@ifc-lite/collab-server 0.2.0

package/dist/secure-server.d.ts

@@ -0,0 +1,49 @@
+/**
+ * TLS termination helpers (spec §14, v0.5).
+ *
+ * In production we recommend terminating TLS at a reverse proxy
+ * (nginx, Caddy, ALB, Cloudflare, etc.). For deployments that need
+ * TLS in-process — single-binary appliance, edge worker, dev with a
+ * self-signed cert — this module ships:
+ *
+ *   - `createSecureHttpServer(opts)` that wraps `node:https`'s
+ *     `createServer` with strong defaults (TLS 1.2+ minVersion,
+ *     conservative cipher list, ALPN for HTTP/1.1).
+ *
+ *   - `applySecurityHeaders(res)` that sets the OWASP-recommended
+ *     baseline response headers (HSTS, no-sniff, frame deny). Drop
+ *     this into the http handler before writing any response.
+ *
+ *   - `secureHttpHandler(inner)` wrapper that applies the headers and
+ *     defends against the classic TRACE method.
+ *
+ * Apps that already terminate TLS upstream can ignore this module —
+ * `startCollabServer` accepts a `server` option so they can pass any
+ * pre-built `http.Server` (or `https.Server`).
+ */
+import * as https from 'node:https';
+import type * as http from 'node:http';
+export interface SecureHttpServerOptions {
+    /** Path to the TLS certificate file (PEM). */
+    certPath: string;
+    /** Path to the TLS private key file (PEM). */
+    keyPath: string;
+    /** Optional CA bundle for client certificate verification. */
+    caPath?: string;
+    /** Reject TLS below this version. Default `'TLSv1.2'`. */
+    minVersion?: 'TLSv1.2' | 'TLSv1.3';
+    /** Override cipher list. Default modern AES-GCM / ChaCha set. */
+    ciphers?: string;
+    /** Optional request handler. */
+    requestListener?: http.RequestListener;
+}
+/** Build a hardened `https.Server`. */
+export declare function createSecureHttpServer(opts: SecureHttpServerOptions): https.Server;
+/**
+ * Apply OWASP-baseline security headers to a response. Idempotent —
+ * if headers are already set, they're left alone.
+ */
+export declare function applySecurityHeaders(res: http.ServerResponse): void;
+/** Wrap a request handler with security-header + TRACE-defence. */
+export declare function secureHttpHandler(inner: http.RequestListener): http.RequestListener;
+//# sourceMappingURL=secure-server.d.ts.map

package/dist/secure-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-server.d.ts","sourceRoot":"","sources":["../src/secure-server.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,uBAAuB;IACtC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IACnC,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,eAAe,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC;CACxC;AAcD,uCAAuC;AACvC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,uBAAuB,GAAG,KAAK,CAAC,MAAM,CAWlF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAenE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAUnF"}

package/dist/secure-server.js

@@ -0,0 +1,86 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * TLS termination helpers (spec §14, v0.5).
+ *
+ * In production we recommend terminating TLS at a reverse proxy
+ * (nginx, Caddy, ALB, Cloudflare, etc.). For deployments that need
+ * TLS in-process — single-binary appliance, edge worker, dev with a
+ * self-signed cert — this module ships:
+ *
+ *   - `createSecureHttpServer(opts)` that wraps `node:https`'s
+ *     `createServer` with strong defaults (TLS 1.2+ minVersion,
+ *     conservative cipher list, ALPN for HTTP/1.1).
+ *
+ *   - `applySecurityHeaders(res)` that sets the OWASP-recommended
+ *     baseline response headers (HSTS, no-sniff, frame deny). Drop
+ *     this into the http handler before writing any response.
+ *
+ *   - `secureHttpHandler(inner)` wrapper that applies the headers and
+ *     defends against the classic TRACE method.
+ *
+ * Apps that already terminate TLS upstream can ignore this module —
+ * `startCollabServer` accepts a `server` option so they can pass any
+ * pre-built `http.Server` (or `https.Server`).
+ */
+import * as https from 'node:https';
+import * as fs from 'node:fs';
+const DEFAULT_CIPHERS = [
+    'TLS_AES_128_GCM_SHA256',
+    'TLS_AES_256_GCM_SHA384',
+    'TLS_CHACHA20_POLY1305_SHA256',
+    'ECDHE-ECDSA-AES128-GCM-SHA256',
+    'ECDHE-RSA-AES128-GCM-SHA256',
+    'ECDHE-ECDSA-AES256-GCM-SHA384',
+    'ECDHE-RSA-AES256-GCM-SHA384',
+    'ECDHE-ECDSA-CHACHA20-POLY1305',
+    'ECDHE-RSA-CHACHA20-POLY1305',
+].join(':');
+/** Build a hardened `https.Server`. */
+export function createSecureHttpServer(opts) {
+    const tlsOpts = {
+        cert: fs.readFileSync(opts.certPath),
+        key: fs.readFileSync(opts.keyPath),
+        minVersion: opts.minVersion ?? 'TLSv1.2',
+        ciphers: opts.ciphers ?? DEFAULT_CIPHERS,
+        honorCipherOrder: true,
+        ALPNProtocols: ['http/1.1'],
+    };
+    if (opts.caPath)
+        tlsOpts.ca = fs.readFileSync(opts.caPath);
+    return https.createServer(tlsOpts, opts.requestListener);
+}
+/**
+ * Apply OWASP-baseline security headers to a response. Idempotent —
+ * if headers are already set, they're left alone.
+ */
+export function applySecurityHeaders(res) {
+    if (!res.headersSent) {
+        if (!res.hasHeader('strict-transport-security')) {
+            res.setHeader('strict-transport-security', 'max-age=31536000; includeSubDomains');
+        }
+        if (!res.hasHeader('x-content-type-options')) {
+            res.setHeader('x-content-type-options', 'nosniff');
+        }
+        if (!res.hasHeader('x-frame-options')) {
+            res.setHeader('x-frame-options', 'DENY');
+        }
+        if (!res.hasHeader('referrer-policy')) {
+            res.setHeader('referrer-policy', 'no-referrer');
+        }
+    }
+}
+/** Wrap a request handler with security-header + TRACE-defence. */
+export function secureHttpHandler(inner) {
+    return (req, res) => {
+        if (req.method === 'TRACE' || req.method === 'TRACK') {
+            res.writeHead(405);
+            res.end();
+            return;
+        }
+        applySecurityHeaders(res);
+        inner(req, res);
+    };
+}
+//# sourceMappingURL=secure-server.js.map

package/dist/secure-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-server.js","sourceRoot":"","sources":["../src/secure-server.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAkB9B,MAAM,eAAe,GAAG;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,8BAA8B;IAC9B,+BAA+B;IAC/B,6BAA6B;IAC7B,+BAA+B;IAC/B,6BAA6B;IAC7B,+BAA+B;IAC/B,6BAA6B;CAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,uCAAuC;AACvC,MAAM,UAAU,sBAAsB,CAAC,IAA6B;IAClE,MAAM,OAAO,GAAwB;QACnC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;QACxC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,CAAC,UAAU,CAAC;KAC5B,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAwB;IAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC3D,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1B,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Websocket sync server entry point.
+ */
+import * as http from 'node:http';
+import { WebSocketServer } from 'ws';
+import { RoomManager } from './room-manager.js';
+import { type Persistence } from './persistence.js';
+import { type AuthenticateFn, type Principal } from './auth.js';
+import { type AuditSink } from './audit-log.js';
+import { type RateLimitOptions } from './rate-limit.js';
+import { type VerifyMessageFn } from './room-manager.js';
+import { type ServerBlobStorage } from './blob-route.js';
+import { MetricsRegistry } from './metrics.js';
+export interface StartCollabServerOptions {
+    port?: number;
+    host?: string;
+    persistence?: Persistence;
+    authenticate?: AuthenticateFn;
+    maxRooms?: number;
+    compactEvery?: number;
+    /** Pre-built http server to attach to instead of creating one. */
+    server?: http.Server;
+    /** Append-only audit sink. Default: drop all events. */
+    auditSink?: AuditSink;
+    /** Per-peer rate limit. Function form lets you tune by role/user. */
+    rateLimit?: RateLimitOptions | ((principal: Principal) => RateLimitOptions);
+    /**
+     * Pluggable blob storage for the `/blobs/...` route. Default:
+     * in-memory. Pass a custom `ServerBlobStorage` to back with S3 or
+     * filesystem in production.
+     */
+    blobStorage?: ServerBlobStorage;
+    /** Reject blob PUTs above this size (default 100 MB). */
+    blobMaxBytes?: number;
+    /**
+     * Unload rooms that have had zero peers for this many ms (default
+     * disabled). Persistence keeps the durable copy; rehydrate on next
+     * connect.
+     */
+    idleUnloadMs?: number;
+    /** Metrics registry to publish at `/metrics`. Defaults to the package singleton. */
+    metrics?: MetricsRegistry;
+    /**
+     * Optional per-message verifier (anti-replay HMAC etc.). Runs before
+     * rate limit / role check. Returning `{ ok: false }` audits as
+     * `reject` with the reason and drops the message.
+     */
+    verifyMessage?: VerifyMessageFn;
+}
+export interface CollabServerHandle {
+    readonly url: string;
+    readonly httpServer: http.Server;
+    readonly wss: WebSocketServer;
+    readonly roomManager: RoomManager;
+    stop(): Promise<void>;
+}
+export declare function startCollabServer(opts?: StartCollabServerOptions): Promise<CollabServerHandle>;
+export { FilePersistence, MemoryPersistence } from './persistence.js';
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAIA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,WAAW,EAAuB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAsC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAwB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAkB,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC;IACrB,wDAAwD;IACxD,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,qEAAqE;IACrE,SAAS,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAC5E;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAID,wBAAsB,iBAAiB,CACrC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAmI7B;AAsED,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/server.js

@@ -0,0 +1,196 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Websocket sync server entry point.
+ */
+import * as http from 'node:http';
+import { WebSocketServer } from 'ws';
+import { RoomManager } from './room-manager.js';
+import { MemoryPersistence } from './persistence.js';
+import { allowAnonymousEditor } from './auth.js';
+import { handleBlobRequest, InMemoryBlobStorage, } from './blob-route.js';
+import { defaultMetrics } from './metrics.js';
+const PING_INTERVAL_MS = 30_000;
+export async function startCollabServer(opts = {}) {
+    const persistence = opts.persistence ?? new MemoryPersistence();
+    const authenticate = opts.authenticate ?? allowAnonymousEditor;
+    const roomManager = new RoomManager({
+        persistence,
+        maxRooms: opts.maxRooms,
+        compactEvery: opts.compactEvery,
+        auditSink: opts.auditSink,
+        rateLimit: opts.rateLimit,
+        idleUnloadMs: opts.idleUnloadMs,
+        verifyMessage: opts.verifyMessage,
+    });
+    const blobStorage = opts.blobStorage ?? new InMemoryBlobStorage();
+    const metrics = opts.metrics ?? defaultMetrics;
+    const peersGauge = metrics.gauge('collab_room_peers', 'Currently connected peers per room');
+    const roomsGauge = metrics.gauge('collab_rooms', 'Currently loaded rooms');
+    const updatesCounter = metrics.counter('collab_updates_total', 'Y updates accepted by the server');
+    const rejectsCounter = metrics.counter('collab_rejects_total', 'Update messages rejected (rate-limit / role / replay)');
+    const httpServer = opts.server ??
+        http.createServer(async (req, res) => {
+            try {
+                if (req.url === '/healthz') {
+                    res.writeHead(200, { 'content-type': 'application/json' });
+                    res.end(JSON.stringify({ ok: true, rooms: roomManager.list().length }));
+                    return;
+                }
+                if (req.url === '/metrics') {
+                    // Refresh derived gauges before rendering so the snapshot
+                    // reflects live state, not state-at-last-event.
+                    const stats = await roomManager.stats();
+                    roomsGauge.set(stats.length);
+                    for (const s of stats)
+                        peersGauge.set(s.peerCount, { room: s.roomId });
+                    res.writeHead(200, { 'content-type': 'text/plain; version=0.0.4' });
+                    res.end(metrics.render());
+                    return;
+                }
+                // Blob route: PUT / GET / HEAD / DELETE on /blobs/<hash>, GET /blobs.
+                if (req.url && req.url.startsWith('/blobs')) {
+                    const handled = await handleBlobRequest(req, res, {
+                        storage: blobStorage,
+                        maxBytes: opts.blobMaxBytes,
+                    });
+                    if (handled)
+                        return;
+                }
+                res.writeHead(404);
+                res.end();
+            }
+            catch (err) {
+                // eslint-disable-next-line no-console
+                console.error('[collab-server] http handler error:', err);
+                if (!res.headersSent) {
+                    res.writeHead(500);
+                    res.end();
+                }
+            }
+        });
+    // Surface the counters on the manager so the room can bump them in
+    // its update / reject paths. Done as opaque setters to keep
+    // RoomManager from importing the metrics module directly.
+    roomManager.setCounters({
+        update: () => updatesCounter.inc(),
+        reject: (reason) => rejectsCounter.inc(1, { reason }),
+    });
+    const wss = new WebSocketServer({ noServer: true });
+    httpServer.on('upgrade', (req, socket, head) => {
+        wss.handleUpgrade(req, socket, head, (ws) => {
+            // handleConnection runs async setup (room load, auth callback,
+            // persistence open). If it rejects — e.g. RoomManager.getOrCreate
+            // throws on room-cap or persistence failure — we previously
+            // discarded the promise with `void`, leaving the socket open and
+            // surfacing as a process-level unhandledRejection. Catch the error,
+            // log it, and close the socket with a non-1000 code so the client
+            // sees a deterministic shutdown.
+            handleConnection(ws, req, { roomManager, authenticate }).catch((err) => {
+                // eslint-disable-next-line no-console
+                console.error('[collab-server] connection setup failed:', err);
+                try {
+                    if (ws.readyState === ws.OPEN || ws.readyState === ws.CONNECTING) {
+                        // 1011 = server error per RFC 6455
+                        ws.close(1011, 'connection setup failed');
+                    }
+                }
+                catch {
+                    // ignore close errors
+                }
+            });
+        });
+    });
+    if (!opts.server) {
+        await new Promise((resolve, reject) => {
+            httpServer.once('error', reject);
+            httpServer.listen(opts.port ?? 1234, opts.host ?? '0.0.0.0', () => {
+                httpServer.off('error', reject);
+                resolve();
+            });
+        });
+    }
+    const address = httpServer.address();
+    const url = typeof address === 'object' && address
+        ? `ws://${opts.host ?? '127.0.0.1'}:${address.port}`
+        : `ws://${opts.host ?? '127.0.0.1'}:${opts.port ?? 1234}`;
+    return {
+        url,
+        httpServer,
+        wss,
+        roomManager,
+        async stop() {
+            await new Promise((resolve) => wss.close(() => resolve()));
+            if (!opts.server) {
+                await new Promise((resolve) => httpServer.close(() => resolve()));
+            }
+            await roomManager.unloadAll();
+        },
+    };
+}
+async function handleConnection(ws, req, ctx) {
+    ws.binaryType = 'arraybuffer';
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    // y-websocket convention: room id is the path (e.g. ws://host/project/model)
+    const roomId = decodeURIComponent(url.pathname.replace(/^\/+/, ''));
+    const token = url.searchParams.get('token') ?? undefined;
+    if (!roomId) {
+        ws.close(4400, 'missing-room');
+        return;
+    }
+    let principal;
+    try {
+        principal = await ctx.authenticate(token, roomId);
+    }
+    catch (err) {
+        // eslint-disable-next-line no-console
+        console.error('[collab-server] auth threw:', err);
+        ws.close(4500, 'auth-error');
+        return;
+    }
+    if (!principal) {
+        ws.close(4401, 'unauthorized');
+        return;
+    }
+    const room = await ctx.roomManager.getOrCreate(roomId);
+    const conn = {
+        ws,
+        principal,
+        awarenessClients: new Set(),
+    };
+    room.addConnection(conn);
+    let alive = true;
+    const ping = setInterval(() => {
+        if (!alive) {
+            try {
+                ws.terminate();
+            }
+            catch { /* socket already gone */ }
+            clearInterval(ping);
+            return;
+        }
+        alive = false;
+        try {
+            ws.ping();
+        }
+        catch { /* socket already gone */ }
+    }, PING_INTERVAL_MS);
+    ws.on('pong', () => { alive = true; });
+    ws.on('message', (data) => {
+        const bytes = data instanceof ArrayBuffer ? new Uint8Array(data) : new Uint8Array(data);
+        room.handleMessage(conn, bytes);
+    });
+    const cleanup = () => {
+        clearInterval(ping);
+        room.removeConnection(conn);
+    };
+    ws.on('close', cleanup);
+    ws.on('error', (err) => {
+        // eslint-disable-next-line no-console
+        console.error('[collab-server] ws error:', err);
+        cleanup();
+    });
+}
+export { FilePersistence, MemoryPersistence } from './persistence.js';
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,WAAW,EAAuB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAmB,iBAAiB,EAAoB,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAuC,MAAM,WAAW,CAAC;AAItF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AA+C/D,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EAAE;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,mBAAmB,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAC9B,mBAAmB,EACnB,oCAAoC,CACrC,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CACpC,sBAAsB,EACtB,kCAAkC,CACnC,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CACpC,sBAAsB,EACtB,uDAAuD,CACxD,CAAC;IAEF,MAAM,UAAU,GACd,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;oBAC3B,0DAA0D;oBAC1D,gDAAgD;oBAChD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;oBACxC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC7B,KAAK,MAAM,CAAC,IAAI,KAAK;wBAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;oBACvE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBACpE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;gBACD,sEAAsE;gBACtE,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE;wBAChD,OAAO,EAAE,WAAW;wBACpB,QAAQ,EAAE,IAAI,CAAC,YAAY;qBAC5B,CAAC,CAAC;oBACH,IAAI,OAAO;wBAAE,OAAO;gBACtB,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;gBAC1D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IAEL,mEAAmE;IACnE,4DAA4D;IAC5D,0DAA0D;IAC1D,WAAW,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7C,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,+DAA+D;YAC/D,kEAAkE;YAClE,4DAA4D;YAC5D,iEAAiE;YACjE,oEAAoE;YACpE,kEAAkE;YAClE,iCAAiC;YACjC,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrE,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBACH,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC;wBACjE,mCAAmC;wBACnC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,GAAG,EAAE;gBAChE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GACP,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO;QACpC,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE;QACpD,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAE9D,OAAO;QACL,GAAG;QACH,UAAU;QACV,GAAG;QACH,WAAW;QACX,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,KAAK,UAAU,gBAAgB,CAAC,EAAa,EAAE,GAAyB,EAAE,GAAsB;IAC9F,EAAE,CAAC,UAAU,GAAG,aAAa,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,6EAA6E;IAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,IAAI,SAA2B,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,IAAI,GAAmB;QAC3B,EAAE;QACF,SAAS;QACT,gBAAgB,EAAE,IAAI,GAAG,EAAU;KACpC,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEzB,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;YAC3D,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,KAAK,GAAG,KAAK,CAAC;QACd,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrB,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAA0B,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACrB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/snapshot-worker.d.ts

@@ -0,0 +1,32 @@
+import type { RoomManager } from './room-manager.js';
+export interface SnapshotWorkerOptions {
+    roomManager: RoomManager;
+    /** Output directory; created if missing. */
+    outputDir: string;
+    /** How often to run snapshots, ms. Default 5 minutes. */
+    intervalMs?: number;
+    /** If true, also emit a per-clientID layer file alongside the composed snapshot. */
+    emitLayers?: boolean;
+    /** Override clock so tests are deterministic. */
+    now?: () => number;
+    /** If true, snapshot even rooms with zero peers (default false). */
+    includeIdle?: boolean;
+}
+export interface SnapshotResult {
+    roomId: string;
+    filePath: string;
+    byteLength: number;
+    durationMs: number;
+}
+export declare class SnapshotWorker {
+    private timer;
+    private inflight;
+    private readonly options;
+    constructor(opts: SnapshotWorkerOptions);
+    start(): void;
+    stop(): void;
+    /** Force one snapshot pass across all active rooms. Returns per-room results. */
+    runOnce(): Promise<SnapshotResult[]>;
+    private now;
+}
+//# sourceMappingURL=snapshot-worker.d.ts.map

package/dist/snapshot-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-worker.d.ts","sourceRoot":"","sources":["../src/snapshot-worker.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAA0C;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC4D;gBAExE,IAAI,EAAE,qBAAqB;IAYvC,KAAK,IAAI,IAAI;IAWb,IAAI,IAAI,IAAI;IAKZ,iFAAiF;IAC3E,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IA+B1C,OAAO,CAAC,GAAG;CAGZ"}

package/dist/snapshot-worker.js

@@ -0,0 +1,87 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Server-driven IFCX snapshot worker (spec §12.3).
+ *
+ * Periodically exports each active room's Y.Doc as an `.ifcx` file
+ * (composed state), optionally with per-user "git blame" layers. Output
+ * lives next to the durable update log so a deployment can ship its
+ * audit chain alongside its persistence.
+ *
+ * Runs as a self-contained class — instantiate with a `RoomManager`
+ * handle and call `start()`. The worker is stateless across restarts;
+ * the room itself is the source of truth.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { snapshotToIfcx, serializeIfcx } from '@ifc-lite/collab';
+export class SnapshotWorker {
+    timer = null;
+    inflight = null;
+    options;
+    constructor(opts) {
+        this.options = {
+            roomManager: opts.roomManager,
+            outputDir: opts.outputDir,
+            intervalMs: opts.intervalMs ?? 5 * 60_000,
+            emitLayers: opts.emitLayers ?? false,
+            now: opts.now,
+            includeIdle: opts.includeIdle,
+        };
+        fs.mkdirSync(this.options.outputDir, { recursive: true });
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.runOnce().catch((err) => {
+                // eslint-disable-next-line no-console
+                console.error('[snapshot-worker] run failed:', err);
+            });
+        }, this.options.intervalMs);
+        this.timer.unref?.();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** Force one snapshot pass across all active rooms. Returns per-room results. */
+    async runOnce() {
+        if (this.inflight)
+            return this.inflight;
+        this.inflight = (async () => {
+            const stats = await this.options.roomManager.stats();
+            const targets = stats.filter((s) => s.peerCount > 0 || this.options.includeIdle);
+            const results = [];
+            for (const t of targets) {
+                const room = await this.options.roomManager.getOrCreate(t.roomId);
+                const start = this.now();
+                const ifcx = snapshotToIfcx(room.doc);
+                const content = serializeIfcx(ifcx, false);
+                const stamp = new Date(this.now()).toISOString().replace(/[:.]/g, '-');
+                const safe = t.roomId.replace(/[^a-zA-Z0-9._-]/g, '_');
+                const filePath = path.join(this.options.outputDir, `${safe}.${stamp}.ifcx`);
+                await fs.promises.writeFile(filePath, content);
+                results.push({
+                    roomId: t.roomId,
+                    filePath,
+                    byteLength: Buffer.byteLength(content, 'utf8'),
+                    durationMs: this.now() - start,
+                });
+            }
+            return results;
+        })();
+        try {
+            return await this.inflight;
+        }
+        finally {
+            this.inflight = null;
+        }
+    }
+    now() {
+        return this.options.now ? this.options.now() : Date.now();
+    }
+}
+//# sourceMappingURL=snapshot-worker.js.map

package/dist/snapshot-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-worker.js","sourceRoot":"","sources":["../src/snapshot-worker.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAwBjE,MAAM,OAAO,cAAc;IACjB,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAqC,IAAI,CAAC;IACzC,OAAO,CAC4D;IAEpF,YAAY,IAA2B;QACrC,IAAI,CAAC,OAAO,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,MAAM;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;QACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChC,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACjF,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC;gBAC5E,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ;oBACR,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;oBAC9C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,CAAC;CACF"}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@ifc-lite/collab-server",
+  "version": "0.2.0",
+  "description": "Reference websocket sync server for @ifc-lite/collab",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "ifc-lite-collab-server": "./dist/bin.js"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./room-manager": {
+      "import": "./dist/room-manager.js",
+      "types": "./dist/room-manager.d.ts"
+    }
+  },
+  "dependencies": {
+    "lib0": "^0.2.99",
+    "ws": "^8.18.0",
+    "y-protocols": "^1.0.6",
+    "yjs": "^13.6.20",
+    "@ifc-lite/collab": "^0.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/ws": "^8.5.13",
+    "typescript": "^5.3.0",
+    "vitest": "^1.6.0",
+    "y-websocket": "^2.0.4"
+  },
+  "license": "MPL-2.0",
+  "author": "Louis True",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/louistrue/ifc-lite.git",
+    "directory": "packages/collab-server"
+  },
+  "homepage": "https://louistrue.github.io/ifc-lite/",
+  "bugs": "https://github.com/louistrue/ifc-lite/issues",
+  "keywords": [
+    "ifc",
+    "ifcx",
+    "bim",
+    "collaboration",
+    "crdt",
+    "yjs",
+    "websocket"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "pnpm exec tsc",
+    "dev": "pnpm exec tsc --watch",
+    "start": "node ./dist/bin.js",
+    "test": "vitest run"
+  }
+}