@joystyk/rooms 0.0.0 → 0.2.0

package/dist/node/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","names":["RoomCodeSchema"],"sources":["../../src/node/server.ts"],"sourcesContent":["// The room server's HTTP and WebSocket front (room-server.md sections 4, 5 and 8): limits,\n// decoding, room creation, health checks and draining. Everything that changes a room goes\n// through RoomHost.dispatch.\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport type { Duplex } from 'node:stream';\nimport type { Json, StandardSchemaV1 } from '@joystyk/contracts';\nimport { rateLimitKey } from '@joystyk/ops';\nimport { checkDisplayName } from '@joystyk/identity/names';\nimport { WebSocket, WebSocketServer, type RawData } from 'ws';\nimport {\n  ClientMessageSchema,\n  CloseCode,\n  CreateRoomRequestSchema,\n  isSupportedProtocol,\n  PROTOCOL_VERSION,\n  RejectionCode,\n  RoomCode as RoomCodeSchema,\n  SUPPORTED_PROTOCOLS,\n  type CreateRoomResponse,\n  type HostedGames,\n  type NoticeCode,\n  type RoomInfo,\n  type ServerMessage,\n} from '../protocol/index.ts';\nimport { nameReplacedMessage } from '../names.ts';\nimport type { MatchSeeds, RoomCode } from '../types.ts';\nimport { RoomHost, type Connection } from './host.ts';\nimport { inlineJobPool, type JobPool } from './jobs.ts';\nimport type { EngineRegistry } from './registry.ts';\nimport { expiresAt, type RoomStore } from './store.ts';\nimport {\n  clientAddress,\n  createLogger,\n  hashToken,\n  newRoomCode,\n  newSeatToken,\n  parseTrustedProxy,\n  systemClock,\n  TokenBucket,\n  WindowCounter,\n  type Clock,\n  type Logger,\n} from './support.ts';\n\nexport type ServerLimits = {\n  /** Incoming message size in bytes (`ws` maxPayload). */\n  readonly maxPayload: number;\n  readonly messagesPerSecond: number;\n  readonly messageBurst: number;\n  /** Over-limit messages tolerated before closing with 4008. */\n  readonly rateStrikes: number;\n  /** Only over-limit messages within this rolling window count toward closing. */\n  readonly rateStrikeWindowMs: number;\n  readonly roomsPerIpPerHour: number;\n  readonly joinMissesPerIpPer10Min: number;\n  readonly connectionsPerIp: number;\n  readonly maxConnections: number;\n  readonly maxRooms: number;\n  readonly outgoingBufferBytes: number;\n  readonly heartbeatMs: number;\n  readonly idleUnloadMs: number;\n  readonly maintenanceMs: number;\n  readonly createBodyBytes: number;\n  readonly drainJobsMs: number;\n  readonly persistRetryMs: number;\n  /** How long a heavy AI may choose on the pool before its seat times out. */\n  readonly aiTimeoutMs: number;\n};\n\nexport const DEFAULT_SERVER_LIMITS: ServerLimits = {\n  maxPayload: 2048,\n  messagesPerSecond: 10,\n  messageBurst: 20,\n  rateStrikes: 20,\n  rateStrikeWindowMs: 60_000,\n  roomsPerIpPerHour: 20,\n  joinMissesPerIpPer10Min: 20,\n  connectionsPerIp: 16,\n  maxConnections: 2000,\n  maxRooms: 1000,\n  outgoingBufferBytes: 256 * 1024,\n  heartbeatMs: 25_000,\n  idleUnloadMs: 10 * 60_000,\n  maintenanceMs: 60_000,\n  createBodyBytes: 4096,\n  drainJobsMs: 10_000,\n  persistRetryMs: 5_000,\n  aiTimeoutMs: 30_000,\n};\n\nexport type RoomServerOptions = {\n  readonly store: RoomStore;\n  readonly registry: EngineRegistry;\n  /** Fresh engine and AI seeds from the CSPRNG, in the rng algorithm the registry's cores use. */\n  readonly seeds: () => MatchSeeds;\n  readonly pool?: JobPool;\n  readonly clock?: Clock;\n  readonly log?: Logger;\n  /** Exactly this origin may create rooms and open sockets. Null allows any (development only). */\n  readonly publicOrigin?: string | null;\n  /** Extra origins allowed in development, such as the Vite dev server. */\n  readonly devOrigins?: readonly string[];\n  /** Traefik's address or CIDR range; only it may report the client address. */\n  readonly trustedProxy?: string | null;\n  /** The header Traefik reports the client address in; otherwise the last X-Forwarded-For entry. */\n  readonly clientIpHeader?: string | null;\n  readonly limits?: Partial<ServerLimits>;\n};\n\nexport interface RoomServer {\n  readonly http: Server;\n  readonly host: RoomHost;\n  /** Listens and resumes rooms with outstanding jobs. Resolves with the bound port. */\n  listen(port: number, hostname?: string): Promise<number>;\n  /** SIGTERM: refuse new work, let jobs finish, tell clients to reconnect, close the store. */\n  drain(): Promise<void>;\n}\n\ntype ConnState = Connection & {\n  readonly socket: WebSocket;\n  readonly ip: string;\n  readonly bucket: TokenBucket;\n  room: RoomCode | null;\n  strikes: number[];\n  alive: boolean;\n};\n\n/** Validates synchronously; schemas that answer with a Promise are refused (they would reorder messages). */\nconst validate = <T>(schema: StandardSchemaV1<unknown, T>, value: unknown): { ok: true; value: T } | { ok: false } => {\n  const result = schema['~standard'].validate(value);\n  if (result instanceof Promise || result.issues !== undefined) return { ok: false };\n  return { ok: true, value: result.value };\n};\n\nexport const createRoomServer = (options: RoomServerOptions): RoomServer => {\n  const limits: ServerLimits = { ...DEFAULT_SERVER_LIMITS, ...options.limits };\n  const clock = options.clock ?? systemClock;\n  const log = options.log ?? createLogger();\n  const pool = options.pool ?? inlineJobPool(() => ({ ok: false, reason: 'failed' }));\n  const { store, registry } = options;\n  const trusted = options.trustedProxy ? parseTrustedProxy(options.trustedProxy) : null;\n  const header = options.clientIpHeader ?? null;\n  const publicOrigin = options.publicOrigin ?? null;\n  const allowedOrigins = new Set([...(publicOrigin === null ? [] : [publicOrigin]), ...(options.devOrigins ?? [])]);\n\n  let draining = false;\n  let connSequence = 0;\n  const host = new RoomHost({\n    store,\n    registry,\n    clock,\n    pool,\n    log,\n    maxRooms: limits.maxRooms,\n    outgoingBufferBytes: limits.outgoingBufferBytes,\n    persistRetryMs: limits.persistRetryMs,\n    aiTimeoutMs: limits.aiTimeoutMs,\n    draining: () => draining,\n  });\n  const creations = new WindowCounter(3_600_000, limits.roomsPerIpPerHour);\n  const misses = new WindowCounter(600_000, limits.joinMissesPerIpPer10Min);\n  const perIp = new Map<string, number>();\n  const sockets = new WebSocketServer({\n    noServer: true,\n    maxPayload: limits.maxPayload,\n    perMessageDeflate: { threshold: 1024 },\n  });\n\n  const originAllowed = (origin: string | undefined): boolean => {\n    if (origin === undefined) return true; // Not a browser: curl, server-to-server, tests.\n    if (publicOrigin === null) return true;\n    return allowedOrigins.has(origin);\n  };\n\n  const rateLimited = (limit: string): void => log.write('warn', 'rate_limited', { limit });\n\n  // ── HTTP ──────────────────────────────────────────────────────────────────────────────\n\n  const json = (res: ServerResponse, status: number, value: Json, headers: Record<string, string> = {}): void => {\n    res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store', ...headers });\n    res.end(JSON.stringify(value));\n  };\n\n  const readBody = (req: IncomingMessage, max: number): Promise<string | null> =>\n    new Promise((resolve) => {\n      const chunks: Buffer[] = [];\n      let size = 0;\n      let done = false;\n      req.on('data', (chunk: Buffer) => {\n        if (done) return;\n        size += chunk.length;\n        if (size > max) {\n          done = true;\n          resolve(null);\n          req.resume();\n          return;\n        }\n        chunks.push(chunk);\n      });\n      req.on('end', () => {\n        if (!done) resolve(Buffer.concat(chunks).toString('utf8'));\n      });\n      req.on('error', () => {\n        if (!done) resolve(null);\n      });\n    });\n\n  const createRoom = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    if (draining)\n      return json(res, 503, { error: 'The server is restarting. Try again in a moment.' }, { 'retry-after': '5' });\n    if (!originAllowed(req.headers.origin)) return json(res, 403, { error: 'Origin refused.' });\n    const body = await readBody(req, limits.createBodyBytes);\n    if (body === null) return json(res, 413, { error: 'The request is too large.' });\n    let raw: unknown;\n    try {\n      raw = JSON.parse(body);\n    } catch {\n      return json(res, 400, { error: 'The request is not JSON.' });\n    }\n    const parsed = CreateRoomRequestSchema.safeParse(raw);\n    if (!parsed.success) return json(res, 400, { error: 'The request is not valid.' });\n    const request = parsed.data;\n    const now = clock.now();\n    const ip = rateLimitKey(clientAddress(req, trusted, header));\n    if (!creations.allow(ip, now)) {\n      rateLimited('rooms-per-ip');\n      return json(res, 429, { error: 'Too many rooms. Try again later.' }, { 'retry-after': '600' });\n    }\n    if (host.rooms.size >= limits.maxRooms)\n      return json(res, 503, { error: 'The server is full. Try again soon.' }, { 'retry-after': '30' });\n    const current = registry.current(request.game);\n    if (current === null) return json(res, 404, { error: 'That game has no online rooms.' });\n    const config = validate(current.core.engine.schemas.config, request.config ?? {});\n    if (!config.ok) return json(res, 400, { error: 'That game configuration is not valid.' });\n    // A per-move clock and a bank exclude each other: choosing one turns the other off.\n    const { decisionMs, bank } = request.settings ?? {};\n    let policy = current.policy;\n    if (decisionMs !== undefined) policy = { ...policy, decisionMs, ...(decisionMs === null ? {} : { bank: null }) };\n    if (bank !== undefined) policy = { ...policy, bank, ...(bank === null ? {} : { decisionMs: null }) };\n    let code = newRoomCode();\n    while (store.exists(code)) code = newRoomCode();\n    const token = newSeatToken();\n    // The core filters the name and generates one in place of a refused name; the check here\n    // only words the notice.\n    const created = current.core.create(\n      {\n        code,\n        policy,\n        config: config.value,\n        seeds: options.seeds(),\n        creator: { name: request.name, tokenHash: hashToken(token) },\n      },\n      now,\n    );\n    if (!created.ok) {\n      if (created.error.diagnostic !== undefined)\n        log.write('error', 'room_init_failed', { game: current.pin.id, ...created.error.diagnostic });\n      return json(res, 400, { error: created.error.message });\n    }\n    store.insert(created.value);\n    log.write('info', 'room_created', { room: code, game: current.pin.id, rules: current.pin.rulesVersion });\n    const name = created.value.seats[0]?.claim?.name ?? request.name;\n    const checked = checkDisplayName(request.name);\n    const response: CreateRoomResponse = {\n      room: code,\n      token,\n      name,\n      ...(checked.ok ? {} : { notice: { code: 'name-replaced', message: nameReplacedMessage(checked.error, name) } }),\n      game: current.pin,\n      expiresAt: expiresAt(created.value),\n    };\n    json(res, 201, response);\n  };\n\n  const roomInfo = (req: IncomingMessage, res: ServerResponse, code: string): void => {\n    const ip = rateLimitKey(clientAddress(req, trusted, header));\n    const now = clock.now();\n    if (!misses.allow(ip, now, false)) {\n      rateLimited('join-misses');\n      return json(res, 429, { error: 'Too many unknown rooms. Try again later.' });\n    }\n    const record = RoomCodeSchema.safeParse(code).success\n      ? (host.rooms.get(code)?.room.record ?? store.load(code))\n      : null;\n    if (record === null || record.phase === 'closed') {\n      misses.hit(ip, now);\n      return json(res, 404, { error: 'No such room.' });\n    }\n    const open =\n      record.phase === 'lobby'\n        ? record.seats.filter((s) => s.claim === null && s.controller === 'human').length\n        : record.policy.lateJoin === 'take-ai-seat'\n          ? record.seats.filter((s) => s.claim === null && s.controller === 'ai').length\n          : 0;\n    const info: RoomInfo = {\n      game: record.match?.game ?? record.game,\n      phase: record.phase,\n      seatsOpen: open,\n      spectatorsAllowed: record.policy.maxSpectators > 0,\n    };\n    json(res, 200, info);\n  };\n\n  /** The games this build opens rooms for, and its protocol versions. Cheap and public, so it may be cached briefly. */\n  const hostedGames = (res: ServerResponse): void => {\n    const hosted: HostedGames = {\n      protocol: PROTOCOL_VERSION,\n      protocols: [...SUPPORTED_PROTOCOLS],\n      games: [...registry.games()],\n    };\n    json(res, 200, hosted, { 'cache-control': 'public, max-age=60' });\n  };\n\n  const http = createServer((req, res) => {\n    const url = new URL(req.url ?? '/', 'http://rooms.invalid');\n    const path = url.pathname;\n    const route = async (): Promise<void> => {\n      if (path === '/healthz') return json(res, 200, { ok: true });\n      if (path === '/readyz')\n        return draining || !store.ping() ? json(res, 503, { ok: false }) : json(res, 200, { ok: true });\n      if (path === '/api/rooms' && req.method === 'POST') return createRoom(req, res);\n      // Before the room-code route: \"games\" is never a code (codes are six capitals and digits).\n      if (path === '/api/rooms/games' && req.method === 'GET') return hostedGames(res);\n      const match = /^\\/api\\/rooms\\/([^/]+)$/.exec(path);\n      if (match !== null && req.method === 'GET') return roomInfo(req, res, match[1] ?? '');\n      json(res, 404, { error: 'Not found.' });\n    };\n    route().catch((error: unknown) => {\n      log.write('error', 'http_error', { path, error: String(error) });\n      if (!res.headersSent) json(res, 500, { error: 'The room server could not complete this request.' });\n      else res.end();\n    });\n  });\n\n  // ── WebSockets ────────────────────────────────────────────────────────────────────────\n\n  const refuseUpgrade = (socket: Duplex, status: string, extra = ''): void => {\n    socket.end(`HTTP/1.1 ${status}\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n${extra}\\r\\n`);\n  };\n\n  http.on('upgrade', (req, socket, head) => {\n    const path = new URL(req.url ?? '/', 'http://rooms.invalid').pathname;\n    if (path !== '/ws') return refuseUpgrade(socket, '404 Not Found');\n    if (draining) return refuseUpgrade(socket, '503 Service Unavailable', 'Retry-After: 5\\r\\n');\n    if (!originAllowed(req.headers.origin)) return refuseUpgrade(socket, '403 Forbidden');\n    if (sockets.clients.size >= limits.maxConnections)\n      return refuseUpgrade(socket, '503 Service Unavailable', 'Retry-After: 10\\r\\n');\n    const ip = rateLimitKey(clientAddress(req, trusted, header));\n    if ((perIp.get(ip) ?? 0) >= limits.connectionsPerIp) {\n      rateLimited('connections-per-ip');\n      return refuseUpgrade(socket, '429 Too Many Requests');\n    }\n    sockets.handleUpgrade(req, socket, head, (ws) => accept(ws, ip));\n  });\n\n  const notice = (conn: ConnState, code: NoticeCode, message: string): void => {\n    conn.send(JSON.stringify({ v: conn.protocol, t: 'notice', code, message } satisfies ServerMessage));\n  };\n\n  /** Connection state per socket, for the heartbeat. */\n  const connOf = new WeakMap<WebSocket, ConnState>();\n\n  const accept = (ws: WebSocket, ip: string): void => {\n    perIp.set(ip, (perIp.get(ip) ?? 0) + 1);\n    connSequence += 1;\n    const conn: ConnState = {\n      id: `conn-${connSequence}`,\n      protocol: PROTOCOL_VERSION,\n      pendingToken: null,\n      socket: ws,\n      ip,\n      bucket: new TokenBucket(limits.messagesPerSecond, limits.messageBurst, clock.now()),\n      room: null,\n      strikes: [],\n      alive: true,\n      get bufferedAmount() {\n        return ws.bufferedAmount;\n      },\n      send: (text) => {\n        if (ws.readyState === WebSocket.OPEN) ws.send(text);\n      },\n      close: (code, reason) => {\n        if (ws.readyState === WebSocket.OPEN || ws.readyState === WebSocket.CONNECTING)\n          ws.close(code, reason.slice(0, 120));\n      },\n    };\n    connOf.set(ws, conn);\n    ws.on(\n      'pong', // ip-note: the WebSocket heartbeat frame, not the game\n      () => {\n        conn.alive = true;\n      },\n    );\n    ws.on('message', (data, isBinary) => onMessage(conn, data, isBinary));\n    ws.on('error', () => ws.terminate());\n    ws.on('close', () => {\n      const count = (perIp.get(ip) ?? 1) - 1;\n      if (count <= 0) perIp.delete(ip);\n      else perIp.set(ip, count);\n      if (conn.room === null) return;\n      const live = host.rooms.get(conn.room);\n      if (live?.conns.get(conn.id) !== conn) return;\n      live.conns.delete(conn.id);\n      if (live.conns.size === 0) live.idleSince = clock.now();\n      host.dispatch(conn.room, { type: 'leave', conn: conn.id });\n    });\n  };\n\n  const onMessage = (conn: ConnState, data: RawData, isBinary: boolean): void => {\n    const now = clock.now();\n    if (!conn.bucket.take(now)) {\n      conn.strikes = conn.strikes.filter((at) => at > now - limits.rateStrikeWindowMs);\n      conn.strikes.push(now);\n      if (conn.strikes.length > limits.rateStrikes) {\n        rateLimited('messages');\n        conn.close(CloseCode.policy, 'too fast');\n      } else {\n        notice(conn, 'too-fast', 'Slow down.');\n      }\n      return;\n    }\n    if (isBinary) return notice(conn, 'bad-message', 'Messages are JSON text.');\n    let raw: unknown;\n    try {\n      raw = JSON.parse(String(data));\n    } catch {\n      return notice(conn, 'bad-message', 'That message is not JSON.');\n    }\n    const version = typeof raw === 'object' && raw !== null ? (raw as { v?: unknown }).v : undefined;\n    if (typeof version === 'number' && !isSupportedProtocol(version)) {\n      notice(conn, 'protocol-unsupported', 'Reload the page to get the latest version.');\n      conn.close(CloseCode.policy, 'protocol unsupported');\n      return;\n    }\n    const parsed = ClientMessageSchema.safeParse(raw);\n    if (!parsed.success) return notice(conn, 'bad-message', 'That message is not valid.');\n    const message = parsed.data;\n    if (message.t === 'join') return join(conn, message, now);\n    const code = conn.room;\n    const live = code === null ? undefined : host.rooms.get(code);\n    if (code === null || live === undefined) return notice(conn, 'bad-message', 'Join a room first.');\n    switch (message.t) {\n      case 'act': {\n        const command = validate(live.core.engine.schemas.command, message.command);\n        if (!command.ok) {\n          conn.send(\n            JSON.stringify({\n              v: conn.protocol,\n              t: 'receipt',\n              id: message.id,\n              result: {\n                status: 'rejected',\n                code: RejectionCode.badCommand,\n                message: 'That move is not valid.',\n                revision: live.room.record.revision,\n              },\n            } satisfies ServerMessage),\n          );\n          return;\n        }\n        host.dispatch(code, {\n          type: 'act',\n          conn: conn.id,\n          id: message.id,\n          expectedRevision: message.rev,\n          command: command.value,\n        });\n        return;\n      }\n      case 'control': {\n        let control = message.control;\n        if (control.kind === 'settings' && control.config !== undefined) {\n          const engine = registry.current(live.room.record.game.id)?.core.engine ?? live.core.engine;\n          const config = validate(engine.schemas.config, control.config);\n          if (!config.ok) {\n            conn.send(\n              JSON.stringify({\n                v: conn.protocol,\n                t: 'receipt',\n                id: message.id,\n                result: {\n                  status: 'rejected',\n                  code: RejectionCode.badCommand,\n                  message: 'Those settings are not valid.',\n                  revision: live.room.record.revision,\n                },\n              } satisfies ServerMessage),\n            );\n            return;\n          }\n          control = { ...control, config: config.value };\n        }\n        host.dispatch(code, {\n          type: 'control',\n          conn: conn.id,\n          id: message.id,\n          expectedRevision: message.rev,\n          control,\n          seeds: options.seeds(),\n        });\n        return;\n      }\n      case 'resync':\n        host.dispatch(code, { type: 'resync', conn: conn.id });\n        return;\n    }\n  };\n\n  const join = (\n    conn: ConnState,\n    message: Extract<ReturnType<typeof ClientMessageSchema.parse>, { t: 'join' }>,\n    now: number,\n  ): void => {\n    if (conn.room !== null) return notice(conn, 'bad-message', 'This connection already joined a room.');\n    conn.protocol = message.v;\n    if (!misses.allow(conn.ip, now, false)) {\n      rateLimited('join-misses');\n      notice(conn, 'too-fast', 'Too many unknown rooms. Try again later.');\n      conn.close(CloseCode.policy, 'too many misses');\n      return;\n    }\n    if (draining) {\n      conn.send(\n        JSON.stringify({\n          v: conn.protocol,\n          t: 'closing',\n          reason: 'restart',\n          retryAfterMs: 2000,\n        } satisfies ServerMessage),\n      );\n      conn.close(CloseCode.restarting, 'restarting');\n      return;\n    }\n    let loaded: ReturnType<RoomHost['load']>;\n    try {\n      loaded = host.load(message.room);\n    } catch (error) {\n      log.write('error', 'room_load_failed', { room: message.room, error: String(error) });\n      loaded = { problem: 'busy' };\n    }\n    if ('problem' in loaded) {\n      if (loaded.problem === 'busy') {\n        notice(conn, 'server-busy', 'The server is busy. Try again soon.');\n        conn.close(CloseCode.tryAgainLater, 'busy');\n      } else if (loaded.problem === 'engine-missing') {\n        conn.send(\n          JSON.stringify({\n            v: conn.protocol,\n            t: 'closing',\n            reason: 'closed',\n            retryAfterMs: null,\n          } satisfies ServerMessage),\n        );\n        conn.close(CloseCode.noSuchRoom, 'closed');\n      } else {\n        misses.hit(conn.ip, now);\n        notice(conn, 'no-such-room', 'This room has closed.');\n        conn.close(CloseCode.noSuchRoom, 'no such room');\n      }\n      return;\n    }\n    const live = loaded.live;\n    if (live.room.record.game.id !== message.game) {\n      misses.hit(conn.ip, now);\n      notice(conn, 'no-such-room', 'This room has closed.');\n      conn.close(CloseCode.noSuchRoom, 'no such room');\n      return;\n    }\n    conn.room = message.room;\n    live.conns.set(conn.id, conn);\n    const fresh = newSeatToken();\n    conn.pendingToken = fresh;\n    host.dispatch(message.room, {\n      type: 'join',\n      conn: conn.id,\n      name: message.name,\n      protocol: message.v,\n      presentedTokenHash: message.token === undefined ? null : hashToken(message.token),\n      freshTokenHash: hashToken(fresh),\n      watch: message.watch ?? false,\n    });\n    conn.pendingToken = null;\n  };\n\n  // ── Timers, start-up and draining ─────────────────────────────────────────────────────\n\n  let heartbeat: ReturnType<typeof setInterval> | null = null;\n  let maintenance: ReturnType<typeof setInterval> | null = null;\n\n  const startTimers = (): void => {\n    heartbeat = setInterval(() => {\n      for (const ws of sockets.clients) {\n        const conn = connOf.get(ws);\n        if (conn === undefined) continue;\n        if (!conn.alive) {\n          ws.terminate();\n          continue;\n        }\n        conn.alive = false;\n        ws.ping();\n      }\n    }, limits.heartbeatMs);\n    maintenance = setInterval(() => {\n      const now = clock.now();\n      creations.prune(now);\n      misses.prune(now);\n      host.sweep(limits.idleUnloadMs);\n      try {\n        const pruned = store.prune(now);\n        if (pruned > 0) log.write('info', 'rooms_pruned', { rooms: pruned });\n      } catch (error) {\n        log.write('error', 'prune_failed', { error: String(error) });\n      }\n    }, limits.maintenanceMs);\n    heartbeat.unref();\n    maintenance.unref();\n  };\n\n  const listen = async (port: number, hostname = '0.0.0.0'): Promise<number> => {\n    await new Promise<void>((resolve, reject) => {\n      http.once('error', reject);\n      http.listen(port, hostname, () => {\n        http.off('error', reject);\n        resolve();\n      });\n    });\n    startTimers();\n    // Resume on start: rooms with an outstanding job load now, so the job re-runs at once.\n    for (const code of store.withPendingJobs()) {\n      try {\n        host.load(code);\n      } catch (error) {\n        log.write('error', 'room_load_failed', { room: code, error: String(error) });\n      }\n    }\n    const address = http.address();\n    const bound = typeof address === 'object' && address !== null ? address.port : port;\n    log.write('info', 'listening', { port: bound });\n    return bound;\n  };\n\n  const drain = async (): Promise<void> => {\n    if (draining) return;\n    draining = true;\n    log.write('info', 'drain_started', { rooms: host.rooms.size, connections: sockets.clients.size });\n    await pool.idle(limits.drainJobsMs);\n    const closing = JSON.stringify({\n      v: PROTOCOL_VERSION,\n      t: 'closing',\n      reason: 'restart',\n      retryAfterMs: 2000,\n    } satisfies ServerMessage);\n    const open = [...sockets.clients];\n    for (const ws of open) {\n      if (ws.readyState === WebSocket.OPEN) ws.send(closing);\n      ws.close(CloseCode.restarting, 'restarting');\n    }\n    for (const code of [...host.rooms.keys()]) host.unload(code, 'drain');\n    if (heartbeat !== null) clearInterval(heartbeat);\n    if (maintenance !== null) clearInterval(maintenance);\n    // Give clients a moment to finish the closing handshake, then cut whoever hasn't.\n    const closed = Promise.all(\n      open.map((ws) =>\n        ws.readyState === WebSocket.CLOSED\n          ? Promise.resolve()\n          : new Promise<void>((resolve) => ws.once('close', () => resolve())),\n      ),\n    );\n    await Promise.race([closed, new Promise<void>((resolve) => setTimeout(resolve, 2_000).unref())]);\n    for (const ws of sockets.clients) ws.terminate();\n    await new Promise<void>((resolve) => sockets.close(() => resolve()));\n    await new Promise<void>((resolve) => {\n      http.close(() => resolve());\n      http.closeAllConnections();\n    });\n    await pool.close();\n    store.close();\n    log.write('info', 'drain_finished', {});\n  };\n\n  return { http, host, listen, drain };\n};\n"],"mappings":";;;;;;;;;;;;AAqEA,IAAa,wBAAsC;CACjD,YAAY;CACZ,mBAAmB;CACnB,cAAc;CACd,aAAa;CACb,oBAAoB;CACpB,mBAAmB;CACnB,yBAAyB;CACzB,kBAAkB;CAClB,gBAAgB;CAChB,UAAU;CACV,qBAAqB;CACrB,aAAa;CACb,cAAc;CACd,eAAe;CACf,iBAAiB;CACjB,aAAa;CACb,gBAAgB;CAChB,aAAa;AACf;;AAwCA,IAAM,YAAe,QAAsC,UAA2D;CACpH,MAAM,SAAS,OAAO,YAAY,CAAC,SAAS,KAAK;CACjD,IAAI,kBAAkB,WAAW,OAAO,WAAW,KAAA,GAAW,OAAO,EAAE,IAAI,MAAM;CACjF,OAAO;EAAE,IAAI;EAAM,OAAO,OAAO;CAAM;AACzC;AAEA,IAAa,oBAAoB,YAA2C;CAC1E,MAAM,SAAuB;EAAE,GAAG;EAAuB,GAAG,QAAQ;CAAO;CAC3E,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,MAAM,QAAQ,OAAO,aAAa;CACxC,MAAM,OAAO,QAAQ,QAAQ,qBAAqB;EAAE,IAAI;EAAO,QAAQ;CAAS,EAAE;CAClF,MAAM,EAAE,OAAO,aAAa;CAC5B,MAAM,UAAU,QAAQ,eAAe,kBAAkB,QAAQ,YAAY,IAAI;CACjF,MAAM,SAAS,QAAQ,kBAAkB;CACzC,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,iCAAiB,IAAI,IAAI,CAAC,GAAI,iBAAiB,OAAO,CAAC,IAAI,CAAC,YAAY,GAAI,GAAI,QAAQ,cAAc,CAAC,CAAE,CAAC;CAEhH,IAAI,WAAW;CACf,IAAI,eAAe;CACnB,MAAM,OAAO,IAAI,SAAS;EACxB;EACA;EACA;EACA;EACA;EACA,UAAU,OAAO;EACjB,qBAAqB,OAAO;EAC5B,gBAAgB,OAAO;EACvB,aAAa,OAAO;EACpB,gBAAgB;CAClB,CAAC;CACD,MAAM,YAAY,IAAI,cAAc,MAAW,OAAO,iBAAiB;CACvE,MAAM,SAAS,IAAI,cAAc,KAAS,OAAO,uBAAuB;CACxE,MAAM,wBAAQ,IAAI,IAAoB;CACtC,MAAM,UAAU,IAAI,gBAAgB;EAClC,UAAU;EACV,YAAY,OAAO;EACnB,mBAAmB,EAAE,WAAW,KAAK;CACvC,CAAC;CAED,MAAM,iBAAiB,WAAwC;EAC7D,IAAI,WAAW,KAAA,GAAW,OAAO;EACjC,IAAI,iBAAiB,MAAM,OAAO;EAClC,OAAO,eAAe,IAAI,MAAM;CAClC;CAEA,MAAM,eAAe,UAAwB,IAAI,MAAM,QAAQ,gBAAgB,EAAE,MAAM,CAAC;CAIxF,MAAM,QAAQ,KAAqB,QAAgB,OAAa,UAAkC,CAAC,MAAY;EAC7G,IAAI,UAAU,QAAQ;GAAE,gBAAgB;GAAoB,iBAAiB;GAAY,GAAG;EAAQ,CAAC;EACrG,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;CAC/B;CAEA,MAAM,YAAY,KAAsB,QACtC,IAAI,SAAS,YAAY;EACvB,MAAM,SAAmB,CAAC;EAC1B,IAAI,OAAO;EACX,IAAI,OAAO;EACX,IAAI,GAAG,SAAS,UAAkB;GAChC,IAAI,MAAM;GACV,QAAQ,MAAM;GACd,IAAI,OAAO,KAAK;IACd,OAAO;IACP,QAAQ,IAAI;IACZ,IAAI,OAAO;IACX;GACF;GACA,OAAO,KAAK,KAAK;EACnB,CAAC;EACD,IAAI,GAAG,aAAa;GAClB,IAAI,CAAC,MAAM,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;EAC3D,CAAC;EACD,IAAI,GAAG,eAAe;GACpB,IAAI,CAAC,MAAM,QAAQ,IAAI;EACzB,CAAC;CACH,CAAC;CAEH,MAAM,aAAa,OAAO,KAAsB,QAAuC;EACrF,IAAI,UACF,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,mDAAmD,GAAG,EAAE,eAAe,IAAI,CAAC;EAC7G,IAAI,CAAC,cAAc,IAAI,QAAQ,MAAM,GAAG,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,kBAAkB,CAAC;EAC1F,MAAM,OAAO,MAAM,SAAS,KAAK,OAAO,eAAe;EACvD,IAAI,SAAS,MAAM,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,4BAA4B,CAAC;EAC/E,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,MAAM,IAAI;EACvB,QAAQ;GACN,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,2BAA2B,CAAC;EAC7D;EACA,MAAM,SAAS,wBAAwB,UAAU,GAAG;EACpD,IAAI,CAAC,OAAO,SAAS,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,4BAA4B,CAAC;EACjF,MAAM,UAAU,OAAO;EACvB,MAAM,MAAM,MAAM,IAAI;EACtB,MAAM,KAAK,aAAa,cAAc,KAAK,SAAS,MAAM,CAAC;EAC3D,IAAI,CAAC,UAAU,MAAM,IAAI,GAAG,GAAG;GAC7B,YAAY,cAAc;GAC1B,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,eAAe,MAAM,CAAC;EAC/F;EACA,IAAI,KAAK,MAAM,QAAQ,OAAO,UAC5B,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,sCAAsC,GAAG,EAAE,eAAe,KAAK,CAAC;EACjG,MAAM,UAAU,SAAS,QAAQ,QAAQ,IAAI;EAC7C,IAAI,YAAY,MAAM,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,iCAAiC,CAAC;EACvF,MAAM,SAAS,SAAS,QAAQ,KAAK,OAAO,QAAQ,QAAQ,QAAQ,UAAU,CAAC,CAAC;EAChF,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,wCAAwC,CAAC;EAExF,MAAM,EAAE,YAAY,SAAS,QAAQ,YAAY,CAAC;EAClD,IAAI,SAAS,QAAQ;EACrB,IAAI,eAAe,KAAA,GAAW,SAAS;GAAE,GAAG;GAAQ;GAAY,GAAI,eAAe,OAAO,CAAC,IAAI,EAAE,MAAM,KAAK;EAAG;EAC/G,IAAI,SAAS,KAAA,GAAW,SAAS;GAAE,GAAG;GAAQ;GAAM,GAAI,SAAS,OAAO,CAAC,IAAI,EAAE,YAAY,KAAK;EAAG;EACnG,IAAI,OAAO,YAAY;EACvB,OAAO,MAAM,OAAO,IAAI,GAAG,OAAO,YAAY;EAC9C,MAAM,QAAQ,aAAa;EAG3B,MAAM,UAAU,QAAQ,KAAK,OAC3B;GACE;GACA;GACA,QAAQ,OAAO;GACf,OAAO,QAAQ,MAAM;GACrB,SAAS;IAAE,MAAM,QAAQ;IAAM,WAAW,UAAU,KAAK;GAAE;EAC7D,GACA,GACF;EACA,IAAI,CAAC,QAAQ,IAAI;GACf,IAAI,QAAQ,MAAM,eAAe,KAAA,GAC/B,IAAI,MAAM,SAAS,oBAAoB;IAAE,MAAM,QAAQ,IAAI;IAAI,GAAG,QAAQ,MAAM;GAAW,CAAC;GAC9F,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,MAAM,QAAQ,CAAC;EACxD;EACA,MAAM,OAAO,QAAQ,KAAK;EAC1B,IAAI,MAAM,QAAQ,gBAAgB;GAAE,MAAM;GAAM,MAAM,QAAQ,IAAI;GAAI,OAAO,QAAQ,IAAI;EAAa,CAAC;EACvG,MAAM,OAAO,QAAQ,MAAM,MAAM,EAAE,EAAE,OAAO,QAAQ,QAAQ;EAC5D,MAAM,UAAU,iBAAiB,QAAQ,IAAI;EAC7C,MAAM,WAA+B;GACnC,MAAM;GACN;GACA;GACA,GAAI,QAAQ,KAAK,CAAC,IAAI,EAAE,QAAQ;IAAE,MAAM;IAAiB,SAAS,oBAAoB,QAAQ,OAAO,IAAI;GAAE,EAAE;GAC7G,MAAM,QAAQ;GACd,WAAW,UAAU,QAAQ,KAAK;EACpC;EACA,KAAK,KAAK,KAAK,QAAQ;CACzB;CAEA,MAAM,YAAY,KAAsB,KAAqB,SAAuB;EAClF,MAAM,KAAK,aAAa,cAAc,KAAK,SAAS,MAAM,CAAC;EAC3D,MAAM,MAAM,MAAM,IAAI;EACtB,IAAI,CAAC,OAAO,MAAM,IAAI,KAAK,KAAK,GAAG;GACjC,YAAY,aAAa;GACzB,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,2CAA2C,CAAC;EAC7E;EACA,MAAM,SAASA,SAAe,UAAU,IAAI,CAAC,CAAC,UACzC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU,MAAM,KAAK,IAAI,IACrD;EACJ,IAAI,WAAW,QAAQ,OAAO,UAAU,UAAU;GAChD,OAAO,IAAI,IAAI,GAAG;GAClB,OAAO,KAAK,KAAK,KAAK,EAAE,OAAO,gBAAgB,CAAC;EAClD;EACA,MAAM,OACJ,OAAO,UAAU,UACb,OAAO,MAAM,QAAQ,MAAM,EAAE,UAAU,QAAQ,EAAE,eAAe,OAAO,CAAC,CAAC,SACzE,OAAO,OAAO,aAAa,iBACzB,OAAO,MAAM,QAAQ,MAAM,EAAE,UAAU,QAAQ,EAAE,eAAe,IAAI,CAAC,CAAC,SACtE;EACR,MAAM,OAAiB;GACrB,MAAM,OAAO,OAAO,QAAQ,OAAO;GACnC,OAAO,OAAO;GACd,WAAW;GACX,mBAAmB,OAAO,OAAO,gBAAgB;EACnD;EACA,KAAK,KAAK,KAAK,IAAI;CACrB;;CAGA,MAAM,eAAe,QAA8B;EACjD,MAAM,SAAsB;GAC1B,UAAA;GACA,WAAW,CAAC,GAAG,mBAAmB;GAClC,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC;EAC7B;EACA,KAAK,KAAK,KAAK,QAAQ,EAAE,iBAAiB,qBAAqB,CAAC;CAClE;CAEA,MAAM,OAAO,cAAc,KAAK,QAAQ;EAEtC,MAAM,OAAO,IADG,IAAI,IAAI,OAAO,KAAK,sBACvB,CAAA,CAAI;EACjB,MAAM,QAAQ,YAA2B;GACvC,IAAI,SAAS,YAAY,OAAO,KAAK,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;GAC3D,IAAI,SAAS,WACX,OAAO,YAAY,CAAC,MAAM,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;GAChG,IAAI,SAAS,gBAAgB,IAAI,WAAW,QAAQ,OAAO,WAAW,KAAK,GAAG;GAE9E,IAAI,SAAS,sBAAsB,IAAI,WAAW,OAAO,OAAO,YAAY,GAAG;GAC/E,MAAM,QAAQ,0BAA0B,KAAK,IAAI;GACjD,IAAI,UAAU,QAAQ,IAAI,WAAW,OAAO,OAAO,SAAS,KAAK,KAAK,MAAM,MAAM,EAAE;GACpF,KAAK,KAAK,KAAK,EAAE,OAAO,aAAa,CAAC;EACxC;EACA,MAAM,CAAC,CAAC,OAAO,UAAmB;GAChC,IAAI,MAAM,SAAS,cAAc;IAAE;IAAM,OAAO,OAAO,KAAK;GAAE,CAAC;GAC/D,IAAI,CAAC,IAAI,aAAa,KAAK,KAAK,KAAK,EAAE,OAAO,mDAAmD,CAAC;QAC7F,IAAI,IAAI;EACf,CAAC;CACH,CAAC;CAID,MAAM,iBAAiB,QAAgB,QAAgB,QAAQ,OAAa;EAC1E,OAAO,IAAI,YAAY,OAAO,gDAAgD,MAAM,KAAK;CAC3F;CAEA,KAAK,GAAG,YAAY,KAAK,QAAQ,SAAS;EAExC,IADa,IAAI,IAAI,IAAI,OAAO,KAAK,sBAAsB,CAAC,CAAC,aAChD,OAAO,OAAO,cAAc,QAAQ,eAAe;EAChE,IAAI,UAAU,OAAO,cAAc,QAAQ,2BAA2B,oBAAoB;EAC1F,IAAI,CAAC,cAAc,IAAI,QAAQ,MAAM,GAAG,OAAO,cAAc,QAAQ,eAAe;EACpF,IAAI,QAAQ,QAAQ,QAAQ,OAAO,gBACjC,OAAO,cAAc,QAAQ,2BAA2B,qBAAqB;EAC/E,MAAM,KAAK,aAAa,cAAc,KAAK,SAAS,MAAM,CAAC;EAC3D,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,kBAAkB;GACnD,YAAY,oBAAoB;GAChC,OAAO,cAAc,QAAQ,uBAAuB;EACtD;EACA,QAAQ,cAAc,KAAK,QAAQ,OAAO,OAAO,OAAO,IAAI,EAAE,CAAC;CACjE,CAAC;CAED,MAAM,UAAU,MAAiB,MAAkB,YAA0B;EAC3E,KAAK,KAAK,KAAK,UAAU;GAAE,GAAG,KAAK;GAAU,GAAG;GAAU;GAAM;EAAQ,CAAyB,CAAC;CACpG;;CAGA,MAAM,yBAAS,IAAI,QAA8B;CAEjD,MAAM,UAAU,IAAe,OAAqB;EAClD,MAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;EACtC,gBAAgB;EAChB,MAAM,OAAkB;GACtB,IAAI,QAAQ;GACZ,UAAA;GACA,cAAc;GACd,QAAQ;GACR;GACA,QAAQ,IAAI,YAAY,OAAO,mBAAmB,OAAO,cAAc,MAAM,IAAI,CAAC;GAClF,MAAM;GACN,SAAS,CAAC;GACV,OAAO;GACP,IAAI,iBAAiB;IACnB,OAAO,GAAG;GACZ;GACA,OAAO,SAAS;IACd,IAAI,GAAG,eAAe,UAAU,MAAM,GAAG,KAAK,IAAI;GACpD;GACA,QAAQ,MAAM,WAAW;IACvB,IAAI,GAAG,eAAe,UAAU,QAAQ,GAAG,eAAe,UAAU,YAClE,GAAG,MAAM,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC;GACvC;EACF;EACA,OAAO,IAAI,IAAI,IAAI;EACnB,GAAG,GACD,cACM;GACJ,KAAK,QAAQ;EACf,CACF;EACA,GAAG,GAAG,YAAY,MAAM,aAAa,UAAU,MAAM,MAAM,QAAQ,CAAC;EACpE,GAAG,GAAG,eAAe,GAAG,UAAU,CAAC;EACnC,GAAG,GAAG,eAAe;GACnB,MAAM,SAAS,MAAM,IAAI,EAAE,KAAK,KAAK;GACrC,IAAI,SAAS,GAAG,MAAM,OAAO,EAAE;QAC1B,MAAM,IAAI,IAAI,KAAK;GACxB,IAAI,KAAK,SAAS,MAAM;GACxB,MAAM,OAAO,KAAK,MAAM,IAAI,KAAK,IAAI;GACrC,IAAI,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM;GACvC,KAAK,MAAM,OAAO,KAAK,EAAE;GACzB,IAAI,KAAK,MAAM,SAAS,GAAG,KAAK,YAAY,MAAM,IAAI;GACtD,KAAK,SAAS,KAAK,MAAM;IAAE,MAAM;IAAS,MAAM,KAAK;GAAG,CAAC;EAC3D,CAAC;CACH;CAEA,MAAM,aAAa,MAAiB,MAAe,aAA4B;EAC7E,MAAM,MAAM,MAAM,IAAI;EACtB,IAAI,CAAC,KAAK,OAAO,KAAK,GAAG,GAAG;GAC1B,KAAK,UAAU,KAAK,QAAQ,QAAQ,OAAO,KAAK,MAAM,OAAO,kBAAkB;GAC/E,KAAK,QAAQ,KAAK,GAAG;GACrB,IAAI,KAAK,QAAQ,SAAS,OAAO,aAAa;IAC5C,YAAY,UAAU;IACtB,KAAK,MAAM,UAAU,QAAQ,UAAU;GACzC,OACE,OAAO,MAAM,YAAY,YAAY;GAEvC;EACF;EACA,IAAI,UAAU,OAAO,OAAO,MAAM,eAAe,yBAAyB;EAC1E,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,MAAM,OAAO,IAAI,CAAC;EAC/B,QAAQ;GACN,OAAO,OAAO,MAAM,eAAe,2BAA2B;EAChE;EACA,MAAM,UAAU,OAAO,QAAQ,YAAY,QAAQ,OAAQ,IAAwB,IAAI,KAAA;EACvF,IAAI,OAAO,YAAY,YAAY,CAAC,oBAAoB,OAAO,GAAG;GAChE,OAAO,MAAM,wBAAwB,4CAA4C;GACjF,KAAK,MAAM,UAAU,QAAQ,sBAAsB;GACnD;EACF;EACA,MAAM,SAAS,oBAAoB,UAAU,GAAG;EAChD,IAAI,CAAC,OAAO,SAAS,OAAO,OAAO,MAAM,eAAe,4BAA4B;EACpF,MAAM,UAAU,OAAO;EACvB,IAAI,QAAQ,MAAM,QAAQ,OAAO,KAAK,MAAM,SAAS,GAAG;EACxD,MAAM,OAAO,KAAK;EAClB,MAAM,OAAO,SAAS,OAAO,KAAA,IAAY,KAAK,MAAM,IAAI,IAAI;EAC5D,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW,OAAO,OAAO,MAAM,eAAe,oBAAoB;EAChG,QAAQ,QAAQ,GAAhB;GACE,KAAK,OAAO;IACV,MAAM,UAAU,SAAS,KAAK,KAAK,OAAO,QAAQ,SAAS,QAAQ,OAAO;IAC1E,IAAI,CAAC,QAAQ,IAAI;KACf,KAAK,KACH,KAAK,UAAU;MACb,GAAG,KAAK;MACR,GAAG;MACH,IAAI,QAAQ;MACZ,QAAQ;OACN,QAAQ;OACR,MAAM,cAAc;OACpB,SAAS;OACT,UAAU,KAAK,KAAK,OAAO;MAC7B;KACF,CAAyB,CAC3B;KACA;IACF;IACA,KAAK,SAAS,MAAM;KAClB,MAAM;KACN,MAAM,KAAK;KACX,IAAI,QAAQ;KACZ,kBAAkB,QAAQ;KAC1B,SAAS,QAAQ;IACnB,CAAC;IACD;GACF;GACA,KAAK,WAAW;IACd,IAAI,UAAU,QAAQ;IACtB,IAAI,QAAQ,SAAS,cAAc,QAAQ,WAAW,KAAA,GAAW;KAE/D,MAAM,SAAS,UADA,SAAS,QAAQ,KAAK,KAAK,OAAO,KAAK,EAAE,CAAC,EAAE,KAAK,UAAU,KAAK,KAAK,OAC5D,CAAO,QAAQ,QAAQ,QAAQ,MAAM;KAC7D,IAAI,CAAC,OAAO,IAAI;MACd,KAAK,KACH,KAAK,UAAU;OACb,GAAG,KAAK;OACR,GAAG;OACH,IAAI,QAAQ;OACZ,QAAQ;QACN,QAAQ;QACR,MAAM,cAAc;QACpB,SAAS;QACT,UAAU,KAAK,KAAK,OAAO;OAC7B;MACF,CAAyB,CAC3B;MACA;KACF;KACA,UAAU;MAAE,GAAG;MAAS,QAAQ,OAAO;KAAM;IAC/C;IACA,KAAK,SAAS,MAAM;KAClB,MAAM;KACN,MAAM,KAAK;KACX,IAAI,QAAQ;KACZ,kBAAkB,QAAQ;KAC1B;KACA,OAAO,QAAQ,MAAM;IACvB,CAAC;IACD;GACF;GACA,KAAK;IACH,KAAK,SAAS,MAAM;KAAE,MAAM;KAAU,MAAM,KAAK;IAAG,CAAC;IACrD;EACJ;CACF;CAEA,MAAM,QACJ,MACA,SACA,QACS;EACT,IAAI,KAAK,SAAS,MAAM,OAAO,OAAO,MAAM,eAAe,wCAAwC;EACnG,KAAK,WAAW,QAAQ;EACxB,IAAI,CAAC,OAAO,MAAM,KAAK,IAAI,KAAK,KAAK,GAAG;GACtC,YAAY,aAAa;GACzB,OAAO,MAAM,YAAY,0CAA0C;GACnE,KAAK,MAAM,UAAU,QAAQ,iBAAiB;GAC9C;EACF;EACA,IAAI,UAAU;GACZ,KAAK,KACH,KAAK,UAAU;IACb,GAAG,KAAK;IACR,GAAG;IACH,QAAQ;IACR,cAAc;GAChB,CAAyB,CAC3B;GACA,KAAK,MAAM,UAAU,YAAY,YAAY;GAC7C;EACF;EACA,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,KAAK,QAAQ,IAAI;EACjC,SAAS,OAAO;GACd,IAAI,MAAM,SAAS,oBAAoB;IAAE,MAAM,QAAQ;IAAM,OAAO,OAAO,KAAK;GAAE,CAAC;GACnF,SAAS,EAAE,SAAS,OAAO;EAC7B;EACA,IAAI,aAAa,QAAQ;GACvB,IAAI,OAAO,YAAY,QAAQ;IAC7B,OAAO,MAAM,eAAe,qCAAqC;IACjE,KAAK,MAAM,UAAU,eAAe,MAAM;GAC5C,OAAO,IAAI,OAAO,YAAY,kBAAkB;IAC9C,KAAK,KACH,KAAK,UAAU;KACb,GAAG,KAAK;KACR,GAAG;KACH,QAAQ;KACR,cAAc;IAChB,CAAyB,CAC3B;IACA,KAAK,MAAM,UAAU,YAAY,QAAQ;GAC3C,OAAO;IACL,OAAO,IAAI,KAAK,IAAI,GAAG;IACvB,OAAO,MAAM,gBAAgB,uBAAuB;IACpD,KAAK,MAAM,UAAU,YAAY,cAAc;GACjD;GACA;EACF;EACA,MAAM,OAAO,OAAO;EACpB,IAAI,KAAK,KAAK,OAAO,KAAK,OAAO,QAAQ,MAAM;GAC7C,OAAO,IAAI,KAAK,IAAI,GAAG;GACvB,OAAO,MAAM,gBAAgB,uBAAuB;GACpD,KAAK,MAAM,UAAU,YAAY,cAAc;GAC/C;EACF;EACA,KAAK,OAAO,QAAQ;EACpB,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;EAC5B,MAAM,QAAQ,aAAa;EAC3B,KAAK,eAAe;EACpB,KAAK,SAAS,QAAQ,MAAM;GAC1B,MAAM;GACN,MAAM,KAAK;GACX,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,oBAAoB,QAAQ,UAAU,KAAA,IAAY,OAAO,UAAU,QAAQ,KAAK;GAChF,gBAAgB,UAAU,KAAK;GAC/B,OAAO,QAAQ,SAAS;EAC1B,CAAC;EACD,KAAK,eAAe;CACtB;CAIA,IAAI,YAAmD;CACvD,IAAI,cAAqD;CAEzD,MAAM,oBAA0B;EAC9B,YAAY,kBAAkB;GAC5B,KAAK,MAAM,MAAM,QAAQ,SAAS;IAChC,MAAM,OAAO,OAAO,IAAI,EAAE;IAC1B,IAAI,SAAS,KAAA,GAAW;IACxB,IAAI,CAAC,KAAK,OAAO;KACf,GAAG,UAAU;KACb;IACF;IACA,KAAK,QAAQ;IACb,GAAG,KAAK;GACV;EACF,GAAG,OAAO,WAAW;EACrB,cAAc,kBAAkB;GAC9B,MAAM,MAAM,MAAM,IAAI;GACtB,UAAU,MAAM,GAAG;GACnB,OAAO,MAAM,GAAG;GAChB,KAAK,MAAM,OAAO,YAAY;GAC9B,IAAI;IACF,MAAM,SAAS,MAAM,MAAM,GAAG;IAC9B,IAAI,SAAS,GAAG,IAAI,MAAM,QAAQ,gBAAgB,EAAE,OAAO,OAAO,CAAC;GACrE,SAAS,OAAO;IACd,IAAI,MAAM,SAAS,gBAAgB,EAAE,OAAO,OAAO,KAAK,EAAE,CAAC;GAC7D;EACF,GAAG,OAAO,aAAa;EACvB,UAAU,MAAM;EAChB,YAAY,MAAM;CACpB;CAEA,MAAM,SAAS,OAAO,MAAc,WAAW,cAA+B;EAC5E,MAAM,IAAI,SAAe,SAAS,WAAW;GAC3C,KAAK,KAAK,SAAS,MAAM;GACzB,KAAK,OAAO,MAAM,gBAAgB;IAChC,KAAK,IAAI,SAAS,MAAM;IACxB,QAAQ;GACV,CAAC;EACH,CAAC;EACD,YAAY;EAEZ,KAAK,MAAM,QAAQ,MAAM,gBAAgB,GACvC,IAAI;GACF,KAAK,KAAK,IAAI;EAChB,SAAS,OAAO;GACd,IAAI,MAAM,SAAS,oBAAoB;IAAE,MAAM;IAAM,OAAO,OAAO,KAAK;GAAE,CAAC;EAC7E;EAEF,MAAM,UAAU,KAAK,QAAQ;EAC7B,MAAM,QAAQ,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO;EAC/E,IAAI,MAAM,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC;EAC9C,OAAO;CACT;CAEA,MAAM,QAAQ,YAA2B;EACvC,IAAI,UAAU;EACd,WAAW;EACX,IAAI,MAAM,QAAQ,iBAAiB;GAAE,OAAO,KAAK,MAAM;GAAM,aAAa,QAAQ,QAAQ;EAAK,CAAC;EAChG,MAAM,KAAK,KAAK,OAAO,WAAW;EAClC,MAAM,UAAU,KAAK,UAAU;GAC7B,GAAA;GACA,GAAG;GACH,QAAQ;GACR,cAAc;EAChB,CAAyB;EACzB,MAAM,OAAO,CAAC,GAAG,QAAQ,OAAO;EAChC,KAAK,MAAM,MAAM,MAAM;GACrB,IAAI,GAAG,eAAe,UAAU,MAAM,GAAG,KAAK,OAAO;GACrD,GAAG,MAAM,UAAU,YAAY,YAAY;EAC7C;EACA,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,MAAM,KAAK,CAAC,GAAG,KAAK,OAAO,MAAM,OAAO;EACpE,IAAI,cAAc,MAAM,cAAc,SAAS;EAC/C,IAAI,gBAAgB,MAAM,cAAc,WAAW;EAEnD,MAAM,SAAS,QAAQ,IACrB,KAAK,KAAK,OACR,GAAG,eAAe,UAAU,SACxB,QAAQ,QAAQ,IAChB,IAAI,SAAe,YAAY,GAAG,KAAK,eAAe,QAAQ,CAAC,CAAC,CACtE,CACF;EACA,MAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,SAAe,YAAY,WAAW,SAAS,GAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;EAC/F,KAAK,MAAM,MAAM,QAAQ,SAAS,GAAG,UAAU;EAC/C,MAAM,IAAI,SAAe,YAAY,QAAQ,YAAY,QAAQ,CAAC,CAAC;EACnE,MAAM,IAAI,SAAe,YAAY;GACnC,KAAK,YAAY,QAAQ,CAAC;GAC1B,KAAK,oBAAoB;EAC3B,CAAC;EACD,MAAM,KAAK,MAAM;EACjB,MAAM,MAAM;EACZ,IAAI,MAAM,QAAQ,kBAAkB,CAAC,CAAC;CACxC;CAEA,OAAO;EAAE;EAAM;EAAM;EAAQ;CAAM;AACrC"}

package/dist/node/store.d.ts

@@ -0,0 +1,53 @@
+import type { LoggedInput, RoomCode, RoomRecord } from '../types.js';
+import type { Logger } from './support.js';
+export interface RoomStore {
+    /** The decoded record, or null when missing or quarantined. Throws on a newer record format. */
+    load(code: RoomCode): RoomRecord | null;
+    exists(code: RoomCode): boolean;
+    /** One transaction: update the room where writes = expected, and append the inputs. */
+    save(record: RoomRecord, inputs: readonly LoggedInput[], expectedWrites: number): 'saved' | 'conflict';
+    insert(record: RoomRecord): void;
+    /** Moves a row that can't be used to `room_archive` and deletes it. */
+    quarantine(code: RoomCode, reason: string): void;
+    liveVersions(): readonly {
+        readonly gameId: string;
+        readonly rulesVersion: number;
+        readonly rooms: number;
+    }[];
+    /** Rooms with a job outstanding: they resume at start-up, so the job re-runs at once. */
+    withPendingJobs(): readonly RoomCode[];
+    /** A match's input log, for replays and bug reports. */
+    inputs(code: RoomCode, match: number): readonly LoggedInput[];
+    /** Deletes rows past expires_at (their inputs cascade). Returns how many. */
+    prune(now: number): number;
+    /** True when the database accepts a write (for /readyz). */
+    ping(): boolean;
+    /** An online copy, checked with `PRAGMA integrity_check`. Refuses to overwrite a file. */
+    backup(file: string): Promise<void>;
+    /** After a restore from backup: bump every room's epoch so clients accept older revisions. */
+    bumpEpochs(): number;
+    close(): void;
+}
+type Migration = {
+    readonly version: number;
+    readonly name: string;
+    readonly sql: string;
+};
+/**
+ * Database migrations, applied in order inside one transaction and tracked with
+ * `PRAGMA user_version`. Append; never edit a shipped entry.
+ */
+export declare const MIGRATIONS: readonly Migration[];
+export declare const SCHEMA_VERSION: number;
+/** When a room's row may be deleted: retainMs after its last change, at most 7 days after creation. */
+export declare const expiresAt: (record: RoomRecord) => number;
+export type SqliteStoreOptions = {
+    readonly log?: Logger;
+    readonly now?: () => number;
+};
+/**
+ * Opens (and migrates) the database. A database newer than this build is refused, so a
+ * rollback can't corrupt newer data; before migrating an existing database, a backup is taken.
+ */
+export declare const openSqliteStore: (file: string, options?: SqliteStoreOptions) => Promise<RoomStore>;
+export {};

package/dist/node/store.js

@@ -0,0 +1,245 @@
+import { MAX_ROOM_AGE_MS } from "../policy.js";
+import { decodeRecord } from "../record.js";
+import { existsSync } from "node:fs";
+import { DatabaseSync, backup } from "node:sqlite";
+//#region src/node/store.ts
+/**
+* Database migrations, applied in order inside one transaction and tracked with
+* `PRAGMA user_version`. Append; never edit a shipped entry.
+*/
+var MIGRATIONS = [{
+	version: 1,
+	name: "init",
+	sql: `
+      CREATE TABLE rooms (
+        code           TEXT    PRIMARY KEY,
+        game_id        TEXT    NOT NULL,
+        rules_version  INTEGER NOT NULL,
+        game_build     TEXT    NOT NULL,
+        phase          TEXT    NOT NULL CHECK (phase IN ('lobby', 'playing', 'finished', 'closed')),
+        revision       INTEGER NOT NULL,
+        writes         INTEGER NOT NULL,
+        record_format  INTEGER NOT NULL,
+        record         TEXT    NOT NULL,
+        created_at     INTEGER NOT NULL,
+        updated_at     INTEGER NOT NULL,
+        expires_at     INTEGER NOT NULL
+      ) STRICT;
+      CREATE INDEX rooms_expires ON rooms (expires_at);
+      CREATE INDEX rooms_live_versions ON rooms (game_id, rules_version) WHERE phase IN ('lobby', 'playing');
+      CREATE TABLE room_inputs (
+        code      TEXT    NOT NULL REFERENCES rooms (code) ON DELETE CASCADE,
+        match     INTEGER NOT NULL,
+        revision  INTEGER NOT NULL,
+        at        INTEGER NOT NULL,
+        input     TEXT    NOT NULL,
+        PRIMARY KEY (code, revision)
+      ) STRICT, WITHOUT ROWID;
+      CREATE TABLE room_archive (
+        code TEXT NOT NULL, record_format INTEGER NOT NULL, record TEXT NOT NULL, reason TEXT NOT NULL, archived_at INTEGER NOT NULL,
+        PRIMARY KEY (code, record_format, archived_at)
+      ) STRICT;
+    `
+}];
+var SCHEMA_VERSION = MIGRATIONS.at(-1)?.version ?? 0;
+/** When a room's row may be deleted: retainMs after its last change, at most 7 days after creation. */
+var expiresAt = (record) => Math.min(record.updatedAt + record.policy.retainMs, record.createdAt + MAX_ROOM_AGE_MS);
+var pinOf = (record) => record.match?.game ?? record.game;
+/**
+* Opens (and migrates) the database. A database newer than this build is refused, so a
+* rollback can't corrupt newer data; before migrating an existing database, a backup is taken.
+*/
+var openSqliteStore = async (file, options = {}) => {
+	const now = options.now ?? Date.now;
+	const db = new DatabaseSync(file);
+	const version = Number(db.prepare("PRAGMA user_version").get()?.["user_version"] ?? 0);
+	if (version > SCHEMA_VERSION) {
+		db.close();
+		throw new Error(`The room database is at schema version ${version}, newer than this build's ${SCHEMA_VERSION}. Deploy a newer build.`);
+	}
+	db.exec("PRAGMA journal_mode = WAL; PRAGMA synchronous = FULL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000;");
+	if (version < SCHEMA_VERSION) {
+		if (version > 0 && file !== ":memory:") {
+			const copy = `${file}.pre-v${SCHEMA_VERSION}-${now()}.bak`;
+			await backup(db, copy);
+			options.log?.write("info", "backup_written", {
+				reason: "migration",
+				schema: version
+			});
+		}
+		db.exec("BEGIN IMMEDIATE");
+		try {
+			for (const migration of MIGRATIONS) {
+				if (migration.version <= version) continue;
+				db.exec(migration.sql);
+				db.exec(`PRAGMA user_version = ${migration.version}`);
+				options.log?.write("info", "migration_applied", {
+					version: migration.version,
+					name: migration.name
+				});
+			}
+			db.exec("COMMIT");
+		} catch (error) {
+			db.exec("ROLLBACK");
+			db.close();
+			throw error;
+		}
+	}
+	return new SqliteRoomStore(db, options.log ?? null, now);
+};
+var SqliteRoomStore = class {
+	statements;
+	db;
+	log;
+	now;
+	constructor(db, log, now) {
+		this.db = db;
+		this.log = log;
+		this.now = now;
+		this.statements = {
+			load: db.prepare("SELECT record FROM rooms WHERE code = ?"),
+			exists: db.prepare("SELECT 1 AS found FROM rooms WHERE code = ?"),
+			insert: db.prepare(`INSERT INTO rooms (code, game_id, rules_version, game_build, phase, revision, writes, record_format, record, created_at, updated_at, expires_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`),
+			update: db.prepare(`UPDATE rooms SET game_id = ?, rules_version = ?, game_build = ?, phase = ?, revision = ?, writes = ?, record_format = ?, record = ?,
+           updated_at = ?, expires_at = ? WHERE code = ? AND writes = ?`),
+			rewrite: db.prepare("UPDATE rooms SET record_format = ?, record = ? WHERE code = ?"),
+			input: db.prepare("INSERT INTO room_inputs (code, match, revision, at, input) VALUES (?, ?, ?, ?, ?)"),
+			archive: db.prepare("INSERT OR REPLACE INTO room_archive (code, record_format, record, reason, archived_at) VALUES (?, ?, ?, ?, ?)"),
+			remove: db.prepare("DELETE FROM rooms WHERE code = ?"),
+			versions: db.prepare("SELECT game_id AS gameId, rules_version AS rulesVersion, COUNT(*) AS rooms FROM rooms WHERE phase IN ('lobby', 'playing') GROUP BY game_id, rules_version"),
+			pendingJobs: db.prepare("SELECT code FROM rooms WHERE phase = 'playing' AND json_array_length(record, '$.match.jobs') > 0"),
+			inputs: db.prepare("SELECT match, revision, at, input FROM room_inputs WHERE code = ? AND match = ? ORDER BY revision"),
+			prune: db.prepare("DELETE FROM rooms WHERE expires_at < ?"),
+			epochs: db.prepare("UPDATE rooms SET record = json_set(record, '$.epoch', json_extract(record, '$.epoch') + 1)")
+		};
+	}
+	transaction(work) {
+		this.db.exec("BEGIN IMMEDIATE");
+		try {
+			const result = work();
+			this.db.exec("COMMIT");
+			return result;
+		} catch (error) {
+			this.db.exec("ROLLBACK");
+			throw error;
+		}
+	}
+	load(code) {
+		const row = this.statements.load.get(code);
+		if (row === void 0) return null;
+		const text = String(row["record"]);
+		let raw;
+		try {
+			raw = JSON.parse(text);
+		} catch {
+			this.quarantine(code, "json");
+			return null;
+		}
+		const decoded = decodeRecord(raw);
+		if (!decoded.ok) {
+			if (decoded.error.code === "newer-format") throw new Error(decoded.error.message);
+			this.quarantine(code, "schema");
+			return null;
+		}
+		const { record, migrated } = decoded.value;
+		if (migrated) {
+			const format = raw.format;
+			this.transaction(() => {
+				this.statements.archive.run(code, format, text, "migration", this.now());
+				this.statements.rewrite.run(1, JSON.stringify(record), code);
+			});
+		}
+		return record;
+	}
+	exists(code) {
+		return this.statements.exists.get(code) !== void 0;
+	}
+	insert(record) {
+		const pin = pinOf(record);
+		this.statements.insert.run(record.code, pin.id, pin.rulesVersion, pin.build, record.phase, record.revision, record.writes, record.format, JSON.stringify(record), record.createdAt, record.updatedAt, expiresAt(record));
+	}
+	save(record, inputs, expectedWrites) {
+		const pin = pinOf(record);
+		return this.transaction(() => {
+			const result = this.statements.update.run(pin.id, pin.rulesVersion, pin.build, record.phase, record.revision, record.writes, record.format, JSON.stringify(record), record.updatedAt, expiresAt(record), record.code, expectedWrites);
+			if (Number(result.changes) !== 1) return "conflict";
+			for (const input of inputs) this.statements.input.run(record.code, input.match, input.revision, input.at, JSON.stringify(input.input));
+			return "saved";
+		});
+	}
+	quarantine(code, reason) {
+		const row = this.statements.load.get(code);
+		if (row === void 0) return;
+		const text = String(row["record"]);
+		let format = 0;
+		try {
+			format = Number(JSON.parse(text).format) || 0;
+		} catch {
+			format = 0;
+		}
+		this.transaction(() => {
+			this.statements.archive.run(code, format, text, reason, this.now());
+			this.statements.remove.run(code);
+		});
+		this.log?.write("error", "room_corrupt", {
+			room: code,
+			reason
+		});
+	}
+	liveVersions() {
+		return this.statements.versions.all().map((row) => ({
+			gameId: String(row["gameId"]),
+			rulesVersion: Number(row["rulesVersion"]),
+			rooms: Number(row["rooms"])
+		}));
+	}
+	withPendingJobs() {
+		return this.statements.pendingJobs.all().map((row) => String(row["code"]));
+	}
+	inputs(code, match) {
+		return this.statements.inputs.all(code, match).map((row) => ({
+			match: Number(row["match"]),
+			revision: Number(row["revision"]),
+			at: Number(row["at"]),
+			input: JSON.parse(String(row["input"]))
+		}));
+	}
+	prune(now) {
+		return Number(this.statements.prune.run(now).changes);
+	}
+	ping() {
+		try {
+			this.db.exec("BEGIN IMMEDIATE; ROLLBACK;");
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	async backup(file) {
+		if (existsSync(file)) throw new Error(`Refusing to overwrite ${file}.`);
+		await backup(this.db, file);
+		const copy = new DatabaseSync(file, { readOnly: true });
+		try {
+			const result = copy.prepare("PRAGMA integrity_check").get()?.["integrity_check"];
+			if (result !== "ok") throw new Error(`The backup failed its integrity check: ${String(result)}`);
+		} finally {
+			copy.close();
+		}
+		this.log?.write("info", "backup_written", {});
+	}
+	bumpEpochs() {
+		return Number(this.statements.epochs.run().changes);
+	}
+	close() {
+		try {
+			this.db.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+		} finally {
+			this.db.close();
+		}
+	}
+};
+//#endregion
+export { MIGRATIONS, SCHEMA_VERSION, expiresAt, openSqliteStore };
+
+//# sourceMappingURL=store.js.map

package/dist/node/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","names":[],"sources":["../../src/node/store.ts"],"sourcesContent":["// The SQLite room store (room-server.md sections 6.4 to 6.6), on node:sqlite's synchronous\n// DatabaseSync: a step and its write finish before the event loop delivers the next message.\nimport { existsSync } from 'node:fs';\nimport { backup, DatabaseSync } from 'node:sqlite';\nimport type { EngineInput, Json } from '@joystyk/contracts';\nimport { MAX_ROOM_AGE_MS } from '../policy.ts';\nimport { decodeRecord, RECORD_FORMAT } from '../record.ts';\nimport type { LoggedInput, RoomCode, RoomRecord } from '../types.ts';\nimport type { Logger } from './support.ts';\n\nexport interface RoomStore {\n  /** The decoded record, or null when missing or quarantined. Throws on a newer record format. */\n  load(code: RoomCode): RoomRecord | null;\n  exists(code: RoomCode): boolean;\n  /** One transaction: update the room where writes = expected, and append the inputs. */\n  save(record: RoomRecord, inputs: readonly LoggedInput[], expectedWrites: number): 'saved' | 'conflict';\n  insert(record: RoomRecord): void;\n  /** Moves a row that can't be used to `room_archive` and deletes it. */\n  quarantine(code: RoomCode, reason: string): void;\n  liveVersions(): readonly { readonly gameId: string; readonly rulesVersion: number; readonly rooms: number }[];\n  /** Rooms with a job outstanding: they resume at start-up, so the job re-runs at once. */\n  withPendingJobs(): readonly RoomCode[];\n  /** A match's input log, for replays and bug reports. */\n  inputs(code: RoomCode, match: number): readonly LoggedInput[];\n  /** Deletes rows past expires_at (their inputs cascade). Returns how many. */\n  prune(now: number): number;\n  /** True when the database accepts a write (for /readyz). */\n  ping(): boolean;\n  /** An online copy, checked with `PRAGMA integrity_check`. Refuses to overwrite a file. */\n  backup(file: string): Promise<void>;\n  /** After a restore from backup: bump every room's epoch so clients accept older revisions. */\n  bumpEpochs(): number;\n  close(): void;\n}\n\ntype Migration = { readonly version: number; readonly name: string; readonly sql: string };\n\n/**\n * Database migrations, applied in order inside one transaction and tracked with\n * `PRAGMA user_version`. Append; never edit a shipped entry.\n */\nexport const MIGRATIONS: readonly Migration[] = [\n  {\n    version: 1,\n    name: 'init',\n    sql: `\n      CREATE TABLE rooms (\n        code           TEXT    PRIMARY KEY,\n        game_id        TEXT    NOT NULL,\n        rules_version  INTEGER NOT NULL,\n        game_build     TEXT    NOT NULL,\n        phase          TEXT    NOT NULL CHECK (phase IN ('lobby', 'playing', 'finished', 'closed')),\n        revision       INTEGER NOT NULL,\n        writes         INTEGER NOT NULL,\n        record_format  INTEGER NOT NULL,\n        record         TEXT    NOT NULL,\n        created_at     INTEGER NOT NULL,\n        updated_at     INTEGER NOT NULL,\n        expires_at     INTEGER NOT NULL\n      ) STRICT;\n      CREATE INDEX rooms_expires ON rooms (expires_at);\n      CREATE INDEX rooms_live_versions ON rooms (game_id, rules_version) WHERE phase IN ('lobby', 'playing');\n      CREATE TABLE room_inputs (\n        code      TEXT    NOT NULL REFERENCES rooms (code) ON DELETE CASCADE,\n        match     INTEGER NOT NULL,\n        revision  INTEGER NOT NULL,\n        at        INTEGER NOT NULL,\n        input     TEXT    NOT NULL,\n        PRIMARY KEY (code, revision)\n      ) STRICT, WITHOUT ROWID;\n      CREATE TABLE room_archive (\n        code TEXT NOT NULL, record_format INTEGER NOT NULL, record TEXT NOT NULL, reason TEXT NOT NULL, archived_at INTEGER NOT NULL,\n        PRIMARY KEY (code, record_format, archived_at)\n      ) STRICT;\n    `,\n  },\n];\n\nexport const SCHEMA_VERSION = MIGRATIONS.at(-1)?.version ?? 0;\n\n/** When a room's row may be deleted: retainMs after its last change, at most 7 days after creation. */\nexport const expiresAt = (record: RoomRecord): number =>\n  Math.min(record.updatedAt + record.policy.retainMs, record.createdAt + MAX_ROOM_AGE_MS);\n\nconst pinOf = (record: RoomRecord) => record.match?.game ?? record.game;\n\nexport type SqliteStoreOptions = {\n  readonly log?: Logger;\n  readonly now?: () => number;\n};\n\n/**\n * Opens (and migrates) the database. A database newer than this build is refused, so a\n * rollback can't corrupt newer data; before migrating an existing database, a backup is taken.\n */\nexport const openSqliteStore = async (file: string, options: SqliteStoreOptions = {}): Promise<RoomStore> => {\n  const now = options.now ?? Date.now;\n  const db = new DatabaseSync(file);\n  const version = Number(db.prepare('PRAGMA user_version').get()?.['user_version'] ?? 0);\n  if (version > SCHEMA_VERSION) {\n    db.close();\n    throw new Error(\n      `The room database is at schema version ${version}, newer than this build's ${SCHEMA_VERSION}. Deploy a newer build.`,\n    );\n  }\n  db.exec(\n    'PRAGMA journal_mode = WAL; PRAGMA synchronous = FULL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000;',\n  );\n  if (version < SCHEMA_VERSION) {\n    if (version > 0 && file !== ':memory:') {\n      const copy = `${file}.pre-v${SCHEMA_VERSION}-${now()}.bak`;\n      await backup(db, copy);\n      options.log?.write('info', 'backup_written', { reason: 'migration', schema: version });\n    }\n    db.exec('BEGIN IMMEDIATE');\n    try {\n      for (const migration of MIGRATIONS) {\n        if (migration.version <= version) continue;\n        db.exec(migration.sql);\n        db.exec(`PRAGMA user_version = ${migration.version}`);\n        options.log?.write('info', 'migration_applied', { version: migration.version, name: migration.name });\n      }\n      db.exec('COMMIT');\n    } catch (error) {\n      db.exec('ROLLBACK');\n      db.close();\n      throw error;\n    }\n  }\n  return new SqliteRoomStore(db, options.log ?? null, now);\n};\n\nclass SqliteRoomStore implements RoomStore {\n  private readonly statements;\n  private readonly db: DatabaseSync;\n  private readonly log: Logger | null;\n  private readonly now: () => number;\n\n  constructor(db: DatabaseSync, log: Logger | null, now: () => number) {\n    this.db = db;\n    this.log = log;\n    this.now = now;\n    this.statements = {\n      load: db.prepare('SELECT record FROM rooms WHERE code = ?'),\n      exists: db.prepare('SELECT 1 AS found FROM rooms WHERE code = ?'),\n      insert: db.prepare(\n        `INSERT INTO rooms (code, game_id, rules_version, game_build, phase, revision, writes, record_format, record, created_at, updated_at, expires_at)\n         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n      ),\n      update: db.prepare(\n        `UPDATE rooms SET game_id = ?, rules_version = ?, game_build = ?, phase = ?, revision = ?, writes = ?, record_format = ?, record = ?,\n           updated_at = ?, expires_at = ? WHERE code = ? AND writes = ?`,\n      ),\n      rewrite: db.prepare('UPDATE rooms SET record_format = ?, record = ? WHERE code = ?'),\n      input: db.prepare('INSERT INTO room_inputs (code, match, revision, at, input) VALUES (?, ?, ?, ?, ?)'),\n      archive: db.prepare(\n        'INSERT OR REPLACE INTO room_archive (code, record_format, record, reason, archived_at) VALUES (?, ?, ?, ?, ?)',\n      ),\n      remove: db.prepare('DELETE FROM rooms WHERE code = ?'),\n      versions: db.prepare(\n        \"SELECT game_id AS gameId, rules_version AS rulesVersion, COUNT(*) AS rooms FROM rooms WHERE phase IN ('lobby', 'playing') GROUP BY game_id, rules_version\",\n      ),\n      pendingJobs: db.prepare(\n        \"SELECT code FROM rooms WHERE phase = 'playing' AND json_array_length(record, '$.match.jobs') > 0\",\n      ),\n      inputs: db.prepare(\n        'SELECT match, revision, at, input FROM room_inputs WHERE code = ? AND match = ? ORDER BY revision',\n      ),\n      prune: db.prepare('DELETE FROM rooms WHERE expires_at < ?'),\n      epochs: db.prepare(\"UPDATE rooms SET record = json_set(record, '$.epoch', json_extract(record, '$.epoch') + 1)\"),\n    };\n  }\n\n  private transaction<T>(work: () => T): T {\n    this.db.exec('BEGIN IMMEDIATE');\n    try {\n      const result = work();\n      this.db.exec('COMMIT');\n      return result;\n    } catch (error) {\n      this.db.exec('ROLLBACK');\n      throw error;\n    }\n  }\n\n  load(code: RoomCode): RoomRecord | null {\n    const row = this.statements.load.get(code);\n    if (row === undefined) return null;\n    const text = String(row['record']);\n    let raw: unknown;\n    try {\n      raw = JSON.parse(text);\n    } catch {\n      this.quarantine(code, 'json');\n      return null;\n    }\n    const decoded = decodeRecord(raw);\n    if (!decoded.ok) {\n      if (decoded.error.code === 'newer-format') throw new Error(decoded.error.message);\n      this.quarantine(code, 'schema');\n      return null;\n    }\n    const { record, migrated } = decoded.value;\n    if (migrated) {\n      const format = (raw as { format: number }).format;\n      this.transaction(() => {\n        this.statements.archive.run(code, format, text, 'migration', this.now());\n        this.statements.rewrite.run(RECORD_FORMAT, JSON.stringify(record), code);\n      });\n    }\n    return record;\n  }\n\n  exists(code: RoomCode): boolean {\n    return this.statements.exists.get(code) !== undefined;\n  }\n\n  insert(record: RoomRecord): void {\n    const pin = pinOf(record);\n    this.statements.insert.run(\n      record.code,\n      pin.id,\n      pin.rulesVersion,\n      pin.build,\n      record.phase,\n      record.revision,\n      record.writes,\n      record.format,\n      JSON.stringify(record),\n      record.createdAt,\n      record.updatedAt,\n      expiresAt(record),\n    );\n  }\n\n  save(record: RoomRecord, inputs: readonly LoggedInput[], expectedWrites: number): 'saved' | 'conflict' {\n    const pin = pinOf(record);\n    return this.transaction(() => {\n      const result = this.statements.update.run(\n        pin.id,\n        pin.rulesVersion,\n        pin.build,\n        record.phase,\n        record.revision,\n        record.writes,\n        record.format,\n        JSON.stringify(record),\n        record.updatedAt,\n        expiresAt(record),\n        record.code,\n        expectedWrites,\n      );\n      if (Number(result.changes) !== 1) return 'conflict';\n      for (const input of inputs)\n        this.statements.input.run(record.code, input.match, input.revision, input.at, JSON.stringify(input.input));\n      return 'saved';\n    });\n  }\n\n  quarantine(code: RoomCode, reason: string): void {\n    const row = this.statements.load.get(code);\n    if (row === undefined) return;\n    const text = String(row['record']);\n    let format = 0;\n    try {\n      format = Number((JSON.parse(text) as { format?: unknown }).format) || 0;\n    } catch {\n      format = 0;\n    }\n    this.transaction(() => {\n      this.statements.archive.run(code, format, text, reason, this.now());\n      this.statements.remove.run(code);\n    });\n    this.log?.write('error', 'room_corrupt', { room: code, reason });\n  }\n\n  liveVersions() {\n    return this.statements.versions.all().map((row) => ({\n      gameId: String(row['gameId']),\n      rulesVersion: Number(row['rulesVersion']),\n      rooms: Number(row['rooms']),\n    }));\n  }\n\n  withPendingJobs(): readonly RoomCode[] {\n    return this.statements.pendingJobs.all().map((row) => String(row['code']));\n  }\n\n  inputs(code: RoomCode, match: number): readonly LoggedInput[] {\n    return this.statements.inputs.all(code, match).map((row) => ({\n      match: Number(row['match']),\n      revision: Number(row['revision']),\n      at: Number(row['at']),\n      input: JSON.parse(String(row['input'])) as EngineInput<Json>,\n    }));\n  }\n\n  prune(now: number): number {\n    return Number(this.statements.prune.run(now).changes);\n  }\n\n  ping(): boolean {\n    try {\n      this.db.exec('BEGIN IMMEDIATE; ROLLBACK;');\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async backup(file: string): Promise<void> {\n    if (existsSync(file)) throw new Error(`Refusing to overwrite ${file}.`);\n    await backup(this.db, file);\n    const copy = new DatabaseSync(file, { readOnly: true });\n    try {\n      const result = copy.prepare('PRAGMA integrity_check').get()?.['integrity_check'];\n      if (result !== 'ok') throw new Error(`The backup failed its integrity check: ${String(result)}`);\n    } finally {\n      copy.close();\n    }\n    this.log?.write('info', 'backup_written', {});\n  }\n\n  bumpEpochs(): number {\n    return Number(this.statements.epochs.run().changes);\n  }\n\n  close(): void {\n    try {\n      this.db.exec('PRAGMA wal_checkpoint(TRUNCATE)');\n    } finally {\n      this.db.close();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAyCA,IAAa,aAAmC,CAC9C;CACE,SAAS;CACT,MAAM;CACN,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BP,CACF;AAEA,IAAa,iBAAiB,WAAW,GAAG,EAAE,CAAC,EAAE,WAAW;;AAG5D,IAAa,aAAa,WACxB,KAAK,IAAI,OAAO,YAAY,OAAO,OAAO,UAAU,OAAO,YAAY,eAAe;AAExF,IAAM,SAAS,WAAuB,OAAO,OAAO,QAAQ,OAAO;;;;;AAWnE,IAAa,kBAAkB,OAAO,MAAc,UAA8B,CAAC,MAA0B;CAC3G,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,KAAK,IAAI,aAAa,IAAI;CAChC,MAAM,UAAU,OAAO,GAAG,QAAQ,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC;CACrF,IAAI,UAAU,gBAAgB;EAC5B,GAAG,MAAM;EACT,MAAM,IAAI,MACR,0CAA0C,QAAQ,4BAA4B,eAAe,wBAC/F;CACF;CACA,GAAG,KACD,6GACF;CACA,IAAI,UAAU,gBAAgB;EAC5B,IAAI,UAAU,KAAK,SAAS,YAAY;GACtC,MAAM,OAAO,GAAG,KAAK,QAAQ,eAAe,GAAG,IAAI,EAAE;GACrD,MAAM,OAAO,IAAI,IAAI;GACrB,QAAQ,KAAK,MAAM,QAAQ,kBAAkB;IAAE,QAAQ;IAAa,QAAQ;GAAQ,CAAC;EACvF;EACA,GAAG,KAAK,iBAAiB;EACzB,IAAI;GACF,KAAK,MAAM,aAAa,YAAY;IAClC,IAAI,UAAU,WAAW,SAAS;IAClC,GAAG,KAAK,UAAU,GAAG;IACrB,GAAG,KAAK,yBAAyB,UAAU,SAAS;IACpD,QAAQ,KAAK,MAAM,QAAQ,qBAAqB;KAAE,SAAS,UAAU;KAAS,MAAM,UAAU;IAAK,CAAC;GACtG;GACA,GAAG,KAAK,QAAQ;EAClB,SAAS,OAAO;GACd,GAAG,KAAK,UAAU;GAClB,GAAG,MAAM;GACT,MAAM;EACR;CACF;CACA,OAAO,IAAI,gBAAgB,IAAI,QAAQ,OAAO,MAAM,GAAG;AACzD;AAEA,IAAM,kBAAN,MAA2C;CACzC;CACA;CACA;CACA;CAEA,YAAY,IAAkB,KAAoB,KAAmB;EACnE,KAAK,KAAK;EACV,KAAK,MAAM;EACX,KAAK,MAAM;EACX,KAAK,aAAa;GAChB,MAAM,GAAG,QAAQ,yCAAyC;GAC1D,QAAQ,GAAG,QAAQ,6CAA6C;GAChE,QAAQ,GAAG,QACT;qDAEF;GACA,QAAQ,GAAG,QACT;wEAEF;GACA,SAAS,GAAG,QAAQ,+DAA+D;GACnF,OAAO,GAAG,QAAQ,mFAAmF;GACrG,SAAS,GAAG,QACV,+GACF;GACA,QAAQ,GAAG,QAAQ,kCAAkC;GACrD,UAAU,GAAG,QACX,2JACF;GACA,aAAa,GAAG,QACd,kGACF;GACA,QAAQ,GAAG,QACT,mGACF;GACA,OAAO,GAAG,QAAQ,wCAAwC;GAC1D,QAAQ,GAAG,QAAQ,4FAA4F;EACjH;CACF;CAEA,YAAuB,MAAkB;EACvC,KAAK,GAAG,KAAK,iBAAiB;EAC9B,IAAI;GACF,MAAM,SAAS,KAAK;GACpB,KAAK,GAAG,KAAK,QAAQ;GACrB,OAAO;EACT,SAAS,OAAO;GACd,KAAK,GAAG,KAAK,UAAU;GACvB,MAAM;EACR;CACF;CAEA,KAAK,MAAmC;EACtC,MAAM,MAAM,KAAK,WAAW,KAAK,IAAI,IAAI;EACzC,IAAI,QAAQ,KAAA,GAAW,OAAO;EAC9B,MAAM,OAAO,OAAO,IAAI,SAAS;EACjC,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,MAAM,IAAI;EACvB,QAAQ;GACN,KAAK,WAAW,MAAM,MAAM;GAC5B,OAAO;EACT;EACA,MAAM,UAAU,aAAa,GAAG;EAChC,IAAI,CAAC,QAAQ,IAAI;GACf,IAAI,QAAQ,MAAM,SAAS,gBAAgB,MAAM,IAAI,MAAM,QAAQ,MAAM,OAAO;GAChF,KAAK,WAAW,MAAM,QAAQ;GAC9B,OAAO;EACT;EACA,MAAM,EAAE,QAAQ,aAAa,QAAQ;EACrC,IAAI,UAAU;GACZ,MAAM,SAAU,IAA2B;GAC3C,KAAK,kBAAkB;IACrB,KAAK,WAAW,QAAQ,IAAI,MAAM,QAAQ,MAAM,aAAa,KAAK,IAAI,CAAC;IACvE,KAAK,WAAW,QAAQ,IAAA,GAAmB,KAAK,UAAU,MAAM,GAAG,IAAI;GACzE,CAAC;EACH;EACA,OAAO;CACT;CAEA,OAAO,MAAyB;EAC9B,OAAO,KAAK,WAAW,OAAO,IAAI,IAAI,MAAM,KAAA;CAC9C;CAEA,OAAO,QAA0B;EAC/B,MAAM,MAAM,MAAM,MAAM;EACxB,KAAK,WAAW,OAAO,IACrB,OAAO,MACP,IAAI,IACJ,IAAI,cACJ,IAAI,OACJ,OAAO,OACP,OAAO,UACP,OAAO,QACP,OAAO,QACP,KAAK,UAAU,MAAM,GACrB,OAAO,WACP,OAAO,WACP,UAAU,MAAM,CAClB;CACF;CAEA,KAAK,QAAoB,QAAgC,gBAA8C;EACrG,MAAM,MAAM,MAAM,MAAM;EACxB,OAAO,KAAK,kBAAkB;GAC5B,MAAM,SAAS,KAAK,WAAW,OAAO,IACpC,IAAI,IACJ,IAAI,cACJ,IAAI,OACJ,OAAO,OACP,OAAO,UACP,OAAO,QACP,OAAO,QACP,KAAK,UAAU,MAAM,GACrB,OAAO,WACP,UAAU,MAAM,GAChB,OAAO,MACP,cACF;GACA,IAAI,OAAO,OAAO,OAAO,MAAM,GAAG,OAAO;GACzC,KAAK,MAAM,SAAS,QAClB,KAAK,WAAW,MAAM,IAAI,OAAO,MAAM,MAAM,OAAO,MAAM,UAAU,MAAM,IAAI,KAAK,UAAU,MAAM,KAAK,CAAC;GAC3G,OAAO;EACT,CAAC;CACH;CAEA,WAAW,MAAgB,QAAsB;EAC/C,MAAM,MAAM,KAAK,WAAW,KAAK,IAAI,IAAI;EACzC,IAAI,QAAQ,KAAA,GAAW;EACvB,MAAM,OAAO,OAAO,IAAI,SAAS;EACjC,IAAI,SAAS;EACb,IAAI;GACF,SAAS,OAAQ,KAAK,MAAM,IAAI,CAAC,CAA0B,MAAM,KAAK;EACxE,QAAQ;GACN,SAAS;EACX;EACA,KAAK,kBAAkB;GACrB,KAAK,WAAW,QAAQ,IAAI,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,CAAC;GAClE,KAAK,WAAW,OAAO,IAAI,IAAI;EACjC,CAAC;EACD,KAAK,KAAK,MAAM,SAAS,gBAAgB;GAAE,MAAM;GAAM;EAAO,CAAC;CACjE;CAEA,eAAe;EACb,OAAO,KAAK,WAAW,SAAS,IAAI,CAAC,CAAC,KAAK,SAAS;GAClD,QAAQ,OAAO,IAAI,SAAS;GAC5B,cAAc,OAAO,IAAI,eAAe;GACxC,OAAO,OAAO,IAAI,QAAQ;EAC5B,EAAE;CACJ;CAEA,kBAAuC;EACrC,OAAO,KAAK,WAAW,YAAY,IAAI,CAAC,CAAC,KAAK,QAAQ,OAAO,IAAI,OAAO,CAAC;CAC3E;CAEA,OAAO,MAAgB,OAAuC;EAC5D,OAAO,KAAK,WAAW,OAAO,IAAI,MAAM,KAAK,CAAC,CAAC,KAAK,SAAS;GAC3D,OAAO,OAAO,IAAI,QAAQ;GAC1B,UAAU,OAAO,IAAI,WAAW;GAChC,IAAI,OAAO,IAAI,KAAK;GACpB,OAAO,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC;EACxC,EAAE;CACJ;CAEA,MAAM,KAAqB;EACzB,OAAO,OAAO,KAAK,WAAW,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO;CACtD;CAEA,OAAgB;EACd,IAAI;GACF,KAAK,GAAG,KAAK,4BAA4B;GACzC,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;CAEA,MAAM,OAAO,MAA6B;EACxC,IAAI,WAAW,IAAI,GAAG,MAAM,IAAI,MAAM,yBAAyB,KAAK,EAAE;EACtE,MAAM,OAAO,KAAK,IAAI,IAAI;EAC1B,MAAM,OAAO,IAAI,aAAa,MAAM,EAAE,UAAU,KAAK,CAAC;EACtD,IAAI;GACF,MAAM,SAAS,KAAK,QAAQ,wBAAwB,CAAC,CAAC,IAAI,CAAC,GAAG;GAC9D,IAAI,WAAW,MAAM,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,GAAG;EACjG,UAAU;GACR,KAAK,MAAM;EACb;EACA,KAAK,KAAK,MAAM,QAAQ,kBAAkB,CAAC,CAAC;CAC9C;CAEA,aAAqB;EACnB,OAAO,OAAO,KAAK,WAAW,OAAO,IAAI,CAAC,CAAC,OAAO;CACpD;CAEA,QAAc;EACZ,IAAI;GACF,KAAK,GAAG,KAAK,iCAAiC;EAChD,UAAU;GACR,KAAK,GAAG,MAAM;EAChB;CACF;AACF"}

package/dist/node/support.d.ts

@@ -0,0 +1,67 @@
+import { BlockList } from 'node:net';
+import type { IncomingMessage } from 'node:http';
+import type { Json } from '@joystyk/contracts';
+export type LogLevel = 'info' | 'warn' | 'error';
+/**
+ * One JSON object per line (section 9). Callers never pass tokens, token hashes, display
+ * names, IP addresses or game state: every visitor may be a child (D-26).
+ */
+export interface Logger {
+    write(level: LogLevel, event: string, fields?: {
+        readonly [k: string]: Json;
+    }): void;
+}
+export declare const createLogger: (sink?: (line: string) => void, now?: () => number) => Logger;
+/** A logger that keeps lines in memory, for tests. */
+export declare const memoryLogger: () => Logger & {
+    readonly lines: {
+        level: LogLevel;
+        event: string;
+        fields: {
+            readonly [k: string]: Json;
+        };
+    }[];
+};
+export interface Clock {
+    now(): number;
+    /** Calls `fire` at `at` (epoch ms). Firing early, late or twice is harmless to the core. */
+    setTimer(at: number, fire: () => void): {
+        cancel(): void;
+    };
+}
+export declare const systemClock: Clock;
+/** A seat token: 24 random bytes, base64url (32 characters). Never logged or stored. */
+export declare const newSeatToken: () => string;
+/** The SHA-256 hex digest the room stores in place of a token. */
+export declare const hashToken: (token: string) => string;
+/** A fresh invite code from the room alphabet. */
+export declare const newRoomCode: () => string;
+/** `count` uniformly random 32-bit words from the CSPRNG, for seeding a match's rng. */
+export declare const randomWords: (count: number) => number[];
+/** Parses `TRUSTED_PROXY`: one address or a CIDR range. Throws on anything else. */
+export declare const parseTrustedProxy: (value: string) => BlockList;
+/**
+ * The visitor's address. Only a trusted proxy (Traefik) may report it, through the configured
+ * header or else the last `X-Forwarded-For` entry; anyone else is taken at their socket's word.
+ */
+export declare const clientAddress: (request: IncomingMessage, trusted: BlockList | null, header: string | null) => string;
+/** Counts events per key in a sliding window, in memory only (section 8). */
+export declare class WindowCounter {
+    private readonly hits;
+    private readonly windowMs;
+    private readonly max;
+    constructor(windowMs: number, max: number);
+    /** True if `key` is still under the limit; records the hit when `record` is set. */
+    allow(key: string, now: number, record?: boolean): boolean;
+    hit(key: string, now: number): void;
+    prune(now: number): void;
+}
+/** A token bucket: `rate` per second, holding at most `burst`. */
+export declare class TokenBucket {
+    private tokens;
+    private last;
+    private readonly rate;
+    private readonly burst;
+    constructor(rate: number, burst: number, now: number);
+    take(now: number): boolean;
+}

package/dist/node/support.js

@@ -0,0 +1,126 @@
+import { ROOM_ALPHABET } from "../protocol/schemas.js";
+import { createHash, randomBytes, randomInt } from "node:crypto";
+import { BlockList, isIP } from "node:net";
+//#region src/node/support.ts
+var createLogger = (sink = (line) => process.stdout.write(`${line}\n`), now = Date.now) => ({ write: (level, event, fields = {}) => sink(JSON.stringify({
+	ts: new Date(now()).toISOString(),
+	level,
+	event,
+	...fields
+})) });
+/** A logger that keeps lines in memory, for tests. */
+var memoryLogger = () => {
+	const lines = [];
+	return {
+		lines,
+		write: (level, event, fields = {}) => void lines.push({
+			level,
+			event,
+			fields
+		})
+	};
+};
+/** Node's timers cap a delay at about 24.8 days; longer waits re-arm. */
+var MAX_DELAY = 2 ** 31 - 1;
+var systemClock = {
+	now: () => Date.now(),
+	setTimer: (at, fire) => {
+		let handle;
+		const arm = () => {
+			const delay = Math.max(0, at - Date.now());
+			handle = setTimeout(delay > MAX_DELAY ? arm : fire, Math.min(delay, MAX_DELAY));
+			handle.unref?.();
+		};
+		arm();
+		return { cancel: () => clearTimeout(handle) };
+	}
+};
+/** A seat token: 24 random bytes, base64url (32 characters). Never logged or stored. */
+var newSeatToken = () => randomBytes(24).toString("base64url");
+/** The SHA-256 hex digest the room stores in place of a token. */
+var hashToken = (token) => createHash("sha256").update(token).digest("hex");
+/** A fresh invite code from the room alphabet. */
+var newRoomCode = () => Array.from({ length: 6 }, () => ROOM_ALPHABET[randomInt(ROOM_ALPHABET.length)]).join("");
+/** `count` uniformly random 32-bit words from the CSPRNG, for seeding a match's rng. */
+var randomWords = (count) => {
+	const bytes = randomBytes(count * 4);
+	return Array.from({ length: count }, (_, i) => bytes.readUInt32LE(i * 4));
+};
+var normalize = (address) => address.replace(/^::ffff:(?=\d+\.\d+\.\d+\.\d+$)/, "");
+/** Parses `TRUSTED_PROXY`: one address or a CIDR range. Throws on anything else. */
+var parseTrustedProxy = (value) => {
+	const list = new BlockList();
+	const [address = "", prefix] = value.split("/");
+	const family = isIP(address);
+	if (family === 0) throw new Error("TRUSTED_PROXY must be an IP address or a CIDR range such as 172.18.0.0/16.");
+	const type = family === 4 ? "ipv4" : "ipv6";
+	if (prefix === void 0) list.addAddress(address, type);
+	else {
+		const bits = Number(prefix);
+		if (!Number.isInteger(bits) || bits < 0 || bits > (family === 4 ? 32 : 128)) throw new Error("TRUSTED_PROXY has an invalid prefix length.");
+		list.addSubnet(address, bits, type);
+	}
+	return list;
+};
+/**
+* The visitor's address. Only a trusted proxy (Traefik) may report it, through the configured
+* header or else the last `X-Forwarded-For` entry; anyone else is taken at their socket's word.
+*/
+var clientAddress = (request, trusted, header) => {
+	const peer = normalize(request.socket.remoteAddress ?? "unknown");
+	const family = isIP(peer);
+	if (trusted === null || family === 0 || !trusted.check(peer, family === 4 ? "ipv4" : "ipv6")) return peer;
+	const raw = header === null ? String(request.headers["x-forwarded-for"] ?? "").split(",").at(-1) : request.headers[header.toLowerCase()];
+	const reported = normalize(String(Array.isArray(raw) ? raw.at(-1) : raw ?? "").trim());
+	return isIP(reported) === 0 ? peer : reported;
+};
+/** Counts events per key in a sliding window, in memory only (section 8). */
+var WindowCounter = class {
+	hits = /* @__PURE__ */ new Map();
+	windowMs;
+	max;
+	constructor(windowMs, max) {
+		this.windowMs = windowMs;
+		this.max = max;
+	}
+	/** True if `key` is still under the limit; records the hit when `record` is set. */
+	allow(key, now, record = true) {
+		const recent = (this.hits.get(key) ?? []).filter((t) => now - t < this.windowMs);
+		const ok = recent.length < this.max;
+		if (ok && record) recent.push(now);
+		this.hits.set(key, recent);
+		return ok;
+	}
+	hit(key, now) {
+		const recent = (this.hits.get(key) ?? []).filter((t) => now - t < this.windowMs);
+		recent.push(now);
+		this.hits.set(key, recent);
+	}
+	prune(now) {
+		for (const [key, times] of this.hits) if (!times.some((t) => now - t < this.windowMs)) this.hits.delete(key);
+	}
+};
+/** A token bucket: `rate` per second, holding at most `burst`. */
+var TokenBucket = class {
+	tokens;
+	last;
+	rate;
+	burst;
+	constructor(rate, burst, now) {
+		this.rate = rate;
+		this.burst = burst;
+		this.tokens = burst;
+		this.last = now;
+	}
+	take(now) {
+		this.tokens = Math.min(this.burst, this.tokens + (now - this.last) * this.rate / 1e3);
+		this.last = now;
+		if (this.tokens < 1) return false;
+		this.tokens -= 1;
+		return true;
+	}
+};
+//#endregion
+export { TokenBucket, WindowCounter, clientAddress, createLogger, hashToken, memoryLogger, newRoomCode, newSeatToken, parseTrustedProxy, randomWords, systemClock };
+
+//# sourceMappingURL=support.js.map