAqB;AAC/D,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AG/UA,gBAAgC;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADvBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":["import_sync"]}
+{"version":3,"sources":["../src/index.ts","../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/resource-limits.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["export { SyncHub } from './sync-hub';\r\nexport type { SyncHubOptions, Connection } from './sync-hub';\r\nexport { MemoryHubBackend } from './memory-hub-backend';\r\nexport type { HubBackend } from './hub-backend';\r\nexport { createSyncServer } from './create-sync-server';\r\nexport type { CreateSyncServerOptions } from './create-sync-server';\r\nexport { InMemoryHubFanout } from './hub-fanout';\r\nexport type { HubFanout } from './hub-fanout';\r\nexport type { AuthInfo, AuthResult, Authenticate } from './authenticate';\r\nexport type { Authorize, AuthorizeContext, OwnedElement, ReadContext, CanRead } from './authorize';\r\nexport { startHeartbeat } from './heartbeat';\r\nexport type { Heartbeat, HeartbeatSocket, HeartbeatServer } from './heartbeat';\r\n","import { parseEnvelope, isValidElement, type SyncOp, type SyncEnvelope } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  hasJsonDepthAtMost,\n} from './resource-limits';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  maxJsonDepth?: number;\n  presenceThrottleMs?: number;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n  private readonly maxJsonDepth: number;\n  private readonly presenceThrottleMs: number;\n  private readonly lastPresenceAt = new Map<string, number>();\n  private readonly pendingPresence = new Map<\n    string,\n    { data: unknown; timer: ReturnType<typeof setTimeout> }\n  >();\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;\n    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    this.lastPresenceAt.delete(connId);\n    const pendingPresence = this.pendingPresence.get(connId);\n    if (pendingPresence) clearTimeout(pendingPresence.timer);\n    this.pendingPresence.delete(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.schedulePresence(conn, env.op.data); // off-queue, throttled independently\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, env))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        // `to` is a private correlation address for the requesting SyncClient. It is never\n        // broadcast; every public sender identity below comes from the server-owned connection.\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      this.fanout.publish(payload);\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n  }\n\n  private broadcastPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private schedulePresence(conn: Connection, data: unknown): void {\n    if (this.presenceThrottleMs <= 0) {\n      this.broadcastPresence(conn, data);\n      return;\n    }\n    const now = Date.now();\n    const lastSentAt = this.lastPresenceAt.get(conn.id);\n    if (lastSentAt === undefined || now - lastSentAt >= this.presenceThrottleMs) {\n      this.lastPresenceAt.set(conn.id, now);\n      this.broadcastPresence(conn, data);\n      return;\n    }\n\n    const existing = this.pendingPresence.get(conn.id);\n    if (existing) {\n      existing.data = data;\n      return;\n    }\n    const timer = setTimeout(\n      () => {\n        const pending = this.pendingPresence.get(conn.id);\n        this.pendingPresence.delete(conn.id);\n        if (!pending || !this.conns.has(conn.id)) return;\n        this.lastPresenceAt.set(conn.id, Date.now());\n        this.broadcastPresence(conn, pending.data);\n      },\n      this.presenceThrottleMs - (now - lastSentAt),\n    );\n    this.pendingPresence.set(conn.id, { data, timer });\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    for (const pending of this.pendingPresence.values()) clearTimeout(pending.timer);\n    this.pendingPresence.clear();\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","export const DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;\nexport const DEFAULT_MAX_JSON_DEPTH = 32;\nexport const DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;\nexport const DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;\nexport const DEFAULT_MESSAGES_PER_SECOND = 120;\nexport const DEFAULT_MESSAGE_BURST = 240;\nexport const DEFAULT_PRESENCE_THROTTLE_MS = 50;\n\nexport function hasJsonDepthAtMost(message: string, maxDepth: number): boolean {\n  let depth = 0;\n  let inString = false;\n  let escaped = false;\n\n  for (const char of message) {\n    if (inString) {\n      if (escaped) escaped = false;\n      else if (char === '\\\\') escaped = true;\n      else if (char === '\"') inString = false;\n      continue;\n    }\n    if (char === '\"') inString = true;\n    else if (char === '{' || char === '[') {\n      depth += 1;\n      if (depth > maxDepth) return false;\n    } else if (char === '}' || char === ']') {\n      depth -= 1;\n      if (depth < 0) return false;\n    }\n  }\n\n  return depth === 0 && !inString;\n}\n\nexport class MessageRateLimiter {\n  private tokens: number;\n  private updatedAt: number;\n\n  constructor(\n    private readonly ratePerSecond: number,\n    private readonly burst: number,\n    now = Date.now(),\n  ) {\n    this.tokens = burst;\n    this.updatedAt = now;\n  }\n\n  take(now = Date.now()): boolean {\n    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1000;\n    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);\n    this.updatedAt = now;\n    if (this.tokens < 1) return false;\n    this.tokens -= 1;\n    return true;\n  }\n}\n","import { WebSocketServer, type RawData } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_MAX_MESSAGE_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_MESSAGES,\n  DEFAULT_MESSAGE_BURST,\n  DEFAULT_MESSAGES_PER_SECOND,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  MessageRateLimiter,\n} from './resource-limits';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n  maxMessageBytes?: number;\n  maxJsonDepth?: number;\n  maxPendingAuthMessages?: number;\n  maxPendingAuthBytes?: number;\n  messagesPerSecond?: number;\n  messageBurst?: number;\n  presenceThrottleMs?: number;\n}\n\nfunction rawDataByteLength(data: RawData): number {\n  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);\n  return data.byteLength;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    canRead: options.canRead,\n    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,\n    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS,\n  });\n  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server, maxPayload: maxMessageBytes })\n    : new WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    // Protocol/parser failures (including maxPayload) close the peer. Consuming the socket-level\n    // error keeps hostile input from becoming an uncaught process error.\n    ws.on('error', () => undefined);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    let admitted = false;\n    const queue: string[] = [];\n    let queuedBytes = 0;\n    const maxPendingAuthMessages =\n      options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;\n    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;\n    const limiter = new MessageRateLimiter(\n      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,\n      options.messageBurst ?? DEFAULT_MESSAGE_BURST,\n    );\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      if (state === 'rejected') return;\n      const messageBytes = rawDataByteLength(data);\n      if (messageBytes > maxMessageBytes) {\n        state = 'rejected';\n        ws.close(1009, 'message too large');\n        return;\n      }\n      if (!limiter.take()) {\n        state = 'rejected';\n        ws.close(4408, 'rate limit exceeded');\n        return;\n      }\n      const msg = String(data);\n      if (state === 'pending') {\n        if (\n          queue.length >= maxPendingAuthMessages ||\n          queuedBytes + messageBytes > maxPendingAuthBytes\n        ) {\n          state = 'rejected';\n          ws.close(4408, 'authentication queue limit exceeded');\n          return;\n        }\n        queue.push(msg);\n        queuedBytes += messageBytes;\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (admitted) hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed || state === 'rejected') return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        admitted = true;\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n        queuedBytes = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,eAA8E;;;ACA9E,kBAA0C;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,kCAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;ACvBO,IAAM,4BAA4B,OAAO;AACzC,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC;AAC1C,IAAM,iCAAiC,IAAI,OAAO;AAClD,IAAM,8BAA8B;AACpC,IAAM,wBAAwB;AAC9B,IAAM,+BAA+B;AAErC,SAAS,mBAAmB,SAAiB,UAA2B;AAC7E,MAAI,QAAQ;AACZ,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,aAAW,QAAQ,SAAS;AAC1B,QAAI,UAAU;AACZ,UAAI,QAAS,WAAU;AAAA,eACd,SAAS,KAAM,WAAU;AAAA,eACzB,SAAS,IAAK,YAAW;AAClC;AAAA,IACF;AACA,QAAI,SAAS,IAAK,YAAW;AAAA,aACpB,SAAS,OAAO,SAAS,KAAK;AACrC,eAAS;AACT,UAAI,QAAQ,SAAU,QAAO;AAAA,IAC/B,WAAW,SAAS,OAAO,SAAS,KAAK;AACvC,eAAS;AACT,UAAI,QAAQ,EAAG,QAAO;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,UAAU,KAAK,CAAC;AACzB;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAI9B,YACmB,eACA,OACjB,MAAM,KAAK,IAAI,GACf;AAHiB;AACA;AAGjB,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AAAA,EAVQ;AAAA,EACA;AAAA,EAWR,KAAK,MAAM,KAAK,IAAI,GAAY;AAC9B,UAAM,iBAAiB,KAAK,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI;AAC3D,SAAK,SAAS,KAAK,IAAI,KAAK,OAAO,KAAK,SAAS,iBAAiB,KAAK,aAAa;AACpF,SAAK,YAAY;AACjB,QAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,SAAK,UAAU;AACf,WAAO;AAAA,EACT;AACF;;;AHzBA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,YAAO,6BAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB,oBAAI,IAAoB;AAAA,EACzC,kBAAkB,oBAAI,IAGrC;AAAA,EAEF,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,qBAAqB,QAAQ,sBAAsB;AACxD,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,SAAK,eAAe,OAAO,MAAM;AACjC,UAAM,kBAAkB,KAAK,gBAAgB,IAAI,MAAM;AACvD,QAAI,gBAAiB,cAAa,gBAAgB,KAAK;AACvD,SAAK,gBAAgB,OAAO,MAAM;AAClC,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,QAAI,CAAC,mBAAmB,SAAS,KAAK,YAAY,EAAG,QAAO,QAAQ,QAAQ;AAC5E,UAAM,UAAM,4BAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,iBAAiB,MAAM,IAAI,GAAG,IAAI;AACvC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC,EAClC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA;AAAA;AAAA,QAGH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAErF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,OAAO,QAAQ,OAAO;AAAA,IAC7B,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAuB;AACtF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAkB,MAAqB;AAC/D,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,iBAAiB,MAAkB,MAAqB;AAC9D,QAAI,KAAK,sBAAsB,GAAG;AAChC,WAAK,kBAAkB,MAAM,IAAI;AACjC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,aAAa,KAAK,eAAe,IAAI,KAAK,EAAE;AAClD,QAAI,eAAe,UAAa,MAAM,cAAc,KAAK,oBAAoB;AAC3E,WAAK,eAAe,IAAI,KAAK,IAAI,GAAG;AACpC,WAAK,kBAAkB,MAAM,IAAI;AACjC;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,gBAAgB,IAAI,KAAK,EAAE;AACjD,QAAI,UAAU;AACZ,eAAS,OAAO;AAChB;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AACJ,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK,EAAE;AAChD,aAAK,gBAAgB,OAAO,KAAK,EAAE;AACnC,YAAI,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,EAAG;AAC1C,aAAK,eAAe,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC;AAC3C,aAAK,kBAAkB,MAAM,QAAQ,IAAI;AAAA,MAC3C;AAAA,MACA,KAAK,sBAAsB,MAAM;AAAA,IACnC;AACA,SAAK,gBAAgB,IAAI,KAAK,IAAI,EAAE,MAAM,MAAM,CAAC;AAAA,EACnD;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,eAAW,WAAW,KAAK,gBAAgB,OAAO,EAAG,cAAa,QAAQ,KAAK;AAC/E,SAAK,gBAAgB,MAAM;AAC3B,SAAK,YAAY;AAAA,EACnB;AACF;;;AIrYA,gBAA8C;;;ACavC,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADNA,SAAS,kBAAkB,MAAuB;AAChD,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,OAAO,CAAC,OAAO,UAAU,QAAQ,MAAM,YAAY,CAAC;AACzF,SAAO,KAAK;AACd;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,IACjB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,oBAAoB,QAAQ,sBAAsB;AAAA,EACpD,CAAC;AACD,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,MAAM,QAAQ,SAChB,IAAI,0BAAgB,EAAE,QAAQ,QAAQ,QAAQ,YAAY,gBAAgB,CAAC,IAC3E,IAAI,0BAAgB,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,gBAAgB,CAAC;AAChF,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAGlB,OAAG,GAAG,SAAS,MAAM,MAAS;AAC9B,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,QAAI,WAAW;AACf,UAAM,QAAkB,CAAC;AACzB,QAAI,cAAc;AAClB,UAAM,yBACJ,QAAQ,0BAA0B;AACpC,UAAM,sBAAsB,QAAQ,uBAAuB;AAC3D,UAAM,UAAU,IAAI;AAAA,MAClB,QAAQ,qBAAqB;AAAA,MAC7B,QAAQ,gBAAgB;AAAA,IAC1B;AAEA,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,UAAI,UAAU,WAAY;AAC1B,YAAM,eAAe,kBAAkB,IAAI;AAC3C,UAAI,eAAe,iBAAiB;AAClC,gBAAQ;AACR,WAAG,MAAM,MAAM,mBAAmB;AAClC;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,gBAAQ;AACR,WAAG,MAAM,MAAM,qBAAqB;AACpC;AAAA,MACF;AACA,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAW;AACvB,YACE,MAAM,UAAU,0BAChB,cAAc,eAAe,qBAC7B;AACA,kBAAQ;AACR,aAAG,MAAM,MAAM,qCAAqC;AACpD;AAAA,QACF;AACA,cAAM,KAAK,GAAG;AACd,uBAAe;AACf;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,SAAU,KAAI,iBAAiB,MAAM;AAAA,IAC3C,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,UAAU,UAAU,WAAY;AACpC,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,iBAAW;AACX,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AACf,oBAAc;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":["import_sync"]}

package/dist/index.d.cts

@@ -53,6 +53,8 @@ interface SyncHubOptions {
     instanceId?: string;
     authorize?: Authorize;
     canRead?: CanRead;
+    maxJsonDepth?: number;
+    presenceThrottleMs?: number;
 }
 declare class SyncHub {
     private readonly backend;
@@ -65,6 +67,10 @@ declare class SyncHub {
     private readonly fanoutUnsub;
     private readonly authorize?;
     private readonly canRead?;
+    private readonly maxJsonDepth;
+    private readonly presenceThrottleMs;
+    private readonly lastPresenceAt;
+    private readonly pendingPresence;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
@@ -75,6 +81,7 @@ declare class SyncHub {
     private safePublish;
     private relayToRoom;
     private broadcastPresence;
+    private schedulePresence;
     private broadcastLeave;
     private deliverToRoom;
     private sendCorrection;
@@ -110,6 +117,13 @@ interface CreateSyncServerOptions {
     authorize?: Authorize;
     canRead?: CanRead;
     heartbeatIntervalMs?: number;
+    maxMessageBytes?: number;
+    maxJsonDepth?: number;
+    maxPendingAuthMessages?: number;
+    maxPendingAuthBytes?: number;
+    messagesPerSecond?: number;
+    messageBurst?: number;
+    presenceThrottleMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
     hub: SyncHub;

package/dist/index.d.ts

@@ -53,6 +53,8 @@ interface SyncHubOptions {
     instanceId?: string;
     authorize?: Authorize;
     canRead?: CanRead;
+    maxJsonDepth?: number;
+    presenceThrottleMs?: number;
 }
 declare class SyncHub {
     private readonly backend;
@@ -65,6 +67,10 @@ declare class SyncHub {
     private readonly fanoutUnsub;
     private readonly authorize?;
     private readonly canRead?;
+    private readonly maxJsonDepth;
+    private readonly presenceThrottleMs;
+    private readonly lastPresenceAt;
+    private readonly pendingPresence;
     constructor(options?: SyncHubOptions);
     addConnection(conn: Connection): void;
     removeConnection(connId: string): void;
@@ -75,6 +81,7 @@ declare class SyncHub {
     private safePublish;
     private relayToRoom;
     private broadcastPresence;
+    private schedulePresence;
     private broadcastLeave;
     private deliverToRoom;
     private sendCorrection;
@@ -110,6 +117,13 @@ interface CreateSyncServerOptions {
     authorize?: Authorize;
     canRead?: CanRead;
     heartbeatIntervalMs?: number;
+    maxMessageBytes?: number;
+    maxJsonDepth?: number;
+    maxPendingAuthMessages?: number;
+    maxPendingAuthBytes?: number;
+    messagesPerSecond?: number;
+    messageBurst?: number;
+    presenceThrottleMs?: number;
 }
 declare function createSyncServer(options?: CreateSyncServerOptions): {
     hub: SyncHub;

package/dist/index.js

@@ -45,6 +45,55 @@ var InMemoryHubFanout = class {
   }
 };
 
+// src/resource-limits.ts
+var DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;
+var DEFAULT_MAX_JSON_DEPTH = 32;
+var DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;
+var DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;
+var DEFAULT_MESSAGES_PER_SECOND = 120;
+var DEFAULT_MESSAGE_BURST = 240;
+var DEFAULT_PRESENCE_THROTTLE_MS = 50;
+function hasJsonDepthAtMost(message, maxDepth) {
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (const char of message) {
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (char === "\\") escaped = true;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') inString = true;
+    else if (char === "{" || char === "[") {
+      depth += 1;
+      if (depth > maxDepth) return false;
+    } else if (char === "}" || char === "]") {
+      depth -= 1;
+      if (depth < 0) return false;
+    }
+  }
+  return depth === 0 && !inString;
+}
+var MessageRateLimiter = class {
+  constructor(ratePerSecond, burst, now = Date.now()) {
+    this.ratePerSecond = ratePerSecond;
+    this.burst = burst;
+    this.tokens = burst;
+    this.updatedAt = now;
+  }
+  tokens;
+  updatedAt;
+  take(now = Date.now()) {
+    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1e3;
+    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);
+    this.updatedAt = now;
+    if (this.tokens < 1) return false;
+    this.tokens -= 1;
+    return true;
+  }
+};
+
 // src/sync-hub.ts
 var HUB_FROM = "hub";
 function generateInstanceId() {
@@ -77,12 +126,18 @@ var SyncHub = class {
   fanoutUnsub;
   authorize;
   canRead;
+  maxJsonDepth;
+  presenceThrottleMs;
+  lastPresenceAt = /* @__PURE__ */ new Map();
+  pendingPresence = /* @__PURE__ */ new Map();
   constructor(options = {}) {
     this.backend = options.backend ?? new MemoryHubBackend();
     this.instanceId = options.instanceId ?? generateInstanceId();
     this.fanout = options.fanout ?? new InMemoryHubFanout();
     this.authorize = options.authorize;
     this.canRead = options.canRead;
+    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;
+    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;
     this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));
   }
   addConnection(conn) {
@@ -100,6 +155,10 @@ var SyncHub = class {
     this.conns.delete(connId);
     const room = conn.room;
     const hadPresence = this.presenceConnections.delete(connId);
+    this.lastPresenceAt.delete(connId);
+    const pendingPresence = this.pendingPresence.get(connId);
+    if (pendingPresence) clearTimeout(pendingPresence.timer);
+    this.pendingPresence.delete(connId);
     const members = this.rooms.get(room);
     if (members) {
       members.delete(connId);
@@ -116,10 +175,11 @@ var SyncHub = class {
   handleMessage(connId, message) {
     const conn = this.conns.get(connId);
     if (!conn) return Promise.resolve();
+    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();
     const env = parseEnvelope(message);
     if (!env) return Promise.resolve();
     if (env.op.kind === "presence") {
-      this.broadcastPresence(conn, env.op.data);
+      this.schedulePresence(conn, env.op.data);
       return Promise.resolve();
     }
     const room = conn.room;
@@ -214,6 +274,35 @@ var SyncHub = class {
       })
     );
   }
+  schedulePresence(conn, data) {
+    if (this.presenceThrottleMs <= 0) {
+      this.broadcastPresence(conn, data);
+      return;
+    }
+    const now = Date.now();
+    const lastSentAt = this.lastPresenceAt.get(conn.id);
+    if (lastSentAt === void 0 || now - lastSentAt >= this.presenceThrottleMs) {
+      this.lastPresenceAt.set(conn.id, now);
+      this.broadcastPresence(conn, data);
+      return;
+    }
+    const existing = this.pendingPresence.get(conn.id);
+    if (existing) {
+      existing.data = data;
+      return;
+    }
+    const timer = setTimeout(
+      () => {
+        const pending = this.pendingPresence.get(conn.id);
+        this.pendingPresence.delete(conn.id);
+        if (!pending || !this.conns.has(conn.id)) return;
+        this.lastPresenceAt.set(conn.id, Date.now());
+        this.broadcastPresence(conn, pending.data);
+      },
+      this.presenceThrottleMs - (now - lastSentAt)
+    );
+    this.pendingPresence.set(conn.id, { data, timer });
+  }
   broadcastLeave(room, from) {
     const message = JSON.stringify({ from, op: { kind: "presence-leave" } });
     this.relayToRoom(room, void 0, message);
@@ -295,6 +384,8 @@ var SyncHub = class {
     this.deliverToRoom(env.room, void 0, env.from, op, prevAudience, prevExisted);
   }
   close() {
+    for (const pending of this.pendingPresence.values()) clearTimeout(pending.timer);
+    this.pendingPresence.clear();
     this.fanoutUnsub();
   }
 };
@@ -334,19 +425,27 @@ function startHeartbeat(wss, intervalMs) {
 }
 
 // src/create-sync-server.ts
+function rawDataByteLength(data) {
+  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);
+  return data.byteLength;
+}
 function createSyncServer(options = {}) {
   const hub = new SyncHub({
     backend: options.backend,
     fanout: options.fanout,
     instanceId: options.instanceId,
     authorize: options.authorize,
-    canRead: options.canRead
+    canRead: options.canRead,
+    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,
+    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS
   });
-  const wss = options.server ? new WebSocketServer({ server: options.server }) : new WebSocketServer({ port: options.port ?? 0 });
+  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;
+  const wss = options.server ? new WebSocketServer({ server: options.server, maxPayload: maxMessageBytes }) : new WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });
   const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 3e4);
   let counter = 0;
   wss.on("connection", (ws, req) => {
     heartbeat.track(ws);
+    ws.on("error", () => void 0);
     const url = new URL(req.url ?? "", "http://localhost");
     const room = url.searchParams.get("room");
     if (!room) {
@@ -356,8 +455,15 @@ function createSyncServer(options = {}) {
     const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;
     let state = "pending";
     let closed = false;
+    let admitted = false;
     const queue = [];
-    const MAX_QUEUE = 100;
+    let queuedBytes = 0;
+    const maxPendingAuthMessages = options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;
+    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;
+    const limiter = new MessageRateLimiter(
+      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,
+      options.messageBurst ?? DEFAULT_MESSAGE_BURST
+    );
     const send = (m) => {
       try {
         ws.send(m);
@@ -365,31 +471,50 @@ function createSyncServer(options = {}) {
       }
     };
     ws.on("message", (data) => {
-      const msg = String(data);
       if (state === "rejected") return;
+      const messageBytes = rawDataByteLength(data);
+      if (messageBytes > maxMessageBytes) {
+        state = "rejected";
+        ws.close(1009, "message too large");
+        return;
+      }
+      if (!limiter.take()) {
+        state = "rejected";
+        ws.close(4408, "rate limit exceeded");
+        return;
+      }
+      const msg = String(data);
       if (state === "pending") {
-        if (queue.length < MAX_QUEUE) queue.push(msg);
+        if (queue.length >= maxPendingAuthMessages || queuedBytes + messageBytes > maxPendingAuthBytes) {
+          state = "rejected";
+          ws.close(4408, "authentication queue limit exceeded");
+          return;
+        }
+        queue.push(msg);
+        queuedBytes += messageBytes;
         return;
       }
       void hub.handleMessage(connId, msg).catch((err) => console.error("[sync-server]", err));
     });
     ws.on("close", () => {
       closed = true;
-      if (state === "ready") hub.removeConnection(connId);
+      if (admitted) hub.removeConnection(connId);
     });
     Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId }).then((result) => {
-      if (closed) return;
+      if (closed || state === "rejected") return;
       if (!result) {
         state = "rejected";
         ws.close(4401, "unauthorized");
         return;
       }
       state = "ready";
+      admitted = true;
       hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });
       for (const m of queue) {
         void hub.handleMessage(connId, m).catch((err) => console.error("[sync-server]", err));
       }
       queue.length = 0;
+      queuedBytes = 0;
     }).catch(() => {
       if (!closed) {
         state = "rejected";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["import { parseEnvelope, isValidElement, type SyncOp, type SyncEnvelope } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.broadcastPresence(conn, env.op.data); // off-queue, synchronous\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, env))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        // `to` is a private correlation address for the requesting SyncClient. It is never\n        // broadcast; every public sender identity below comes from the server-owned connection.\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      this.fanout.publish(payload);\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n  }\n\n  private broadcastPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","import { WebSocketServer } from 'ws';\r\nimport type { Server } from 'http';\r\nimport { SyncHub } from './sync-hub';\r\nimport type { HubBackend } from './hub-backend';\r\nimport type { HubFanout } from './hub-fanout';\r\nimport type { Authenticate } from './authenticate';\r\nimport type { Authorize, CanRead } from './authorize';\r\nimport { startHeartbeat } from './heartbeat';\r\n\r\nexport interface CreateSyncServerOptions {\r\n  port?: number;\r\n  server?: Server;\r\n  backend?: HubBackend;\r\n  fanout?: HubFanout;\r\n  instanceId?: string;\r\n  authenticate?: Authenticate;\r\n  authorize?: Authorize;\r\n  canRead?: CanRead;\r\n  heartbeatIntervalMs?: number;\r\n}\r\n\r\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\r\n  hub: SyncHub;\r\n  wss: WebSocketServer;\r\n  close: () => Promise<void>;\r\n} {\r\n  const hub = new SyncHub({\r\n    backend: options.backend,\r\n    fanout: options.fanout,\r\n    instanceId: options.instanceId,\r\n    authorize: options.authorize,\r\n    canRead: options.canRead,\r\n  });\r\n  const wss = options.server\r\n    ? new WebSocketServer({ server: options.server })\r\n    : new WebSocketServer({ port: options.port ?? 0 });\r\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\r\n  let counter = 0;\r\n  wss.on('connection', (ws, req) => {\r\n    heartbeat.track(ws);\r\n    const url = new URL(req.url ?? '', 'http://localhost');\r\n    const room = url.searchParams.get('room');\r\n    if (!room) {\r\n      ws.close(4400, 'room required');\r\n      return;\r\n    }\r\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\r\n\r\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\r\n    let closed = false;\r\n    const queue: string[] = [];\r\n    const MAX_QUEUE = 100;\r\n\r\n    const send = (m: string) => {\r\n      try {\r\n        ws.send(m);\r\n      } catch {\r\n        /* socket closed mid-send */\r\n      }\r\n    };\r\n\r\n    ws.on('message', (data) => {\r\n      const msg = String(data);\r\n      if (state === 'rejected') return;\r\n      if (state === 'pending') {\r\n        if (queue.length < MAX_QUEUE) queue.push(msg);\r\n        return;\r\n      }\r\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\r\n    });\r\n    ws.on('close', () => {\r\n      closed = true;\r\n      if (state === 'ready') hub.removeConnection(connId);\r\n    });\r\n\r\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\r\n      .then((result) => {\r\n        if (closed) return;\r\n        if (!result) {\r\n          state = 'rejected';\r\n          ws.close(4401, 'unauthorized');\r\n          return;\r\n        }\r\n        state = 'ready';\r\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\r\n        for (const m of queue) {\r\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\r\n        }\r\n        queue.length = 0;\r\n      })\r\n      .catch(() => {\r\n        if (!closed) {\r\n          state = 'rejected';\r\n          ws.close(4401, 'unauthorized');\r\n        }\r\n      });\r\n  });\r\n  return {\r\n    hub,\r\n    wss,\r\n    close: () =>\r\n      new Promise<void>((resolve) => {\r\n        heartbeat.stop();\r\n        hub.close();\r\n        wss.close(() => resolve());\r\n      }),\r\n  };\r\n}\r\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";AAAA,SAAS,eAAe,sBAAsD;;;ACA9E,SAAS,oBAAiC;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,iBAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;AFDA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,QAAO,eAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,kBAAkB,MAAM,IAAI,GAAG,IAAI;AACxC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC,EAClC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA;AAAA;AAAA,QAGH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAErF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,OAAO,QAAQ,OAAO;AAAA,IAC7B,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAuB;AACtF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAkB,MAAqB;AAC/D,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,SAAK,YAAY;AAAA,EACnB;AACF;;;AG/UA,SAAS,uBAAuB;;;ACazB,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADvBO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,QAAM,MAAM,QAAQ,SAChB,IAAI,gBAAgB,EAAE,QAAQ,QAAQ,OAAO,CAAC,IAC9C,IAAI,gBAAgB,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC;AACnD,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAClB,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,UAAM,YAAY;AAElB,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAY;AAC1B,UAAI,UAAU,WAAW;AACvB,YAAI,MAAM,SAAS,UAAW,OAAM,KAAK,GAAG;AAC5C;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,UAAU,QAAS,KAAI,iBAAiB,MAAM;AAAA,IACpD,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,OAAQ;AACZ,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AAAA,IACjB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":[]}
+{"version":3,"sources":["../src/sync-hub.ts","../src/memory-hub-backend.ts","../src/hub-fanout.ts","../src/resource-limits.ts","../src/create-sync-server.ts","../src/heartbeat.ts"],"sourcesContent":["import { parseEnvelope, isValidElement, type SyncOp, type SyncEnvelope } from '@fieldnotes/sync';\nimport { MemoryHubBackend } from './memory-hub-backend';\nimport { InMemoryHubFanout, type HubFanout } from './hub-fanout';\nimport type { HubBackend } from './hub-backend';\nimport type { Authorize, CanRead, OwnedElement } from './authorize';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  hasJsonDepthAtMost,\n} from './resource-limits';\n\nexport interface Connection {\n  id: string;\n  room: string;\n  userId?: string;\n  role?: string;\n  send(message: string): void;\n}\n\nexport interface SyncHubOptions {\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  maxJsonDepth?: number;\n  presenceThrottleMs?: number;\n}\n\nconst HUB_FROM = 'hub';\n\nfunction generateInstanceId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')\n    return crypto.randomUUID();\n  return `i-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction isFanoutOp(op: unknown): op is Extract<SyncOp, { kind: 'upsert' | 'remove' | 'clear' }> {\n  if (typeof op !== 'object' || op === null) return false;\n  const o = op as { kind?: unknown; element?: unknown; id?: unknown };\n  if (o.kind === 'upsert') return isValidElement(o.element);\n  if (o.kind === 'remove') return typeof o.id === 'string';\n  return o.kind === 'clear';\n}\n\nfunction isPresenceOp(\n  op: unknown,\n): op is { kind: 'presence'; data: unknown } | { kind: 'presence-leave' } {\n  if (typeof op !== 'object' || op === null) return false;\n  const k = (op as { kind?: unknown }).kind;\n  return k === 'presence' || k === 'presence-leave';\n}\n\nexport class SyncHub {\n  private readonly backend: HubBackend;\n  private readonly conns = new Map<string, Connection>();\n  private readonly rooms = new Map<string, Set<string>>(); // room → connIds\n  private readonly roomQueues = new Map<string, Promise<void>>(); // room → serial tail\n  private readonly presenceConnections = new Set<string>();\n  private readonly instanceId: string;\n  private readonly fanout: HubFanout;\n  private readonly fanoutUnsub: () => void;\n  private readonly authorize?: Authorize;\n  private readonly canRead?: CanRead;\n  private readonly maxJsonDepth: number;\n  private readonly presenceThrottleMs: number;\n  private readonly lastPresenceAt = new Map<string, number>();\n  private readonly pendingPresence = new Map<\n    string,\n    { data: unknown; timer: ReturnType<typeof setTimeout> }\n  >();\n\n  constructor(options: SyncHubOptions = {}) {\n    this.backend = options.backend ?? new MemoryHubBackend();\n    this.instanceId = options.instanceId ?? generateInstanceId();\n    this.fanout = options.fanout ?? new InMemoryHubFanout();\n    this.authorize = options.authorize;\n    this.canRead = options.canRead;\n    this.maxJsonDepth = options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH;\n    this.presenceThrottleMs = options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS;\n    this.fanoutUnsub = this.fanout.subscribe((payload) => this.onFanout(payload));\n  }\n\n  addConnection(conn: Connection): void {\n    this.conns.set(conn.id, conn);\n    let set = this.rooms.get(conn.room);\n    if (!set) {\n      set = new Set();\n      this.rooms.set(conn.room, set);\n    }\n    set.add(conn.id);\n  }\n\n  removeConnection(connId: string): void {\n    const conn = this.conns.get(connId);\n    if (!conn) return;\n    this.conns.delete(connId);\n    const room = conn.room;\n    const hadPresence = this.presenceConnections.delete(connId);\n    this.lastPresenceAt.delete(connId);\n    const pendingPresence = this.pendingPresence.get(connId);\n    if (pendingPresence) clearTimeout(pendingPresence.timer);\n    this.pendingPresence.delete(connId);\n    const members = this.rooms.get(room);\n    if (members) {\n      members.delete(connId);\n      if (members.size === 0) {\n        this.rooms.delete(room);\n        this.roomQueues.delete(room);\n      }\n    }\n    if (hadPresence) this.broadcastLeave(room, conn.id);\n  }\n\n  roomCount(): number {\n    return this.rooms.size;\n  }\n\n  handleMessage(connId: string, message: string): Promise<void> {\n    const conn = this.conns.get(connId);\n    if (!conn) return Promise.resolve();\n    if (!hasJsonDepthAtMost(message, this.maxJsonDepth)) return Promise.resolve();\n    const env = parseEnvelope(message);\n    if (!env) return Promise.resolve();\n    if (env.op.kind === 'presence') {\n      this.schedulePresence(conn, env.op.data); // off-queue, throttled independently\n      return Promise.resolve();\n    }\n    const room = conn.room;\n    // The per-room serial queue is the single total-order authority: ops apply in arrival order\n    // (arrival-order LWW — no per-element seq; see D3 / TD-12). Different rooms run independently.\n    const prev = this.roomQueues.get(room) ?? Promise.resolve();\n    const next = prev\n      .then(() => this.process(conn, env))\n      .catch(() => {\n        // swallow so one failed message never wedges the room's serial queue\n      });\n    this.roomQueues.set(room, next);\n    return next;\n  }\n\n  private async process(conn: Connection, env: SyncEnvelope): Promise<void> {\n    const op = env.op;\n    if (op.kind === 'request-snapshot') {\n      const all = (await this.backend.snapshot(conn.room)) as OwnedElement[];\n      const elements = this.canRead ? all.filter((el) => this.mayRead(conn, el.audience)) : all;\n      conn.send(\n        // `to` is a private correlation address for the requesting SyncClient. It is never\n        // broadcast; every public sender identity below comes from the server-owned connection.\n        JSON.stringify({ from: HUB_FROM, op: { kind: 'snapshot', to: env.from, elements } }),\n      );\n    } else if (op.kind === 'upsert' || op.kind === 'remove' || op.kind === 'clear') {\n      const id = op.kind === 'upsert' ? op.element.id : op.kind === 'remove' ? op.id : undefined;\n      const needCurrent = (this.authorize || this.canRead) && id !== undefined;\n      const current: OwnedElement | undefined = needCurrent\n        ? await this.backend.get(conn.room, id)\n        : undefined;\n\n      let outboundOp: SyncOp = op;\n      if (this.authorize) {\n        const allowed = await this.authorize({\n          userId: conn.userId,\n          role: conn.role,\n          room: conn.room,\n          op,\n          currentElement: current,\n        });\n        if (!allowed) {\n          await this.sendCorrection(conn, env.from, op, current);\n          return;\n        }\n        if (op.kind === 'upsert') {\n          const ownerId = current?.ownerId ?? conn.userId;\n          const stampedElement: OwnedElement = { ...op.element, ownerId };\n          outboundOp = { kind: 'upsert', element: stampedElement };\n        }\n      }\n\n      await this.backend.apply(conn.room, outboundOp);\n\n      const prevExisted = current !== undefined;\n      const prevAudience = current?.audience;\n\n      this.deliverToRoom(conn.room, conn.id, conn.id, outboundOp, prevAudience, prevExisted);\n\n      this.fanout.publish(\n        JSON.stringify({\n          o: this.instanceId,\n          room: conn.room,\n          from: conn.id,\n          op: outboundOp,\n          prev: prevAudience,\n          existed: prevExisted,\n        }),\n      );\n    }\n    // 'snapshot' from a client → ignored\n  }\n\n  private mayRead(conn: Connection, audience: string | undefined): boolean {\n    if (!this.canRead) return true;\n    return this.canRead({ userId: conn.userId, role: conn.role, room: conn.room, audience });\n  }\n\n  private safePublish(payload: string): void {\n    try {\n      this.fanout.publish(payload);\n    } catch {\n      /* a broken fanout publisher must not break the un-queued presence relay */\n    }\n  }\n\n  private relayToRoom(room: string, excludeId: string | undefined, message: string): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    for (const cid of members) {\n      if (cid === excludeId) continue;\n      const conn = this.conns.get(cid);\n      if (!conn) continue;\n      try {\n        conn.send(message);\n      } catch {\n        /* a throwing socket must not break the relay loop */\n      }\n    }\n  }\n\n  private broadcastPresence(conn: Connection, data: unknown): void {\n    this.presenceConnections.add(conn.id);\n    const message = JSON.stringify({ from: conn.id, op: { kind: 'presence', data } });\n    this.relayToRoom(conn.room, conn.id, message);\n    this.safePublish(\n      JSON.stringify({\n        o: this.instanceId,\n        room: conn.room,\n        from: conn.id,\n        op: { kind: 'presence', data },\n      }),\n    );\n  }\n\n  private schedulePresence(conn: Connection, data: unknown): void {\n    if (this.presenceThrottleMs <= 0) {\n      this.broadcastPresence(conn, data);\n      return;\n    }\n    const now = Date.now();\n    const lastSentAt = this.lastPresenceAt.get(conn.id);\n    if (lastSentAt === undefined || now - lastSentAt >= this.presenceThrottleMs) {\n      this.lastPresenceAt.set(conn.id, now);\n      this.broadcastPresence(conn, data);\n      return;\n    }\n\n    const existing = this.pendingPresence.get(conn.id);\n    if (existing) {\n      existing.data = data;\n      return;\n    }\n    const timer = setTimeout(\n      () => {\n        const pending = this.pendingPresence.get(conn.id);\n        this.pendingPresence.delete(conn.id);\n        if (!pending || !this.conns.has(conn.id)) return;\n        this.lastPresenceAt.set(conn.id, Date.now());\n        this.broadcastPresence(conn, pending.data);\n      },\n      this.presenceThrottleMs - (now - lastSentAt),\n    );\n    this.pendingPresence.set(conn.id, { data, timer });\n  }\n\n  private broadcastLeave(room: string, from: string): void {\n    const message = JSON.stringify({ from, op: { kind: 'presence-leave' } });\n    this.relayToRoom(room, undefined, message);\n    this.safePublish(\n      JSON.stringify({ o: this.instanceId, room, from, op: { kind: 'presence-leave' } }),\n    );\n  }\n\n  private deliverToRoom(\n    room: string,\n    excludeId: string | undefined,\n    from: string,\n    op: SyncOp,\n    prevAudience: string | undefined,\n    prevExisted: boolean,\n  ): void {\n    const members = this.rooms.get(room);\n    if (!members) return;\n    const send = (conn: Connection, msg: string): void => {\n      try {\n        conn.send(msg);\n      } catch {\n        /* a throwing socket must not break the delivery loop */\n      }\n    };\n    if (op.kind === 'upsert') {\n      const audience = (op.element as OwnedElement).audience;\n      const upsertMsg = JSON.stringify({ from, op });\n      const removeMsg = JSON.stringify({\n        from: HUB_FROM,\n        op: { kind: 'remove', id: op.element.id },\n      });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        if (this.mayRead(conn, audience)) send(conn, upsertMsg);\n        else if (prevExisted && this.mayRead(conn, prevAudience)) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'remove') {\n      const removeMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (!conn) continue;\n        // No read filter → forward to all (today's behavior; current/prevExisted aren't fetched without\n        // a hook). With canRead, only recipients who could see the removed element get it.\n        const wasVisible = !this.canRead || (prevExisted && this.mayRead(conn, prevAudience));\n        if (wasVisible) send(conn, removeMsg);\n      }\n    } else if (op.kind === 'clear') {\n      const clearMsg = JSON.stringify({ from, op });\n      for (const cid of members) {\n        if (cid === excludeId) continue;\n        const conn = this.conns.get(cid);\n        if (conn) send(conn, clearMsg);\n      }\n    }\n  }\n\n  private async sendCorrection(\n    conn: Connection,\n    from: string,\n    op: SyncOp,\n    current: OwnedElement | undefined,\n  ): Promise<void> {\n    let correction: SyncOp | undefined;\n    if (op.kind === 'upsert') {\n      correction = current\n        ? { kind: 'upsert', element: current }\n        : { kind: 'remove', id: op.element.id };\n    } else if (op.kind === 'remove') {\n      correction = current ? { kind: 'upsert', element: current } : undefined;\n    } else if (op.kind === 'clear') {\n      const elements = await this.backend.snapshot(conn.room);\n      correction = { kind: 'snapshot', to: from, elements };\n    }\n    if (correction) conn.send(JSON.stringify({ from: HUB_FROM, op: correction }));\n  }\n\n  private onFanout(payload: string): void {\n    // Off the serial queue on purpose: forward-only (the origin already applied to the SHARED backend),\n    // and delivery is already ordered. Re-filter per local member (canRead runs on EVERY instance).\n    let env: {\n      o?: unknown;\n      room?: unknown;\n      from?: unknown;\n      op?: unknown;\n      prev?: unknown;\n      existed?: unknown;\n    };\n    try {\n      env = JSON.parse(payload);\n    } catch {\n      return;\n    }\n    if (typeof env.o !== 'string' || typeof env.room !== 'string' || typeof env.from !== 'string')\n      return;\n    if (env.o === this.instanceId) return; // our own publish — already delivered locally\n    const op = env.op;\n    if (isPresenceOp(op)) {\n      // presence/leave: raw forward to all local members (the sender lives on the origin instance),\n      // no backend, no canRead filter.\n      this.relayToRoom(env.room, undefined, JSON.stringify({ from: env.from, op }));\n      return;\n    }\n    if (!isFanoutOp(op)) return;\n    const prevAudience = typeof env.prev === 'string' ? env.prev : undefined;\n    const prevExisted = env.existed === true;\n    this.deliverToRoom(env.room, undefined, env.from, op, prevAudience, prevExisted);\n  }\n\n  close(): void {\n    for (const pending of this.pendingPresence.values()) clearTimeout(pending.timer);\n    this.pendingPresence.clear();\n    this.fanoutUnsub();\n  }\n}\n","import { applyOpToMap, type SyncOp } from '@fieldnotes/sync';\r\nimport type { CanvasElement } from '@fieldnotes/core';\r\nimport type { HubBackend } from './hub-backend';\r\n\r\nexport class MemoryHubBackend implements HubBackend {\r\n  private rooms = new Map<string, Map<string, CanvasElement>>();\r\n\r\n  private room(id: string): Map<string, CanvasElement> {\r\n    let r = this.rooms.get(id);\r\n    if (!r) {\r\n      r = new Map();\r\n      this.rooms.set(id, r);\r\n    }\r\n    return r;\r\n  }\r\n\r\n  async snapshot(room: string): Promise<CanvasElement[]> {\r\n    return [...this.room(room).values()];\r\n  }\r\n\r\n  async get(room: string, id: string): Promise<CanvasElement | undefined> {\r\n    return this.room(room).get(id);\r\n  }\r\n\r\n  async apply(room: string, op: SyncOp): Promise<void> {\r\n    if (op.kind === 'clear') {\r\n      this.rooms.delete(room);\r\n      return;\r\n    }\r\n    applyOpToMap(this.room(room), op);\r\n  }\r\n}\r\n","export interface HubFanout {\r\n  publish(payload: string): void;\r\n  subscribe(handler: (payload: string) => void): () => void;\r\n  close?(): void;\r\n}\r\n\r\nexport class InMemoryHubFanout implements HubFanout {\r\n  private readonly handlers = new Set<(payload: string) => void>();\r\n\r\n  publish(payload: string): void {\r\n    for (const h of this.handlers) {\r\n      try {\r\n        h(payload);\r\n      } catch {\r\n        /* one throwing subscriber must not break the publish loop */\r\n      }\r\n    }\r\n  }\r\n\r\n  subscribe(handler: (payload: string) => void): () => void {\r\n    this.handlers.add(handler);\r\n    return () => this.handlers.delete(handler);\r\n  }\r\n}\r\n","export const DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;\nexport const DEFAULT_MAX_JSON_DEPTH = 32;\nexport const DEFAULT_MAX_PENDING_AUTH_MESSAGES = 100;\nexport const DEFAULT_MAX_PENDING_AUTH_BYTES = 2 * 1024 * 1024;\nexport const DEFAULT_MESSAGES_PER_SECOND = 120;\nexport const DEFAULT_MESSAGE_BURST = 240;\nexport const DEFAULT_PRESENCE_THROTTLE_MS = 50;\n\nexport function hasJsonDepthAtMost(message: string, maxDepth: number): boolean {\n  let depth = 0;\n  let inString = false;\n  let escaped = false;\n\n  for (const char of message) {\n    if (inString) {\n      if (escaped) escaped = false;\n      else if (char === '\\\\') escaped = true;\n      else if (char === '\"') inString = false;\n      continue;\n    }\n    if (char === '\"') inString = true;\n    else if (char === '{' || char === '[') {\n      depth += 1;\n      if (depth > maxDepth) return false;\n    } else if (char === '}' || char === ']') {\n      depth -= 1;\n      if (depth < 0) return false;\n    }\n  }\n\n  return depth === 0 && !inString;\n}\n\nexport class MessageRateLimiter {\n  private tokens: number;\n  private updatedAt: number;\n\n  constructor(\n    private readonly ratePerSecond: number,\n    private readonly burst: number,\n    now = Date.now(),\n  ) {\n    this.tokens = burst;\n    this.updatedAt = now;\n  }\n\n  take(now = Date.now()): boolean {\n    const elapsedSeconds = Math.max(0, now - this.updatedAt) / 1000;\n    this.tokens = Math.min(this.burst, this.tokens + elapsedSeconds * this.ratePerSecond);\n    this.updatedAt = now;\n    if (this.tokens < 1) return false;\n    this.tokens -= 1;\n    return true;\n  }\n}\n","import { WebSocketServer, type RawData } from 'ws';\nimport type { Server } from 'http';\nimport { SyncHub } from './sync-hub';\nimport type { HubBackend } from './hub-backend';\nimport type { HubFanout } from './hub-fanout';\nimport type { Authenticate } from './authenticate';\nimport type { Authorize, CanRead } from './authorize';\nimport { startHeartbeat } from './heartbeat';\nimport {\n  DEFAULT_MAX_JSON_DEPTH,\n  DEFAULT_MAX_MESSAGE_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_BYTES,\n  DEFAULT_MAX_PENDING_AUTH_MESSAGES,\n  DEFAULT_MESSAGE_BURST,\n  DEFAULT_MESSAGES_PER_SECOND,\n  DEFAULT_PRESENCE_THROTTLE_MS,\n  MessageRateLimiter,\n} from './resource-limits';\n\nexport interface CreateSyncServerOptions {\n  port?: number;\n  server?: Server;\n  backend?: HubBackend;\n  fanout?: HubFanout;\n  instanceId?: string;\n  authenticate?: Authenticate;\n  authorize?: Authorize;\n  canRead?: CanRead;\n  heartbeatIntervalMs?: number;\n  maxMessageBytes?: number;\n  maxJsonDepth?: number;\n  maxPendingAuthMessages?: number;\n  maxPendingAuthBytes?: number;\n  messagesPerSecond?: number;\n  messageBurst?: number;\n  presenceThrottleMs?: number;\n}\n\nfunction rawDataByteLength(data: RawData): number {\n  if (Array.isArray(data)) return data.reduce((total, chunk) => total + chunk.byteLength, 0);\n  return data.byteLength;\n}\n\nexport function createSyncServer(options: CreateSyncServerOptions = {}): {\n  hub: SyncHub;\n  wss: WebSocketServer;\n  close: () => Promise<void>;\n} {\n  const hub = new SyncHub({\n    backend: options.backend,\n    fanout: options.fanout,\n    instanceId: options.instanceId,\n    authorize: options.authorize,\n    canRead: options.canRead,\n    maxJsonDepth: options.maxJsonDepth ?? DEFAULT_MAX_JSON_DEPTH,\n    presenceThrottleMs: options.presenceThrottleMs ?? DEFAULT_PRESENCE_THROTTLE_MS,\n  });\n  const maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;\n  const wss = options.server\n    ? new WebSocketServer({ server: options.server, maxPayload: maxMessageBytes })\n    : new WebSocketServer({ port: options.port ?? 0, maxPayload: maxMessageBytes });\n  const heartbeat = startHeartbeat(wss, options.heartbeatIntervalMs ?? 30000);\n  let counter = 0;\n  wss.on('connection', (ws, req) => {\n    heartbeat.track(ws);\n    // Protocol/parser failures (including maxPayload) close the peer. Consuming the socket-level\n    // error keeps hostile input from becoming an uncaught process error.\n    ws.on('error', () => undefined);\n    const url = new URL(req.url ?? '', 'http://localhost');\n    const room = url.searchParams.get('room');\n    if (!room) {\n      ws.close(4400, 'room required');\n      return;\n    }\n    const connId = `c${++counter}-${Math.random().toString(36).slice(2, 8)}`;\n\n    let state: 'pending' | 'ready' | 'rejected' = 'pending';\n    let closed = false;\n    let admitted = false;\n    const queue: string[] = [];\n    let queuedBytes = 0;\n    const maxPendingAuthMessages =\n      options.maxPendingAuthMessages ?? DEFAULT_MAX_PENDING_AUTH_MESSAGES;\n    const maxPendingAuthBytes = options.maxPendingAuthBytes ?? DEFAULT_MAX_PENDING_AUTH_BYTES;\n    const limiter = new MessageRateLimiter(\n      options.messagesPerSecond ?? DEFAULT_MESSAGES_PER_SECOND,\n      options.messageBurst ?? DEFAULT_MESSAGE_BURST,\n    );\n\n    const send = (m: string) => {\n      try {\n        ws.send(m);\n      } catch {\n        /* socket closed mid-send */\n      }\n    };\n\n    ws.on('message', (data) => {\n      if (state === 'rejected') return;\n      const messageBytes = rawDataByteLength(data);\n      if (messageBytes > maxMessageBytes) {\n        state = 'rejected';\n        ws.close(1009, 'message too large');\n        return;\n      }\n      if (!limiter.take()) {\n        state = 'rejected';\n        ws.close(4408, 'rate limit exceeded');\n        return;\n      }\n      const msg = String(data);\n      if (state === 'pending') {\n        if (\n          queue.length >= maxPendingAuthMessages ||\n          queuedBytes + messageBytes > maxPendingAuthBytes\n        ) {\n          state = 'rejected';\n          ws.close(4408, 'authentication queue limit exceeded');\n          return;\n        }\n        queue.push(msg);\n        queuedBytes += messageBytes;\n        return;\n      }\n      void hub.handleMessage(connId, msg).catch((err) => console.error('[sync-server]', err));\n    });\n    ws.on('close', () => {\n      closed = true;\n      if (admitted) hub.removeConnection(connId);\n    });\n\n    Promise.resolve(options.authenticate ? options.authenticate({ req, room }) : { userId: connId })\n      .then((result) => {\n        if (closed || state === 'rejected') return;\n        if (!result) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n          return;\n        }\n        state = 'ready';\n        admitted = true;\n        hub.addConnection({ id: connId, room, userId: result.userId, role: result.role, send });\n        for (const m of queue) {\n          void hub.handleMessage(connId, m).catch((err) => console.error('[sync-server]', err));\n        }\n        queue.length = 0;\n        queuedBytes = 0;\n      })\n      .catch(() => {\n        if (!closed) {\n          state = 'rejected';\n          ws.close(4401, 'unauthorized');\n        }\n      });\n  });\n  return {\n    hub,\n    wss,\n    close: () =>\n      new Promise<void>((resolve) => {\n        heartbeat.stop();\n        hub.close();\n        wss.close(() => resolve());\n      }),\n  };\n}\n","export interface HeartbeatSocket {\r\n  ping(): void;\r\n  terminate(): void;\r\n  on(event: 'pong', listener: () => void): void;\r\n}\r\nexport interface HeartbeatServer {\r\n  clients: Set<HeartbeatSocket>;\r\n}\r\nexport interface Heartbeat {\r\n  track(ws: HeartbeatSocket): void;\r\n  stop(): void;\r\n}\r\n\r\nexport function startHeartbeat(wss: HeartbeatServer, intervalMs: number): Heartbeat {\r\n  if (intervalMs <= 0) {\r\n    return {\r\n      track: () => {\r\n        /* disabled */\r\n      },\r\n      stop: () => {\r\n        /* disabled */\r\n      },\r\n    };\r\n  }\r\n  const alive = new WeakMap<HeartbeatSocket, boolean>();\r\n  const track = (ws: HeartbeatSocket): void => {\r\n    alive.set(ws, true);\r\n    ws.on('pong', () => alive.set(ws, true));\r\n  };\r\n  const interval = setInterval(() => {\r\n    for (const ws of wss.clients) {\r\n      try {\r\n        if (alive.get(ws) === false) {\r\n          ws.terminate();\r\n          continue;\r\n        }\r\n        alive.set(ws, false);\r\n        ws.ping();\r\n      } catch {\r\n        /* socket dying mid-tick — skip it */\r\n      }\r\n    }\r\n  }, intervalMs);\r\n  return { track, stop: () => clearInterval(interval) };\r\n}\r\n"],"mappings":";AAAA,SAAS,eAAe,sBAAsD;;;ACA9E,SAAS,oBAAiC;AAInC,IAAM,mBAAN,MAA6C;AAAA,EAC1C,QAAQ,oBAAI,IAAwC;AAAA,EAEpD,KAAK,IAAwC;AACnD,QAAI,IAAI,KAAK,MAAM,IAAI,EAAE;AACzB,QAAI,CAAC,GAAG;AACN,UAAI,oBAAI,IAAI;AACZ,WAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAwC;AACrD,WAAO,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,IAAI,MAAc,IAAgD;AACtE,WAAO,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAc,IAA2B;AACnD,QAAI,GAAG,SAAS,SAAS;AACvB,WAAK,MAAM,OAAO,IAAI;AACtB;AAAA,IACF;AACA,iBAAa,KAAK,KAAK,IAAI,GAAG,EAAE;AAAA,EAClC;AACF;;;ACzBO,IAAM,oBAAN,MAA6C;AAAA,EACjC,WAAW,oBAAI,IAA+B;AAAA,EAE/D,QAAQ,SAAuB;AAC7B,eAAW,KAAK,KAAK,UAAU;AAC7B,UAAI;AACF,UAAE,OAAO;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,SAAgD;AACxD,SAAK,SAAS,IAAI,OAAO;AACzB,WAAO,MAAM,KAAK,SAAS,OAAO,OAAO;AAAA,EAC3C;AACF;;;ACvBO,IAAM,4BAA4B,OAAO;AACzC,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC;AAC1C,IAAM,iCAAiC,IAAI,OAAO;AAClD,IAAM,8BAA8B;AACpC,IAAM,wBAAwB;AAC9B,IAAM,+BAA+B;AAErC,SAAS,mBAAmB,SAAiB,UAA2B;AAC7E,MAAI,QAAQ;AACZ,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,aAAW,QAAQ,SAAS;AAC1B,QAAI,UAAU;AACZ,UAAI,QAAS,WAAU;AAAA,eACd,SAAS,KAAM,WAAU;AAAA,eACzB,SAAS,IAAK,YAAW;AAClC;AAAA,IACF;AACA,QAAI,SAAS,IAAK,YAAW;AAAA,aACpB,SAAS,OAAO,SAAS,KAAK;AACrC,eAAS;AACT,UAAI,QAAQ,SAAU,QAAO;AAAA,IAC/B,WAAW,SAAS,OAAO,SAAS,KAAK;AACvC,eAAS;AACT,UAAI,QAAQ,EAAG,QAAO;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,UAAU,KAAK,CAAC;AACzB;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAI9B,YACmB,eACA,OACjB,MAAM,KAAK,IAAI,GACf;AAHiB;AACA;AAGjB,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AAAA,EAVQ;AAAA,EACA;AAAA,EAWR,KAAK,MAAM,KAAK,IAAI,GAAY;AAC9B,UAAM,iBAAiB,KAAK,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI;AAC3D,SAAK,SAAS,KAAK,IAAI,KAAK,OAAO,KAAK,SAAS,iBAAiB,KAAK,aAAa;AACpF,SAAK,YAAY;AACjB,QAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,SAAK,UAAU;AACf,WAAO;AAAA,EACT;AACF;;;AHzBA,IAAM,WAAW;AAEjB,SAAS,qBAA6B;AACpC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe;AAChE,WAAO,OAAO,WAAW;AAC3B,SAAO,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjD;AAEA,SAAS,WAAW,IAA6E;AAC/F,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,EAAE,SAAS,SAAU,QAAO,eAAe,EAAE,OAAO;AACxD,MAAI,EAAE,SAAS,SAAU,QAAO,OAAO,EAAE,OAAO;AAChD,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,aACP,IACwE;AACxE,MAAI,OAAO,OAAO,YAAY,OAAO,KAAM,QAAO;AAClD,QAAM,IAAK,GAA0B;AACrC,SAAO,MAAM,cAAc,MAAM;AACnC;AAEO,IAAM,UAAN,MAAc;AAAA,EACF;AAAA,EACA,QAAQ,oBAAI,IAAwB;AAAA,EACpC,QAAQ,oBAAI,IAAyB;AAAA;AAAA,EACrC,aAAa,oBAAI,IAA2B;AAAA;AAAA,EAC5C,sBAAsB,oBAAI,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB,oBAAI,IAAoB;AAAA,EACzC,kBAAkB,oBAAI,IAGrC;AAAA,EAEF,YAAY,UAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,QAAQ,WAAW,IAAI,iBAAiB;AACvD,SAAK,aAAa,QAAQ,cAAc,mBAAmB;AAC3D,SAAK,SAAS,QAAQ,UAAU,IAAI,kBAAkB;AACtD,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,qBAAqB,QAAQ,sBAAsB;AACxD,SAAK,cAAc,KAAK,OAAO,UAAU,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAAA,EAC9E;AAAA,EAEA,cAAc,MAAwB;AACpC,SAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAC5B,QAAI,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,oBAAI,IAAI;AACd,WAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AAAA,IAC/B;AACA,QAAI,IAAI,KAAK,EAAE;AAAA,EACjB;AAAA,EAEA,iBAAiB,QAAsB;AACrC,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM;AACX,SAAK,MAAM,OAAO,MAAM;AACxB,UAAM,OAAO,KAAK;AAClB,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM;AAC1D,SAAK,eAAe,OAAO,MAAM;AACjC,UAAM,kBAAkB,KAAK,gBAAgB,IAAI,MAAM;AACvD,QAAI,gBAAiB,cAAa,gBAAgB,KAAK;AACvD,SAAK,gBAAgB,OAAO,MAAM;AAClC,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM;AACrB,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,MAAM,OAAO,IAAI;AACtB,aAAK,WAAW,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,YAAa,MAAK,eAAe,MAAM,KAAK,EAAE;AAAA,EACpD;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,cAAc,QAAgB,SAAgC;AAC5D,UAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,QAAI,CAAC,KAAM,QAAO,QAAQ,QAAQ;AAClC,QAAI,CAAC,mBAAmB,SAAS,KAAK,YAAY,EAAG,QAAO,QAAQ,QAAQ;AAC5E,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,CAAC,IAAK,QAAO,QAAQ,QAAQ;AACjC,QAAI,IAAI,GAAG,SAAS,YAAY;AAC9B,WAAK,iBAAiB,MAAM,IAAI,GAAG,IAAI;AACvC,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,UAAM,OAAO,KAAK;AAGlB,UAAM,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC1D,UAAM,OAAO,KACV,KAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,CAAC,EAClC,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,SAAK,WAAW,IAAI,MAAM,IAAI;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAkB,KAAkC;AACxE,UAAM,KAAK,IAAI;AACf,QAAI,GAAG,SAAS,oBAAoB;AAClC,YAAM,MAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AAClD,YAAM,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,MAAM,GAAG,QAAQ,CAAC,IAAI;AACtF,WAAK;AAAA;AAAA;AAAA,QAGH,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,EAAE,MAAM,YAAY,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF;AAAA,IACF,WAAW,GAAG,SAAS,YAAY,GAAG,SAAS,YAAY,GAAG,SAAS,SAAS;AAC9E,YAAM,KAAK,GAAG,SAAS,WAAW,GAAG,QAAQ,KAAK,GAAG,SAAS,WAAW,GAAG,KAAK;AACjF,YAAM,eAAe,KAAK,aAAa,KAAK,YAAY,OAAO;AAC/D,YAAM,UAAoC,cACtC,MAAM,KAAK,QAAQ,IAAI,KAAK,MAAM,EAAE,IACpC;AAEJ,UAAI,aAAqB;AACzB,UAAI,KAAK,WAAW;AAClB,cAAM,UAAU,MAAM,KAAK,UAAU;AAAA,UACnC,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,gBAAM,KAAK,eAAe,MAAM,IAAI,MAAM,IAAI,OAAO;AACrD;AAAA,QACF;AACA,YAAI,GAAG,SAAS,UAAU;AACxB,gBAAM,UAAU,SAAS,WAAW,KAAK;AACzC,gBAAM,iBAA+B,EAAE,GAAG,GAAG,SAAS,QAAQ;AAC9D,uBAAa,EAAE,MAAM,UAAU,SAAS,eAAe;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,KAAK,QAAQ,MAAM,KAAK,MAAM,UAAU;AAE9C,YAAM,cAAc,YAAY;AAChC,YAAM,eAAe,SAAS;AAE9B,WAAK,cAAc,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,YAAY,cAAc,WAAW;AAErF,WAAK,OAAO;AAAA,QACV,KAAK,UAAU;AAAA,UACb,GAAG,KAAK;AAAA,UACR,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAEF;AAAA,EAEQ,QAAQ,MAAkB,UAAuC;AACvE,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,WAAO,KAAK,QAAQ,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,CAAC;AAAA,EACzF;AAAA,EAEQ,YAAY,SAAuB;AACzC,QAAI;AACF,WAAK,OAAO,QAAQ,OAAO;AAAA,IAC7B,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,YAAY,MAAc,WAA+B,SAAuB;AACtF,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,eAAW,OAAO,SAAS;AACzB,UAAI,QAAQ,UAAW;AACvB,YAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,UAAI,CAAC,KAAM;AACX,UAAI;AACF,aAAK,KAAK,OAAO;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAkB,MAAqB;AAC/D,SAAK,oBAAoB,IAAI,KAAK,EAAE;AACpC,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,MAAM,YAAY,KAAK,EAAE,CAAC;AAChF,SAAK,YAAY,KAAK,MAAM,KAAK,IAAI,OAAO;AAC5C,SAAK;AAAA,MACH,KAAK,UAAU;AAAA,QACb,GAAG,KAAK;AAAA,QACR,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,IAAI,EAAE,MAAM,YAAY,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,iBAAiB,MAAkB,MAAqB;AAC9D,QAAI,KAAK,sBAAsB,GAAG;AAChC,WAAK,kBAAkB,MAAM,IAAI;AACjC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,aAAa,KAAK,eAAe,IAAI,KAAK,EAAE;AAClD,QAAI,eAAe,UAAa,MAAM,cAAc,KAAK,oBAAoB;AAC3E,WAAK,eAAe,IAAI,KAAK,IAAI,GAAG;AACpC,WAAK,kBAAkB,MAAM,IAAI;AACjC;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,gBAAgB,IAAI,KAAK,EAAE;AACjD,QAAI,UAAU;AACZ,eAAS,OAAO;AAChB;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AACJ,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK,EAAE;AAChD,aAAK,gBAAgB,OAAO,KAAK,EAAE;AACnC,YAAI,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,EAAG;AAC1C,aAAK,eAAe,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC;AAC3C,aAAK,kBAAkB,MAAM,QAAQ,IAAI;AAAA,MAC3C;AAAA,MACA,KAAK,sBAAsB,MAAM;AAAA,IACnC;AACA,SAAK,gBAAgB,IAAI,KAAK,IAAI,EAAE,MAAM,MAAM,CAAC;AAAA,EACnD;AAAA,EAEQ,eAAe,MAAc,MAAoB;AACvD,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AACvE,SAAK,YAAY,MAAM,QAAW,OAAO;AACzC,SAAK;AAAA,MACH,KAAK,UAAU,EAAE,GAAG,KAAK,YAAY,MAAM,MAAM,IAAI,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EAEQ,cACN,MACA,WACA,MACA,IACA,cACA,aACM;AACN,UAAM,UAAU,KAAK,MAAM,IAAI,IAAI;AACnC,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,CAAC,MAAkB,QAAsB;AACpD,UAAI;AACF,aAAK,KAAK,GAAG;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,GAAG,SAAS,UAAU;AACxB,YAAM,WAAY,GAAG,QAAyB;AAC9C,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,YAAM,YAAY,KAAK,UAAU;AAAA,QAC/B,MAAM;AAAA,QACN,IAAI,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,MAC1C,CAAC;AACD,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AACX,YAAI,KAAK,QAAQ,MAAM,QAAQ,EAAG,MAAK,MAAM,SAAS;AAAA,iBAC7C,eAAe,KAAK,QAAQ,MAAM,YAAY,EAAG,MAAK,MAAM,SAAS;AAAA,MAChF;AAAA,IACF,WAAW,GAAG,SAAS,UAAU;AAC/B,YAAM,YAAY,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC7C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,CAAC,KAAM;AAGX,cAAM,aAAa,CAAC,KAAK,WAAY,eAAe,KAAK,QAAQ,MAAM,YAAY;AACnF,YAAI,WAAY,MAAK,MAAM,SAAS;AAAA,MACtC;AAAA,IACF,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,KAAK,UAAU,EAAE,MAAM,GAAG,CAAC;AAC5C,iBAAW,OAAO,SAAS;AACzB,YAAI,QAAQ,UAAW;AACvB,cAAM,OAAO,KAAK,MAAM,IAAI,GAAG;AAC/B,YAAI,KAAM,MAAK,MAAM,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,MACA,MACA,IACA,SACe;AACf,QAAI;AACJ,QAAI,GAAG,SAAS,UAAU;AACxB,mBAAa,UACT,EAAE,MAAM,UAAU,SAAS,QAAQ,IACnC,EAAE,MAAM,UAAU,IAAI,GAAG,QAAQ,GAAG;AAAA,IAC1C,WAAW,GAAG,SAAS,UAAU;AAC/B,mBAAa,UAAU,EAAE,MAAM,UAAU,SAAS,QAAQ,IAAI;AAAA,IAChE,WAAW,GAAG,SAAS,SAAS;AAC9B,YAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,KAAK,IAAI;AACtD,mBAAa,EAAE,MAAM,YAAY,IAAI,MAAM,SAAS;AAAA,IACtD;AACA,QAAI,WAAY,MAAK,KAAK,KAAK,UAAU,EAAE,MAAM,UAAU,IAAI,WAAW,CAAC,CAAC;AAAA,EAC9E;AAAA,EAEQ,SAAS,SAAuB;AAGtC,QAAI;AAQJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS;AACnF;AACF,QAAI,IAAI,MAAM,KAAK,WAAY;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,aAAa,EAAE,GAAG;AAGpB,WAAK,YAAY,IAAI,MAAM,QAAW,KAAK,UAAU,EAAE,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;AAC5E;AAAA,IACF;AACA,QAAI,CAAC,WAAW,EAAE,EAAG;AACrB,UAAM,eAAe,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAC/D,UAAM,cAAc,IAAI,YAAY;AACpC,SAAK,cAAc,IAAI,MAAM,QAAW,IAAI,MAAM,IAAI,cAAc,WAAW;AAAA,EACjF;AAAA,EAEA,QAAc;AACZ,eAAW,WAAW,KAAK,gBAAgB,OAAO,EAAG,cAAa,QAAQ,KAAK;AAC/E,SAAK,gBAAgB,MAAM;AAC3B,SAAK,YAAY;AAAA,EACnB;AACF;;;AIrYA,SAAS,uBAAqC;;;ACavC,SAAS,eAAe,KAAsB,YAA+B;AAClF,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MAEb;AAAA,MACA,MAAM,MAAM;AAAA,MAEZ;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,QAAkC;AACpD,QAAM,QAAQ,CAAC,OAA8B;AAC3C,UAAM,IAAI,IAAI,IAAI;AAClB,OAAG,GAAG,QAAQ,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC;AAAA,EACzC;AACA,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,MAAM,IAAI,SAAS;AAC5B,UAAI;AACF,YAAI,MAAM,IAAI,EAAE,MAAM,OAAO;AAC3B,aAAG,UAAU;AACb;AAAA,QACF;AACA,cAAM,IAAI,IAAI,KAAK;AACnB,WAAG,KAAK;AAAA,MACV,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,GAAG,UAAU;AACb,SAAO,EAAE,OAAO,MAAM,MAAM,cAAc,QAAQ,EAAE;AACtD;;;ADNA,SAAS,kBAAkB,MAAuB;AAChD,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,OAAO,CAAC,OAAO,UAAU,QAAQ,MAAM,YAAY,CAAC;AACzF,SAAO,KAAK;AACd;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAInE;AACA,QAAM,MAAM,IAAI,QAAQ;AAAA,IACtB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,IACjB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,oBAAoB,QAAQ,sBAAsB;AAAA,EACpD,CAAC;AACD,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,MAAM,QAAQ,SAChB,IAAI,gBAAgB,EAAE,QAAQ,QAAQ,QAAQ,YAAY,gBAAgB,CAAC,IAC3E,IAAI,gBAAgB,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,gBAAgB,CAAC;AAChF,QAAM,YAAY,eAAe,KAAK,QAAQ,uBAAuB,GAAK;AAC1E,MAAI,UAAU;AACd,MAAI,GAAG,cAAc,CAAC,IAAI,QAAQ;AAChC,cAAU,MAAM,EAAE;AAGlB,OAAG,GAAG,SAAS,MAAM,MAAS;AAC9B,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,kBAAkB;AACrD,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,CAAC,MAAM;AACT,SAAG,MAAM,MAAM,eAAe;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,IAAI,EAAE,OAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAEtE,QAAI,QAA0C;AAC9C,QAAI,SAAS;AACb,QAAI,WAAW;AACf,UAAM,QAAkB,CAAC;AACzB,QAAI,cAAc;AAClB,UAAM,yBACJ,QAAQ,0BAA0B;AACpC,UAAM,sBAAsB,QAAQ,uBAAuB;AAC3D,UAAM,UAAU,IAAI;AAAA,MAClB,QAAQ,qBAAqB;AAAA,MAC7B,QAAQ,gBAAgB;AAAA,IAC1B;AAEA,UAAM,OAAO,CAAC,MAAc;AAC1B,UAAI;AACF,WAAG,KAAK,CAAC;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,OAAG,GAAG,WAAW,CAAC,SAAS;AACzB,UAAI,UAAU,WAAY;AAC1B,YAAM,eAAe,kBAAkB,IAAI;AAC3C,UAAI,eAAe,iBAAiB;AAClC,gBAAQ;AACR,WAAG,MAAM,MAAM,mBAAmB;AAClC;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,gBAAQ;AACR,WAAG,MAAM,MAAM,qBAAqB;AACpC;AAAA,MACF;AACA,YAAM,MAAM,OAAO,IAAI;AACvB,UAAI,UAAU,WAAW;AACvB,YACE,MAAM,UAAU,0BAChB,cAAc,eAAe,qBAC7B;AACA,kBAAQ;AACR,aAAG,MAAM,MAAM,qCAAqC;AACpD;AAAA,QACF;AACA,cAAM,KAAK,GAAG;AACd,uBAAe;AACf;AAAA,MACF;AACA,WAAK,IAAI,cAAc,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,IACxF,CAAC;AACD,OAAG,GAAG,SAAS,MAAM;AACnB,eAAS;AACT,UAAI,SAAU,KAAI,iBAAiB,MAAM;AAAA,IAC3C,CAAC;AAED,YAAQ,QAAQ,QAAQ,eAAe,QAAQ,aAAa,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,CAAC,EAC5F,KAAK,CAAC,WAAW;AAChB,UAAI,UAAU,UAAU,WAAY;AACpC,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,MACF;AACA,cAAQ;AACR,iBAAW;AACX,UAAI,cAAc,EAAE,IAAI,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,KAAK,CAAC;AACtF,iBAAW,KAAK,OAAO;AACrB,aAAK,IAAI,cAAc,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,QAAQ,MAAM,iBAAiB,GAAG,CAAC;AAAA,MACtF;AACA,YAAM,SAAS;AACf,oBAAc;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,QAAQ;AACX,gBAAQ;AACR,WAAG,MAAM,MAAM,cAAc;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,gBAAU,KAAK;AACf,UAAI,MAAM;AACV,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fieldnotes/sync-server",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "description": "Authoritative WebSocket relay server for Field Notes real-time sync",
   "type": "module",
   "sideEffects": false,