@jacktea/pdf-viewer-server 0.1.3 → 0.1.5

package/README.md

@@ -0,0 +1,66 @@
+# @jacktea/pdf-viewer-server
+
+Jacktea PDF Viewer 的实时协作后端服务，基于 Socket.io 实现。
+
+## 简介
+
+如果你希望在你的 PDF 预览器中接入多人实时协作功能（如：实时看到别人的高亮、批注、评论拉取与同步），可以使用此 Node.js 服务。
+
+服务端主要负责多端状态同步和协同数据的分发，目前作为本地运行或自行部署的独立微服务使用。
+
+## 特性
+
+- ⚡ **实时光标与轨迹**：可以看到其他协作者的鼠标滚动和选择轨迹。
+- 🔄 **秒级同步更新**：文档中的任何批注添加与修改均会基于房间隔离实时广播。
+- 🔒 **权限拦截机制**：内置房间与用户身份概念的验证能力。
+
+## 安装
+
+你可以全局安装作为 CLI 服务启动：
+
+```bash
+npm install -g @jacktea/pdf-viewer-server
+```
+
+或者在你的自有工程中配合脚本启动：
+
+```bash
+npm install @jacktea/pdf-viewer-server
+```
+
+## 启动服务
+
+### 1. 全局 CLI 方式 (开发调试)
+
+全局安装后，在终端任意目录直接执行：
+
+```bash
+pdf-viewer-server
+```
+*(默认监听 `3000` 端口)*
+
+### 2. 作为 Node 包在你的项目中启动
+
+你可以通过 npm scripts 启动：
+
+```json
+{
+  "scripts": {
+    "start:collab": "pdf-viewer-server"
+  }
+}
+```
+
+### 3. Server 配置环境变量
+
+服务支持通过配置环境变量来控制行为，例如：
+
+```bash
+PORT=8080 CORS_ORIGINS="https://app.example.com" pdf-viewer-server
+```
+
+主要参量：
+- `PORT`: 启动端口 (默认 `3000`)
+- `CORS_ORIGINS`: 允许跨域请求的域名白名单，逗号分隔
+- `ALLOW_ALL_ORIGINS`: `true` (开启无限制 CORS，仅开发环境)
+- `REQUIRE_AUTH`: `true` | `false` (是否必须校验认证 token)

package/dist/server.js

@@ -1,928 +1,2 @@
 #!/usr/bin/env node
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const socket_io_1 = require("socket.io");
-const http_1 = require("http");
-// ============================================================================
-// Configuration
-// ============================================================================
-/**
- * Server configuration from environment variables
- */
-const config = {
-    port: process.env.PORT ? parseInt(process.env.PORT, 10) : 3000,
-    /**
-     * CORS allowed origins - comma-separated list or "*" for development only
-     * Example: "https://example.com,https://app.example.com"
-     */
-    corsOrigins: process.env.CORS_ORIGINS || "http://localhost:5173",
-    /**
-     * Whether to allow any origin (development mode only)
-     * WARNING: Do not enable in production!
-     */
-    allowAllOrigins: process.env.ALLOW_ALL_ORIGINS === "true",
-    /**
-     * Room cleanup timeout in milliseconds (default: 5 minutes)
-     */
-    roomCleanupTimeout: parseInt(process.env.ROOM_CLEANUP_TIMEOUT || "300000", 10),
-    /**
-     * Whether websocket collaboration requires authentication token.
-     */
-    requireAuth: process.env.REQUIRE_AUTH === "true",
-    /**
-     * Default role when authentication is not required and no token role is resolved.
-     * Allowed values: "user" | "viewer". Falls back to "user".
-     */
-    defaultRole: getDefaultRole(process.env.DEFAULT_USER_ROLE),
-    /**
-     * Token-to-role mapping. Format:
-     * COLLAB_AUTH_TOKENS="tokenA:admin,tokenB:user,tokenC:viewer"
-     */
-    authTokenRoles: parseAuthTokenRoles(process.env.COLLAB_AUTH_TOKENS || ""),
-};
-function parseUserRole(input) {
-    if (input === "admin" || input === "user" || input === "viewer") {
-        return input;
-    }
-    return undefined;
-}
-function getDefaultRole(input) {
-    const parsed = parseUserRole(input);
-    if (parsed === "viewer")
-        return "viewer";
-    return "user";
-}
-function parseAuthTokenRoles(raw) {
-    const entries = raw
-        .split(",")
-        .map((entry) => entry.trim())
-        .filter(Boolean);
-    const mapping = new Map();
-    for (const entry of entries) {
-        const separatorIndex = entry.indexOf(":");
-        if (separatorIndex <= 0)
-            continue;
-        const token = entry.slice(0, separatorIndex).trim();
-        const role = parseUserRole(entry.slice(separatorIndex + 1).trim());
-        if (!token || !role)
-            continue;
-        mapping.set(token, role);
-    }
-    return mapping;
-}
-function resolveRoleForConnection(token) {
-    const tokenRole = token ? config.authTokenRoles.get(token) : undefined;
-    if (config.requireAuth && !tokenRole) {
-        return null;
-    }
-    return tokenRole ?? config.defaultRole;
-}
-function readHandshakeTokenValue(value) {
-    if (typeof value === "string" && value.trim()) {
-        return value;
-    }
-    if (Array.isArray(value)) {
-        for (const entry of value) {
-            if (typeof entry === "string" && entry.trim()) {
-                return entry;
-            }
-        }
-    }
-    return undefined;
-}
-function getHandshakeAuthToken(socket) {
-    const queryToken = readHandshakeTokenValue(socket.handshake.query.authToken);
-    if (queryToken)
-        return queryToken;
-    return readHandshakeTokenValue(socket.handshake.auth?.authToken);
-}
-/**
- * Parse CORS origins configuration
- */
-function getCorsOrigins() {
-    if (config.allowAllOrigins) {
-        console.warn("[Security Warning] ALLOW_ALL_ORIGINS is enabled. Do not use in production!");
-        return "*";
-    }
-    const origins = config.corsOrigins.split(",").map(o => o.trim()).filter(Boolean);
-    return origins.length === 1 ? origins[0] : origins;
-}
-const httpServer = (0, http_1.createServer)();
-const io = new socket_io_1.Server(httpServer, {
-    cors: {
-        origin: getCorsOrigins(),
-        methods: ["GET", "POST"],
-        credentials: true,
-    },
-    // Heartbeat configuration for connection health detection
-    pingInterval: 25000, // Send ping every 25 seconds
-    pingTimeout: 20000, // Wait 20 seconds for pong response
-});
-// ============================================================================
-// State Management
-// ============================================================================
-// In-memory store (consider Redis for production)
-const rooms = new Map();
-// Room cleanup timers
-const roomCleanupTimers = new Map();
-/**
- * Get or create a room
- */
-function getOrCreateRoom(documentId) {
-    let room = rooms.get(documentId);
-    if (!room) {
-        room = {
-            annotations: [],
-            comments: [],
-            users: [],
-            mode: "normal",
-            createdAt: Date.now(),
-            lastActivityAt: Date.now(),
-        };
-        rooms.set(documentId, room);
-    }
-    return room;
-}
-/**
- * Update room activity timestamp
- */
-function touchRoom(documentId) {
-    const room = rooms.get(documentId);
-    if (room) {
-        room.lastActivityAt = Date.now();
-    }
-}
-/**
- * Schedule room cleanup when empty
- */
-function scheduleRoomCleanup(documentId) {
-    // Clear existing timer
-    const existingTimer = roomCleanupTimers.get(documentId);
-    if (existingTimer) {
-        clearTimeout(existingTimer);
-    }
-    // Schedule new cleanup
-    const timer = setTimeout(() => {
-        const room = rooms.get(documentId);
-        if (room && room.users.length === 0) {
-            rooms.delete(documentId);
-            roomCleanupTimers.delete(documentId);
-            console.log(`[${new Date().toISOString()}] Room ${documentId} cleaned up after inactivity`);
-        }
-    }, config.roomCleanupTimeout);
-    roomCleanupTimers.set(documentId, timer);
-}
-/**
- * Cancel scheduled room cleanup
- */
-function cancelRoomCleanup(documentId) {
-    const timer = roomCleanupTimers.get(documentId);
-    if (timer) {
-        clearTimeout(timer);
-        roomCleanupTimers.delete(documentId);
-    }
-}
-// ============================================================================
-// Permission Helpers
-// ============================================================================
-const DEFAULT_POLICY = {
-    rules: [
-        { effect: "allow", actions: "*", roles: ["admin"] },
-        {
-            effect: "allow",
-            actions: ["annotation.view", "comment.view"],
-            roles: ["viewer"],
-        },
-        {
-            effect: "allow",
-            actions: [
-                "annotation.view",
-                "annotation.create",
-                "annotation.comment.create",
-                "comment.view",
-            ],
-            roles: ["user"],
-        },
-        {
-            effect: "allow",
-            actions: ["annotation.update", "annotation.delete"],
-            roles: ["user"],
-            owner: true,
-        },
-        {
-            effect: "allow",
-            actions: [
-                "comment.update",
-                "comment.delete",
-                "comment.reply",
-                "thread.resolve",
-                "thread.reopen",
-            ],
-            roles: ["user"],
-            owner: true,
-        },
-    ],
-};
-function isViewAction(action) {
-    return action === "annotation.view" || action === "comment.view";
-}
-function actionMatches(rule, action) {
-    if (rule.actions === "*")
-        return true;
-    return rule.actions.includes(action);
-}
-function principalMatches(rule, userId, roles) {
-    const hasRoleConstraint = Array.isArray(rule.roles) && rule.roles.length > 0;
-    const hasUserConstraint = Array.isArray(rule.users) && rule.users.length > 0;
-    const roleMatched = !hasRoleConstraint || rule.roles.some((role) => roles.includes(role));
-    const userMatched = !hasUserConstraint || rule.users.includes(userId);
-    return roleMatched && userMatched;
-}
-function ownerMatches(rule, ownerId, userId) {
-    if (!rule.owner)
-        return true;
-    return Boolean(ownerId && ownerId === userId);
-}
-function evaluateRuleSet(rules, action, userId, roles, ownerId) {
-    if (!rules || rules.length === 0)
-        return undefined;
-    let hasAllow = false;
-    for (const rule of rules) {
-        if (!actionMatches(rule, action))
-            continue;
-        if (!principalMatches(rule, userId, roles))
-            continue;
-        if (!ownerMatches(rule, ownerId, userId))
-            continue;
-        if (rule.effect === "deny") {
-            return "deny";
-        }
-        hasAllow = true;
-    }
-    return hasAllow ? "allow" : undefined;
-}
-function evaluatePermission(options) {
-    const roles = [options.userRole ?? "user"];
-    if (options.previewMode && !isViewAction(options.action)) {
-        return { allowed: false, reason: "preview_mode" };
-    }
-    const resourceDecision = evaluateRuleSet(options.resourcePolicy?.rules, options.action, options.userId, roles, options.ownerId);
-    if (resourceDecision === "deny")
-        return { allowed: false, reason: "resource_explicit_deny" };
-    if (resourceDecision === "allow")
-        return { allowed: true };
-    const globalDecision = evaluateRuleSet(DEFAULT_POLICY.rules, options.action, options.userId, roles, options.ownerId);
-    if (globalDecision === "deny")
-        return { allowed: false, reason: "global_explicit_deny" };
-    if (globalDecision === "allow")
-        return { allowed: true };
-    return { allowed: false, reason: "no_matching_allow" };
-}
-function buildAnnotationCapabilities(annotation, userId, userRole, previewMode) {
-    return {
-        view: evaluatePermission({
-            action: "annotation.view",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        update: evaluatePermission({
-            action: "annotation.update",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        delete: evaluatePermission({
-            action: "annotation.delete",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        commentCreate: evaluatePermission({
-            action: "annotation.comment.create",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        resolveThread: evaluatePermission({
-            action: "thread.resolve",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        reopenThread: evaluatePermission({
-            action: "thread.reopen",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-    };
-}
-function buildCommentCapabilities(comment, annotation, userId, userRole, previewMode) {
-    const canReply = evaluatePermission({
-        action: "comment.reply",
-        userId,
-        userRole,
-        ownerId: comment.authorId,
-        resourcePolicy: comment.acl,
-        previewMode,
-    }).allowed;
-    return {
-        view: evaluatePermission({
-            action: "comment.view",
-            userId,
-            userRole,
-            ownerId: comment.authorId,
-            resourcePolicy: comment.acl,
-            previewMode,
-        }).allowed,
-        update: evaluatePermission({
-            action: "comment.update",
-            userId,
-            userRole,
-            ownerId: comment.authorId,
-            resourcePolicy: comment.acl,
-            previewMode,
-        }).allowed,
-        delete: evaluatePermission({
-            action: "comment.delete",
-            userId,
-            userRole,
-            ownerId: comment.authorId,
-            resourcePolicy: comment.acl,
-            previewMode,
-        }).allowed,
-        reply: canReply,
-    };
-}
-function buildThreadCapabilities(annotation, thread, userId, userRole, previewMode) {
-    return {
-        resolve: evaluatePermission({
-            action: "thread.resolve",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-        reopen: evaluatePermission({
-            action: "thread.reopen",
-            userId,
-            userRole,
-            ownerId: annotation.metadata.authorId,
-            resourcePolicy: annotation.metadata.acl,
-            previewMode,
-        }).allowed,
-    };
-}
-function sanitizeAnnotationPayload(input) {
-    const { capabilities: _capabilities, ...annotation } = input;
-    return {
-        ...annotation,
-        metadata: {
-            ...annotation.metadata,
-        },
-    };
-}
-function sanitizeCommentPayload(input) {
-    const { capabilities: _capabilities, ...comment } = input;
-    return {
-        ...comment,
-    };
-}
-function buildSyncPayload(room, userId, userRole) {
-    const visibleAnnotations = [];
-    for (const annotation of room.annotations) {
-        const capabilities = buildAnnotationCapabilities(annotation, userId, userRole, room.mode === "preview");
-        if (!capabilities.view) {
-            continue;
-        }
-        visibleAnnotations.push({
-            ...annotation,
-            capabilities,
-        });
-    }
-    const visibleAnnotationMap = new Map(visibleAnnotations.map((annotation) => [annotation.id, annotation]));
-    const visibleThreads = [];
-    for (const thread of room.comments) {
-        const annotation = visibleAnnotationMap.get(thread.targetAnnotationId);
-        if (!annotation)
-            continue;
-        const visibleComments = [];
-        for (const comment of thread.comments) {
-            const capabilities = buildCommentCapabilities(comment, annotation, userId, userRole, room.mode === "preview");
-            if (!capabilities.view) {
-                continue;
-            }
-            visibleComments.push({
-                ...comment,
-                capabilities,
-            });
-        }
-        visibleThreads.push({
-            ...thread,
-            comments: visibleComments,
-            capabilities: buildThreadCapabilities(annotation, thread, userId, userRole, room.mode === "preview"),
-        });
-    }
-    return {
-        annotations: visibleAnnotations,
-        comments: visibleThreads,
-        activeUsers: room.users,
-        documentMode: room.mode,
-    };
-}
-function canSetDocumentMode(userRole) {
-    return userRole === "admin";
-}
-/**
- * Validate annotation change payload
- */
-function isValidAnnotationChange(change) {
-    if (!change || typeof change !== "object")
-        return false;
-    const c = change;
-    const validTypes = ["add", "update", "remove"];
-    return typeof c.type === "string" && validTypes.includes(c.type);
-}
-/**
- * Validate comment change payload
- */
-function isValidCommentChange(change) {
-    if (!change || typeof change !== "object")
-        return false;
-    const c = change;
-    const validTypes = ["add", "update", "remove"];
-    return typeof c.type === "string" && validTypes.includes(c.type);
-}
-function toTimestamp(value) {
-    if (typeof value === "number" && Number.isFinite(value)) {
-        return value;
-    }
-    if (typeof value === "string") {
-        const trimmed = value.trim();
-        if (!trimmed)
-            return undefined;
-        const asNumber = Number(trimmed);
-        if (Number.isFinite(asNumber)) {
-            return asNumber;
-        }
-        const parsed = Date.parse(trimmed);
-        if (!Number.isNaN(parsed)) {
-            return parsed;
-        }
-    }
-    return undefined;
-}
-io.use((socket, next) => {
-    if (!config.requireAuth) {
-        next();
-        return;
-    }
-    const authToken = getHandshakeAuthToken(socket);
-    const resolvedRole = resolveRoleForConnection(authToken);
-    if (!resolvedRole) {
-        console.warn(`[${new Date().toISOString()}] Unauthorized handshake: socket=${socket.id}, ip=${socket.handshake.address}`);
-        next(new Error("Unauthorized collaboration connection"));
-        return;
-    }
-    next();
-});
-// ============================================================================
-// Socket Event Handlers
-// ============================================================================
-io.on("connection", (socket) => {
-    console.log(`[${new Date().toISOString()}] New connection: ${socket.id}`);
-    // Error handling for this socket
-    socket.on("error", (error) => {
-        console.error(`[${new Date().toISOString()}] Socket error for ${socket.id}:`, error.message);
-    });
-    socket.on("join-document", ({ documentId, user, token }) => {
-        // Validate input
-        if (!documentId || typeof documentId !== "string") {
-            socket.emit("error", { message: "Invalid document ID" });
-            return;
-        }
-        if (!user || typeof user.id !== "string") {
-            socket.emit("error", { message: "Invalid user information" });
-            return;
-        }
-        const payloadToken = typeof token === "string" ? token : undefined;
-        const handshakeToken = getHandshakeAuthToken(socket);
-        const authToken = config.requireAuth ? handshakeToken : payloadToken || handshakeToken;
-        const resolvedRole = resolveRoleForConnection(authToken);
-        if (!resolvedRole) {
-            socket.emit("error", { message: "Unauthorized collaboration connection" });
-            console.warn(`[${new Date().toISOString()}] Unauthorized join attempt: socket=${socket.id}, document=${documentId}`);
-            socket.disconnect(true);
-            return;
-        }
-        socket.join(documentId);
-        // Cancel any pending cleanup for this room
-        cancelRoomCleanup(documentId);
-        const room = getOrCreateRoom(documentId);
-        const existingUser = room.users.find((u) => u.id === user.id);
-        if (!existingUser) {
-            room.users.push({
-                id: user.id,
-                name: user.name,
-                color: user.color,
-                avatar: user.avatar,
-                role: resolvedRole,
-            });
-        }
-        else {
-            existingUser.name = user.name ?? existingUser.name;
-            existingUser.color = user.color ?? existingUser.color;
-            existingUser.avatar = user.avatar ?? existingUser.avatar;
-            existingUser.role = resolvedRole;
-        }
-        // Associate socket with user/room for cleanup
-        socket.documentId = documentId;
-        socket.userId = user.id;
-        socket.userRole = resolvedRole;
-        // Count actual socket connections in this room
-        const socketsInRoom = io.sockets.adapter.rooms.get(documentId)?.size || 0;
-        console.log(`[${new Date().toISOString()}] User ${user.name} (${user.id}) joined document ${documentId} as ${resolvedRole}. Unique users: ${room.users.length}, Connections: ${socketsInRoom}`);
-        // Send initial sync
-        socket.emit("sync", buildSyncPayload(room, user.id, resolvedRole));
-        // Broadcast user joined
-        io.to(documentId).emit("users:update", room.users);
-        touchRoom(documentId);
-    });
-    socket.on("client:change", (payload) => {
-        const { documentId, userId, userRole } = socket;
-        if (!documentId || !userId)
-            return;
-        const room = rooms.get(documentId);
-        if (!room)
-            return;
-        // Validate payload structure
-        if (!payload || typeof payload !== "object" || !payload.type) {
-            console.warn(`[${new Date().toISOString()}] Invalid change payload from ${socket.id}`);
-            return;
-        }
-        const previewMode = room.mode === "preview";
-        const deny = (action, reason) => {
-            const message = reason === "preview_mode"
-                ? "PERMISSION_DENIED_PREVIEW_MODE"
-                : "PERMISSION_DENIED";
-            socket.emit("error", { message, action, reason });
-        };
-        const can = (action, options = {}) => {
-            const decision = evaluatePermission({
-                action,
-                userId,
-                userRole,
-                ownerId: options.ownerId,
-                resourcePolicy: options.resourcePolicy,
-                previewMode,
-            });
-            if (!decision.allowed) {
-                deny(action, decision.reason);
-            }
-            return decision.allowed;
-        };
-        let outboundPayload = null;
-        if (payload.type === "annotation") {
-            const { change } = payload;
-            if (!isValidAnnotationChange(change)) {
-                console.warn(`[${new Date().toISOString()}] Invalid annotation change from ${socket.id}`);
-                return;
-            }
-            // Apply change
-            if (change.type === "add" && change.annotation) {
-                const inputAnnotation = sanitizeAnnotationPayload(change.annotation);
-                if (!can("annotation.create")) {
-                    return;
-                }
-                // Ensure authorId is set to the current user
-                const annotationToAdd = {
-                    ...inputAnnotation,
-                    metadata: {
-                        ...inputAnnotation.metadata,
-                        authorId: userId,
-                        createdAt: toTimestamp(inputAnnotation.metadata?.createdAt) ?? Date.now(),
-                    }
-                };
-                room.annotations.push(annotationToAdd);
-                outboundPayload = {
-                    type: "annotation",
-                    change: {
-                        type: "add",
-                        annotation: annotationToAdd,
-                    },
-                };
-            }
-            else if (change.type === "update" && change.annotation) {
-                const inputAnnotation = sanitizeAnnotationPayload(change.annotation);
-                const existingAnnotation = room.annotations.find((item) => item.id === inputAnnotation.id);
-                if (!existingAnnotation) {
-                    return;
-                }
-                const previousStatus = existingAnnotation.metadata.status === "resolved" ? "resolved" : "open";
-                const requestedStatus = inputAnnotation.metadata.status === "resolved"
-                    ? "resolved"
-                    : inputAnnotation.metadata.status === "open"
-                        ? "open"
-                        : previousStatus;
-                const statusChanged = requestedStatus !== previousStatus;
-                const stripStatusFields = (annotation) => {
-                    const { status: _status, updatedAt: _updatedAt, ...metadata } = annotation.metadata;
-                    return {
-                        ...annotation,
-                        metadata,
-                    };
-                };
-                const isStatusOnlyUpdate = JSON.stringify(stripStatusFields(existingAnnotation)) ===
-                    JSON.stringify(stripStatusFields(inputAnnotation));
-                if (!isStatusOnlyUpdate &&
-                    !can("annotation.update", {
-                        ownerId: existingAnnotation.metadata.authorId,
-                        resourcePolicy: existingAnnotation.metadata.acl,
-                    })) {
-                    return;
-                }
-                if (statusChanged &&
-                    !can(requestedStatus === "resolved" ? "thread.resolve" : "thread.reopen", {
-                        ownerId: existingAnnotation.metadata.authorId,
-                        resourcePolicy: existingAnnotation.metadata.acl,
-                    })) {
-                    return;
-                }
-                const idx = room.annotations.findIndex(a => a.id === inputAnnotation.id);
-                if (idx !== -1) {
-                    const updatedAnnotation = {
-                        ...inputAnnotation,
-                        metadata: {
-                            ...inputAnnotation.metadata,
-                            status: requestedStatus,
-                            updatedAt: Date.now(),
-                        }
-                    };
-                    room.annotations[idx] = updatedAnnotation;
-                    outboundPayload = {
-                        type: "annotation",
-                        change: {
-                            type: "update",
-                            annotation: updatedAnnotation,
-                        },
-                    };
-                }
-            }
-            else if (change.type === "remove" && change.annotation) {
-                const existingAnnotation = room.annotations.find((item) => item.id === change.annotation?.id);
-                if (!existingAnnotation) {
-                    return;
-                }
-                if (!can("annotation.delete", {
-                    ownerId: existingAnnotation.metadata.authorId,
-                    resourcePolicy: existingAnnotation.metadata.acl,
-                })) {
-                    return;
-                }
-                room.annotations = room.annotations.filter(a => a.id !== change.annotation?.id);
-                outboundPayload = {
-                    type: "annotation",
-                    change: {
-                        type: "remove",
-                        annotation: existingAnnotation,
-                    },
-                };
-            }
-        }
-        else if (payload.type === "comment") {
-            const { change } = payload;
-            if (!isValidCommentChange(change)) {
-                console.warn(`[${new Date().toISOString()}] Invalid comment change from ${socket.id}`);
-                return;
-            }
-            if (change.type === "add" && change.comment) {
-                const inputComment = sanitizeCommentPayload(change.comment);
-                const targetAnnotation = room.annotations.find((item) => item.id === inputComment.targetAnnotationId);
-                if (!targetAnnotation) {
-                    return;
-                }
-                if (inputComment.parentId) {
-                    const existingThread = room.comments.find((item) => item.targetAnnotationId === inputComment.targetAnnotationId);
-                    const parentComment = existingThread?.comments.find((item) => item.id === inputComment.parentId);
-                    if (!parentComment) {
-                        return;
-                    }
-                    if (!can("comment.reply", {
-                        ownerId: parentComment.authorId,
-                        resourcePolicy: parentComment.acl,
-                    })) {
-                        return;
-                    }
-                }
-                else if (!can("annotation.comment.create", {
-                    ownerId: targetAnnotation.metadata.authorId,
-                    resourcePolicy: targetAnnotation.metadata.acl,
-                })) {
-                    return;
-                }
-                // Find or create thread for this comment
-                let thread = room.comments.find(t => t.targetAnnotationId === inputComment.targetAnnotationId);
-                if (!thread) {
-                    thread = {
-                        id: inputComment.targetAnnotationId,
-                        targetAnnotationId: inputComment.targetAnnotationId,
-                        comments: [],
-                    };
-                    room.comments.push(thread);
-                }
-                // Ensure authorId is set to current user
-                const commentToAdd = {
-                    ...inputComment,
-                    authorId: userId,
-                    createdAt: toTimestamp(inputComment.createdAt) ?? Date.now(),
-                };
-                thread.comments.push(commentToAdd);
-                outboundPayload = {
-                    type: "comment",
-                    change: {
-                        type: "add",
-                        comment: commentToAdd,
-                    },
-                };
-            }
-            else if (change.type === "update" && change.comment) {
-                const inputComment = sanitizeCommentPayload(change.comment);
-                // Find the thread and comment
-                const thread = room.comments.find(t => t.targetAnnotationId === inputComment.targetAnnotationId);
-                if (thread) {
-                    const existingComment = thread.comments.find(c => c.id === inputComment.id);
-                    if (existingComment) {
-                        if (!can("comment.update", {
-                            ownerId: existingComment.authorId,
-                            resourcePolicy: existingComment.acl,
-                        })) {
-                            return;
-                        }
-                        // Update the comment
-                        const idx = thread.comments.findIndex(c => c.id === inputComment.id);
-                        if (idx !== -1) {
-                            const updatedComment = {
-                                ...inputComment,
-                                updatedAt: Date.now(),
-                            };
-                            thread.comments[idx] = updatedComment;
-                            outboundPayload = {
-                                type: "comment",
-                                change: {
-                                    type: "update",
-                                    comment: updatedComment,
-                                },
-                            };
-                        }
-                    }
-                }
-            }
-            else if (change.type === "remove" && change.comment) {
-                const inputComment = sanitizeCommentPayload(change.comment);
-                // Find the thread and comment
-                const thread = room.comments.find(t => t.targetAnnotationId === inputComment.targetAnnotationId);
-                if (thread) {
-                    const existingComment = thread.comments.find(c => c.id === inputComment.id);
-                    if (existingComment) {
-                        if (!can("comment.delete", {
-                            ownerId: existingComment.authorId,
-                            resourcePolicy: existingComment.acl,
-                        })) {
-                            return;
-                        }
-                        // Remove the comment
-                        thread.comments = thread.comments.filter(c => c.id !== inputComment.id);
-                        outboundPayload = {
-                            type: "comment",
-                            change: {
-                                type: "remove",
-                                comment: existingComment,
-                            },
-                        };
-                        // If thread is empty, remove the thread as well
-                        if (thread.comments.length === 0) {
-                            room.comments = room.comments.filter(t => t.id !== thread.id);
-                        }
-                    }
-                }
-            }
-        }
-        // Broadcast to other clients
-        if (outboundPayload) {
-            socket.broadcast.to(documentId).emit("remote:change", outboundPayload);
-        }
-        const roomSockets = io.sockets.adapter.rooms.get(documentId);
-        if (roomSockets) {
-            for (const socketId of roomSockets) {
-                const roomSocket = io.sockets.sockets.get(socketId);
-                if (!roomSocket?.userId)
-                    continue;
-                roomSocket.emit("sync", buildSyncPayload(room, roomSocket.userId, roomSocket.userRole));
-            }
-        }
-        touchRoom(documentId);
-    });
-    socket.on("document:set-mode", ({ mode }) => {
-        const { documentId, userRole } = socket;
-        if (!documentId)
-            return;
-        const room = rooms.get(documentId);
-        if (!room)
-            return;
-        if (mode !== "normal" && mode !== "preview") {
-            return;
-        }
-        if (!canSetDocumentMode(userRole)) {
-            socket.emit("error", { message: "PERMISSION_DENIED", action: "document.setMode" });
-            return;
-        }
-        if (room.mode === mode) {
-            return;
-        }
-        room.mode = mode;
-        io.to(documentId).emit("document:mode:changed", mode);
-        const roomSockets = io.sockets.adapter.rooms.get(documentId);
-        if (!roomSockets)
-            return;
-        for (const socketId of roomSockets) {
-            const roomSocket = io.sockets.sockets.get(socketId);
-            if (!roomSocket?.userId)
-                continue;
-            roomSocket.emit("sync", buildSyncPayload(room, roomSocket.userId, roomSocket.userRole));
-        }
-    });
-    socket.on("client:interaction", (payload) => {
-        const { documentId, userId } = socket;
-        if (!documentId || !userId)
-            return;
-        if (!rooms.has(documentId))
-            return;
-        // Validate payload
-        if (!payload || typeof payload !== "object" || !payload.type) {
-            return;
-        }
-        // Ensure userId matches the socket's authenticated user
-        const safePayload = {
-            ...payload,
-            userId, // Override with authenticated user ID
-        };
-        // Interactions are ephemeral, just broadcast
-        socket.broadcast.to(documentId).emit("remote:interaction", safePayload);
-    });
-    socket.on("disconnect", () => {
-        const { documentId, userId } = socket;
-        if (documentId && rooms.has(documentId)) {
-            const room = rooms.get(documentId);
-            // Check if this user has any other active connections in this room
-            const roomSockets = io.sockets.adapter.rooms.get(documentId);
-            let userHasOtherConnections = false;
-            if (roomSockets) {
-                for (const socketId of roomSockets) {
-                    if (socketId === socket.id)
-                        continue;
-                    const otherSocket = io.sockets.sockets.get(socketId);
-                    if (otherSocket?.userId === userId) {
-                        userHasOtherConnections = true;
-                        break;
-                    }
-                }
-            }
-            // Only remove user from list if they have no other connections
-            if (!userHasOtherConnections) {
-                room.users = room.users.filter(u => u.id !== userId);
-                io.to(documentId).emit("users:update", room.users);
-            }
-            const remainingConnections = (roomSockets?.size || 1) - 1; // Subtract the disconnecting socket
-            console.log(`[${new Date().toISOString()}] User ${userId} disconnected from ${documentId}. Remaining connections: ${remainingConnections}, Unique users: ${room.users.length}`);
-            // Schedule cleanup if room is empty
-            if (room.users.length === 0) {
-                console.log(`[${new Date().toISOString()}] Room ${documentId} is now empty, scheduling cleanup`);
-                scheduleRoomCleanup(documentId);
-            }
-        }
-    });
-});
-// ============================================================================
-// Server Startup
-// ============================================================================
-httpServer.listen(config.port, () => {
-    console.log(`[${new Date().toISOString()}] Collaboration server running on port ${config.port}`);
-    console.log(`[${new Date().toISOString()}] CORS origins: ${getCorsOrigins()}`);
-    console.log(`[${new Date().toISOString()}] Heartbeat: pingInterval=25s, pingTimeout=20s`);
-    console.log(`[${new Date().toISOString()}] Room cleanup timeout: ${config.roomCleanupTimeout}ms`);
-    console.log(`[${new Date().toISOString()}] Auth mode: requireAuth=${config.requireAuth}, tokenRoles=${config.authTokenRoles.size}, defaultRole=${config.defaultRole}`);
-});
+"use strict";var _=require("socket.io"),E=require("http"),p={port:process.env.PORT?parseInt(process.env.PORT,10):3e3,corsOrigins:process.env.CORS_ORIGINS||"http://localhost:5173",allowAllOrigins:process.env.ALLOW_ALL_ORIGINS==="true",roomCleanupTimeout:parseInt(process.env.ROOM_CLEANUP_TIMEOUT||"300000",10),requireAuth:process.env.REQUIRE_AUTH==="true",defaultRole:j(process.env.DEFAULT_USER_ROLE),authTokenRoles:F(process.env.COLLAB_AUTH_TOKENS||"")};function N(e){if(e==="admin"||e==="user"||e==="viewer")return e}function j(e){return N(e)==="viewer"?"viewer":"user"}function F(e){let t=e.split(",").map(o=>o.trim()).filter(Boolean),n=new Map;for(let o of t){let s=o.indexOf(":");if(s<=0)continue;let i=o.slice(0,s).trim(),d=N(o.slice(s+1).trim());!i||!d||n.set(i,d)}return n}function M(e){let t=e?p.authTokenRoles.get(e):void 0;return p.requireAuth&&!t?null:t??p.defaultRole}function O(e){if(typeof e=="string"&&e.trim())return e;if(Array.isArray(e)){for(let t of e)if(typeof t=="string"&&t.trim())return t}}function x(e){let t=O(e.handshake.query.authToken);return t||O(e.handshake.auth?.authToken)}function L(){if(p.allowAllOrigins)return console.warn("[Security Warning] ALLOW_ALL_ORIGINS is enabled. Do not use in production!"),"*";let e=p.corsOrigins.split(",").map(t=>t.trim()).filter(Boolean);return e.length===1?e[0]:e}var q=(0,E.createServer)(),w=new _.Server(q,{cors:{origin:L(),methods:["GET","POST"],credentials:!0},pingInterval:25e3,pingTimeout:2e4}),I=new Map,C=new Map;function H(e){let t=I.get(e);return t||(t={annotations:[],comments:[],users:[],mode:"normal",createdAt:Date.now(),lastActivityAt:Date.now()},I.set(e,t)),t}function D(e){let t=I.get(e);t&&(t.lastActivityAt=Date.now())}function V(e){let t=C.get(e);t&&clearTimeout(t);let n=setTimeout(()=>{let o=I.get(e);o&&o.users.length===0&&(I.delete(e),C.delete(e),console.log(`[${new Date().toISOString()}] Room ${e} cleaned up after inactivity`))},p.roomCleanupTimeout);C.set(e,n)}function B(e){let t=C.get(e);t&&(clearTimeout(t),C.delete(e))}var G={rules:[{effect:"allow",actions:"*",roles:["admin"]},{effect:"allow",actions:["annotation.view","comment.view"],roles:["viewer"]},{effect:"allow",actions:["annotation.view","annotation.create","annotation.comment.create","comment.view"],roles:["user"]},{effect:"allow",actions:["annotation.update","annotation.delete"],roles:["user"],owner:!0},{effect:"allow",actions:["comment.update","comment.delete","comment.reply","thread.resolve","thread.reopen"],roles:["user"],owner:!0}]};function W(e){return e==="annotation.view"||e==="comment.view"}function J(e,t){return e.actions==="*"?!0:e.actions.includes(t)}function K(e,t,n){let o=Array.isArray(e.roles)&&e.roles.length>0,s=Array.isArray(e.users)&&e.users.length>0,i=!o||e.roles.some(l=>n.includes(l)),d=!s||e.users.includes(t);return i&&d}function Q(e,t,n){return e.owner?!!(t&&t===n):!0}function $(e,t,n,o,s){if(!e||e.length===0)return;let i=!1;for(let d of e)if(J(d,t)&&K(d,n,o)&&Q(d,s,n)){if(d.effect==="deny")return"deny";i=!0}return i?"allow":void 0}function h(e){let t=[e.userRole??"user"];if(e.previewMode&&!W(e.action))return{allowed:!1,reason:"preview_mode"};let n=$(e.resourcePolicy?.rules,e.action,e.userId,t,e.ownerId);if(n==="deny")return{allowed:!1,reason:"resource_explicit_deny"};if(n==="allow")return{allowed:!0};let o=$(G.rules,e.action,e.userId,t,e.ownerId);return o==="deny"?{allowed:!1,reason:"global_explicit_deny"}:o==="allow"?{allowed:!0}:{allowed:!1,reason:"no_matching_allow"}}function Y(e,t,n,o){return{view:h({action:"annotation.view",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed,update:h({action:"annotation.update",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed,delete:h({action:"annotation.delete",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed,commentCreate:h({action:"annotation.comment.create",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed,resolveThread:h({action:"thread.resolve",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed,reopenThread:h({action:"thread.reopen",userId:t,userRole:n,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:o}).allowed}}function X(e,t,n,o,s){let i=h({action:"comment.reply",userId:n,userRole:o,ownerId:e.authorId,resourcePolicy:e.acl,previewMode:s}).allowed;return{view:h({action:"comment.view",userId:n,userRole:o,ownerId:e.authorId,resourcePolicy:e.acl,previewMode:s}).allowed,update:h({action:"comment.update",userId:n,userRole:o,ownerId:e.authorId,resourcePolicy:e.acl,previewMode:s}).allowed,delete:h({action:"comment.delete",userId:n,userRole:o,ownerId:e.authorId,resourcePolicy:e.acl,previewMode:s}).allowed,reply:i}}function Z(e,t,n,o,s){return{resolve:h({action:"thread.resolve",userId:n,userRole:o,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:s}).allowed,reopen:h({action:"thread.reopen",userId:n,userRole:o,ownerId:e.metadata.authorId,resourcePolicy:e.metadata.acl,previewMode:s}).allowed}}function U(e){let{capabilities:t,...n}=e;return{...n,metadata:{...n.metadata}}}function R(e){let{capabilities:t,...n}=e;return{...n}}function P(e,t,n){let o=[];for(let d of e.annotations){let l=Y(d,t,n,e.mode==="preview");l.view&&o.push({...d,capabilities:l})}let s=new Map(o.map(d=>[d.id,d])),i=[];for(let d of e.comments){let l=s.get(d.targetAnnotationId);if(!l)continue;let f=[];for(let u of d.comments){let v=X(u,l,t,n,e.mode==="preview");v.view&&f.push({...u,capabilities:v})}i.push({...d,comments:f,capabilities:Z(l,d,t,n,e.mode==="preview")})}return{annotations:o,comments:i,activeUsers:e.users,documentMode:e.mode}}function ee(e){return e==="admin"}function te(e){if(!e||typeof e!="object")return!1;let t=e,n=["add","update","remove"];return typeof t.type=="string"&&n.includes(t.type)}function ne(e){if(!e||typeof e!="object")return!1;let t=e,n=["add","update","remove"];return typeof t.type=="string"&&n.includes(t.type)}function k(e){if(typeof e=="number"&&Number.isFinite(e))return e;if(typeof e=="string"){let t=e.trim();if(!t)return;let n=Number(t);if(Number.isFinite(n))return n;let o=Date.parse(t);if(!Number.isNaN(o))return o}}w.use((e,t)=>{if(!p.requireAuth){t();return}let n=x(e);if(!M(n)){console.warn(`[${new Date().toISOString()}] Unauthorized handshake: socket=${e.id}, ip=${e.handshake.address}`),t(new Error("Unauthorized collaboration connection"));return}t()});w.on("connection",e=>{console.log(`[${new Date().toISOString()}] New connection: ${e.id}`),e.on("error",t=>{console.error(`[${new Date().toISOString()}] Socket error for ${e.id}:`,t.message)}),e.on("join-document",({documentId:t,user:n,token:o})=>{if(!t||typeof t!="string"){e.emit("error",{message:"Invalid document ID"});return}if(!n||typeof n.id!="string"){e.emit("error",{message:"Invalid user information"});return}let s=typeof o=="string"?o:void 0,i=x(e),d=p.requireAuth?i:s||i,l=M(d);if(!l){e.emit("error",{message:"Unauthorized collaboration connection"}),console.warn(`[${new Date().toISOString()}] Unauthorized join attempt: socket=${e.id}, document=${t}`),e.disconnect(!0);return}e.join(t),B(t);let f=H(t),u=f.users.find(c=>c.id===n.id);u?(u.name=n.name??u.name,u.color=n.color??u.color,u.avatar=n.avatar??u.avatar,u.role=l):f.users.push({id:n.id,name:n.name,color:n.color,avatar:n.avatar,role:l}),e.documentId=t,e.userId=n.id,e.userRole=l;let v=w.sockets.adapter.rooms.get(t)?.size||0;console.log(`[${new Date().toISOString()}] User ${n.name} (${n.id}) joined document ${t} as ${l}. Unique users: ${f.users.length}, Connections: ${v}`),e.emit("sync",P(f,n.id,l)),w.to(t).emit("users:update",f.users),D(t)}),e.on("client:change",t=>{let{documentId:n,userId:o,userRole:s}=e;if(!n||!o)return;let i=I.get(n);if(!i)return;if(!t||typeof t!="object"||!t.type){console.warn(`[${new Date().toISOString()}] Invalid change payload from ${e.id}`);return}let d=i.mode==="preview",l=(c,a)=>{let r=a==="preview_mode"?"PERMISSION_DENIED_PREVIEW_MODE":"PERMISSION_DENIED";e.emit("error",{message:r,action:c,reason:a})},f=(c,a={})=>{let r=h({action:c,userId:o,userRole:s,ownerId:a.ownerId,resourcePolicy:a.resourcePolicy,previewMode:d});return r.allowed||l(c,r.reason),r.allowed},u=null;if(t.type==="annotation"){let{change:c}=t;if(!te(c)){console.warn(`[${new Date().toISOString()}] Invalid annotation change from ${e.id}`);return}if(c.type==="add"&&c.annotation){let a=U(c.annotation);if(!f("annotation.create"))return;let r={...a,metadata:{...a.metadata,authorId:o,createdAt:k(a.metadata?.createdAt)??Date.now()}};i.annotations.push(r),u={type:"annotation",change:{type:"add",annotation:r}}}else if(c.type==="update"&&c.annotation){let a=U(c.annotation),r=i.annotations.find(A=>A.id===a.id);if(!r)return;let m=r.metadata.status==="resolved"?"resolved":"open",g=a.metadata.status==="resolved"?"resolved":a.metadata.status==="open"?"open":m,y=g!==m,b=A=>{let{status:oe,updatedAt:ae,...z}=A.metadata;return{...A,metadata:z}};if(!(JSON.stringify(b(r))===JSON.stringify(b(a)))&&!f("annotation.update",{ownerId:r.metadata.authorId,resourcePolicy:r.metadata.acl})||y&&!f(g==="resolved"?"thread.resolve":"thread.reopen",{ownerId:r.metadata.authorId,resourcePolicy:r.metadata.acl}))return;let T=i.annotations.findIndex(A=>A.id===a.id);if(T!==-1){let A={...a,metadata:{...a.metadata,status:g,updatedAt:Date.now()}};i.annotations[T]=A,u={type:"annotation",change:{type:"update",annotation:A}}}}else if(c.type==="remove"&&c.annotation){let a=i.annotations.find(r=>r.id===c.annotation?.id);if(!a||!f("annotation.delete",{ownerId:a.metadata.authorId,resourcePolicy:a.metadata.acl}))return;i.annotations=i.annotations.filter(r=>r.id!==c.annotation?.id),u={type:"annotation",change:{type:"remove",annotation:a}}}}else if(t.type==="comment"){let{change:c}=t;if(!ne(c)){console.warn(`[${new Date().toISOString()}] Invalid comment change from ${e.id}`);return}if(c.type==="add"&&c.comment){let a=R(c.comment),r=i.annotations.find(y=>y.id===a.targetAnnotationId);if(!r)return;if(a.parentId){let b=i.comments.find(S=>S.targetAnnotationId===a.targetAnnotationId)?.comments.find(S=>S.id===a.parentId);if(!b||!f("comment.reply",{ownerId:b.authorId,resourcePolicy:b.acl}))return}else if(!f("annotation.comment.create",{ownerId:r.metadata.authorId,resourcePolicy:r.metadata.acl}))return;let m=i.comments.find(y=>y.targetAnnotationId===a.targetAnnotationId);m||(m={id:a.targetAnnotationId,targetAnnotationId:a.targetAnnotationId,comments:[]},i.comments.push(m));let g={...a,authorId:o,createdAt:k(a.createdAt)??Date.now()};m.comments.push(g),u={type:"comment",change:{type:"add",comment:g}}}else if(c.type==="update"&&c.comment){let a=R(c.comment),r=i.comments.find(m=>m.targetAnnotationId===a.targetAnnotationId);if(r){let m=r.comments.find(g=>g.id===a.id);if(m){if(!f("comment.update",{ownerId:m.authorId,resourcePolicy:m.acl}))return;let g=r.comments.findIndex(y=>y.id===a.id);if(g!==-1){let y={...a,updatedAt:Date.now()};r.comments[g]=y,u={type:"comment",change:{type:"update",comment:y}}}}}}else if(c.type==="remove"&&c.comment){let a=R(c.comment),r=i.comments.find(m=>m.targetAnnotationId===a.targetAnnotationId);if(r){let m=r.comments.find(g=>g.id===a.id);if(m){if(!f("comment.delete",{ownerId:m.authorId,resourcePolicy:m.acl}))return;r.comments=r.comments.filter(g=>g.id!==a.id),u={type:"comment",change:{type:"remove",comment:m}},r.comments.length===0&&(i.comments=i.comments.filter(g=>g.id!==r.id))}}}}u&&e.broadcast.to(n).emit("remote:change",u);let v=w.sockets.adapter.rooms.get(n);if(v)for(let c of v){let a=w.sockets.sockets.get(c);a?.userId&&a.emit("sync",P(i,a.userId,a.userRole))}D(n)}),e.on("document:set-mode",({mode:t})=>{let{documentId:n,userRole:o}=e;if(!n)return;let s=I.get(n);if(!s||t!=="normal"&&t!=="preview")return;if(!ee(o)){e.emit("error",{message:"PERMISSION_DENIED",action:"document.setMode"});return}if(s.mode===t)return;s.mode=t,w.to(n).emit("document:mode:changed",t);let i=w.sockets.adapter.rooms.get(n);if(i)for(let d of i){let l=w.sockets.sockets.get(d);l?.userId&&l.emit("sync",P(s,l.userId,l.userRole))}}),e.on("client:interaction",t=>{let{documentId:n,userId:o}=e;if(!n||!o||!I.has(n)||!t||typeof t!="object"||!t.type)return;let s={...t,userId:o};e.broadcast.to(n).emit("remote:interaction",s)}),e.on("disconnect",()=>{let{documentId:t,userId:n}=e;if(t&&I.has(t)){let o=I.get(t),s=w.sockets.adapter.rooms.get(t),i=!1;if(s)for(let l of s){if(l===e.id)continue;if(w.sockets.sockets.get(l)?.userId===n){i=!0;break}}i||(o.users=o.users.filter(l=>l.id!==n),w.to(t).emit("users:update",o.users));let d=(s?.size||1)-1;console.log(`[${new Date().toISOString()}] User ${n} disconnected from ${t}. Remaining connections: ${d}, Unique users: ${o.users.length}`),o.users.length===0&&(console.log(`[${new Date().toISOString()}] Room ${t} is now empty, scheduling cleanup`),V(t))}})});q.listen(p.port,()=>{console.log(`[${new Date().toISOString()}] Collaboration server running on port ${p.port}`),console.log(`[${new Date().toISOString()}] CORS origins: ${L()}`),console.log(`[${new Date().toISOString()}] Heartbeat: pingInterval=25s, pingTimeout=20s`),console.log(`[${new Date().toISOString()}] Room cleanup timeout: ${p.roomCleanupTimeout}ms`),console.log(`[${new Date().toISOString()}] Auth mode: requireAuth=${p.requireAuth}, tokenRoles=${p.authTokenRoles.size}, defaultRole=${p.defaultRole}`)});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jacktea/pdf-viewer-server",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "private": false,
   "bin": {
     "pdf-viewer-server": "./dist/server.js"
@@ -19,7 +19,7 @@
   },
   "scripts": {
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.json",
+    "build": "tsup src/server.ts --format cjs --minify --clean",
     "start": "node ./dist/server.js",
     "dev": "nodemon --exec ts-node src/server.ts"
   }