@ifc-lite/collab-server 0.2.0

package/dist/room-manager.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Room manager.
+ *
+ * Each room owns:
+ *   - one in-memory Y.Doc that all peers in the room sync against
+ *   - a set of WebSocket connections
+ *   - an Awareness instance forwarded over the same connections
+ *
+ * Updates are persisted via the supplied `Persistence`. Compaction kicks
+ * in every `compactEvery` updates per spec §12.2.
+ */
+import { Awareness } from 'y-protocols/awareness';
+import * as Y from 'yjs';
+import type { WebSocket } from 'ws';
+import type { Persistence } from './persistence.js';
+import type { Principal } from './auth.js';
+import { type AuditOpType, type AuditSink } from './audit-log.js';
+import { type RateLimitOptions, type RateLimiter } from './rate-limit.js';
+export interface VerifyDecision {
+    ok: boolean;
+    /** Audit-friendly reason string when ok=false. */
+    reason?: string;
+}
+export type VerifyMessageFn = (msg: Uint8Array, conn: PeerConnection) => VerifyDecision;
+export interface RoomOptions {
+    persistence: Persistence;
+    /** Compact the persisted log every N updates (default 1000). */
+    compactEvery?: number;
+    /** Idle timeout before a room is unloaded (default 60s). */
+    idleUnloadMs?: number;
+    /** Audit sink for connect/update/awareness events (default = no-op). */
+    auditSink?: AuditSink;
+    /**
+     * Per-peer rate-limit knobs. Applied per connection. Service accounts
+     * (e.g. MCP agents) typically get a tighter budget than humans.
+     */
+    rateLimit?: RateLimitOptions | ((principal: Principal) => RateLimitOptions);
+    /**
+     * Optional per-message verifier. Runs BEFORE rate limit / role check.
+     * Consumers using the anti-replay protector pass a wrapper here that
+     * decodes their envelope and calls `replayProtector.verify(...)`.
+     * Returning `{ ok: false }` audits as `reject` with `reason`.
+     */
+    verifyMessage?: VerifyMessageFn;
+    /** Internal: metric counters injected by the manager. */
+    counters?: {
+        update?: () => void;
+        reject?: (reason: string) => void;
+    };
+}
+export interface PeerConnection {
+    ws: WebSocket;
+    principal: Principal;
+    /** Subscribed clientIDs that this peer's awareness has reported (for cleanup). */
+    awarenessClients: Set<number>;
+    /** Per-connection rate limiter. */
+    limiter?: RateLimiter;
+}
+export declare class Room {
+    readonly id: string;
+    readonly doc: Y.Doc;
+    readonly awareness: Awareness;
+    private readonly conns;
+    private readonly persistence;
+    private updatesSinceCompact;
+    private readonly compactEvery;
+    private readonly auditSink;
+    private readonly rateLimitFor;
+    private readonly verifyMessage?;
+    private counters;
+    private destroyed;
+    constructor(id: string, opts: RoomOptions);
+    setCounters(counters: {
+        update?: () => void;
+        reject?: (reason: string) => void;
+    }): void;
+    /**
+     * Append an audit-log entry for this room.
+     * Public so the http upgrade handler can log connect/disconnect.
+     */
+    audit(principal: Principal, opType: AuditOpType, opHash: string, detail?: Record<string, unknown>): void;
+    loadFromDisk(): Promise<void>;
+    /** Number of currently connected peers. */
+    get peerCount(): number;
+    addConnection(conn: PeerConnection): void;
+    removeConnection(conn: PeerConnection): void;
+    /** Receive a binary message from a peer and dispatch it. */
+    handleMessage(conn: PeerConnection, msg: Uint8Array): void;
+    /** Forward Y updates to every other connected peer and persist. */
+    private onDocUpdate;
+    private persistAndMaybeCompact;
+    /**
+     * Forward an awareness update to every other peer. Tracks which client
+     * IDs the connection contributed so we can clean up on disconnect.
+     */
+    private onAwarenessUpdate;
+    destroy(): Promise<void>;
+}
+export interface RoomManagerOptions extends RoomOptions {
+    /** Soft cap on simultaneous rooms (default 1024). */
+    maxRooms?: number;
+}
+export interface RoomCounters {
+    update?: () => void;
+    reject?: (reason: string) => void;
+}
+export declare class RoomManager {
+    private readonly rooms;
+    /** Wall-clock ms when a room last had >0 peers, or 0 if never observed. */
+    private readonly lastActiveAt;
+    private readonly options;
+    private idleTimer;
+    private counters;
+    constructor(options: RoomManagerOptions);
+    getOrCreate(roomId: string): Promise<Room>;
+    /**
+     * Inject counters used by `Room.handleMessage` to bump metric values.
+     * The manager forwards them to every newly-loaded room.
+     */
+    setCounters(counters: RoomCounters): void;
+    list(): string[];
+    /** Snapshot of `(roomId, peerCount)` for diagnostics / tests. */
+    stats(): Promise<Array<{
+        roomId: string;
+        peerCount: number;
+        idleMs: number;
+    }>>;
+    unload(roomId: string): Promise<void>;
+    unloadAll(): Promise<void>;
+    /**
+     * Unload any room with zero peers that has been idle longer than
+     * `idleUnloadMs`. The persistence layer holds the durable copy, so
+     * unloading is non-destructive — the room is rehydrated on next
+     * connect.
+     */
+    sweepIdle(): Promise<string[]>;
+}
+//# sourceMappingURL=room-manager.d.ts.map

package/dist/room-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-manager.d.ts","sourceRoot":"","sources":["../src/room-manager.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAsE,MAAM,uBAAuB,CAAC;AAItH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,SAAS,EACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAqB,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK7F,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,KAAK,cAAc,CAAC;AAExF,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,kFAAkF;IAClF,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,mCAAmC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,qBAAa,IAAI;IACf,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6C;IAC1E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAkB;IACjD,OAAO,CAAC,QAAQ,CAA6D;IAC7E,OAAO,CAAC,SAAS,CAAS;gBAEd,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW;IAgBzC,WAAW,CAAC,QAAQ,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,GAAG,IAAI;IAIvF;;;OAGG;IACH,KAAK,CACH,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI;IAiBD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAOnC,2CAA2C;IAC3C,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAwBzC,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAQ5C,4DAA4D;IAC5D,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAkE1D,mEAAmE;IACnE,OAAO,CAAC,WAAW,CAWjB;YAEY,sBAAsB;IAkBpC;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAmBvB;IAEI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB/B;AAED,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAC1D,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,QAAQ,CAAoB;gBAExB,OAAO,EAAE,kBAAkB;IAajC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhD;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAQzC,IAAI,IAAI,MAAM,EAAE;IAIhB,iEAAiE;IAC3D,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAc9E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASrC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAMhC;;;;;OAKG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAkBrC"}

package/dist/room-manager.js

@@ -0,0 +1,380 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Room manager.
+ *
+ * Each room owns:
+ *   - one in-memory Y.Doc that all peers in the room sync against
+ *   - a set of WebSocket connections
+ *   - an Awareness instance forwarded over the same connections
+ *
+ * Updates are persisted via the supplied `Persistence`. Compaction kicks
+ * in every `compactEvery` updates per spec §12.2.
+ */
+import { Awareness, applyAwarenessUpdate, encodeAwarenessUpdate, removeAwarenessStates } from 'y-protocols/awareness';
+import * as syncProtocol from 'y-protocols/sync';
+import * as encoding from 'lib0/encoding';
+import * as decoding from 'lib0/decoding';
+import * as Y from 'yjs';
+import { canWrite } from './auth.js';
+import { noopAuditSink, shortHash, } from './audit-log.js';
+import { createRateLimiter } from './rate-limit.js';
+const MESSAGE_SYNC = 0;
+const MESSAGE_AWARENESS = 1;
+export class Room {
+    id;
+    doc;
+    awareness;
+    conns = new Set();
+    persistence;
+    updatesSinceCompact = 0;
+    compactEvery;
+    auditSink;
+    rateLimitFor;
+    verifyMessage;
+    counters;
+    destroyed = false;
+    constructor(id, opts) {
+        this.id = id;
+        this.doc = new Y.Doc();
+        this.awareness = new Awareness(this.doc);
+        this.persistence = opts.persistence;
+        this.compactEvery = opts.compactEvery ?? 1000;
+        this.auditSink = opts.auditSink ?? noopAuditSink;
+        const rl = opts.rateLimit;
+        this.rateLimitFor = typeof rl === 'function' ? rl : () => rl ?? {};
+        this.verifyMessage = opts.verifyMessage;
+        this.counters = opts.counters ?? {};
+        this.doc.on('update', this.onDocUpdate);
+        this.awareness.on('update', this.onAwarenessUpdate);
+    }
+    setCounters(counters) {
+        this.counters = counters;
+    }
+    /**
+     * Append an audit-log entry for this room.
+     * Public so the http upgrade handler can log connect/disconnect.
+     */
+    audit(principal, opType, opHash, detail) {
+        void Promise.resolve(this.auditSink.append({
+            timestamp: new Date().toISOString(),
+            userId: principal.userId,
+            role: principal.role,
+            roomId: this.id,
+            opType,
+            opHash,
+            detail,
+        })).catch((err) => {
+            // eslint-disable-next-line no-console
+            console.error(`[collab-server] audit append error:`, err);
+        });
+    }
+    async loadFromDisk() {
+        const saved = await this.persistence.load(this.id);
+        if (saved && saved.byteLength > 0) {
+            Y.applyUpdate(this.doc, saved, 'load-from-disk');
+        }
+    }
+    /** Number of currently connected peers. */
+    get peerCount() {
+        return this.conns.size;
+    }
+    addConnection(conn) {
+        if (!conn.limiter) {
+            conn.limiter = createRateLimiter(this.rateLimitFor(conn.principal));
+        }
+        this.conns.add(conn);
+        this.audit(conn.principal, 'connect', '');
+        // Step 1 of the y-protocols sync handshake: send our state vector.
+        const enc = encoding.createEncoder();
+        encoding.writeVarUint(enc, MESSAGE_SYNC);
+        syncProtocol.writeSyncStep1(enc, this.doc);
+        safeSend(conn.ws, encoding.toUint8Array(enc));
+        // Send our current awareness snapshot.
+        const states = this.awareness.getStates();
+        if (states.size > 0) {
+            const aenc = encoding.createEncoder();
+            encoding.writeVarUint(aenc, MESSAGE_AWARENESS);
+            encoding.writeVarUint8Array(aenc, encodeAwarenessUpdate(this.awareness, Array.from(states.keys())));
+            safeSend(conn.ws, encoding.toUint8Array(aenc));
+        }
+    }
+    removeConnection(conn) {
+        this.conns.delete(conn);
+        if (conn.awarenessClients.size > 0) {
+            removeAwarenessStates(this.awareness, Array.from(conn.awarenessClients), 'connection-closed');
+        }
+        this.audit(conn.principal, 'disconnect', '');
+    }
+    /** Receive a binary message from a peer and dispatch it. */
+    handleMessage(conn, msg) {
+        if (this.destroyed)
+            return;
+        if (this.verifyMessage) {
+            const decision = this.verifyMessage(msg, conn);
+            if (!decision.ok) {
+                const reason = decision.reason ?? 'verify-failed';
+                this.audit(conn.principal, 'reject', shortHash(msg), { reason });
+                this.counters.reject?.(reason);
+                return;
+            }
+        }
+        const decoder = decoding.createDecoder(msg);
+        const messageType = decoding.readVarUint(decoder);
+        switch (messageType) {
+            case MESSAGE_SYNC: {
+                // Peek the inner sync subtype BEFORE calling readSyncMessage —
+                // y-protocols/sync applies the wire payload to the doc as a side
+                // effect for both messageYjsSyncStep2 and messageYjsUpdate. Doing
+                // the capability/rate-limit check after readSyncMessage means a
+                // viewer can mutate state (and have it broadcast and persisted by
+                // onDocUpdate) before this branch returns reject — the auth
+                // gate would be cosmetic.
+                const subtype = decoding.peekVarUint(decoder);
+                const isWriteFrame = subtype === syncProtocol.messageYjsUpdate ||
+                    subtype === syncProtocol.messageYjsSyncStep2;
+                if (isWriteFrame) {
+                    if (!canWrite(conn.principal)) {
+                        this.audit(conn.principal, 'reject', shortHash(msg), { reason: 'role' });
+                        this.counters.reject?.('role');
+                        return;
+                    }
+                    if (conn.limiter && !conn.limiter.tryConsume(1)) {
+                        this.audit(conn.principal, 'reject', shortHash(msg), { reason: 'rate-limit' });
+                        this.counters.reject?.('rate-limit');
+                        return;
+                    }
+                }
+                const enc = encoding.createEncoder();
+                encoding.writeVarUint(enc, MESSAGE_SYNC);
+                const replyType = syncProtocol.readSyncMessage(decoder, enc, this.doc, conn);
+                if (replyType === syncProtocol.messageYjsUpdate) {
+                    this.audit(conn.principal, 'update', shortHash(msg), { bytes: msg.byteLength });
+                    this.counters.update?.();
+                }
+                else if (replyType === syncProtocol.messageYjsSyncStep1) {
+                    this.audit(conn.principal, 'sync-step1', '');
+                }
+                else if (replyType === syncProtocol.messageYjsSyncStep2) {
+                    this.audit(conn.principal, 'sync-step2', '');
+                }
+                if (encoding.length(enc) > 1) {
+                    safeSend(conn.ws, encoding.toUint8Array(enc));
+                }
+                break;
+            }
+            case MESSAGE_AWARENESS: {
+                const update = decoding.readVarUint8Array(decoder);
+                applyAwarenessUpdate(this.awareness, update, conn);
+                this.audit(conn.principal, 'awareness', shortHash(update));
+                break;
+            }
+            default:
+                // Unknown frame; ignore.
+                break;
+        }
+    }
+    /** Forward Y updates to every other connected peer and persist. */
+    onDocUpdate = (update, origin) => {
+        if (origin === 'load-from-disk')
+            return;
+        const enc = encoding.createEncoder();
+        encoding.writeVarUint(enc, MESSAGE_SYNC);
+        syncProtocol.writeUpdate(enc, update);
+        const message = encoding.toUint8Array(enc);
+        for (const conn of this.conns) {
+            if (conn === origin)
+                continue;
+            safeSend(conn.ws, message);
+        }
+        void this.persistAndMaybeCompact(update);
+    };
+    async persistAndMaybeCompact(update) {
+        try {
+            await this.persistence.append(this.id, update);
+            this.updatesSinceCompact++;
+            if (this.updatesSinceCompact >= this.compactEvery) {
+                const merged = Y.encodeStateAsUpdate(this.doc);
+                await this.persistence.compact(this.id, merged);
+                this.updatesSinceCompact = 0;
+            }
+        }
+        catch (err) {
+            // Persistence failures are logged but never block sync — the
+            // in-memory state is still consistent across peers, and the next
+            // successful append/compact catches up.
+            // eslint-disable-next-line no-console
+            console.error(`[collab-server] persistence error for room ${this.id}:`, err);
+        }
+    }
+    /**
+     * Forward an awareness update to every other peer. Tracks which client
+     * IDs the connection contributed so we can clean up on disconnect.
+     */
+    onAwarenessUpdate = (changes, origin) => {
+        const all = [...changes.added, ...changes.updated, ...changes.removed];
+        if (origin && origin.ws) {
+            const conn = origin;
+            for (const client of changes.added)
+                conn.awarenessClients.add(client);
+            for (const client of changes.removed)
+                conn.awarenessClients.delete(client);
+        }
+        if (all.length === 0)
+            return;
+        const enc = encoding.createEncoder();
+        encoding.writeVarUint(enc, MESSAGE_AWARENESS);
+        encoding.writeVarUint8Array(enc, encodeAwarenessUpdate(this.awareness, all));
+        const message = encoding.toUint8Array(enc);
+        for (const conn of this.conns) {
+            if (conn === origin)
+                continue;
+            safeSend(conn.ws, message);
+        }
+    };
+    async destroy() {
+        this.destroyed = true;
+        for (const conn of this.conns) {
+            try {
+                conn.ws.close();
+            }
+            catch { /* socket may already be torn down */ }
+        }
+        this.conns.clear();
+        this.doc.off('update', this.onDocUpdate);
+        this.awareness.off('update', this.onAwarenessUpdate);
+        // Final compaction so the next load picks up the freshest state.
+        try {
+            await this.persistence.compact(this.id, Y.encodeStateAsUpdate(this.doc));
+        }
+        catch (err) {
+            // eslint-disable-next-line no-console
+            console.error(`[collab-server] compact-on-destroy error for ${this.id}:`, err);
+        }
+        this.awareness.destroy();
+        this.doc.destroy();
+    }
+}
+export class RoomManager {
+    rooms = new Map();
+    /** Wall-clock ms when a room last had >0 peers, or 0 if never observed. */
+    lastActiveAt = new Map();
+    options;
+    idleTimer = null;
+    counters = {};
+    constructor(options) {
+        this.options = options;
+        if (options.idleUnloadMs && options.idleUnloadMs > 0) {
+            // Sweep at half the idle window so eviction granularity is reasonable.
+            const sweepMs = Math.max(1_000, Math.floor(options.idleUnloadMs / 2));
+            this.idleTimer = setInterval(() => {
+                void this.sweepIdle();
+            }, sweepMs);
+            // Don't keep the Node event loop alive solely for this timer.
+            this.idleTimer.unref?.();
+        }
+    }
+    async getOrCreate(roomId) {
+        let pending = this.rooms.get(roomId);
+        if (pending) {
+            this.lastActiveAt.set(roomId, Date.now());
+            return pending;
+        }
+        const max = this.options.maxRooms ?? 1024;
+        if (this.rooms.size >= max) {
+            throw new Error(`@ifc-lite/collab-server: room limit (${max}) reached`);
+        }
+        const counters = this.counters;
+        const verifyMessage = this.options.verifyMessage;
+        pending = (async () => {
+            const room = new Room(roomId, { ...this.options, counters, verifyMessage });
+            await room.loadFromDisk();
+            return room;
+        })();
+        this.rooms.set(roomId, pending);
+        this.lastActiveAt.set(roomId, Date.now());
+        return pending;
+    }
+    /**
+     * Inject counters used by `Room.handleMessage` to bump metric values.
+     * The manager forwards them to every newly-loaded room.
+     */
+    setCounters(counters) {
+        this.counters = counters;
+        // Apply to already-loaded rooms via their internal hook.
+        for (const pending of this.rooms.values()) {
+            void pending.then((room) => room.setCounters(counters));
+        }
+    }
+    list() {
+        return Array.from(this.rooms.keys());
+    }
+    /** Snapshot of `(roomId, peerCount)` for diagnostics / tests. */
+    async stats() {
+        const out = [];
+        const now = Date.now();
+        for (const [roomId, pending] of this.rooms) {
+            const room = await pending;
+            out.push({
+                roomId,
+                peerCount: room.peerCount,
+                idleMs: now - (this.lastActiveAt.get(roomId) ?? now),
+            });
+        }
+        return out;
+    }
+    async unload(roomId) {
+        const pending = this.rooms.get(roomId);
+        if (!pending)
+            return;
+        this.rooms.delete(roomId);
+        this.lastActiveAt.delete(roomId);
+        const room = await pending;
+        await room.destroy();
+    }
+    async unloadAll() {
+        if (this.idleTimer)
+            clearInterval(this.idleTimer);
+        this.idleTimer = null;
+        await Promise.all(Array.from(this.rooms.keys()).map((id) => this.unload(id)));
+    }
+    /**
+     * Unload any room with zero peers that has been idle longer than
+     * `idleUnloadMs`. The persistence layer holds the durable copy, so
+     * unloading is non-destructive — the room is rehydrated on next
+     * connect.
+     */
+    async sweepIdle() {
+        const idleMs = this.options.idleUnloadMs;
+        if (!idleMs || idleMs <= 0)
+            return [];
+        const now = Date.now();
+        const candidates = [];
+        for (const [roomId, pending] of this.rooms) {
+            const room = await pending;
+            if (room.peerCount > 0) {
+                // Active rooms reset the idle clock.
+                this.lastActiveAt.set(roomId, now);
+                continue;
+            }
+            const lastActive = this.lastActiveAt.get(roomId) ?? now;
+            if (now - lastActive >= idleMs)
+                candidates.push(roomId);
+        }
+        for (const roomId of candidates)
+            await this.unload(roomId);
+        return candidates;
+    }
+}
+function safeSend(ws, data) {
+    try {
+        if (ws.readyState === ws.OPEN)
+            ws.send(data);
+    }
+    catch (err) {
+        // eslint-disable-next-line no-console
+        console.error('[collab-server] ws send error:', err);
+    }
+}
+//# sourceMappingURL=room-manager.js.map

package/dist/room-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-manager.js","sourceRoot":"","sources":["../src/room-manager.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACtH,OAAO,KAAK,YAAY,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EACL,aAAa,EACb,SAAS,GAGV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAA2C,MAAM,iBAAiB,CAAC;AAE7F,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AA2C5B,MAAM,OAAO,IAAI;IACN,EAAE,CAAS;IACX,GAAG,CAAQ;IACX,SAAS,CAAY;IACb,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,WAAW,CAAc;IAClC,mBAAmB,GAAG,CAAC,CAAC;IACf,YAAY,CAAS;IACrB,SAAS,CAAY;IACrB,YAAY,CAA6C;IACzD,aAAa,CAAmB;IACzC,QAAQ,CAA6D;IACrE,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,EAAU,EAAE,IAAiB;QACvC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEpC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC;IAED,WAAW,CAAC,QAAoE;QAC9E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,SAAoB,EACpB,MAAmB,EACnB,MAAc,EACd,MAAgC;QAEhC,KAAK,OAAO,CAAC,OAAO,CAClB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAC,CACH,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAClC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,aAAa,CAAC,IAAoB;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1C,mEAAmE;QACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QACrC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACzC,YAAY,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,uCAAuC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;YACtC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC/C,QAAQ,CAAC,kBAAkB,CACzB,IAAI,EACJ,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CACjE,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,IAAoB;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,4DAA4D;IAC5D,aAAa,CAAC,IAAoB,EAAE,GAAe;QACjD,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClD,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,+DAA+D;gBAC/D,iEAAiE;gBACjE,kEAAkE;gBAClE,gEAAgE;gBAChE,kEAAkE;gBAClE,4DAA4D;gBAC5D,0BAA0B;gBAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,YAAY,GAChB,OAAO,KAAK,YAAY,CAAC,gBAAgB;oBACzC,OAAO,KAAK,YAAY,CAAC,mBAAmB,CAAC;gBAC/C,IAAI,YAAY,EAAE,CAAC;oBACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;wBACzE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;wBAC/B,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;wBAC/E,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;wBACrC,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACrC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBACzC,MAAM,SAAS,GAAG,YAAY,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7E,IAAI,SAAS,KAAK,YAAY,CAAC,gBAAgB,EAAE,CAAC;oBAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;oBAChF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,CAAC;qBAAM,IAAI,SAAS,KAAK,YAAY,CAAC,mBAAmB,EAAE,CAAC;oBAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC/C,CAAC;qBAAM,IAAI,SAAS,KAAK,YAAY,CAAC,mBAAmB,EAAE,CAAC;oBAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACnD,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD;gBACE,yBAAyB;gBACzB,MAAM;QACV,CAAC;IACH,CAAC;IAED,mEAAmE;IAC3D,WAAW,GAAG,CAAC,MAAkB,EAAE,MAAe,EAAE,EAAE;QAC5D,IAAI,MAAM,KAAK,gBAAgB;YAAE,OAAO;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QACrC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACzC,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,MAAkB;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/C,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAChD,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6DAA6D;YAC7D,iEAAiE;YACjE,wCAAwC;YACxC,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,8CAA8C,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,iBAAiB,GAAG,CAC1B,OAAkE,EAClE,MAAe,EACf,EAAE;QACF,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,IAAK,MAAyB,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAwB,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK;gBAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QACrC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC9C,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrD,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,gDAAgD,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;CACF;AAYD,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1D,2EAA2E;IAC1D,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO,CAAqB;IACrC,SAAS,GAA0C,IAAI,CAAC;IACxD,QAAQ,GAAiB,EAAE,CAAC;IAEpC,YAAY,OAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACrD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxB,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,8DAA8D;YAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,WAAW,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5E,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,QAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,yDAAyD;QACzD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAiE,EAAE,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;YAC3B,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACvB,qCAAqC;gBACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YACxD,IAAI,GAAG,GAAG,UAAU,IAAI,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,UAAU;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,EAAa,EAAE,IAAgB;IAC/C,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;YAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/secure-bundle.d.ts

@@ -0,0 +1,15 @@
+/**
+ * One-call helper that bundles `createSecureHttpServer` + the
+ * security-header wrapper + `startCollabServer`. Useful when the
+ * deployer wants TLS in-process without writing the wiring.
+ *
+ * Production deployments terminating TLS at a reverse proxy keep
+ * using `startCollabServer` directly.
+ */
+import { type SecureHttpServerOptions } from './secure-server.js';
+import { type CollabServerHandle, type StartCollabServerOptions } from './server.js';
+export interface StartSecureCollabServerOptions extends Omit<StartCollabServerOptions, 'server'> {
+    tls: SecureHttpServerOptions;
+}
+export declare function startSecureCollabServer(opts: StartSecureCollabServerOptions): Promise<CollabServerHandle>;
+//# sourceMappingURL=secure-bundle.d.ts.map

package/dist/secure-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-bundle.d.ts","sourceRoot":"","sources":["../src/secure-bundle.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AAEH,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,8BACf,SAAQ,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC;IAChD,GAAG,EAAE,uBAAuB,CAAC;CAC9B;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,kBAAkB,CAAC,CAwC7B"}

package/dist/secure-bundle.js

@@ -0,0 +1,49 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * One-call helper that bundles `createSecureHttpServer` + the
+ * security-header wrapper + `startCollabServer`. Useful when the
+ * deployer wants TLS in-process without writing the wiring.
+ *
+ * Production deployments terminating TLS at a reverse proxy keep
+ * using `startCollabServer` directly.
+ */
+import { createSecureHttpServer, secureHttpHandler, } from './secure-server.js';
+import { startCollabServer, } from './server.js';
+export async function startSecureCollabServer(opts) {
+    // Build the underlying https.Server with hardened defaults. The
+    // collab server attaches its request listener inside startCollabServer.
+    const httpsServer = createSecureHttpServer({ ...opts.tls });
+    const handle = await startCollabServer({
+        ...opts,
+        server: httpsServer,
+    });
+    // After startCollabServer has attached its listeners, wrap each one
+    // with the OWASP security-header wrapper so every response gets
+    // hardened headers without each route opting in. This is more robust
+    // than patching `emit` (which has a window where listeners can fire
+    // before the wrapper is in place) and works even if multiple
+    // listeners were attached.
+    const requestListeners = httpsServer.listeners('request');
+    if (requestListeners.length > 0) {
+        httpsServer.removeAllListeners('request');
+        for (const listener of requestListeners) {
+            httpsServer.on('request', secureHttpHandler(listener));
+        }
+    }
+    // startCollabServer skips listening whenever a server is supplied,
+    // so this helper always has to bind. The previous gate
+    // `if (!opts.port && !opts.host)` skipped listen() any time the
+    // caller passed only one of the two (e.g. just `port: 4000`),
+    // returning a handle for an unbound server.
+    await new Promise((resolve, reject) => {
+        httpsServer.once('error', reject);
+        httpsServer.listen(opts.port ?? 1234, opts.host ?? '0.0.0.0', () => {
+            httpsServer.off('error', reject);
+            resolve();
+        });
+    });
+    return handle;
+}
+//# sourceMappingURL=secure-bundle.js.map

package/dist/secure-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-bundle.js","sourceRoot":"","sources":["../src/secure-bundle.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;;;;;;GAOG;AAEH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,GAGlB,MAAM,aAAa,CAAC;AAOrB,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAoC;IAEpC,gEAAgE;IAChE,wEAAwE;IACxE,MAAM,WAAW,GAAG,sBAAsB,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,GAAG,IAAI;QACP,MAAM,EAAE,WAAW;KACpB,CAAC,CAAC;IAEH,oEAAoE;IACpE,gEAAgE;IAChE,qEAAqE;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAEvD,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,uDAAuD;IACvD,gEAAgE;IAChE,8DAA8D;IAC9D,4CAA4C;IAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,GAAG,EAAE;YACjE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}