@ifc-lite/collab 0.2.0

package/dist/perf/latency.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Network-latency simulation (spec §15 §18).
+ *
+ * Helpers for benchmarking how a CRDT pipeline behaves under delay,
+ * jitter, packet loss, or partition. The simulator wraps a pair of
+ * Y.Docs with a queued, time-bucketed update channel — call
+ * `flushUntil(t)` to advance time and dispatch any updates whose
+ * delivery time has arrived.
+ *
+ * This is benchmark-only: production sync goes through providers.
+ */
+import * as Y from 'yjs';
+export interface LatencyParams {
+    /** Mean one-way latency in ms (default 50). */
+    baseMs?: number;
+    /** Random jitter ±jitterMs added to each delivery (default 0). */
+    jitterMs?: number;
+    /** Probability [0..1] that a delivery is dropped (default 0). */
+    dropRate?: number;
+    /** Override the random source (default Math.random). */
+    random?: () => number;
+}
+export interface LatencyChannel {
+    /** Inject the docs' initial state vectors into each other. */
+    initialSync(): void;
+    /** Advance simulated time and deliver any updates due at-or-before `t`. */
+    flushUntil(t: number): void;
+    /** Total updates that have been delivered. */
+    delivered(): number;
+    /** Total updates that were dropped. */
+    dropped(): number;
+}
+/**
+ * Build a one-way-symmetric latency channel between `a` and `b`. Both
+ * docs subscribe to each other's `update` events; outbound updates are
+ * queued with simulated arrival time and dispatched on `flushUntil`.
+ */
+export declare function createLatencyChannel(a: Y.Doc, b: Y.Doc, params?: LatencyParams): LatencyChannel;
+//# sourceMappingURL=latency.d.ts.map

package/dist/perf/latency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"latency.d.ts","sourceRoot":"","sources":["../../src/perf/latency.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAQD,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,WAAW,IAAI,IAAI,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,8CAA8C;IAC9C,SAAS,IAAI,MAAM,CAAC;IACpB,uCAAuC;IACvC,OAAO,IAAI,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,CAAC,CAAC,GAAG,EACR,CAAC,EAAE,CAAC,CAAC,GAAG,EACR,MAAM,GAAE,aAAkB,GACzB,cAAc,CAyDhB"}

package/dist/perf/latency.js

@@ -0,0 +1,79 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Network-latency simulation (spec §15 §18).
+ *
+ * Helpers for benchmarking how a CRDT pipeline behaves under delay,
+ * jitter, packet loss, or partition. The simulator wraps a pair of
+ * Y.Docs with a queued, time-bucketed update channel — call
+ * `flushUntil(t)` to advance time and dispatch any updates whose
+ * delivery time has arrived.
+ *
+ * This is benchmark-only: production sync goes through providers.
+ */
+import * as Y from 'yjs';
+/**
+ * Build a one-way-symmetric latency channel between `a` and `b`. Both
+ * docs subscribe to each other's `update` events; outbound updates are
+ * queued with simulated arrival time and dispatched on `flushUntil`.
+ */
+export function createLatencyChannel(a, b, params = {}) {
+    const baseMs = params.baseMs ?? 50;
+    const jitterMs = params.jitterMs ?? 0;
+    const dropRate = params.dropRate ?? 0;
+    const rand = params.random ?? Math.random;
+    let now = 0;
+    let delivered = 0;
+    let dropped = 0;
+    const queue = [];
+    const arrivalTime = () => {
+        const jitter = jitterMs > 0 ? (rand() * 2 - 1) * jitterMs : 0;
+        return now + baseMs + jitter;
+    };
+    const onA = (update, origin) => {
+        if (origin === 'sim')
+            return;
+        if (rand() < dropRate) {
+            dropped += 1;
+            return;
+        }
+        queue.push({ toClient: 'b', arrivesAt: arrivalTime(), payload: update });
+    };
+    const onB = (update, origin) => {
+        if (origin === 'sim')
+            return;
+        if (rand() < dropRate) {
+            dropped += 1;
+            return;
+        }
+        queue.push({ toClient: 'a', arrivesAt: arrivalTime(), payload: update });
+    };
+    a.on('update', onA);
+    b.on('update', onB);
+    return {
+        initialSync() {
+            const aSv = Y.encodeStateVector(a);
+            const bSv = Y.encodeStateVector(b);
+            Y.applyUpdate(b, Y.encodeStateAsUpdate(a, bSv), 'sim');
+            Y.applyUpdate(a, Y.encodeStateAsUpdate(b, aSv), 'sim');
+        },
+        flushUntil(t) {
+            now = t;
+            // Deliver in time order. We sort once per call rather than
+            // maintaining a heap — tests typically have a few hundred entries.
+            queue.sort((x, y) => x.arrivesAt - y.arrivesAt);
+            while (queue.length > 0 && queue[0].arrivesAt <= now) {
+                const item = queue.shift();
+                if (item.toClient === 'a')
+                    Y.applyUpdate(a, item.payload, 'sim');
+                else
+                    Y.applyUpdate(b, item.payload, 'sim');
+                delivered += 1;
+            }
+        },
+        delivered: () => delivered,
+        dropped: () => dropped,
+    };
+}
+//# sourceMappingURL=latency.js.map

package/dist/perf/latency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"latency.js","sourceRoot":"","sources":["../../src/perf/latency.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAE/D;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AA8BzB;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,CAAQ,EACR,CAAQ,EACR,SAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAE1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAc,EAAE,CAAC;IAE5B,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,MAAM,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,MAAkB,EAAE,MAAe,EAAE,EAAE;QAClD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO;QAC7B,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,MAAkB,EAAE,MAAe,EAAE,EAAE;QAClD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO;QAC7B,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,WAAW;YACT,MAAM,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;QACD,UAAU,CAAC,CAAC;YACV,GAAG,GAAG,CAAC,CAAC;YACR,2DAA2D;YAC3D,mEAAmE;YACnE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;gBAC5B,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG;oBAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;;oBAC5D,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC3C,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;QAC1B,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC"}

package/dist/privacy.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Privacy / GDPR helpers (spec §14).
+ *
+ * `exportAndLeave(session)` runs the user's "give me a copy of
+ * everything and forget me" flow:
+ *   1. Snapshot the current Y.Doc to IFCX.
+ *   2. Clear our awareness state so no stale presence lingers.
+ *   3. Dispose the session (closes provider, undo manager, conflict
+ *      detector, presence, IDB persistence).
+ *
+ * The actual server-side hard-delete (room teardown, blob removal,
+ * audit-log redaction) is the deployer's responsibility because the
+ * client doesn't have that capability — but we expose hooks so apps
+ * can trigger it from inside the same call.
+ */
+import type { IfcxFile } from '@ifc-lite/ifcx';
+import type { CollabSession } from './session.js';
+import { type SnapshotOptions } from './snapshot/to-ifcx.js';
+export interface ExportAndLeaveOptions {
+    /** Forwarded to `snapshotToIfcx`. */
+    snapshot?: SnapshotOptions;
+    /**
+     * Optional remote hard-delete trigger. The promise's resolve value
+     * is bubbled up in `serverDeletion`.
+     */
+    serverDelete?: () => Promise<void>;
+}
+export interface ExportAndLeaveResult {
+    ifcx: IfcxFile;
+    serverDeletion: 'skipped' | 'ok' | 'failed';
+    serverDeletionError?: unknown;
+}
+export declare function exportAndLeave(session: CollabSession, options?: ExportAndLeaveOptions): Promise<ExportAndLeaveResult>;
+/**
+ * Strip user-attributable metadata from a Y.Doc: per-entity `meta` keys
+ * `createdBy` / `lastEditedBy` are blanked. Useful for "anonymise this
+ * project" exports. Returns the number of entities touched.
+ *
+ * Note: this does NOT touch the underlying CRDT struct authorship
+ * (clientID is intrinsic to Yjs's merge semantics and removing it
+ * would corrupt the doc). For a proper anonymised export, snapshot
+ * to IFCX first — the IFCX serialiser drops clientIDs by design.
+ */
+export declare function redactAuthorMeta(session: CollabSession): number;
+//# sourceMappingURL=privacy.d.ts.map

package/dist/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../src/privacy.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,SAAS,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC5C,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA4B/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAqB/D"}

package/dist/privacy.js

@@ -0,0 +1,66 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+import { snapshotToIfcx } from './snapshot/to-ifcx.js';
+export async function exportAndLeave(session, options = {}) {
+    const ifcx = snapshotToIfcx(session.doc, options.snapshot);
+    // Clear our presence so peers see us leave cleanly.
+    try {
+        session.presence.setStatus('offline');
+        session.presence.patch({ selection: [], cursor3d: undefined, cursor2d: undefined });
+    }
+    catch (err) {
+        // Presence channel may already be torn down by the time we get
+        // here; non-fatal.
+        void err;
+    }
+    let serverDeletion = 'skipped';
+    let serverDeletionError;
+    if (options.serverDelete) {
+        try {
+            await options.serverDelete();
+            serverDeletion = 'ok';
+        }
+        catch (err) {
+            serverDeletion = 'failed';
+            serverDeletionError = err;
+        }
+    }
+    session.dispose();
+    return { ifcx, serverDeletion, serverDeletionError };
+}
+/**
+ * Strip user-attributable metadata from a Y.Doc: per-entity `meta` keys
+ * `createdBy` / `lastEditedBy` are blanked. Useful for "anonymise this
+ * project" exports. Returns the number of entities touched.
+ *
+ * Note: this does NOT touch the underlying CRDT struct authorship
+ * (clientID is intrinsic to Yjs's merge semantics and removing it
+ * would corrupt the doc). For a proper anonymised export, snapshot
+ * to IFCX first — the IFCX serialiser drops clientIDs by design.
+ */
+export function redactAuthorMeta(session) {
+    const ents = session.doc.getMap('entities');
+    let touched = 0;
+    session.doc.transact(() => {
+        ents.forEach((entUntyped) => {
+            const entity = entUntyped;
+            const meta = entity.get('meta');
+            if (!meta)
+                return;
+            let changed = false;
+            if (meta.has('createdBy')) {
+                meta.set('createdBy', null);
+                changed = true;
+            }
+            if (meta.has('lastEditedBy')) {
+                meta.set('lastEditedBy', null);
+                changed = true;
+            }
+            if (changed)
+                touched += 1;
+        });
+    });
+    return touched;
+}
+//# sourceMappingURL=privacy.js.map

package/dist/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../src/privacy.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAoB/D,OAAO,EAAE,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAkB7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,UAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3D,oDAAoD;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,mBAAmB;QACnB,KAAK,GAAG,CAAC;IACX,CAAC;IAED,IAAI,cAAc,GAA2C,SAAS,CAAC;IACvE,IAAI,mBAA4B,CAAC;IACjC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,GAAG,QAAQ,CAAC;YAC1B,mBAAmB,GAAG,GAAG,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,CAAC;IAElB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAsB;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE;QACxB,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,UAAwC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAA2C,CAAC;YAC1E,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC5B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAC/B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/providers/indexeddb.d.ts

@@ -0,0 +1,37 @@
+/**
+ * IndexedDB provider — local-first persistence per spec §12.1.
+ *
+ * Always-on: every CollabSession mirrors its Y.Doc to IndexedDB on each
+ * update. Reload restores last state instantly; sync resumes from saved
+ * state vector.
+ *
+ * Loaded lazily so non-browser environments (Node tests, server) don't
+ * trip over the missing `indexedDB` global.
+ */
+import type * as Y from 'yjs';
+export interface IndexedDbProvider {
+    readonly roomId: string;
+    /** Resolves once the local state has been loaded into the Y.Doc. */
+    readonly whenSynced: Promise<void>;
+    destroy(): void;
+    /** Wipe persisted state for this room. */
+    clearData(): Promise<void>;
+}
+export interface IndexedDbOptions {
+    /** Override the IDB database name (defaults to `roomId`). */
+    dbName?: string;
+}
+/**
+ * Create an IndexedDB provider for `doc` keyed by `roomId`.
+ *
+ * Throws if `indexedDB` is unavailable. In Node tests, prefer to omit the
+ * provider entirely or point the session at a `MemoryProvider`.
+ */
+export declare function createIndexedDbProvider(doc: Y.Doc, roomId: string, options?: IndexedDbOptions): Promise<IndexedDbProvider>;
+/**
+ * In-memory provider. Useful for tests and ephemeral rooms. Functionally
+ * a no-op; included so callers can ask for `provider: 'memory'` and still
+ * get a `whenSynced` promise.
+ */
+export declare function createMemoryProvider(doc: Y.Doc, roomId: string): IndexedDbProvider;
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/providers/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../../src/providers/indexeddb.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,CAAC;AAE9B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,IAAI,CAAC;IAChB,0CAA0C;IAC1C,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,CAAC,CAAC,GAAG,EACV,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAwB5B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAQlF"}

package/dist/providers/indexeddb.js

@@ -0,0 +1,45 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Create an IndexedDB provider for `doc` keyed by `roomId`.
+ *
+ * Throws if `indexedDB` is unavailable. In Node tests, prefer to omit the
+ * provider entirely or point the session at a `MemoryProvider`.
+ */
+export async function createIndexedDbProvider(doc, roomId, options = {}) {
+    if (typeof indexedDB === 'undefined') {
+        throw new Error('@ifc-lite/collab: indexedDB is not available; createIndexedDbProvider requires a browser environment');
+    }
+    // Dynamic import keeps `y-indexeddb` out of Node bundle paths.
+    const { IndexeddbPersistence } = await import('y-indexeddb');
+    const persistence = new IndexeddbPersistence(options.dbName ?? roomId, doc);
+    const whenSynced = new Promise((resolve) => {
+        persistence.once('synced', () => resolve());
+    });
+    return {
+        roomId,
+        whenSynced,
+        destroy: () => {
+            persistence.destroy();
+        },
+        clearData: async () => {
+            await persistence.clearData();
+        },
+    };
+}
+/**
+ * In-memory provider. Useful for tests and ephemeral rooms. Functionally
+ * a no-op; included so callers can ask for `provider: 'memory'` and still
+ * get a `whenSynced` promise.
+ */
+export function createMemoryProvider(doc, roomId) {
+    void doc;
+    return {
+        roomId,
+        whenSynced: Promise.resolve(),
+        destroy: () => { },
+        clearData: async () => { },
+    };
+}
+//# sourceMappingURL=indexeddb.js.map

package/dist/providers/indexeddb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.js","sourceRoot":"","sources":["../../src/providers/indexeddb.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AA6B/D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAU,EACV,MAAc,EACd,UAA4B,EAAE;IAE9B,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;IACJ,CAAC;IACD,+DAA+D;IAC/D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC/C,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,UAAU;QACV,OAAO,EAAE,GAAG,EAAE;YACZ,WAAW,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAU,EAAE,MAAc;IAC7D,KAAK,GAAG,CAAC;IACT,OAAO;QACL,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/providers/webrtc.d.ts

@@ -0,0 +1,40 @@
+/**
+ * WebRTC provider (spec §8.1).
+ *
+ * `y-webrtc` lets two peers sync directly without going through a
+ * central server — useful for offline-first / P2P use cases. This
+ * module wraps it so consumers don't import `y-webrtc` directly and
+ * the API matches our other providers.
+ */
+import type * as Y from 'yjs';
+import type { Awareness } from 'y-protocols/awareness';
+export type WebRtcStatus = 'connecting' | 'connected' | 'disconnected';
+export interface WebRtcProviderOptions {
+    /** ICE / signaling URLs (default y-webrtc's public list). */
+    signaling?: string[];
+    /** Optional shared password — peers must agree. */
+    password?: string;
+    /** Awareness instance to share over the same transport. */
+    awareness?: Awareness;
+    /** Max simultaneous WebRTC connections. */
+    maxConns?: number;
+    /** Keep BroadcastChannel intra-browser sync (default true). */
+    filterBcConns?: boolean;
+    /** Connect on construction (default true). */
+    connect?: boolean;
+}
+export interface WebRtcProvider {
+    readonly roomId: string;
+    readonly status: WebRtcStatus;
+    onStatus(listener: (s: WebRtcStatus) => void): () => void;
+    whenSynced: Promise<void>;
+    connect(): void;
+    disconnect(): void;
+    destroy(): void;
+}
+/**
+ * Build a WebRTC provider. `y-webrtc` is loaded lazily so consumers
+ * who don't use this provider don't pay its bundle cost.
+ */
+export declare function createWebRtcProvider(doc: Y.Doc, roomId: string, options?: WebRtcProviderOptions): Promise<WebRtcProvider>;
+//# sourceMappingURL=webrtc.d.ts.map

package/dist/providers/webrtc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtc.d.ts","sourceRoot":"","sources":["../../src/providers/webrtc.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AAEH,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC1D,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,IAAI,CAAC;IACnB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,CAAC,CAAC,GAAG,EACV,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAqFzB"}

package/dist/providers/webrtc.js

@@ -0,0 +1,81 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Build a WebRTC provider. `y-webrtc` is loaded lazily so consumers
+ * who don't use this provider don't pay its bundle cost.
+ */
+export async function createWebRtcProvider(doc, roomId, options = {}) {
+    const mod = await import('y-webrtc').catch(() => null);
+    if (!mod) {
+        throw new Error('@ifc-lite/collab: y-webrtc is not installed. Run `pnpm add y-webrtc` and retry.');
+    }
+    const { WebrtcProvider } = mod;
+    // Honor `connect: false` end-to-end. Previously the option was only
+    // reflected in the local status state, not passed to WebrtcProvider,
+    // so the transport still auto-connected and violated the API contract.
+    const autoConnect = options.connect !== false;
+    const provider = new WebrtcProvider(roomId, doc, {
+        signaling: options.signaling,
+        password: options.password,
+        awareness: options.awareness,
+        maxConns: options.maxConns ?? 20,
+        filterBcConns: options.filterBcConns ?? true,
+        connect: autoConnect,
+    });
+    // Track whether the consumer has manually disconnected so transient
+    // y-webrtc events (e.g. a `peers` update with count=0) can't flip us
+    // back to `connecting`. Manual disconnect stays disconnected until
+    // `connect()` is called again.
+    let manuallyDisconnected = !autoConnect;
+    let status = autoConnect ? 'connecting' : 'disconnected';
+    const listeners = new Set();
+    const setStatus = (s) => {
+        if (s === status)
+            return;
+        status = s;
+        listeners.forEach((l) => l(s));
+    };
+    // y-webrtc emits 'peers' events when connections come up / go down.
+    provider.on('peers', (info) => {
+        if (manuallyDisconnected)
+            return;
+        const i = info;
+        const total = (i.webrtcPeers?.length ?? 0) + (i.bcPeers?.length ?? 0);
+        setStatus(total > 0 ? 'connected' : 'connecting');
+    });
+    provider.on('synced', () => {
+        if (manuallyDisconnected)
+            return;
+        setStatus('connected');
+    });
+    const whenSynced = new Promise((resolve) => {
+        provider.once('synced', () => resolve());
+    });
+    return {
+        roomId,
+        get status() {
+            return status;
+        },
+        onStatus(listener) {
+            listeners.add(listener);
+            listener(status);
+            return () => listeners.delete(listener);
+        },
+        whenSynced,
+        connect() {
+            manuallyDisconnected = false;
+            provider.connect();
+            setStatus('connecting');
+        },
+        disconnect() {
+            manuallyDisconnected = true;
+            provider.disconnect();
+            setStatus('disconnected');
+        },
+        destroy() {
+            provider.destroy();
+        },
+    };
+}
+//# sourceMappingURL=webrtc.js.map

package/dist/providers/webrtc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtc.js","sourceRoot":"","sources":["../../src/providers/webrtc.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAyC/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAU,EACV,MAAc,EACd,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAoB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,cAAc,EAAE,GAAG,GAA8D,CAAC;IAE1F,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;QAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,OAAO,EAAE,WAAW;KACZ,CAAC,CAAC;IAEZ,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,+BAA+B;IAC/B,IAAI,oBAAoB,GAAG,CAAC,WAAW,CAAC;IACxC,IAAI,MAAM,GAAiB,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,MAAM,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO;QACzB,MAAM,GAAG,CAAC,CAAC;QACX,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,oEAAoE;IACnE,QAAyF,CAAC,EAAE,CAC3F,OAAO,EACP,CAAC,IAAI,EAAE,EAAE;QACP,IAAI,oBAAoB;YAAE,OAAO;QACjC,MAAM,CAAC,GAAG,IAAsD,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACtE,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;IACD,QAAyF,CAAC,EAAE,CAC3F,QAAQ,EACR,GAAG,EAAE;QACH,IAAI,oBAAoB;YAAE,OAAO;QACjC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC,CACF,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC9C,QAAyE,CAAC,IAAI,CAC7E,QAAQ,EACR,GAAG,EAAE,CAAC,OAAO,EAAE,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,QAAQ,CAAC,QAAQ;YACf,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,UAAU;QACV,OAAO;YACL,oBAAoB,GAAG,KAAK,CAAC;YAC5B,QAA+C,CAAC,OAAO,EAAE,CAAC;YAC3D,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;QACD,UAAU;YACR,oBAAoB,GAAG,IAAI,CAAC;YAC3B,QAAkD,CAAC,UAAU,EAAE,CAAC;YACjE,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO;YACJ,QAA+C,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/websocket.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Websocket provider — wraps `y-websocket` with a typed status observable
+ * and reconnect/backoff that we control.
+ *
+ * Spec §8.1.
+ */
+import type * as Y from 'yjs';
+import type { Awareness } from 'y-protocols/awareness';
+export type WebSocketStatus = 'connecting' | 'connected' | 'offline' | 'error';
+export interface WebSocketProviderOptions {
+    /** Custom WebSocket implementation (e.g. `ws` in Node tests). */
+    WebSocketPolyfill?: unknown;
+    /** Bearer token attached as `?token=` for the server to validate. */
+    token?: string;
+    /** Awareness instance to share over the same transport. */
+    awareness?: Awareness;
+    /** Disable connect on construction; call `connect()` explicitly. */
+    connect?: boolean;
+    /** Extra params appended to the connect URL. */
+    params?: Record<string, string>;
+    /**
+     * Disable the BroadcastChannel intra-browser shortcut. When two tabs
+     * open the same room in the same browser, y-websocket normally syncs
+     * them via BroadcastChannel and never round-trips through the server.
+     * Set true to force every edit through the websocket — useful for
+     * demos / debugging server-side flows.
+     */
+    disableBc?: boolean;
+}
+export interface WebSocketProvider {
+    readonly roomId: string;
+    readonly status: WebSocketStatus;
+    onStatus(listener: (status: WebSocketStatus) => void): () => void;
+    /** Resolves on the first successful sync. */
+    whenSynced: Promise<void>;
+    connect(): void;
+    disconnect(): void;
+    destroy(): void;
+}
+/**
+ * Create a websocket provider. Returns a thin wrapper so consumers don't
+ * import `y-websocket` directly and can swap providers transparently.
+ */
+export declare function createWebSocketProvider(doc: Y.Doc, roomId: string, serverUrl: string, options?: WebSocketProviderOptions): Promise<WebSocketProvider>;
+//# sourceMappingURL=websocket.d.ts.map

package/dist/providers/websocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/providers/websocket.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AAEH,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAE/E,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAClE,6CAA6C;IAC7C,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,IAAI,CAAC;IACnB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,CAAC,CAAC,GAAG,EACV,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAoD5B"}

package/dist/providers/websocket.js

@@ -0,0 +1,56 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+/**
+ * Create a websocket provider. Returns a thin wrapper so consumers don't
+ * import `y-websocket` directly and can swap providers transparently.
+ */
+export async function createWebSocketProvider(doc, roomId, serverUrl, options = {}) {
+    const { WebsocketProvider } = await import('y-websocket');
+    const params = { ...(options.params ?? {}) };
+    if (options.token)
+        params.token = options.token;
+    const provider = new WebsocketProvider(serverUrl, roomId, doc, {
+        WebSocketPolyfill: options.WebSocketPolyfill,
+        awareness: options.awareness,
+        connect: options.connect ?? true,
+        disableBc: options.disableBc === true,
+        params,
+    });
+    let status = 'connecting';
+    const listeners = new Set();
+    const setStatus = (s) => {
+        if (status === s)
+            return;
+        status = s;
+        listeners.forEach((l) => l(s));
+    };
+    provider.on('status', (event) => {
+        setStatus(event.status === 'connected'
+            ? 'connected'
+            : event.status === 'connecting'
+                ? 'connecting'
+                : 'offline');
+    });
+    provider.on('connection-error', () => setStatus('error'));
+    provider.on('connection-close', () => setStatus('offline'));
+    const whenSynced = new Promise((resolve) => {
+        if (provider.synced)
+            return resolve();
+        provider.once('sync', () => resolve());
+    });
+    return {
+        roomId,
+        get status() { return status; },
+        onStatus(listener) {
+            listeners.add(listener);
+            listener(status);
+            return () => listeners.delete(listener);
+        },
+        whenSynced,
+        connect: () => provider.connect(),
+        disconnect: () => provider.disconnect(),
+        destroy: () => provider.destroy(),
+    };
+}
+//# sourceMappingURL=websocket.js.map

package/dist/providers/websocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.js","sourceRoot":"","sources":["../../src/providers/websocket.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AA8C/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAU,EACV,MAAc,EACd,SAAiB,EACjB,UAAoC,EAAE;IAEtC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAE1D,MAAM,MAAM,GAA2B,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAEhD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE;QAC7D,iBAAiB,EAAE,OAAO,CAAC,iBAA0B;QACrD,SAAS,EAAE,OAAO,CAAC,SAAkB;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI;QACrC,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,MAAM,GAAoB,YAAY,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,CAAkB,EAAE,EAAE;QACvC,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO;QACzB,MAAM,GAAG,CAAC,CAAC;QACX,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,KAA8D,EAAE,EAAE;QACvF,SAAS,CACP,KAAK,CAAC,MAAM,KAAK,WAAW;YAC1B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY;gBAC7B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,SAAS,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC/C,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,OAAO,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;QAC/B,QAAQ,CAAC,QAAQ;YACf,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,UAAU;QACV,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;QACjC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE;QACvC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;KAClC,CAAC;AACJ,CAAC"}

package/dist/security/e2e.d.ts

@@ -0,0 +1,54 @@
+export interface RoomKey {
+    /** Key version — 1 for AES-GCM-256, monotonic for rotations. */
+    version: number;
+    /** The opaque WebCrypto handle. */
+    key: CryptoKey;
+    /** Created-at timestamp in ms. */
+    createdAt: number;
+}
+export interface DeriveOptions {
+    /** PBKDF2 iterations. Default 200_000. */
+    iterations?: number;
+    /** Hash. Default 'SHA-256'. */
+    hash?: 'SHA-256' | 'SHA-384' | 'SHA-512';
+}
+/**
+ * Derive a room key from a shared password + salt. Salt is typically
+ * the room ID hashed; never reuse the same `(password, salt)` pair
+ * across rooms.
+ */
+export declare function deriveRoomKey(password: string, salt: Uint8Array, options?: DeriveOptions): Promise<RoomKey>;
+/** Generate a random AES-GCM-256 room key (no password). */
+export declare function generateRoomKey(): Promise<RoomKey>;
+/** Export the raw key bytes so apps can persist or rewrap them. */
+export declare function exportRoomKey(key: RoomKey): Promise<{
+    version: number;
+    bytes: Uint8Array;
+}>;
+/** Re-import a previously exported key. */
+export declare function importRoomKey(version: number, bytes: Uint8Array): Promise<RoomKey>;
+/** Encrypt a plaintext frame. Adds a 13-byte header (`[ver][iv]`). */
+export declare function encryptFrame(plaintext: Uint8Array, key: RoomKey): Promise<Uint8Array>;
+/**
+ * Decrypt a frame using `keys`. Tries each key in order so callers can
+ * pass `[currentKey, ...recentKeys]` to gracefully decode in-flight
+ * frames around a rotation.
+ */
+export declare function decryptFrame(frame: Uint8Array, keys: readonly RoomKey[]): Promise<Uint8Array>;
+export interface KeyRingOptions {
+    /** Keep retired keys for this long after rotation, ms. Default 30_000. */
+    gracePeriodMs?: number;
+    /** Override `Date.now`. */
+    now?: () => number;
+}
+export interface KeyRing {
+    current(): RoomKey;
+    /** Rotate: new key becomes current; previous key is retained for grace. */
+    rotate(next: RoomKey): void;
+    /** All keys — current + still-in-grace ones. Most-recent first. */
+    active(): RoomKey[];
+    /** Drop keys that are past grace. */
+    prune(): number;
+}
+export declare function createKeyRing(initial: RoomKey, options?: KeyRingOptions): KeyRing;
+//# sourceMappingURL=e2e.d.ts.map

package/dist/security/e2e.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e.d.ts","sourceRoot":"","sources":["../../src/security/e2e.ts"],"names":[],"mappings":"AAyDA,MAAM,WAAW,OAAO;IACtB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,GAAG,EAAE,SAAS,CAAC;IACf,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED,4DAA4D;AAC5D,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAOxD;AAED,mEAAmE;AACnE,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAGjG;AAED,2CAA2C;AAC3C,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,sEAAsE;AACtE,wBAAsB,YAAY,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAa3F;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAyBnG;AAMD,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,IAAI,OAAO,CAAC;IACnB,2EAA2E;IAC3E,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,mEAAmE;IACnE,MAAM,IAAI,OAAO,EAAE,CAAC;IACpB,qCAAqC;IACrC,KAAK,IAAI,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CA6BrF"}