@ifc-lite/collab-server 0.2.0

package/dist/bin.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/** CLI entry point: `ifc-lite-collab-server`. */
+import { FilePersistence, startCollabServer } from './server.js';
+const port = Number(process.env.COLLAB_PORT ?? 1234);
+const host = process.env.COLLAB_HOST ?? '0.0.0.0';
+const dataDir = process.env.COLLAB_DATA_DIR ?? './.collab-data';
+const maxRooms = Number(process.env.COLLAB_MAX_ROOMS ?? 1024);
+async function main() {
+    const handle = await startCollabServer({
+        port,
+        host,
+        persistence: new FilePersistence({ dataDir }),
+        maxRooms,
+    });
+    // eslint-disable-next-line no-console
+    console.log(`[collab-server] listening at ${handle.url} (data: ${dataDir})`);
+    const shutdown = async () => {
+        // eslint-disable-next-line no-console
+        console.log('[collab-server] shutting down…');
+        await handle.stop();
+        process.exit(0);
+    };
+    process.once('SIGINT', shutdown);
+    process.once('SIGTERM', shutdown);
+}
+main().catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error('[collab-server] fatal:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA;;+DAE+D;AAE/D,iDAAiD;AAEjD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC;AAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,CAAC;AAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC;AAE9D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,IAAI;QACJ,IAAI;QACJ,WAAW,EAAE,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,QAAQ;KACT,CAAC,CAAC;IACH,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,GAAG,WAAW,OAAO,GAAG,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/blob-route.d.ts

@@ -0,0 +1,58 @@
+/**
+ * HTTP blob route (spec §11.1 + §11.3).
+ *
+ * Mounts `/blobs/<hash>` (PUT/GET/HEAD/DELETE) and `/blobs` (GET list)
+ * on the supplied http server. Storage is pluggable so deployments can
+ * back this with S3, GCS, local disk, or in-memory for tests.
+ *
+ * Authentication is intentionally NOT included here — the existing
+ * `AuthenticateFn` only sees websocket upgrades. Production deployments
+ * should layer their own JWT validation in front of this route (e.g. a
+ * reverse proxy). For dev/tests we accept anonymous traffic.
+ */
+import * as http from 'node:http';
+export interface ServerBlobMeta {
+    hash: string;
+    byteLength: number;
+    contentType?: string;
+    uploadedAt: string;
+}
+export interface ServerBlobStorage {
+    put(hash: string, bytes: Uint8Array, contentType?: string): Promise<ServerBlobMeta>;
+    get(hash: string): Promise<{
+        bytes: Uint8Array;
+        meta: ServerBlobMeta;
+    } | null>;
+    has(hash: string): Promise<boolean>;
+    delete(hash: string): Promise<boolean>;
+    list(): Promise<string[]>;
+}
+/** In-memory storage. Default for tests + dev. */
+export declare class InMemoryBlobStorage implements ServerBlobStorage {
+    private readonly blobs;
+    put(hash: string, bytes: Uint8Array, contentType?: string): Promise<ServerBlobMeta>;
+    get(hash: string): Promise<{
+        bytes: Uint8Array<ArrayBuffer>;
+        meta: ServerBlobMeta;
+    } | null>;
+    has(hash: string): Promise<boolean>;
+    delete(hash: string): Promise<boolean>;
+    list(): Promise<string[]>;
+}
+export interface BlobRouteOptions {
+    storage: ServerBlobStorage;
+    /** Reject PUTs over this size (default 100 MB). */
+    maxBytes?: number;
+    /**
+     * If set, server recomputes a sha256 of the body and 409s when it
+     * doesn't match the URL hash. Defaults to `false` because clients use
+     * `fnv128` which is not sha256-compatible.
+     */
+    verifySha256?: boolean;
+}
+/**
+ * Route handler for `/blobs/...` requests. Returns `true` if the
+ * request was handled (the caller should not write its own response).
+ */
+export declare function handleBlobRequest(req: http.IncomingMessage, res: http.ServerResponse, opts: BlobRouteOptions): Promise<boolean> | boolean;
+//# sourceMappingURL=blob-route.d.ts.map

package/dist/blob-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-route.d.ts","sourceRoot":"","sources":["../src/blob-route.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC/E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC3B;AAED,kDAAkD;AAClD,qBAAa,mBAAoB,YAAW,iBAAiB;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkE;IAElF,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAUnF,GAAG,CAAC,IAAI,EAAE,MAAM;;;;IAIhB,GAAG,CAAC,IAAI,EAAE,MAAM;IAGhB,MAAM,CAAC,IAAI,EAAE,MAAM;IAGnB,IAAI;CAGX;AAKD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAsC5B"}

package/dist/blob-route.js

@@ -0,0 +1,132 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+import * as crypto from 'node:crypto';
+/** In-memory storage. Default for tests + dev. */
+export class InMemoryBlobStorage {
+    blobs = new Map();
+    async put(hash, bytes, contentType) {
+        const meta = {
+            hash,
+            byteLength: bytes.byteLength,
+            contentType,
+            uploadedAt: new Date().toISOString(),
+        };
+        this.blobs.set(hash, { bytes: new Uint8Array(bytes), meta });
+        return meta;
+    }
+    async get(hash) {
+        const v = this.blobs.get(hash);
+        return v ? { bytes: new Uint8Array(v.bytes), meta: v.meta } : null;
+    }
+    async has(hash) {
+        return this.blobs.has(hash);
+    }
+    async delete(hash) {
+        return this.blobs.delete(hash);
+    }
+    async list() {
+        return Array.from(this.blobs.keys());
+    }
+}
+/** Match exactly 32 lowercase hex chars (the client's `fnv128` output). */
+const HASH_REGEX = /^[a-f0-9]{32}$/;
+/**
+ * Route handler for `/blobs/...` requests. Returns `true` if the
+ * request was handled (the caller should not write its own response).
+ */
+export function handleBlobRequest(req, res, opts) {
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    if (!url.pathname.startsWith('/blobs'))
+        return false;
+    if (url.pathname === '/blobs' || url.pathname === '/blobs/') {
+        if (req.method === 'GET') {
+            return opts.storage.list().then((hashes) => {
+                res.writeHead(200, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ hashes }));
+                return true;
+            });
+        }
+        res.writeHead(405);
+        res.end();
+        return true;
+    }
+    const hash = url.pathname.slice('/blobs/'.length);
+    if (!HASH_REGEX.test(hash)) {
+        res.writeHead(400, { 'content-type': 'application/json' });
+        res.end(JSON.stringify({ error: 'invalid-hash' }));
+        return true;
+    }
+    switch (req.method) {
+        case 'PUT':
+            return handlePut(req, res, hash, opts);
+        case 'GET':
+            return handleGet(res, hash, opts);
+        case 'HEAD':
+            return handleHead(res, hash, opts);
+        case 'DELETE':
+            return handleDelete(res, hash, opts);
+        default:
+            res.writeHead(405);
+            res.end();
+            return true;
+    }
+}
+async function handlePut(req, res, hash, opts) {
+    const max = opts.maxBytes ?? 100 * 1024 * 1024;
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of req) {
+        const buf = chunk;
+        total += buf.byteLength;
+        if (total > max) {
+            res.writeHead(413, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: 'payload-too-large', max }));
+            req.destroy();
+            return true;
+        }
+        chunks.push(buf);
+    }
+    const body = Buffer.concat(chunks);
+    if (opts.verifySha256) {
+        const sha = crypto.createHash('sha256').update(body).digest('hex');
+        if (sha !== hash) {
+            res.writeHead(409, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: 'hash-mismatch', expected: hash, computed: sha }));
+            return true;
+        }
+    }
+    const contentType = req.headers['content-type'] ?? undefined;
+    const meta = await opts.storage.put(hash, body, contentType);
+    res.writeHead(201, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(meta));
+    return true;
+}
+async function handleGet(res, hash, opts) {
+    const v = await opts.storage.get(hash);
+    if (!v) {
+        res.writeHead(404);
+        res.end();
+        return true;
+    }
+    res.writeHead(200, {
+        'content-type': v.meta.contentType ?? 'application/octet-stream',
+        'content-length': String(v.meta.byteLength),
+        'x-blob-hash': v.meta.hash,
+    });
+    res.end(Buffer.from(v.bytes));
+    return true;
+}
+async function handleHead(res, hash, opts) {
+    const exists = await opts.storage.has(hash);
+    res.writeHead(exists ? 200 : 404);
+    res.end();
+    return true;
+}
+async function handleDelete(res, hash, opts) {
+    const ok = await opts.storage.delete(hash);
+    res.writeHead(ok ? 204 : 404);
+    res.end();
+    return true;
+}
+//# sourceMappingURL=blob-route.js.map

package/dist/blob-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-route.js","sourceRoot":"","sources":["../src/blob-route.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAgB/D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAiBtC,kDAAkD;AAClD,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAAuD,CAAC;IAExF,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAiB,EAAE,WAAoB;QAC7D,MAAM,IAAI,GAAmB;YAC3B,IAAI;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW;YACX,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,IAAI;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAcpC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyB,EACzB,GAAwB,EACxB,IAAsB;IAEtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBACpC,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC;YACE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAyB,EACzB,GAAwB,EACxB,IAAY,EACZ,IAAsB;IAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAe,CAAC;QAC5B,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;QACxB,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7D,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAwB,IAAI,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAwB,EACxB,IAAY,EACZ,IAAsB;IAEtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,0BAA0B;QAChE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3C,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;KAC3B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAwB,EACxB,IAAY,EACZ,IAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,EAAE,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAwB,EACxB,IAAY,EACZ,IAAsB;IAEtB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+export { startCollabServer, FilePersistence, MemoryPersistence, type StartCollabServerOptions, type CollabServerHandle, } from './server.js';
+export { type Persistence, type FilePersistenceOptions, } from './persistence.js';
+export { S3Persistence, type S3PersistenceOptions, type S3LikeClient, type S3Commands, } from './persistence-s3.js';
+export { RedisPersistence, type RedisPersistenceOptions, type RedisLikeClient, } from './persistence-redis.js';
+export { type AuthenticateFn, type Principal, type Role, allowAnonymousEditor, denyAll, canWrite, } from './auth.js';
+export { Room, RoomManager, type RoomOptions, type RoomManagerOptions, type PeerConnection, } from './room-manager.js';
+export { MemoryAuditSink, JsonlFileAuditSink, noopAuditSink, shortHash, type AuditEntry, type AuditOpType, type AuditSink, type JsonlFileAuditSinkOptions, } from './audit-log.js';
+export { DEFAULT_RETENTION, applyRetention, planRetention, type RetentionDecision, type RetentionPolicy, } from './retention.js';
+export { SnapshotWorker, type SnapshotWorkerOptions, type SnapshotResult, } from './snapshot-worker.js';
+export { MetricsRegistry, defaultMetrics, type LabelValues, } from './metrics.js';
+export { computeHmac, createReplayProtector, decodeSignedFrame, encodeSignedFrame, verifyWithReplayProtector, type ReplayDecision, type ReplayProtector, type ReplayProtectorOptions, type UpdateEnvelope, } from './replay-protect.js';
+export { type VerifyDecision, type VerifyMessageFn, } from './room-manager.js';
+export { applySecurityHeaders, createSecureHttpServer, secureHttpHandler, type SecureHttpServerOptions, } from './secure-server.js';
+export { startSecureCollabServer, type StartSecureCollabServerOptions, } from './secure-bundle.js';
+export { createPathLockRegistry, harvestUpdatePaths, verifyAgainstPathLocks, type PathLock, type PathLockRegistry, } from './path-locks.js';
+export { createRateLimiter, type RateLimitOptions, type RateLimiter, } from './rate-limit.js';
+export { InMemoryBlobStorage, handleBlobRequest, type ServerBlobStorage, type ServerBlobMeta, type BlobRouteOptions, } from './blob-route.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,IAAI,EACT,oBAAoB,EACpB,OAAO,EACP,QAAQ,GACT,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,IAAI,EACJ,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,cAAc,EACd,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+export { startCollabServer, FilePersistence, MemoryPersistence, } from './server.js';
+export { S3Persistence, } from './persistence-s3.js';
+export { RedisPersistence, } from './persistence-redis.js';
+export { allowAnonymousEditor, denyAll, canWrite, } from './auth.js';
+export { Room, RoomManager, } from './room-manager.js';
+export { MemoryAuditSink, JsonlFileAuditSink, noopAuditSink, shortHash, } from './audit-log.js';
+export { DEFAULT_RETENTION, applyRetention, planRetention, } from './retention.js';
+export { SnapshotWorker, } from './snapshot-worker.js';
+export { MetricsRegistry, defaultMetrics, } from './metrics.js';
+export { computeHmac, createReplayProtector, decodeSignedFrame, encodeSignedFrame, verifyWithReplayProtector, } from './replay-protect.js';
+export { applySecurityHeaders, createSecureHttpServer, secureHttpHandler, } from './secure-server.js';
+export { startSecureCollabServer, } from './secure-bundle.js';
+export { createPathLockRegistry, harvestUpdatePaths, verifyAgainstPathLocks, } from './path-locks.js';
+export { createRateLimiter, } from './rate-limit.js';
+export { InMemoryBlobStorage, handleBlobRequest, } from './blob-route.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAGlB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,aAAa,GAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAIL,oBAAoB,EACpB,OAAO,EACP,QAAQ,GACT,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,IAAI,EACJ,WAAW,GAIZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,SAAS,GAKV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,GAGd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,GAK1B,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,GAGvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAIlB,MAAM,iBAAiB,CAAC"}

package/dist/metrics.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Lightweight metrics registry (spec §15 §14.4).
+ *
+ * Prometheus-text-format compatible — apps can scrape `/metrics` and
+ * point Grafana / Datadog / etc. at it. Metric types are intentionally
+ * minimal:
+ *   - counters (monotonic)
+ *   - gauges    (set/inc/dec to any value)
+ *   - histograms via simple sum + count (we don't ship buckets — those
+ *     come in v0.5+)
+ *
+ * Built dependency-free so we can swap for prom-client later without an
+ * API churn.
+ */
+export type LabelValues = Record<string, string>;
+export declare class MetricsRegistry {
+    private readonly metrics;
+    private ensure;
+    /** Register or fetch a counter. Counters are monotonic (only `inc`). */
+    counter(name: string, help: string): {
+        inc: (n?: number, labels?: LabelValues) => void;
+        get: (labels?: LabelValues) => number;
+    };
+    /** Register or fetch a gauge. Gauges can move in any direction. */
+    gauge(name: string, help: string): {
+        set: (value: number, labels?: LabelValues) => void;
+        inc: (n?: number, labels?: LabelValues) => void;
+        dec: (n?: number, labels?: LabelValues) => void;
+        get: (labels?: LabelValues) => number;
+    };
+    /**
+     * Tiny histogram: tracks `sum` and `count`. Apps can compute average
+     * client-side. Real bucketed histograms are also available via
+     * `bucketedHistogram(name, buckets, help)`.
+     */
+    histogram(name: string, help: string): {
+        observe: (value: number, labels?: LabelValues) => void;
+        mean: (labels?: LabelValues) => number;
+    };
+    /**
+     * Prometheus-style bucketed histogram. `buckets` are upper bounds
+     * (e.g. `[5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000]`). Each
+     * observation increments every bucket whose upper bound it doesn't
+     * exceed, plus `sum` and `count`. Render output uses the
+     * conventional `<name>_bucket{le="<bound>"}` labels.
+     */
+    bucketedHistogram(name: string, buckets: readonly number[], help: string): {
+        observe: (value: number, labels?: LabelValues) => void;
+        buckets: number[];
+    };
+    /** Render the full registry as Prometheus text format. */
+    render(): string;
+}
+/** Default registry shared by the server. Apps can inject their own. */
+export declare const defaultMetrics: MetricsRegistry;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAoBjD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,OAAO,CAAC,MAAM;IAuBd,wEAAwE;IACxE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;mCAGT,WAAW;uBAYlB,WAAW;;IAI7B,mEAAmE;IACnE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;qBAGf,MAAM,WAAU,WAAW;mCAGnB,WAAW;mCAIX,WAAW;uBAIlB,WAAW;;IAI7B;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;yBAMf,MAAM,WAAU,WAAW;wBAK7B,WAAW;;IAS9B;;;;;;OAMG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM;yBAsBnD,MAAM,WAAU,WAAW;;;IAkBhD,0DAA0D;IAC1D,MAAM,IAAI,MAAM;CAsBjB;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,iBAAwB,CAAC"}

package/dist/metrics.js

@@ -0,0 +1,161 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+function labelKey(labels) {
+    const keys = Object.keys(labels).sort();
+    if (keys.length === 0)
+        return '';
+    return keys.map((k) => `${k}="${escapeLabel(labels[k])}"`).join(',');
+}
+function escapeLabel(value) {
+    return value.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/"/g, '\\"');
+}
+export class MetricsRegistry {
+    metrics = new Map();
+    ensure(name, type, help) {
+        let m = this.metrics.get(name);
+        if (!m) {
+            m = { type, help, values: new Map() };
+            this.metrics.set(name, m);
+            return m;
+        }
+        // Silently reusing a name with a different type/help corrupts the
+        // metric family (mismatched HELP/TYPE lines on render, ambiguous
+        // semantics for consumers). Surface re-registration loudly.
+        if (m.type !== type) {
+            throw new Error(`@ifc-lite/collab-server: metric "${name}" already registered as ${m.type}, cannot redefine as ${type}`);
+        }
+        if (m.help !== help) {
+            throw new Error(`@ifc-lite/collab-server: metric "${name}" already registered with different help text`);
+        }
+        return m;
+    }
+    /** Register or fetch a counter. Counters are monotonic (only `inc`). */
+    counter(name, help) {
+        const m = this.ensure(name, 'counter', help);
+        return {
+            inc: (n = 1, labels = {}) => {
+                // Counters are monotonic by definition. Negative/NaN/Infinity
+                // increments silently corrupt the series and downstream
+                // rate(...) calculations.
+                if (!Number.isFinite(n) || n < 0) {
+                    throw new Error(`@ifc-lite/collab-server: counter "${name}" increment must be a finite non-negative number (got ${n})`);
+                }
+                const key = labelKey(labels);
+                m.values.set(key, (m.values.get(key) ?? 0) + n);
+            },
+            get: (labels = {}) => m.values.get(labelKey(labels)) ?? 0,
+        };
+    }
+    /** Register or fetch a gauge. Gauges can move in any direction. */
+    gauge(name, help) {
+        const m = this.ensure(name, 'gauge', help);
+        return {
+            set: (value, labels = {}) => {
+                m.values.set(labelKey(labels), value);
+            },
+            inc: (n = 1, labels = {}) => {
+                const key = labelKey(labels);
+                m.values.set(key, (m.values.get(key) ?? 0) + n);
+            },
+            dec: (n = 1, labels = {}) => {
+                const key = labelKey(labels);
+                m.values.set(key, (m.values.get(key) ?? 0) - n);
+            },
+            get: (labels = {}) => m.values.get(labelKey(labels)) ?? 0,
+        };
+    }
+    /**
+     * Tiny histogram: tracks `sum` and `count`. Apps can compute average
+     * client-side. Real bucketed histograms are also available via
+     * `bucketedHistogram(name, buckets, help)`.
+     */
+    histogram(name, help) {
+        const sumName = `${name}_sum`;
+        const countName = `${name}_count`;
+        const sum = this.ensure(sumName, 'histogram-sum', help);
+        const count = this.ensure(countName, 'histogram-count', help);
+        return {
+            observe: (value, labels = {}) => {
+                const key = labelKey(labels);
+                sum.values.set(key, (sum.values.get(key) ?? 0) + value);
+                count.values.set(key, (count.values.get(key) ?? 0) + 1);
+            },
+            mean: (labels = {}) => {
+                const key = labelKey(labels);
+                const c = count.values.get(key) ?? 0;
+                if (c === 0)
+                    return 0;
+                return (sum.values.get(key) ?? 0) / c;
+            },
+        };
+    }
+    /**
+     * Prometheus-style bucketed histogram. `buckets` are upper bounds
+     * (e.g. `[5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000]`). Each
+     * observation increments every bucket whose upper bound it doesn't
+     * exceed, plus `sum` and `count`. Render output uses the
+     * conventional `<name>_bucket{le="<bound>"}` labels.
+     */
+    bucketedHistogram(name, buckets, help) {
+        if (buckets.length === 0) {
+            throw new Error(`@ifc-lite/collab-server: bucketedHistogram requires at least one bucket`);
+        }
+        // Dedupe before sorting — duplicate bounds increment the same `le`
+        // bucket series twice per observation, throwing off bucket counts
+        // and Prometheus's `histogram_quantile` math.
+        const sortedBuckets = [...new Set(buckets)].sort((a, b) => a - b);
+        if (sortedBuckets.some((b) => !Number.isFinite(b))) {
+            throw new Error(`@ifc-lite/collab-server: bucketedHistogram "${name}" buckets must be finite numbers`);
+        }
+        const sumName = `${name}_sum`;
+        const countName = `${name}_count`;
+        const bucketName = `${name}_bucket`;
+        const sum = this.ensure(sumName, 'histogram-sum', help);
+        const count = this.ensure(countName, 'histogram-count', help);
+        const bucketEntry = this.ensure(bucketName, 'histogram-bucket', help);
+        bucketEntry.buckets = sortedBuckets;
+        return {
+            observe: (value, labels = {}) => {
+                const key = labelKey(labels);
+                sum.values.set(key, (sum.values.get(key) ?? 0) + value);
+                count.values.set(key, (count.values.get(key) ?? 0) + 1);
+                for (const b of sortedBuckets) {
+                    if (value <= b) {
+                        const bucketKey = labelKey({ ...labels, le: String(b) });
+                        bucketEntry.values.set(bucketKey, (bucketEntry.values.get(bucketKey) ?? 0) + 1);
+                    }
+                }
+                // +Inf bucket — every observation counts.
+                const infKey = labelKey({ ...labels, le: '+Inf' });
+                bucketEntry.values.set(infKey, (bucketEntry.values.get(infKey) ?? 0) + 1);
+            },
+            buckets: sortedBuckets,
+        };
+    }
+    /** Render the full registry as Prometheus text format. */
+    render() {
+        const lines = [];
+        for (const [name, m] of this.metrics) {
+            lines.push(`# HELP ${name} ${m.help}`);
+            const renderedType = m.type === 'counter'
+                ? 'counter'
+                : m.type === 'histogram-bucket'
+                    ? 'histogram'
+                    : 'gauge';
+            lines.push(`# TYPE ${name} ${renderedType}`);
+            if (m.values.size === 0) {
+                lines.push(`${name} 0`);
+                continue;
+            }
+            for (const [key, value] of m.values) {
+                const renderedKey = key.length > 0 ? `{${key}}` : '';
+                lines.push(`${name}${renderedKey} ${value}`);
+            }
+        }
+        return lines.join('\n') + '\n';
+    }
+}
+/** Default registry shared by the server. Apps can inject their own. */
+export const defaultMetrics = new MetricsRegistry();
+//# sourceMappingURL=metrics.js.map

package/dist/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AA2B/D,SAAS,QAAQ,CAAC,MAAmB;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElD,MAAM,CAAC,IAAY,EAAE,IAAyB,EAAE,IAAY;QAClE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,kEAAkE;QAClE,iEAAiE;QACjE,4DAA4D;QAC5D,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,2BAA2B,CAAC,CAAC,IAAI,wBAAwB,IAAI,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,+CAA+C,CACxF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,IAAY,EAAE,IAAY;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO;YACL,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,SAAsB,EAAE,EAAE,EAAE;gBACvC,8DAA8D;gBAC9D,wDAAwD;gBACxD,0BAA0B;gBAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,yDAAyD,CAAC,GAAG,CACvG,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,EAAE,CAAC,SAAsB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,IAAY,EAAE,IAAY;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO;YACL,GAAG,EAAE,CAAC,KAAa,EAAE,SAAsB,EAAE,EAAE,EAAE;gBAC/C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,SAAsB,EAAE,EAAE,EAAE;gBACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,SAAsB,EAAE,EAAE,EAAE;gBACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,EAAE,CAAC,SAAsB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;SACvE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAY,EAAE,IAAY;QAClC,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,CAAC,KAAa,EAAE,SAAsB,EAAE,EAAE,EAAE;gBACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;gBACxD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,EAAE,CAAC,SAAsB,EAAE,EAAE,EAAE;gBACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,IAAY,EAAE,OAA0B,EAAE,IAAY;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,mEAAmE;QACnE,kEAAkE;QAClE,8CAA8C;QAC9C,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,kCAAkC,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC;QAClC,MAAM,UAAU,GAAG,GAAG,IAAI,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACtE,WAAW,CAAC,OAAO,GAAG,aAAa,CAAC;QAEpC,OAAO;YACL,OAAO,EAAE,CAAC,KAAa,EAAE,SAAsB,EAAE,EAAE,EAAE;gBACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;gBACxD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;oBAC9B,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;wBACf,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACzD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;gBACD,0CAA0C;gBAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACnD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,EAAE,aAAa;SACvB,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,MAAM;QACJ,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,YAAY,GAChB,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB;oBAC7B,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,OAAO,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/path-locks.d.ts

@@ -0,0 +1,39 @@
+import type { Principal, Role } from './auth.js';
+import type { VerifyMessageFn } from './room-manager.js';
+export interface PathLock {
+    /** Prefix that triggers this lock. Either `entities/<path-prefix>` or `geometry/<id-prefix>` etc. */
+    prefix: string;
+    /** Optional human-readable label for audit logs. */
+    label?: string;
+    /** Allow these userIds to bypass the lock. */
+    exemptUserIds?: ReadonlySet<string>;
+    /** Allow these roles to bypass the lock (e.g. the admin that placed it). */
+    exemptRoles?: ReadonlySet<Role>;
+}
+export interface PathLockRegistry {
+    /** Snapshot of currently-active locks. */
+    list(): readonly PathLock[];
+    /** Add a lock. Returns the lock for the caller to keep a reference to. */
+    add(lock: PathLock): PathLock;
+    /** Remove a previously-added lock. */
+    remove(lock: PathLock): boolean;
+    /** Drop every lock. */
+    clear(): void;
+    /** Returns the matching lock if `path` is locked AND `principal` is not exempt. */
+    matches(path: string, principal: Principal): PathLock | null;
+}
+export declare function createPathLockRegistry(): PathLockRegistry;
+/**
+ * Apply `update` to a throwaway Y.Doc and harvest the touched paths
+ * as a list of `<top>/<key>` strings (`entities/wall`, `geometry/g1`,
+ * etc.). Each top-level shared type the runtime knows about is
+ * inspected.
+ */
+export declare function harvestUpdatePaths(update: Uint8Array): string[];
+/**
+ * Build a `VerifyMessageFn` that rejects sync-update messages whose
+ * harvested paths intersect a locked prefix (and whose principal
+ * isn't exempt). Pass-through for non-update frames.
+ */
+export declare function verifyAgainstPathLocks(registry: PathLockRegistry): VerifyMessageFn;
+//# sourceMappingURL=path-locks.d.ts.map

package/dist/path-locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-locks.d.ts","sourceRoot":"","sources":["../src/path-locks.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAkB,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AAIzF,MAAM,WAAW,QAAQ;IACvB,qGAAqG;IACrG,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,4EAA4E;IAC5E,WAAW,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,IAAI,IAAI,SAAS,QAAQ,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,sCAAsC;IACtC,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,uBAAuB;IACvB,KAAK,IAAI,IAAI,CAAC;IACd,mFAAmF;IACnF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;CAC9D;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CA4BzD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAwC/D;AASD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,eAAe,CAgDlF"}